last executing test programs:

4m39.504358448s ago: executing program 1 (id=322):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xdddd1000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94)

4m39.444019078s ago: executing program 1 (id=325):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10)
r3 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}})

4m39.316489582s ago: executing program 1 (id=331):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fffffff}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffff", 0x42}], 0x1)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = syz_pidfd_open(0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe000000"], 0x1)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000914010000007c0000000000080001"], 0x18}}, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x400c)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0xb40, 0x0)

4m37.855617608s ago: executing program 1 (id=346):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x8)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180))

4m35.759401619s ago: executing program 1 (id=388):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x108c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4444, &(0x7f00000088c0)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

4m35.592641598s ago: executing program 1 (id=390):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x14, 0x29, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

4m22.374877671s ago: executing program 2 (id=503):
setresgid(0x0, 0xee00, 0xee01)
r0 = getegid()
setresgid(r0, 0x0, r0)

4m22.374646875s ago: executing program 2 (id=504):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
mlockall(0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7})
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)

4m21.506102599s ago: executing program 2 (id=511):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
write$dsp(r1, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
epoll_create1(0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x32)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r2, &(0x7f0000000140)=ANY=[], 0xff2e)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0)
close(r0)

4m20.604303698s ago: executing program 2 (id=520):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00)

4m20.408329817s ago: executing program 32 (id=390):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x14, 0x29, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)

4m20.335356474s ago: executing program 2 (id=522):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x24, 0x0)

4m19.496519518s ago: executing program 2 (id=529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
shutdown(r0, 0x1)

4m19.330419608s ago: executing program 33 (id=529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2c020400)
shutdown(r0, 0x1)

4m12.833379653s ago: executing program 3 (id=558):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0)

4m12.784963742s ago: executing program 3 (id=560):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x62813b1835a69869}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

4m12.656147285s ago: executing program 3 (id=562):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

4m12.585824198s ago: executing program 3 (id=564):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x18, &(0x7f0000000dc0)={[{}, {@gid}, {@uid}, {@uid}, {}, {@force}, {@nls={'nls', 0x3d, 'cp866'}}, {@type={'type', 0x3d, "65f9f607"}}, {@force}]}, 0x41, 0x6e8, &(0x7f00000001c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

4m12.466149311s ago: executing program 3 (id=566):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file1\x00', 0x1c880, &(0x7f0000000000)=ANY=[], 0xf9, 0x60be, &(0x7f0000000440)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00')

4m12.274278198s ago: executing program 3 (id=570):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x6d9, 0xf8a1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x4, 0x2, 0x1, 0x4, 0x5], 0x0, 0x3}, {0x3, [0xe, 0x4, 0x1, 0x4, 0x6, 0x2], 0x0, 0x5}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xff000000, 0xffffffff, 'ip6_vti0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x16}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x9e39, 0xc, [0x1a, 0x3a, 0x7, 0x37, 0x3a, 0x18, 0x2b, 0x37, 0x14, 0x2b, 0xa, 0x5, 0x31, 0x19, 0x3, 0x4], 0x1, 0x3, 0x4}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7, 0xf, [0x23, 0x27, 0x6, 0x18, 0x34, 0x9, 0x2a, 0x1f, 0x8, 0x14, 0x14, 0x1f, 0xf, 0x39, 0x13, 0x37], 0x0, 0x8, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0)

4m12.070024582s ago: executing program 34 (id=570):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x6d9, 0xf8a1]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x4, 0x2, 0x1, 0x4, 0x5], 0x0, 0x3}, {0x3, [0xe, 0x4, 0x1, 0x4, 0x6, 0x2], 0x0, 0x5}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xff000000, 0xffffffff, 'ip6_vti0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x16}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x9e39, 0xc, [0x1a, 0x3a, 0x7, 0x37, 0x3a, 0x18, 0x2b, 0x37, 0x14, 0x2b, 0xa, 0x5, 0x31, 0x19, 0x3, 0x4], 0x1, 0x3, 0x4}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x7, 0xf, [0x23, 0x27, 0x6, 0x18, 0x34, 0x9, 0x2a, 0x1f, 0x8, 0x14, 0x14, 0x1f, 0xf, 0x39, 0x13, 0x37], 0x0, 0x8, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b2000905850140000000000905f3"], 0x0)

3m39.088277802s ago: executing program 0 (id=875):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), 0x4)

3m39.03722162s ago: executing program 0 (id=877):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x7)

3m38.977738403s ago: executing program 0 (id=878):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000340)=[r2, r2], &(0x7f0000000140), 0x0, 0x0, 0x0, 0x400000000})

3m38.906586594s ago: executing program 0 (id=880):
mkdir(&(0x7f0000005740)='./file0\x00', 0x3b)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])

3m38.838507702s ago: executing program 0 (id=882):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6b820}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000006)

3m38.618621078s ago: executing program 0 (id=885):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

3m38.442438548s ago: executing program 35 (id=885):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

3m9.085344874s ago: executing program 4 (id=1228):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000006000000000a0000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d000000000000007f0000000000000000000000000000000000000000000000dd02000000000000000000000000000000010002"], 0x23c}}, 0x0)

3m9.003901022s ago: executing program 4 (id=1230):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000701fcffff2c00000000017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)

3m8.93833105s ago: executing program 4 (id=1232):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='m', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2465)
write$snddsp(r2, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0x1ff)

3m8.755125832s ago: executing program 4 (id=1237):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdir(&(0x7f0000000580)='./file0\x00', 0x92)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152)

3m8.606560763s ago: executing program 4 (id=1241):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x2c}}, 0x0)

3m8.322893105s ago: executing program 4 (id=1246):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes128, 0x10, @desc1})

3m8.017974409s ago: executing program 36 (id=1246):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes128, 0x10, @desc1})

2m17.374039164s ago: executing program 7 (id=1862):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x2000004}, {0x1, 0xffffffff}, 0x2, 0x800006})

2m17.371626959s ago: executing program 7 (id=1864):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0xa}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002280)=""/102400, 0x19000)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x40010, 0xffffffffffffffff, 0x8000000)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x400004, 0x3b5f91, 0x203ba8})
mount(0x0, &(0x7f0000000280)='./file2\x00', &(0x7f00000002c0)='aio\x00', 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)

2m16.133357233s ago: executing program 7 (id=1872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a05002c0012800e0001006970366772657461700000001803008014000600fc0000000000070000000000000000010a00010008"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

2m16.132902983s ago: executing program 7 (id=1873):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7)
syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@bsdgroups}, {@prjquota}, {@gquota}, {@pquota}, {@bsdgroups}, {@inode32}, {@quota}]}, 0xff, 0x9838, &(0x7f0000009780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000040)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)

2m15.695514627s ago: executing program 7 (id=1877):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)

2m15.232800189s ago: executing program 7 (id=1883):
r0 = socket$netlink(0x10, 0x3, 0xb)
unshare(0x22020600)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffb})
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setns(r2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m15.070551334s ago: executing program 37 (id=1883):
r0 = socket$netlink(0x10, 0x3, 0xb)
unshare(0x22020600)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffb})
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00')
setns(r2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m6.377700907s ago: executing program 6 (id=1986):
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000040)={[{@jqfmt_vfsv1}, {@noauto_da_alloc}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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")

2m6.287193189s ago: executing program 6 (id=1989):
syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x32, 0x0, @private2={0xfc, 0x2, '\x00', 0xfc}, @remote, [@fragment={0x2b, 0x0, 0x0, 0x0, 0x0, 0xe, 0x68}]}}}}}}}, 0x0)

2m6.202738104s ago: executing program 6 (id=1992):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8)

2m6.141014281s ago: executing program 6 (id=1993):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x1010051, &(0x7f0000000240)={[{@debug}, {@inlinecrypt}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@resuid}]}, 0x1, 0x550, &(0x7f00000002c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file2/../file0\x00', 0x0, 0x10}, 0x18)

2m6.001608921s ago: executing program 6 (id=1998):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1408400, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44042, 0x1ff)
sendfile(r0, r1, 0x0, 0xfffe82)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
shutdown(0xffffffffffffffff, 0x0)
syz_emit_vhci(&(0x7f0000002c00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x6}}}}, 0xf)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

2m4.274177638s ago: executing program 6 (id=2021):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x2100, 0x1a4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m4.074713427s ago: executing program 38 (id=2021):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x2100, 0x1a4)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth1_to_hsr\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x7}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.734287529s ago: executing program 8 (id=3383):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x20, 0x10, 0x401, 0x0, 0xfffffffc}, 0x20}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

4.662745113s ago: executing program 8 (id=3385):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e20, @private=0xfffffffc}})

4.603788753s ago: executing program 8 (id=3388):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000300)={0x8, 0x356, 0x3, 0x1}, 0x10)

4.534890701s ago: executing program 8 (id=3389):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

4.474341404s ago: executing program 8 (id=3390):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
io_setup(0x7d, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001d00)=[0x0])
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x2800000000, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
statx(0xffffffffffffff9c, 0x0, 0x4000, 0x100, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r3, 0x0, 0x0, 0x200000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r3, 0x0, &(0x7f00004fa000/0x4000)=nil, 0x4000})
r4 = syz_open_dev$vcsu(&(0x7f0000000040), 0xf, 0x0)
mmap$snddsp_status(&(0x7f0000ad4000/0x3000)=nil, 0x1000, 0x8, 0x40010, r4, 0x82000000)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x8840)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f0000000140))

3.892140225s ago: executing program 8 (id=3393):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8)
sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000)
getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f00000005c0))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f00000000c0))

3.69655232s ago: executing program 39 (id=3393):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8)
sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}], 0x1, 0x4004000)
getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f00000005c0))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0x0, &(0x7f00000000c0))

2.002367465s ago: executing program 5 (id=3420):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1}, 0x10)
close(r2)

1.87473897s ago: executing program 5 (id=3421):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xe, '7'}], 0x18}, 0x0)

1.802374567s ago: executing program 5 (id=3422):
r0 = socket(0x1e, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x24, &(0x7f00000000c0)=""/141, &(0x7f0000000180)=0x8d)

1.744556781s ago: executing program 5 (id=3423):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb612120800a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0})

1.671133372s ago: executing program 5 (id=3424):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80)

1.102529659s ago: executing program 9 (id=3426):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, 0x0)

1.102199665s ago: executing program 9 (id=3427):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x98)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xfff})

944.433856ms ago: executing program 9 (id=3428):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340), &(0x7f0000000600))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1)

808.21217ms ago: executing program 9 (id=3429):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100253d7000fbdbdf2504000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842)

111.476469ms ago: executing program 9 (id=3430):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0xca, 0x0, 0x0)

111.282684ms ago: executing program 5 (id=3431):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xd3, 0x1a, 0xd2, 0x40, 0x3f0, 0x581d, 0xbb42, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x2, 0xff, 0x1, 0x7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x2, 0x86, 0x3}}]}}]}}]}}, 0x0)

0s ago: executing program 9 (id=3432):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x20108c2, &(0x7f0000000e40)=ANY=[], 0xfe, 0x6231, &(0x7f0000003140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

kernel console output (not intermixed with test programs):

