last executing test programs:

2m8.816288161s ago: executing program 0 (id=1):
inotify_init1(0x800)
syz_mount_image$fuse(0x0, 0x0, 0x1000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000008c0), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000200)='\xa2-\x00', 0x3, 0x1)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
llistxattr(0x0, 0x0, 0x0)

2m8.624041665s ago: executing program 0 (id=11):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)

2m6.557134492s ago: executing program 0 (id=28):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0)
r1 = dup(r0)
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0)
fadvise64(r0, 0x18, 0x0, 0x4)

2m6.491050019s ago: executing program 32 (id=28):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a42, 0x0)
r1 = dup(r0)
read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r1, 0x0)
fadvise64(r0, 0x18, 0x0, 0x4)

1m59.826320549s ago: executing program 1 (id=89):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r0, 0x560a, &(0x7f0000001040)={0x20, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"})

1m59.742597504s ago: executing program 1 (id=90):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000)
mlockall(0x5)

1m59.576071302s ago: executing program 1 (id=91):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x82e, &(0x7f00000003c0)={0x0, 0xfffffffe, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x37}, 0x0, 0x160, 0x1})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x34}, 0x2f, [0x7, 0xa, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0x10, 0x6, 0x7, 0xe4, 0xff, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x7, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x89, 0x79, 0x558e0d31, 0x5, 0x0, 0x91, 0x5, 0x4, 0x7, 0x2000002, 0x803, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x8, 0xf9a2, 0x80000001, 0x97, 0x0, 0x2, 0x10000002, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8, 0x5, 0x2, 0xfffffff3, 0x4, 0x5, 0x1000, 0x800, 0x200b396, 0x400000, 0x0, 0x4, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0x8, 0x5, 0x6, 0x2, 0x5, 0x7fffffff, 0x1ff, 0x1, 0x40007fff, 0x10, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x4, 0x5, 0xfffffff9, 0x200004, 0xffd, 0xfffff801, 0x8000005], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x1, 0x491, 0xb, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x20006, 0x7, 0x7, 0x15, 0x18c, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100007, 0x8000, 0x3fd, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x5, 0x9, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x2, 0x0, 0x2, 0x2, 0xb, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x2, 0x10000, 0x1, 0x2dd, 0x1], [0xa772, 0x1, 0x5, 0x1, 0xbfc, 0x8, 0x7c81, 0x9, 0xfffffff8, 0x40, 0x101, 0x5, 0x80000000, 0x7, 0x3, 0xa1c, 0x81, 0x6, 0x9d8a, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0x10c, 0x7f, 0x1000, 0x1ff, 0x5, 0xffffffff, 0x10000, 0xfffffffe, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0x10, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x3cb, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x80000001, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c)
io_uring_enter(r1, 0x27e2, 0xda80, 0x24, 0x0, 0x0)

1m59.44180918s ago: executing program 1 (id=92):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000040)='./file0\x00')
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0)

1m57.864969864s ago: executing program 1 (id=101):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0x2d9b, 0x100, 0x200001, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x1, 0x0})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1m57.572408013s ago: executing program 1 (id=112):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r2, 0x7, 0x0)
fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={0x0})

1m57.409691617s ago: executing program 33 (id=112):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r2, 0x7, 0x0)
fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000440)={0x0})

58.972482251s ago: executing program 2 (id=918):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24)

58.895569218s ago: executing program 2 (id=922):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x5c}}, 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1)

58.785057954s ago: executing program 2 (id=926):
unshare(0x22020400)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

58.725975841s ago: executing program 2 (id=928):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160)

58.658200781s ago: executing program 2 (id=929):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000540)="0000000000000004ff6943b80004000802ab000028f600000000860700000007", 0x20, r0)

58.35623539s ago: executing program 2 (id=933):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x0, 0x13, 0x2, 'H\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x82, 0x2, "47d8"}, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x84, 0x2, "9fa5"}, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000200)={0x20, 0x14, 0x2, "b005"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b00)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x81, 0x2, "2415"}, 0x0, 0x0, 0x0, 0x0})

58.19236304s ago: executing program 34 (id=933):
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)={0x0, 0x13, 0x2, 'H\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x82, 0x2, "47d8"}, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x84, 0x2, "9fa5"}, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000004c0)={0x84, &(0x7f0000000200)={0x20, 0x14, 0x2, "b005"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b00)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x81, 0x2, "2415"}, 0x0, 0x0, 0x0, 0x0})

1.231130265s ago: executing program 4 (id=1764):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xdf, 0x7d, &(0x7f00000004c0)="708ecd15106a15536d62694dce411009afd2f66e44f2a9674c272c3210e46cd0fa1ac676d2f8b6d350f4e09332175dd96c6d1f23f223c417f97dfc9289a6cefb12d6a6b0b92d8b976a42af89cc90f4870185b16562b00b094823b6f310d7c199919a74d0fe103cabef6d03863fe7462648088edc92e12302b900ee6220ab32ae0add48df4e6c914653de1b003f381149756ccfeecaceb4d874af657e918a3131260d33aa6a2bb7d83f0886b220b35be204a8df125afdd6e7053cac4b83ad13e85cd618490f6ad3cf2090431cbbda1934a3b1068b4b2d7039bc57c6443c3b61", &(0x7f00000005c0)=""/125, 0xfffffffa, 0x0, 0x0, 0x4a, &(0x7f0000000640), &(0x7f00000006c0)="8181c4f4e6a8ef610cdcc388f2a5d9740191f08c7b57da561455e0b0c670917fb5b901f06c6fbbf8990879664bd3edab631c5d67285b92a1b6cad87fa9b947f59743cac31f46827cecc6", 0x3, 0x0, 0x8}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, &(0x7f0000000380), &(0x7f0000000400)}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)

1.176180832s ago: executing program 4 (id=1766):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x1, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes256, 0x0, @desc3})

1.085730203s ago: executing program 3 (id=1767):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1.024944516s ago: executing program 4 (id=1769):
tkill(0x0, 0x16)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, r5)
add_key$keyring(0x0, 0x0, 0x0, 0x0, r5)
keyctl$set_timeout(0xf, r5, 0x5)

1.024801278s ago: executing program 3 (id=1770):
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="08005084e8fa05"], 0x24}}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xe, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xf7, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8001, 0xffff, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x1, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x2, 0x4}}}}}]}}]}}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

679.598292ms ago: executing program 5 (id=1773):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x11, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)

515.272292ms ago: executing program 5 (id=1774):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0x9, 0x1, 0x4, 0x0, 0xf})

405.549968ms ago: executing program 3 (id=1775):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
getresgid(&(0x7f0000002fc0), &(0x7f0000003000), &(0x7f0000003040))

405.15053ms ago: executing program 3 (id=1776):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)={0xe0, 0x10, 0x50b, 0x0, 0x200, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da201adfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d287a8dfeff963b29882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a81e93ff163103c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d0e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1cca"}]}, 0xe0}], 0x1, 0x0, 0x0, 0x804}, 0x0)

355.790177ms ago: executing program 5 (id=1777):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0xa, 0x7, 0x0, 0x0, &(0x7f0000000540)="109ac43080f8c1197b2b3c61f6da04cc7109f89502ed5d9bac945de2d89cd92368548a936b091c1c50", 0x1, 0xc})

355.64037ms ago: executing program 5 (id=1778):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x1, r2})
close_range(r0, 0xffffffffffffffff, 0x0)

292.279164ms ago: executing program 3 (id=1779):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r0, 0x8b)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0)

291.915621ms ago: executing program 5 (id=1780):
r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000080)='./file0\x00', 0x241, &(0x7f0000000440)={[{@pqnoenforce}, {@qnoenforce}, {}, {@logbufs={'logbufs', 0x3d, 0x2}}, {@nolazytime}, {@uqnoenforce}, {@pquota}, {@attr2}, {@nolazytime}]}, 0x0, 0x97b1, &(0x7f0000009640)="$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")
ioctl$FS_IOC_GETFSMAP(r0, 0xc080583d, &(0x7f0000000000)=ANY=[])

289.476222ms ago: executing program 3 (id=1781):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000000)=0x3, 0x0, 0x4)

76.750505ms ago: executing program 4 (id=1782):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"00170040", 0x103, 0x5, 0x4, 0xb, 0x2, "000019b1cf000013b09882ffbf2000", '\x00', "0a040006", '\x00', ["8b59b494c1cbd6e4af000700", "ca8cacff5bef5d5a550400", "000000ff0000000000000020", "0000000000000000001000"]})

26.826938ms ago: executing program 4 (id=1783):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80041285, &(0x7f0000001080))

526.702µs ago: executing program 5 (id=1784):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

0s ago: executing program 4 (id=1785):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000080)='./control\x00', 0x2000094, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8], 0xec, 0x5ab8, &(0x7f00000090c0)="$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")

