last executing test programs:

6m20.819101855s ago: executing program 1 (id=190):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x1041}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0x2}}}, 0x10, 0x0}, 0x0)

6m20.587650025s ago: executing program 1 (id=192):
r0 = timerfd_create(0x0, 0x80000)
ppoll(&(0x7f00000001c0)=[{r0, 0x11}], 0x1, 0x0, 0x0, 0x0)
ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000100)=0x4)

6m20.456065169s ago: executing program 1 (id=193):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
readv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {0x0, 0xfffffec6}], 0x2)

6m19.905071197s ago: executing program 1 (id=195):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5505, &(0x7f0000000340)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080))
listxattr(&(0x7f0000006dc0)='./file1\x00', &(0x7f0000006e00)=""/137, 0x89)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

6m19.323856706s ago: executing program 1 (id=213):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f00000001c0)="e4", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)

6m18.466134625s ago: executing program 1 (id=227):
mkdir(0x0, 0xa)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x6}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x7e05}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)

6m18.194835933s ago: executing program 32 (id=227):
mkdir(0x0, 0xa)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x9, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x6}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x7e05}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x6, 0x5, 0xa, 0x0, 0x6, 0x6}}, {0x4}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)

6m13.697706952s ago: executing program 2 (id=258):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"4c2f211ca8e204ee3c99c17567876fb44056f88f36a1ff749375db1d5f06e4cbd6dc1f455c5dd82fd897c743dbaccb159690536ef626071a869503bd04b25141972fd466dcab4d1c1d7c0db16a98e1b97838bc43c622f5781052d04389e120ad2740c1610a8c1b1f0a52b2475e112b44c82c072b12e075ca72148515789fb15990bf5f5edab36f1a02ed51849ad54dfeaa3496bec1d39a54dd913b8bce8ef3f2b0fd7567acb91ad64f7f563f776c9fd26928896b910c8f9d4abacd6481d607d1fef7c495bfa02ee103788a1b824415286df08b69c8092ddce78c51372dfa6932add343dd3fb86d0e17b54c81bf8eb6282a5718f28948d2592e31d4c0e1b7970b75577fd85878e62e74ce31290978fbc5a20670639dbc0f13c41d40a2cf8a1b7a0fadf026c1564015ae05f92ff569721ed575cafd5a17d86a99318226c06ed6b5b09221650216dd551d67cba322ada154e34bdc402f09c256e3fe5a0eea2048e9fa5d75b47b13eb6193b036de2e985b907574f588a790ae4ce68ecfb03f8d770b380faac3d81717080c849c765b738708e38108d290bb5da2173c936072af567b15ffb92b6d43e3735dc461f7c54c24edfd79727d02a2ff03ce19a0715e70812f5dcc415eb5dcf1d51bf605938afefec94292883b92550f1faa0db517ef9dd243ea23a3a2adbfde797d43db209beb6b2853f89e1b2e67aa205e0f51608bcf8a23cc3a1e6c7fa9b15f21666c35ed2ff3b9a8c4038e6aeba036990721315b8e5d39c13c2a888b127d70b7daffc3b987a0b46b7bdaee56fa7a9ca994f6c489f4859cc0bf7b5737ac69c02197e52c98c9e677a0c7d7a976efbeaad9011b08cc64b1ee830467842334f7fff0a473c19659d5883ff2edac567a877fd76fce95e41363316d94ba51e67fbf87e4aed1aa5c0ba30e9b8b7ea1e9e0319e9d1042a128acb41e37b7e7e47dddd87a1f25eefdf85468cfb3d2427f4d62bcf3c62e07ebd8e6fa4c2ebfdb7c091ec10a558060ff828ab54a5b64f7533e2aa664e9a10c7e333b578e89a1f163ef0170110cfc9250ed3d9b7d7881e164754814bb0bb9cfaaaf8fde1b26c85f4ad5493efa9fb54ec8cd2ba1f34b56a5af790f46fb19efcbed0cf500f1b16d59c32f98cca3af2422a37671b6cb2a4da6f391b8ee65fd09112cbd22ba4e87af591aa6c4099152f516b6523f1daff3d9b2049f0a0597f1f657c6e42fd45cce209f2f225d1d32790a2a2480c82a53f4f46705413247bc1c3046434cb2d4e4363019ae0397903584d09ec3ff573139a738911469beea59b866d4911933c053a0bdf181b7c7354f0569b4654fca00976a14f817ed4034bb787933d81e413e622c2987be9239c450a3fc0c368334776fc02347820cb76aa8982530a08cfa95ed5a0627d06a5532b3e8861768f1ba443a0f9174811f4ca4884e9f5c040043b9b17c31ac4ea859bc71806cb094f6d37ddb94994562edd44c0d134026ad394e5afec08db45b8b6ae462f21f8256eb0abe428439a9ec183eb877b1653c124049b5a1eecdef54b370326ca8d929ad18284a0d4725cb878151e468a1a456a285dc62eaea114531ad506927fe5e2b45f5d8e97d20d2af0a1ac294b73a9a3c86b3de01eb901f7cf317bfa3ff961bf4ffcbed663f60111f6fa97d3339ca7b9428b884f4f2f9228fc9c0d27f0cf19d936c5b00aa611a7767677076720f51217181ca00b8849bd1991b4be53f245fec3bca32f3c97e5519d6dd391ab89cbf7292f149e765e4047a752e02cc3f4e5669d08dac2f083179d8a711b09cf4d0c32b283f15a5d97cf2f775f15ff7c7c3ad3c9d555969126d83bfb1f9b1644c829f8858897bf120ab9b6f154f80afdea28d7440a837ee98b662b8e1f28532cece03ff9eb592439847e4759c98ed8950c47443b52950dcc62e22cf32659dc72c3d257783d83cf64371d6a670a1d0bf4b841def6d23cd26d0ae4090c1bf41f44c8316ca4b373af6ca9aea7a95dea3e76643dc5c3eb3f869a92b3936120eac0624a009a748b121853beeefb92bc633b30f862fe131e767d634e7ccab272ed3c66a71024964779c2f5c7982baa689c58ea8eb1a7c46f249f454ad7803d7da4e93a15b55a62f877c07d800ae6ec8d975c9503d6d5e3691497b200c1c968fdeeded26f7b52bfbe9c06c83a8ee6a595fd8e6ebf93978907709163d4390ea0e633293b3403ce115bc9697cc3f960b7d443376b5f07fabbedbbdf261e1cee2f22207eb5777c7be15cda3cddbf2bc8a884c48b8e5b7541a678f70d67ea8d958f7bce591119e64d148b66d098d435fce1edabe5938acaad60c7aacb9d2d80a1c095e751dcc5fc5439da6722824913cf4eb4c2925563fa298203741f9384ed49366ae1c5b5f18a8186f7ffcae0b98f8288ac67ede72cc79325560da6c928213bb41ad17181bb02a8683b6c4cac01ff912ddd47f3ced69cf2d8e594f86ad7d4b31c4c14c5a46e2865703f9d04ae0e4ccf5f6ef99f192377749a6fa74e3473911cede7256a9031bb80286ee153d6e192fac6050b16cfa1795489856ea6bce9d2056d2cad54af63d1aabf95a77c29ad9152a065a4871b8132c78ab48af601521596ce8b65eec127562119d08c323d7655b4311f5ef4639aee0984bc1fdabfe55ca639b39e83c88a9e37d5a7c35495270a04e4a56b3ac54bedb0226a11f8076100211c8d03f0adcd734025f876bcc646d47206b890d54bf5ad405ecd5940ade87491de7717ff8f4593e414db27ada411dc4712c54376d20d35b5e41bf5bc3dc2d682a8d278daa1c9844fd0b91571ede6929845c116d639d38a097aa51dc957900b0bbd11ec9ccbf03341b65c950192097f8e00f67a9b39d223fc50afb627a76191bdf03a2f5be929bdfbffbc87fb0d136f23c941225652f32fce9e9eec549253ac556db33171bdefc60f9bf358646e45058c7df98597e3611b9609d424fcc6f13dced0454edeacd0db95bff28508860c38f21455e80af297fd399a2e684e330f4fceb21ffe2153eeed9dc810c2d8054edc024c27420d436c22174f46492728de35bafb27cea66ed91a0f1bebd38ebbf0d1c8055fc46f4fb5b83f3de1d7acdad33503942737465cb8719e9d28fa270fd9a12d2692f2964b04974a5d0bd89f8831a75bb2d11e5490b84a4a415afc9e8063cfc87054b81c557c66e5177b74b2af6e88532e2d22e3ac2627c3d3e1c790126b5f59b08fb441f0b629c5452a7c28968f52b5e8f2cc208cb463baf4407aa6e136e41a6a58281678b0bce3420d5351232e5f234eaab2a40165ab97fa0aeb985691f4ca22b5a700485ad2aef530fbb33c42f811c882bf29f61bd69bc5a6e8c2fb03c09d3dc9e45802244575f55740b97c171916d949c0783cae1815a88b823f2fd5fa05c3bd26cdc2dd43671326c77fc1d744392ee98bf1711516e1ace6c262d4ba30d6109faeda27919094b3a6e1d4d0d187a0437b4e859695e6d20fca14151320976622e32baae13ac1f65aacf3aa0c6c8fead0c526bb20d94c6cf220607db692369c011e0be3a07e787cb45342f40f9084dc55744565d9d8cc9ced8e384b0983e09f0bcf026ee9596676812d22758886fd2dc0d87f4387949a3ea07cd8203a62c6657b3c699e3dc26a57d6e9fca869b7b99cfce332d9d00cf09d9c678f4137b5c694e45570fc879b6f263d07d43328619da1ec1f4263008b9c88fb8a329dccbbc10918432df90c2a18273b8bde90249cc1c0c75d15cd71c01045228d525dcceb4ae267fb90236b6c6cb6b494d01482dc2b67b9052ee4ad98dcef6a6b9b25b4c763b222a4716f628cbb20b5c1e389640289012b5f6e5bab0337409748af67e119d3ac062b76311d93df70f06808572452ff498611147f89dec88a171d84f8f8e86ecc1222c27a2752e08ba33b47895bfc4d21b3cfb47abcca8d946887e20ee4d1588a3c19e3951b92180a8eb53b031e3e9774c643155f275ae7f39f8b54325f29a413c0c37eba582eeef74a891c6051d1ce79368980fa56881cbba2c3888d0c398029f1b4ff984646e20809111a3eafc008e4c207491d12af6f330804a7e69e77bb5e21905143192a50e1b377b2c91d1f61b9fbe473aaad6fd50c77b622bfc718a72c28ef739e8e3ea3624285de858c2c0e899d1aafa18906f456b1902d26b677965e1d6005774f8037d210662ed778bcd93c44e1de777b391870c7ae94de9d349fb6cb0fa7707ff0893ca7e7f21b7f0a30bce5c6a3a2df35b977fc72a7282d1e68c306bceed74cdd45ebb0de9d46d03d118db59e14339f3e349d7275ae1c438cc26db162a9ec1c4d5f314b4a6cc2e07c71ac057a9f8a2af26427c492da4e33b5a4ba67e1edf689f95142a09325609edf1484d8f78eaf93948bd117aaf6c2f2986dcf97426d3178def4c11ef5b7882d9105d5ae372ad97112d3cf96415c23b2805f14b3c47622768915f0603a8a207d9ba58c2690d3e8d7b368f15e8b97ed3bd374dce66572a17d17b7abf6745e8c6770b5a40f5bb9539b7ecc4fc9d1c7063b42c0e2df0e17274ce82d316e95d345884419826d5fc30602dc09335c52f3eb8339c5f17f62dada91835053fc963ec97b6ef56713d0dd29309035abba0a35cf06c9fc98b875ea0f1f3bfc6e0ccc972a04587611c835a18c6029bca0475c04520e33ff4432370d76c04a5efa6f560f122ecc9dedbd2fbe44ff539df679eab25decb41887d77babbd1e0a73649fcce9fea1230f3adb7c5167c552736850358c1e48fdab26b7ab61a5f284103f1c6f3452cf4fba218f5bbd29fbf6635d58f104ac69762b31ff91cc366b891d5284d1447a624a051557c923ad8d5e8cb57bb46cd95a21af664fa55b2c07b6bab37a6aebe9cefa5cab66775fd92989c36a7f7ef15ac5f7aaa7590ee40f9a8d86d550e40076d6443782fa282b29d6ac2b3536067c71cd43924b12ce92ec3053bdccab1f2c010af4e3c1d5f31d783a669fd80a1f45f5e2228b1e56877f5b57e3f28821888fb1eb054389b3582773160392be0e39f34da19ab69371cdace10ca80bdd0676237d1ee760442600ae88bfd8bb16990434ac46be8358fd64903e45888045ee7c0631681d60fe4e7b2e8ae2c7726fe736f5171d09f615f7ba53ae350b4e3446fd8c5c5b5a8b50c4dbeef0d4271192a4ba7b77ef91ad7b842937d9675b37bea7b5c3e518eb2220bc9f1bf738dfa0d1f56f1f782007047cf735cfbd96de912d48a1250bb86eb6885dce44eec08397d26e713dee723cb9e3fdd3b8d8a82e4ad25027071eebcbcd48ee73d855127e4d2d16ad07c3073568eb57705a91a2ec9c8b6fc036fa0d62cfc8dbf6a77aafa9451c4842fc57e47fd1da2758a48a9ff212864c58abad76a7c69a6a1fdb0ada2423bc69f89ecb04abf82297ca8f645b43450143e18f7b91bb2d13f344d3bfbd15eb68200a51b6a6d4d8efb700eb300c103cb7acc7dda00b3c259739da9dd0ce7b243a40143b0cfb54b61974388a3db6ef358f2c7e50f97f932bbe4ba946c3d7f1bb95804b4f8a905a9ebd97c252af4b232170e8b3ccaa447d8f6aab327e372d0551b1995a13a0a93162f99c684c3a01ac3430aeef5dc0ab3f41efe958ad85001a46f162d4cf6df953856e23cf643762d0c2a43192c40d2e3c5e393fbafda4df1b8b93d354d36095070dcceababa43ee3fd0d1fe5b276a1d0c4ac0b47b1dd7f02fa2184fdc99811bacd90f6e3722af315a5ccf87343ccb42312b48418721ce14535c81f53db361a5114f2f995e1f758860f984906a6f651f3c2ee24ab2f4561086788b17b0534cbf240", 0x1000}}, 0x1006)

6m13.617065151s ago: executing program 2 (id=261):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x16, 0x2060}, 0x20)

6m13.527500555s ago: executing program 2 (id=262):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111b3000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

6m13.466031346s ago: executing program 2 (id=264):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

6m13.319161179s ago: executing program 2 (id=269):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='&'], 0x10)

6m12.955699039s ago: executing program 2 (id=274):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8)
sendmmsg$sock(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="74b17a07", 0x4}], 0x1}}], 0x1, 0x20000000)

6m12.60755553s ago: executing program 33 (id=274):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0x1}, 0x8)
sendmmsg$sock(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000540)="74b17a07", 0x4}], 0x1}}], 0x1, 0x20000000)

6m1.267300045s ago: executing program 0 (id=380):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8)

6m1.26705673s ago: executing program 0 (id=381):
socket(0x22, 0x4, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, 0x0, 0x0)
r6 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10)
recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0)