ftover after parsing attributes in process `syz.9.2070'.
[  257.527203][T11187] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  257.531055][T11187] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.597089][T11191] netlink: 380 bytes leftover after parsing attributes in process `syz.5.2088'.
[  257.626766][T11178] loop9: detected capacity change from 0 to 32768
[  257.993570][T11190] loop8: detected capacity change from 0 to 40427
[  258.002525][T11190] F2FS-fs (loop8): Small segment_count (9 < 1 * 24)
[  258.006118][ T5848] Bluetooth: hci2: command tx timeout
[  258.008976][T11190] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  258.078002][T11190] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  258.086194][T11190] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  258.089509][T11190] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  258.110931][   T33] audit: type=1800 audit(257.994:337): pid=11190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2090" name="bus" dev="loop8" ino=10 res=0 errno=0
[  258.145851][T10661] syz-executor: attempt to access beyond end of device
[  258.145851][T10661] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  258.155408][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  258.155430][T10661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  258.155440][T10661] Call Trace:
[  258.155446][T10661]  <TASK>
[  258.155453][T10661]  dump_stack_lvl+0x189/0x250
[  258.155476][T10661]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.155492][T10661]  ? __pfx_queue_work_on+0x10/0x10
[  258.155506][T10661]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  258.155525][T10661]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  258.155556][T10661]  f2fs_handle_critical_error+0x37c/0x540
[  258.155585][T10661]  f2fs_write_end_io+0x886/0xb60
[  258.155616][T10661]  __submit_merged_bio+0x27a/0x6a0
[  258.155642][T10661]  __submit_merged_write_cond+0x255/0x530
[  258.155668][T10661]  f2fs_write_data_pages+0x261d/0x3000
[  258.155711][T10661]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.155772][T10661]  ? folios_put_refs+0x559/0x640
[  258.155829][T10661]  ? __lock_acquire+0xab9/0xd20
[  258.155854][T10661]  ? do_raw_spin_lock+0x121/0x290
[  258.155881][T10661]  ? do_raw_spin_unlock+0x4d/0x240
[  258.155897][T10661]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  258.155912][T10661]  do_writepages+0x32e/0x550
[  258.155939][T10661]  ? do_raw_spin_unlock+0x4d/0x240
[  258.155958][T10661]  filemap_fdatawrite+0x199/0x240
[  258.155976][T10661]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  258.156044][T10661]  ? do_raw_spin_unlock+0x4d/0x240
[  258.156062][T10661]  f2fs_sync_dirty_inodes+0x31f/0x830
[  258.156088][T10661]  f2fs_write_checkpoint+0x95a/0x1df0
[  258.156124][T10661]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  258.156171][T10661]  ? call_rcu+0x6ff/0x9c0
[  258.156184][T10661]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.156198][T10661]  ? kill_f2fs_super+0x298/0x6c0
[  258.156215][T10661]  kill_f2fs_super+0x2c3/0x6c0
[  258.156233][T10661]  ? __pfx_kill_f2fs_super+0x10/0x10
[  258.156243][T10661]  ? radix_tree_delete_item+0x2b6/0x400
[  258.156263][T10661]  ? shrinker_free+0x2ce/0x3e0
[  258.156282][T10661]  deactivate_locked_super+0xbc/0x130
[  258.156302][T10661]  cleanup_mnt+0x425/0x4c0
[  258.156319][T10661]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.156333][T10661]  task_work_run+0x1d4/0x260
[  258.156355][T10661]  ? __pfx_task_work_run+0x10/0x10
[  258.156370][T10661]  ? __x64_sys_umount+0x122/0x160
[  258.156393][T10661]  ? exit_to_user_mode_loop+0x40/0x110
[  258.156416][T10661]  exit_to_user_mode_loop+0xec/0x110
[  258.156436][T10661]  do_syscall_64+0x2bd/0x3b0
[  258.156451][T10661]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.156463][T10661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.156477][T10661]  ? exc_page_fault+0x9f/0xf0
[  258.156491][T10661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.156502][T10661] RIP: 0033:0x7fa2acb8ff57
[  258.156515][T10661] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  258.156546][T10661] RSP: 002b:00007ffc60e19068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  258.156562][T10661] RAX: 0000000000000000 RBX: 00007fa2acc11c2d RCX: 00007fa2acb8ff57
[  258.156572][T10661] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc60e19120
[  258.156579][T10661] RBP: 00007ffc60e19120 R08: 0000000000000000 R09: 0000000000000000
[  258.156588][T10661] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc60e1a1b0
[  258.156595][T10661] R13: 00007fa2acc11c2d R14: 000000000003efdc R15: 00007ffc60e1a1f0
[  258.156621][T10661]  </TASK>
[  258.157860][T10661] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  258.436296][ T5869] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  258.618989][ T5869] usb 10-1: config 1 interface 0 altsetting 105 bulk endpoint 0x82 has invalid maxpacket 1023
[  258.630917][ T5869] usb 10-1: config 1 interface 0 altsetting 105 bulk endpoint 0x3 has invalid maxpacket 64
[  258.646735][ T5869] usb 10-1: config 1 interface 0 has no altsetting 0
[  258.669612][ T5869] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  258.672855][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.679204][ T5869] usb 10-1: Product: syz
[  258.680596][ T5869] usb 10-1: Manufacturer: syz
[  258.682150][ T5869] usb 10-1: SerialNumber: syz
[  258.692561][T11197] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  258.699556][T11197] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  258.850470][T11221] loop8: detected capacity change from 0 to 64
[  258.929337][ T5869] usb 10-1: bad CDC descriptors
[  258.944562][ T5869] usb 10-1: USB disconnect, device number 2
[  259.180989][T11240] Invalid ELF header magic: != ELF
[  260.087618][ T5848] Bluetooth: hci2: command tx timeout
[  260.892274][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2123'.
[  261.076972][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2126'.
[  261.312545][T11286] loop9: detected capacity change from 0 to 764
[  262.896292][T11307] loop9: detected capacity change from 0 to 1024
[  263.001226][   T83] hfsplus: b-tree write err: -5, ino 4
[  263.337476][T11313] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2142'.
[  264.773819][  T793] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  265.296212][  T793] usb 10-1: unable to get BOS descriptor or descriptor too short
[  265.300056][  T793] usb 10-1: not running at top speed; connect to a high speed hub
[  265.307675][  T793] usb 10-1: config 4 has an invalid interface number: 156 but max is 0
[  265.310827][  T793] usb 10-1: config 4 has no interface number 0
[  265.313152][  T793] usb 10-1: config 4 interface 156 has no altsetting 0
[  265.319036][  T793] usb 10-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  265.323440][  T793] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.328795][  T793] usb 10-1: Product: syz
[  265.330356][  T793] usb 10-1: Manufacturer: syz
[  265.332530][  T793] usb 10-1: SerialNumber: syz
[  265.393523][T11369] loop8: detected capacity change from 0 to 32768
[  265.401509][T11369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2166 (11369)
[  265.421212][T11369] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  265.430201][T11369] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  265.499002][T11369] BTRFS info (device loop8): enabling ssd optimizations
[  265.502064][T11369] BTRFS info (device loop8): enabling free space tree
[  265.580434][  T793] usb 10-1: USB disconnect, device number 3
[  265.672497][T10661] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  267.162878][T11452] loop9: detected capacity change from 0 to 64
[  267.751559][T11471] loop8: detected capacity change from 0 to 1024
[  267.792050][T11471] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.859254][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.929547][T11485] loop9: detected capacity change from 0 to 512
[  268.013900][T11485] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  268.018494][T11485] EXT4-fs (loop9): orphan cleanup on readonly fs
[  268.040500][T11485] EXT4-fs warning (device loop9): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  268.059211][T11485] EXT4-fs (loop9): Cannot turn on quotas: error -22
[  268.062190][T11485] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #13: comm syz.9.2209: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  268.069358][T11485] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2209: couldn't read orphan inode 13 (err -117)
[  268.074961][T11485] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  268.092837][T11485] tmpfs: Bad value for 'size'
[  268.119021][T11020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.213991][T11495] libceph: resolve '4..' (ret=-3): failed
[  269.066526][T11517] loop8: detected capacity change from 0 to 512
[  269.076800][T11517] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4)!
[  269.081340][T11517] EXT4-fs (loop8): group descriptors corrupted!
[  269.590756][T11524] loop8: detected capacity change from 0 to 512
[  269.604356][T11524] EXT4-fs: Ignoring removed oldalloc option
[  269.635466][T11524] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.2223: dx entry: limit 1024 != root limit 124
[  269.641001][T11524] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2223: Corrupt directory, running e2fsck is recommended
[  269.655390][T11524] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  269.658944][T11524] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.2223: corrupted in-inode xattr: invalid ea_ino
[  269.679092][T11524] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2223: couldn't read orphan inode 15 (err -117)
[  269.705853][T11524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.820403][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.716574][T11558] loop8: detected capacity change from 0 to 1024
[  270.730145][T11558] EXT4-fs: Ignoring removed orlov option
[  270.739301][T11558] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  270.767069][T11558] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.813042][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.878348][T11564] ip6erspan0: entered promiscuous mode
[  271.551209][   T33] audit: type=1400 audit(271.434:338): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=11601 comm="syz.9.2258"
[  271.904992][T11598] loop8: detected capacity change from 0 to 32768
[  271.917898][T11598] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2255 (11598)
[  271.938212][T11598] BTRFS info (device loop8): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  271.965235][T11598] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[  272.075728][T11598] BTRFS info (device loop8): enabling ssd optimizations
[  272.082561][T11598] BTRFS info (device loop8): enabling free space tree
[  272.092512][T11598] BTRFS info (device loop8): use lzo compression, level 1
[  272.217084][T10661] BTRFS info (device loop8): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  272.829082][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2264'.
[  272.980715][T11640] loop9: detected capacity change from 0 to 128
[  272.994988][T11640] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  273.004270][T11640] hpfs: filesystem error: improperly stopped
[  273.024180][T11640] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  273.030046][T11640] hpfs: You really don't want any checks? You are crazy...
[  273.035337][T11640] hpfs: hpfs_map_sector(): read error
[  273.037519][T11640] hpfs: code page support is disabled
[  273.039818][T11640] hpfs: hpfs_map_4sectors(): unaligned read
[  273.065207][T11640] hpfs: hpfs_map_4sectors(): unaligned read
[  273.067608][T11640] hpfs: filesystem error: unable to find root dir
[  273.188555][    T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  273.343913][    T9] usb 9-1: Using ep0 maxpacket: 8
[  273.350597][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  273.358373][    T9] usb 9-1: config 5 has an invalid interface number: 41 but max is 0
[  273.361681][    T9] usb 9-1: config 5 has no interface number 0
[  273.374696][    T9] usb 9-1: config 5 interface 41 altsetting 2 bulk endpoint 0x83 has invalid maxpacket 1023
[  273.379380][    T9] usb 9-1: config 5 interface 41 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 64
[  273.397538][    T9] usb 9-1: config 5 interface 41 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  273.402944][    T9] usb 9-1: config 5 interface 41 has no altsetting 0
[  273.418074][    T9] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= a.30
[  273.421090][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.424328][    T9] usb 9-1: Product: syz
[  273.426024][    T9] usb 9-1: Manufacturer: syz
[  273.427731][    T9] usb 9-1: SerialNumber: syz
[  273.434623][T11638] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  273.437035][T11638] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  273.654293][    T9] qmi_wwan 9-1:5.41: probe with driver qmi_wwan failed with error -71
[  273.669411][    T9] usb 9-1: USB disconnect, device number 5
[  273.772972][T11666] loop9: detected capacity change from 0 to 4096
[  273.776910][T11666] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  273.795502][T11666] ntfs3(loop9): ino=1a, mi_enum_attr
[  273.797220][T11666] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  274.541749][T11682] loop8: detected capacity change from 0 to 16
[  274.560929][T11682] erofs (device loop8): mounted with root inode @ nid 36.
[  274.679165][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2287'.
[  275.439788][T11712] block nbd8: NBD_DISCONNECT
[  275.808821][T11717] loop9: detected capacity change from 0 to 8192
[  275.837452][T11717] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  276.000142][T11718] loop8: detected capacity change from 0 to 32768
[  276.039145][T11718] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  276.059658][T11718] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  276.099474][T11722] loop9: detected capacity change from 0 to 512
[  276.100016][   T33] audit: type=1800 audit(275.984:339): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2304" name="file1" dev="loop8" ino=17058 res=0 errno=0
[  276.137959][T11722] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.281035][T11020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.301879][T10661] ocfs2: Unmounting device (7,8) on (node local)
[  276.417303][T11731] loop9: detected capacity change from 0 to 128
[  276.582280][T11740] input: syz1 as /devices/virtual/input/input11
[  277.010277][T11741] loop8: detected capacity change from 0 to 32768
[  277.028966][T11741] XFS: noikeep mount option is deprecated.
[  277.412786][T11741] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.472963][T11741] XFS (loop8): Ending clean mount
[  277.480008][T11741] XFS (loop8): Quotacheck needed: Please wait.
[  277.541181][T11741] XFS (loop8): Quotacheck: Done.
[  277.628686][   T33] audit: type=1804 audit(277.494:340): pid=11741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2308" name="/newroot/107/file0/bus" dev="loop8" ino=9291 res=1 errno=0
[  277.703660][T10661] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.761277][T11782] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  277.774894][T11782] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  277.778806][T11782] bridge_slave_0: default FDB implementation only supports local addresses
[  278.009552][T11796] 9pnet_fd: Insufficient options for proto=fd
[  278.247065][T11816] tmpfs: Bad value for 'mpol'
[  279.753088][T11846] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  279.762272][T11846] Error validating options; rc = [-22]
[  279.913587][T11848] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2355'.
[  280.497258][T11851] loop9: detected capacity change from 0 to 512
[  280.566025][T11851] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.623546][T11020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.955729][ T5883] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  281.136987][ T5883] usb 10-1: config 0 has an invalid interface number: 2 but max is 0
[  281.140329][ T5883] usb 10-1: config 0 has no interface number 0
[  281.142770][ T5883] usb 10-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  281.147095][ T5883] usb 10-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  281.151458][ T5883] usb 10-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[  281.155769][ T5883] usb 10-1: config 0 interface 2 has no altsetting 0
[  281.161918][ T5883] usb 10-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[  281.165725][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.169647][ T5883] usb 10-1: Product: syz
[  281.171315][ T5883] usb 10-1: Manufacturer: syz
[  281.172855][ T5883] usb 10-1: SerialNumber: syz
[  281.173879][    T9] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  281.178458][ T5883] usb 10-1: config 0 descriptor??