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31361' (ED25519) to the list of known hosts.
syzkaller login: [   58.498150][ T5835] cgroup: Unknown subsys name 'net'
[   58.639373][ T5835] cgroup: Unknown subsys name 'cpuset'
[   58.646113][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.119893][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.892442][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.897333][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.901471][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.904321][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.907372][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.922701][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.925349][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.928937][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.932126][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.934927][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.959265][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.962198][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.964989][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.968590][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.971413][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.173685][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   64.203537][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   64.221404][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   64.315014][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.319513][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.322627][ T5853] bridge_slave_0: entered allmulticast mode
[   64.327258][ T5853] bridge_slave_0: entered promiscuous mode
[   64.357674][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.360583][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.363393][ T5853] bridge_slave_1: entered allmulticast mode
[   64.367833][ T5853] bridge_slave_1: entered promiscuous mode
[   64.445328][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.450953][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.454146][ T5856] bridge_slave_0: entered allmulticast mode
[   64.458645][ T5856] bridge_slave_0: entered promiscuous mode
[   64.462262][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.465346][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.469123][ T5849] bridge_slave_0: entered allmulticast mode
[   64.472998][ T5849] bridge_slave_0: entered promiscuous mode
[   64.478639][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.482349][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.485330][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.488944][ T5849] bridge_slave_1: entered allmulticast mode
[   64.493025][ T5849] bridge_slave_1: entered promiscuous mode
[   64.496263][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.498740][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.501186][ T5856] bridge_slave_1: entered allmulticast mode
[   64.504054][ T5856] bridge_slave_1: entered promiscuous mode
[   64.515287][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.562675][ T5853] team0: Port device team_slave_0 added
[   64.568303][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.572683][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.577606][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.588189][ T5853] team0: Port device team_slave_1 added
[   64.591319][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.617842][ T5856] team0: Port device team_slave_0 added
[   64.621083][ T5856] team0: Port device team_slave_1 added
[   64.656533][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.659103][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.670913][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.677926][ T5849] team0: Port device team_slave_0 added
[   64.681018][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.683909][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.695006][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.700568][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.703532][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.714806][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.722310][ T5849] team0: Port device team_slave_1 added
[   64.731830][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.734194][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.743030][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.772057][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.774401][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.782947][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.793923][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.796972][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.805217][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.814300][ T5853] hsr_slave_0: entered promiscuous mode
[   64.818770][ T5853] hsr_slave_1: entered promiscuous mode
[   64.882328][ T5849] hsr_slave_0: entered promiscuous mode
[   64.887592][ T5849] hsr_slave_1: entered promiscuous mode
[   64.890508][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   64.893007][ T5849] Cannot create hsr debugfs directory
[   64.897958][ T5856] hsr_slave_0: entered promiscuous mode
[   64.900277][ T5856] hsr_slave_1: entered promiscuous mode
[   64.902495][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   64.904477][ T5856] Cannot create hsr debugfs directory
[   65.228867][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.240650][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.248537][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.263931][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.319971][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.335200][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.357577][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.366798][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.427066][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.438333][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.444712][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.451646][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.515174][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.552245][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   65.568012][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.572251][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.600013][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.603115][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.628663][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.663087][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   65.686330][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.689483][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.705237][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.707914][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.717449][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.744503][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   65.769446][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.772405][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.797050][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.799999][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.943274][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.987342][ T5851] Bluetooth: hci2: command tx timeout
[   65.989624][ T5237] Bluetooth: hci1: command tx timeout
[   65.989900][ T5851] Bluetooth: hci0: command tx timeout
[   65.999350][ T5853] veth0_vlan: entered promiscuous mode
[   66.018080][ T5853] veth1_vlan: entered promiscuous mode
[   66.038678][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.080570][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.083900][ T5853] veth0_macvtap: entered promiscuous mode
[   66.103710][ T5853] veth1_macvtap: entered promiscuous mode
[   66.126450][ T5849] veth0_vlan: entered promiscuous mode
[   66.137714][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.151083][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.157933][ T5849] veth1_vlan: entered promiscuous mode
[   66.169800][ T5878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.173157][ T5878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.177367][ T5878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.184303][ T5878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.198031][ T5856] veth0_vlan: entered promiscuous mode
[   66.212528][ T5856] veth1_vlan: entered promiscuous mode
[   66.272794][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.279244][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.286576][ T5849] veth0_macvtap: entered promiscuous mode
[   66.300517][ T5849] veth1_macvtap: entered promiscuous mode
[   66.330816][ T5856] veth0_macvtap: entered promiscuous mode
[   66.335075][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.339780][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.349897][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.359437][ T5856] veth1_macvtap: entered promiscuous mode
[   66.367125][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.391900][ T5878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.397893][ T5878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.401427][ T5878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.408359][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.414302][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.416323][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.430771][ T5878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.478011][ T5878] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.495595][ T5878] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.500190][ T5878] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.517908][ T5878] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.553987][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.559064][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.576149][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.582255][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.624643][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.630361][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.658389][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.661724][ T5917] netlink: 'syz.2.5': attribute type 5 has an invalid length.
[   66.666390][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.807131][ T5923] loop0: detected capacity change from 0 to 1024
[   66.833785][ T5923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.835247][ T5930] loop1: detected capacity change from 0 to 128
[   66.943063][ T5856] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   66.949501][ T5856] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   66.952149][ T5934] loop2: detected capacity change from 0 to 1024
[   66.953287][ T5856] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   66.959811][ T5856] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   66.964031][ T5856] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   66.967133][ T5934] EXT4-fs: Ignoring removed bh option
[   66.974147][ T5856] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   66.978908][ T5856] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   66.979907][ T5934] EXT4-fs: inline encryption not supported
[   66.983086][ T5856] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   66.999941][ T5934] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   67.009386][ T5934] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   67.010351][ T5856] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   67.018497][ T5856] EXT4-fs warning (device loop0): empty_inline_dir:1749: bad inline directory (dir #12) - no `..'
[   67.030832][ T5934] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.10: lblock 2 mapped to illegal pblock 2 (length 1)
[   67.038697][ T5934] Quota error (device loop2): qtree_write_dquot: dquota write failed
[   67.041844][ T5934] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.10: lblock 0 mapped to illegal pblock 48 (length 1)
[   67.047881][ T5934] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   67.050765][ T5934] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.10: Failed to acquire dquot type 0
[   67.054989][ T5934] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   67.061009][ T5934] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.10: mark_inode_dirty error
[   67.064952][ T5934] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   67.075732][ T5934] EXT4-fs (loop2): 1 orphan inode deleted
[   67.078660][ T5934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.115874][   T36] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:1: lblock 1 mapped to illegal pblock 1 (length 1)
[   67.122060][   T36] Quota error (device loop2): remove_tree: Can't read quota data block 1
[   67.126237][   T36] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u10:1: Failed to release dquot type 0
[   67.179187][ T5934] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.10: lblock 0 mapped to illegal pblock 48 (length 1)
[   67.184214][ T5934] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117
[   67.217776][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.798830][ T5947] netlink: 'syz.2.16': attribute type 1 has an invalid length.
[   67.852882][ T5949] loop2: detected capacity change from 0 to 512
[   67.863160][ T5949] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   67.875927][ T5949] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   67.885185][ T5949] EXT4-fs (loop2): 1 orphan inode deleted
[   67.888716][ T5949] EXT4-fs (loop2): 1 truncate cleaned up
[   67.892866][ T5949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.903435][ T5949] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.17: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[   67.915097][ T5949] EXT4-fs (loop2): Remounting filesystem read-only
[   67.937624][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.029181][ T5954] netlink: 'syz.2.19': attribute type 11 has an invalid length.
[   68.065634][ T5851] Bluetooth: hci0: command tx timeout
[   68.065740][   T54] Bluetooth: hci1: command tx timeout
[   68.894043][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.931782][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.935904][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   69.100827][ T5911] usb 2-1: Using ep0 maxpacket: 8
[   69.118326][ T5911] usb 2-1: config 1 has an invalid interface number: 128 but max is 1
[   69.123845][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   69.128208][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   69.131949][ T5911] usb 2-1: config 1 has no interface number 0
[   69.134644][ T5911] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   69.156627][ T5911] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   69.159503][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.161973][ T5911] usb 2-1: Product: syz
[   69.175208][ T5911] usb 2-1: Manufacturer: syz
[   69.176882][ T5911] usb 2-1: SerialNumber: syz
[   69.188730][ T5911] cdc_wdm 2-1:1.128: skipping garbage
[   69.195250][ T5911] cdc_wdm 2-1:1.128: invalid descriptor buffer length
[   69.198569][ T5911] cdc_wdm 2-1:1.128: probe with driver cdc_wdm failed with error -22
[   69.264009][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.271381][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.274873][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.280566][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.283867][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.399143][ T5994] loop2: detected capacity change from 0 to 32768
[   69.401920][ T5994] =======================================================
[   69.401920][ T5994] WARNING: The mand mount option has been deprecated and
[   69.401920][ T5994]          and is ignored by this kernel. Remove the mand
[   69.401920][ T5994]          option from the mount to silence this warning.
[   69.401920][ T5994] =======================================================
[   69.410472][ T2296] usb 2-1: USB disconnect, device number 2
[   69.442514][ T5994] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   69.443372][ T5991] chnl_net:caif_netlink_parms(): no params data found
[   69.456981][ T5994] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   69.471339][   T33] audit: type=1800 audit(1755075786.309:2): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.34" name="file1" dev="loop2" ino=17058 res=0 errno=0
[   69.490817][   T33] audit: type=1804 audit(1755075786.329:3): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.34" name="/newroot/17/bus/file1" dev="loop2" ino=17058 res=1 errno=0
[   69.604831][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.612156][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.615213][ T5991] bridge_slave_0: entered allmulticast mode
[   69.622452][ T5991] bridge_slave_0: entered promiscuous mode
[   69.633636][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.645923][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.649386][ T5991] bridge_slave_1: entered allmulticast mode
[   69.657196][ T5991] bridge_slave_1: entered promiscuous mode
[   69.771031][ T5991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.789710][ T5991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.898783][ T5991] team0: Port device team_slave_0 added
[   69.914107][ T5991] team0: Port device team_slave_1 added
[   70.036058][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.039136][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.049580][ T5991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.064223][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.070215][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.080001][ T5991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.145742][ T5851] Bluetooth: hci0: command tx timeout
[   70.148519][ T5851] Bluetooth: hci1: command tx timeout
[   70.515691][ T5991] hsr_slave_0: entered promiscuous mode
[   70.520701][ T5991] hsr_slave_1: entered promiscuous mode
[   70.524824][ T5991] debugfs: 'hsr0' already exists in 'hsr'
[   70.532546][ T5991] Cannot create hsr debugfs directory
[   71.049171][ T5853] ocfs2: Unmounting device (7,2) on (node local)
[   71.051033][ T5991] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.066520][ T5991] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.083202][ T5991] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.099228][ T5991] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.124411][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.169688][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.179077][ T6020] loop2: detected capacity change from 0 to 2048
[   71.212023][ T6020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.219440][ T6020] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.229626][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.255024][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.287827][ T5991] 8021q: adding VLAN 0 to HW filter on device team0
[   71.306942][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.307563][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.309665][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.349960][   T54] Bluetooth: hci2: command tx timeout
[   71.357896][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.360473][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.383978][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.386831][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.479369][ T5991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   71.491176][ T5991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   71.499693][ T6027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.39'.
[   71.553172][   T12] bridge_slave_1: left allmulticast mode
[   71.568687][   T12] bridge_slave_1: left promiscuous mode
[   71.572058][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.608349][   T12] bridge_slave_0: left allmulticast mode
[   71.610803][   T12] bridge_slave_0: left promiscuous mode
[   71.613224][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.909031][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.915306][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.921239][   T12] bond0 (unregistering): Released all slaves
[   72.120370][ T6044] overlayfs: statfs failed on './file0'
[   72.154360][ T5991] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.230106][   T54] Bluetooth: hci1: command tx timeout
[   72.232520][   T54] Bluetooth: hci0: command tx timeout
[   72.317003][   T12] hsr_slave_0: left promiscuous mode
[   72.323913][   T12] hsr_slave_1: left promiscuous mode
[   72.333721][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.339506][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.344114][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.348250][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.368375][   T12] veth1_macvtap: left promiscuous mode
[   72.371326][   T12] veth0_macvtap: left promiscuous mode
[   72.373976][   T12] veth1_vlan: left promiscuous mode
[   72.377051][   T12] veth0_vlan: left promiscuous mode
[   72.895614][   T12] team0 (unregistering): Port device team_slave_1 removed
[   72.917899][   T12] team0 (unregistering): Port device team_slave_0 removed
[   72.976106][ T5857] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   73.164605][ T5857] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[   73.169543][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 197, setting to 64
[   73.173057][ T5857] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[   73.177977][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.190947][ T5857] usb 2-1: config 0 descriptor??
[   73.195365][ T6067] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   73.203900][ T5857] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22
[   73.246872][ T5991] veth0_vlan: entered promiscuous mode
[   73.268813][ T5991] veth1_vlan: entered promiscuous mode
[   73.299435][ T5991] veth0_macvtap: entered promiscuous mode
[   73.303190][ T5991] veth1_macvtap: entered promiscuous mode
[   73.315180][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.323871][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.334160][ T5861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.341878][ T5861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.352044][ T5861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.358716][ T5861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.423823][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.433453][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.436878][ T5851] Bluetooth: hci2: command tx timeout
[   73.439332][ T5857] usb 2-1: USB disconnect, device number 3
[   73.488562][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.500427][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.651324][ T6086] loop3: detected capacity change from 0 to 2048
[   73.690733][ T6089] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.713783][ T6086] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12
[   73.720101][ T6086] Remounting filesystem read-only
[   74.009362][ T6100] loop1: detected capacity change from 0 to 256
[   74.021755][ T6100] FAT-fs (loop1): bogus logical sector size 0
[   74.029312][ T6100] FAT-fs (loop1): Can't find a valid FAT filesystem
[   74.331268][ T6114] syz.1.64 uses obsolete (PF_INET,SOCK_PACKET)
[   74.343536][ T6117] netlink: 156 bytes leftover after parsing attributes in process `syz.3.65'.
[   74.381409][ T6120] netlink: 'syz.3.66': attribute type 1 has an invalid length.
[   74.384851][ T6120] netlink: 'syz.3.66': attribute type 2 has an invalid length.
[   74.507341][   T33] audit: type=1326 audit(1755075791.349:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.1.69" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d3d8ebe9 code=0x7ffc0000
[   74.528110][   T33] audit: type=1326 audit(1755075791.349:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.1.69" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d3d8ebe9 code=0x7ffc0000
[   74.563942][   T33] audit: type=1326 audit(1755075791.349:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.1.69" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe0d3d8ebe9 code=0x7ffc0000
[   74.592500][   T33] audit: type=1326 audit(1755075791.349:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.1.69" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d3d8ebe9 code=0x7ffc0000
[   74.613215][   T33] audit: type=1326 audit(1755075791.349:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.1.69" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe0d3d8ebe9 code=0x7ffc0000
[   74.647968][ T6137] capability: warning: `syz.1.73' uses deprecated v2 capabilities in a way that may be insecure
[   74.655876][   T33] audit: type=1326 audit(1755075791.349:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.1.69" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d3d8ebe9 code=0x7ffc0000
[   74.675521][   T33] audit: type=1326 audit(1755075791.349:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.1.69" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe0d3d8ebe9 code=0x7ffc0000
[   74.700801][   T33] audit: type=1326 audit(1755075791.349:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.1.69" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe0d3d8ebe9 code=0x7ffc0000
[   75.204579][ T6160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.80'.
[   75.506293][ T5851] Bluetooth: hci2: command tx timeout
[   77.596155][ T5851] Bluetooth: hci2: command tx timeout
[   77.761793][ T6238] warning: `syz.3.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.959698][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.076068][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.138416][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.248319][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.492343][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.525861][   T12] bridge_slave_1: left allmulticast mode