6m0.305653827s ago: executing program 0 (id=385):
unshare(0x2a020400)
r0 = memfd_create(&(0x7f0000000280)='\x03\x00\x00\x00\x00\x00\x00\x00 ', 0x6)
cachestat(r0, &(0x7f0000000040)={0x4, 0x7fff}, 0x0, 0x0)

6m0.246231852s ago: executing program 0 (id=386):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x2004082, &(0x7f0000000240)={[{@type={'type', 0x3d, "699a1c87"}}, {@gid}, {@umask={'umask', 0x3d, 0x11}}, {@uid}, {@force}, {@force}, {@nls={'nls', 0x3d, 'iso8859-13'}}, {@nobarrier}, {@barrier}, {@nodecompose}]}, 0x47, 0x6f7, &(0x7f00000010c0)="$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")
mount(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x1214040, 0x0)

6m0.175577302s ago: executing program 0 (id=388):
r0 = socket(0x25, 0x5, 0x0)
r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x0)

5m59.997254417s ago: executing program 0 (id=392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x1c, 0x146, 0x0, 0x0, @str='l\xb3\ad\x16b\x80+\xbf\xd1n\xdeb-\xb8\xe3\xef\xf2w\xb3Z\xe2\x88i'}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

5m59.879825692s ago: executing program 34 (id=392):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x1c, 0x146, 0x0, 0x0, @str='l\xb3\ad\x16b\x80+\xbf\xd1n\xdeb-\xb8\xe3\xef\xf2w\xb3Z\xe2\x88i'}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

2m25.15559713s ago: executing program 5 (id=3050):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0xa08802, &(0x7f0000000180)=ANY=[], 0x1, 0x693, &(0x7f0000000ec0)="$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")
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x2)

2m25.096571707s ago: executing program 5 (id=3053):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a6, &(0x7f0000000580)="$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")

2m24.965033429s ago: executing program 5 (id=3057):
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb9}, 0x48)

2m24.964693617s ago: executing program 5 (id=3058):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x2, 0x3a)
syz_open_dev$usbfs(&(0x7f0000000100), 0xf, 0x600000)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$vim2m(&(0x7f0000000340), 0x800000007f, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_io_uring_setup(0x728b, &(0x7f0000000380)={0x0, 0x840d, 0x2, 0x2, 0x37}, 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

2m24.873311398s ago: executing program 5 (id=3060):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

2m24.796142118s ago: executing program 5 (id=3063):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000)

2m8.971913984s ago: executing program 35 (id=3063):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000)

1m12.433834225s ago: executing program 3 (id=3812):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000280)={'fscrypt:', @auto=[0x35, 0x66, 0x33, 0x37, 0x66, 0x39, 0x65, 0x32, 0x34, 0x38, 0x33, 0x34, 0x39, 0x62, 0x30, 0x33]}, &(0x7f00000002c0)={0x0, "d67ea45e05231d08738921fd16b14857f1678d1352410857cbbb0be1c6f9f90d6c82b370e0bd8209a0ce19cec118eb6703bb07d2f0f305fd94f5252e0ac83ada", 0x1d}, 0x48, r0)

1m12.343467663s ago: executing program 3 (id=3813):
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x705, 0xfffffffffffffffb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m11.498274168s ago: executing program 4 (id=3819):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0)

1m11.120524987s ago: executing program 3 (id=3822):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
setresuid(r1, r1, 0x0)
ioctl$sock_bt_hci(r0, 0x400448cb, 0x0)

1m11.120333437s ago: executing program 4 (id=3823):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x25, &(0x7f00000000c0))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

1m11.034201482s ago: executing program 3 (id=3825):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a340000000b0a010100000000000000000700000908000f40000000060c000b4000000000000000060c000b400000000000000002480000001a0a01020000000000000000050000000800024000000000090001"], 0x148}, 0x1, 0x0, 0x0, 0x20085}, 0x2)

1m10.983872837s ago: executing program 3 (id=3826):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0)=0xfffffffe, 0x4)
r1 = syz_usb_connect(0x3, 0x3e, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000d684e120080490303fa60102030109022c0002000000000904fa00000e0100000904000001ff041000090500000000000000080bb679"], 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r2, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}}], 0x1, 0x4000040)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xa2, &(0x7f0000000200)=ANY=[@ANYBLOB="0402009aaa273531b140e25c766511eb303df82f455cf8a6acf68fa42c4c4eabe13d8583ff85c98eb6787e7e8430226400e6d0bbec2ba22bed55f9d7b1a96da9bc3e9a95b351aa5dae0ec8e57298f7825c33f10dd9af17b5a338229da6ffd41976b0077d958184a365a9922fb446b9b0b32cf7dd4d0cb18c5722617384ebb412ffcea763b1edf8c80854841d24a6cb1a1a8eec79185489b1f393284a1f156c0b266094b4562a1bb49c94ac301e9ddbb6dc9b7f6a0d089c8a628d709b8cc7b5fa483cdf2554d37f9222decbed9b38a938f0f8a80c2202bbe2e65568fcb27c743a74e22bc45ba3d0acb53100887d060ca41a76b8f248e2dc61d929735012897d32fcfd34fb1326efab3553838b7563fbd309366262f3eb4696d6d61f08be1c4a"])

1m10.816116868s ago: executing program 4 (id=3827):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@gettaction={0x18, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x2004c080)

1m10.743542336s ago: executing program 4 (id=3828):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000123)
read(r0, 0x0, 0x20)
close(r0)
open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0)

1m10.54319406s ago: executing program 4 (id=3829):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)

1m10.056789274s ago: executing program 6 (id=3831):
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
lseek(r0, 0x40, 0x3)

1m10.056526827s ago: executing program 6 (id=3832):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x78}}, 0x80c4)

1m10.056269432s ago: executing program 6 (id=3833):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0)

1m9.92677577s ago: executing program 6 (id=3834):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00'})
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0xee)
ioctl$UI_DEV_CREATE(r0, 0x5501)

1m9.836447921s ago: executing program 6 (id=3835):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58)
listen(r0, 0x5)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0x23}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
accept4$inet6(r0, 0x0, 0x0, 0x800)

1m4.406271396s ago: executing program 3 (id=3836):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000})

1m0.273756813s ago: executing program 6 (id=3837):
r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)

55.384417467s ago: executing program 4 (id=3838):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xb, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x1, 0xfff, 0x0, 0x5, 0xfffffffe}}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x44080)
syz_io_uring_setup(0x69af, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x1, 0x40000081}, &(0x7f0000000100), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c000}, 0x4044800)

51.692804566s ago: executing program 36 (id=3836):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x4000})

22.14076809s ago: executing program 37 (id=3837):
r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)

0s ago: executing program 38 (id=3838):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0xb, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x1, 0xfff, 0x0, 0x5, 0xfffffffe}}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x44080)
syz_io_uring_setup(0x69af, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x1, 0x40000081}, &(0x7f0000000100), 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c000}, 0x4044800)

kernel console output (not intermixed with test programs):