[  281.181282][T11867] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  281.186134][T11867] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  281.335848][    T9] usb 9-1: config 0 has an invalid interface number: 11 but max is 0
[  281.338888][    T9] usb 9-1: config 0 has no interface number 0
[  281.341931][    T9] usb 9-1: config 0 interface 11 has no altsetting 0
[  281.344696][    T9] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  281.348257][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.357737][    T9] usb 9-1: config 0 descriptor??
[  281.363332][    T9] keyspan 9-1:0.11: Keyspan 2 port adapter converter detected
[  281.367086][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 7
[  281.373194][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 81
[  281.377780][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 82
[  281.382601][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 1
[  281.385890][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 2
[  281.389710][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 85
[  281.393598][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 5
[  281.401167][ T5883] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  281.406125][    T9] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  281.417530][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 83
[  281.422540][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 84
[  281.426456][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 3
[  281.429877][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 4
[  281.433062][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 86
[  281.436485][    T9] keyspan 9-1:0.11: found no endpoint descriptor for endpoint 6
[  281.443593][    T9] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  281.587625][    T9] usb 9-1: USB disconnect, device number 6
[  281.602771][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  281.618529][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  281.627200][    T9] keyspan 9-1:0.11: device disconnected
[  281.637275][ T7282] usb 10-1: USB disconnect, device number 4
[  282.448643][T11903] vlan2: entered promiscuous mode
[  282.450812][T11903] bond0: entered promiscuous mode
[  282.452923][T11903] bond_slave_0: entered promiscuous mode
[  282.457707][T11903] bond_slave_1: entered promiscuous mode
[  283.711215][T11950] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2400'.
[  283.715001][T11950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2400'.
[  283.909791][T11956] sctp: [Deprecated]: syz.5.2402 (pid 11956) Use of struct sctp_assoc_value in delayed_ack socket option.
[  283.909791][T11956] Use struct sctp_sack_info instead
[  284.086448][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2407'.
[  284.095727][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2407'.
[  284.099519][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2407'.
[  284.111945][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2407'.
[  284.116434][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2407'.
[  286.128337][T12011] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2426'.
[  286.176393][T12015] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2428'.
[  286.433839][T10665] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  286.583841][T10665] usb 10-1: Using ep0 maxpacket: 8
[  286.589055][T10665] usb 10-1: config 1 interface 0 has no altsetting 0
[  286.599822][T10665] usb 10-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  286.603303][T10665] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.606562][T10665] usb 10-1: SerialNumber: ꮘ阋䣗뉌鳾犹蘄Γ鈔痺屁䖋懙敫ᛵ抑仉벯쨧쎏ᘉ묥ﳄ侷㩒良䒁零销〴嶮愸司缄砳풁䊄ꔻ
[  286.835115][T10665] usblp0: Disabling reads from problematic bidirectional printer
[  286.843299][T10665] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 1 proto 1 vid 0x03F0 pid 0x0004
[  286.851285][T10665] usb 10-1: USB disconnect, device number 5
[  286.859747][T10665] usblp0: removed
[  287.201439][T12031] loop8: detected capacity change from 0 to 512
[  287.318603][T12035] loop8: detected capacity change from 0 to 164
[  287.423124][T12039] loop8: detected capacity change from 0 to 128
[  287.439672][T12039] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  287.637422][T12043] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2440'.
[  287.693291][T12037] loop9: detected capacity change from 0 to 32768
[  287.698455][T12037] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2438 (12037)
[  287.718991][T12037] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  287.732342][T12037] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  287.773862][T12050] 9pnet: p9_errstr2errno: server reported unknown error 
[  287.834626][T12037] BTRFS info (device loop9): enabling ssd optimizations
[  287.837562][T12037] BTRFS info (device loop9): enabling free space tree
[  287.928890][T11020] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  288.263596][T12074] netlink: 'syz.8.2447': attribute type 2 has an invalid length.
[  288.599586][T12077] loop8: detected capacity change from 0 to 40427
[  288.602558][T12077] F2FS-fs (loop8): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  288.605252][T12077] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  288.609233][T12077] F2FS-fs (loop8): invalid crc value
[  288.666640][T12077] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  288.673958][T12077] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  288.676491][T12077] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  288.918581][T12096] block nbd9: Attempted send on invalid socket
[  288.940463][T12096] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[  290.355072][T12107] loop9: detected capacity change from 0 to 262144
[  290.404509][T12107] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2460 (12107)
[  290.639561][T12107] BTRFS info (device loop9): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  290.644093][T12107] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm
[  290.798422][T12107] BTRFS info (device loop9): enabling ssd optimizations
[  290.801131][T12107] BTRFS info (device loop9): enabling free space tree
[  291.171850][T11020] BTRFS info (device loop9): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  291.501251][T12165] loop8: detected capacity change from 0 to 1024
[  291.509364][T12165] EXT4-fs: Ignoring removed nobh option
[  291.511278][T12165] EXT4-fs: Ignoring removed bh option
[  291.530377][T12165] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.653011][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.989348][T12170] loop8: detected capacity change from 0 to 32768
[  291.993315][T12170] btrfs: Deprecated parameter 'usebackuproot'
[  291.999065][T12170] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  292.008890][T12170] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2478 (12170)
[  292.035795][T12170] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  292.045550][T12170] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  292.244194][T12170] BTRFS info (device loop8): rebuilding free space tree
[  292.259847][T12170] BTRFS info (device loop8): allowing degraded mounts
[  292.262621][T12170] BTRFS info (device loop8): enabling ssd optimizations
[  292.283968][T12170] BTRFS info (device loop8): turning on flush-on-commit
[  292.286752][T12170] BTRFS info (device loop8): enabling free space tree
[  292.289488][T12170] BTRFS info (device loop8): force clearing of disk cache
[  292.292292][T12170] BTRFS info (device loop8): trying to use backup root at mount time
[  292.324558][T12170] BTRFS info (device loop8): use zstd compression, level 3
[  292.435451][T10661] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  292.720832][T12193] loop8: detected capacity change from 0 to 256
[  292.746142][T12193] exFAT-fs (loop8): failed to load upcase table (idx : 0x000103df, chksum : 0xf3211d0a, utbl_chksum : 0xe619d30d)
[  293.152849][T12207] CIFS mount error: No usable UNC path provided in device string!
[  293.152849][T12207] 
[  293.164027][T12207] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  293.411044][ T5883] syz_tun: tun_net_xmit 86
[  293.484018][T10663] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  293.715641][T10663] usb 10-1: config 0 has an invalid interface number: 176 but max is 2
[  293.718814][T10663] usb 10-1: config 0 has no interface number 1
[  293.721268][T10663] usb 10-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  293.724560][T10663] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.729698][T10663] usb 10-1: config 0 descriptor??
[  294.132497][T10663] qcserial 10-1:0.2: Qualcomm USB modem converter detected
[  294.337753][    T9] usb 10-1: USB disconnect, device number 6
[  294.354049][    T9] qcserial 10-1:0.2: device disconnected
[  295.374052][T10665] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  295.534132][T10665] usb 10-1: Using ep0 maxpacket: 16
[  295.543557][T10665] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  295.548381][T10665] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  295.564096][T10665] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  295.568054][T10665] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.570685][T10665] usb 10-1: Product: syz
[  295.572275][T10665] usb 10-1: Manufacturer: syz
[  295.581725][T10665] usb 10-1: SerialNumber: syz
[  295.586165][T10665] usb 10-1: config 0 descriptor??
[  295.605127][T10665] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  295.608701][T10665] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class)
[  295.760906][T12253] loop8: detected capacity change from 0 to 4096
[  295.787777][T12256] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  295.969659][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2511'.
[  296.124826][T12267] loop8: detected capacity change from 0 to 8192
[  296.217410][T10665] em28xx 10-1:0.0: chip ID is em2874
[  296.351617][T12281] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2519'.
[  296.424331][T10665] usb 10-1: USB disconnect, device number 7
[  296.428059][T10665] em28xx 10-1:0.0: Disconnecting em28xx
[  296.465872][T10665] em28xx 10-1:0.0: Freeing device
[  297.119674][   T33] audit: type=1326 audit(297.004:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12315 comm="syz.9.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebc18ec29 code=0x7ffc0000
[  297.144770][   T33] audit: type=1326 audit(297.004:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12315 comm="syz.9.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebc18ec29 code=0x7ffc0000
[  297.151814][   T33] audit: type=1326 audit(297.024:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12315 comm="syz.9.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6ebc18ec29 code=0x7ffc0000
[  297.159842][   T33] audit: type=1326 audit(297.024:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12315 comm="syz.9.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebc18ec29 code=0x7ffc0000
[  297.169784][   T33] audit: type=1326 audit(297.024:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12315 comm="syz.9.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebc18ec29 code=0x7ffc0000
[  297.185795][   T33] audit: type=1326 audit(297.024:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12315 comm="syz.9.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f6ebc18ec29 code=0x7ffc0000
[  297.208004][   T33] audit: type=1326 audit(297.024:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12315 comm="syz.9.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebc18ec29 code=0x7ffc0000
[  297.218057][   T33] audit: type=1326 audit(297.024:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12315 comm="syz.9.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebc18ec29 code=0x7ffc0000
[  297.225017][T12318] block nbd0: server does not support multiple connections per device.
[  297.248754][T12318] block nbd0: shutting down sockets
[  297.299606][T12326] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2540'.
[  297.640084][T10665] libceph: connect (1)[c::]:6789 error -101
[  297.643353][T10665] libceph: mon0 (1)[c::]:6789 connect error
[  297.653846][ T7282] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  297.780241][T12350] ceph: No mds server is up or the cluster is laggy
[  297.795019][T12355] loop9: detected capacity change from 0 to 256
[  297.830854][T12355] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d)
[  297.848102][ T7282] usb 9-1: config 220 has an invalid interface number: 76 but max is 2
[  297.856020][ T7282] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  297.859178][ T7282] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  297.884206][ T7282] usb 9-1: config 220 has no interface number 2
[  297.891223][ T7282] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  297.901089][ T7282] usb 9-1: config 220 interface 0 has no altsetting 0
[  297.903500][ T7282] usb 9-1: config 220 interface 76 has no altsetting 0
[  297.905989][ T7282] usb 9-1: config 220 interface 1 has no altsetting 0
[  297.940827][ T7282] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  297.947461][ T7282] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.951466][ T7282] usb 9-1: Product: syz
[  297.953036][ T7282] usb 9-1: Manufacturer: syz
[  297.955275][ T7282] usb 9-1: SerialNumber: syz
[  298.174930][T10663] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  298.179092][ T7282] usb 9-1: Found UVC 7.01 device syz (8086:0b07)
[  298.181782][ T7282] usb 9-1: No valid video chain found.
[  298.185364][ T7282] usb 9-1: selecting invalid altsetting 0
[  298.210587][ T7282] usb 9-1: selecting invalid altsetting 0
[  298.212824][ T7282] usbtest 9-1:220.1: probe with driver usbtest failed with error -22
[  298.223008][ T7282] usb 9-1: USB disconnect, device number 7
[  298.333935][T10663] usb 10-1: Using ep0 maxpacket: 8
[  298.337573][T10663] usb 10-1: config 162 has an invalid interface number: 97 but max is 0
[  298.340453][T10663] usb 10-1: config 162 has no interface number 0
[  298.342410][T10663] usb 10-1: config 162 interface 97 has no altsetting 0
[  298.349761][T10663] usb 10-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  298.353048][T10663] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.356285][T10663] usb 10-1: Product: syz
[  298.357660][T10663] usb 10-1: Manufacturer: syz
[  298.359085][T10663] usb 10-1: SerialNumber: syz
[  298.666437][T10663] metro_usb 10-1:162.97: Metrologic USB to Serial converter detected
[  298.674404][T10663] usb 10-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  298.684127][T10663] usb 10-1: USB disconnect, device number 8
[  298.696827][T10663] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  298.701221][T10663] metro_usb 10-1:162.97: device disconnected
[  298.839074][T12379] syz_tun: tun_net_xmit 42
[  298.863329][T12379] syz_tun: tun_net_xmit 42
[  298.888284][T12379] syz_tun: tun_net_xmit 42
[  298.890831][T12379] syz_tun: tun_net_xmit 42
[  298.901280][T12379] syz_tun: tun_net_xmit 42
[  298.911498][T12379] syz_tun: tun_net_xmit 42
[  298.914714][T12379] syz_tun: tun_net_xmit 42
[  298.918513][T12379] syz_tun: tun_net_xmit 42
[  298.920851][T12379] syz_tun: tun_net_xmit 42
[  298.923101][T12379] syz_tun: tun_net_xmit 42
[  298.927181][T12379] syz_tun: tun_net_xmit 42
[  298.933311][T12379] syz_tun: tun_net_xmit 42
[  298.943493][T12379] syz_tun: tun_net_xmit 42
[  298.950181][T12379] syz_tun: tun_net_xmit 42
[  298.951776][T12379] syz_tun: tun_net_xmit 42
[  298.954044][T12379] syz_tun: tun_net_xmit 42
[  298.955761][T12379] syz_tun: tun_net_xmit 42
[  298.957631][T12379] syz_tun: tun_net_xmit 42
[  298.959747][T12379] syz_tun: tun_net_xmit 42
[  298.975760][T12379] syz_tun: tun_net_xmit 42
[  298.977666][T12379] syz_tun: tun_net_xmit 42
[  298.979826][T12379] syz_tun: tun_net_xmit 42
[  298.981980][T12379] syz_tun: tun_net_xmit 42
[  298.985326][T12379] syz_tun: tun_net_xmit 42
[  298.987451][T12379] syz_tun: tun_net_xmit 42
[  298.989628][T12379] syz_tun: tun_net_xmit 42
[  298.991533][T12379] syz_tun: tun_net_xmit 42
[  298.993493][T12379] syz_tun: tun_net_xmit 42
[  298.997158][T12379] syz_tun: tun_net_xmit 42
[  298.999774][T12379] syz_tun: tun_net_xmit 42
[  299.001840][T12379] syz_tun: tun_net_xmit 42
[  299.004266][T12379] syz_tun: tun_net_xmit 42
[  299.006875][T12379] syz_tun: tun_net_xmit 42
[  299.012346][T12379] syz_tun: tun_net_xmit 42
[  299.018301][T12379] syz_tun: tun_net_xmit 42
[  299.020053][T12379] syz_tun: tun_net_xmit 42
[  299.021913][T12379] syz_tun: tun_net_xmit 42
[  299.024040][T12379] syz_tun: tun_net_xmit 42
[  299.025874][T12379] syz_tun: tun_net_xmit 42
[  299.027820][T12379] syz_tun: tun_net_xmit 42
[  299.029643][T12379] syz_tun: tun_net_xmit 42
[  299.031394][T12379] syz_tun: tun_net_xmit 42
[  299.033465][T12379] syz_tun: tun_net_xmit 42
[  299.037411][T12379] syz_tun: tun_net_xmit 42
[  299.039116][T12379] syz_tun: tun_net_xmit 42
[  299.040747][T12379] syz_tun: tun_net_xmit 42
[  299.047108][T12379] syz_tun: tun_net_xmit 42
[  299.048844][T12379] syz_tun: tun_net_xmit 42