[   78.528014][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.532421][   T12] bridge_slave_1: left promiscuous mode
[   78.534335][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.537811][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.559014][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.562829][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.625233][   T12] bridge_slave_0: left allmulticast mode
[   78.655647][   T12] bridge_slave_0: left promiscuous mode
[   78.658125][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.138833][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.144735][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.151249][   T12] bond0 (unregistering): Released all slaves
[   79.214407][ T6284] syzkaller1: entered promiscuous mode
[   79.218227][ T6284] syzkaller1: entered allmulticast mode
[   79.571514][   T12] hsr_slave_0: left promiscuous mode
[   79.573993][   T12] hsr_slave_1: left promiscuous mode
[   79.576943][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.579708][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.582896][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.589040][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.601565][   T12] veth1_macvtap: left promiscuous mode
[   79.603797][   T12] veth0_macvtap: left promiscuous mode
[   79.606337][   T12] veth1_vlan: left promiscuous mode
[   79.608523][   T12] veth0_vlan: left promiscuous mode
[   79.677971][ T5911] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   79.854134][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short
[   79.857677][ T5911] usb 3-1: not running at top speed; connect to a high speed hub
[   79.861885][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.866326][ T5911] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[   79.870464][ T5911] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   79.879387][ T5911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   79.882600][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.885863][ T5911] usb 3-1: Product: syz
[   79.887687][ T5911] usb 3-1: Manufacturer: syz
[   79.889554][ T5911] usb 3-1: SerialNumber: syz
[   79.894063][   T12] team0 (unregistering): Port device team_slave_1 removed
[   79.919205][   T12] team0 (unregistering): Port device team_slave_0 removed
[   80.172035][ T5911] usb 3-1: USB disconnect, device number 2
[   80.375261][ T6268] chnl_net:caif_netlink_parms(): no params data found
[   80.472415][ T6268] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.475315][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.479268][ T6268] bridge_slave_0: entered allmulticast mode
[   80.482811][ T6268] bridge_slave_0: entered promiscuous mode
[   80.489405][ T6268] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.492271][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.495296][ T6268] bridge_slave_1: entered allmulticast mode
[   80.501617][ T6268] bridge_slave_1: entered promiscuous mode
[   80.531196][ T6268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.542996][ T6268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.567230][ T6268] team0: Port device team_slave_0 added
[   80.570789][ T6268] team0: Port device team_slave_1 added
[   80.625866][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.628377][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.637924][   T54] Bluetooth: hci0: command tx timeout
[   80.644591][ T6268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.682418][ T6268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.686266][ T6268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.698768][ T6268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.792040][ T6268] hsr_slave_0: entered promiscuous mode
[   80.825620][ T6268] hsr_slave_1: entered promiscuous mode
[   80.834528][ T6268] debugfs: 'hsr0' already exists in 'hsr'
[   80.845667][ T6268] Cannot create hsr debugfs directory
[   80.976769][ T6319] loop2: detected capacity change from 0 to 65536
[   81.036870][ T6319] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   81.065170][ T6319] XFS (loop2): Ending clean mount
[   81.071010][ T6319] XFS (loop2): Quotacheck needed: Please wait.
[   81.089306][ T6319] XFS (loop2): Quotacheck: Done.
[   81.094092][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.104472][ T6335] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   81.141460][ T5853] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   81.389722][ T6268] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.397841][ T6268] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.411831][ T6268] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.460030][ T6268] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.486570][ T6345] loop2: detected capacity change from 0 to 4096
[   81.491999][ T6345] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   81.716382][ T6268] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.748678][ T6268] 8021q: adding VLAN 0 to HW filter on device team0
[   81.787266][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.788250][ T6357] loop2: detected capacity change from 0 to 16
[   81.790265][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.814548][ T6357] erofs (device loop2): blkszbits 0 isn't supported
[   81.835884][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.839024][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.039331][   T33] audit: type=1326 audit(1755075798.879:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.2.137" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0a78ebe9 code=0x7ffc0000
[   82.067046][   T33] audit: type=1326 audit(1755075798.889:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.2.137" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fda0a78ebe9 code=0x7ffc0000
[   82.105085][   T33] audit: type=1326 audit(1755075798.889:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.2.137" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0a78ebe9 code=0x7ffc0000
[   82.134963][   T33] audit: type=1326 audit(1755075798.889:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.2.137" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fda0a78ebe9 code=0x7ffc0000
[   82.165635][ T6372] loop2: detected capacity change from 0 to 512
[   82.165648][   T33] audit: type=1326 audit(1755075798.889:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.2.137" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0a78ebe9 code=0x7ffc0000
[   82.194846][   T33] audit: type=1326 audit(1755075798.889:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.2.137" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fda0a78ebe9 code=0x7ffc0000
[   82.197645][ T6372] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.138: corrupted in-inode xattr: invalid ea_ino
[   82.224702][ T6372] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.138: couldn't read orphan inode 15 (err -117)
[   82.235279][ T6372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.242491][   T33] audit: type=1326 audit(1755075798.889:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.2.137" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0a78ebe9 code=0x7ffc0000
[   82.260180][ T6268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.345993][ T6372] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[   82.425228][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'.
[   82.459792][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.583419][ T6268] veth0_vlan: entered promiscuous mode
[   82.592208][ T6268] veth1_vlan: entered promiscuous mode
[   82.640584][ T6268] veth0_macvtap: entered promiscuous mode
[   82.659013][ T6268] veth1_macvtap: entered promiscuous mode
[   82.674185][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.689882][ T6268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.704374][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.705619][   T54] Bluetooth: hci0: command tx timeout
[   82.722133][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.742485][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.763440][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.880962][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.888671][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.945716][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.952908][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.545764][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   83.706185][   T10] usb 5-1: Using ep0 maxpacket: 16
[   83.728444][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[   83.740987][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.756548][   T10] usb 5-1: Product: syz
[   83.758283][   T10] usb 5-1: Manufacturer: syz
[   83.760159][   T10] usb 5-1: SerialNumber: syz
[   83.768315][   T10] usb 5-1: config 0 descriptor??
[   83.790443][   T10] usb 5-1: Found UVC 0.00 device syz (046d:0721)
[   83.793089][   T10] usb 5-1: No valid video chain found.
[   83.924094][ T6446] loop9: detected capacity change from 0 to 7
[   83.954849][ T6446] Dev loop9: unable to read RDB block 7
[   83.962439][ T6446]  loop9: unable to read partition table
[   83.967168][ T6446] loop9: partition table beyond EOD, truncated
[   83.980082][ T6446] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5)
[   83.980829][ T5911] usb 5-1: USB disconnect, device number 2
[   84.054895][ T6454] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   84.781250][ T6475] loop4: detected capacity change from 0 to 128
[   84.787108][   T54] Bluetooth: hci0: command tx timeout
[   84.818545][ T6475] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   84.836944][ T6475] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   84.920319][ T6481] netlink: 'syz.2.167': attribute type 1 has an invalid length.
[   85.049896][ T6488] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.170'.
[   85.057398][ T6268] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   85.519035][ T6517] dvmrp17: entered allmulticast mode
[   85.523402][ T6517] dvmrp17: left allmulticast mode
[   85.535616][ T5261] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   85.645680][ T5911] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   85.695732][ T5261] usb 5-1: Using ep0 maxpacket: 8
[   85.701052][ T5261] usb 5-1: unable to get BOS descriptor or descriptor too short
[   85.705712][ T5261] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.712721][ T5261] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   85.718902][ T5261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.722380][ T5261] usb 5-1: Product: syz
[   85.723911][ T5261] usb 5-1: Manufacturer: syz
[   85.728856][ T5261] usb 5-1: SerialNumber: syz
[   85.805641][ T5911] usb 3-1: Using ep0 maxpacket: 8
[   85.813285][ T5911] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[   85.816998][ T5911] usb 3-1: config 0 has no interface number 0
[   85.819665][ T5911] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   85.824086][ T5911] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   85.829513][ T5911] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   85.833986][ T5911] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   85.841431][ T5911] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   85.848092][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.855136][ T5911] usb 3-1: config 0 descriptor??
[   85.872863][ T5911] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   85.943526][ T5261] cdc_mbim 5-1:1.0: MBIM functional descriptor missing
[   85.947121][ T5261] cdc_mbim 5-1:1.0: bind() failure
[   85.955901][ T5261] usb 5-1: USB disconnect, device number 3
[   86.070212][ T5911] usb 3-1: USB disconnect, device number 3
[   86.081189][ T5911] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[   86.720809][   T24] cfg80211: failed to load regulatory.db
[   86.751024][ T6560] loop2: detected capacity change from 0 to 256
[   86.756171][ T6560] exfat: Deprecated parameter 'namecase'
[   86.782796][ T6560] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   86.831059][ T6562] nftables ruleset with unbound chain
[   86.866015][   T54] Bluetooth: hci0: command tx timeout
[   87.008036][ T6571] loop4: detected capacity change from 0 to 256
[   87.089656][   T33] audit: type=1800 audit(1755075803.929:19): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.203" name="file1" dev="loop4" ino=1048604 res=0 errno=0
[   87.094962][ T6571] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   87.113029][ T6571] FAT-fs (loop4): Filesystem has been set read-only
[   87.118574][ T6571] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   87.145559][ T6571] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   87.362484][   T54] Bluetooth: Wrong link type (-57)
[   87.720427][ T6610] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.868874][ T6623] netlink: 'syz.3.222': attribute type 83 has an invalid length.
[   88.206950][   T33] audit: type=1326 audit(1755075805.039:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.3.229" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073fd8ebe9 code=0x7ffc0000
[   88.214333][   T33] audit: type=1326 audit(1755075805.039:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.3.229" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073fd8ebe9 code=0x7ffc0000
[   88.222691][   T33] audit: type=1326 audit(1755075805.049:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.3.229" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f073fd8ebe9 code=0x7ffc0000
[   88.231402][   T33] audit: type=1326 audit(1755075805.049:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.3.229" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073fd8ebe9 code=0x7ffc0000
[   88.240375][   T33] audit: type=1326 audit(1755075805.049:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.3.229" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073fd8ebe9 code=0x7ffc0000
[   88.247555][   T33] audit: type=1326 audit(1755075805.049:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.3.229" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f073fd8ebe9 code=0x7ffc0000
[   88.255112][   T33] audit: type=1326 audit(1755075805.049:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.3.229" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073fd8ebe9 code=0x7ffc0000
[   88.263750][   T33] audit: type=1326 audit(1755075805.049:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.3.229" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073fd8ebe9 code=0x7ffc0000
[   88.272337][   T33] audit: type=1326 audit(1755075805.069:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6652 comm="syz.3.229" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f073fd8ebe9 code=0x7ffc0000
[   88.366567][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'.
[   88.370738][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'.
[   88.878693][ T5910] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   89.034662][ T5910] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[   89.044371][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.057596][ T5910] usb 5-1: Product: syz
[   89.061814][ T5910] usb 5-1: Manufacturer: syz
[   89.069150][ T5910] usb 5-1: SerialNumber: syz
[   89.080244][ T5910] r8152-cfgselector 5-1: Unknown version 0x0000
[   89.082947][ T5910] r8152-cfgselector 5-1: config 0 descriptor??
[   89.272672][ T6692] pvfs2: Unexpected value for 'acl'
[   89.513623][   T24] r8152-cfgselector 5-1: USB disconnect, device number 4
[   89.531356][ T6713] netlink: 'syz.3.250': attribute type 2 has an invalid length.
[   89.584441][ T5910] Process accounting resumed
[   89.691356][ T6721] netlink: 'syz.3.254': attribute type 34 has an invalid length.
[   90.011945][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.259'.
[   90.149938][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.262'.
[   90.153819][ T6741] netlink: 312 bytes leftover after parsing attributes in process `syz.2.262'.
[   90.312547][ T6745] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   90.316609][ T6745] overlayfs: failed to set xattr on upper
[   90.319067][ T6745] overlayfs: ...falling back to index=off.
[   90.321845][ T6745] overlayfs: ...falling back to uuid=null.
[   90.583138][ T6750] loop2: detected capacity change from 0 to 128
[   91.087097][ T6767] loop2: detected capacity change from 0 to 512
[   91.100766][ T6767] EXT4-fs: Ignoring removed bh option
[   91.107066][ T6767] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   91.114453][ T6767] EXT4-fs (loop2): 1 truncate cleaned up
[   91.124954][ T6767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.201602][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.893700][ T6800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.039414][ T6809] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.194080][ T6819] netlink: 14 bytes leftover after parsing attributes in process `syz.3.291'.
[   92.197144][ T6819] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.199643][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.202647][ T6819] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.205041][ T6819] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.867648][ T6833] loop2: detected capacity change from 0 to 32768
[   92.874488][ T6833] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.298 (6833)
[   92.893047][ T6833] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   92.898937][ T6833] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   92.902576][ T6833] BTRFS info (device loop2): using free-space-tree
[   92.997919][ T5853] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   93.267158][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   93.465646][   T24] usb 5-1: Using ep0 maxpacket: 16
[   93.474968][   T24] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[   93.479822][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.482780][   T24] usb 5-1: Product: syz
[   93.484578][   T24] usb 5-1: Manufacturer: syz
[   93.488192][   T24] usb 5-1: SerialNumber: syz
[   93.491575][   T24] usb 5-1: config 0 descriptor??
[   93.497807][   T24] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[   93.717579][   T24] gp8psk: usb in 128 operation failed.
[   93.725103][   T24] gp8psk: usb in 137 operation failed.
[   93.733097][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   93.743793][   T24] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[   93.769840][   T24] usb 5-1: media controller created
[   93.805141][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   93.824398][   T24] gp8psk_fe: Frontend revision 1 attached
[   93.827810][   T24] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[   93.833207][   T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[   94.076157][   T24] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[   94.080330][   T24] gp8psk: found Genpix USB device pID = 201 (hex)
[   94.322771][ T5911] usb 5-1: USB disconnect, device number 5
[   94.434397][ T5911] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[   94.570760][ T6914] kAFS: No cell specified
[   95.394757][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'.
[   95.814643][ T6968] loop2: detected capacity change from 0 to 8192
[   95.879633][ T6972] loop4: detected capacity change from 0 to 764
[   96.034869][ T6975] loop4: detected capacity change from 0 to 4096
[   96.051071][ T6979] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.449398][ T6996] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.339'.
[   96.460386][ T6987] loop4: detected capacity change from 0 to 32768
[   96.494430][ T6987] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   96.518677][ T6987] XFS (loop4): Ending clean mount
[   96.523966][ T6987] XFS (loop4): Quotacheck needed: Please wait.
[   96.556738][ T6987] XFS (loop4): Quotacheck: Done.
[   96.580348][ T6268] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   97.791706][ T5910] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   98.157107][ T7057] ptrace attach of "/syz-executor exec"[5991] was attempted by ""[7057]
[   98.185551][ T5910] usb 3-1: Using ep0 maxpacket: 8
[   98.198713][ T5910] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   98.202301][ T5910] usb 3-1: config 179 has no interface number 0
[   98.205944][ T5910] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   98.210942][ T5910] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   98.217119][ T5910] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   98.221988][ T5910] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   98.228251][ T5910] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   98.234211][ T5910] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   98.239472][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.248734][ T7049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   98.480380][ T5910] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6
[   99.615849][ T5910] usb 3-1: USB disconnect, device number 4
[   99.615940][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   99.616002][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   99.727500][ T7082] netlink: 'syz.2.372': attribute type 4 has an invalid length.
[  100.012131][ T7099] loop2: detected capacity change from 0 to 512
[  100.093909][ T7099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.099747][ T7099] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.555560][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  100.715488][   T24] usb 3-1: Using ep0 maxpacket: 8
[  100.719198][   T24] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  100.722193][   T24] usb 3-1: config 0 has no interface number 0
[  100.727422][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  100.730831][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.733976][   T24] usb 3-1: Product: syz
[  100.736242][   T24] usb 3-1: Manufacturer: syz
[  100.738355][   T24] usb 3-1: SerialNumber: syz
[  100.742725][   T24] usb 3-1: config 0 descriptor??
[  100.962304][   T24] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[  100.964603][   T24] usb 3-1: No valid video chain found.
[  100.972093][   T24] usb 3-1: USB disconnect, device number 5
[  101.073180][ T7115] trusted_key: syz.3.386 sent an empty control message without MSG_MORE.
[  101.551805][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.572699][ T7130] netlink: 724 bytes leftover after parsing attributes in process `syz.3.393'.
[  101.586512][ T7130] netlink: 724 bytes leftover after parsing attributes in process `syz.3.393'.
[  101.764612][ T7142] syz.3.399 (7142) used greatest stack depth: 18904 bytes left
[  102.355972][ T7175] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.412'.
[  102.359099][ T7175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.412'.
[  103.267964][ T5910] IPVS: starting estimator thread 0...
[  103.356828][ T7198] IPVS: using max 47 ests per chain, 112800 per kthread
[  103.575882][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'.
[  103.580450][ T7205] netlink: 108 bytes leftover after parsing attributes in process `syz.3.424'.
[  103.598208][ T7205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'.
[  103.621774][ T7205] netlink: 108 bytes leftover after parsing attributes in process `syz.3.424'.
[  103.625004][ T7205] netlink: 84 bytes leftover after parsing attributes in process `syz.3.424'.
[  103.848981][ T7211] overlayfs: failed to resolve './cgroup': -2
[  104.591687][ T7237] loop2: detected capacity change from 0 to 64
[  104.616122][ T7237] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  104.632278][ T7237] BFS-fs: bfs_fill_super(): Impossible last inode number 262303 > 513 on loop2
[  104.830011][ T7247] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  104.969684][ T7262] loop4: detected capacity change from 0 to 512
[  104.990001][ T7262] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  105.020181][ T7262] EXT4-fs (loop4): 1 truncate cleaned up
[  105.023911][ T7262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.049105][ T7262] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 13: comm syz.4.452: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[  105.112312][ T7273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'.
[  105.147396][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.820381][ T7358] process 'syz.2.496' launched './file2' with NULL argv: empty string added
[  106.944622][ T7367] overlayfs: missing 'lowerdir'
[  107.032380][ T7371] __nla_validate_parse: 1 callbacks suppressed
[  107.032398][ T7371] netlink: 88 bytes leftover after parsing attributes in process `syz.4.502'.
[  107.262323][ T5911] libceph: connect (1)[c::]:6789 error -97
[  107.265316][ T5911] libceph: mon0 (1)[c::]:6789 connect error
[  107.398549][ T7383] ceph: No mds server is up or the cluster is laggy
[  108.970130][ T7405] Bluetooth: MGMT ver 1.23
[  109.120306][ T7407] loop4: detected capacity change from 0 to 512
[  109.145479][ T7407] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  109.187373][ T7407] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  109.207842][ T7407] EXT4-fs (loop4): 1 truncate cleaned up
[  109.217389][ T7407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.291246][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.652040][ T7442] sctp: [Deprecated]: syz.2.530 (pid 7442) Use of struct sctp_assoc_value in delayed_ack socket option.
[  109.652040][ T7442] Use struct sctp_sack_info instead
[  110.479984][   T54] Bluetooth: Wrong link type (-71)
[  110.644501][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.551'.
[  111.852388][ T7516] loop2: detected capacity change from 0 to 1024
[  112.551779][   T32] hfsplus: b-tree write err: -5, ino 4