file0" dev="loop3" ino=6148 res=0 errno=0
[  293.763586][ T6444] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  294.267816][T13400] NILFS (loop3): couldn't find nilfs on the device
[  294.612835][T13409] netlink: 'syz.3.2849': attribute type 1 has an invalid length.
[  294.772977][ T6654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.043227][T13414] set_capacity_and_notify: 1 callbacks suppressed
[  295.043237][T13414] loop3: detected capacity change from 0 to 32768
[  295.097173][T13414] JBD2: Ignoring recovery information on journal
[  295.163276][T13414] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  295.186935][T13414] (syz.3.2852,13414,0):ocfs2_check_dir_entry:338 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1
[  295.207374][T13414] (syz.3.2852,13414,0):ocfs2_prepare_dir_for_insert:4336 ERROR: status = -2
[  295.210964][T13414] (syz.3.2852,13414,0):ocfs2_mknod:302 ERROR: status = -2
[  295.213271][T13414] (syz.3.2852,13414,0):ocfs2_mknod:506 ERROR: status = -2
[  295.219497][T13414] (syz.3.2852,13414,0):ocfs2_create:679 ERROR: status = -2
[  295.253824][ T6444] ocfs2: Unmounting device (7,3) on (node local)
[  295.316076][T13424] loop5: detected capacity change from 0 to 32768
[  295.325340][T13424] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2854 (13424)
[  295.336589][T13424] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.340422][T13424] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  295.422082][T13444] loop3: detected capacity change from 0 to 256
[  295.436567][T13444] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  295.450615][T13424] BTRFS info (device loop5): enabling ssd optimizations
[  295.452813][T13424] BTRFS info (device loop5): turning on async discard
[  295.454926][T13424] BTRFS info (device loop5): enabling free space tree
[  295.457372][T13444] FAT-fs (loop3): bogus number of directory entries (1)
[  295.459567][T13444] FAT-fs (loop3): Can't find a valid FAT filesystem
[  295.534165][ T7048] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.865463][T13451] loop4: detected capacity change from 0 to 32768
[  295.880361][T13451] BTRFS warning: excessive commit interval 4095, use with care
[  295.882809][T13451] btrfs: Unknown parameter 'subj_type'
[  296.179754][T13475] loop3: detected capacity change from 0 to 1024
[  296.183266][T13475] hfsplus: invalid btree flag
[  296.184823][T13475] hfsplus: failed to load catalog file
[  297.014794][T13490] loop4: detected capacity change from 0 to 8
[  297.017945][T13490] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  297.220326][T13492] loop4: detected capacity change from 0 to 2048
[  297.241520][T13492] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.271434][T13483] loop3: detected capacity change from 0 to 40427
[  297.409389][T13483] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  297.412785][T13483] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  297.428647][   T34] audit: type=1800 audit(297.328:57): pid=13483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2875" name="file1" dev="loop3" ino=10 res=0 errno=0
[  297.452586][ T6444] syz-executor: attempt to access beyond end of device
[  297.452586][ T6444] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  297.465754][ T6444] CPU: 1 UID: 0 PID: 6444 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  297.465778][ T6444] Tainted: [L]=SOFTLOCKUP
[  297.465783][ T6444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  297.465790][ T6444] Call Trace:
[  297.465796][ T6444]  <TASK>
[  297.465801][ T6444]  dump_stack_lvl+0xe8/0x150
[  297.465824][ T6444]  f2fs_handle_critical_error+0x37c/0x540
[  297.465877][ T6444]  f2fs_write_end_io+0x886/0xb60
[  297.465910][ T6444]  __submit_merged_bio+0x256/0x650
[  297.465932][ T6444]  __submit_merged_write_cond+0x269/0x530
[  297.465954][ T6444]  f2fs_write_data_pages+0x2806/0x3360
[  297.465996][ T6444]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.466022][ T6444]  ? __lock_acquire+0x6b5/0x2cf0
[  297.466056][ T6444]  ? unwind_next_frame+0xa5/0x23c0
[  297.466070][ T6444]  ? lock_acquire+0x106/0x330
[  297.466085][ T6444]  ? __lock_acquire+0x6b5/0x2cf0
[  297.466109][ T6444]  ? __lock_acquire+0x6b5/0x2cf0
[  297.466128][ T6444]  ? do_raw_spin_lock+0x12b/0x2f0
[  297.466153][ T6444]  ? do_raw_spin_unlock+0x4d/0x210
[  297.466171][ T6444]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.466189][ T6444]  do_writepages+0x32e/0x550
[  297.466215][ T6444]  ? do_raw_spin_unlock+0x4d/0x210
[  297.466235][ T6444]  filemap_fdatawrite+0x1e9/0x2f0
[  297.466254][ T6444]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  297.466304][ T6444]  ? do_raw_spin_unlock+0x4d/0x210
[  297.466324][ T6444]  f2fs_sync_dirty_inodes+0x30e/0x810
[  297.466354][ T6444]  f2fs_write_checkpoint+0x9c6/0x2490
[  297.466389][ T6444]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  297.466442][ T6444]  kill_f2fs_super+0x308/0x710
[  297.466458][ T6444]  ? __pfx_kill_f2fs_super+0x10/0x10
[  297.466488][ T6444]  deactivate_locked_super+0xbc/0x130
[  297.466503][ T6444]  cleanup_mnt+0x437/0x4d0
[  297.466516][ T6444]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.466539][ T6444]  task_work_run+0x1d9/0x270
[  297.466560][ T6444]  ? __pfx_task_work_run+0x10/0x10
[  297.466585][ T6444]  exit_to_user_mode_loop+0xed/0x480
[  297.466598][ T6444]  ? rcu_is_watching+0x15/0xb0
[  297.466615][ T6444]  do_syscall_64+0x2b7/0xf80
[  297.466627][ T6444]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.466639][ T6444]  ? trace_irq_disable+0x37/0x100
[  297.466658][ T6444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.466670][ T6444] RIP: 0033:0x7f1c6619bf17
[  297.466684][ T6444] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  297.466694][ T6444] RSP: 002b:00007ffd3736d848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  297.466708][ T6444] RAX: 0000000000000000 RBX: 00007f1c6620471f RCX: 00007f1c6619bf17
[  297.466716][ T6444] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd3736d900
[  297.466724][ T6444] RBP: 00007ffd3736d900 R08: 00007ffd3736e900 R09: 00000000ffffffff
[  297.466732][ T6444] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd3736e990
[  297.466739][ T6444] R13: 00007f1c6620471f R14: 0000000000048979 R15: 00007ffd3736e9d0
[  297.466770][ T6444]  </TASK>
[  297.466776][ T6444] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  297.777640][T13502] loop5: detected capacity change from 0 to 256
[  297.810765][T13502] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  297.914643][T13507] futex_wake_op: syz.4.2883 tries to shift op by -1; fix this program
[  300.282791][T13555] loop4: detected capacity change from 0 to 2048
[  300.297793][T13555] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.835067][T13569] loop4: detected capacity change from 0 to 40427
[  300.840764][T13569] F2FS-fs (loop4): invalid crc value
[  300.874132][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2918'.
[  300.925078][T13569] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  300.931202][T13569] F2FS-fs (loop4): Start checkpoint disabled!
[  300.935113][T13569] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  300.945646][T13569] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  301.012668][ T1195] kworker/u10:11: attempt to access beyond end of device
[  301.012668][ T1195] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  301.027138][ T1195] CPU: 1 UID: 0 PID: 1195 Comm: kworker/u10:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  301.027153][ T1195] Tainted: [L]=SOFTLOCKUP
[  301.027156][ T1195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  301.027161][ T1195] Workqueue: writeback wb_workfn (flush-7:4)
[  301.027175][ T1195] Call Trace:
[  301.027178][ T1195]  <TASK>
[  301.027182][ T1195]  dump_stack_lvl+0xe8/0x150
[  301.027193][ T1195]  f2fs_handle_critical_error+0x37c/0x540
[  301.027205][ T1195]  f2fs_write_end_io+0x886/0xb60
[  301.027223][ T1195]  __submit_merged_bio+0x256/0x650
[  301.027234][ T1195]  __submit_merged_write_cond+0x269/0x530
[  301.027246][ T1195]  f2fs_write_data_pages+0x2806/0x3360
[  301.027268][ T1195]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  301.027284][ T1195]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  301.027303][ T1195]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  301.027313][ T1195]  ? __lock_acquire+0x6b5/0x2cf0
[  301.027327][ T1195]  ? __lock_acquire+0x6b5/0x2cf0
[  301.027342][ T1195]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  301.027353][ T1195]  do_writepages+0x32e/0x550
[  301.027365][ T1195]  ? reacquire_held_locks+0x104/0x190
[  301.027373][ T1195]  ? writeback_sb_inodes+0x41f/0x1820
[  301.027385][ T1195]  __writeback_single_inode+0x133/0x1230
[  301.027395][ T1195]  ? do_raw_spin_unlock+0x4d/0x210
[  301.027406][ T1195]  writeback_sb_inodes+0x92c/0x1820
[  301.027425][ T1195]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  301.027433][ T1195]  ? do_raw_spin_lock+0x12b/0x2f0
[  301.027457][ T1195]  ? rcu_is_watching+0x15/0xb0
[  301.027470][ T1195]  wb_writeback+0x445/0xad0
[  301.027481][ T1195]  ? queue_io+0x221/0x450
[  301.027492][ T1195]  ? __pfx_wb_writeback+0x10/0x10
[  301.027500][ T1195]  ? do_raw_spin_lock+0x12b/0x2f0
[  301.027515][ T1195]  wb_workfn+0x3f8/0xef0
[  301.027522][ T1195]  ? __lock_acquire+0x6b5/0x2cf0
[  301.027528][ T1195]  ? look_up_lock_class+0x57/0x110
[  301.027545][ T1195]  ? __pfx_wb_workfn+0x10/0x10
[  301.027552][ T1195]  ? finish_task_switch+0x161/0x920
[  301.027564][ T1195]  ? do_raw_spin_lock+0x12b/0x2f0
[  301.027572][ T1195]  ? lock_acquire+0x106/0x330
[  301.027580][ T1195]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  301.027591][ T1195]  ? process_scheduled_works+0xa0f/0x17a0
[  301.027600][ T1195]  ? process_scheduled_works+0xa0f/0x17a0
[  301.027610][ T1195]  ? process_scheduled_works+0xa0f/0x17a0
[  301.027617][ T1195]  ? process_scheduled_works+0xa0f/0x17a0
[  301.027625][ T1195]  process_scheduled_works+0xaec/0x17a0
[  301.027642][ T1195]  ? __pfx_process_scheduled_works+0x10/0x10
[  301.027649][ T1195]  ? do_raw_spin_lock+0x12b/0x2f0
[  301.027661][ T1195]  ? assign_work+0x3d3/0x440
[  301.027671][ T1195]  worker_thread+0x89f/0xd90
[  301.027688][ T1195]  kthread+0x726/0x8b0
[  301.027698][ T1195]  ? __pfx_worker_thread+0x10/0x10
[  301.027706][ T1195]  ? __pfx_kthread+0x10/0x10
[  301.027716][ T1195]  ? _raw_spin_unlock_irq+0x23/0x50
[  301.027733][ T1195]  ? __pfx_kthread+0x10/0x10
[  301.027742][ T1195]  ret_from_fork+0x51b/0xa40
[  301.027752][ T1195]  ? __pfx_ret_from_fork+0x10/0x10
[  301.027758][ T1195]  ? __switch_to+0xc82/0x1410
[  301.027771][ T1195]  ? __pfx_kthread+0x10/0x10
[  301.027780][ T1195]  ret_from_fork_asm+0x1a/0x30
[  301.027813][ T1195]  </TASK>
[  301.027907][ T1195] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  301.524681][T13607] veth1_to_bond: entered promiscuous mode
[  301.529720][T13607] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  301.581031][T13595] loop5: detected capacity change from 0 to 131072
[  301.584659][T13595] F2FS-fs (loop5): Test dummy encryption mode enabled
[  301.588649][T13595] F2FS-fs (loop5): invalid crc value
[  301.595725][ T5844] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  301.616377][T13595] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  301.621734][T13595] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  301.750959][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.754697][ T5844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  301.768105][ T5844] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  301.772210][ T5844] usb 5-1: New USB device found, idVendor=1a34, idProduct=0902, bcdDevice= 0.00
[  301.775015][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.790700][ T5844] usb 5-1: config 0 descriptor??
[  302.009085][ T5844] usbhid 5-1:0.0: can't add hid device: -71
[  302.011025][ T5844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  302.030227][ T5844] usb 5-1: USB disconnect, device number 28
[  302.156622][ T6783] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  302.305654][ T6783] usb 4-1: Using ep0 maxpacket: 8
[  302.311146][ T6783] usb 4-1: config 9 has an invalid interface number: 112 but max is 0
[  302.314537][ T6783] usb 4-1: config 9 has no interface number 0
[  302.317278][ T6783] usb 4-1: config 9 interface 112 has no altsetting 0
[  302.322577][ T6783] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3
[  302.326495][ T6783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.329744][ T6783] usb 4-1: Product: syz
[  302.331621][ T6783] usb 4-1: Manufacturer: syz
[  302.333595][ T6783] usb 4-1: SerialNumber: syz
[  302.340275][ T6783] r8152-cfgselector 4-1: Unknown version 0x0000
[  302.545698][T13636] loop4: detected capacity change from 0 to 1024
[  302.549182][T13636] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38923!=20869)
[  302.558871][ T6783] r8152 4-1:9.112: Expected endpoints are not found
[  302.567529][T13636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  302.574779][ T6783] r8152-cfgselector 4-1: USB disconnect, device number 27
[  302.598136][ T6654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.950254][ T6783] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  303.107371][ T6783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  303.112062][ T6783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.117574][ T6783] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  303.121253][ T6783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.137180][ T6783] usb 5-1: config 0 descriptor??
[  303.560035][ T6783] koneplus 0003:1E7D:2D51.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.4-1/input0
[  303.759454][ T5844] usb 5-1: USB disconnect, device number 29
[  304.038029][T13658] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  304.148388][ T6783] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  304.151939][T13664] loop3: detected capacity change from 0 to 128
[  304.157873][T13664] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  304.162095][T13664] hpfs: filesystem error: improperly stopped
[  304.164290][T13664] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  304.169153][T13664] hpfs: You really don't want any checks? You are crazy...
[  304.171995][T13664] hpfs: hpfs_map_sector(): read error
[  304.174145][T13664] hpfs: code page support is disabled
[  304.177653][T13664] hpfs: hpfs_map_4sectors(): unaligned read
[  304.180487][T13664] hpfs: hpfs_map_4sectors(): unaligned read
[  304.182730][T13664] hpfs: filesystem error: unable to find root dir
[  304.214403][T13666] netlink: 'syz.3.2955': attribute type 11 has an invalid length.
[  304.299905][ T6783] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.304071][ T6783] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  304.308624][ T6783] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  304.312072][ T6783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  304.315191][ T6783] usb 6-1: SerialNumber: syz
[  304.418943][T13672] loop4: detected capacity change from 0 to 32768
[  304.435394][T13672] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  304.448150][T13672] XFS (loop4): Ending clean mount
[  304.454064][T13672] XFS (loop4): Quotacheck needed: Please wait.
[  304.478614][T13672] XFS (loop4): Quotacheck: Done.
[  304.515931][ T6654] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  304.530354][ T6783] usb 6-1: 0:2 : does not exist
[  304.543959][ T6783] usb 6-1: unit 16 not found!
[  304.553243][T13684] sctp: [Deprecated]: syz.3.2959 (pid 13684) Use of struct sctp_assoc_value in delayed_ack socket option.
[  304.553243][T13684] Use struct sctp_sack_info instead
[  304.592147][ T6783] usb 6-1: USB disconnect, device number 26
[  304.619221][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  305.025653][ T5844] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  305.187084][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  305.190642][ T5844] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  305.194742][ T5844] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  305.200748][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.206550][ T5844] usb 4-1: config 0 descriptor??
[  305.208621][T13698] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  305.318339][T13719] loop5: detected capacity change from 0 to 1024
[  305.327142][T13719] EXT4-fs: inline encryption not supported
[  305.366746][T13719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.458060][T13698] loop3: detected capacity change from 0 to 8
[  305.783938][ T5844] microsoft 0003:045E:009D.0017: hidraw0: USB HID vff.fa Device [HID 045e:009d] on usb-dummy_hcd.3-1/input0
[  305.789318][ T5844] microsoft 0003:045E:009D.0017: no inputs found
[  305.791458][ T5844] microsoft 0003:045E:009D.0017: could not initialize ff, continuing anyway
[  305.929908][ T5844] usb 4-1: USB disconnect, device number 28
[  306.012044][T13734] loop4: detected capacity change from 0 to 32768
[  306.014920][T13734] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2979 (13734)
[  306.020613][T13734] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  306.023739][T13734] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  306.156925][T13734] BTRFS info (device loop4): enabling ssd optimizations
[  306.159639][T13734] BTRFS info (device loop4): turning on async discard
[  306.162317][T13734] BTRFS info (device loop4): enabling free space tree
[  306.336733][ T7048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.715936][ T6783] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  306.848477][ T6654] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  306.907337][ T6783] usb 6-1: Using ep0 maxpacket: 32
[  306.910763][ T6783] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  306.913297][ T6783] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  306.924077][ T6783] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  306.926748][T13767] loop3: detected capacity change from 0 to 4096
[  306.928641][ T6783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  306.933386][ T6783] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  306.936730][ T6783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024
[  306.940432][ T6783] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  306.944351][ T6783] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  306.958714][ T6783] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  306.962101][ T6783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.967377][ T6783] usb 6-1: config 0 descriptor??
[  306.970171][T13753] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  306.997226][T13767] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  307.123545][T13767] overlayfs: upper fs does not support tmpfile.
[  307.137653][T13767] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  307.141105][T13767] overlayfs: failed to set uuid (/file0, err=-22); falling back to uuid=null.
[  307.144685][T13767] overlayfs: failed to verify upper root origin