[  299.053124][T12379] syz_tun: tun_net_xmit 42
[  299.064199][T12379] syz_tun: tun_net_xmit 42
[  299.066859][T12379] syz_tun: tun_net_xmit 42
[  299.071169][T12379] syz_tun: tun_net_xmit 42
[  299.073057][T12379] syz_tun: tun_net_xmit 42
[  299.080595][T12379] syz_tun: tun_net_xmit 42
[  299.082349][T12379] syz_tun: tun_net_xmit 42
[  299.085443][T12379] syz_tun: tun_net_xmit 42
[  299.088696][T12379] syz_tun: tun_net_xmit 42
[  299.090804][T12379] syz_tun: tun_net_xmit 42
[  299.093172][T12379] syz_tun: tun_net_xmit 42
[  299.111191][T12379] syz_tun: tun_net_xmit 42
[  299.124851][T12379] syz_tun: tun_net_xmit 42
[  299.127218][T12379] syz_tun: tun_net_xmit 42
[  299.129389][T12379] syz_tun: tun_net_xmit 42
[  299.131525][T12379] syz_tun: tun_net_xmit 42
[  299.133742][T12379] syz_tun: tun_net_xmit 42
[  299.136708][T12379] syz_tun: tun_net_xmit 42
[  299.138856][T12379] syz_tun: tun_net_xmit 42
[  299.155356][T12379] syz_tun: tun_net_xmit 42
[  299.161161][T12379] syz_tun: tun_net_xmit 42
[  299.166034][T12379] syz_tun: tun_net_xmit 42
[  299.174955][T12379] syz_tun: tun_net_xmit 42
[  299.177427][T12379] syz_tun: tun_net_xmit 42
[  299.192254][T12379] syz_tun: tun_net_xmit 42
[  299.195297][T12379] syz_tun: tun_net_xmit 42
[  299.201087][T12379] syz_tun: tun_net_xmit 42
[  299.214241][T12379] syz_tun: tun_net_xmit 42
[  299.221105][T12379] syz_tun: tun_net_xmit 42
[  299.222791][T12379] syz_tun: tun_net_xmit 42
[  299.234164][T12379] syz_tun: tun_net_xmit 42
[  299.239548][T12379] syz_tun: tun_net_xmit 42
[  299.241756][T12379] syz_tun: tun_net_xmit 42
[  299.252787][T12379] syz_tun: tun_net_xmit 42
[  299.255864][T12379] syz_tun: tun_net_xmit 42
[  299.262919][T12379] syz_tun: tun_net_xmit 42
[  299.268009][T12379] syz_tun: tun_net_xmit 42
[  299.269755][T12379] syz_tun: tun_net_xmit 42
[  299.278130][T12379] syz_tun: tun_net_xmit 42
[  299.284904][T12379] syz_tun: tun_net_xmit 42
[  299.292369][T12379] syz_tun: tun_net_xmit 42
[  299.296456][T12379] syz_tun: tun_net_xmit 42
[  299.298177][T12379] syz_tun: tun_net_xmit 42
[  299.299928][T12379] syz_tun: tun_net_xmit 42
[  299.301710][T12379] syz_tun: tun_net_xmit 42
[  299.308420][T12379] syz_tun: tun_net_xmit 42
[  299.311691][T12379] syz_tun: tun_net_xmit 42
[  299.314187][T12379] syz_tun: tun_net_xmit 42
[  299.316083][T12379] syz_tun: tun_net_xmit 42
[  299.339487][T12379] syz_tun: tun_net_xmit 42
[  299.341507][T12379] syz_tun: tun_net_xmit 42
[  299.343500][T12379] syz_tun: tun_net_xmit 42
[  299.362821][T12379] syz_tun: tun_net_xmit 42
[  299.371648][T12379] syz_tun: tun_net_xmit 42
[  299.373835][T12379] syz_tun: tun_net_xmit 42
[  299.381982][T12379] syz_tun: tun_net_xmit 42
[  299.385818][T12379] syz_tun: tun_net_xmit 42
[  299.414670][T12379] syz_tun: tun_net_xmit 42
[  299.417028][T12379] syz_tun: tun_net_xmit 42
[  299.419204][T12379] syz_tun: tun_net_xmit 42
[  299.434350][T12379] syz_tun: tun_net_xmit 42
[  299.436318][T12379] syz_tun: tun_net_xmit 42
[  299.438079][T12379] syz_tun: tun_net_xmit 42
[  299.439714][T12379] syz_tun: tun_net_xmit 42
[  299.449583][T10663] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  299.452029][T12379] syz_tun: tun_net_xmit 42
[  299.455772][T12379] syz_tun: tun_net_xmit 42
[  299.462207][T12379] syz_tun: tun_net_xmit 42
[  299.472009][T12397] loop9: detected capacity change from 0 to 2048
[  299.494288][T12379] syz_tun: tun_net_xmit 42
[  299.502628][T12379] syz_tun: tun_net_xmit 42
[  299.507536][T12379] syz_tun: tun_net_xmit 42
[  299.512317][T12398] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  299.512658][T12379] syz_tun: tun_net_xmit 42
[  299.567838][T12398] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  299.571331][T12398] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4)
[  299.575081][T12398] Remounting filesystem read-only
[  299.577425][T11020] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer
[  299.604266][T10663] usb 9-1: Using ep0 maxpacket: 8
[  299.609454][T10663] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  299.618081][T10663] usb 9-1: config 0 interface 0 has no altsetting 0
[  299.623427][T10663] usb 9-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  299.633797][T10663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.636916][T10663] usb 9-1: Product: syz
[  299.642754][T10663] usb 9-1: Manufacturer: syz
[  299.646939][T10663] usb 9-1: SerialNumber: syz
[  299.654548][T10663] usb 9-1: config 0 descriptor??
[  299.663996][T10663] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 found
[  299.865651][T10663] snd_usb_toneport 9-1:0.0: cannot get proper max packet size
[  299.868239][T10663] snd_usb_toneport 9-1:0.0: Line 6 TonePort UX2 now disconnected
[  299.873283][T10663] snd_usb_toneport 9-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  300.071843][T10663] usb 9-1: USB disconnect, device number 8
[  300.983927][    T9] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  301.145520][    T9] usb 9-1: Using ep0 maxpacket: 32
[  301.148979][    T9] usb 9-1: config 0 has an invalid interface number: 196 but max is 0
[  301.151918][    T9] usb 9-1: config 0 has no interface number 0
[  301.154088][    T9] usb 9-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  301.157602][    T9] usb 9-1: config 0 interface 196 has no altsetting 0
[  301.162008][    T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  301.167191][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.169773][    T9] usb 9-1: Product: syz
[  301.171177][    T9] usb 9-1: Manufacturer: syz
[  301.172814][    T9] usb 9-1: SerialNumber: syz
[  301.176754][    T9] usb 9-1: config 0 descriptor??
[  301.181408][T12453] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  301.394353][    T9] ipheth 9-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  301.399676][    T9] ipheth 9-1:0.196: probe with driver ipheth failed with error -71
[  301.405725][    T9] usb 9-1: USB disconnect, device number 9
[  302.017347][T12480] loop8: detected capacity change from 0 to 512
[  302.113036][T12480] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.192951][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.244291][T12488] loop8: detected capacity change from 0 to 8
[  302.550941][T12488] SQUASHFS error: xz decompression failed, data probably corrupt
[  302.560376][T12488] SQUASHFS error: Failed to read block 0x108: -5
[  302.570415][T12488] SQUASHFS error: Unable to read metadata cache entry [106]
[  302.573280][T12488] SQUASHFS error: Unable to read inode 0x11f
[  302.666790][T12491] sit1: entered promiscuous mode
[  302.668543][T12491] sit1: entered allmulticast mode
[  302.944054][T10663] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  303.093917][T10663] usb 9-1: Using ep0 maxpacket: 16
[  303.098549][T10663] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  303.102015][T10663] usb 9-1: config 0 has no interface number 0
[  303.110184][T10663] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  303.114205][T10663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.117830][T10663] usb 9-1: Product: syz
[  303.119661][T10663] usb 9-1: Manufacturer: syz
[  303.121669][T10663] usb 9-1: SerialNumber: syz
[  303.131022][T10663] usb 9-1: config 0 descriptor??
[  303.496718][T12507] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  303.496718][T12507] The task syz.5.2616 (12507) triggered the difference, watch for misbehavior.
[  303.770735][T10663] usb 9-1: selecting invalid altsetting 1
[  303.773111][T10663] speedtch 9-1:0.1: speedtch_bind: setting interface to  1 failed (-22)!
[  303.776532][T10663] speedtch 9-1:0.1: usbatm_usb_probe: bind failed: -22!
[  303.779357][T10663] speedtch 9-1:0.1: probe with driver speedtch failed with error -22
[  303.794214][T10663] usb 9-1: USB disconnect, device number 10
[  304.689526][T12525] loop9: detected capacity change from 0 to 136
[  304.720552][T12525] rock: directory entry would overflow storage
[  304.724865][T12525] rock: sig=0x4f50, size=4, remaining=3
[  304.727165][T12525] iso9660: Corrupted directory entry in block 2 of inode 1472
[  304.894785][T10665] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  305.043992][T10665] usb 9-1: Using ep0 maxpacket: 16
[  305.049433][T10665] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.054164][T10665] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  305.058361][T10665] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  305.061865][T10665] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  305.065574][T10665] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  305.071875][T10665] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  305.075731][T10665] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  305.078914][T10665] usb 9-1: Manufacturer: syz
[  305.083381][T10665] usb 9-1: config 0 descriptor??
[  305.143826][    T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  305.325234][    T9] usb 10-1: Using ep0 maxpacket: 16
[  305.329213][    T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  305.333457][    T9] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  305.339863][    T9] usb 10-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  305.345365][T10665] rc_core: IR keymap rc-hauppauge not found
[  305.350148][T10665] Registered IR keymap rc-empty
[  305.352497][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.355712][    T9] usb 10-1: config 0 interface 0 has no altsetting 0
[  305.358365][    T9] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  305.366313][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.372259][    T9] usb 10-1: config 0 descriptor??
[  305.396503][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.421638][T10665] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  305.429561][T10665] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input12
[  305.459593][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.487286][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.515167][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.534004][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.554204][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.568704][T12542] tmpfs: Group quota inode hardlimit too large.
[  305.588335][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.604183][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.625923][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.654057][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.674138][T10665] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  305.699985][T10665] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  305.703121][T10665] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  305.717539][T12548] overlayfs: failed to clone upperpath
[  305.761216][ T5869] usb 9-1: USB disconnect, device number 11
[  305.795534][    T9] hid (null): bogus close delimiter
[  306.001034][    T9] usb 10-1: USB disconnect, device number 9
[  306.329930][ T5869] hid-generic 0005:0007:0008.000A: unknown main item tag 0x0
[  306.343311][ T5869] hid-generic 0005:0007:0008.000A: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  306.442926][T12570] fuse: Unknown parameter 'smackfsdef'
[  306.794815][T12574] loop8: detected capacity change from 0 to 32768
[  306.821289][T12574] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  306.873406][T12574] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  306.883323][ T5857] (kworker/u8:2,5857,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  306.935310][T10661] ocfs2: Unmounting device (7,8) on (node local)
[  306.967882][ T5869] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  307.134031][ T5869] usb 10-1: Using ep0 maxpacket: 32
[  307.143636][ T5869] usb 10-1: config 7 has an invalid interface number: 41 but max is 0
[  307.147746][ T5869] usb 10-1: config 7 has no interface number 0
[  307.150432][ T5869] usb 10-1: config 7 interface 41 has no altsetting 0
[  307.156025][ T5869] usb 10-1: New USB device found, idVendor=0499, idProduct=5005, bcdDevice=e6.1d
[  307.163653][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.169959][ T5869] usb 10-1: Product: syz
[  307.171823][ T5869] usb 10-1: Manufacturer: syz
[  307.176243][ T5869] usb 10-1: SerialNumber: syz
[  307.397772][ T5869] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  307.453329][ T5869] snd-usb-audio 10-1:7.41: probe with driver snd-usb-audio failed with error -2
[  307.463551][ T5869] usb 10-1: USB disconnect, device number 10
[  307.480665][ T7061] udevd[7061]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.41/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  307.654614][    T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  307.804795][    T9] usb 9-1: Using ep0 maxpacket: 8
[  307.810082][    T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  307.814606][    T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  307.819629][    T9] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  307.823578][    T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  307.828795][    T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  307.832430][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.047858][    T9] usb 9-1: GET_CAPABILITIES returned 0
[  308.050281][    T9] usbtmc 9-1:16.0: can't read capabilities
[  308.566123][    T9] usb 9-1: USB disconnect, device number 12
[  308.722723][T12633] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  309.943654][T12665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.070061][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2690'.
[  310.091668][T12675] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  310.182186][T12684] loop8: detected capacity change from 0 to 512
[  310.190267][T12684] EXT4-fs: Ignoring removed bh option
[  310.204043][T12684] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  310.248898][T12684] EXT4-fs (loop8): 1 truncate cleaned up
[  310.258275][T12684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.327969][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.379423][T12685] loop9: detected capacity change from 0 to 32768
[  310.382880][T12685] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2693 (12685)
[  310.389654][T12685] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  310.393652][T12685] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  310.510699][T12685] BTRFS info (device loop9): rebuilding free space tree
[  310.521701][T12685] BTRFS info (device loop9): disabling free space tree
[  310.524458][T12685] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  310.528156][T12685] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  310.536474][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2699'.
[  310.537667][T12685] BTRFS info (device loop9): enabling ssd optimizations
[  310.542578][T12685] BTRFS info (device loop9): force clearing of disk cache
[  310.545522][T12685] BTRFS info (device loop9): enabling auto defrag
[  310.548433][T12685] BTRFS info (device loop9): doing ref verification
[  310.551546][T12711] netlink: 'syz.5.2699': attribute type 7 has an invalid length.
[  310.564294][T12711] netlink: 'syz.5.2699': attribute type 8 has an invalid length.
[  310.582889][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2699'.
[  310.640178][T11020] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  311.345425][T12748] netdevsim netdevsim9 : renamed from netdevsim0 (while UP)
[  311.437240][T12752] loop9: detected capacity change from 0 to 1024
[  311.633947][T10663] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[  311.723873][ T5883] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  311.788828][T10663] usb 9-1: config 3 has an invalid interface number: 61 but max is 0
[  311.792209][T10663] usb 9-1: config 3 has no interface number 0
[  311.795090][T10663] usb 9-1: config 3 interface 61 has no altsetting 0
[  311.801684][T10663] usb 9-1: string descriptor 0 read error: -22
[  311.806827][T10663] usb 9-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26
[  311.813802][T10663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.827974][T10663] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  311.868166][T10663] snd-usb-audio 9-1:3.61: probe with driver snd-usb-audio failed with error -2
[  311.874089][ T5883] usb 10-1: Using ep0 maxpacket: 16
[  311.889867][ T5883] usb 10-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6
[  311.893080][T12758] overlayfs: failed to clone upperpath
[  311.893479][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.903031][ T5883] usb 10-1: Product: syz
[  311.904946][ T5883] usb 10-1: Manufacturer: syz
[  311.906840][ T5883] usb 10-1: SerialNumber: syz
[  311.911776][ T5883] usb 10-1: config 0 descriptor??
[  311.924042][ T5883] safe_serial 10-1:0.0: safe_serial converter detected
[  311.936302][ T5883] usb 10-1: safe_serial converter now attached to ttyUSB0
[  312.044357][   T10] usb 9-1: USB disconnect, device number 13
[  312.142794][ T5883] usb 10-1: USB disconnect, device number 11
[  312.154640][ T5883] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[  312.158668][ T5883] safe_serial 10-1:0.0: device disconnected