[  112.612561][ T7544] loop2: detected capacity change from 0 to 512
[  112.622617][ T7544] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  112.661381][ T7544] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.576: iget: bad i_size value: 360287970189639680
[  112.668774][ T7544] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.576: couldn't read orphan inode 15 (err -117)
[  112.676575][ T7544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.747771][ T7553] IPv6: addrconf: prefix option has invalid lifetime
[  113.098578][ T6047] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  113.464492][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.559433][ T7567] loop2: detected capacity change from 0 to 1024
[  113.777591][ T7581] loop2: detected capacity change from 0 to 128
[  113.819757][ T7581] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.833564][ T7581] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.860165][ T5853] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.256828][ T7606] loop4: detected capacity change from 0 to 8192
[  114.642726][ T7610] netlink: 'syz.3.598': attribute type 6 has an invalid length.
[  115.289521][ T7623] loop2: detected capacity change from 0 to 1024
[  115.330641][ T7623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.340303][ T7623] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.379902][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.650351][ T7649] loop4: detected capacity change from 0 to 8
[  115.652949][ T7649] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  115.661004][ T7649] cramfs: Error -3 while decompressing!
[  115.663323][ T7649] cramfs: ffffffff99be35b8(16)->ffff88811a41b000(4096)
[  115.672247][ T7649] cramfs: Error -3 while decompressing!
[  115.674703][ T7649] cramfs: ffffffff99be35b8(16)->ffff88811a41b000(4096)
[  115.686399][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  115.686411][   T33] audit: type=1800 audit(1755075832.519:32): pid=7649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.616" name="file0" dev="loop4" ino=244 res=0 errno=0
[  116.327514][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'.
[  117.041173][ T7716] loop4: detected capacity change from 0 to 32768
[  117.057841][ T7716] (syz.4.648,7716,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: directory entry too close to end - offset=220, inode=74, rec_len=284, name_len=16
[  117.064026][ T7716] (syz.4.648,7716,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=9, slot=0
[  117.068820][ T7716] (syz.4.648,7716,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  117.072487][ T7716] (syz.4.648,7716,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  117.077401][ T7716] (syz.4.648,7716,0):ocfs2_fill_super:1177 ERROR: status = -22
[  118.254284][ T7747] fuse: Bad value for 'fd'
[  119.094230][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'.
[  119.455540][ T5911] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  119.608678][ T5911] usb 5-1: config 0 has an invalid interface number: 199 but max is 1
[  119.613125][ T5911] usb 5-1: config 0 has no interface number 1
[  119.616224][ T5911] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  119.620396][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  119.627847][ T5911] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  119.635461][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  119.638802][ T5911] usb 5-1: SerialNumber: syz
[  119.643323][ T5911] usb 5-1: config 0 descriptor??
[  119.648712][ T5911] usb 5-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  119.652009][ T5911] usb 5-1: No valid video chain found.
[  119.665322][ T7795] netlink: 'syz.3.683': attribute type 1 has an invalid length.
[  119.671104][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.683'.
[  119.857589][ T5910] usb 5-1: USB disconnect, device number 6
[  120.668743][ T7836] loop2: detected capacity change from 0 to 1024
[  120.692913][   T33] audit: type=1800 audit(1755075837.529:33): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.703" name="file1" dev="loop2" ino=2 res=0 errno=0
[  120.703314][ T7836] hfsplus: catalog searching failed
[  120.753103][ T2267] hfsplus: bad catalog file entry
[  120.759076][ T2267] hfsplus: b-tree write err: -5, ino 3
[  120.865291][ T7840] atomic_op ffff888020ae5998 conn xmit_atomic 0000000000000000
[  121.696755][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'.
[  121.799274][ T7863] syz.2.714: attempt to access beyond end of device
[  121.799274][ T7863] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0
[  121.852024][ T7866] netlink: 148 bytes leftover after parsing attributes in process `syz.2.716'.
[  121.889062][ T7866] netlink: 148 bytes leftover after parsing attributes in process `syz.2.716'.
[  121.933082][ T7873] loop2: detected capacity change from 0 to 16
[  121.961563][ T7873] erofs (device loop2): mounted with root inode @ nid 36.
[  122.415531][ T5261] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  122.567412][ T5261] usb 3-1: config index 0 descriptor too short (expected 69, got 36)
[  122.571148][ T5261] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.578602][ T5261] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  122.582672][ T5261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.586627][ T5261] usb 3-1: Product: syz
[  122.588581][ T5261] usb 3-1: Manufacturer: syz
[  122.590637][ T5261] usb 3-1: SerialNumber: syz
[  122.596646][ T5261] usb 3-1: config 0 descriptor??
[  122.601654][ T5261] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  122.806766][ T5261] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  122.810486][ T5261] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  122.814547][ T5261] usb 3-1: USB disconnect, device number 6
[  123.134792][ T7906] loop4: detected capacity change from 0 to 512
[  123.139023][ T7906] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  123.150254][ T7906] EXT4-fs (loop4): 1 truncate cleaned up
[  123.155373][ T7906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.174328][ T7906] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.733: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[  123.198838][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.222509][ T7910] loop4: detected capacity change from 0 to 256
[  123.229344][ T7910] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x200c26b4, utbl_chksum : 0xe619d30d)
[  123.375887][ T7922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'.
[  124.871745][ T7949] netlink: 536 bytes leftover after parsing attributes in process `syz.3.752'.
[  124.947535][ T7951] loop4: detected capacity change from 0 to 4096
[  124.950552][ T7951] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  125.139575][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.756'.
[  125.152062][ T7959] loop2: detected capacity change from 0 to 4096
[  127.071843][ T8014] netlink: 51 bytes leftover after parsing attributes in process `syz.3.782'.
[  127.082652][ T8002] loop2: detected capacity change from 0 to 32768
[  127.109824][ T8002] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  127.143766][ T8002] XFS (loop2): Ending clean mount
[  127.210032][ T5853] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  127.402105][ T8041] netlink: 64 bytes leftover after parsing attributes in process `syz.2.787'.
[  127.471290][ T8045] loop2: detected capacity change from 0 to 512
[  127.496951][ T8045] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  127.526320][ T8045] EXT4-fs (loop2): 1 truncate cleaned up
[  127.533427][ T8045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.557617][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.900123][ T8058] 9pnet_fd: Insufficient options for proto=fd
[  127.934408][ T8061] vivid-000: =================  START STATUS  =================
[  127.939800][ T8061] vivid-000: Test Pattern: 75% Colorbar
[  127.941759][ T8061] vivid-000: Fill Percentage of Frame: 100
[  127.943683][ T8061] vivid-000: Horizontal Movement: No Movement
[  127.946961][ T8061] vivid-000: Vertical Movement: No Movement
[  127.948938][ T8061] vivid-000: OSD Text Mode: All
[  127.950689][ T8061] vivid-000: Show Border: false
[  127.952322][ T8061] vivid-000: Show Square: false
[  127.953935][ T8061] vivid-000: Sensor Flipped Horizontally: false
[  127.956615][ T8061] vivid-000: Sensor Flipped Vertically: false
[  127.958660][ T8061] vivid-000: Insert SAV Code in Image: false
[  127.961278][ T8061] vivid-000: Insert EAV Code in Image: false
[  127.964027][ T8061] vivid-000: Insert Video Guard Band: false
[  127.967339][ T8061] vivid-000: Reduced Framerate: false
[  127.969543][ T8061] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  127.972848][ T8061] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  127.976718][ T8061] vivid-000: Enable Capture Cropping: true grabbed
[  127.979630][ T8061] vivid-000: Enable Capture Composing: true grabbed
[  127.982165][ T8061] vivid-000: Enable Capture Scaler: true grabbed
[  127.984713][ T8061] vivid-000: Timestamp Source: End of Frame
[  127.988939][ T8061] vivid-000: Colorspace: sRGB
[  127.991066][ T8061] vivid-000: Transfer Function: Default
[  127.993529][ T8061] vivid-000: Y'CbCr Encoding: Default
[  127.996739][ T8061] vivid-000: HSV Encoding: Hue 0-179
[  127.998978][ T8061] vivid-000: Quantization: Default
[  128.000865][ T8061] vivid-000: Apply Alpha To Red Only: false
[  128.003585][ T8061] vivid-000: Standard Aspect Ratio: 4x3
[  128.006987][ T8061] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  128.009728][ T8061] vivid-000: DV Timings: 640x480p59 inactive
[  128.011908][ T8061] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  128.014426][ T8061] vivid-000: Maximum EDID Blocks: 2
[  128.018786][ T8061] vivid-000: Limited RGB Range (16-235): false
[  128.020972][ T8061] vivid-000: Rx RGB Quantization Range: Automatic
[  128.023223][ T8061] vivid-000: Power Present: 0x00000001
[  128.025231][ T8061] tpg source WxH: 320x240 (Y'CbCr)
[  128.027892][ T8061] tpg field: 1
[  128.029711][ T8061] tpg crop: (0,0)/320x240
[  128.031616][ T8061] tpg compose: (0,0)/320x240
[  128.033677][ T8061] tpg colorspace: 8
[  128.035824][ T8061] tpg transfer function: 0/2
[  128.035856][ T8061] tpg Y'CbCr encoding: 0/1
[  128.035861][ T8061] tpg quantization: 0/2
[  128.035865][ T8061] tpg RGB range: 0/2
[  128.035869][ T8061] vivid-000: ==================  END STATUS  ==================
[  128.268874][ T8079] loop4: detected capacity change from 0 to 512
[  128.272087][ T8079] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  128.299125][ T8079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  128.305007][ T8079] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.807: corrupted in-inode xattr: e_value size too large
[  128.312473][ T8079] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.807: couldn't read orphan inode 15 (err -117)
[  128.318530][ T8079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.340921][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.792802][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'.
[  129.226919][ T8109] netlink: 'syz.4.819': attribute type 6 has an invalid length.
[  129.555522][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  129.725479][   T10] usb 5-1: Using ep0 maxpacket: 16
[  129.729549][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.733814][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  129.738774][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024
[  129.743157][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  129.747291][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  129.751040][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  129.754728][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  129.762595][   T10] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[  129.767588][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.770690][   T10] usb 5-1: Product: syz
[  129.772472][   T10] usb 5-1: Manufacturer: syz
[  129.774278][   T10] usb 5-1: SerialNumber: syz
[  129.778424][   T10] usb 5-1: config 0 descriptor??
[  129.783246][ T8119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  129.788183][   T10] iuu_phoenix 5-1:0.0: iuu_phoenix converter detected
[  129.796114][   T10] usb 5-1: iuu_phoenix converter now attached to ttyUSB0
[  129.912368][ T8125] mmap: syz.3.828 (8125) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  129.995274][   T10] usb 5-1: USB disconnect, device number 7
[  130.014651][   T10] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  130.025817][   T10] iuu_phoenix 5-1:0.0: device disconnected
[  130.161825][ T8134] tipc: Started in network mode
[  130.164199][ T8134] tipc: Node identity ac14140f, cluster identity 4711
[  130.171193][ T8134] tipc: New replicast peer: 255.255.255.255
[  130.174364][ T8134] tipc: Enabled bearer <udp:syz2>, priority 10
[  130.198379][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'.
[  130.202489][ T8134] tipc: Disabling bearer <udp:syz2>
[  130.828623][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.849'.
[  130.955738][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  131.109471][   T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  131.123611][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.127256][   T10] usb 5-1: Product: syz
[  131.129081][   T10] usb 5-1: Manufacturer: syz
[  131.131073][   T10] usb 5-1: SerialNumber: syz
[  131.140117][   T10] usb 5-1: config 0 descriptor??
[  131.365730][   T10] usb-storage 5-1:0.0: USB Mass Storage device detected
[  131.453256][   T10] usb 5-1: USB disconnect, device number 8
[  131.529234][ T8174] loop2: detected capacity change from 0 to 32768
[  131.549751][ T8174] XFS: ikeep mount option is deprecated.
[  131.591329][ T8174] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  131.644945][ T8174] XFS (loop2): Ending clean mount
[  131.654534][ T8174] XFS (loop2): Quotacheck needed: Please wait.
[  131.683489][ T8174] XFS (loop2): Quotacheck: Done.
[  131.735189][ T5853] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.220365][ T8197] loop4: detected capacity change from 0 to 32768
[  132.224497][ T8197] XFS: ikeep mount option is deprecated.
[  132.240328][ T8197] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  132.267705][ T8197] XFS (loop4): Ending clean mount
[  132.272298][ T8197] XFS (loop4): Quotacheck needed: Please wait.
[  132.297294][ T8197] XFS (loop4): Quotacheck: Done.
[  132.316017][ T5911] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  132.330742][ T6268] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  132.487253][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.491889][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.498427][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  132.503688][ T5911] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  132.508073][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.516863][ T5911] usb 3-1: config 0 descriptor??
[  132.715456][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  132.791333][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.794173][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.867280][   T24] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[  132.870024][   T24] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  132.873470][   T24] usb 5-1: config 8 has no interface number 0
[  132.875703][   T24] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  132.880676][   T24] usb 5-1: config 8 interface 177 has no altsetting 0
[  132.883226][   T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  132.886534][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.894979][   T24] ir_toy 5-1:8.177: required endpoints not found
[  132.933059][ T5911] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  132.936107][ T5911] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  132.938853][ T5911] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  132.941818][ T5911] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  132.944720][ T5911] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  132.956002][ T5911] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  133.078302][ T8221] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.097642][   T10] usb 5-1: USB disconnect, device number 9
[  133.200770][ T5910] usb 3-1: USB disconnect, device number 7
[  133.621454][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.874'.
[  133.697342][ T8243] sch_tbf: burst 3298 is lower than device lo mtu (39799) !
[  133.937778][   T33] audit: type=1326 audit(1755075850.779:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  134.088182][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  134.091938][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  134.113769][ T8265] Zero length message leads to an empty skb
[  134.136051][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  134.140079][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  134.285080][ T8269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.888'.
[  134.324436][ T8271] netlink: 20 bytes leftover after parsing attributes in process `syz.2.889'.
[  134.713181][ T8260] loop4: detected capacity change from 0 to 32768
[  134.806671][ T8260] read_mapping_page failed!
[  134.816945][ T8260] ERROR: (device loop4): txCommit: 
[  134.816945][ T8260] 
[  134.953510][   T33] audit: type=1326 audit(1755075850.779:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  134.962691][   T33] audit: type=1326 audit(1755075850.779:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  134.971621][   T33] audit: type=1326 audit(1755075850.779:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  134.980471][   T33] audit: type=1326 audit(1755075850.789:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  134.989312][   T33] audit: type=1326 audit(1755075850.789:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  134.998605][   T33] audit: type=1326 audit(1755075850.789:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  135.007420][   T33] audit: type=1326 audit(1755075850.789:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  135.039311][   T33] audit: type=1326 audit(1755075850.789:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  135.048483][   T33] audit: type=1326 audit(1755075850.789:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8254 comm="syz.4.882" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55e3b8d550 code=0x7ffc0000
[  135.343461][ T8312] tipc: Started in network mode
[  135.345281][ T8312] tipc: Node identity 6, cluster identity 1
[  135.356768][ T8312] tipc: Node number set to 6
[  135.452231][ T8321] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  136.255324][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.910'.
[  136.260444][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.910'.
[  136.264512][ T8332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.910'.
[  136.330066][ T8334] netlink: 'syz.2.911': attribute type 29 has an invalid length.
[  136.334775][ T8334] netlink: 'syz.2.911': attribute type 29 has an invalid length.
[  136.552865][ T8348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.917'.
[  136.556443][ T8348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.917'.
[  136.678608][ T8357] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.921'.
[  136.682265][ T8357] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  136.687348][ T8357] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  137.258297][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.333279][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.406337][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.457952][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.516893][ T8394] loop4: detected capacity change from 0 to 4096
[  137.598386][   T12] bridge_slave_1: left allmulticast mode
[  137.600535][   T12] bridge_slave_1: left promiscuous mode
[  137.602725][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.610786][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  137.616359][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  137.619348][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  137.622914][   T12] bridge_slave_0: left allmulticast mode
[  137.624998][   T12] bridge_slave_0: left promiscuous mode
[  137.630590][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  137.636227][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  137.642301][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.431372][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.438005][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.453898][   T12] bond0 (unregistering): Released all slaves
[  138.789471][ T8416] sp0: Synchronizing with TNC
[  139.004368][   T12] hsr_slave_0: left promiscuous mode
[  139.006842][   T12] hsr_slave_1: left promiscuous mode
[  139.009019][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.014978][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.022432][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.027925][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.045187][   T12] veth1_macvtap: left promiscuous mode
[  139.055570][   T12] veth0_macvtap: left promiscuous mode
[  139.059826][   T12] veth1_vlan: left promiscuous mode
[  139.062589][   T12] veth0_vlan: left promiscuous mode
[  139.452712][   T12] team0 (unregistering): Port device team_slave_1 removed
[  139.484299][   T12] team0 (unregistering): Port device team_slave_0 removed
[  139.665681][   T54] Bluetooth: hci1: command tx timeout
[  139.891520][ T8449] loop4: detected capacity change from 0 to 512
[  139.973549][ T8449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.995118][ T8395] chnl_net:caif_netlink_parms(): no params data found
[  139.997878][ T8449] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.091862][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.224695][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.233477][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.237079][ T8395] bridge_slave_0: entered allmulticast mode
[  140.246638][ T8395] bridge_slave_0: entered promiscuous mode
[  140.257476][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.259911][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.262310][ T8395] bridge_slave_1: entered allmulticast mode
[  140.264987][ T8395] bridge_slave_1: entered promiscuous mode
[  140.324860][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.340013][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.449830][ T8395] team0: Port device team_slave_0 added
[  140.454339][ T8395] team0: Port device team_slave_1 added
[  140.530746][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.533746][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.555970][ T8395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.568081][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.570904][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.598415][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.677943][ T8395] hsr_slave_0: entered promiscuous mode
[  140.680253][ T8395] hsr_slave_1: entered promiscuous mode
[  140.795937][ T8470] loop4: detected capacity change from 0 to 32768
[  140.809238][ T8470] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.961 (8470)
[  140.828682][ T8470] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.832407][ T8470] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  140.835201][ T8470] BTRFS info (device loop4): using free-space-tree
[  140.919772][   T33] kauditd_printk_skb: 40 callbacks suppressed
[  140.919785][   T33] audit: type=1800 audit(1755075857.759:84): pid=8470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.961" name="file1" dev="loop4" ino=260 res=0 errno=0
[  140.972236][ T8395] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  141.007857][ T8395] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  141.049348][ T8395] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  141.067929][ T8395] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  141.094141][ T6268] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  141.293806][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.606440][ T8395] 8021q: adding VLAN 0 to HW filter on device team0
[  141.627381][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.629784][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.653803][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.656401][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.746292][   T54] Bluetooth: hci1: command tx timeout
[  141.919001][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.123786][ T8395] veth0_vlan: entered promiscuous mode
[  142.141025][ T8395] veth1_vlan: entered promiscuous mode
[  142.172347][ T8395] veth0_macvtap: entered promiscuous mode
[  142.181578][ T8395] veth1_macvtap: entered promiscuous mode
[  142.200911][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.219905][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.232733][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.261068][ T5861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.277262][ T5861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.281149][ T5861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.332372][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.341850][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.372073][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.374978][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.471790][ T8539] loop4: detected capacity change from 0 to 40427
[  142.539456][ T8566] loop5: detected capacity change from 0 to 128
[  142.571033][ T8539] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  142.583684][ T8566] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  142.601612][ T8566] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  142.658575][ T8566] EXT4-fs error (device loop5): make_indexed_dir:2269: inode #2: block 18: comm syz.5.976: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=128, rec_len=9, size=1000 fake=0