[  307.218434][ T1195] ntfs3(loop3): ino=9, ntfs3_write_inode failed, -22.
[  307.220934][ T6444] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22.
[  307.221608][ T6783] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  307.288783][T13777] loop4: detected capacity change from 0 to 512
[  307.306077][T13777] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  307.317172][T13777] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  307.320723][T13777] EXT4-fs (loop4): orphan cleanup on readonly fs
[  307.322729][T13777] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  307.325754][T13777] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  307.330216][T13777] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  307.346786][T13777] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2990: bg 0: block 40: padding at end of block bitmap is not set
[  307.358144][T13777] EXT4-fs (loop4): Remounting filesystem read-only
[  307.360496][T13777] EXT4-fs (loop4): 1 truncate cleaned up
[  307.378380][T13777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  307.404277][    C0] usblp0: nonzero read bulk status received: -71
[  307.409696][T13753] usblp0: error -71 reading from printer
[  307.413824][    C0] usblp0: nonzero read bulk status received: -71
[  307.418617][ T6783] usb 6-1: USB disconnect, device number 27
[  307.428843][ T6783] usblp0: removed
[  307.445939][ T6654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.513946][T13788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2994'.
[  307.528281][T13790] loop3: detected capacity change from 0 to 2048
[  307.562061][T13790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.648100][T13798] netlink: 'syz.4.2998': attribute type 1 has an invalid length.
[  307.655635][T13798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.772138][T13804] loop4: detected capacity change from 0 to 128
[  307.875725][ T6783] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  308.019649][T13806] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  308.022338][T13806] FAT-fs (loop4): Filesystem has been set read-only
[  308.245639][ T6783] usb 4-1: Using ep0 maxpacket: 32
[  308.279162][T13816] IPv6: NLM_F_CREATE should be specified when creating new route
[  308.310835][T13790] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2996: bg 0: block 345: padding at end of block bitmap is not set
[  308.321974][T13790] EXT4-fs (loop3): Remounting filesystem read-only
[  308.326768][   T26] EXT4-fs warning (device loop3): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  308.435446][ T6783] usb 4-1: unable to get BOS descriptor or descriptor too short
[  308.439018][ T6783] usb 4-1: unable to read config index 0 descriptor/start: -71
[  308.441983][ T6783] usb 4-1: can't read configurations, error -71
[  308.704869][   T34] audit: type=1326 audit(308.598:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13829 comm="syz.4.3012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x50000
[  308.711373][   T34] audit: type=1326 audit(308.598:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13829 comm="syz.4.3012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x50000
[  308.718144][   T34] audit: type=1326 audit(308.598:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13829 comm="syz.4.3012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x50000
[  308.724624][   T34] audit: type=1326 audit(308.598:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13829 comm="syz.4.3012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x50000
[  308.732049][   T34] audit: type=1326 audit(308.598:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13829 comm="syz.4.3012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x50000
[  308.739462][   T34] audit: type=1326 audit(308.598:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13829 comm="syz.4.3012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x50000
[  308.746554][   T34] audit: type=1326 audit(308.598:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13829 comm="syz.4.3012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x50000
[  308.754503][   T34] audit: type=1326 audit(308.598:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13829 comm="syz.4.3012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x50000
[  308.762583][   T34] audit: type=1326 audit(308.598:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13829 comm="syz.4.3012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x50000
[  309.042623][ T6444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.439851][T13837] loop5: detected capacity change from 0 to 2048
[  309.469228][T13837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  309.736584][T13844] io-wq is not configured for unbound workers
[  310.892014][T13858] loop5: detected capacity change from 0 to 2048
[  310.953522][T13858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.053404][ T7048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.341093][T13889] loop3: detected capacity change from 0 to 32768
[  312.367484][T13889] JBD2: Ignoring recovery information on journal
[  312.423349][T13896] loop5: detected capacity change from 0 to 512
[  312.431181][   T34] kauditd_printk_skb: 13080 callbacks suppressed
[  312.431190][   T34] audit: type=1326 audit(312.328:13147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x7ffc0000
[  312.432745][T13889] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  312.436737][T13895] loop4: detected capacity change from 0 to 128
[  312.447893][   T34] audit: type=1326 audit(312.328:13148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f81ffd9acb9 code=0x7ffc0000
[  312.455071][   T34] audit: type=1326 audit(312.328:13149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f81ffd9aa22 code=0x7ffc0000
[  312.464110][T13896] EXT4-fs: Ignoring removed bh option
[  312.470515][T13896] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  312.488758][T13896] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3037: Invalid block bitmap block 0 in block_group 0
[  312.498688][   T34] audit: type=1326 audit(312.328:13150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f81ffd5b58e code=0x7ffc0000
[  312.505181][T13889] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71
[  312.506753][   T34] audit: type=1326 audit(312.338:13151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f81ffd9aae7 code=0x7ffc0000
[  312.518212][T13889] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  312.520201][   T34] audit: type=1326 audit(312.338:13152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f81ffd5b58e code=0x7ffc0000
[  312.523054][T13889] OCFS2: File system is now read-only.
[  312.523062][T13889] (syz.3.3035,13889,0):ocfs2_reserve_suballoc_bits:857 ERROR: status = -30
[  312.531346][   T34] audit: type=1326 audit(312.338:13153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81ffd9a94b code=0x7ffc0000
[  312.543700][T13896] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  312.545232][   T34] audit: type=1326 audit(312.358:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f81ffd5b58e code=0x7ffc0000
[  312.550594][T13896] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.3037: attempt to clear invalid blocks 983261 len 1
[  312.559868][T13889] (syz.3.3035,13889,0):ocfs2_reserve_cluster_bitmap_bits:1140 ERROR: status = -30
[  312.563673][   T34] audit: type=1326 audit(312.358:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f81ffd5b58e code=0x7ffc0000
[  312.563700][   T34] audit: type=1326 audit(312.358:13156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13894 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f81ffd99b97 code=0x7ffc0000
[  312.582433][T13896] EXT4-fs error (device loop5): __ext4_get_inode_loc:4829: comm syz.5.3037: Invalid inode table block 0 in block_group 0
[  312.599615][T13900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  312.601027][T13896] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6297: Corrupt filesystem
[  312.619283][T13889] (syz.3.3035,13889,0):ocfs2_reserve_clusters_with_limit:1209 ERROR: status = -30
[  312.623268][T13896] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  312.629989][T13900] batman_adv: batadv0: Removing interface: batadv_slave_0
[  312.638024][T13896] EXT4-fs error (device loop5): __ext4_get_inode_loc:4829: comm syz.5.3037: Invalid inode table block 0 in block_group 0
[  312.646827][T13889] (syz.3.3035,13889,0):ocfs2_reserve_clusters_with_limit:1222 ERROR: status = -30
[  312.655817][T13896] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6297: Corrupt filesystem
[  312.659210][T13896] EXT4-fs error (device loop5): ext4_truncate:4634: inode #11: comm syz.5.3037: mark_inode_dirty error
[  312.662848][T13889] (syz.3.3035,13889,0):ocfs2_block_group_alloc:680 ERROR: status = -30
[  312.667424][T13901] erspan0: entered promiscuous mode
[  312.667716][T13896] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  312.670984][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3039'.
[  312.672154][T13889] (syz.3.3035,13889,0):ocfs2_block_group_alloc:765 ERROR: status = -30
[  312.678254][T13896] EXT4-fs error (device loop5): __ext4_get_inode_loc:4829: comm syz.5.3037: Invalid inode table block 0 in block_group 0
[  312.682392][T13889] (syz.3.3035,13889,0):ocfs2_reserve_suballoc_bits:840 ERROR: status = -30
[  312.686551][T13896] EXT4-fs (loop5): 1 truncate cleaned up
[  312.690017][T13889] (syz.3.3035,13889,0):ocfs2_reserve_suballoc_bits:857 ERROR: status = -30
[  312.693378][T13896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.697646][T13889] (syz.3.3035,13889,0):ocfs2_reserve_new_metadata_blocks:997 ERROR: status = -30
[  312.705110][T13889] (syz.3.3035,13889,0):ocfs2_reserve_new_metadata_blocks:1020 ERROR: status = -30
[  312.709411][T13889] (syz.3.3035,13889,0):ocfs2_expand_inline_dir:2868 ERROR: status = -30
[  312.712348][T13889] (syz.3.3035,13889,0):ocfs2_extend_dir:3232 ERROR: status = -30
[  312.714979][T13889] (syz.3.3035,13889,0):ocfs2_prepare_dir_for_insert:4350 ERROR: status = -30
[  312.717961][T13889] (syz.3.3035,13889,0):ocfs2_mknod:302 ERROR: status = -30
[  312.720319][T13889] (syz.3.3035,13889,0):ocfs2_mknod:506 ERROR: status = -30
[  312.725305][T13889] (syz.3.3035,13889,0):ocfs2_create:679 ERROR: status = -30
[  312.753404][ T7048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.768339][T13889] syz.3.3035 (13889) used greatest stack depth: 18040 bytes left
[  312.816581][ T6444] ocfs2: Unmounting device (7,3) on (node local)
[  312.821200][T13903] 
[  312.971111][T13918] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3042'.
[  313.011889][T13921] loop3: detected capacity change from 0 to 16
[  313.024497][T13921] erofs (device loop3): mounted with root inode @ nid 36.
[  313.037556][T13921] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[  313.051208][T13921] erofs (device loop3): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851
[  313.054360][T13921] erofs (device loop3): read error -117 @ 43 of nid 36
[  313.059177][T13924] loop5: detected capacity change from 0 to 1024
[  313.080568][T13924] hfsplus: cannot replace xattr
[  313.153096][T13933] loop5: detected capacity change from 0 to 128
[  313.168751][T13933] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  313.187551][T13933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  313.196268][T13933] UDF-fs: error (device loop5): udf_read_inode: (ino 87) failed !bh
[  313.198861][T13933] UDF-fs: error (device loop5): udf_fill_super: Error in udf_iget, block=3, partition=0
[  313.776134][ T5844] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  313.955627][ T5844] usb 5-1: Using ep0 maxpacket: 16
[  313.958964][ T5844] usb 5-1: config 0 interface 0 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  313.963095][ T5844] usb 5-1: config 0 interface 0 has no altsetting 0
[  313.968717][ T5844] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba
[  313.971630][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.974226][ T5844] usb 5-1: Product: syz
[  313.976114][ T5844] usb 5-1: Manufacturer: syz
[  313.977982][ T5844] usb 5-1: SerialNumber: syz
[  313.981145][ T5844] usb 5-1: config 0 descriptor??
[  313.986347][ T5844] hub 5-1:0.0: bad descriptor, ignoring hub
[  313.988746][ T5844] hub 5-1:0.0: probe with driver hub failed with error -5
[  313.992847][ T5844] usb 5-1: selecting invalid altsetting 0
[  313.994933][ T5844] usb 5-1: can't set first interface for hiFace device.
[  313.997841][ T5844] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5
[  314.138368][T13962] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3067'.
[  314.286522][ T5844] usb 5-1: USB disconnect, device number 30
[  314.800518][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3069'.
[  315.094389][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3076'.
[  315.180501][T13984] netlink: 'syz.4.3077': attribute type 2 has an invalid length.
[  316.871331][T14008] netlink: 'syz.3.3087': attribute type 4 has an invalid length.
[  316.878336][T14008] netlink: 'syz.3.3087': attribute type 4 has an invalid length.
[  317.951631][T14021] openvswitch: netlink: Missing key (keys=40, expected=80)
[  318.223615][T14029] loop3: detected capacity change from 0 to 32768
[  318.245218][T14029] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3096 (14029)
[  318.274233][T14029] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  318.282554][T14029] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm
[  318.427082][T14029] BTRFS info (device loop3): enabling ssd optimizations
[  318.429997][T14029] BTRFS info (device loop3): turning on async discard
[  318.432707][T14029] BTRFS info (device loop3): enabling free space tree
[  318.530794][ T6444] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  319.196118][ T5844] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  319.357786][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  319.361413][ T5844] usb 4-1: config 1 has no interface number 0
[  319.363980][ T5844] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  319.368547][ T5844] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  319.372941][ T5844] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  319.380340][ T5844] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  319.384614][ T5844] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  319.391455][ T5844] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  319.395100][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.398542][ T5844] usb 4-1: Product: syz
[  319.400420][ T5844] usb 4-1: Manufacturer: syz
[  319.402339][ T5844] usb 4-1: SerialNumber: syz
[  319.407989][T14071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  319.620474][T14071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  319.831508][T14071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  320.256437][T14071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  320.260671][ T5844] cdc_ncm 4-1:1.1: bind() failure
[  320.473094][ T5844] usb 4-1: USB disconnect, device number 31
[  321.785698][ T5844] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  321.935651][ T5844] usb 5-1: Using ep0 maxpacket: 32
[  321.939147][ T5844] usb 5-1: config 0 has an invalid interface number: 74 but max is 1
[  321.941779][ T5844] usb 5-1: config 0 has no interface number 1
[  321.954143][ T5844] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  321.965791][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.968577][ T5844] usb 5-1: Product: syz
[  321.977682][ T5844] usb 5-1: Manufacturer: syz
[  321.981825][ T5844] usb 5-1: SerialNumber: syz
[  321.989780][ T5844] usb 5-1: config 0 descriptor??
[  321.994073][T14137] netlink: 65173 bytes leftover after parsing attributes in process `syz.3.3138'.
[  322.011844][ T5844] snd-usb-audio 5-1:0.74: probe with driver snd-usb-audio failed with error -22
[  322.034860][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  322.203414][ T6783] usb 5-1: USB disconnect, device number 31
[  322.238188][ T1368] ieee802154 phy0 wpan0: encryption failed: -22
[  322.240723][ T1368] ieee802154 phy1 wpan1: encryption failed: -22
[  322.755286][   T34] kauditd_printk_skb: 9 callbacks suppressed
[  322.755302][   T34] audit: type=1326 audit(322.648:13166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.4.3141" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81ffd9acb9 code=0x0
[  323.158423][T14147] loop3: detected capacity change from 0 to 32768
[  323.186029][T14147] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  323.202365][T14147] XFS (loop3): Ending clean mount
[  323.205338][T14147] XFS (loop3): Quotacheck needed: Please wait.
[  323.236085][T14147] XFS (loop3): Quotacheck: Done.
[  323.252436][   T34] audit: type=1804 audit(323.148:13167): pid=14147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3142" name="/newroot/925/file0/file0/file0" dev="loop3" ino=9284 res=1 errno=0
[  323.284071][ T6444] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  323.558022][T14165] loop3: detected capacity change from 0 to 256
[  323.563341][T14165] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x6e42ab80, utbl_chksum : 0xe619d30d)
[  323.736853][T14173] xt_l2tp: v2 tid > 0xffff: 262144
[  323.777206][T14175] loop4: detected capacity change from 0 to 512
[  323.812475][T14175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  323.827827][T14175] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3151: bg 0: block 360: padding at end of block bitmap is not set
[  323.839725][T14175] Quota error (device loop4): write_blk: dquota write failed
[  323.843063][T14175] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  323.848267][T14175] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3151: Failed to acquire dquot type 0
[  323.887783][ T6654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  323.929284][T14180] netlink: 'syz.4.3152': attribute type 39 has an invalid length.
[  323.947125][ T5844] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  324.105708][ T5844] usb 4-1: Using ep0 maxpacket: 16
[  324.109511][ T5844] usb 4-1: config 0 has an invalid interface number: 60 but max is 0
[  324.112786][ T5844] usb 4-1: config 0 has no interface number 0
[  324.117494][ T5844] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a
[  324.121173][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.124434][ T5844] usb 4-1: Product: syz
[  324.127536][ T5844] usb 4-1: Manufacturer: syz
[  324.129416][ T5844] usb 4-1: SerialNumber: syz
[  324.135260][ T5844] usb 4-1: config 0 descriptor??
[  324.148432][ T5844] gspca_main: spca500-2.14.0 probing 046d:0900
[  324.249104][T14184] netlink: 'syz.4.3154': attribute type 9 has an invalid length.
[  324.369060][ T5844] gspca_spca500: reg write: error -71
[  324.377084][ T5844] gspca_spca500: reg write: error -71
[  324.385683][ T5844] gspca_spca500: reg write: error -71
[  324.388514][ T5844] gspca_spca500: reg write: error -71
[  324.391510][ T5844] gspca_spca500: reg write: error -71
[  324.393948][ T5844] gspca_spca500: reg write: error -71