[  313.088535][T12804] loop8: detected capacity change from 0 to 512
[  313.102294][T12804] EXT4-fs: Ignoring removed bh option
[  313.126211][T12804] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  313.130230][T12804] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  313.159815][T12804] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  313.166847][T12804] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  313.203292][T12808] atomic_op ffff8881192cd198 conn xmit_atomic 0000000000000000
[  313.285466][T12804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.684158][   T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  313.844902][   T10] usb 9-1: Using ep0 maxpacket: 16
[  313.857260][   T10] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  313.865122][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.870745][   T10] usb 9-1: Product: syz
[  313.872932][   T10] usb 9-1: Manufacturer: syz
[  313.875926][   T10] usb 9-1: SerialNumber: syz
[  313.882030][   T10] usb 9-1: config 0 descriptor??
[  313.890800][   T10] ums-onetouch 9-1:0.0: USB Mass Storage device detected
[  314.094178][ T5883] usb 9-1: USB disconnect, device number 14
[  314.668748][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.728654][T12848] loop9: detected capacity change from 0 to 32768
[  314.865925][T12848] XFS (loop9): DAX unsupported by block device. Turning off DAX.
[  314.901421][T12848] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  314.991386][T12848] XFS (loop9): Ending clean mount
[  314.999979][T12848] XFS (loop9): Quotacheck needed: Please wait.
[  315.039949][T12848] XFS (loop9): Quotacheck: Done.
[  315.117070][T11020] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  315.636494][T10663] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  315.817585][T10663] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  315.821086][T10663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.829074][T10663] usb 9-1: Product: syz
[  315.830330][T10663] usb 9-1: Manufacturer: syz
[  315.831753][T10663] usb 9-1: SerialNumber: syz
[  315.848730][T10663] usb 9-1: config 0 descriptor??
[  316.063867][T10665] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[  316.064295][T10663] usb 9-1: USB disconnect, device number 15
[  316.216018][T10665] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  316.220022][T10665] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  316.223441][T10665] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10
[  316.226923][T10665] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  316.232122][T10665] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  316.235023][T10665] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  316.237553][T10665] usb 10-1: Manufacturer: syz
[  316.241210][T10665] usb 10-1: config 0 descriptor??
[  316.453394][T10665] usb 10-1: USB disconnect, device number 12
[  316.880690][T12907] loop8: detected capacity change from 0 to 128
[  316.930918][T12907] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  316.937955][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  317.383338][T12906] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  317.414526][T12907] fscrypt: loop8: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  317.438990][T10661] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  317.619565][T10663] usb 10-1: new full-speed USB device number 13 using dummy_hcd
[  317.672799][T12924] loop8: detected capacity change from 0 to 32768
[  317.826108][T10663] usb 10-1: unable to get BOS descriptor or descriptor too short
[  317.829559][T10663] usb 10-1: not running at top speed; connect to a high speed hub
[  317.833512][T10663] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  317.838080][T10663] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  317.842346][T10663] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  317.845201][T10663] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.847765][T10663] usb 10-1: Product: syz
[  317.849026][T10663] usb 10-1: Manufacturer: syz
[  317.850478][T10663] usb 10-1: SerialNumber: syz
[  318.079309][T10663] usb 10-1: 0:2 : does not exist
[  318.094946][T10663] usb 10-1: USB disconnect, device number 13
[  318.145522][ T7061] udevd[7061]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  318.187460][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2790'.
[  318.213150][ T5857] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  318.218169][ T5857] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  318.224202][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2790'.
[  318.224401][ T5857] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  318.231355][ T5857] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  319.126957][T12948] netlink: 'syz.5.2798': attribute type 1 has an invalid length.
[  319.406845][T12960] loop8: detected capacity change from 0 to 32768
[  319.413122][T12960] (syz.8.2804,12960,0):ocfs2_find_entry:1083 ERROR: status = -117
[  319.416455][T12960] (syz.8.2804,12960,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  319.419905][T12960] (syz.8.2804,12960,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  319.419925][T12960] (syz.8.2804,12960,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  319.428411][T12960] (syz.8.2804,12960,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  319.431664][T12960] (syz.8.2804,12960,0):ocfs2_fill_super:1177 ERROR: status = -22
[  319.467771][T12964] loop8: detected capacity change from 0 to 1024
[  319.514680][T12940] Process accounting resumed
[  319.622860][T12970] loop8: detected capacity change from 0 to 256
[  319.637353][T12970] exfat: Deprecated parameter 'utf8'
[  319.639318][T12970] exfat: Deprecated parameter 'namecase'
[  319.652302][T12970] exfat: Deprecated parameter 'utf8'
[  319.665447][T12970] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  319.833050][T12967] loop9: detected capacity change from 0 to 32768
[  319.917868][T12967] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  319.917884][T12967]   allowing incompatible features above 0.0: (unknown version)
[  319.917889][T12967]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  319.935902][T12967] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  319.939187][T12967] bcachefs (loop9): recovering from clean shutdown, journal seq 10
[  319.942483][T12967] bcachefs (loop9): Version upgrade required:
[  319.942483][T12967] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  319.942483][T12967] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  319.942483][T12967]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  319.975078][T12967] bcachefs (loop9): dropping and reconstructing all alloc info
[  320.000129][T12967] bcachefs (loop9): accounting_read... done
[  320.007428][T12967] bcachefs (loop9): alloc_read... done
[  320.010647][T12967] bcachefs (loop9): snapshots_read... done
[  320.013662][T12967] bcachefs (loop9): check_allocations...
[  320.025180][ T5869] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  320.052235][T12967]  done
[  320.055398][T12967] bcachefs (loop9): going read-write
[  320.066884][T12967] bcachefs (loop9): done starting filesystem
[  320.126536][   T33] audit: type=1800 audit(320.014:349): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2808" name="file1" dev="loop9" ino=536870912 res=0 errno=0
[  320.174868][T11020] bcachefs (loop9): shutting down
[  320.176956][T11020] bcachefs (loop9): going read-only
[  320.179028][T11020] bcachefs (loop9): finished waiting for writes to stop
[  320.182345][T11020] bcachefs (loop9): flushing journal and stopping allocators, journal seq 10
[  320.186057][T11020] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 10
[  320.208008][T11020] bcachefs (loop9): unclean shutdown complete, journal seq 11
[  320.210983][ T5869] usb 9-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56
[  320.213479][T11020] bcachefs (loop9): done going read-only, filesystem not clean
[  320.219259][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.230894][ T5869] usb 9-1: config 0 descriptor??
[  320.240968][ T5869] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053
[  320.252151][T11020] bcachefs (loop9): shutdown complete
[  320.442176][ T5869] gspca_zc3xx: reg_w_i err -71
[  320.444330][ T5869] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  320.449519][ T5869] usb 9-1: USB disconnect, device number 16
[  321.325973][T13005] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2821'.
[  321.559340][T13018] loop9: detected capacity change from 0 to 16
[  321.562439][T13018] erofs: Unknown parameter 'cache_stegy'
[  322.077570][T13029] loop9: detected capacity change from 0 to 1024
[  322.082141][T13029] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  322.577681][T13045] loop8: detected capacity change from 0 to 1024
[  322.742435][T13053] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  322.761974][T13053] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  323.022467][T13058] loop9: detected capacity change from 0 to 32768
[  323.067844][T13058]  loop9: p9 p11 p16
[  323.271508][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop9p9, 10) failed: No such file or directory
[  323.278559][T11893] udevd[11893]: inotify_add_watch(7, /dev/loop9p16, 10) failed: No such file or directory
[  323.279580][ T7061] udevd[7061]: inotify_add_watch(7, /dev/loop9p11, 10) failed: No such file or directory
[  323.544869][ T3588] hfsplus: b-tree write err: -5, ino 4
[  323.817234][T13084] loop9: detected capacity change from 0 to 16
[  323.830622][T13084] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  323.959731][T13091] loop9: detected capacity change from 0 to 512
[  323.965233][T13091] EXT4-fs (loop9): Test dummy encryption mode enabled
[  323.972151][T13091] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #2: block 4: comm syz.9.2858: lblock 0 mapped to illegal pblock 4 (length 1)
[  323.984276][T13091] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.2858: error -117 reading directory block
[  323.993853][T13091] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  324.004850][T13091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.059262][T11020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.101843][T13077] loop8: detected capacity change from 0 to 32768
[  324.114441][T13077] ocfs2: Bad value for 'localalloc'
[  324.222793][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2863'.
[  324.243485][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2863'.
[  324.262982][T13102] netlink: 'syz.8.2863': attribute type 15 has an invalid length.
[  324.624064][T10665] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  324.810048][T10665] usb 10-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  324.823831][T10665] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.837509][T10665] usb 10-1: config 0 descriptor??
[  324.851228][T10665] gspca_main: spca508-2.14.0 probing 8086:0110
[  325.052029][T10665] gspca_spca508: reg_read err -32
[  325.059264][T10665] gspca_spca508: reg_read err -32
[  325.062098][T10665] gspca_spca508: reg_read err -32
[  325.119057][T13125] bridge_slave_0: left allmulticast mode
[  325.121246][T13125] bridge_slave_0: left promiscuous mode
[  325.123852][T13125] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.133316][T13125] bridge_slave_1: left allmulticast mode
[  325.141443][T13125] bridge_slave_1: left promiscuous mode
[  325.144779][T13125] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.151609][T10665] gspca_spca508: reg_read err -32
[  325.165939][T13125] bond0: (slave bond_slave_0): Releasing backup interface
[  325.182921][T13125] bond0: (slave bond_slave_1): Releasing backup interface
[  325.202763][T13125] team0: Port device team_slave_0 removed
[  325.214669][T13125] team0: Port device team_slave_1 removed
[  325.217499][T13125] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  325.219939][T13125] batman_adv: batadv0: Removing interface: batadv_slave_0
[  325.225014][T13125] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  325.227920][T13125] batman_adv: batadv0: Removing interface: batadv_slave_1
[  325.360726][T10665] gspca_spca508: reg write: error -71
[  325.363976][T10665] spca508 10-1:0.0: probe with driver spca508 failed with error -71
[  325.371851][T10665] usb 10-1: USB disconnect, device number 14
[  325.403591][T13133] openvswitch: netlink: Duplicate or invalid key (type 0).
[  325.407660][T13133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.953523][T13156] sctp: [Deprecated]: syz.9.2888 (pid 13156) Use of int in max_burst socket option.
[  325.953523][T13156] Use struct sctp_assoc_value instead
[  326.157092][T13164] loop9: detected capacity change from 0 to 2048
[  326.209758][ T7061]  loop9: p1 p2 p3 < > p4 < p5 p6 >
[  326.211916][ T7061] loop9: partition table partially beyond EOD, truncated
[  326.216087][ T7061] loop9: p1 start 458755 is beyond EOD, truncated
[  326.218735][ T7061] loop9: p2 start 16908804 is beyond EOD, truncated
[  326.221422][ T7061] loop9: p3 start 4284289 is beyond EOD, truncated
[  326.226126][ T7061] loop9: p5 start 458755 is beyond EOD, truncated
[  326.228736][ T7061] loop9: p6 start 16908804 is beyond EOD, truncated
[  326.235074][T13164]  loop9: p1 p2 p3 < > p4 < p5 p6 >
[  326.237224][T13164] loop9: partition table partially beyond EOD, truncated
[  326.240189][T13164] loop9: p1 start 458755 is beyond EOD, truncated
[  326.245945][T13164] loop9: p2 start 16908804 is beyond EOD, truncated
[  326.249394][T13164] loop9: p3 start 4284289 is beyond EOD, truncated
[  326.257159][T13164] loop9: p5 start 458755 is beyond EOD, truncated
[  326.259761][T13164] loop9: p6 start 16908804 is beyond EOD, truncated
[  326.365673][ T7061] udevd[7061]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  326.401950][ T7061] udevd[7061]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory
[  326.433960][T10665] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  326.595700][T10665] usb 9-1: config 0 interface 0 has no altsetting 0
[  326.600776][T10665] usb 9-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[  326.615768][T10665] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.618968][T10665] usb 9-1: Product: syz
[  326.620619][T10665] usb 9-1: Manufacturer: syz
[  326.622484][T10665] usb 9-1: SerialNumber: syz
[  326.638204][T10665] usb 9-1: config 0 descriptor??
[  326.974384][T10665] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22
[  326.988647][T10665] usb 9-1: USB disconnect, device number 17
[  327.017989][ T7061] udevd[7061]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  327.251948][T13189] overlayfs: failed to clone upperpath
[  327.447611][T13195] loop9: detected capacity change from 0 to 512
[  327.521337][T13195] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.585554][T11020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.732643][T13212] loop8: detected capacity change from 0 to 24
[  327.841974][T13216] netlink: 'syz.9.2916': attribute type 10 has an invalid length.
[  327.851264][T13216] macvlan0: entered promiscuous mode
[  327.892492][T13216] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  328.806751][T13252] loop8: detected capacity change from 0 to 256
[  328.885380][T13241] loop9: detected capacity change from 0 to 32768
[  328.935737][T13256] netdevsim netdevsim8 netdevsim0: entered promiscuous mode
[  328.942139][T13256] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  329.023512][T13241] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  329.026244][T13241]   allowing incompatible features above 0.0: (unknown version)
[  329.026269][T13241]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  329.042297][T13241] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  329.050197][T13241] bcachefs (loop9): recovering from clean shutdown, journal seq 10
[  329.052919][T13241] bcachefs (loop9): Version upgrade required:
[  329.052919][T13241] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  329.052919][T13241] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  329.052919][T13241]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  329.095240][T13241] bcachefs (loop9): dropping and reconstructing all alloc info
[  329.139579][T13241] bcachefs (loop9): accounting_read... done
[  329.157133][T13241] bcachefs (loop9): alloc_read... done
[  329.161019][T13241] bcachefs (loop9): snapshots_read... done
[  329.169148][T13241] bcachefs (loop9): check_allocations...
[  329.181158][T13274] ata1.00: invalid cdb length 6
[  329.207533][T13241]  done
[  329.211040][T13241] bcachefs (loop9): going read-write
[  329.213612][T13241] bcachefs (loop9): insufficient writeable journal devices available: have 0, need 1
[  329.213612][T13241] rw journal devs:
[  329.228121][T13241] bcachefs (loop9): done starting filesystem
[  329.359157][T11020] bcachefs (loop9): shutting down
[  329.360873][T11020] bcachefs (loop9): going read-only
[  329.367111][T11020] bcachefs (loop9): finished waiting for writes to stop
[  329.378815][T11020] bcachefs (loop9): flushing journal and stopping allocators, journal seq 10
[  329.383905][T11020] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 10
[  329.388189][T11020] bcachefs (loop9): unclean shutdown complete, journal seq 10
[  329.393338][T11020] bcachefs (loop9): done going read-only, filesystem not clean
[  329.411519][T11020] bcachefs (loop9): shutdown complete
[  329.646808][T13283] loop8: detected capacity change from 0 to 40427
[  329.654008][T13283] F2FS-fs (loop8): Invalid log sectorsize (14)
[  329.656512][T13283] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  329.659706][T13283] F2FS-fs (loop8): build fault injection rate: 14
[  329.662112][T13283] F2FS-fs (loop8): build fault injection type: 0x1dff
[  329.680668][T13283] F2FS-fs (loop8): invalid crc value
[  329.687658][T13283] F2FS-fs (loop8): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4429/0x6ff0
[  329.691352][T13283] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-12)
[  330.040501][T13298] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2949'.
[  330.101591][T13302] loop8: detected capacity change from 0 to 128
[  330.504393][T10665] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  330.654797][T10665] usb 9-1: Using ep0 maxpacket: 32
[  330.658290][T10665] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  330.666521][T10665] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.683333][T10665] usb 9-1: config 0 descriptor??
[  330.718606][T10665] gspca_main: nw80x-2.14.0 probing 055f:d001
[  330.838656][   T33] audit: type=1326 audit(330.724:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13316 comm="syz.5.2957" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  330.846495][   T33] audit: type=1326 audit(330.724:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13316 comm="syz.5.2957" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  330.853319][   T33] audit: type=1326 audit(330.724:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13316 comm="syz.5.2957" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x0
[  331.137739][T13328] loop9: detected capacity change from 0 to 2048
[  331.151478][T13328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  331.649521][T13333] loop9: detected capacity change from 0 to 32768
[  331.696592][T13333] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  331.850344][T11020] (syz-executor,11020,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  331.868231][T11020] ocfs2: Unmounting device (7,9) on (node local)
[  332.116020][T10665] usb 9-1: USB disconnect, device number 18
[  332.773864][ T5869] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  332.899324][T13358] loop8: detected capacity change from 0 to 32768
[  332.911353][T13358] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  332.926883][ T5869] usb 10-1: Using ep0 maxpacket: 8
[  332.930395][T13358] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  332.948058][ T5910] (kworker/u8:4,5910,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  332.950458][   T33] audit: type=1800 audit(332.834:353): pid=13358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2973" name="file1" dev="loop8" ino=17058 res=0 errno=0
[  332.969587][ T5869] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.979503][ T5869] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  332.997569][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  333.027102][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  333.031366][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  333.040027][ T5869] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  333.045787][T10661] ocfs2: Unmounting device (7,8) on (node local)
[  333.048434][ T5869] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  333.083605][ T5869] usb 10-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  333.088639][ T5869] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.091479][ T5869] usb 10-1: Product: syz
[  333.092958][ T5869] usb 10-1: Manufacturer: syz
[  333.099019][ T5869] usb 10-1: SerialNumber: syz
[  333.102552][ T5869] usb 10-1: config 0 descriptor??
[  333.111086][T13356] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  333.131304][ T5869] ati_remote 10-1:0.0: Initializing ati_remote hardware failed.
[  333.138631][ T5869] ati_remote 10-1:0.0: probe with driver ati_remote failed with error -5
[  333.925159][ T7282] usb 10-1: USB disconnect, device number 15
[  334.341554][T13380] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.2981'.
[  335.245706][T13388] loop8: detected capacity change from 0 to 4096
[  335.249330][T13388] ntfs3: Unknown parameter '/dev/ptmx'
[  335.971055][T13413] loop8: detected capacity change from 0 to 4096
[  335.999552][T13413] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  337.057463][T13433] netlink: 'syz.8.3004': attribute type 9 has an invalid length.
[  337.259183][T13446] netlink: 'syz.9.3009': attribute type 210 has an invalid length.
[  337.563136][T13464] loop8: detected capacity change from 0 to 16
[  337.580391][T13464] erofs (device loop8): mounted with root inode @ nid 36.
[  337.596133][T13464] erofs (device loop8): xattr_isize 12 of nid 46 is not supported yet
[  337.744808][T13448] loop9: detected capacity change from 0 to 40427
[  337.750465][T13448] F2FS-fs (loop9): build fault injection rate: 14
[  337.752891][T13448] F2FS-fs (loop9): build fault injection type: 0x3bfe8c
[  337.771762][T13448] F2FS-fs (loop9): invalid crc value
[  337.785298][    C1] F2FS-fs (loop9): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  337.807032][    C1] F2FS-fs (loop9): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  337.877519][T13448] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  337.881098][T13448] F2FS-fs (loop9): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  337.886484][T13448] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  337.902764][T13448] F2FS-fs (loop9): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  337.911541][T13448] F2FS-fs (loop9): inject dquot initialize in f2fs_dquot_initialize of f2fs_create+0x14c/0x5c0
[  337.952575][T11020] syz-executor: attempt to access beyond end of device
[  337.952575][T11020] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  337.966571][T11020] CPU: 1 UID: 0 PID: 11020 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  337.966596][T11020] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  337.966603][T11020] Call Trace:
[  337.966609][T11020]  <TASK>
[  337.966616][T11020]  dump_stack_lvl+0x189/0x250
[  337.966641][T11020]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.966655][T11020]  ? __pfx_queue_work_on+0x10/0x10
[  337.966669][T11020]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  337.966690][T11020]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  337.966718][T11020]  f2fs_handle_critical_error+0x37c/0x540
[  337.966741][T11020]  f2fs_write_end_io+0x886/0xb60
[  337.966767][T11020]  __submit_merged_bio+0x27a/0x6a0
[  337.966792][T11020]  __submit_merged_write_cond+0x255/0x530
[  337.966815][T11020]  f2fs_write_data_pages+0x261d/0x3000
[  337.966855][T11020]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  337.966885][T11020]  ? arch_stack_walk+0xfc/0x150
[  337.966923][T11020]  ? __mod_zone_page_state+0xd7/0x140
[  337.966951][T11020]  ? folios_put_refs+0x560/0x640
[  337.966976][T11020]  ? __lock_acquire+0xab9/0xd20
[  337.967001][T11020]  ? do_raw_spin_lock+0x121/0x290
[  337.967027][T11020]  ? do_raw_spin_unlock+0x4d/0x240
[  337.967042][T11020]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  337.967056][T11020]  do_writepages+0x32e/0x550
[  337.967082][T11020]  ? do_raw_spin_unlock+0x4d/0x240
[  337.967102][T11020]  filemap_fdatawrite+0x199/0x240
[  337.967120][T11020]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  337.967175][T11020]  ? do_raw_spin_unlock+0x4d/0x240
[  337.967195][T11020]  f2fs_sync_dirty_inodes+0x31f/0x830
[  337.967221][T11020]  f2fs_write_checkpoint+0x95a/0x1df0
[  337.967254][T11020]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  337.967303][T11020]  ? kill_f2fs_super+0x298/0x6c0
[  337.967322][T11020]  kill_f2fs_super+0x2c3/0x6c0
[  337.967341][T11020]  ? __pfx_kill_f2fs_super+0x10/0x10
[  337.967353][T11020]  ? radix_tree_delete_item+0x2b6/0x400
[  337.967372][T11020]  ? shrinker_free+0x2ce/0x3e0
[  337.967389][T11020]  deactivate_locked_super+0xbc/0x130
[  337.967408][T11020]  cleanup_mnt+0x425/0x4c0
[  337.967424][T11020]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.967441][T11020]  task_work_run+0x1d4/0x260
[  337.967461][T11020]  ? __pfx_task_work_run+0x10/0x10
[  337.967476][T11020]  ? __x64_sys_umount+0x122/0x160
[  337.967530][T11020]  ? exit_to_user_mode_loop+0x40/0x110
[  337.967552][T11020]  exit_to_user_mode_loop+0xec/0x110
[  337.967569][T11020]  do_syscall_64+0x2bd/0x3b0
[  337.967582][T11020]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.967594][T11020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.967608][T11020]  ? exc_page_fault+0x9f/0xf0
[  337.967622][T11020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.967634][T11020] RIP: 0033:0x7f6ebc18ff57
[  337.967648][T11020] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  337.967660][T11020] RSP: 002b:00007ffdd5bb83f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  337.967675][T11020] RAX: 0000000000000000 RBX: 00007f6ebc211c2d RCX: 00007f6ebc18ff57
[  337.967684][T11020] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd5bb84b0
[  337.967693][T11020] RBP: 00007ffdd5bb84b0 R08: 0000000000000000 R09: 0000000000000000
[  337.967700][T11020] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd5bb9540
[  337.967708][T11020] R13: 00007f6ebc211c2d R14: 000000000005278a R15: 00007ffdd5bb9580
[  337.967729][T11020]  </TASK>
[  337.967736][T11020] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  338.733012][T13494] loop9: detected capacity change from 0 to 736
[  339.035710][T13503] random: crng reseeded on system resumption
[  339.487983][T13512] loop9: detected capacity change from 0 to 128
[  340.668203][T13529] loop9: detected capacity change from 0 to 256
[  340.751722][T13535] loop8: detected capacity change from 0 to 8
[  341.077330][T13552] loop9: detected capacity change from 0 to 164
[  341.092893][T13552] Unable to read rock-ridge attributes
[  341.111173][T13552] Unable to read rock-ridge attributes
[  341.318533][T13564] program syz.8.3062 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  341.566136][T13570] loop8: detected capacity change from 0 to 164
[  341.760550][T13565] loop9: detected capacity change from 0 to 32768
[  341.787431][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3067'.
[  341.842592][T13565] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  341.918559][T13565] XFS (loop9): Ending clean mount
[  341.930062][T13565] XFS (loop9): Quotacheck needed: Please wait.
[  341.989807][T13565] XFS (loop9): Quotacheck: Done.
[  342.232111][T11020] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  342.425021][T13597] overlayfs: failed to clone upperpath
[  342.512395][   T33] audit: type=1326 audit(342.394:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.3074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  342.544205][   T33] audit: type=1326 audit(342.404:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.3074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  342.552550][   T33] audit: type=1326 audit(342.414:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.3074" exe="/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  342.623848][   T33] audit: type=1326 audit(342.414:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.3074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  342.648227][   T33] audit: type=1326 audit(342.414:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13598 comm="syz.5.3074" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  342.860625][T13605] loop8: detected capacity change from 0 to 40427
[  342.873475][T13605] F2FS-fs (loop8): invalid crc value
[  342.938310][T13605] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  342.946146][T13605] F2FS-fs (loop8): Start checkpoint disabled!
[  343.096207][T13605] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  344.132142][T13636] loop8: detected capacity change from 0 to 512
[  344.144002][T13636] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  344.160437][T13636] EXT4-fs (loop8): 1 truncate cleaned up
[  344.163141][T13636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.188282][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.278306][T13643] netlink: 1347 bytes leftover after parsing attributes in process `syz.8.3089'.
[  345.262046][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3096'.
[  345.267416][T13661] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3096'.
[  345.324306][T13663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  345.354095][T13663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  345.378165][T10663] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  345.455618][T13665] loop8: detected capacity change from 0 to 2048
[  345.460704][T13665] UDF-fs: warning (device loop8): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount
[  345.529742][T10663] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.538601][T10663] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  345.550831][T10663] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.557208][T13671] delete_channel: no stack
[  345.561216][T10663] usb 10-1: config 0 descriptor??
[  345.994652][T10663] steelseries 0003:1038:12B6.000B: reserved main item tag 0xd
[  345.997737][T10663] steelseries 0003:1038:12B6.000B: item fetching failed at offset 6/7
[  346.001725][T10663] steelseries 0003:1038:12B6.000B: probe with driver steelseries failed with error -22
[  346.443899][T10665] usb 10-1: USB disconnect, device number 16
[  347.527839][T10663] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  347.676817][T10663] usb 9-1: Using ep0 maxpacket: 16
[  347.684133][T10663] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  347.688475][T10663] usb 9-1: config 0 has no interface number 0
[  347.691001][T10663] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.699148][T10663] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.704966][T10663] usb 9-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  347.709836][T10663] usb 9-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  347.713489][T10663] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.718946][T10663] usb 9-1: config 0 descriptor??
[  347.862743][T13723] loop9: detected capacity change from 0 to 256
[  347.884365][T13723] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  348.111169][   T33] audit: type=1326 audit(347.994:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13720 comm="syz.5.3122" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x0
[  348.364393][T10663] holtek_mouse 0003:04D9:A072.000C: item fetching failed at offset 0/4
[  348.384546][T10663] holtek_mouse 0003:04D9:A072.000C: hid parse failed: -22
[  348.391098][T10663] holtek_mouse 0003:04D9:A072.000C: probe with driver holtek_mouse failed with error -22
[  348.467066][T10665] usb 9-1: USB disconnect, device number 19
[  348.704288][T13731] hugetlbfs: syz.9.3125 (13731): Using mlock ulimits for SHM_HUGETLB is obsolete
[  349.185196][T13740] netlink: 'syz.5.3128': attribute type 1 has an invalid length.
[  349.189447][T13740] netlink: 'syz.5.3128': attribute type 4 has an invalid length.
[  349.192574][T13740] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3128'.
[  349.526434][T13748] loop9: detected capacity change from 0 to 32768
[  349.530494][T13748] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3132 (13748)
[  349.553322][T13748] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  349.557613][T13748] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  349.687197][T13748] BTRFS info (device loop9): enabling ssd optimizations
[  349.689925][T13748] BTRFS info (device loop9): enabling free space tree
[  350.501457][T11020] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  350.764434][T13791] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  350.991461][T13799] loop9: detected capacity change from 0 to 512
[  351.008527][T13800] netlink: 'syz.5.3143': attribute type 2 has an invalid length.
[  351.036118][T13800] sctp: [Deprecated]: syz.5.3143 (pid 13800) Use of struct sctp_assoc_value in delayed_ack socket option.
[  351.036118][T13800] Use struct sctp_sack_info instead
[  351.272271][T13799] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.3146: casefold flag without casefold feature
[  351.277674][T13799] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.3146: couldn't read orphan inode 15 (err -117)
[  351.283821][T13799] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.324491][   T24] Process accounting resumed
[  351.388271][T11020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.408949][T10663] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  351.565378][T10663] usb 9-1: Using ep0 maxpacket: 32
[  351.589666][T13808] loop9: detected capacity change from 0 to 4096
[  351.623849][T13808] ntfs3(loop9): Failed to initialize $Extend/$ObjId.
[  351.654963][T10663] usb 9-1: config 5 has an invalid interface number: 190 but max is 2
[  351.658110][T10663] usb 9-1: config 5 has an invalid interface number: 49 but max is 2
[  351.661165][T10663] usb 9-1: config 5 has no interface number 0
[  351.663484][T10663] usb 9-1: config 5 has no interface number 2
[  351.669869][T10663] usb 9-1: config 5 interface 190 has no altsetting 0
[  351.672519][T10663] usb 9-1: config 5 interface 1 has no altsetting 0
[  351.683023][T10663] usb 9-1: config 5 interface 49 has no altsetting 0
[  351.695057][T10663] usb 9-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=f2.82
[  351.698514][T10663] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.701603][T10663] usb 9-1: Product: syz
[  351.703209][T10663] usb 9-1: Manufacturer: syz
[  351.705228][T10663] usb 9-1: SerialNumber: syz
[  352.359941][T10663] usb 9-1: USB disconnect, device number 20
[  352.916485][T13843] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  352.919209][T13843] comedi comedi3: 8255: I/O port conflict (0x20002,4)
[  352.922765][T13843] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  352.928798][T13843] comedi comedi3: 8255: I/O port conflict (0x5c952398,4)
[  352.931487][T13843] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  352.934718][T13843] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  352.936946][T13843] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  352.939337][T13843] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  352.941423][T13843] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  352.945730][T13843] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffa,4)
[  352.948930][T13843] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  352.951480][T13843] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  353.126536][T13851] loop9: detected capacity change from 0 to 1024
[  353.147082][   T27] hfsplus: b-tree write err: -5, ino 4
[  353.457822][T13855] loop9: detected capacity change from 0 to 32768
[  353.487725][T13855] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  353.505562][T13855] XFS (loop9): Ending clean mount
[  353.510432][T13855] XFS (loop9): Quotacheck needed: Please wait.
[  353.547132][T13855] XFS (loop9): Quotacheck: Done.
[  353.579824][T11020] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  353.941192][   T33] audit: type=1326 audit(353.824:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13877 comm="syz.5.3177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  353.950955][ T5869] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  353.955141][   T33] audit: type=1326 audit(353.824:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13877 comm="syz.5.3177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  353.967991][   T33] audit: type=1326 audit(353.824:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13877 comm="syz.5.3177" exe="/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  353.978144][   T33] audit: type=1326 audit(353.824:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13877 comm="syz.5.3177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  353.987140][   T33] audit: type=1326 audit(353.824:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13877 comm="syz.5.3177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a5af8ec29 code=0x7ffc0000
[  354.043855][   T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  354.116492][ T5869] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  354.120694][ T5869] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  354.124372][ T5869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.129557][ T5869] usb 9-1: config 0 descriptor??
[  354.138574][ T5869] pwc: Askey VC010 type 2 USB webcam detected.
[  354.197392][   T10] usb 10-1: config 0 has an invalid interface number: 64 but max is 0
[  354.201110][   T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  354.205856][   T10] usb 10-1: config 0 has no interface number 0
[  354.210773][   T10] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  354.214717][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.218110][   T10] usb 10-1: Product: syz
[  354.219859][   T10] usb 10-1: Manufacturer: syz
[  354.221808][   T10] usb 10-1: SerialNumber: syz
[  354.233089][   T10] usb 10-1: config 0 descriptor??
[  354.239874][   T10] uvcvideo 10-1:0.64: probe with driver uvcvideo failed with error -22
[  354.446590][   T10] usb 10-1: USB disconnect, device number 17
[  354.542502][ T5869] pwc: recv_control_msg error -32 req 02 val 2b00
[  354.547134][ T5869] pwc: recv_control_msg error -32 req 02 val 2700
[  354.552438][ T5869] pwc: recv_control_msg error -32 req 02 val 2c00
[  354.556852][ T5869] pwc: recv_control_msg error -32 req 04 val 1000
[  354.560008][ T5869] pwc: recv_control_msg error -32 req 04 val 1300
[  354.568070][ T5869] pwc: recv_control_msg error -32 req 04 val 1400
[  354.573840][ T5869] pwc: recv_control_msg error -32 req 02 val 2000
[  354.578647][ T5869] pwc: recv_control_msg error -32 req 02 val 2100
[  354.581872][ T5869] pwc: recv_control_msg error -32 req 04 val 1500
[  354.584378][T13884] netlink: 'syz.5.3180': attribute type 5 has an invalid length.
[  354.587789][ T5869] pwc: recv_control_msg error -32 req 02 val 2500
[  354.587975][T13884] netlink: 'syz.5.3180': attribute type 5 has an invalid length.
[  354.595002][ T5869] pwc: recv_control_msg error -32 req 02 val 2400
[  354.598063][T13884] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3180'.
[  354.803633][ T5869] pwc: recv_control_msg error -71 req 02 val 2900
[  354.811634][ T5869] pwc: recv_control_msg error -71 req 02 val 2800
[  354.815541][ T5869] pwc: recv_control_msg error -71 req 04 val 1100
[  354.820049][ T5869] pwc: recv_control_msg error -71 req 04 val 1200
[  354.834226][ T5869] pwc: Registered as video103.
[  354.838109][ T5869] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input14
[  354.855236][ T5869] usb 9-1: USB disconnect, device number 21
[  355.261828][T13911] loop9: detected capacity change from 0 to 256
[  355.814212][T13932] loop8: detected capacity change from 0 to 1024
[  356.190252][T13938] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  357.325506][ T7282] usb 10-1: new full-speed USB device number 18 using dummy_hcd
[  357.385097][T13958] 9pnet_fd: Insufficient options for proto=fd
[  357.498149][ T7282] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  357.502026][ T7282] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  357.516533][ T7282] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  357.524968][ T5237] Bluetooth: hci2: command tx timeout
[  357.527223][ T7282] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.646092][T13956] loop8: detected capacity change from 0 to 32768
[  357.651438][T13956] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3212 (13956)
[  357.662114][T13956] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  357.669875][T13956] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  357.746337][ T7282] usb 10-1: usb_control_msg returned -32
[  357.754825][ T7282] usbtmc 10-1:16.0: can't read capabilities
[  357.776977][T13956] BTRFS info (device loop8): enabling ssd optimizations
[  357.779831][T13956] BTRFS info (device loop8): enabling free space tree
[  357.855097][T10661] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  358.399295][T13996] loop8: detected capacity change from 0 to 16
[  358.403807][T13996] erofs (device loop8): mounted with root inode @ nid 36.
[  358.478567][T13998] loop8: detected capacity change from 0 to 512
[  358.487301][T13998] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  358.492497][T13998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  358.496446][T13998] System zones: 1-12
[  358.498503][T13998] EXT4-fs (loop8): orphan cleanup on readonly fs
[  358.508442][T13998] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3223: invalid indirect mapped block 12 (level 1)
[  358.520568][   T24] usb 10-1: USB disconnect, device number 18
[  358.537905][T13998] EXT4-fs (loop8): Remounting filesystem read-only
[  358.545837][T13998] EXT4-fs (loop8): 1 truncate cleaned up
[  358.549630][T13998] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  358.556758][T13998] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.3223: error -117 reading directory block
[  358.561582][T13998] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.3223: error -117 reading directory block
[  358.579843][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  358.903838][ T7282] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  359.064374][ T7282] usb 9-1: Using ep0 maxpacket: 32
[  359.074231][ T7282] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  359.078029][ T7282] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  359.105867][ T7282] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  359.123821][ T7282] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.126600][ T7282] usb 9-1: Product: syz
[  359.127957][ T7282] usb 9-1: Manufacturer: syz
[  359.129600][ T7282] usb 9-1: SerialNumber: syz
[  359.141225][ T7282] usb 9-1: config 0 descriptor??
[  359.165132][T14012] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3229'.
[  359.166314][ T7282] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  359.252639][T14017] xfrm0: entered promiscuous mode
[  359.254959][T14017] xfrm0: entered allmulticast mode
[  359.356658][ T5910] usb 9-1: Failed to submit usb control message: -71
[  359.358644][ T7282] usb 9-1: USB disconnect, device number 22
[  359.373901][ T5910] usb 9-1: unable to send the bmi data to the device: -71
[  359.376991][ T5910] usb 9-1: unable to get target info from device
[  359.379556][ T5910] usb 9-1: could not get target info (-71)
[  359.394216][ T5910] usb 9-1: could not probe fw (-71)
[  359.588348][T14025] syz.9.3234 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  360.234488][T14041] loop8: detected capacity change from 0 to 32768
[  360.282631][T14041] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  360.327427][T14041] XFS (loop8): Ending clean mount
[  360.337741][T14041] XFS (loop8): Quotacheck needed: Please wait.
[  360.387789][T14041] XFS (loop8): Quotacheck: Done.
[  360.536803][T10661] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  361.187932][T14097] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3262'.
[  361.406386][T14084] loop8: detected capacity change from 0 to 32768
[  361.419910][T14084] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3251 (14084)
[  361.438412][T14084] BTRFS error: invalid seeding and uuid-changed device detected
[  361.570393][T14108] hugetlbfs: Bad value '' for mount option 'size'
[  361.570393][T14108] 
[  361.760011][T14105] loop9: detected capacity change from 0 to 32768
[  361.770532][T14105] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3266 (14105)
[  361.787128][T14105] BTRFS info (device loop9): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  361.791132][T14105] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[  361.900696][T14105] BTRFS info (device loop9): enabling ssd optimizations
[  361.903493][T14105] BTRFS info (device loop9): enabling free space tree
[  361.908519][T14135] syz_tun: tun_net_xmit 42
[  361.923884][T10665] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  361.986987][T11020] BTRFS info (device loop9): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  362.100468][T10665] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.116090][T10665] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.119728][T10665] usb 9-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  362.141174][T10665] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.157699][T10665] usb 9-1: config 0 descriptor??
[  362.191312][T14144] libceph: resolve '4' (ret=-3): failed
[  362.368429][T14152] loop9: detected capacity change from 0 to 1024
[  362.377557][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3282'.
[  362.597150][T10665] petalynx 0003:18B1:0037.000D: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.8-1/input0
[  362.796489][T10665] usb 9-1: USB disconnect, device number 23
[  362.805881][   T10] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  362.965936][    C0] syz_tun: tun_net_xmit 42
[  362.993999][   T10] usb 10-1: Using ep0 maxpacket: 8
[  363.002184][   T10] usb 10-1: unable to get BOS descriptor or descriptor too short
[  363.012005][   T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  363.019142][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  363.023546][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  363.028268][   T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  363.032538][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  363.038738][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  363.048559][   T10] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  363.052333][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.058174][   T10] usb 10-1: Product: syz
[  363.059955][   T10] usb 10-1: Manufacturer: syz
[  363.061876][   T10] usb 10-1: SerialNumber: syz
[  363.067510][   T10] usb 10-1: config 0 descriptor??
[  363.074369][T14160] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  363.081225][   T10] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  363.196101][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  363.299306][   T10] usb 10-1: USB disconnect, device number 19
[  363.989405][T14195] loop8: detected capacity change from 0 to 4096
[  364.014460][    C0] syz_tun: tun_net_xmit 42
[  364.253175][   T10] kernel read not supported for file /admmidi2 (pid: 10 comm: kworker/0:1)
[  364.597637][T14213] loop8: detected capacity change from 0 to 32768
[  364.602387][T14213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3310 (14213)
[  364.653801][T14213] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  364.657783][T14213] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  364.751324][T14213] BTRFS info (device loop8): rebuilding free space tree
[  364.770882][T14213] BTRFS info (device loop8): enabling ssd optimizations
[  364.773594][T14213] BTRFS info (device loop8): using spread ssd allocation scheme
[  364.778012][T14213] BTRFS info (device loop8): enabling free space tree
[  364.780730][T14213] BTRFS info (device loop8): force clearing of disk cache
[  364.860140][T10661] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  365.231996][T14238] U9: renamed from lo (while UP)
[  365.427217][T14246] loop8: detected capacity change from 0 to 2048
[  365.456342][T14246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.490199][T14251] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  365.540095][T14246] overlayfs: failed to verify upper (/file0, ino=12, err=-28)
[  365.547568][T14246] overlayfs: failed to verify index dir 'upper' xattr
[  365.550116][T14246] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  365.572902][T14253] syz_tun: tun_net_xmit 42
[  365.575873][    C0] syz_tun: tun_net_xmit 42
[  365.577739][    C0] syz_tun: tun_net_xmit 42
[  365.579456][    C0] syz_tun: tun_net_xmit 42
[  365.581237][    C0] syz_tun: tun_net_xmit 42
[  365.582949][    C0] syz_tun: tun_net_xmit 42
[  365.584794][    C0] syz_tun: tun_net_xmit 42
[  365.586611][    C0] syz_tun: tun_net_xmit 42
[  365.588446][    C0] syz_tun: tun_net_xmit 42
[  365.590180][    C0] syz_tun: tun_net_xmit 42
[  365.592131][    C0] syz_tun: tun_net_xmit 42
[  365.593858][    C0] syz_tun: tun_net_xmit 42
[  365.595506][    C0] syz_tun: tun_net_xmit 42
[  365.597146][    C0] syz_tun: tun_net_xmit 42
[  365.598841][    C0] syz_tun: tun_net_xmit 42
[  365.600392][    C0] syz_tun: tun_net_xmit 42
[  365.602331][    C0] syz_tun: tun_net_xmit 42
[  365.604459][    C0] syz_tun: tun_net_xmit 42
[  365.606230][    C0] syz_tun: tun_net_xmit 42
[  365.608206][    C0] syz_tun: tun_net_xmit 42
[  365.610023][    C0] syz_tun: tun_net_xmit 42
[  365.611945][    C0] syz_tun: tun_net_xmit 42
[  365.613922][    C0] syz_tun: tun_net_xmit 42
[  365.615710][    C0] syz_tun: tun_net_xmit 42
[  365.617459][    C0] syz_tun: tun_net_xmit 42
[  365.619416][    C0] syz_tun: tun_net_xmit 42
[  365.621253][    C0] syz_tun: tun_net_xmit 42
[  365.622820][    C0] syz_tun: tun_net_xmit 42
[  365.624398][    C0] syz_tun: tun_net_xmit 42
[  365.626314][    C0] syz_tun: tun_net_xmit 42
[  365.628066][    C0] syz_tun: tun_net_xmit 42
[  365.629849][    C0] syz_tun: tun_net_xmit 42
[  365.631820][    C0] syz_tun: tun_net_xmit 42
[  365.633828][    C0] syz_tun: tun_net_xmit 42
[  365.635767][    C0] syz_tun: tun_net_xmit 42
[  365.637523][    C0] syz_tun: tun_net_xmit 42
[  365.639114][    C0] syz_tun: tun_net_xmit 42
[  365.641036][    C0] syz_tun: tun_net_xmit 42
[  365.642970][    C0] syz_tun: tun_net_xmit 42
[  365.644925][    C0] syz_tun: tun_net_xmit 42
[  365.646791][    C0] syz_tun: tun_net_xmit 42
[  365.648477][    C0] syz_tun: tun_net_xmit 42
[  365.650133][    C0] syz_tun: tun_net_xmit 42
[  365.652050][    C0] syz_tun: tun_net_xmit 42
[  365.653792][    C0] syz_tun: tun_net_xmit 42
[  365.655733][    C0] syz_tun: tun_net_xmit 42
[  365.660796][    C0] syz_tun: tun_net_xmit 42
[  365.662617][    C0] syz_tun: tun_net_xmit 42
[  365.664303][    C0] syz_tun: tun_net_xmit 42
[  365.666176][    C0] syz_tun: tun_net_xmit 42
[  365.667628][    C0] syz_tun: tun_net_xmit 42
[  365.669393][    C0] syz_tun: tun_net_xmit 42
[  365.670936][    C0] syz_tun: tun_net_xmit 42
[  365.672465][    C0] syz_tun: tun_net_xmit 42
[  365.674223][    C0] syz_tun: tun_net_xmit 42
[  365.676041][    C0] syz_tun: tun_net_xmit 42
[  365.677835][    C0] syz_tun: tun_net_xmit 42
[  365.679894][    C0] syz_tun: tun_net_xmit 42
[  365.681385][    C0] syz_tun: tun_net_xmit 42
[  365.683495][    C0] syz_tun: tun_net_xmit 42
[  365.685181][    C0] syz_tun: tun_net_xmit 42
[  365.686579][    C0] syz_tun: tun_net_xmit 42
[  365.688409][    C0] syz_tun: tun_net_xmit 42
[  365.690270][    C0] syz_tun: tun_net_xmit 42
[  365.691889][    C0] syz_tun: tun_net_xmit 42
[  365.694228][    C0] syz_tun: tun_net_xmit 54
[  365.697041][    C0] syz_tun: tun_net_xmit 42
[  365.699025][    C0] syz_tun: tun_net_xmit 42
[  365.700958][    C0] syz_tun: tun_net_xmit 42
[  365.702709][    C0] syz_tun: tun_net_xmit 42
[  365.704265][    C0] syz_tun: tun_net_xmit 42
[  365.705772][    C0] syz_tun: tun_net_xmit 42
[  365.707229][    C0] syz_tun: tun_net_xmit 42
[  365.709210][    C0] syz_tun: tun_net_xmit 42
[  365.710961][    C0] syz_tun: tun_net_xmit 42
[  365.712396][    C0] syz_tun: tun_net_xmit 42
[  365.723995][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.743402][    C1] syz_tun: tun_net_xmit 54
[  365.914195][    C1] syz_tun: tun_net_xmit 54
[  366.637700][T14293] loop8: detected capacity change from 0 to 512
[  366.641716][T14293] EXT4-fs (loop8): Test dummy encryption mode enabled
[  366.654950][T14293] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  366.659994][T14293] EXT4-fs (loop8): Errors on filesystem, clearing orphan list.
[  366.673223][T14293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  366.702112][T14293] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters
[  367.042893][T10661] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.528008][T14304] delete_channel: no stack
[  368.438722][   T10] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  368.517069][T14343] loop9: detected capacity change from 0 to 4096
[  368.529976][T14343] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  368.576321][T14345] netlink: 'syz.5.3359': attribute type 10 has an invalid length.
[  368.602043][   T10] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.609862][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[  368.612311][   T10] usb 9-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  368.618692][T14345] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  368.621673][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.628795][   T10] usb 9-1: config 0 descriptor??
[  369.093897][ T5869] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  369.243987][ T5869] usb 10-1: Using ep0 maxpacket: 32
[  369.247452][   T10] usb 9-1: USB disconnect, device number 24
[  369.249795][ T5869] usb 10-1: config 2 has an invalid interface number: 194 but max is 0
[  369.253444][ T5869] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  369.263245][ T5869] usb 10-1: config 2 has no interface number 0
[  369.265915][ T5869] usb 10-1: config 2 interface 194 altsetting 0 bulk endpoint 0xA has invalid maxpacket 7
[  369.269693][ T5869] usb 10-1: config 2 interface 194 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  369.274950][ T5869] usb 10-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6
[  369.278601][ T5869] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.288343][T14360] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  369.337119][T14362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3367'.
[  369.499560][ T5869] usb 10-1: string descriptor 0 read error: -71
[  369.514830][ T5869] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  369.588769][ T5869] usb 10-1: USB disconnect, device number 20
[  370.638735][T14408] loop8: detected capacity change from 0 to 16
[  370.650063][T14408] erofs (device loop8): mounted with root inode @ nid 36.
[  371.216036][T14412] ip_vti0: Master is either lo or non-ether device
[  371.360772][ T5910] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.370532][ T5910] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.585871][ T5910] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.589000][ T5910] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.701280][ T5910] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.718165][ T5910] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.740851][T14423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  371.850355][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  371.857809][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  371.862983][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  371.867279][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  371.875667][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  371.903426][ T5910] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  371.907927][ T5910] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.112186][T14446] loop9: detected capacity change from 0 to 64
[  372.115868][T14444] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  372.692572][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3417'.
[  372.696146][T14465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3417'.
[  372.699828][T14465] netlink: 'syz.5.3417': attribute type 12 has an invalid length.
[  372.703474][T14465] netlink: 'syz.5.3417': attribute type 11 has an invalid length.
[  372.972042][ T5910] bond0 (unregistering): Released all slaves
[  373.060820][T14468] loop9: detected capacity change from 0 to 512
[  373.074712][T14429] chnl_net:caif_netlink_parms(): no params data found
[  373.083253][T14468] EXT4-fs (loop9): orphan cleanup on readonly fs
[  373.090565][T14468] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13
[  373.103255][T14468] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  373.110778][T14468] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.3418: attempt to clear invalid blocks 2 len 1
[  373.131308][T14468] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3418: invalid indirect mapped block 1819239214 (level 0)
[  373.137602][T14468] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3418: invalid indirect mapped block 1819239214 (level 1)
[  373.143603][T14468] EXT4-fs (loop9): 1 truncate cleaned up
[  373.151297][T14468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  373.467471][T14429] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.470420][T14429] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.473297][T14429] bridge_slave_0: entered allmulticast mode
[  373.480785][T14429] bridge_slave_0: entered promiscuous mode
[  373.490002][T14429] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.492857][T14429] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.497469][T14429] bridge_slave_1: entered allmulticast mode
[  373.501196][T14429] bridge_slave_1: entered promiscuous mode
[  373.523595][ T5910] hsr_slave_0: left promiscuous mode
[  373.532302][ T5910] hsr_slave_1: left promiscuous mode
[  373.556299][ T5910] veth1_macvtap: left promiscuous mode
[  373.559646][ T5910] veth0_macvtap: left promiscuous mode
[  373.562004][ T5910] veth1_vlan: left promiscuous mode
[  373.564666][ T5910] veth0_vlan: left promiscuous mode
[  373.925892][ T5848] Bluetooth: hci0: command tx timeout
[  373.948009][T11020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.159468][T14492] loop9: detected capacity change from 0 to 128
[  374.186065][T14492] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  374.222276][T11020] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  375.082450][T14429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.097953][T14429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.172869][T14429] team0: Port device team_slave_0 added
[  375.216700][T14429] team0: Port device team_slave_1 added
[  375.260201][T14429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.262337][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.286454][T14429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.314935][T14429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.317171][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.325218][T14429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.367817][T14429] hsr_slave_0: entered promiscuous mode
[  375.370665][T14429] hsr_slave_1: entered promiscuous mode
[  375.418309][ T5910] ------------[ cut here ]------------
[  375.420831][ T5910] WARNING: CPU: 0 PID: 5910 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  375.425243][ T5910] Modules linked in:
[  375.427323][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  375.431946][ T5910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  375.436091][ T5910] Workqueue: netns cleanup_net
[  375.438026][ T5910] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  375.440405][ T5910] Code: d8 ab de f7 4b 83 3c 2c 00 75 19 e8 3c 2e 7b f7 49 81 fd f8 07 00 00 74 1d e8 2e 2e 7b f7 49 83 c5 08 eb c9 e8 23 2e 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  375.448078][ T5910] RSP: 0018:ffffc90003a4f8b0 EFLAGS: 00010293
[  375.450557][ T5910] RAX: ffffffff8a447f6d RBX: ffff8880293f8000 RCX: ffff8881080bb980
[  375.453764][ T5910] RDX: 0000000000000000 RSI: ffffffff8d9ba2fc RDI: ffff8880293f8000
[  375.456895][ T5910] RBP: ffffc90003a4f9b0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6
[  375.460041][ T5910] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: ffff8880293f8000
[  375.463136][ T5910] R13: 0000000000000000 R14: ffff88811198c880 R15: dffffc0000000000
[  375.466252][ T5910] FS:  0000000000000000(0000) GS:ffff8880b8613000(0000) knlGS:0000000000000000
[  375.469654][ T5910] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  375.472280][ T5910] CR2: 00007fca116a3ac7 CR3: 000000011696e000 CR4: 00000000000006f0
[  375.475494][ T5910] Call Trace:
[  375.476860][ T5910]  <TASK>
[  375.478063][ T5910]  ops_undo_list+0x49a/0x990
[  375.479921][ T5910]  ? __pfx_ops_undo_list+0x10/0x10
[  375.481944][ T5910]  ? do_raw_spin_unlock+0x4d/0x240
[  375.484058][ T5910]  cleanup_net+0x4c5/0x800
[  375.485790][ T5910]  ? __pfx_cleanup_net+0x10/0x10
[  375.487777][ T5910]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.489815][ T5910]  ? process_scheduled_works+0x9ef/0x17b0
[  375.492136][ T5910]  ? process_scheduled_works+0x9ef/0x17b0
[  375.494494][ T5910]  process_scheduled_works+0xae1/0x17b0
[  375.496591][ T5910]  ? __pfx_process_scheduled_works+0x10/0x10
[  375.498854][ T5910]  worker_thread+0x8a0/0xda0
[  375.500574][ T5910]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  375.502623][ T5910]  ? __kthread_parkme+0x7b/0x200
[  375.504247][ T5910]  kthread+0x711/0x8a0
[  375.505743][ T5910]  ? __pfx_worker_thread+0x10/0x10
[  375.507728][ T5910]  ? __pfx_kthread+0x10/0x10
[  375.508584][T14505] loop9: detected capacity change from 0 to 32768
[  375.509548][ T5910]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.513181][ T5910]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.515045][ T5910]  ? __pfx_kthread+0x10/0x10
[  375.516390][ T5910]  ret_from_fork+0x439/0x7d0
[  375.517799][ T5910]  ? __pfx_ret_from_fork+0x10/0x10
[  375.519522][ T5910]  ? __switch_to_asm+0x39/0x70
[  375.521439][ T5910]  ? __switch_to_asm+0x33/0x70
[  375.523349][ T5910]  ? __pfx_kthread+0x10/0x10
[  375.525322][ T5910]  ret_from_fork_asm+0x1a/0x30
[  375.527148][ T5910]  </TASK>
[  375.528333][ T5910] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  375.531087][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  375.533978][ T5910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  375.537713][ T5910] Workqueue: netns cleanup_net
[  375.539251][ T5910] Call Trace:
[  375.540321][ T5910]  <TASK>
[  375.541335][ T5910]  dump_stack_lvl+0x99/0x250
[  375.543196][ T5910]  ? __asan_memcpy+0x40/0x70
[  375.545046][ T5910]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.547132][ T5910]  ? __pfx__printk+0x10/0x10
[  375.548987][ T5910]  vpanic+0x281/0x750
[  375.550617][ T5910]  ? __pfx__printk+0x10/0x10
[  375.552478][ T5910]  ? __pfx_vpanic+0x10/0x10
[  375.554292][ T5910]  ? is_bpf_text_address+0x292/0x2b0
[  375.556424][ T5910]  panic+0xb9/0xc0
[  375.557927][ T5910]  ? __pfx_panic+0x10/0x10
[  375.559736][ T5910]  __warn+0x31b/0x4b0
[  375.561354][ T5910]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  375.563491][ T5910]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  375.565609][ T5910]  report_bug+0x2be/0x4f0
[  375.567342][ T5910]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  375.569495][ T5910]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  375.571620][ T5910]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  375.573311][ T5910]  handle_bug+0x84/0x160
[  375.574940][ T5910]  exc_invalid_op+0x1a/0x50
[  375.576780][ T5910]  asm_exc_invalid_op+0x1a/0x20
[  375.578486][ T5910] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  375.580565][ T5910] Code: d8 ab de f7 4b 83 3c 2c 00 75 19 e8 3c 2e 7b f7 49 81 fd f8 07 00 00 74 1d e8 2e 2e 7b f7 49 83 c5 08 eb c9 e8 23 2e 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  375.587199][ T5910] RSP: 0018:ffffc90003a4f8b0 EFLAGS: 00010293
[  375.589064][ T5910] RAX: ffffffff8a447f6d RBX: ffff8880293f8000 RCX: ffff8881080bb980
[  375.591513][ T5910] RDX: 0000000000000000 RSI: ffffffff8d9ba2fc RDI: ffff8880293f8000
[  375.594092][ T5910] RBP: ffffc90003a4f9b0 R08: ffffffff8fa3a737 R09: 1ffffffff1f474e6
[  375.596447][ T5910] R10: dffffc0000000000 R11: fffffbfff1f474e7 R12: ffff8880293f8000
[  375.599148][ T5910] R13: 0000000000000000 R14: ffff88811198c880 R15: dffffc0000000000
[  375.601903][ T5910]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  375.603617][ T5910]  ops_undo_list+0x49a/0x990
[  375.605079][ T5910]  ? __pfx_ops_undo_list+0x10/0x10
[  375.606682][ T5910]  ? do_raw_spin_unlock+0x4d/0x240
[  375.608289][ T5910]  cleanup_net+0x4c5/0x800
[  375.609703][ T5910]  ? __pfx_cleanup_net+0x10/0x10
[  375.611297][ T5910]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.612938][ T5910]  ? process_scheduled_works+0x9ef/0x17b0
[  375.614767][ T5910]  ? process_scheduled_works+0x9ef/0x17b0
[  375.616921][ T5910]  process_scheduled_works+0xae1/0x17b0
[  375.619218][ T5910]  ? __pfx_process_scheduled_works+0x10/0x10
[  375.621620][ T5910]  worker_thread+0x8a0/0xda0
[  375.622985][ T5910]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  375.625584][ T5910]  ? __kthread_parkme+0x7b/0x200
[  375.627547][ T5910]  kthread+0x711/0x8a0
[  375.628874][ T5910]  ? __pfx_worker_thread+0x10/0x10
[  375.630877][ T5910]  ? __pfx_kthread+0x10/0x10
[  375.632756][ T5910]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.634835][ T5910]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.636911][ T5910]  ? __pfx_kthread+0x10/0x10
[  375.638802][ T5910]  ret_from_fork+0x439/0x7d0
[  375.640665][ T5910]  ? __pfx_ret_from_fork+0x10/0x10
[  375.642825][ T5910]  ? __switch_to_asm+0x39/0x70
[  375.644741][ T5910]  ? __switch_to_asm+0x33/0x70
[  375.646657][ T5910]  ? __pfx_kthread+0x10/0x10
[  375.648522][ T5910]  ret_from_fork_asm+0x1a/0x30
[  375.650168][ T5910]  </TASK>
[  375.651618][ T5910] Kernel Offset: disabled
[  375.653042][ T5910] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:35:56  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003a4f050
R8 =ffff888107038237 R9 =1ffff11020e07046 R10=dffffc0000000000 R11=ffffffff854fad60
R12=dffffc0000000000 R13=ffffffff99b028db R14=ffffffff99df7460 R15=0000000000000000
RIP=ffffffff854faddc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fca116a3ac7 CR3=000000011696e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f9a5b012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff823c6801 RBX=0000000000000005 RCX=ffffffff823c6903 RDX=0000000000000001
RSI=0000000000000008 RDI=ffff88802878a920 RBP=1ffff110095566e2 RSP=ffffc9000173fde8
R8 =ffff88802878a927 R9 =1ffff110050f1524 R10=dffffc0000000000 R11=ffffed10050f1525
R12=ffff88804aab3710 R13=ffff88802878a920 R14=1ffff110095566e3 R15=ffff88802878a920
RIP=ffffffff823c6907 RFL=00000257 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557f6a0500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6eb2dff000 CR3=00000001228ca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=6c7663616d006e61 6c765f3068746576
XMM02=6567006e616c765f 3168746576006e61 XMM03=0000000000000000 0000000000000000
XMM04=0000000000ff0000 0000000000000000 XMM05=0000000000000000 00007f61fc612e7b
XMM06=0000000000000000 00007f61fc612e75 XMM07=0000000000000000 00007f61fc612e89
XMM08=0000000000000000 00007f61fc612f0f XMM09=0000000000000000 00007f61fc612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