[  142.664743][ T8539] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  142.685706][ T8539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  142.734997][ T8539] syz.4.969: attempt to access beyond end of device
[  142.734997][ T8539] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  142.745334][ T8395] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  142.758198][ T6268] syz-executor: attempt to access beyond end of device
[  142.758198][ T6268] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  142.781027][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  142.781043][ T6268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.781049][ T6268] Call Trace:
[  142.781052][ T6268]  <TASK>
[  142.781056][ T6268]  dump_stack_lvl+0x189/0x250
[  142.781073][ T6268]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.781105][ T6268]  ? __pfx_queue_work_on+0x10/0x10
[  142.781114][ T6268]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  142.781124][ T6268]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  142.781136][ T6268]  f2fs_handle_critical_error+0x37c/0x540
[  142.781149][ T6268]  f2fs_write_end_io+0x886/0xb60
[  142.781167][ T6268]  __submit_merged_bio+0x27a/0x6a0
[  142.781179][ T6268]  __submit_merged_write_cond+0x255/0x530
[  142.781190][ T6268]  f2fs_write_data_pages+0x261d/0x3000
[  142.781213][ T6268]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  142.781249][ T6268]  ? __lock_acquire+0xab9/0xd20
[  142.781264][ T6268]  ? do_raw_spin_lock+0x121/0x290
[  142.781277][ T6268]  ? do_raw_spin_unlock+0x4d/0x240
[  142.781285][ T6268]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  142.781295][ T6268]  do_writepages+0x32e/0x550
[  142.781310][ T6268]  ? do_raw_spin_unlock+0x4d/0x240
[  142.781320][ T6268]  filemap_fdatawrite+0x199/0x240
[  142.781331][ T6268]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  142.781358][ T6268]  ? do_raw_spin_unlock+0x4d/0x240
[  142.781368][ T6268]  f2fs_sync_dirty_inodes+0x31f/0x830
[  142.781385][ T6268]  f2fs_write_checkpoint+0x95a/0x1df0
[  142.781404][ T6268]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  142.781431][ T6268]  ? kill_f2fs_super+0x298/0x6c0
[  142.781443][ T6268]  kill_f2fs_super+0x2c3/0x6c0
[  142.781456][ T6268]  ? __pfx_kill_f2fs_super+0x10/0x10
[  142.781464][ T6268]  ? radix_tree_delete_item+0x2b6/0x400
[  142.781485][ T6268]  ? shrinker_free+0x2ce/0x3e0
[  142.781495][ T6268]  deactivate_locked_super+0xbc/0x130
[  142.781506][ T6268]  cleanup_mnt+0x425/0x4c0
[  142.781518][ T6268]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.781531][ T6268]  task_work_run+0x1d4/0x260
[  142.781545][ T6268]  ? __pfx_task_work_run+0x10/0x10
[  142.781555][ T6268]  ? __x64_sys_umount+0x122/0x160
[  142.781569][ T6268]  ? exit_to_user_mode_loop+0x40/0x110
[  142.781584][ T6268]  exit_to_user_mode_loop+0xec/0x110
[  142.781594][ T6268]  do_syscall_64+0x2bd/0x3b0
[  142.781605][ T6268]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.781616][ T6268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.781623][ T6268]  ? exc_page_fault+0x9f/0xf0
[  142.781634][ T6268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.781641][ T6268] RIP: 0033:0x7f55e3b8ff17
[  142.781652][ T6268] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  142.781660][ T6268] RSP: 002b:00007ffd1f3ee9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  142.781669][ T6268] RAX: 0000000000000000 RBX: 00007f55e3c11c05 RCX: 00007f55e3b8ff17
[  142.781674][ T6268] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f3eea90
[  142.781678][ T6268] RBP: 00007ffd1f3eea90 R08: 0000000000000000 R09: 0000000000000000
[  142.781683][ T6268] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd1f3efb20
[  142.781688][ T6268] R13: 00007f55e3c11c05 R14: 0000000000022d02 R15: 00007ffd1f3efb60
[  142.781699][ T6268]  </TASK>
[  142.781703][ T6268] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  142.885694][ T8584] netlink: 27 bytes leftover after parsing attributes in process `syz.3.980'.
[  142.900449][ T8585] netlink: 'syz.5.978': attribute type 11 has an invalid length.
[  142.903401][ T8585] netlink: 36 bytes leftover after parsing attributes in process `syz.5.978'.
[  143.430464][ T5897] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  143.577729][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.583189][ T5897] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  143.592404][ T5897] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  143.602513][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.614618][ T5897] usb 5-1: config 0 descriptor??
[  143.760928][ T8629] loop5: detected capacity change from 0 to 1024
[  143.807729][ T8629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.825549][   T54] Bluetooth: hci1: command tx timeout
[  143.832856][ T5897] Bluetooth: Can't get state to change to load ram patch err
[  143.840687][ T5897] Bluetooth: Loading patch file failed
[  143.843230][ T5897] ath3k 5-1:0.0: probe with driver ath3k failed with error -71
[  143.848119][ T5897] usb 5-1: USB disconnect, device number 10
[  143.887557][ T8395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.452415][ T8651] netlink: 'syz.4.1004': attribute type 8 has an invalid length.
[  145.374993][ T8654] loop4: detected capacity change from 0 to 40427
[  145.408597][ T8654] F2FS-fs (loop4): invalid crc value
[  145.527876][ T8654] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  145.532884][ T8654] F2FS-fs (loop4): Start checkpoint disabled!
[  145.557659][ T8654] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  145.603092][   T33] audit: type=1804 audit(1755075862.439:85): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1005" name="/newroot/207/file0/file0" dev="loop4" ino=10 res=1 errno=0
[  145.618207][   T33] audit: type=1804 audit(1755075862.439:86): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1005" name="/newroot/207/file0/file0" dev="loop4" ino=10 res=1 errno=0
[  145.638766][   T68] kworker/u10:2: attempt to access beyond end of device
[  145.638766][   T68] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  145.647682][   T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u10:2 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  145.647715][   T68] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.647724][   T68] Workqueue: writeback wb_workfn (flush-7:4)
[  145.647749][   T68] Call Trace:
[  145.647755][   T68]  <TASK>
[  145.647761][   T68]  dump_stack_lvl+0x189/0x250
[  145.647784][   T68]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.647800][   T68]  ? __pfx_queue_work_on+0x10/0x10
[  145.647813][   T68]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  145.647830][   T68]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  145.647854][   T68]  f2fs_handle_critical_error+0x37c/0x540
[  145.647878][   T68]  f2fs_write_end_io+0x886/0xb60
[  145.647912][   T68]  __submit_merged_bio+0x27a/0x6a0
[  145.647935][   T68]  __submit_merged_write_cond+0x255/0x530
[  145.647955][   T68]  f2fs_write_data_pages+0x261d/0x3000
[  145.648003][   T68]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  145.648032][   T68]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  145.648110][   T68]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  145.648139][   T68]  ? trace_f2fs_writepages+0x7f/0x200
[  145.648156][   T68]  ? f2fs_write_node_pages+0x478/0x6e0
[  145.648175][   T68]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  145.648203][   T68]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  145.648221][   T68]  do_writepages+0x32e/0x550
[  145.648244][   T68]  ? reacquire_held_locks+0x127/0x1d0
[  145.648256][   T68]  ? writeback_sb_inodes+0x384/0x1010
[  145.648278][   T68]  __writeback_single_inode+0x145/0xff0
[  145.648294][   T68]  ? do_raw_spin_unlock+0x4d/0x240
[  145.648313][   T68]  writeback_sb_inodes+0x6c7/0x1010
[  145.648349][   T68]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  145.648401][   T68]  ? rcu_is_watching+0x15/0xb0
[  145.648424][   T68]  wb_writeback+0x43b/0xaf0
[  145.648446][   T68]  ? queue_io+0x391/0x590
[  145.648464][   T68]  ? __pfx_wb_writeback+0x10/0x10
[  145.648488][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.648506][   T68]  wb_workfn+0x409/0xef0
[  145.648533][   T68]  ? __pfx_wb_workfn+0x10/0x10
[  145.648551][   T68]  ? __lock_acquire+0xab9/0xd20
[  145.648579][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  145.648597][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.648609][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  145.648620][   T68]  ? process_scheduled_works+0x9ef/0x17b0
[  145.648634][   T68]  process_scheduled_works+0xae1/0x17b0
[  145.648674][   T68]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.648716][   T68]  worker_thread+0x8a0/0xda0
[  145.648754][   T68]  kthread+0x711/0x8a0
[  145.648773][   T68]  ? __pfx_worker_thread+0x10/0x10
[  145.648785][   T68]  ? __pfx_kthread+0x10/0x10
[  145.648803][   T68]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.648815][   T68]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.648830][   T68]  ? __pfx_kthread+0x10/0x10
[  145.648846][   T68]  ret_from_fork+0x3fc/0x770
[  145.648864][   T68]  ? __pfx_ret_from_fork+0x10/0x10
[  145.648883][   T68]  ? __switch_to_asm+0x39/0x70
[  145.648898][   T68]  ? __switch_to_asm+0x33/0x70
[  145.648911][   T68]  ? __pfx_kthread+0x10/0x10
[  145.648927][   T68]  ret_from_fork_asm+0x1a/0x30
[  145.648957][   T68]  </TASK>
[  145.648963][   T68] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  145.907306][   T54] Bluetooth: hci1: command tx timeout
[  146.280017][ T8703] loop4: detected capacity change from 0 to 256
[  146.291949][ T8703] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  146.562892][ T8722] loop4: detected capacity change from 0 to 32768
[  146.576366][ T8722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1035 (8722)
[  146.608368][ T8722] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.612141][ T8722] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  146.615138][ T8722] BTRFS info (device loop4): using free-space-tree
[  146.693283][ T8722] BTRFS info (device loop4): rebuilding free space tree
[  146.849156][ T6268] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.903259][ T8756] netlink: 'syz.3.1044': attribute type 21 has an invalid length.
[  146.928115][ T8756] netlink: 'syz.3.1044': attribute type 1 has an invalid length.
[  147.042576][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1047'.
[  147.046464][ T8763] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  147.049242][ T8763] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.072177][ T8766] netlink: 'syz.3.1049': attribute type 9 has an invalid length.
[  147.103056][ T8768] pim6reg0: tun_chr_ioctl cmd 1074025677
[  147.105870][ T8768] pim6reg0: linktype set to 805
[  147.221610][ T8781] netlink: 'syz.3.1055': attribute type 5 has an invalid length.
[  147.367230][ T8794] loop5: detected capacity change from 0 to 164
[  147.382632][ T8794] rock: directory entry would overflow storage
[  147.384912][ T8794] rock: sig=0x66, size=4, remaining=3
[  147.389900][ T8794] rock: directory entry would overflow storage
[  147.391958][ T8794] rock: sig=0x66, size=4, remaining=3
[  148.093604][ T8810] loop5: detected capacity change from 0 to 32768
[  148.162577][ T8810] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.197920][ T8810] XFS (loop5): Ending clean mount
[  148.208274][ T8810] XFS (loop5): Quotacheck needed: Please wait.
[  148.242757][ T8810] XFS (loop5): Quotacheck: Done.
[  148.281526][ T8395] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  149.171269][ T8842] mkiss: ax0: crc mode is auto.
[  149.261443][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1079'.
[  149.643008][ T8863] loop4: detected capacity change from 0 to 32768
[  149.677958][ T8875] tmpfs: Bad value for 'mpol'
[  149.734302][ T8863] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  149.734317][ T8863]   allowing incompatible features above 0.0: (unknown version)
[  149.734323][ T8863]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  149.748795][ T8863] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  149.752351][ T8863] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  149.755126][ T8863] bcachefs (loop4): dropping and reconstructing all alloc info
[  149.767276][ T8863] bcachefs (loop4): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 7 nonce 0 csum none 0:0  compress none ptr: 0:34:0 gen 0
[  149.767317][ T8863]   checksum offset + key size > uncompressed size, deleting
[  149.782017][ T8863] bcachefs (loop4): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: (unpack error)
[  149.782028][ T8863]   invalid variable length fields, deleting
[  149.791138][ T8863] bcachefs (loop4): accounting_read... done
[  149.795129][ T8863] bcachefs (loop4): alloc_read... done
[  149.798044][ T8863] bcachefs (loop4): snapshots_read... done
[  149.800459][ T8863] bcachefs (loop4): check_allocations...
[  149.810713][ T8863] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[  149.810747][ T8863]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  149.824395][ T8863] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[  149.824405][ T8863]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  149.834093][ T8863] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[  149.834103][ T8863]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  149.844790][ T8863] bcachefs (loop4): btree ptr not marked in member info btree allocated bitmap
[  149.844800][ T8863]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  149.862326][ T8863]  done
[  149.864311][ T8863] bcachefs (loop4): going read-write
[  149.868100][ T8863] bcachefs (loop4): insufficient writeable journal devices available: have 0, need 1
[  149.868100][ T8863] rw journal devs:
[  149.881838][ T8863] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[  149.887359][ T8863] bcachefs (loop4): done starting filesystem
[  149.907091][ T8884] loop5: detected capacity change from 0 to 32768
[  149.962124][ T6268] bcachefs (loop4): shutting down
[  149.971325][ T6268] bcachefs (loop4): going read-only
[  149.973486][ T6268] bcachefs (loop4): finished waiting for writes to stop
[  149.993469][ T6268] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  150.001157][ T6268] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  150.008652][ T6268] bcachefs (loop4): unclean shutdown complete, journal seq 10
[  150.016695][ T6268] bcachefs (loop4): done going read-only, filesystem not clean
[  150.017536][ T8884] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  150.029443][ T8884]   allowing incompatible features above 0.0: (unknown version)
[  150.032722][ T8884]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  150.038810][ T8884] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  150.042323][ T8884] bcachefs (loop5): initializing new filesystem
[  150.052566][ T8884] bcachefs (loop5): going read-write
[  150.056166][ T6268] bcachefs (loop4): shutdown complete
[  150.076497][ T8884] bcachefs (loop5): marking superblocks
[  150.091871][ T8884] bcachefs (loop5): initializing freespace
[  150.098652][ T8884] bcachefs (loop5): done initializing freespace
[  150.103755][ T8884] bcachefs (loop5): reading snapshots table
[  150.106506][ T8884] bcachefs (loop5): reading snapshots done
[  150.153692][ T8884] bcachefs (loop5): done starting filesystem
[  150.570553][ T8884] syz.5.1092 (8884) used greatest stack depth: 16056 bytes left
[  150.698513][ T5261] IPVS: starting estimator thread 0...
[  150.734786][ T8395] bcachefs (loop5): shutting down
[  150.764169][ T8395] bcachefs (loop5): going read-only
[  150.767404][ T8395] bcachefs (loop5): finished waiting for writes to stop
[  150.786818][ T8917] IPVS: using max 44 ests per chain, 105600 per kthread
[  150.791884][ T8395] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  150.859382][ T8395] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  150.867100][ T8395] bcachefs (loop5): clean shutdown complete, journal seq 4
[  150.872003][ T8395] bcachefs (loop5): marking filesystem clean
[  150.925270][ T8395] bcachefs (loop5): shutdown complete
[  151.204997][ T8932] loop4: detected capacity change from 0 to 40427
[  152.198868][ T8956] capability: warning: `syz.3.1118' uses 32-bit capabilities (legacy support in use)
[  152.235569][ T5910] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  152.408621][ T5910] usb 5-1: Using ep0 maxpacket: 32
[  152.420672][ T5910] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  152.423509][ T5910] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  152.434627][ T5910] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.445794][ T5910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  152.448710][ T5910] usb 5-1: config 1 has no interface number 0
[  152.451009][ T5910] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  152.453991][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.487874][ T5910] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  152.688634][ T5910] snd_usb_pod 5-1:1.1: set_interface failed
[  152.691343][ T5910] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  152.693875][ T5910] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  152.698105][ T5910] usb 5-1: USB disconnect, device number 11
[  152.898715][ T8979] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  153.014974][ T8983] loop6: detected capacity change from 0 to 2560
[  153.019594][ T8983] Buffer I/O error on dev loop6, logical block 0, async page read
[  153.022262][ T8983] Buffer I/O error on dev loop6, logical block 0, async page read
[  153.030827][ T8983] Buffer I/O error on dev loop6, logical block 0, async page read
[  153.037075][ T8983] Buffer I/O error on dev loop6, logical block 0, async page read
[  153.040366][ T8983] Buffer I/O error on dev loop6, logical block 0, async page read
[  153.043088][ T8983] Buffer I/O error on dev loop6, logical block 0, async page read
[  153.046786][ T8983] Buffer I/O error on dev loop6, logical block 0, async page read
[  153.049269][ T8983] Buffer I/O error on dev loop6, logical block 0, async page read
[  153.053394][ T8983] ldm_validate_partition_table(): Disk read failed.
[  153.056123][ T8983] Buffer I/O error on dev loop6, logical block 0, async page read
[  153.059125][ T8983] Buffer I/O error on dev loop6, logical block 0, async page read
[  153.061785][ T8983] Dev loop6: unable to read RDB block 0
[  153.064015][ T8983]  loop6: unable to read partition table
[  153.066322][ T8983] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[  153.247233][ T8985] loop5: detected capacity change from 0 to 32768
[  153.259292][ T8985] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  153.284617][ T8985] XFS (loop5): Ending clean mount
[  153.311179][ T8395] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  153.550810][   T33] audit: type=1326 audit(1755075870.389:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.5.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec5f8ebe9 code=0x7ffc0000
[  153.573131][   T33] audit: type=1326 audit(1755075870.389:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.5.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec5f8ebe9 code=0x7ffc0000
[  153.596701][   T33] audit: type=1326 audit(1755075870.389:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.5.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f0ec5f8ebe9 code=0x7ffc0000
[  153.616300][   T33] audit: type=1326 audit(1755075870.389:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.5.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec5f8ebe9 code=0x7ffc0000
[  153.639953][   T33] audit: type=1326 audit(1755075870.389:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9022 comm="syz.5.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec5f8ebe9 code=0x7ffc0000
[  153.658500][ T9029] loop5: detected capacity change from 0 to 1024
[  153.663787][ T9029] EXT4-fs: Ignoring removed bh option
[  153.672546][ T9029] EXT4-fs: inline encryption not supported
[  153.680450][ T9029] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  153.696083][ T9029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  153.702762][ T9029] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1141: lblock 2 mapped to illegal pblock 2 (length 1)
[  153.711415][ T9029] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  153.716308][ T9029] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1141: lblock 0 mapped to illegal pblock 48 (length 1)
[  153.722600][ T9029] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  153.735659][ T9029] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1141: Failed to acquire dquot type 0
[  153.741449][ T9029] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  153.745227][ T9029] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1141: mark_inode_dirty error
[  153.751491][ T9029] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  153.751601][ T9038] netlink: 'syz.3.1143': attribute type 10 has an invalid length.
[  153.755858][ T9029] EXT4-fs (loop5): 1 orphan inode deleted
[  153.761626][ T9029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.761676][ T9038] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.768860][   T52] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  153.776685][   T52] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  153.780135][   T52] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u9:2: Failed to release dquot type 0
[  153.783762][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.788357][ T9038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.793728][ T9029] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  153.795808][ T9038] team0: Port device bridge0 added
[  153.802093][ T9029] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  153.806531][ T9029] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  153.809459][ T9029] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1141: lblock 0 mapped to illegal pblock 48 (length 1)
[  153.814316][ T9029] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117
[  153.818849][ T9029] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  153.853869][ T8395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.898748][ T9040] veth1_macvtap: left promiscuous mode
[  153.901223][ T9040] macsec0: entered allmulticast mode
[  153.928827][ T9040] veth1_macvtap: entered promiscuous mode
[  153.931535][ T9040] veth1_macvtap: entered allmulticast mode
[  153.943426][ T9040] macsec0: left allmulticast mode
[  153.949209][ T9040] veth1_macvtap: left allmulticast mode
[  154.879440][ T9081] tipc: Enabled bearer <udp:s>, priority 10
[  155.129685][ T9102] loop5: detected capacity change from 0 to 256
[  155.151254][ T9102] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  155.223302][ T9106] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1169'.
[  155.328001][ T9114] loop5: detected capacity change from 0 to 256
[  155.357239][ T9114] FAT-fs (loop5): Directory bread(block 64) failed
[  155.361596][ T9114] FAT-fs (loop5): Directory bread(block 65) failed
[  155.371808][ T9114] FAT-fs (loop5): Directory bread(block 66) failed
[  155.374212][ T9114] FAT-fs (loop5): Directory bread(block 67) failed
[  155.384422][ T9114] FAT-fs (loop5): Directory bread(block 68) failed
[  155.389244][ T9114] FAT-fs (loop5): Directory bread(block 69) failed
[  155.415655][ T9114] FAT-fs (loop5): Directory bread(block 70) failed
[  155.418598][ T9114] FAT-fs (loop5): Directory bread(block 71) failed
[  155.421446][ T9114] FAT-fs (loop5): Directory bread(block 72) failed
[  155.424276][ T9114] FAT-fs (loop5): Directory bread(block 73) failed
[  157.224389][ T9168] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1183'.
[  157.603824][ T5857] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  157.755765][ T5857] usb 6-1: Using ep0 maxpacket: 16
[  157.760444][ T5857] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  157.765257][ T5857] usb 6-1: config 0 has no interface number 0
[  157.774571][ T5857] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  157.782541][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.787556][ T5857] usb 6-1: Product: syz
[  157.793921][ T5857] usb 6-1: Manufacturer: syz
[  157.797897][ T5857] usb 6-1: SerialNumber: syz
[  157.846186][ T5857] usb 6-1: config 0 descriptor??
[  158.098412][ T5910] usb 6-1: USB disconnect, device number 2
[  159.121601][ T9235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  159.981506][ T9252] loop4: detected capacity change from 0 to 32768
[  160.031638][ T9252] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  160.064742][ T9252] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  160.202668][ T9263] sctp: [Deprecated]: syz.3.1226 (pid 9263) Use of int in max_burst socket option.
[  160.202668][ T9263] Use struct sctp_assoc_value instead
[  160.321821][ T6268] ocfs2: Unmounting device (7,4) on (node local)
[  160.352230][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1228'.
[  160.662251][ T9281] ipvlan1: entered promiscuous mode
[  160.670679][ T9281] ipvlan1: entered allmulticast mode
[  160.680844][ T9281] veth0_vlan: entered allmulticast mode
[  160.829973][ T9295] netlink: 'syz.3.1241': attribute type 25 has an invalid length.
[  160.833473][ T9295] netlink: 'syz.3.1241': attribute type 7 has an invalid length.
[  160.867029][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'.
[  160.897592][ T5261] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  161.047965][ T5261] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  161.050878][ T5261] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  161.054084][ T5261] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  161.061121][ T5261] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  161.065226][ T5261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  161.070085][ T5261] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  161.073982][ T5261] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  161.086942][ T5261] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  161.090125][ T5261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.092836][ T5261] usb 6-1: Manufacturer: и