[  324.397958][ T5844] gspca_spca500: reg write: error -71
[  324.400442][ T5844] gspca_spca500: reg write: error -71
[  324.403106][ T5844] gspca_spca500: reg write: error -71
[  324.405457][ T5844] gspca_spca500: reg write: error -71
[  324.407859][ T5844] gspca_spca500: reg write: error -71
[  324.410636][ T5844] gspca_spca500: reg write: error -71
[  324.413198][ T5844] gspca_spca500: reg write: error -71
[  324.420767][ T5844] gspca_spca500: reg write: error -71
[  324.440167][ T5844] usb 4-1: USB disconnect, device number 32
[  324.511811][T14191] loop4: detected capacity change from 0 to 256
[  324.519169][T14191] exfat: Deprecated parameter 'utf8'
[  324.521030][T14191] exfat: Deprecated parameter 'utf8'
[  324.528783][T14191] exfat: Deprecated parameter 'utf8'
[  324.535461][T14191] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  324.772549][T14193] loop4: detected capacity change from 0 to 40427
[  324.788966][T14193] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0)
[  324.791592][T14193] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  324.800952][T14193] F2FS-fs (loop4): invalid crc value
[  324.838783][T14193] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  324.842584][T14193] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  324.844757][T14193] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  324.879899][ T6654] syz-executor: attempt to access beyond end of device
[  324.879899][ T6654] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  324.895706][ T6654] CPU: 1 UID: 0 PID: 6654 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  324.895731][ T6654] Tainted: [L]=SOFTLOCKUP
[  324.895736][ T6654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  324.895772][ T6654] Call Trace:
[  324.895778][ T6654]  <TASK>
[  324.895784][ T6654]  dump_stack_lvl+0xe8/0x150
[  324.895808][ T6654]  f2fs_handle_critical_error+0x37c/0x540
[  324.895832][ T6654]  f2fs_write_end_io+0x886/0xb60
[  324.895864][ T6654]  __submit_merged_bio+0x256/0x650
[  324.895885][ T6654]  f2fs_submit_page_write+0xd62/0x2190
[  324.895923][ T6654]  do_write_page+0x40f/0xac0
[  324.895938][ T6654]  ? f2fs_encrypt_one_page+0xaf/0x930
[  324.895958][ T6654]  f2fs_outplace_write_data+0x11a/0x220
[  324.895974][ T6654]  f2fs_do_write_data_page+0x118b/0x16e0
[  324.896007][ T6654]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  324.896030][ T6654]  ? __lock_acquire+0x6b5/0x2cf0
[  324.896049][ T6654]  f2fs_write_single_data_page+0xae7/0x16d0
[  324.896079][ T6654]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  324.896110][ T6654]  ? folio_clear_dirty_for_io+0x573/0x710
[  324.896127][ T6654]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  324.896145][ T6654]  f2fs_write_data_pages+0x1ac1/0x3360
[  324.896189][ T6654]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  324.896218][ T6654]  ? css_rstat_updated+0x23a/0x530
[  324.896254][ T6654]  ? rcu_is_watching+0x15/0xb0
[  324.896271][ T6654]  ? mod_memcg_lruvec_state+0x1b8/0x320
[  324.896305][ T6654]  ? __lock_acquire+0x6b5/0x2cf0
[  324.896320][ T6654]  ? folios_put_refs+0x591/0x680
[  324.896351][ T6654]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  324.896369][ T6654]  do_writepages+0x32e/0x550
[  324.896392][ T6654]  ? do_raw_spin_unlock+0x4d/0x210
[  324.896414][ T6654]  filemap_fdatawrite+0x1e9/0x2f0
[  324.896435][ T6654]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  324.896485][ T6654]  ? do_raw_spin_unlock+0x4d/0x210
[  324.896503][ T6654]  f2fs_sync_dirty_inodes+0x30e/0x810
[  324.896532][ T6654]  f2fs_write_checkpoint+0x9c6/0x2490
[  324.896565][ T6654]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  324.896616][ T6654]  kill_f2fs_super+0x308/0x710
[  324.896633][ T6654]  ? __pfx_kill_f2fs_super+0x10/0x10
[  324.896662][ T6654]  deactivate_locked_super+0xbc/0x130
[  324.896676][ T6654]  cleanup_mnt+0x437/0x4d0
[  324.896688][ T6654]  ? _raw_spin_unlock_irq+0x23/0x50
[  324.896709][ T6654]  task_work_run+0x1d9/0x270
[  324.896728][ T6654]  ? __pfx_task_work_run+0x10/0x10
[  324.896783][ T6654]  exit_to_user_mode_loop+0xed/0x480
[  324.896797][ T6654]  ? rcu_is_watching+0x15/0xb0
[  324.896815][ T6654]  do_syscall_64+0x2b7/0xf80
[  324.896826][ T6654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.896838][ T6654]  ? trace_irq_disable+0x37/0x100
[  324.896857][ T6654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.896868][ T6654] RIP: 0033:0x7f81ffd9bf17
[  324.896881][ T6654] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  324.896893][ T6654] RSP: 002b:00007fff1f57c5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  324.896908][ T6654] RAX: 0000000000000000 RBX: 00007f81ffe0471f RCX: 00007f81ffd9bf17
[  324.896917][ T6654] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1f57c690
[  324.896924][ T6654] RBP: 00007fff1f57c690 R08: 00007fff1f57d690 R09: 00000000ffffffff
[  324.896932][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1f57d720
[  324.896940][ T6654] R13: 00007f81ffe0471f R14: 000000000004f494 R15: 00007fff1f57d760
[  324.896962][ T6654]  </TASK>
[  324.896967][ T6654] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  325.019085][ T6654] syz-executor: attempt to access beyond end of device
[  325.019085][ T6654] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  325.023357][ T6654] CPU: 1 UID: 0 PID: 6654 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  325.023370][ T6654] Tainted: [L]=SOFTLOCKUP
[  325.023373][ T6654] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  325.023378][ T6654] Call Trace:
[  325.023382][ T6654]  <TASK>
[  325.023386][ T6654]  dump_stack_lvl+0xe8/0x150
[  325.023401][ T6654]  f2fs_handle_critical_error+0x37c/0x540
[  325.023416][ T6654]  f2fs_write_end_io+0x886/0xb60
[  325.023436][ T6654]  __submit_merged_bio+0x256/0x650
[  325.023448][ T6654]  __submit_merged_write_cond+0x269/0x530
[  325.023460][ T6654]  f2fs_write_single_data_page+0x1216/0x16d0
[  325.023478][ T6654]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  325.023495][ T6654]  ? folio_clear_dirty_for_io+0x573/0x710
[  325.023507][ T6654]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  325.023517][ T6654]  f2fs_write_data_pages+0x1ac1/0x3360
[  325.023542][ T6654]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  325.023558][ T6654]  ? css_rstat_updated+0x23a/0x530
[  325.023580][ T6654]  ? rcu_is_watching+0x15/0xb0
[  325.023592][ T6654]  ? mod_memcg_lruvec_state+0x1b8/0x320
[  325.023611][ T6654]  ? __lock_acquire+0x6b5/0x2cf0
[  325.023621][ T6654]  ? folios_put_refs+0x591/0x680
[  325.023638][ T6654]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  325.023650][ T6654]  do_writepages+0x32e/0x550
[  325.023663][ T6654]  ? do_raw_spin_unlock+0x4d/0x210
[  325.023675][ T6654]  filemap_fdatawrite+0x1e9/0x2f0
[  325.023688][ T6654]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  325.023716][ T6654]  ? do_raw_spin_unlock+0x4d/0x210
[  325.023733][ T6654]  f2fs_sync_dirty_inodes+0x30e/0x810
[  325.023774][ T6654]  f2fs_write_checkpoint+0x9c6/0x2490
[  325.023793][ T6654]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  325.023822][ T6654]  kill_f2fs_super+0x308/0x710
[  325.023831][ T6654]  ? __pfx_kill_f2fs_super+0x10/0x10
[  325.023848][ T6654]  deactivate_locked_super+0xbc/0x130
[  325.023856][ T6654]  cleanup_mnt+0x437/0x4d0
[  325.023864][ T6654]  ? _raw_spin_unlock_irq+0x23/0x50
[  325.023878][ T6654]  task_work_run+0x1d9/0x270
[  325.023890][ T6654]  ? __pfx_task_work_run+0x10/0x10
[  325.023905][ T6654]  exit_to_user_mode_loop+0xed/0x480
[  325.023913][ T6654]  ? rcu_is_watching+0x15/0xb0
[  325.023940][ T6654]  do_syscall_64+0x2b7/0xf80
[  325.023948][ T6654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.023955][ T6654]  ? trace_irq_disable+0x37/0x100
[  325.023967][ T6654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.023974][ T6654] RIP: 0033:0x7f81ffd9bf17
[  325.023983][ T6654] Code: a2 c7 05 7c 96 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  325.023991][ T6654] RSP: 002b:00007fff1f57c5d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  325.024000][ T6654] RAX: 0000000000000000 RBX: 00007f81ffe0471f RCX: 00007f81ffd9bf17
[  325.024005][ T6654] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff1f57c690
[  325.024010][ T6654] RBP: 00007fff1f57c690 R08: 00007fff1f57d690 R09: 00000000ffffffff
[  325.024015][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff1f57d720
[  325.024020][ T6654] R13: 00007f81ffe0471f R14: 000000000004f494 R15: 00007fff1f57d760
[  325.024033][ T6654]  </TASK>
[  325.136787][ T6654] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  325.220908][T14199] loop3: detected capacity change from 0 to 1024
[  325.700071][T14209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3164'.
[  325.725783][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3164'.
[  325.730789][T14209] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3164'.
[  325.734578][T14209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3164'.
[  326.355655][ T5844] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  326.525648][ T5844] usb 4-1: Using ep0 maxpacket: 8
[  326.529897][ T5844] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  326.533249][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.540977][ T5844] usb 4-1: config 0 descriptor??
[  326.546964][ T5844] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  326.552265][ T5844] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21
[  326.749763][ T5844] usb 4-1: USB disconnect, device number 33
[  326.952694][T14243] ip6erspan0: entered allmulticast mode
[  327.431894][T14267] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  327.489307][T14269] loop3: detected capacity change from 0 to 512
[  327.493184][T14269] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  327.501578][T14269] EXT4-fs (loop3): 1 truncate cleaned up
[  327.505173][T14269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.514590][T14269] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.3.3192: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  327.528725][T14269] EXT4-fs (loop3): Remounting filesystem read-only
[  327.531404][T14269] EXT4-fs warning (device loop3): ext4_rename_delete:3729: inode #2: comm syz.3.3192: Deleting old file: nlink 5, error=-117
[  327.567909][ T6444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.646979][T14277] loop3: detected capacity change from 0 to 1024
[  327.651349][T14277] hfsplus: bad catalog file entry
[  327.653538][T14277] hfsplus: failed to load root directory
[  327.792676][   T34] audit: type=1326 audit(327.688:13168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.3.3200" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6619acb9 code=0x7ffc0000
[  327.803805][   T34] audit: type=1326 audit(327.698:13169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.3.3200" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6619acb9 code=0x7ffc0000
[  327.821011][   T34] audit: type=1326 audit(327.708:13170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.3.3200" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1c6619acb9 code=0x7ffc0000
[  327.828539][   T34] audit: type=1326 audit(327.718:13171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.3.3200" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6619acb9 code=0x7ffc0000
[  327.848418][   T34] audit: type=1326 audit(327.718:13172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.3.3200" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6619acb9 code=0x7ffc0000
[  327.869099][   T34] audit: type=1326 audit(327.718:13173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14290 comm="syz.3.3200" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1c6615b58e code=0x7ffc0000
[  327.877025][   T34] audit: type=1326 audit(327.728:13174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.3.3200" exe="/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f1c6619acb9 code=0x7ffc0000
[  327.883568][   T34] audit: type=1326 audit(327.728:13175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.3.3200" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6619acb9 code=0x7ffc0000
[  327.883588][   T34] audit: type=1326 audit(327.728:13176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.3.3200" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c6619acb9 code=0x7ffc0000
[  327.883605][   T34] audit: type=1326 audit(327.738:13177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.3.3200" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f1c6619acb9 code=0x7ffc0000
[  327.946554][T14296] netlink: 'syz.4.3204': attribute type 10 has an invalid length.
[  328.128300][ T5844] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  328.285675][ T5844] usb 4-1: Using ep0 maxpacket: 8
[  328.297200][ T5844] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  328.300717][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.303989][ T5844] usb 4-1: Product: syz
[  328.305974][ T5844] usb 4-1: Manufacturer: syz
[  328.308191][ T5844] usb 4-1: SerialNumber: syz
[  328.337952][ T5844] usb 4-1: config 0 descriptor??
[  328.361295][ T5844] gspca_main: se401-2.14.0 probing 047d:5003
[  328.941164][ T5844] usb 4-1: reset high-speed USB device number 34 using dummy_hcd
[  329.524577][ T5844] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  329.528501][ T5844] se401 4-1:0.0: probe with driver se401 failed with error -71
[  329.549359][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  329.555084][ T5844] usb 4-1: USB disconnect, device number 34
[  329.555384][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  329.562417][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  329.567641][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  329.571049][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  329.871716][T14313] chnl_net:caif_netlink_parms(): no params data found
[  329.942065][T14313] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.945104][T14313] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.951127][T14313] bridge_slave_0: entered allmulticast mode
[  329.955358][T14313] bridge_slave_0: entered promiscuous mode
[  329.964841][T14313] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.967870][T14313] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.970755][T14313] bridge_slave_1: entered allmulticast mode
[  329.974648][T14313] bridge_slave_1: entered promiscuous mode
[  330.001803][T14313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.008981][T14313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.025978][ T6783] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  330.036604][T14313] team0: Port device team_slave_0 added
[  330.041218][T14313] team0: Port device team_slave_1 added
[  330.073998][T14313] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.076906][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  330.087020][T14313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.092702][T14313] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.095396][T14313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  330.125994][T14313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.165533][T14313] hsr_slave_0: entered promiscuous mode
[  330.171086][T14313] hsr_slave_1: entered promiscuous mode
[  330.173887][T14313] debugfs: 'hsr0' already exists in 'hsr'
[  330.176938][T14313] Cannot create hsr debugfs directory
[  330.195979][ T6783] usb 5-1: Using ep0 maxpacket: 32
[  330.204852][ T6783] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  330.208621][ T6783] usb 5-1: config 0 has no interface number 0
[  330.231304][ T6783] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  330.234936][ T6783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.250434][ T6783] usb 5-1: Product: syz
[  330.252195][ T6783] usb 5-1: Manufacturer: syz
[  330.254062][ T6783] usb 5-1: SerialNumber: syz
[  330.270893][T14335] loop3: detected capacity change from 0 to 1024
[  330.277693][ T6783] usb 5-1: config 0 descriptor??
[  330.279289][T14335] EXT4-fs: Ignoring removed nobh option
[  330.284155][ T6783] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  330.289327][T14335] EXT4-fs: Ignoring removed bh option
[  330.319787][T14335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.340789][ T6444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.472913][T14313] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  330.481630][T14313] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  330.489867][T14313] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  330.497461][ T6783] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  330.520193][T14313] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  330.523208][ T6783] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  330.599367][T14313] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.602103][T14313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.604453][T14313] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.606766][T14313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.745710][T14313] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.771069][ T1196] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.774987][ T1196] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.801001][T14313] 8021q: adding VLAN 0 to HW filter on device team0
[  330.816488][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.819401][ T1196] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.839051][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.841901][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.895358][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  330.909358][   T33] usb 5-1: USB disconnect, device number 32
[  330.923460][   T33] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  330.935471][   T33] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  330.942361][T14365] loop3: detected capacity change from 0 to 128
[  330.947141][   T33] quatech2 5-1:0.51: device disconnected
[  330.965436][T14365] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  331.005916][ T6444] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  331.089174][T14313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.295903][T14313] veth0_vlan: entered promiscuous mode
[  331.301169][T14313] veth1_vlan: entered promiscuous mode
[  331.320193][T14313] veth0_macvtap: entered promiscuous mode
[  331.324251][T14313] veth1_macvtap: entered promiscuous mode
[  331.334296][T14313] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.345125][T14313] batman_adv: batadv0: Interface activated: batadv_slave_1
[  331.357250][ T5854] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  331.362936][ T5854] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  331.368659][ T5854] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  331.372333][ T5854] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  331.450309][ T4792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.453561][ T4792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.469288][ T6783] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  331.500583][ T3811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.508852][ T3811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.595870][ T5843] Bluetooth: hci3: command tx timeout