[  161.096837][ T5261] usb 6-1: config 0 descriptor??
[  161.100485][ T5261] hub 6-1:0.0: bad descriptor, ignoring hub
[  161.102553][ T5261] hub 6-1:0.0: probe with driver hub failed with error -5
[  161.110167][ T5261] input: и as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8
[  161.369894][  T791] usb 6-1: USB disconnect, device number 3
[  161.791455][ T9316] loop4: detected capacity change from 0 to 512
[  161.817189][ T9318] loop4: detected capacity change from 0 to 64
[  162.071344][ T9337] macsec1: entered promiscuous mode
[  162.073567][ T9337] macvlan1: entered promiscuous mode
[  162.081496][ T9337] macvlan1: left promiscuous mode
[  162.129161][   T33] audit: type=1326 audit(1755075878.969:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  162.142763][   T33] audit: type=1326 audit(1755075878.969:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  162.155522][   T33] audit: type=1326 audit(1755075878.979:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  162.163911][   T33] audit: type=1326 audit(1755075878.979:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  162.204317][   T33] audit: type=1326 audit(1755075878.979:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  162.221962][   T33] audit: type=1326 audit(1755075878.989:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  162.244473][   T33] audit: type=1326 audit(1755075878.989:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  162.255783][   T33] audit: type=1326 audit(1755075878.989:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9342 comm="syz.4.1265" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e3b8ebe9 code=0x7ffc0000
[  163.336976][ T9386] loop4: detected capacity change from 0 to 40427
[  163.339874][ T9386] F2FS-fs: heap/no_heap options were deprecated
[  163.342793][ T9386] F2FS-fs (loop4): build fault injection rate: 19
[  163.344970][ T9386] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  163.350199][ T9386] F2FS-fs (loop4): invalid crc value
[  163.361484][ T9386] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  163.420972][ T9386] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  163.431424][ T9386] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.440401][ T9386] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  163.451721][ T9386] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  163.464692][ T9386] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40
[  163.472074][ T9386] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xab0
[  163.509773][ T6268] syz-executor: attempt to access beyond end of device
[  163.509773][ T6268] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.515808][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  163.515825][ T6268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.515832][ T6268] Call Trace:
[  163.515837][ T6268]  <TASK>
[  163.515843][ T6268]  dump_stack_lvl+0x189/0x250
[  163.515865][ T6268]  ? __pfx_dump_stack_lvl+0x10/0x10
[  163.515880][ T6268]  ? __pfx_queue_work_on+0x10/0x10
[  163.515892][ T6268]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  163.515908][ T6268]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  163.515932][ T6268]  f2fs_handle_critical_error+0x37c/0x540
[  163.515957][ T6268]  f2fs_write_end_io+0x886/0xb60
[  163.515986][ T6268]  __submit_merged_bio+0x27a/0x6a0
[  163.516041][ T6268]  __submit_merged_write_cond+0x255/0x530
[  163.516060][ T6268]  f2fs_write_data_pages+0x261d/0x3000
[  163.516105][ T6268]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.516166][ T6268]  ? folios_put_refs+0x559/0x640
[  163.516189][ T6268]  ? __lock_acquire+0xab9/0xd20
[  163.516213][ T6268]  ? do_raw_spin_lock+0x121/0x290
[  163.516234][ T6268]  ? do_raw_spin_unlock+0x4d/0x240
[  163.516250][ T6268]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  163.516268][ T6268]  do_writepages+0x32e/0x550
[  163.516294][ T6268]  ? do_raw_spin_unlock+0x4d/0x240
[  163.516311][ T6268]  filemap_fdatawrite+0x199/0x240
[  163.516327][ T6268]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  163.516377][ T6268]  ? do_raw_spin_unlock+0x4d/0x240
[  163.516393][ T6268]  f2fs_sync_dirty_inodes+0x31f/0x830
[  163.516421][ T6268]  f2fs_write_checkpoint+0x95a/0x1df0
[  163.516460][ T6268]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  163.516513][ T6268]  ? kill_f2fs_super+0x298/0x6c0
[  163.516532][ T6268]  kill_f2fs_super+0x2c3/0x6c0
[  163.516552][ T6268]  ? __pfx_kill_f2fs_super+0x10/0x10
[  163.516565][ T6268]  ? radix_tree_delete_item+0x2b6/0x400
[  163.516593][ T6268]  ? shrinker_free+0x2ce/0x3e0
[  163.516611][ T6268]  deactivate_locked_super+0xbc/0x130
[  163.516630][ T6268]  cleanup_mnt+0x425/0x4c0
[  163.516644][ T6268]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.516660][ T6268]  task_work_run+0x1d4/0x260
[  163.516677][ T6268]  ? __pfx_task_work_run+0x10/0x10
[  163.516689][ T6268]  ? __x64_sys_umount+0x122/0x160
[  163.516708][ T6268]  ? exit_to_user_mode_loop+0x40/0x110
[  163.516746][ T6268]  exit_to_user_mode_loop+0xec/0x110
[  163.516765][ T6268]  do_syscall_64+0x2bd/0x3b0
[  163.516780][ T6268]  ? lockdep_hardirqs_on+0x9c/0x150
[  163.516814][ T6268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.516825][ T6268]  ? exc_page_fault+0x9f/0xf0
[  163.516839][ T6268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.516850][ T6268] RIP: 0033:0x7f55e3b8ff17
[  163.516861][ T6268] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  163.516871][ T6268] RSP: 002b:00007ffd1f3ee9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  163.516885][ T6268] RAX: 0000000000000000 RBX: 00007f55e3c11c05 RCX: 00007f55e3b8ff17
[  163.516893][ T6268] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1f3eea90
[  163.516899][ T6268] RBP: 00007ffd1f3eea90 R08: 0000000000000000 R09: 0000000000000000
[  163.516905][ T6268] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd1f3efb20
[  163.516912][ T6268] R13: 00007f55e3c11c05 R14: 0000000000027e08 R15: 00007ffd1f3efb60
[  163.516935][ T6268]  </TASK>
[  163.518858][ T6268] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  163.750153][ T9411] ptrace attach of "/syz-executor exec"[5991] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "[9411]
[  163.773565][    C0] vkms_vblank_simulate: vblank timer overrun
[  164.211665][ T9419] loop4: detected capacity change from 0 to 32768
[  164.240184][ T9419] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.256724][ T9419] XFS (loop4): Ending clean mount
[  164.289805][ T6268] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.521322][ T9445] usb usb1: usbfs: process 9445 (syz.4.1305) did not claim interface 0 before use
[  165.201047][ T9460] loop5: detected capacity change from 0 to 2048
[  165.248241][ T9460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.444844][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.448495][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.508598][ T9473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  165.514436][ T9473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  165.586071][ T5911] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  165.618632][ T5861] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.627729][ T5861] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.631483][ T5861] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.644921][ T5861] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.735625][ T5911] usb 5-1: Using ep0 maxpacket: 16
[  165.742936][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.750200][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  165.762528][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  165.769589][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1321'.
[  165.772940][ T9487] netlink: 'syz.5.1321': attribute type 21 has an invalid length.
[  165.778552][ T5911] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  165.785952][ T5911] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  165.790062][ T5911] usb 5-1: Manufacturer: syz
[  165.794942][ T5911] usb 5-1: config 0 descriptor??
[  165.911665][ T9493] loop5: detected capacity change from 0 to 512
[  165.920726][ T9493] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  165.932705][ T9493] EXT4-fs (loop5): 1 truncate cleaned up
[  165.937167][ T9493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.949619][ T9493] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.1324: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  165.960002][ T9493] EXT4-fs error (device loop5) in ext4_delete_entry:2739: Corrupt filesystem
[  165.982234][ T8395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.003853][ T5261] usb 5-1: USB disconnect, device number 12
[  166.295741][ T5897] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  166.429443][ T9511] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1331'.
[  166.465618][ T5897] usb 6-1: Using ep0 maxpacket: 16
[  166.471298][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.476672][ T5897] usb 6-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00
[  166.480699][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.497695][ T5897] usb 6-1: config 0 descriptor??
[  166.676220][ T9524] loop4: detected capacity change from 0 to 512
[  166.734332][ T9524] EXT4-fs (loop4): 1 orphan inode deleted
[  166.738762][ T9524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.744498][ T9524] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.759577][   T26] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  166.763811][   T26] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u9:0: Failed to release dquot type 1
[  166.825132][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.833684][ T1089] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  166.838358][ T1089] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u9:6: Failed to release dquot type 1
[  166.936822][ T9538] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1341'.
[  167.119765][ T5911] usb 6-1: USB disconnect, device number 4
[  167.183189][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'.
[  167.403288][ T9566] loop4: detected capacity change from 0 to 256
[  167.408444][ T9566] exfat: Deprecated parameter 'namecase'
[  167.418700][ T9566] exfat: Deprecated parameter 'utf8'
[  167.436708][ T9566] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  167.585234][ T9578] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  167.898461][ T9601] netlink: 'syz.3.1373': attribute type 1 has an invalid length.
[  167.902009][ T9601] netlink: 'syz.3.1373': attribute type 4 has an invalid length.
[  167.902379][ T9591] loop5: detected capacity change from 0 to 32768
[  168.271019][ T9619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1381'.
[  168.519507][ T9617] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1381'.
[  169.240459][ T9632] sctp: [Deprecated]: syz.5.1386 (pid 9632) Use of int in maxseg socket option.
[  169.240459][ T9632] Use struct sctp_assoc_value instead
[  169.785163][ T9644] loop4: detected capacity change from 0 to 256
[  169.793931][ T9642] loop5: detected capacity change from 0 to 256
[  169.797068][ T9642] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  169.800761][ T9642] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  169.806310][ T9642] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  169.976079][ T9655] sctp: [Deprecated]: syz.4.1393 (pid 9655) Use of int in max_burst socket option deprecated.
[  169.976079][ T9655] Use struct sctp_assoc_value instead
[  170.245870][ T9668] loop5: detected capacity change from 0 to 32768
[  170.304441][ T9668] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  170.329667][ T9668] XFS (loop5): Corruption warning: Metadata has LSN (1024:16) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  170.336269][ T9668] XFS (loop5): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_inobt block 0xc 
[  170.340855][ T9668] XFS (loop5): Unmount and run xfs_repair
[  170.343286][ T9668] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  170.346663][ T9668] 00000000: 49 41 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  IAB3............
[  170.350362][ T9668] 00000010: 00 00 00 00 00 00 00 0c 00 00 04 00 00 00 00 10  ................
[  170.354124][ T9668] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  170.358187][ T9668] 00000030: 00 00 00 00 4a d4 d4 6c 00 00 18 00 00 00 40 37  ....J..l......@7
[  170.361914][ T9668] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  170.365797][ T9668] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  170.369596][ T9668] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  170.373341][ T9668] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  170.377513][ T9668] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0xc len 4 error 74
[  170.382428][ T9668] XFS (loop5): Failed to read root inode 0x1800, error 117
[  170.388107][ T9668] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  170.628283][ T9684] loop5: detected capacity change from 0 to 1024
[  170.650603][ T9684] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.795873][ T9691] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  171.004862][ T9707] loop5: detected capacity change from 0 to 128
[  171.254834][ T9719] loop4: detected capacity change from 0 to 4096
[  171.290308][ T9719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.308423][ T9719] EXT4-fs (loop4): shut down requested (2)
[  171.357125][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.662232][ T9733] netlink: 'syz.5.1424': attribute type 9 has an invalid length.
[  171.666395][ T9733] netlink: 'syz.5.1424': attribute type 7 has an invalid length.
[  171.671037][ T9733] netlink: 'syz.5.1424': attribute type 8 has an invalid length.
[  172.274539][ T9734] ceph: No mds server is up or the cluster is laggy
[  172.545779][ T9754] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1433'.
[  172.557808][ T9756] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  172.592042][ T9758] netlink: 'syz.4.1434': attribute type 2 has an invalid length.
[  172.606730][ T9758] bridge: entered promiscuous mode
[  172.632448][ T9747] loop5: detected capacity change from 0 to 32768
[  172.687908][ T9747]  loop5: p9 p11 p16
[  172.727606][ T9768] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1439'.
[  172.750313][ T9766] loop4: detected capacity change from 0 to 1024
[  172.758840][ T9766] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  172.762149][ T9766] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  172.782773][ T9766] EXT4-fs (loop4): journal inode is deleted
[  172.924095][ T6023] udevd[6023]: inotify_add_watch(7, /dev/loop5p11, 10) failed: No such file or directory
[  172.927430][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop5p9, 10) failed: No such file or directory
[  172.938254][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop5p16, 10) failed: No such file or directory
[  173.172194][ T9776] loop4: detected capacity change from 0 to 32768
[  173.234832][ T9776] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names,read_only
[  173.234855][ T9776]   allowing incompatible features above 0.0: (unknown version)
[  173.234861][ T9776]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  173.252787][ T9776] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  173.256813][ T9776] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  173.259821][ T9776] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  173.259821][ T9776]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  173.279771][ T9776] bcachefs (loop4): btree node read error at btree lru level 0/0
[  173.279811][ T9776]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0
[  173.279818][ T9776]   loop4 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0
[  173.279823][ T9776]   loop4 btree validate error
[  173.279828][ T9776]   flagging btree lru lost data
[  173.279831][ T9776]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  173.279837][ T9776]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  173.279842][ T9776]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  173.279849][ T9776]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  173.279854][ T9776]   ret btree_node_read_err_bad_node
[  173.315899][ T9776] bcachefs (loop4): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[  173.321456][ T9776] bcachefs (loop4): btree node read error at btree freespace level 0/0
[  173.321466][ T9776]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[  173.321473][ T9776]   loop4 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295
[  173.321479][ T9776]   u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0
[  173.321484][ T9776]   loop4 btree validate error
[  173.321488][ T9776]   flagging btree freespace lost data
[  173.321492][ T9776]   ret btree_node_read_err_bad_node
[  173.342105][ T9776] bcachefs (loop4): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  173.354165][ T9776] bcachefs (loop4): check_topology... done
[  173.357657][ T9776] bcachefs (loop4): accounting_read... done
[  173.360685][ T9776] bcachefs (loop4): alloc_read... done
[  173.362738][ T9776] bcachefs (loop4): snapshots_read... done
[  173.364968][ T9776] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[  173.370635][ T9776] bcachefs (loop4): done starting filesystem
[  173.414638][ T9776] bcachefs (loop4): inode 4099:4294967295 has wrong backpointer:
[  173.414676][ T9776]   got       8977922886548783724:0
[  173.414680][ T9776]   should be 4098:8977922886548783724, fixing
[  173.437812][ T6268] bcachefs (loop4): shutting down
[  173.464094][ T6268] bcachefs (loop4): shutdown complete
[  173.561390][ T9784] loop5: detected capacity change from 0 to 40427
[  173.572559][ T9784] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  173.581894][ T9784] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  173.606666][ T9784] F2FS-fs (loop5): build fault injection rate: 17008
[  173.609494][ T9784] F2FS-fs (loop5): build fault injection type: 0x1f8
[  173.615143][ T9784] F2FS-fs (loop5): invalid crc value
[  173.698642][ T9784] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  173.708462][ T9784] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  173.711376][ T9784] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  173.882909][ T9784] syz.5.1447: attempt to access beyond end of device
[  173.882909][ T9784] loop5: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  173.891392][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: syz.5.1447 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  173.891413][ T9784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.891422][ T9784] Call Trace:
[  173.891427][ T9784]  <TASK>
[  173.891433][ T9784]  dump_stack_lvl+0x189/0x250
[  173.891457][ T9784]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.891471][ T9784]  ? __pfx_queue_work_on+0x10/0x10
[  173.891484][ T9784]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  173.891497][ T9784]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  173.891517][ T9784]  f2fs_handle_critical_error+0x37c/0x540
[  173.891563][ T9784]  f2fs_write_end_io+0x886/0xb60
[  173.891599][ T9784]  __submit_merged_bio+0x27a/0x6a0
[  173.891621][ T9784]  __submit_merged_write_cond+0x255/0x530
[  173.891643][ T9784]  f2fs_write_data_pages+0x261d/0x3000
[  173.891688][ T9784]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  173.891763][ T9784]  ? __lock_acquire+0xab9/0xd20
[  173.891789][ T9784]  ? do_raw_spin_lock+0x121/0x290
[  173.891812][ T9784]  ? do_raw_spin_unlock+0x4d/0x240
[  173.891827][ T9784]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  173.891844][ T9784]  do_writepages+0x32e/0x550
[  173.891872][ T9784]  ? do_raw_spin_unlock+0x4d/0x240
[  173.891890][ T9784]  filemap_fdatawrite+0x199/0x240
[  173.891910][ T9784]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  173.891998][ T9784]  ? do_raw_spin_unlock+0x4d/0x240
[  173.892019][ T9784]  f2fs_sync_dirty_inodes+0x31f/0x830
[  173.892053][ T9784]  f2fs_write_checkpoint+0x95a/0x1df0
[  173.892095][ T9784]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  173.892145][ T9784]  ? down_write+0x162/0x1f0
[  173.892165][ T9784]  ? __pfx_down_write+0x10/0x10
[  173.892193][ T9784]  f2fs_issue_checkpoint+0x3ac/0x570
[  173.892217][ T9784]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  173.892242][ T9784]  ? do_raw_spin_lock+0x121/0x290
[  173.892264][ T9784]  ? __up_read+0x280/0x680
[  173.892287][ T9784]  ? f2fs_sync_fs+0x200/0x3d0
[  173.892303][ T9784]  f2fs_do_sync_file+0x869/0x1860
[  173.892329][ T9784]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  173.892380][ T9784]  ? __pfx_down_write+0x10/0x10
[  173.892397][ T9784]  ? sb_start_write+0x114/0x1c0
[  173.892414][ T9784]  ? mnt_want_write_file+0x164/0x200
[  173.892429][ T9784]  __f2fs_ioctl+0x485a/0xb610
[  173.892462][ T9784]  ? file_ioctl+0x22d/0x780
[  173.892481][ T9784]  ? __pfx_file_ioctl+0x10/0x10
[  173.892507][ T9784]  ? kasan_quarantine_put+0xdd/0x220
[  173.892526][ T9784]  ? __pfx___f2fs_ioctl+0x10/0x10
[  173.892553][ T9784]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  173.892573][ T9784]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  173.892593][ T9784]  ? do_vfs_ioctl+0xb33/0x1430
[  173.892610][ T9784]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  173.892631][ T9784]  ? do_mprotect_pkey+0xb00/0xce0
[  173.892657][ T9784]  ? __lock_acquire+0xab9/0xd20
[  173.892691][ T9784]  ? __fget_files+0x2a/0x420
[  173.892712][ T9784]  ? __fget_files+0x2a/0x420
[  173.892729][ T9784]  ? __fget_files+0x3a0/0x420
[  173.892746][ T9784]  ? __fget_files+0x2a/0x420
[  173.892765][ T9784]  ? f2fs_ioctl+0x135/0x250
[  173.892783][ T9784]  ? __pfx_f2fs_ioctl+0x10/0x10
[  173.892801][ T9784]  __se_sys_ioctl+0xfc/0x170
[  173.892821][ T9784]  do_syscall_64+0xfa/0x3b0
[  173.892837][ T9784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.892851][ T9784]  ? asm_sysvec_call_function_single+0x1a/0x20
[  173.892867][ T9784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.892879][ T9784] RIP: 0033:0x7f0ec5f8ebe9
[  173.892893][ T9784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.892904][ T9784] RSP: 002b:00007f0ec41f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.892921][ T9784] RAX: ffffffffffffffda RBX: 00007f0ec61b5fa0 RCX: 00007f0ec5f8ebe9
[  173.892930][ T9784] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000006
[  173.892940][ T9784] RBP: 00007f0ec6011e19 R08: 0000000000000000 R09: 0000000000000000
[  173.892972][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.892981][ T9784] R13: 00007f0ec61b6038 R14: 00007f0ec61b5fa0 R15: 00007ffff5133928
[  173.893006][ T9784]  </TASK>
[  173.893011][ T9784] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  174.067974][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: syz.5.1447 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  174.067990][ T9784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.067996][ T9784] Call Trace:
[  174.068002][ T9784]  <TASK>
[  174.068005][ T9784]  dump_stack_lvl+0x189/0x250
[  174.068023][ T9784]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.068036][ T9784]  ? __pfx_queue_work_on+0x10/0x10
[  174.068045][ T9784]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  174.068055][ T9784]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  174.068071][ T9784]  f2fs_handle_critical_error+0x37c/0x540
[  174.068086][ T9784]  f2fs_write_end_io+0x886/0xb60
[  174.068107][ T9784]  __submit_merged_bio+0x27a/0x6a0
[  174.068120][ T9784]  __submit_merged_write_cond+0x255/0x530
[  174.068132][ T9784]  f2fs_write_data_pages+0x261d/0x3000
[  174.068159][ T9784]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.068210][ T9784]  ? __lock_acquire+0xab9/0xd20
[  174.068233][ T9784]  ? do_raw_spin_lock+0x121/0x290
[  174.068255][ T9784]  ? do_raw_spin_unlock+0x4d/0x240
[  174.068269][ T9784]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.068284][ T9784]  do_writepages+0x32e/0x550
[  174.068311][ T9784]  ? do_raw_spin_unlock+0x4d/0x240
[  174.068330][ T9784]  filemap_fdatawrite+0x199/0x240
[  174.068346][ T9784]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  174.068396][ T9784]  ? do_raw_spin_unlock+0x4d/0x240
[  174.068414][ T9784]  f2fs_sync_dirty_inodes+0x31f/0x830
[  174.068443][ T9784]  f2fs_write_checkpoint+0x95a/0x1df0
[  174.068503][ T9784]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  174.068559][ T9784]  ? down_write+0x162/0x1f0
[  174.068578][ T9784]  ? __pfx_down_write+0x10/0x10
[  174.068605][ T9784]  f2fs_issue_checkpoint+0x3ac/0x570
[  174.068632][ T9784]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  174.068659][ T9784]  ? do_raw_spin_lock+0x121/0x290
[  174.068681][ T9784]  ? __up_read+0x280/0x680
[  174.068703][ T9784]  ? f2fs_sync_fs+0x200/0x3d0
[  174.068719][ T9784]  f2fs_do_sync_file+0x869/0x1860
[  174.068743][ T9784]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  174.068787][ T9784]  ? __pfx_down_write+0x10/0x10
[  174.068803][ T9784]  ? sb_start_write+0x114/0x1c0
[  174.068819][ T9784]  ? mnt_want_write_file+0x164/0x200
[  174.068833][ T9784]  __f2fs_ioctl+0x485a/0xb610
[  174.068863][ T9784]  ? file_ioctl+0x22d/0x780
[  174.068879][ T9784]  ? __pfx_file_ioctl+0x10/0x10
[  174.068906][ T9784]  ? kasan_quarantine_put+0xdd/0x220
[  174.068926][ T9784]  ? __pfx___f2fs_ioctl+0x10/0x10
[  174.068976][ T9784]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  174.068996][ T9784]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  174.069016][ T9784]  ? do_vfs_ioctl+0xb33/0x1430
[  174.069034][ T9784]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  174.069052][ T9784]  ? do_mprotect_pkey+0xb00/0xce0
[  174.069074][ T9784]  ? __lock_acquire+0xab9/0xd20
[  174.069105][ T9784]  ? __fget_files+0x2a/0x420
[  174.069125][ T9784]  ? __fget_files+0x2a/0x420
[  174.069139][ T9784]  ? __fget_files+0x3a0/0x420
[  174.069154][ T9784]  ? __fget_files+0x2a/0x420
[  174.069174][ T9784]  ? f2fs_ioctl+0x135/0x250
[  174.069191][ T9784]  ? __pfx_f2fs_ioctl+0x10/0x10
[  174.069208][ T9784]  __se_sys_ioctl+0xfc/0x170
[  174.069224][ T9784]  do_syscall_64+0xfa/0x3b0
[  174.069242][ T9784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.069255][ T9784]  ? asm_sysvec_call_function_single+0x1a/0x20
[  174.069273][ T9784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.069285][ T9784] RIP: 0033:0x7f0ec5f8ebe9
[  174.069299][ T9784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.069309][ T9784] RSP: 002b:00007f0ec41f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  174.069324][ T9784] RAX: ffffffffffffffda RBX: 00007f0ec61b5fa0 RCX: 00007f0ec5f8ebe9
[  174.069334][ T9784] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000006
[  174.069343][ T9784] RBP: 00007f0ec6011e19 R08: 0000000000000000 R09: 0000000000000000
[  174.069351][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.069359][ T9784] R13: 00007f0ec61b6038 R14: 00007f0ec61b5fa0 R15: 00007ffff5133928
[  174.069383][ T9784]  </TASK>
[  174.070301][ T9784] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  174.240819][ T9784] CPU: 1 UID: 0 PID: 9784 Comm: syz.5.1447 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  174.240843][ T9784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.240853][ T9784] Call Trace:
[  174.240859][ T9784]  <TASK>
[  174.240866][ T9784]  dump_stack_lvl+0x189/0x250
[  174.240892][ T9784]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.240911][ T9784]  ? __pfx_queue_work_on+0x10/0x10
[  174.240926][ T9784]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  174.240969][ T9784]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  174.240999][ T9784]  f2fs_handle_critical_error+0x37c/0x540
[  174.241023][ T9784]  f2fs_write_end_io+0x886/0xb60
[  174.241061][ T9784]  __submit_merged_bio+0x27a/0x6a0
[  174.241084][ T9784]  __submit_merged_write_cond+0x255/0x530
[  174.241108][ T9784]  f2fs_write_data_pages+0x261d/0x3000
[  174.241158][ T9784]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.241240][ T9784]  ? __lock_acquire+0xab9/0xd20
[  174.241266][ T9784]  ? do_raw_spin_lock+0x121/0x290
[  174.241292][ T9784]  ? do_raw_spin_unlock+0x4d/0x240
[  174.241308][ T9784]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.241326][ T9784]  do_writepages+0x32e/0x550
[  174.241355][ T9784]  ? do_raw_spin_unlock+0x4d/0x240
[  174.241375][ T9784]  filemap_fdatawrite+0x199/0x240
[  174.241394][ T9784]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  174.241456][ T9784]  ? do_raw_spin_unlock+0x4d/0x240
[  174.241476][ T9784]  f2fs_sync_dirty_inodes+0x31f/0x830
[  174.241510][ T9784]  f2fs_write_checkpoint+0x95a/0x1df0
[  174.241550][ T9784]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  174.241604][ T9784]  ? down_write+0x162/0x1f0
[  174.241628][ T9784]  ? __pfx_down_write+0x10/0x10
[  174.241655][ T9784]  f2fs_issue_checkpoint+0x3ac/0x570
[  174.241679][ T9784]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  174.241708][ T9784]  ? do_raw_spin_lock+0x121/0x290
[  174.241734][ T9784]  ? __up_read+0x280/0x680
[  174.241758][ T9784]  ? f2fs_sync_fs+0x200/0x3d0
[  174.241776][ T9784]  f2fs_do_sync_file+0x869/0x1860
[  174.241804][ T9784]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  174.241859][ T9784]  ? __pfx_down_write+0x10/0x10
[  174.241876][ T9784]  ? sb_start_write+0x114/0x1c0
[  174.241893][ T9784]  ? mnt_want_write_file+0x164/0x200
[  174.241911][ T9784]  __f2fs_ioctl+0x485a/0xb610
[  174.241972][ T9784]  ? file_ioctl+0x22d/0x780
[  174.241996][ T9784]  ? __pfx_file_ioctl+0x10/0x10
[  174.242025][ T9784]  ? kasan_quarantine_put+0xdd/0x220
[  174.242048][ T9784]  ? __pfx___f2fs_ioctl+0x10/0x10
[  174.242072][ T9784]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  174.242092][ T9784]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  174.242111][ T9784]  ? do_vfs_ioctl+0xb33/0x1430
[  174.242129][ T9784]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  174.242149][ T9784]  ? do_mprotect_pkey+0xb00/0xce0
[  174.242170][ T9784]  ? __lock_acquire+0xab9/0xd20
[  174.242208][ T9784]  ? __fget_files+0x2a/0x420
[  174.242229][ T9784]  ? __fget_files+0x2a/0x420
[  174.242246][ T9784]  ? __fget_files+0x3a0/0x420
[  174.242263][ T9784]  ? __fget_files+0x2a/0x420
[  174.242284][ T9784]  ? f2fs_ioctl+0x135/0x250
[  174.242303][ T9784]  ? __pfx_f2fs_ioctl+0x10/0x10
[  174.242322][ T9784]  __se_sys_ioctl+0xfc/0x170
[  174.242340][ T9784]  do_syscall_64+0xfa/0x3b0
[  174.242358][ T9784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.242370][ T9784]  ? asm_sysvec_call_function_single+0x1a/0x20
[  174.242389][ T9784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.242403][ T9784] RIP: 0033:0x7f0ec5f8ebe9
[  174.242418][ T9784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  174.242430][ T9784] RSP: 002b:00007f0ec41f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  174.242447][ T9784] RAX: ffffffffffffffda RBX: 00007f0ec61b5fa0 RCX: 00007f0ec5f8ebe9
[  174.242457][ T9784] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000006
[  174.242465][ T9784] RBP: 00007f0ec6011e19 R08: 0000000000000000 R09: 0000000000000000
[  174.242474][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  174.242483][ T9784] R13: 00007f0ec61b6038 R14: 00007f0ec61b5fa0 R15: 00007ffff5133928
[  174.242510][ T9784]  </TASK>
[  174.242516][ T9784] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  174.618778][ T9813] vivid-000: disconnect
[  174.621968][ T9812] vivid-000: reconnect
[  174.719344][ T9819] overlayfs: failed to clone upperpath
[  174.777861][ T9821] netlink: 'syz.3.1463': attribute type 6 has an invalid length.
[  175.394981][ T9846] loop4: detected capacity change from 0 to 256
[  175.597881][ T9852] loop4: detected capacity change from 0 to 1024
[  175.650265][ T9852] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  175.652708][ T9852] hfsplus: xattr searching failed
[  175.655176][ T9852] syz.4.1474: attempt to access beyond end of device
[  175.655176][ T9852] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  175.661979][ T9852] buffer_io_error: 11 callbacks suppressed
[  175.661990][ T9852] Buffer I/O error on dev loop4, logical block 2889, async page read
[  175.678057][ T9852] syz.4.1474: attempt to access beyond end of device
[  175.678057][ T9852] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  175.682796][ T9852] Buffer I/O error on dev loop4, logical block 2889, async page read
[  175.687790][   T33] audit: type=1800 audit(1755075892.529:100): pid=9852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1474" name="file1" dev="loop4" ino=20 res=0 errno=0
[  175.749327][ T9861] loop4: detected capacity change from 0 to 2048
[  175.789402][ T5852]  loop4: p2 < > p4
[  175.791848][ T5852] loop4: p4 size 8192 extends beyond EOD, truncated
[  175.817167][ T9861]  loop4: p2 < > p4
[  175.820239][ T9861] loop4: p4 size 8192 extends beyond EOD, truncated
[  175.954251][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  175.968738][ T6023] udevd[6023]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  176.023490][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  176.029780][ T5852] udevd[5852]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  176.355080][ T9876] loop5: detected capacity change from 0 to 32768
[  176.365059][ T9876] XFS: ikeep mount option is deprecated.
[  176.395042][ T9881] loop4: detected capacity change from 0 to 32768
[  176.400181][ T9881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1489 (9881)
[  176.403566][ T9876] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  176.428077][ T9876] XFS (loop5): Ending clean mount
[  176.433274][ T9876] XFS (loop5): Quotacheck needed: Please wait.
[  176.435651][ T9881] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.451041][ T9881] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  176.454675][ T9881] BTRFS info (device loop4): using free-space-tree
[  176.463475][ T9876] XFS (loop5): Quotacheck: Done.
[  176.499702][ T8395] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  176.718580][ T6268] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.025136][ T5911] IPVS: starting estimator thread 0...
[  177.034780][ T9924] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  177.115598][ T9928] IPVS: using max 51 ests per chain, 122400 per kthread
[  177.214927][ T9923] loop4: detected capacity change from 0 to 32768
[  177.246840][ T9941] overlayfs: failed to clone upperpath
[  177.258245][ T9923] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1497 (9923)
[  177.285825][ T9923] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.296661][ T9923] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  177.300335][ T9923] BTRFS info (device loop4): using free-space-tree
[  177.342200][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1507'.
[  177.416699][ T6268] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.490666][ T9967] loop5: detected capacity change from 0 to 4096
[  177.865872][ T9973] loop5: detected capacity change from 0 to 32768
[  177.872544][ T9973] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1512 (9973)
[  177.892029][ T9973] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  177.896055][ T9973] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  177.899233][ T9973] BTRFS info (device loop5): disk space caching is enabled
[  177.902454][ T9973] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  178.010438][ T9973] BTRFS info (device loop5): rebuilding free space tree
[  178.024840][ T9973] BTRFS info (device loop5): disabling free space tree
[  178.029603][ T9973] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  178.033902][ T9973] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  178.226229][ T8395] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  178.240923][ T9975] loop4: detected capacity change from 0 to 32768
[  178.292099][ T9975] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  178.386779][ T6268] (syz-executor,6268,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  178.399866][ T6268] ocfs2: Unmounting device (7,4) on (node local)
[  178.649397][T10004] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1516'.
[  178.741495][T10006] loop4: detected capacity change from 0 to 1024
[  178.817676][T10010] QAT: Device 7 not found
[  178.862456][T10006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.952530][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.054590][T10022] netlink: 'syz.3.1526': attribute type 10 has an invalid length.
[  179.285685][ T5261] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  179.291794][T10036] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1532'.
[  179.294766][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1532'.
[  179.306165][T10036] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1532'.
[  179.353251][T10033] loop5: detected capacity change from 0 to 32768
[  179.389787][T10033] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.406915][T10033] XFS (loop5): Ending clean mount
[  179.417092][T10033] XFS (loop5): Quotacheck needed: Please wait.
[  179.438285][T10033] XFS (loop5): Quotacheck: Done.
[  179.439079][ T5261] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  179.444569][ T5261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  179.456940][ T5261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  179.467465][ T5261] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  179.473684][ T8395] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.474912][ T5261] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  179.481747][ T5261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.489437][ T5261] usb 5-1: config 0 descriptor??
[  179.780030][ T5897] Process accounting resumed
[  179.920507][ T5261] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max
[  179.941974][ T5261] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  180.369884][T10081] veth1_to_bond: entered allmulticast mode
[  180.373078][T10080] veth1_to_bond: left allmulticast mode
[  180.704771][T10085] loop5: detected capacity change from 0 to 32768
[  180.717904][T10085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1551 (10085)
[  180.726611][T10085] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.729900][T10085] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  180.733310][T10085] BTRFS info (device loop5): using free-space-tree
[  180.804845][T10085] BTRFS info (device loop5): rebuilding free space tree
[  180.853757][   T33] audit: type=1800 audit(1755075897.689:101): pid=10085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1551" name="file2" dev="loop5" ino=261 res=0 errno=0
[  180.889582][ T8395] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.500405][T10132] overlay: Unknown parameter '\'
[  181.579485][ T5911] Process accounting resumed
[  182.138131][T10158] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.256966][ T5261] usb 5-1: USB disconnect, device number 13
[  182.744567][T10190] loop4: detected capacity change from 0 to 32768
[  182.751119][T10190] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1592 (10190)
[  182.772249][T10190] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  182.783526][T10190] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  182.792406][T10190] BTRFS info (device loop4): using free-space-tree
[  183.113497][T10190] BTRFS info (device loop4): rebuilding free space tree
[  183.253138][ T6268] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  183.565129][T10238] loop4: detected capacity change from 0 to 1024
[  183.584210][T10238] EXT4-fs: inline encryption not supported
[  183.595740][T10238] EXT4-fs: Ignoring removed i_version option
[  183.604640][T10238] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  183.626008][T10238] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1606: lblock 2 mapped to illegal pblock 2 (length 1)
[  183.632371][T10238] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  183.639760][T10238] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1606: lblock 0 mapped to illegal pblock 48 (length 1)
[  183.646344][T10238] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  183.650109][T10238] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1606: Failed to acquire dquot type 0
[  183.655128][T10238] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  183.661065][T10238] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1606: mark_inode_dirty error
[  183.668755][T10238] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  183.674133][T10238] EXT4-fs (loop4): 1 orphan inode deleted
[  183.679387][T10238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.731682][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.737316][   T27] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  183.743398][   T27] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  183.749494][   T27] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u10:0: Failed to release dquot type 0
[  183.757686][ T6268] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  183.768933][ T6268] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  183.773943][ T6268] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  183.855100][T10247] loop4: detected capacity change from 0 to 1024
[  183.977494][ T3638] hfsplus: b-tree write err: -5, ino 3
[  183.987576][ T6268] hfsplus: node 4:3 still has 2 user(s)!
[  184.185027][T10261] loop4: detected capacity change from 0 to 512
[  184.191572][T10261] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  184.377267][T10271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  184.464972][T10277] loop5: detected capacity change from 0 to 8
[  184.484300][T10277] unable to read xattr id index table
[  184.864474][T10289] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9)
[  184.867510][T10289] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  184.873774][T10289] vhci_hcd vhci_hcd.0: Device attached
[  184.952129][T10290] vhci_hcd: connection closed
[  184.966063][   T12] vhci_hcd: stop threads
[  184.974191][   T12] vhci_hcd: release socket
[  184.979416][   T12] vhci_hcd: disconnect device
[  185.044102][T10296] RDS: rds_bind could not find a transport for ::ffff:0.0.0.224, load rds_tcp or rds_rdma?
[  185.207657][ T5911] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  186.076375][ T5911] usb 5-1: Using ep0 maxpacket: 8
[  186.087276][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short
[  186.097121][ T5911] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  186.101496][ T5911] usb 5-1: config 7 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  186.125649][ T5911] usb 5-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  186.128586][T10324] overlayfs: failed to clone upperpath
[  186.154186][ T5911] usb 5-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  186.159413][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.162820][ T5911] usb 5-1: Product: syz
[  186.165181][ T5911] usb 5-1: Manufacturer: syz
[  186.167588][ T5911] usb 5-1: SerialNumber: syz
[  186.202142][T10330] loop5: detected capacity change from 0 to 512
[  186.207349][T10330] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  186.211930][T10330] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6842e02c, mo2=0102]
[  186.214680][T10330] System zones: 1-12
[  186.217875][T10330] EXT4-fs (loop5): orphan cleanup on readonly fs
[  186.222206][T10330] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1649: invalid indirect mapped block 12 (level 1)
[  186.230407][T10330] EXT4-fs (loop5): Remounting filesystem read-only
[  186.232749][T10330] EXT4-fs (loop5): 1 truncate cleaned up
[  186.235230][T10330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  186.265276][ T8395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  186.395628][ T5911] usb 5-1: USB disconnect, device number 14
[  187.352448][ T5897] usb 5-1: new low-speed USB device number 15 using dummy_hcd
[  187.530678][ T5897] usb 5-1: config 65 has an invalid interface number: 95 but max is 0
[  187.534224][ T5897] usb 5-1: config 65 has no interface number 0
[  187.578099][ T5897] usb 5-1: string descriptor 0 read error: -22
[  187.582782][ T5897] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6
[  187.592244][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.627304][ T5897] usbtest 5-1:65.95: Linux gadget zero
[  187.629748][ T5897] usbtest 5-1:65.95: low-speed {control in/out} tests (+alt)
[  187.867401][ T5911] usb 5-1: USB disconnect, device number 15
[  189.006807][T10366] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1664'.
[  189.391074][T10392] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1677'.
[  189.394222][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1677'.
[  189.410817][T10389] evm: overlay not supported
[  189.603584][T10402] loop5: detected capacity change from 0 to 4096
[  189.963442][T10424] loop4: detected capacity change from 0 to 256
[  189.967559][T10424] exfat: Deprecated parameter 'namecase'
[  189.971504][T10424] exfat: Deprecated parameter 'namecase'
[  189.981492][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1693'.
[  189.990408][T10424] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  190.058412][T10430] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  190.278359][T10444] binder: BINDER_SET_CONTEXT_MGR already set
[  190.281397][T10444] binder: 10443:10444 ioctl 4018620d 200000000040 returned -16
[  190.409792][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'.
[  190.410036][T10454] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  190.432387][T10454] overlayfs: failed to set xattr on upper
[  190.438549][T10454] overlayfs: ...falling back to redirect_dir=nofollow.
[  190.441587][T10454] overlayfs: ...falling back to index=off.
[  190.445119][T10454] overlayfs: ...falling back to uuid=null.
[  190.449272][T10454] overlayfs: failed to clone lowerpath
[  190.876510][T10489] loop4: detected capacity change from 0 to 1024
[  190.891217][T10489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.115606][T10489] EXT4-fs (loop4): shut down requested (2)
[  191.227583][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.425223][T10523] netlink: 'syz.5.1734': attribute type 29 has an invalid length.
[  192.430028][T10523] netlink: 'syz.5.1734': attribute type 29 has an invalid length.
[  192.855721][  T791] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  192.903989][T10541] delete_channel: no stack
[  193.006906][  T791] usb 6-1: Using ep0 maxpacket: 8
[  193.013434][  T791] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13
[  193.024566][  T791] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  193.034733][  T791] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3
[  193.043473][  T791] usb 6-1: Product: syz
[  193.047966][  T791] usb 6-1: Manufacturer: syz
[  193.054169][  T791] usb 6-1: SerialNumber: syz
[  193.064312][  T791] usb 6-1: config 0 descriptor??
[  193.095116][  T791] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  193.309663][  T791] gspca_zc3xx: reg_w_i err -71
[  193.741416][T10564] loop4: detected capacity change from 0 to 512
[  193.771755][T10564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.777270][T10564] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.831832][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.896164][  T791] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  193.899664][  T791] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  193.908072][  T791] usb 6-1: USB disconnect, device number 5
[  193.976512][T10573] loop4: detected capacity change from 0 to 512
[  193.986239][T10573] EXT4-fs (loop4): Test dummy encryption mode enabled
[  194.002686][T10573] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  194.007160][T10573] EXT4-fs (loop4): Errors on filesystem, clearing orphan list.
[  194.011376][T10573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.056077][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.123123][T10580] loop4: detected capacity change from 0 to 128
[  194.142485][   T33] audit: type=1800 audit(1755075910.979:102): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1757" name="file1" dev="loop4" ino=1048660 res=0 errno=0
[  194.154265][   T33] audit: type=1800 audit(1755075910.999:103): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1757" name="file1" dev="loop4" ino=1048660 res=0 errno=0
[  194.163532][T10580] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8)
[  194.168620][T10580] FAT-fs (loop4): Filesystem has been set read-only
[  194.171301][T10580] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522)
[  194.237697][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.245318][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.390004][T10596] loop4: detected capacity change from 0 to 512
[  194.393835][T10596] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  194.404801][T10596] EXT4-fs (loop4): 1 truncate cleaned up
[  194.431767][T10596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.454652][T10596] EXT4-fs (loop4): shut down requested (2)
[  194.458261][T10596] syz.4.1766 (pid 10596) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  194.475118][T10601] 9pnet_fd: Insufficient options for proto=fd
[  194.479279][ T6268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.659397][T10607] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  195.374891][T10630] loop5: detected capacity change from 0 to 32768
[  195.379790][T10630] XFS: attr2 mount option is deprecated.
[  195.444149][T10630] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  195.498313][T10630] XFS (loop5): Ending clean mount
[  195.508520][T10630] XFS (loop5): Quotacheck needed: Please wait.
[  195.523245][T10630] XFS (loop5): Quotacheck: Done.
[  195.567110][ T8395] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
Connection to localhost closed by remote host.
[  195.828306][T10647] loop4: detected capacity change from 0 to 32768
[  195.837993][T10647] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  195.837993][T10647] members_v2 (size 152):
[  195.837993][T10647] Device:                        0
[  195.837993][T10647]   Label:                       (none)
[  195.837993][T10647]   UUID:                        7af6772b-00de-4159-84cd-1faead7f0000
[  195.837993][T10647]   Size:                        0
[  195.837993][T10647]   read errors:                 0
[  195.837993][T10647]   write errors:                0
[  195.837993][T10647]   checksum errors:             0
[  195.837993][T10647]   seqread iops:                0
[  195.837993][T10647]   seqwrite iops:               0
[  195.837993][T10647]   randread iops:               0
[  195.837993][T10647]   randwrite iops:              0
[  195.837993][T10647]   Bucket size:                 131072
[  195.837993][T10647]   First bucket:                0
[  195.837993][T10647]   Buckets:                     0
[  195.837993][T10647]   Last mount:                  1714681267
[  195.837993][T10647]   Last superblock write:       83886122
[  195.837993][T10647]   State:                       rw
[  195.837993][T10647]   Data allowed:                journal,btree,user
[  195.837993][T10647]   Has data:                    (none)
[  195.837993][T10647]   Btree allocated bitmap blocksize:256
[  195.837993][T10647]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  195.837993][T10647]   Durability:   
[  195.838083][T10647] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  195.882227][    C0] vkms_vblank_simulate: vblank timer overrun
[  196.305612][ T5851] Bluetooth: hci2: command 0x0406 tx timeout

VM DIAGNOSIS:
09:05:22  Registers:
info registers vcpu 0

CPU#0
RAX=9d983e2e66ae8300 RBX=ffffffff81968308 RCX=9d983e2e66ae8300 RDX=0000000000000001
RSI=ffffffff8d9b4449 RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055af0ee10680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0e0174b2501bc870 ffff00000153c000
XMM04=00088004208082a8 1000028004058004 XMM05=0104c3800402eaf0 100003d802000880
XMM06=04208082a8100002 80040580040e0174 XMM07=b2501bc870ffff00 000153c000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff88804b039f80 RCX=ffffffff8b7b3e5c RDX=0000000000000000
RSI=0000000000000004 RDI=ffff88804b039f80 RBP=ffffc90000177a18 RSP=ffffc900001778e8
R8 =ffff88804b039f84 R9 =ffff800000000000 R10=dffffc0000000000 R11=ffffed10096073f1
R12=1ffff9200002ef2c R13=0000000000000001 R14=ffffc90000177980 R15=1ffff110096073f0
RIP=ffffffff8222fe03 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055af0ee0f600 CR3=000000010e308000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0e0174b2501bc870 ffff00000153c000
XMM04=00088004208082a8 1000028004058004 XMM05=0104c3800402eaf0 100003d802000880
XMM06=04208082a8100002 80040580040e0174 XMM07=b2501bc870ffff00 000153c000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