[  331.629629][ T6783] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  331.632206][ T6783] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  331.636315][ T6783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  331.643607][ T6783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  331.657223][ T6783] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  331.675894][ T6783] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  331.679512][ T6783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.697632][ T6783] usb 4-1: config 0 descriptor??
[  331.700981][T14381] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  331.970974][T14411] loop4: detected capacity change from 0 to 1024
[  332.046819][T14413] loop4: detected capacity change from 0 to 1024
[  332.070594][T14413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.078956][T14413] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  332.099886][ T6654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.128907][ T6783] plantronics 0003:047F:FFFF.0018: reserved main item tag 0xd
[  332.162326][ T6783] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  332.176147][ T7772] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  332.234475][T14423] bond2: entered allmulticast mode
[  332.238141][T14423] 8021q: adding VLAN 0 to HW filter on device bond2
[  332.325626][ T7772] usb 7-1: Using ep0 maxpacket: 32
[  332.343364][ T7772] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  332.349895][ T7772] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.353737][ T7772] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  332.360968][ T7772] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.373515][ T7772] usb 7-1: config 0 descriptor??
[  332.380853][ T7772] hub 7-1:0.0: USB hub found
[  332.601926][ T7772] hub 7-1:0.0: 14 ports detected
[  332.607986][ T7772] hub 7-1:0.0: insufficient power available to use all downstream ports
[  332.634398][T14430] loop4: detected capacity change from 0 to 32768
[  332.673042][T14430] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  332.733552][T14430] XFS (loop4): Ending clean mount
[  332.775481][ T6654] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  332.808350][ T7772] hub 7-1:0.0: hub_hub_status failed (err = -71)
[  332.811399][ T7772] hub 7-1:0.0: config failed, can't get hub status (err -71)
[  332.851876][ T7772] usbhid 7-1:0.0: can't add hid device: -71
[  332.854136][ T7772] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  332.877307][ T7772] usb 7-1: USB disconnect, device number 2
[  333.554108][T14448] xt_CT: You must specify a L4 protocol and not use inversions on it
[  333.705988][ T5843] Bluetooth: hci3: command tx timeout
[  333.840659][ T5844] usb 4-1: USB disconnect, device number 35
[  334.014478][T14455] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  334.023299][T14455] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  334.392226][T14477] cgroup: noprefix used incorrectly
[  334.395259][T14479] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3270'.
[  334.403312][T14479] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  334.517775][T14483] loop6: detected capacity change from 0 to 1024
[  334.521030][T14483] EXT4-fs: Ignoring removed oldalloc option
[  334.525393][T14485] loop4: detected capacity change from 0 to 512
[  334.528904][T14485] EXT4-fs: Ignoring removed bh option
[  334.531130][T14485] EXT4-fs: Ignoring removed mblk_io_submit option
[  334.540608][T14483] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (4096), stripe is disabled
[  334.546560][T14483] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  334.551323][T14483] EXT4-fs (loop6): orphan cleanup on readonly fs
[  334.553916][T14485] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  334.566802][T14485] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  334.570133][T14483] EXT4-fs error (device loop6): __ext4_get_inode_loc:4829: comm syz.6.3273: Invalid inode table block 0 in block_group 0
[  334.577400][T14485] EXT4-fs (loop4): orphan cleanup on readonly fs
[  334.579523][T14485] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #4: comm syz.4.3272: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 5(4), depth 0(0)
[  334.586540][T14483] EXT4-fs (loop6): Remounting filesystem read-only
[  334.588612][T14483] __quota_error: 16 callbacks suppressed
[  334.588620][T14483] Quota error (device loop6): write_blk: dquota write failed
[  334.592966][T14483] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  334.596675][T14485] EXT4-fs (loop4): Remounting filesystem read-only
[  334.598735][T14485] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  334.603130][T14485] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  334.606228][T14483] EXT4-fs (loop6): 1 truncate cleaned up
[  334.616025][T14485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  334.616581][T14483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  334.663161][ T6654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.720612][T14495] loop3: detected capacity change from 0 to 16
[  334.730141][T14495] erofs (device loop3): mounted with root inode @ nid 36.
[  334.881853][T14501] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  335.319365][T14510] loop4: detected capacity change from 0 to 32768
[  335.322458][T14510] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3284 (14510)
[  335.340154][T14510] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  335.344012][T14510] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  335.355327][T14313] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.458564][T14510] BTRFS info (device loop4): rebuilding free space tree
[  335.482911][T14510] BTRFS info (device loop4): disabling free space tree
[  335.495270][T14510] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  335.498765][T14510] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  335.511592][T14510] BTRFS info (device loop4): setting nodatasum
[  335.513794][T14510] BTRFS info (device loop4): setting nodatacow
[  335.516271][T14510] BTRFS info (device loop4): turning off barriers
[  335.522900][T14510] BTRFS info (device loop4): force clearing of disk cache
[  335.579220][ T6654] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  335.601467][T14531] loop6: detected capacity change from 0 to 1764
[  335.765648][ T5843] Bluetooth: hci3: command tx timeout
[  335.874325][T14545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3293'.
[  336.035858][ T6783] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  336.198354][ T6783] usb 4-1: Using ep0 maxpacket: 8
[  336.204903][ T6783] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  336.209543][ T6783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.212599][ T6783] usb 4-1: Product: syz
[  336.214067][ T6783] usb 4-1: Manufacturer: syz
[  336.215816][ T6783] usb 4-1: SerialNumber: syz
[  336.219511][ T6783] usb 4-1: config 0 descriptor??
[  336.314741][T14558] deleting an unspecified loop device is not supported.
[  336.429886][ T6783] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  337.097112][T14570] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3301'.
[  337.373355][ T6783] gspca_sunplus: reg_w_riv err -71
[  337.375415][ T6783] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  337.379403][ T6783] usb 4-1: USB disconnect, device number 36
[  337.783155][T14574] sctp: [Deprecated]: syz.4.3304 (pid 14574) Use of struct sctp_assoc_value in delayed_ack socket option.
[  337.783155][T14574] Use struct sctp_sack_info instead
[  337.845182][T14576] loop4: detected capacity change from 0 to 47
[  337.847997][ T5843] Bluetooth: hci3: command tx timeout
[  337.953735][   T34] audit: type=1800 audit(337.848:13194): pid=14576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3305" name="bus" dev="loop4" ino=63 res=0 errno=0
[  338.103615][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3311'.
[  338.229337][T14598] hugetlbfs: syz.3.3315 (14598): Using mlock ulimits for SHM_HUGETLB is obsolete
[  338.305867][ T6783] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  338.470982][ T6783] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.475167][ T6783] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.495886][ T6783] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  338.500910][ T6783] usb 7-1: config 0 interface 0 has no altsetting 0
[  338.503503][ T6783] usb 7-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  338.516332][ T6783] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.521370][ T6783] usb 7-1: config 0 descriptor??
[  338.657364][T14612] loop4: detected capacity change from 0 to 512
[  338.674363][T14612] EXT4-fs (loop4): 1 truncate cleaned up
[  338.676402][ T6787] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  338.688814][T14612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.698527][T14612] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3321: bg 0: block 465: padding at end of block bitmap is not set
[  338.730272][ T6654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.826137][T14618] loop4: detected capacity change from 0 to 128
[  338.827654][ T6787] usb 4-1: Using ep0 maxpacket: 16
[  338.828943][T14618] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  338.833397][ T6787] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  338.837161][ T6787] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  338.843664][ T6787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  338.850199][T14618] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8)
[  338.852386][ T6787] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  338.852862][T14618] FAT-fs (loop4): Filesystem has been set read-only
[  338.852928][T14618] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522)
[  338.856784][ T6787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.856797][ T6787] usb 4-1: Product: syz
[  338.856802][ T6787] usb 4-1: Manufacturer: syz
[  338.856808][ T6787] usb 4-1: SerialNumber: syz
[  338.958762][ T6783] sigmamicro 0003:1C4F:0059.0019: hidraw0: USB HID ve.50 Device [HID 1c4f:0059] on usb-dummy_hcd.6-1/input0
[  339.091495][ T6787] usb 4-1: 0:2 : does not exist
[  339.123772][ T6787] usb 4-1: USB disconnect, device number 37
[  339.146618][ T5877] usb 7-1: USB disconnect, device number 3
[  339.172717][T14629] loop4: detected capacity change from 0 to 2048
[  339.186410][T14629] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  339.193945][T14629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  339.217009][T14629] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned length of impUse field
[  339.869497][T14646] loop3: detected capacity change from 0 to 128
[  339.876292][T14646] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  339.898917][T14646] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  339.988146][T14648] program syz.3.3335 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  340.025761][ T6787] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  340.187625][ T6787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  340.194486][ T6787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  340.199241][ T6787] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  340.204452][ T6787] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  340.208483][ T6787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.234876][ T6787] usb 7-1: config 0 descriptor??
[  340.243519][T14645] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  340.459031][ T6787] usbhid 7-1:0.0: can't add hid device: -71
[  340.464742][ T6787] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  340.472267][ T6787] usb 7-1: USB disconnect, device number 4
[  340.544392][T14656] netlink: 'syz.4.3339': attribute type 10 has an invalid length.
[  340.554008][T14656] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.568773][T14656] team0: Port device bond0 added
[  340.721457][ T4381] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  341.829777][T14671] loop3: detected capacity change from 0 to 32768
[  342.090775][T14686] Non-string source
[  342.109747][T14688] tipc: Started in network mode
[  342.111462][T14688] tipc: Node identity ac14140f, cluster identity 4711
[  342.114537][T14688] tipc: New replicast peer: 255.255.255.255
[  342.117338][T14688] tipc: Enabled bearer <udp:syz2>, priority 10
[  343.245742][ T6787] tipc: Node number set to 2886997007
[  343.324278][T14722] loop3: detected capacity change from 0 to 8
[  343.367844][T14722] SQUASHFS error: zlib decompression failed, data probably corrupt
[  343.377131][T14722] SQUASHFS error: Failed to read block 0x9b: -5
[  343.379321][T14722] SQUASHFS error: Unable to read metadata cache entry [99]
[  343.381558][T14722] SQUASHFS error: Unable to read inode 0x104
[  343.404497][T14724] netlink: 'syz.6.3372': attribute type 2 has an invalid length.
[  343.450076][T14726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'.
[  343.625985][ T6787] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  343.641575][T14734] loop4: detected capacity change from 0 to 1024
[  343.686118][ T4303] hfsplus: b-tree write err: -5, ino 4
[  343.787283][ T6787] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  343.802220][ T6787] usb 4-1: config 0 has no interface number 0
[  343.804165][ T6787] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  343.812905][ T6787] usb 4-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0x6D, changing to 0xD
[  343.825812][ T6787] usb 4-1: config 0 interface 2 altsetting 2 endpoint 0xD has invalid maxpacket 14309, setting to 64
[  343.841965][ T6787] usb 4-1: config 0 interface 2 has no altsetting 0
[  343.848106][ T6787] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  343.851302][ T6787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.859713][ T6787] usb 4-1: Product: syz
[  343.861453][ T6787] usb 4-1: Manufacturer: syz
[  343.863183][ T6787] usb 4-1: SerialNumber: syz
[  343.866747][ T6787] usb 4-1: config 0 descriptor??
[  343.869156][T14722] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  343.871544][T14722] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  343.903146][T14737] loop6: detected capacity change from 0 to 32768
[  343.954298][T14737] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  343.993113][T14737] XFS (loop6): Ending clean mount
[  344.009290][   T34] audit: type=1800 audit(343.908:13195): pid=14737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3377" name="file1" dev="loop6" ino=4422 res=0 errno=0
[  344.083149][ T6787] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  344.100270][ T6787] usb 4-1: invalid MIDI in EP 0
[  344.161805][ T6787] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22
[  344.173974][ T6787] usb 4-1: USB disconnect, device number 38
[  344.195308][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  344.350256][T14313] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  344.545498][T14769] loop6: detected capacity change from 0 to 2048
[  344.553058][T14769] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  344.562444][ T5847] udevd[5847]: incorrect nilfs2 checksum on /dev/loop6
[  344.579313][ T5847] udevd[5847]: incorrect nilfs2 checksum on /dev/loop6
[  344.582948][T14770] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  344.607420][   T34] audit: type=1800 audit(344.508:13196): pid=14769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3387" name="file2" dev="loop6" ino=16 res=0 errno=0
[  344.788579][T14778] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3391'.
[  345.363774][T14792] loop6: detected capacity change from 0 to 32768
[  345.375418][T14792] ERROR: (device loop6): xtTruncate: xt_getpage: xtree page corrupt
[  345.375418][T14792] 
[  345.380268][T14792] ERROR: (device loop6): remounting filesystem as read-only
[  345.560914][T14801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3401'.
[  345.762470][T14814] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3407'.
[  347.228123][T14866] loop6: detected capacity change from 0 to 4096
[  347.233158][T14866] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  347.274168][T14866] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  347.277591][ T5844] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  347.281281][T14866] ntfs3(loop6): Failed to load $UpCase (-22).
[  347.437510][ T5844] usb 5-1: Using ep0 maxpacket: 8
[  347.443986][ T5844] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  347.449398][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.454191][ T5844] usb 5-1: Product: syz
[  347.461142][ T5844] usb 5-1: Manufacturer: syz
[  347.467032][ T5844] usb 5-1: SerialNumber: syz
[  347.478075][ T5844] usb 5-1: config 0 descriptor??
[  347.495163][ T5844] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  347.504463][T14870] program syz.6.3432 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  347.693622][T14877] ieee802154 phy0 wpan0: encryption failed: -22
[  347.879283][T14888] dlm: no locking on control device
[  348.072923][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3443'.
[  348.076476][T14897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3443'.
[  348.081365][T14897] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  348.727303][ T5844] gspca_sonixj: reg_w1 err -71
[  348.896014][ T5844] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  348.927037][ T5844] usb 5-1: USB disconnect, device number 33
[  348.945821][ T6787] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  349.095932][ T6787] usb 7-1: Using ep0 maxpacket: 16
[  349.124177][ T6787] usb 7-1: config 0 has an invalid interface number: 48 but max is 0
[  349.130993][ T6787] usb 7-1: config 0 has no interface number 0
[  349.133366][ T6787] usb 7-1: config 0 interface 48 has no altsetting 0
[  349.150148][ T6787] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  349.153208][ T6787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.156375][ T6787] usb 7-1: Product: syz
[  349.157972][ T6787] usb 7-1: Manufacturer: syz
[  349.159617][ T6787] usb 7-1: SerialNumber: syz
[  349.166630][ T6787] usb 7-1: config 0 descriptor??
[  349.403185][ T6787] usb 7-1: USB disconnect, device number 5
[  349.585854][ T6783] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  349.761837][ T6783] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  349.769016][ T6783] usb 5-1: config 1 interface 0 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  349.774059][ T6783] usb 5-1: config 1 interface 0 has no altsetting 0
[  349.789019][ T6783] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  349.791840][ T6783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.803431][ T6783] usb 5-1: Product: syz
[  349.804840][ T6783] usb 5-1: Manufacturer: syz
[  349.810761][ T6783] usb 5-1: SerialNumber: syz
[  349.954232][T14916] loop3: detected capacity change from 0 to 64
[  349.989060][T14916] syz.3.3451: attempt to access beyond end of device
[  349.989060][T14916] loop3: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  349.993796][T14916] Buffer I/O error on dev loop3, logical block 512, async page read
[  349.997355][T14916] syz.3.3451: attempt to access beyond end of device
[  349.997355][T14916] loop3: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  350.001707][T14916] Buffer I/O error on dev loop3, logical block 56576, async page read
[  350.028415][ T6783] usb 5-1: bad CDC descriptors
[  350.050604][ T6783] usb 5-1: USB disconnect, device number 34
[  350.223498][T14923] loop3: detected capacity change from 0 to 512
[  350.253193][T14923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.268871][T14923] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.3455: path /1016/file1: bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0
[  350.275501][T14923] EXT4-fs (loop3): Remounting filesystem read-only
[  350.291185][ T6444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.369084][T14928] loop3: detected capacity change from 0 to 1024
[  350.448804][   T26] hfsplus: b-tree write err: -5, ino 4
[  350.884417][T14944] loop3: detected capacity change from 0 to 4096
[  350.898420][T14944] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  350.903788][T14944] ntfs3(loop3): Failed to load $Bitmap (-2).
[  350.925957][ T6783] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  351.085846][ T6783] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  351.089589][ T6783] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  351.101209][ T6783] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  351.110293][ T6783] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.122833][ T6783] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  351.126826][ T6783] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  351.129530][ T6783] usb 5-1: Product: syz
[  351.130982][ T6783] usb 5-1: Manufacturer: syz
[  351.145177][ T6783] cdc_wdm 5-1:1.0: skipping garbage
[  351.147397][ T6783] cdc_wdm 5-1:1.0: skipping garbage
[  351.153497][ T6783] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  351.158094][ T6783] cdc_wdm 5-1:1.0: Unknown control protocol
[  351.964261][   T33] usb 5-1: USB disconnect, device number 35
[  352.527747][T14964] loop6: detected capacity change from 0 to 40427
[  352.575021][T14964] F2FS-fs (loop6): invalid crc value
[  352.693593][T14964] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  352.706125][T14964] F2FS-fs (loop6): Start checkpoint disabled!
[  352.716405][T14964] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  352.724972][T14964] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  352.836742][ T1403] kworker/u9:7: attempt to access beyond end of device
[  352.836742][ T1403] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  352.841015][ T1403] CPU: 0 UID: 0 PID: 1403 Comm: kworker/u9:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  352.841031][ T1403] Tainted: [L]=SOFTLOCKUP
[  352.841035][ T1403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  352.841052][ T1403] Workqueue: writeback wb_workfn (flush-7:6)
[  352.841075][ T1403] Call Trace:
[  352.841080][ T1403]  <TASK>
[  352.841085][ T1403]  dump_stack_lvl+0xe8/0x150
[  352.841105][ T1403]  f2fs_handle_critical_error+0x37c/0x540
[  352.841124][ T1403]  f2fs_write_end_io+0x886/0xb60
[  352.841144][ T1403]  __submit_merged_bio+0x256/0x650
[  352.841161][ T1403]  __submit_merged_write_cond+0x269/0x530
[  352.841180][ T1403]  f2fs_write_data_pages+0x2806/0x3360
[  352.841212][ T1403]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  352.841228][ T1403]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  352.841249][ T1403]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  352.841259][ T1403]  ? __lock_acquire+0x6b5/0x2cf0
[  352.841274][ T1403]  ? __lock_acquire+0x6b5/0x2cf0
[  352.841290][ T1403]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  352.841300][ T1403]  do_writepages+0x32e/0x550
[  352.841313][ T1403]  ? reacquire_held_locks+0x104/0x190
[  352.841322][ T1403]  ? writeback_sb_inodes+0x41f/0x1820
[  352.841334][ T1403]  __writeback_single_inode+0x133/0x1230
[  352.841344][ T1403]  ? do_raw_spin_unlock+0x4d/0x210
[  352.841356][ T1403]  writeback_sb_inodes+0x92c/0x1820
[  352.841375][ T1403]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  352.841383][ T1403]  ? do_raw_spin_lock+0x12b/0x2f0
[  352.841409][ T1403]  ? rcu_is_watching+0x15/0xb0
[  352.841422][ T1403]  wb_writeback+0x445/0xad0
[  352.841433][ T1403]  ? queue_io+0x221/0x450
[  352.841444][ T1403]  ? __pfx_wb_writeback+0x10/0x10
[  352.841453][ T1403]  ? do_raw_spin_lock+0x12b/0x2f0
[  352.841472][ T1403]  wb_workfn+0x3f8/0xef0
[  352.841482][ T1403]  ? __lock_acquire+0x6b5/0x2cf0
[  352.841491][ T1403]  ? look_up_lock_class+0x57/0x110
[  352.841520][ T1403]  ? __pfx_wb_workfn+0x10/0x10
[  352.841530][ T1403]  ? finish_task_switch+0x161/0x920
[  352.841545][ T1403]  ? do_raw_spin_lock+0x12b/0x2f0
[  352.841553][ T1403]  ? lock_acquire+0x106/0x330
[  352.841561][ T1403]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  352.841572][ T1403]  ? process_scheduled_works+0xa0f/0x17a0
[  352.841582][ T1403]  ? process_scheduled_works+0xa0f/0x17a0
[  352.841592][ T1403]  ? process_scheduled_works+0xa0f/0x17a0
[  352.841599][ T1403]  ? process_scheduled_works+0xa0f/0x17a0
[  352.841607][ T1403]  process_scheduled_works+0xaec/0x17a0
[  352.841629][ T1403]  ? __pfx_process_scheduled_works+0x10/0x10
[  352.841639][ T1403]  ? do_raw_spin_lock+0x12b/0x2f0
[  352.841692][ T1403]  ? assign_work+0x3d3/0x440
[  352.841705][ T1403]  worker_thread+0x89f/0xd90
[  352.841718][ T1403]  ? __kthread_parkme+0x7a/0x1f0
[  352.841732][ T1403]  kthread+0x726/0x8b0
[  352.841742][ T1403]  ? __pfx_worker_thread+0x10/0x10
[  352.841750][ T1403]  ? __pfx_kthread+0x10/0x10
[  352.841761][ T1403]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.841771][ T1403]  ? __pfx_kthread+0x10/0x10
[  352.841781][ T1403]  ret_from_fork+0x51b/0xa40
[  352.841791][ T1403]  ? __pfx_ret_from_fork+0x10/0x10
[  352.841798][ T1403]  ? __switch_to+0xc82/0x1410
[  352.841812][ T1403]  ? __pfx_kthread+0x10/0x10
[  352.841822][ T1403]  ret_from_fork_asm+0x1a/0x30
[  352.841839][ T1403]  </TASK>
[  352.841843][ T1403] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  352.995887][   T33] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  353.178209][   T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  353.192458][   T33] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  353.195462][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.200556][   T33] usb 5-1: config 0 descriptor??
[  353.202859][T14971] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  353.405357][T14980] loop3: detected capacity change from 0 to 32768
[  353.433976][T14980] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  353.442606][T14980] XFS (loop3): Ending clean mount
[  353.614320][   T33] sunplus 0003:04FC:05D8.001A: unknown main item tag 0x0
[  353.618370][   T33] sunplus 0003:04FC:05D8.001A: item fetching failed at offset 3/5
[  353.622408][   T33] sunplus 0003:04FC:05D8.001A: probe with driver sunplus failed with error -22
[  353.710097][ T6787] kernel read not supported for file / (pid: 6787 comm: kworker/0:7)
[  353.813864][   T33] usb 5-1: USB disconnect, device number 36
[  354.208799][ T6444] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  354.540719][T15005] loop3: detected capacity change from 0 to 512
[  354.543958][T15005] ext3: Unknown parameter 'obj_role'
[  354.814074][T15008] loop6: detected capacity change from 0 to 512
[  354.854993][T15008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  354.873110][T15008] EXT4-fs (loop6): resizing filesystem from 128 to 2 blocks
[  354.882152][T15008] EXT4-fs warning (device loop6): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  354.926270][T14313] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.172782][T15025] loop3: detected capacity change from 0 to 1024
[  355.183206][T15025] hfsplus: invalid extent max_key_len 0
[  355.191182][T15025] hfsplus: failed to load extents file
[  355.267938][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3494'.
[  355.576871][ T7772] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  355.583770][T15040] syzkaller0: entered promiscuous mode
[  355.588119][T15040] syzkaller0: entered allmulticast mode
[  355.727861][ T7772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.735608][ T7772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.741891][ T7772] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  355.755730][ T7772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.763183][ T7772] usb 4-1: config 0 descriptor??
[  355.879404][T15052] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3505'.
[  355.896930][T15054] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3506'.
[  355.900949][T15054] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3506'.
[  356.214107][ T7772] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0
[  356.229083][ T7772] arvo 0003:1E7D:30D4.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  356.247282][T15064] bridge0: the hash_elasticity option has been deprecated and is always 16
[  356.263004][T15064] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.429567][ T7772] arvo 0003:1E7D:30D4.001B: couldn't init struct arvo_device
[  356.431931][ T7772] arvo 0003:1E7D:30D4.001B: couldn't install keyboard
[  356.449919][ T7772] arvo 0003:1E7D:30D4.001B: probe with driver arvo failed with error -71
[  356.464086][ T7772] usb 4-1: USB disconnect, device number 39
[  357.180597][T15078] openvswitch: netlink: IP tunnel dst address not specified
[  357.393492][T15088] loop3: detected capacity change from 0 to 512
[  357.397168][ T7772] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  357.403905][T15088] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  357.407384][T15088] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001)
[  357.413842][T15088] FAT-fs (loop3): Filesystem has been set read-only
[  357.441683][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3522'.
[  357.506357][T15095] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  357.765031][ T7772] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  357.846183][T15105] loop6: detected capacity change from 0 to 64
[  358.073272][T15107] loop4: detected capacity change from 0 to 1024
[  358.084776][T15107] EXT4-fs: inline encryption not supported
[  358.118576][T15107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.397362][ T6654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.587792][T15123] loop3: detected capacity change from 0 to 128
[  358.597201][T15123] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  358.618593][ T6444] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  358.731852][T15119] loop6: detected capacity change from 0 to 40427
[  358.750940][T15119] F2FS-fs (loop6): invalid crc value
[  358.754087][T15119] F2FS-fs (loop6): Mismatch valid blocks 0 vs. 14
[  358.760312][T15119] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-117)
[  359.023598][T15133] loop6: detected capacity change from 0 to 4096
[  359.047589][T15133] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.070059][T15138] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  359.073461][   T34] audit: type=1800 audit(358.968:13197): pid=15133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3539" name="file1" dev="loop6" ino=15 res=0 errno=0
[  359.092283][T15138] overlayfs: failed lookup in lower (newroot/1147, name='file2', err=-40): overlapping layers
[  359.099812][T15138] overlayfs: failed to look up (file2) for ino (-40)
[  359.125334][T14313] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.241617][T15145] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3543'.
[  359.265996][ T5877] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  359.427426][ T5877] usb 4-1: config 127 has an invalid interface number: 218 but max is 0
[  359.430840][ T5877] usb 4-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config
[  359.442405][ T5877] usb 4-1: config 127 has no interface number 0
[  359.452281][ T5877] usb 4-1: config 127 interface 218 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0
[  359.452329][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3549'.
[  359.459319][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3549'.
[  359.461292][ T5877] usb 4-1: config 127 interface 218 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  359.462181][T15156] netlink: 4260 bytes leftover after parsing attributes in process `syz.6.3549'.
[  359.475298][ T5877] usb 4-1: config 127 interface 218 has no altsetting 0
[  359.484803][ T5877] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 3.5c
[  359.488797][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.492137][ T5877] usb 4-1: Product: syz
[  359.493840][ T5877] usb 4-1: Manufacturer: syz
[  359.496835][ T5877] usb 4-1: SerialNumber: syz
[  359.715055][ T5877] etas_es58x 4-1:127.218: Starting syz syz (Serial Number syz)
[  359.718799][ T5877] etas_es58x 4-1:127.218: could not retrieve the product info string
[  359.767347][ T5877] usb 4-1: USB disconnect, device number 40
[  359.770240][ T5877] etas_es58x 4-1:127.218: Disconnecting syz syz
[  359.868161][T15169] loop4: detected capacity change from 0 to 32768
[  359.927423][T15169] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  359.978450][T15169] XFS (loop4): Ending clean mount
[  359.998614][ T6654] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  360.023371][   T33] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  360.205762][   T33] usb 7-1: Using ep0 maxpacket: 32
[  360.210080][   T33] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.214439][   T33] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.220750][   T33] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  360.224327][   T33] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  360.235587][   T33] usb 7-1: Product: syz
[  360.237268][   T33] usb 7-1: Manufacturer: syz
[  360.266976][   T33] hub 7-1:4.0: USB hub found
[  360.461487][   T33] hub 7-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  360.485442][T15199] netlink: 'syz.4.3566': attribute type 1 has an invalid length.
[  360.533935][T15203] loop4: detected capacity change from 0 to 256
[  360.765913][ T7772] usb 7-1: USB disconnect, device number 6
[  360.929293][T15207] loop4: detected capacity change from 0 to 32768
[  361.172403][T15207] (syz.4.3570,15207,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  361.202160][T15207] (syz.4.3570,15207,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  361.220501][T15207] JBD2: Ignoring recovery information on journal
[  361.269800][T15207] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  361.664270][ T6654] ocfs2: Unmounting device (7,4) on (node local)
[  361.943401][T15231] Invalid source name
[  362.195722][ T7772] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  362.662098][ T7772] usb 5-1: unable to get BOS descriptor or descriptor too short
[  362.670821][ T7772] usb 5-1: unable to read config index 0 descriptor/start: -71
[  362.678569][ T7772] usb 5-1: can't read configurations, error -71
[  363.197607][    C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  363.261588][T15265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3591'.
[  363.778970][T15287] loop3: detected capacity change from 0 to 128
[  363.782678][T15287] EXT4-fs: Ignoring removed nomblk_io_submit option
[  363.798890][T15287] EXT4-fs (loop3): Test dummy encryption mode enabled
[  363.867271][T15287] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  364.348785][T15306] netlink: 'syz.4.3605': attribute type 4 has an invalid length.
[  364.356226][T15306] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3605'.
[  364.746322][ T5844] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  364.917962][ T5844] usb 7-1: Using ep0 maxpacket: 32
[  364.925388][ T5844] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  364.932902][ T5844] usb 7-1: config 0 has no interface number 0
[  364.935355][ T5844] usb 7-1: config 0 interface 12 has no altsetting 0
[  364.944464][ T5844] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  364.952777][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.964762][ T5844] usb 7-1: Product: syz
[  364.968434][ T5844] usb 7-1: Manufacturer: syz
[  364.969971][ T5844] usb 7-1: SerialNumber: syz
[  364.990247][ T5844] usb 7-1: config 0 descriptor??
[  364.998898][ T6444] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  365.530588][T15343] macsec1: entered allmulticast mode
[  365.532395][T15343] macsec0: entered allmulticast mode
[  365.534133][T15343] veth1_macvtap: entered allmulticast mode
[  365.845411][T15353] loop4: detected capacity change from 0 to 256
[  365.868301][T15353] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  365.912192][T15353] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[  366.840212][ T5844] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71
[  366.846812][ T5844] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  366.851673][ T5844] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  366.858070][ T5844] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  366.873136][ T5844] usb 7-1: USB disconnect, device number 7
[  367.620894][   T34] audit: type=1400 audit(367.518:13198): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A4BB284132960AB0EC7C873CFF3EB09BFFB78A08C1060ACEBD68C681F4EB06507909110374F83A9CA6CF1A22A152E4424641EA1201497E3A973866BE7F8659A0119BA2D92304E687C61DF4D960D941CFAB0AC10F5861C9B38D760E8B906A47E2CF457A255A8C061FE8E4C805DC7D3B0124BD25494ED2D54BE8AEF5615C6FD7C4FAC3CF7DA8F20AA026998926069FC3032289822655A10BB16E1E6C08002CC0435A6667F338D23DC07810124F374749CEB5F78713B7DAD2FE3044A243139A1B5170D5BCFDBCD8748AC706DDDCBBD0B1F20F52C143DA1E74B736AC64A66616EA3069133AC3A pid=15382 comm="syz.6.3641"
[  367.733777][T15392] loop6: detected capacity change from 0 to 256
[  367.737329][T15392] exfat: Deprecated parameter 'utf8'
[  367.757352][T15392] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  369.477697][T15399] loop6: detected capacity change from 0 to 128
[  369.487283][T15399] FAT-fs (loop6): Directory bread(block 414) failed
[  369.495636][T15399] FAT-fs (loop6): Directory bread(block 415) failed
[  369.498194][T15399] FAT-fs (loop6): Directory bread(block 416) failed
[  369.500659][T15399] FAT-fs (loop6): Directory bread(block 417) failed
[  369.512410][T15399] FAT-fs (loop6): Directory bread(block 418) failed
[  369.514790][T15399] FAT-fs (loop6): Directory bread(block 419) failed
[  369.518783][T15399] FAT-fs (loop6): Directory bread(block 420) failed
[  369.520917][T15399] FAT-fs (loop6): Directory bread(block 421) failed
[  369.526704][T15399] FAT-fs (loop6): Directory bread(block 414) failed
[  369.529794][T15399] FAT-fs (loop6): Directory bread(block 415) failed
[  369.894236][T15409] bond1: Removing last ns target with arp_interval on
[  370.073013][T15414] loop6: detected capacity change from 0 to 32768
[  370.080128][T15414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3656 (15414)
[  370.100030][T15414] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  370.113947][T15414] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  370.289988][T15414] BTRFS info (device loop6): enabling ssd optimizations
[  370.295632][T15414] BTRFS info (device loop6): turning on async discard
[  370.297796][T15414] BTRFS info (device loop6): enabling free space tree
[  370.350201][T14313] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  370.624573][T15440] sctp: [Deprecated]: syz.3.3662 (pid 15440) Use of int in maxseg socket option.
[  370.624573][T15440] Use struct sctp_assoc_value instead
[  370.738503][T15443] m1Ie5n: entered promiscuous mode
[  371.094473][T15458] loop4: detected capacity change from 0 to 1024
[  371.241070][   T27] hfsplus: b-tree write err: -5, ino 4
[  371.321877][T15466] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3674'.
[  371.588967][ T5877] IPVS: starting estimator thread 0...
[  371.832017][T15478] IPVS: using max 74 ests per chain, 177600 per kthread
[  371.898890][T15475] No such timeout policy "syz0"
[  372.205316][T15487] loop6: detected capacity change from 0 to 512
[  372.230086][T15487] EXT4-fs (loop6): too many log groups per flexible block group
[  372.232803][T15487] EXT4-fs (loop6): failed to initialize mballoc (-12)
[  372.235091][T15487] EXT4-fs (loop6): mount failed
[  372.405628][ T5877] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  372.424920][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3683'.
[  372.595665][ T5877] usb 4-1: Using ep0 maxpacket: 8
[  372.601750][ T5877] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[  372.612394][ T5877] usb 4-1: config 127 has no interface number 1
[  372.614868][ T5877] usb 4-1: config 127 interface 0 altsetting 10 has an endpoint descriptor with address 0x52, changing to 0x2
[  372.618798][ T5877] usb 4-1: config 127 interface 0 altsetting 10 endpoint 0x2 has invalid wMaxPacketSize 0
[  372.621929][ T5877] usb 4-1: config 127 interface 171 has no altsetting 0
[  372.624046][ T5877] usb 4-1: config 127 interface 0 has no altsetting 0
[  372.631292][ T5877] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  372.634306][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.637487][ T5877] usb 4-1: Product: syz
[  372.638918][ T5877] usb 4-1: Manufacturer: syz
[  372.640693][ T5877] usb 4-1: SerialNumber: syz
[  372.835804][   T33] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  372.855774][ T5844] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  372.865841][ T5877] xr_serial 4-1:127.171: xr_serial converter detected
[  372.869879][ T5877] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  372.872303][ T5877] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  372.882028][ T5877] usb 4-1: USB disconnect, device number 41
[  372.885210][ T5877] xr_serial 4-1:127.171: device disconnected
[  372.986142][   T33] usb 5-1: Using ep0 maxpacket: 16
[  372.989908][   T33] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  372.994882][   T33] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  372.998002][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.000501][   T33] usb 5-1: Product: syz
[  373.001761][   T33] usb 5-1: Manufacturer: syz
[  373.003275][   T33] usb 5-1: SerialNumber: syz
[  373.005898][ T5844] usb 7-1: Using ep0 maxpacket: 8
[  373.008922][ T5844] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  373.015926][   T33] usb 5-1: config 0 descriptor??
[  373.018143][ T5844] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  373.023635][   T33] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22
[  373.028415][ T5844] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  373.031473][ T5844] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  373.035421][ T5844] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  373.042794][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.247907][ T5877] usb 5-1: USB disconnect, device number 39
[  373.271954][ T5844] usb 7-1: GET_CAPABILITIES returned 0
[  373.278199][ T5844] usbtmc 7-1:16.0: can't read capabilities
[  373.516745][    C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  373.520084][    C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  373.523070][    C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  373.526181][    C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  373.529924][T15499] usbtmc 7-1:16.0: Unable to send data, error -71
[  373.537081][ T5877] usb 7-1: USB disconnect, device number 8
[  374.211999][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3696'.
[  374.302466][   T34] audit: type=1326 audit(374.198:13199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x7ffc0000
[  374.317942][   T34] audit: type=1326 audit(374.208:13200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x7ffc0000
[  374.342422][   T34] audit: type=1326 audit(374.208:13201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x7ffc0000
[  374.357441][   T34] audit: type=1326 audit(374.208:13202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x7ffc0000
[  374.374662][   T34] audit: type=1326 audit(374.208:13203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81ffd9c547 code=0x7ffc0000
[  374.388948][   T34] audit: type=1326 audit(374.208:13204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f81ffd5b58e code=0x7ffc0000
[  374.404473][   T34] audit: type=1326 audit(374.208:13205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f81ffd5b58e code=0x7ffc0000
[  374.421240][   T34] audit: type=1326 audit(374.208:13206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f81ffd5b58e code=0x7ffc0000
[  374.438058][   T34] audit: type=1326 audit(374.208:13207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f81ffd5b58e code=0x7ffc0000
[  374.451567][   T34] audit: type=1326 audit(374.208:13208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15522 comm="syz.4.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81ffd9acb9 code=0x7ffc0000
[  375.475977][T15553] netlink: 'syz.4.3709': attribute type 27 has an invalid length.
[  376.109068][T15568] loop4: detected capacity change from 0 to 2048
[  376.312615][T15568]  loop4: p3 < > p4 < >
[  376.313954][T15568] loop4: partition table partially beyond EOD, truncated
[  376.357400][T15568] loop4: p3 start 4284289 is beyond EOD, truncated
[  376.429688][T15571] loop3: detected capacity change from 0 to 512
[  376.454643][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  376.671839][T15571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.809509][T15578] loop6: detected capacity change from 0 to 65536
[  376.873283][T15578] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  376.909126][T15578] XFS (loop6): Ending clean mount
[  376.962373][ T6444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.971013][T14313] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  377.004795][T15591] loop4: detected capacity change from 0 to 512
[  377.016769][T15591] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  377.187557][T15595] loop3: detected capacity change from 0 to 1024
[  377.196816][T15595] hfsplus: Filesystem is marked locked, mounting read-only.
[  377.561390][T15606] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  377.782628][T15611] loop3: detected capacity change from 0 to 1024
[  377.830250][T15611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.864677][T15614] kAFS: unable to lookup cell 'syz1'
[  377.955777][T15611] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  378.039495][ T5877] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  378.081046][ T6444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.321992][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.328626][ T5877] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  378.332161][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.354143][ T5877] usb 7-1: config 0 descriptor??
[  378.802839][ T5877] aquacomputer_d5next 0003:0C70:F00B.001C: hidraw0: USB HID v0.04 Device [HID 0c70:f00b] on usb-dummy_hcd.6-1/input0
[  379.012094][ T5877] usb 7-1: USB disconnect, device number 9
[  379.186976][T15644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3746'.
[  379.195310][T15644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3746'.
[  379.257318][T15636] loop3: detected capacity change from 0 to 32768
[  379.271987][T15636] jfs_mount: Failed to read AGGREGATE_I
[  379.290120][T15636] Mount JFS Failure: -5
[  379.296486][T15636] jfs_mount failed w/return code = -5
[  379.488664][T15654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3751'.
[  380.172832][T15676] loop3: detected capacity change from 0 to 4096
[  380.182803][T15676] EXT4-fs (loop3): Test dummy encryption mode enabled
[  380.192756][T15676] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 2304
[  380.331082][T15678] tmpfs: Bad value for 'mpol'
[  380.334046][T15680] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3763'.
[  380.340115][T15680] veth1_to_bond: Caught tx_queue_len zero misconfig
[  380.355669][  T798] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  380.515706][  T798] usb 7-1: Using ep0 maxpacket: 32
[  380.527152][  T798] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  380.529977][  T798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.562437][  T798] usb 7-1: config 0 descriptor??
[  380.689440][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3771'.
[  380.695651][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3771'.
[  380.778712][T15698] loop4: detected capacity change from 0 to 512
[  380.799470][  T798] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  380.808457][T15698] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  380.811032][T15698] System zones: 0-2, 18-18, 34-34
[  380.817314][T15698] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3772: bg 0: block 248: padding at end of block bitmap is not set
[  380.827040][T15698] __quota_error: 3 callbacks suppressed
[  380.827053][T15698] Quota error (device loop4): write_blk: dquota write failed
[  380.831107][T15698] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  380.834125][T15698] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3772: Failed to acquire dquot type 1
[  380.848432][T15698] EXT4-fs (loop4): 1 truncate cleaned up
[  380.851443][T15698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  380.861461][  T798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  380.939873][  T798] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  380.942146][  T798] usb 7-1: media controller created
[  380.949332][  T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  381.301731][T15711] netlink: 'syz.3.3776': attribute type 1 has an invalid length.
[  381.650662][T15719] loop3: detected capacity change from 0 to 32768
[  381.656982][T15719] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3780 (15719)
[  381.675348][T15719] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  381.683738][T15719] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  381.738095][ T6654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.836283][  T798] stb0899_attach: Driver disabled by Kconfig
[  381.838324][  T798] az6027: no front-end attached
[  381.838324][  T798] 
[  381.847058][  T798] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  381.856538][  T798] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input23
[  381.874869][  T798] dvb-usb: schedule remote query interval to 400 msecs.
[  381.877753][  T798] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  381.902730][T15719] BTRFS info (device loop3): enabling ssd optimizations
[  381.905136][T15719] BTRFS info (device loop3): enabling free space tree
[  381.907939][T15719] BTRFS info (device loop3): enabling auto defrag
[  381.910132][T15719] BTRFS info (device loop3): use lzo compression, level 1
[  381.916258][T15719] BTRFS info (device loop3): max_inline set to 0
[  382.091125][  T798] usb 7-1: USB disconnect, device number 10
[  382.163478][  T798] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  382.334744][ T6444] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  383.481333][T15769] loop4: detected capacity change from 0 to 512
[  383.537140][T15769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.593439][ T6654] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.691497][ T1368] ieee802154 phy0 wpan0: encryption failed: -22
[  383.693696][ T1368] ieee802154 phy1 wpan1: encryption failed: -22
[  383.735268][T15776] loop6: detected capacity change from 0 to 512
[  383.784801][T15776] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3797: inode has both inline data and extents flags
[  383.809925][T15776] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3797: couldn't read orphan inode 15 (err -117)
[  383.830842][T15776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.941319][T14313] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.115216][T15792] binder: 15791:15792 ioctl c0306201 200000000680 returned -14
[  384.415700][T15796] loop6: detected capacity change from 0 to 1024
[  385.589430][T15810] sctp: [Deprecated]: syz.3.3809 (pid 15810) Use of struct sctp_assoc_value in delayed_ack socket option.
[  385.589430][T15810] Use struct sctp_sack_info instead
[  386.308989][T15813] loop4: detected capacity change from 0 to 32768
[  386.456596][T15813] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  386.532239][T15813] XFS (loop4): Ending clean mount
[  386.637478][T15813] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  387.016017][T15848] ref_ctr_offset mismatch. inode: 0x3c9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2f30656c69662f2e
[  387.204297][T15857] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3825'.
[  387.424619][T15864] tc_dump_action: action bad kind
[  387.529240][  T798] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  387.739402][  T798] usb 4-1: Using ep0 maxpacket: 32
[  387.758732][  T798] usb 4-1: config 0 has an invalid interface number: 250 but max is 1
[  387.762005][  T798] usb 4-1: config 0 has no interface number 1
[  387.764095][  T798] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  387.789325][  T798] usb 4-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f
[  387.792241][  T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.794870][  T798] usb 4-1: Product: syz
[  387.796327][  T798] usb 4-1: Manufacturer: syz
[  387.797911][  T798] usb 4-1: SerialNumber: syz
[  387.804596][  T798] usb 4-1: config 0 descriptor??
[  387.810484][  T798] uvcvideo 4-1:0.250: Found UVC 0.00 device syz (0408:3090)
[  387.813066][  T798] uvcvideo 4-1:0.250: No valid video chain found.
[  388.023423][T15861] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  388.036186][ T5877] usb 4-1: USB disconnect, device number 42
[  388.045724][  T798] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  388.205655][  T798] usb 5-1: Using ep0 maxpacket: 8
[  388.209665][  T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  388.213956][  T798] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  388.220912][  T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.237774][  T798] usb 5-1: config 0 descriptor??
[  388.280850][T15879] input: syz0 as /devices/virtual/input/input24
[  389.250051][  T798] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  390.944041][  T798] usb 5-1: USB disconnect, device number 40
[  396.476457][    C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  396.925645][    C1] sched: DL replenish lagged too much
[  445.409451][ T1368] ieee802154 phy0 wpan0: encryption failed: -22
[  445.422573][ T1368] ieee802154 phy1 wpan1: encryption failed: -22
[  465.596586][    C0] ip6_tunnel: ip6gretap0 xmit: Routing loop! Remote address found on this node!
[  507.005603][ T1368] ieee802154 phy0 wpan0: encryption failed: -22
[  507.011059][ T1368] ieee802154 phy1 wpan1: encryption failed: -22
[  548.819062][   T35] INFO: task kworker/u8:3:5869 blocked for more than 143 seconds.
[  548.821534][   T35]       Tainted: G             L      syzkaller #0
[  548.823973][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  549.739897][   T35] task:kworker/u8:3    state:D stack:23512 pid:5869  tgid:5869  ppid:2      task_flags:0x4208060 flags:0x00080000
[  549.744303][   T35] Workqueue: ipv6_addrconf addrconf_verify_work
[  549.757786][   T35] Call Trace:
[  549.759232][   T35]  <TASK>
[  549.796269][   T35]  __schedule+0x14ef/0x4fb0
[  549.797865][   T35]  ? __pfx___schedule+0x10/0x10
[  549.799537][   T35]  ? schedule+0x90/0x360
[  549.801171][   T35]  schedule+0x164/0x360
[  550.258790][   T35]  schedule_preempt_disabled+0x13/0x30
[  550.260961][   T35]  __mutex_lock+0x7fe/0x1300
[  550.262818][   T35]  ? __mutex_lock+0x5ac/0x1300
[  550.264701][   T35]  ? addrconf_verify_work+0x19/0x30
[  551.846556][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  551.848201][   T35]  ? process_scheduled_works+0xa0f/0x17a0
[  551.849962][   T35]  ? preempt_schedule_thunk+0x16/0x30
[  551.851630][   T35]  addrconf_verify_work+0x19/0x30
[  551.853220][   T35]  ? process_scheduled_works+0xa0f/0x17a0
[  551.854975][   T35]  process_scheduled_works+0xaec/0x17a0
[  553.032514][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  553.035086][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  553.051144][   T35]  ? assign_work+0x3d3/0x440
[  553.053086][   T35]  worker_thread+0x89f/0xd90
[  553.054539][   T35]  ? __kthread_parkme+0x7a/0x1f0
[  553.830875][   T35]  kthread+0x726/0x8b0
[  553.832574][   T35]  ? __pfx_worker_thread+0x10/0x10
[  553.834585][   T35]  ? __pfx_kthread+0x10/0x10
[  553.846358][   T35]  ? _raw_spin_unlock_irq+0x23/0x50
[  553.848304][   T35]  ? __pfx_kthread+0x10/0x10
[  553.850105][   T35]  ret_from_fork+0x51b/0xa40
[  553.851879][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  553.853869][   T35]  ? __switch_to+0xc82/0x1410
[  555.220874][   T35]  ? __pfx_kthread+0x10/0x10
[  555.222435][   T35]  ret_from_fork_asm+0x1a/0x30
[  555.224009][   T35]  </TASK>
[  555.472481][   T35] 
[  555.472481][   T35] Showing all locks held in the system:
[  555.488085][   T35] 4 locks held by kworker/u8:1/13:
[  555.489700][   T35]  #0: ffff888100ef7948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  555.493229][   T35]  #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  556.661394][   T35]  #2: ffffffff8f79bb10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0
[  556.664459][   T35]  #3: ffffffff8f7aa488 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x200
[  557.396977][   T35] 3 locks held by kworker/u9:0/26:
[  557.399009][   T35] 1 lock held by khungtaskd/35:
[  557.400891][   T35]  #0: ffffffff8e35a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  557.404373][   T35] 3 locks held by kworker/u10:4/1010:
[  558.501717][   T35] 3 locks held by kworker/u9:7/1403:
[  558.503964][   T35] 3 locks held by kworker/u10:13/3384:
