last executing test programs:

1m41.388712108s ago: executing program 0 (id=69):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendmmsg$inet(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5a48487795104f157aff06b58b8", 0x8e}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405", 0x96}, {&(0x7f0000000280)="d0dc81873ef03a796b2a22", 0xb}], 0x3}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="722abe089bad444a712571d5db482a97046f64a6e9f378fbfeeec001e4", 0x1d}, {&(0x7f00000008c0)="3c79412e1982c663c230408536db37b8bc008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4", 0x46}, {&(0x7f0000001a40)="f6ebd69cb61b04dbd8e4dc5f132da95cea069c4cf1c50489523f8e2bfaf472441fc9ebaebd435dc0be7c9fa1dae115b46dfffa947c43edc40e0b95cc166de9fde1ec361ce6d6a73600b2d484b8457469b28fb04cb38d8a13e483efc4f4102fe6accce43ef76ae1bf1f34d051501c250a10a879323c67e9e14be35a0ff24a9c56a06c2489f5068b43198feed152c7749f5368a07f20c68ed5192c6c90d48e69046294b1b97c873d09691413243175e8e0091e5b5d8f09f771e2b5ea45f1806a77788434c435e029e8d6c3eb8dd5ce365c52794fdeba397f17c239169772f93af2a9044137b11b0e2e8e03996120b5bd749ee87140dd44a0a2b7472470809acd7a635e842a104ce4ef522cf1c29a602ab806adc85d00bc0bce12d80aad3c94b4e84d25800876137f071ac2eca2ab5b41110bb1b92d7ead272e52679b26359424687374065f02a29a37f53fe6c611953c3fac4898b32df7435e0bca7fdb5153bd2c6b90614e6d437c7b0f0fdf132d6cf57a7225d52116fe404d4b7dceb4a332e623cfa298623cf64728dc66104bc16c799341c5182da780e898bcf71a3561d8f3c60b4077fbb83fdffe581e5f4dfa6497c1a6a7b3f616e22322189ea75aa4960109e0ea55d2eec2646f7339d35d70b0890624bdcea5e9a6b50530005beffd3a74204fcb754ecc7b3b6328b0f586d4ec3a680c2ccba4fae25c93646a3a511d214429338a531b7c97b0e71fef2b65325b651bfb79bec3bd983955e3a6ae6f25420373b705cd5a0ae4e88b0cb798dcdff1840e9c223afd2c2b775ec47d469dbcfc3291351d158f29e91bb8e026a83c3e1119f354b4d6de223fc3841d43b0fcb5ec44322b83e54fce32d21b42e82a9309fbb0a83307dd531372cdcebb9e3ada079fb014445dd3926473befecaea1fa995b8e65422c93715a52aba5634713227b9ab695b7f77e2ff044fb7e94b917cd37ad642a555bb8d2b884252c48147e3545d2a4b448e8be5aa61f7a14257e9f0f777c9a012b15a1c9139d8a4af53cd48c5a70c0729734947c3ac75eacf941fd1aeb771d9c789f04a95155b5154909441ca153df09dfcbde5472c37ebc5a8788e6cc606014e478fe7e2257309929c09351de59cd3de9f2f3ef3a4e7801019cf34833d5c9f55ed06e388948afbaac5224f0bd51ae32d13de5aec183b5906615ede66537a70d07aa75df2d3ca8cd2ff049728d60b8c7d52d8dee72b062e16b00e064a5de0a44ae0f3e0e50cda01e5f44d966727bde3fdcdb40f53669379e790a841e63549b1bcc6fe8b523f8ca110666611543dba205ac9282839b83f62af961b3743bcf5eb16a4182b10f647aec2b4ca6dce273803ad36b70afa6f04be62d3605b11c053a4bd6963adfca9a145edc0259d93295eed70b44abc59878101801563190a3121a049ef8b77ef44950ea7c6af543387aa37e40800eb03d5f45aaa73f0e23b2eacff9744afb4fb2a4f5a04644fd23302c80fe1389d61d6a589e27ccc7067a5ce6fa2f79b6ed5279a59ecb11074bf31beb27dee216255b003cfed235abba923f70f82f059de8254ce74cfbe709cb0fc8898a3a45acdc2d98a83b1abc22b69c9843c2787f6109c9c7f655c12bd5e7e2b8d60535c50ad4eebcaf4650d9c8d297658abcc802008b13c7edef23e65d645fde267dae6d9db8db53c5b4481370ea24f6657ae740ea0074b787cc47ff24617ed30012816998967f942c963f0abde5d76c9d7e036b4130a1e6c3dd27a010e3b62b17167e91b3df5126f679f0fd7dfce334b10b20f3aeb60628342d735f2488bd2b69b7c20c0d18b7b3efb7e59384383ce09c9508da0", 0x511}], 0x3}}], 0x2, 0x4000040)

1m41.334332366s ago: executing program 0 (id=72):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

1m40.825342211s ago: executing program 0 (id=81):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x11}})

1m40.748028771s ago: executing program 0 (id=83):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48c5, &(0x7f0000000340)={[{@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@fat=@flush}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

1m40.68835095s ago: executing program 0 (id=85):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

1m40.470470672s ago: executing program 0 (id=90):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, 0x0)

1m40.316594473s ago: executing program 32 (id=90):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, 0x0)

1m35.647916076s ago: executing program 3 (id=113):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff})
pivot_root(0x0, 0x0)

1m35.647683978s ago: executing program 3 (id=114):
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761", 0x54)
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)

1m35.572293141s ago: executing program 3 (id=115):
syz_usb_connect(0x2, 0x24, &(0x7f0000008ec0)={{0x12, 0x1, 0x110, 0x74, 0x95, 0x10, 0x8, 0xd49, 0x7310, 0x58ae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xfa, 0xa0, 0xbf, [{{0x9, 0x4, 0xb7, 0x8, 0x0, 0xe2, 0x59, 0x47}}]}}]}}, 0x0)

1m34.407339044s ago: executing program 3 (id=122):
syz_mount_image$udf(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00b96fa236bfd596c74e808dd7b85a97c6ab3f6173849702311b635ac7a4e02bb352424c"], 0x1, 0x46f, &(0x7f0000000540)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4107, 0x100b)

1m34.255307608s ago: executing program 3 (id=124):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50)
read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10)
syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)={0x90, 0x0, 0x0, {0x4, 0xfffffffffffffffe, 0x20, 0x400, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0x0)

1m33.109087496s ago: executing program 3 (id=135):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000140)={0x0, 0x3})

1m32.980922712s ago: executing program 33 (id=135):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000140)={0x0, 0x3})

45.431817827s ago: executing program 1 (id=595):
syz_emit_ethernet(0x2e, &(0x7f0000000140)={@multicast, @local, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x1}}, {@arp={0x806, @generic={0x108, 0x88ca, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, "1b516df8"}}}}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

43.735746228s ago: executing program 1 (id=621):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$KDMKTONE(r0, 0x4b30, 0xfffffffffffffffa)

43.62993787s ago: executing program 1 (id=622):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900", 0x2a}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000001440), 0x0}, 0x20)

43.629650941s ago: executing program 1 (id=623):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00')

43.505781534s ago: executing program 1 (id=624):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000e207000700e00000020800020005000000080008"], 0x34}}, 0x0)

42.780485355s ago: executing program 1 (id=634):
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xeea635ac96802a65, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)

42.751598421s ago: executing program 34 (id=634):
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xeea635ac96802a65, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)

19.989482296s ago: executing program 4 (id=835):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffff001, 0x3)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

19.739929071s ago: executing program 4 (id=840):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32], 0xfd, 0x2f9, &(0x7f0000000b80)="$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")
r0 = fanotify_init(0xf00, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x455, 0x40000008, r1, 0x0)

19.64876925s ago: executing program 4 (id=842):
r0 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r2 = syz_open_procfs(r0, &(0x7f0000000700)='personality\x00')
pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4)

19.333609957s ago: executing program 4 (id=845):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

19.137755864s ago: executing program 4 (id=846):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r2, 0x2007ffb)
sendfile(r2, r2, 0x0, 0x1000000201005)

18.690114825s ago: executing program 4 (id=852):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x5, 0x0, 0x3, 0x6, 0x2, 0x3, 0x6, 0x90, 0x38, 0x298, 0x3, 0x5, 0x20, 0x3, 0x8}, [{0x5, 0x8001, 0x0, 0x1712, 0xfffffffe, 0x0, 0x6, 0x4}, {0x2, 0x0, 0x9, 0x7ff, 0x8000, 0x0, 0x4, 0x2ec}, {0x3, 0x1, 0xff, 0x5, 0x6, 0x6, 0xfffffffd, 0x8}]}, 0x98)
close(r3)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="e71a6f2b7e459f587fd64b45345d93796e850342f59c401b99df9a6d1330b6538cd07a15aced199937f93e6e22e71f8e8bced6f622dd0734af40ff83b625cf00891ed6045acabebcd9a0f00a878ac753dacd03de345e6c090643452593c8e1c978a24f2dd19c5e1f1d4c15137307e08a14d4b91e837ef3f1d5", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r7=>0x0)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944c28ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", <r9=>0xffffffffffffffff})
io_submit(r7, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}])
ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f0000000080)=0x10)
ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080))

18.550722287s ago: executing program 35 (id=852):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x5, 0x0, 0x3, 0x6, 0x2, 0x3, 0x6, 0x90, 0x38, 0x298, 0x3, 0x5, 0x20, 0x3, 0x8}, [{0x5, 0x8001, 0x0, 0x1712, 0xfffffffe, 0x0, 0x6, 0x4}, {0x2, 0x0, 0x9, 0x7ff, 0x8000, 0x0, 0x4, 0x2ec}, {0x3, 0x1, 0xff, 0x5, 0x6, 0x6, 0xfffffffd, 0x8}]}, 0x98)
close(r3)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="e71a6f2b7e459f587fd64b45345d93796e850342f59c401b99df9a6d1330b6538cd07a15aced199937f93e6e22e71f8e8bced6f622dd0734af40ff83b625cf00891ed6045acabebcd9a0f00a878ac753dacd03de345e6c090643452593c8e1c978a24f2dd19c5e1f1d4c15137307e08a14d4b91e837ef3f1d5", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r7=>0x0)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944c28ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", <r9=>0xffffffffffffffff})
io_submit(r7, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}])
ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f0000000080)=0x10)
ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080))

2.638420871s ago: executing program 2 (id=986):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x100}}, 0x0)

2.638082819s ago: executing program 2 (id=987):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008ffffffdb01"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x82}, 0x94)

2.495596557s ago: executing program 2 (id=989):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x823}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3a}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044064}, 0x20040000)

2.358381361s ago: executing program 2 (id=992):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1})

2.269425527s ago: executing program 2 (id=995):
r0 = syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$eJzs3ctvXNX9APBzx544L36x8wuNm6ZJSkigj9iQumklNkaii1KE1CVLmgaa1gmP0AUoi5RFV0i1hPgDipDIpuqi6oJNFbGiG1Sp+wqx6iaVkLJAUcCV7XPG429mdGcc2+PxfD7SnTP3fs+955x53LlzXycBI6ux8jg3N12l9N5H7z7zr7O/+NvylJOtHKdWHsfz2HxKqdmaL6XJsLz5idX0qy+uX2xPv85plc6nKlWt6en52615D6SUbqRT6VaaTE+9cOfeh4vPPrc4debm0Xc+vbs1rV9TbXUBAACwA3z58w9e+8djP70+dfcvJ+bTRGt62T6fz+MH83b/fN5QLtvL5X9A1ZZWHban94R843lohHxjHfK1l9MM+ca7lL8nLLfZJd9ETfljbdM6tRuG2dr/+Koxs2680ZiZWf1PvuyzsT3VzNXLCy9dG1BFgU1352TexWcwGEZuWDo06DUQwKp43PA+Nzb3SF1raeO9lX/76Ubn+WETbPfnX/nDVf4Hv7fGYfPs1k9TaVf5Hh3M4/E4wniYr9/vf1lePB7R7LGe3Y4jDMvxhW71HNvmemxUt/rHz8Vu9e2cltfhRIi3f3/iezos7zHQ2Zf2/xsMIzssDXoFBOxY8by5pazE43l9MT5RE99bE99XE99fEz9QE4dR9tc3/pgWq7X/+fE/fb/7w8p+tody+n991ifuj+y3/Hjeb78etPx4PjHsZL8898mf7/zu1j/j+f9fh/P/T+ff0sm8gij7C+N+9da5/+HC4EaXfIdDfR7qkH/l+ZH1+aoja8tJbeuZ++oxvX6+Q93yHV+fbzLk25+3RfaG+sbtk/1hvrL9Udar5fUaD+1thnbsCfUo78xUTveG9kx1a1fYkb0n5Gvm4f9Du46Edj0c5vtGaFc1vb5dcf95qc/RMD0eJyn5wtt23+9SfC/idRmP5PTtnL6f049z+nmHckdR+Tx2O/+/fD6nU7N66fLCpSfyePmcfjLWnFie/uQ21xt4cL1e/zOd1l//c7A1vdloXy8cWpteta8XJsP0812m/zCPl9+zX4/tW5k+c/GVhV9tduNhxF17863fvriwcOl1TzzxxJPWk0GvmYCtNvvGlVdnr7351rnLV158+dLLl65e+MmPzj8x9+MLF2ZXNutn2zfugV1l7Ud/0DUBAAAAAAAAAAAAelbt6zw5p3X3ty3Xk5fr0+P18QyH8r6VT0O5j0G5/rPbfV3K9ZtT21BHNt92XE406DYCnf3X/X8NhpEdlpbcxR/YGQbd/1+572FJr/79Z3uXh5Lt9tPr15fx/oXwIHZ6/3PK3139/7X6v+p5/Rd6zJrcWLlX7j16s63YdKzX8mP7y31gj/RX/tVcfmnN2dRb+Ut/CuXHG5X26JVQ/v4ey7+v/cc3Vv6rufzysj1+utfyV2tcNdbXI+43LvcBjPuNi9dC+8u9/fpu/wY7ans9lw+jbFj6mezXsPT/2U1ZblkP5tVz6zhduf927O+g3/qX+36X34GHw/Krmt83/X8Ot7r+P8vnb1b/n7DrfOb4n8EwssPS0tJAuz4Z1X5XdopBv/6D3oYcdPmDfv3rxP4/4/+l2P9njMf+P2M89v8Z47F/rRiP/X/G1zP2/xnjR8NyY/+g0zXxb9bEj9XEv1UTP14Tj//fYvxUTfxETfxkTfxwTfyRmvjpmvijNfEzNfHHauKP18R3u+/kdFTbD6Ms9hvp+w+joxz/6fb9P1ITB4ZX7Nc5fr/P1sSB4VXO8/D9hhFUdb5jR9zfXvbjvp3T93P6cU4/37IKsh2+m9Pv5fT7Of1BTs/ldCansznVNeRw+8N/jp1YrNbO8zsU4r2eTxqvB4j3iXmyx/rE43P9ns96tMdytqr8DV4OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0GiuPc3PTVUrvffTuM/8+95vDy1NOtnKcWnkcz2PzKaVmSqnK4+NheTcmVtOvvrh+sVNapfMrj2U8PX+7Ne+B5fnTqXQrTaanXrhz78PFZ59bnDpz8+g7n97dmtavqba6AAAAABig/wUAAP//vrPsgA==")
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40106e80, &(0x7f0000000480)={@desc={0x1, 0x0, @auto="00000000000100"}})

1.636727349s ago: executing program 2 (id=998):
syz_open_dev$evdev(&(0x7f0000000000), 0x9468, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d0000000000010902240001000000000904000001030002000921000000012205000905810300140000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x44200)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

535.86703ms ago: executing program 5 (id=1006):
syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x920502)

447.225157ms ago: executing program 6 (id=1008):
r0 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@phonet={0x23, 0xb, 0x0, 0x42}, 0x80, 0x0}, 0x2404e051)

446.263143ms ago: executing program 6 (id=1009):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50)
r0 = socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1})

354.383464ms ago: executing program 6 (id=1010):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/186, 0xba}], 0x1, 0x236, 0x0)

354.079718ms ago: executing program 6 (id=1011):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x443c, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x4)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}})

197.943807ms ago: executing program 5 (id=1012):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0xe, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e40800", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fe27008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0xfe, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

139.955967ms ago: executing program 6 (id=1013):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0xfffffffe}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null]}, 0x48)

131.195737ms ago: executing program 5 (id=1014):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
write$char_usb(r0, &(0x7f00000008c0)='-0', 0x2)

50.068929ms ago: executing program 5 (id=1015):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000240)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})

49.845042ms ago: executing program 5 (id=1016):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800020000004001000001000000011"], 0x3c}}, 0x0)

49.532142ms ago: executing program 6 (id=1017):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xf6, 0x44000000, 0x6, 0xd06, 0x4, 0xe5, 0x0, 0x0, 0x40, 0xfffffc00}}, 0x50)
fallocate(r0, 0x0, 0x0, 0xffff)
open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)

0s ago: executing program 5 (id=1018):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000001c0)={[{@nobarrier}, {@space_cache_v2}, {@barrier}, {@rescue={'rescue', 0x3d, 'nologreplay'}}, {@rescue={'rescue', 0x3d, 'ignoresuperflags'}}, {@rescan_uuid_tree}, {@nodiscard}, {@discard_async}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodatacow}, {@flushoncommit}]}, 0x9, 0x55a9, &(0x7f0000000a00)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

ctory bread(block 69) failed
[   85.523306][ T6775] FAT-fs (loop4): Directory bread(block 70) failed
[   85.525598][ T6775] FAT-fs (loop4): Directory bread(block 71) failed
[   85.528584][ T6775] FAT-fs (loop4): Directory bread(block 72) failed
[   85.530872][ T6775] FAT-fs (loop4): Directory bread(block 73) failed
[   85.675376][ T6787] loop4: detected capacity change from 0 to 2048
[   85.687684][ T6787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.953150][ T6800] loop2: detected capacity change from 0 to 32768
[   85.956316][ T6800] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.248 (6800)
[   85.971996][ T6800] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   85.975320][ T6800] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   85.978355][ T6800] BTRFS info (device loop2): disk space caching is enabled
[   85.980903][ T6800] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   86.123725][ T6800] BTRFS info (device loop2): rebuilding free space tree
[   86.148255][ T6800] BTRFS info (device loop2): disabling free space tree
[   86.151074][ T6800] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   86.154513][ T6800] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   86.215793][ T6800] BTRFS info (device loop2): scrub: started on devid 1
[   86.223991][ T6800] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0
[   86.372844][ T5852] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   86.578955][ T6826] loop4: detected capacity change from 0 to 32768
[   86.652600][ T6826] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   86.716354][ T6826] XFS (loop4): Ending clean mount
[   86.815445][ T6363] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   87.239650][ T6876] syz.2.263 uses obsolete (PF_INET,SOCK_PACKET)
[   87.926649][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   88.106615][   T24] usb 3-1: Using ep0 maxpacket: 32
[   88.111186][   T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[   88.114600][   T24] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[   88.119281][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[   88.124654][   T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   88.130055][   T24] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[   88.133152][   T24] usb 3-1: Product: syz
[   88.134739][   T24] usb 3-1: Manufacturer: syz
[   88.136857][   T24] usb 3-1: SerialNumber: syz
[   88.149435][   T24] usb 3-1: config 0 descriptor??
[   88.562297][   T24] gs_usb 3-1:0.0: Couldn't get device config: (err=-71)
[   88.569201][   T24] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[   88.595217][   T24] usb 3-1: USB disconnect, device number 7
[   88.891993][ T5310] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   89.046537][ T5310] usb 2-1: Using ep0 maxpacket: 32
[   89.069411][ T5310] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[   89.072568][ T5310] usb 2-1: config 0 has no interface number 0
[   89.083114][ T5310] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   89.086402][ T5310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.097066][ T5310] usb 2-1: Product: syz
[   89.098709][ T5310] usb 2-1: Manufacturer: syz
[   89.102984][ T5310] usb 2-1: SerialNumber: syz
[   89.121808][ T5310] usb 2-1: config 0 descriptor??
[   89.128354][ T5310] smsc95xx v2.0.0
[   89.508257][ T6940] 9pnet: Found fid 0 not clunked
[   89.550841][ T5310] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   89.554940][ T5310] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   89.626967][ T6943] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   90.607774][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   90.756646][   T10] usb 3-1: Using ep0 maxpacket: 16
[   90.763077][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[   90.769210][   T10] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[   90.774039][ T5310] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   90.780269][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   90.785298][ T5310] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[   90.789216][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.789716][ T6955] netlink: zone id is out of range
[   90.795929][   T10] usb 3-1: Product: syz
[   90.800929][   T10] usb 3-1: Manufacturer: syz
[   90.802965][   T10] usb 3-1: SerialNumber: syz
[   90.814164][ T6955] netlink: zone id is out of range
[   90.814302][ T5310] usb 2-1: USB disconnect, device number 7
[   90.833097][ T6955] netlink: zone id is out of range
[   90.839855][ T6955] netlink: zone id is out of range
[   90.842022][ T6955] netlink: zone id is out of range
[   90.848755][ T6955] netlink: zone id is out of range
[   90.853433][ T6955] netlink: zone id is out of range
[   90.864202][ T6956] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   90.867955][ T6955] netlink: zone id is out of range
[   90.870606][ T6955] netlink: zone id is out of range
[   90.874370][ T6955] netlink: zone id is out of range
[   91.035343][   T10] cdc_ncm 3-1:1.0: bind() failure
[   91.050994][   T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   91.053867][   T10] cdc_ncm 3-1:1.1: bind() failure
[   91.080711][   T10] usb 3-1: USB disconnect, device number 8
[   91.648117][ T6961] usb usb8: usbfs: process 6961 (syz.2.290) did not claim interface 0 before use
[   91.931748][ T6968] loop4: detected capacity change from 0 to 2048
[   91.951128][ T6968] EXT4-fs: Ignoring removed mblk_io_submit option
[   91.985404][ T6968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.010612][ T6968] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.292: bg 0: block 234: padding at end of block bitmap is not set
[   92.023634][ T6968] EXT4-fs (loop4): Remounting filesystem read-only
[   92.049688][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.222074][ T6975] loop2: detected capacity change from 0 to 32768
[   92.275333][ T6975] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   92.369949][ T6975] XFS (loop2): Ending clean mount
[   92.383013][ T6975] XFS (loop2): Quotacheck needed: Please wait.
[   92.421496][ T6975] XFS (loop2): Quotacheck: Done.
[   92.441780][   T33] audit: type=1800 audit(1755553586.128:10): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.294" name="bus" dev="loop2" ino=4426 res=0 errno=0
[   92.515912][ T5852] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   92.695689][ T7012] loop2: detected capacity change from 0 to 65
[   92.704056][ T7012] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   92.773771][ T7006] loop4: detected capacity change from 0 to 32768
[   92.800066][ T7006] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   92.882792][ T7022] loop2: detected capacity change from 0 to 64
[   92.892324][ T7022] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[   92.899219][ T6363] ocfs2: Unmounting device (7,4) on (node local)
[   93.028319][ T7030] netlink: 64 bytes leftover after parsing attributes in process `syz.4.310'.
[   93.167340][ T7038] loop1: detected capacity change from 0 to 164
[   93.308816][ T7050] netlink: 'syz.2.325': attribute type 1 has an invalid length.
[   93.966599][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   94.116749][   T24] usb 2-1: Using ep0 maxpacket: 16
[   94.121297][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.126064][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.130524][   T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   94.134426][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.142235][   T24] usb 2-1: config 0 descriptor??
[   94.534422][ T7089] loop4: detected capacity change from 0 to 256
[   94.549017][ T7089] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0ede1155, utbl_chksum : 0xe619d30d)
[   94.563662][   T24] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0
[   94.576066][   T24] savu 0003:1E7D:2D5A.0002: item fetching failed at offset 3/5
[   94.597794][   T24] savu 0003:1E7D:2D5A.0002: parse failed
[   94.600260][   T24] savu 0003:1E7D:2D5A.0002: probe with driver savu failed with error -22
[   94.744799][ T7099] loop2: detected capacity change from 0 to 128
[   94.773823][   T10] usb 2-1: USB disconnect, device number 8
[   95.074860][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.352'.
[   95.093926][ T7113] geneve2: entered promiscuous mode
[   95.181491][ T7109] loop4: detected capacity change from 0 to 32768
[   95.252563][ T7109] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[   95.252582][ T7109]   allowing incompatible features above 0.0: (unknown version)
[   95.252591][ T7109]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   95.273024][ T7109] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[   95.277294][ T7109] bcachefs (loop4): initializing new filesystem
[   95.288417][ T7109] bcachefs (loop4): going read-write
[   95.295801][ T7109] bcachefs (loop4): marking superblocks
[   95.337062][ T7109] bcachefs (loop4): initializing freespace
[   95.349440][ T7109] bcachefs (loop4): done initializing freespace
[   95.358777][ T7109] bcachefs (loop4): reading snapshots table
[   95.360949][ T7109] bcachefs (loop4): reading snapshots done
[   95.374888][ T7109] bcachefs (loop4): done starting filesystem
[   95.441190][ T6363] bcachefs (loop4): shutting down
[   95.443796][ T6363] bcachefs (loop4): going read-only
[   95.446149][ T6363] bcachefs (loop4): finished waiting for writes to stop
[   95.452301][ T6363] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[   95.481726][ T6363] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[   95.489878][ T6363] bcachefs (loop4): clean shutdown complete, journal seq 4
[   95.493057][ T6363] bcachefs (loop4): marking filesystem clean
[   95.509045][ T6363] bcachefs (loop4): shutdown complete
[   95.556547][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[   96.219992][   T33] audit: type=1326 audit(1755553589.908:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7140 comm="syz.1.359" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b0a78ebe9 code=0x0
[   96.468837][ T7147] loop1: detected capacity change from 0 to 128
[   96.473957][ T7139] loop2: detected capacity change from 0 to 40427
[   96.485626][ T7139] F2FS-fs (loop2): build fault injection rate: 16
[   96.490786][ T7139] F2FS-fs (loop2): build fault injection type: 0x77fd1
[   96.498090][ T7147] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   96.512765][ T7139] F2FS-fs (loop2): invalid crc value
[   96.521460][ T7139] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x30ed/0x49f0
[   96.526003][ T7139] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[   96.531465][ T7147] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.608722][ T5844] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   96.654891][ T7152] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[   97.445971][ T7175] netlink: 248 bytes leftover after parsing attributes in process `syz.2.370'.
[   97.456029][ T7175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.370'.
[   97.505354][ T7164] loop1: detected capacity change from 0 to 32768
[   97.773531][ T7181] vxcan0: tx drop: invalid sa for name 0x0000001000000000
[   97.784063][ T5293] udevd[5293]: worker [5987] terminated by signal 33 (Unknown signal 33)
[   97.796525][ T5293] udevd[5293]: worker [5987] failed while handling '/devices/virtual/block/loop4'
[   97.853510][ T7188] loop1: detected capacity change from 0 to 512
[   97.869033][ T7188] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   97.895819][ T7188] EXT4-fs (loop1): 1 truncate cleaned up
[   97.903157][ T7188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.965385][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.263536][ T7197] loop2: detected capacity change from 0 to 40427
[   98.273806][ T7197] F2FS-fs (loop2): Image doesn't support compression
[   98.276189][ T7197] F2FS-fs (loop2): build fault injection rate: 6
[   98.280317][ T7197] F2FS-fs (loop2): build fault injection type: 0x83
[   98.284450][ T7197] F2FS-fs (loop2): invalid crc value
[   98.287635][ T7197] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x716/0x49f0
[   98.292239][ T7197] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[   98.337152][   T10] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[   98.498341][   T10] usb 2-1: config 4 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.504350][   T10] usb 2-1: config 4 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.510606][   T10] usb 2-1: config 4 interface 0 has no altsetting 0
[   98.513670][   T10] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00
[   98.519456][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.776556][   T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   98.930802][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   98.940767][   T24] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[   98.942442][   T10] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x0
[   98.944073][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.947292][   T10] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x3
[   98.952343][   T10] holtek_mouse 0003:04D9:A067.0003: unknown main item tag 0x3
[   98.955460][   T10] holtek_mouse 0003:04D9:A067.0003: item fetching failed at offset 4/8
[   98.961325][   T24] usb 3-1: Product: syz
[   98.962796][   T24] usb 3-1: Manufacturer: syz
[   98.964327][   T10] holtek_mouse 0003:04D9:A067.0003: hid parse failed: -22
[   98.964476][   T24] usb 3-1: SerialNumber: syz
[   98.970576][   T10] holtek_mouse 0003:04D9:A067.0003: probe with driver holtek_mouse failed with error -22
[   98.993000][   T24] usb 3-1: config 0 descriptor??
[   99.008427][   T24] usb 3-1: ucan: probing device on interface #0
[   99.011004][   T24] usb 3-1: ucan: invalid EP count (0)
[   99.013507][   T24] usb 3-1: ucan: probe failed; try to update the device firmware
[   99.164604][   T10] usb 2-1: USB disconnect, device number 9
[   99.218527][   T24] usb 3-1: USB disconnect, device number 9
[  100.324283][ T7261] loop1: detected capacity change from 0 to 1024
[  100.326878][   T33] audit: type=1326 audit(1755553594.008:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.2.406" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  100.335709][ T7261] EXT4-fs: Ignoring removed bh option
[  100.345126][   T33] audit: type=1326 audit(1755553594.008:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.2.406" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  100.348243][ T7261] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  100.355212][   T33] audit: type=1326 audit(1755553594.008:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.2.406" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  100.364773][   T33] audit: type=1326 audit(1755553594.008:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.2.406" exe="/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  100.373498][   T33] audit: type=1326 audit(1755553594.008:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.2.406" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  100.380698][ T7261] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  100.381385][   T33] audit: type=1326 audit(1755553594.018:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.2.406" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  100.385692][ T7261] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  100.409163][ T7261] EXT4-fs (loop1): filesystem has both journal inode and journal device!
[  100.482364][ T7267] loop2: detected capacity change from 0 to 128
[  100.554005][   T33] audit: type=1804 audit(1755553594.238:18): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.411" name="/newroot/159/file0/bus" dev="loop2" ino=1048611 res=1 errno=0
[  100.565325][ T7267] Invalid ELF header magic: != ELF
[  100.572192][   T33] audit: type=1800 audit(1755553594.248:19): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.411" name="bus" dev="loop2" ino=1048611 res=0 errno=0
[  100.940061][ T7309] loop1: detected capacity change from 0 to 128
[  100.950242][ T7309] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  100.963861][ T7309] hpfs: filesystem error: improperly stopped
[  100.969331][ T7309] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  100.972205][ T7309] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  100.975903][ T7309] hpfs: You really don't want any checks? You are crazy...
[  100.980829][ T7309] hpfs: hpfs_map_sector(): read error
[  100.982968][ T7309] hpfs: code page support is disabled
[  100.988614][ T7309] hpfs: hpfs_map_sector(): read error
[  100.992823][ T7309] hpfs: hpfs_map_sector(): read error
[  100.998106][ T7309] hpfs: filesystem error: unable to find root dir
[  101.316205][ T7313] loop1: detected capacity change from 0 to 40427
[  101.320005][ T7313] F2FS-fs: heap/no_heap options were deprecated
[  101.325201][ T7313] F2FS-fs (loop1): Image doesn't support compression
[  101.334090][ T7313] F2FS-fs (loop1): invalid crc value
[  101.384079][ T7313] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.388321][ T7313] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  102.519437][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  103.007933][   T24] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  103.013187][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.020907][   T24] usb 3-1: config 0 descriptor??
[  103.359133][ T7357] loop1: detected capacity change from 0 to 32768
[  103.394973][ T7357] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.428939][ T7357] XFS (loop1): Ending clean mount
[  103.434627][ T7357] XFS (loop1): Quotacheck needed: Please wait.
[  103.468188][ T7357] XFS (loop1): Quotacheck: Done.
[  103.496606][ T5844] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  103.692323][ T7371] loop4: detected capacity change from 0 to 32768
[  103.702720][ T7371] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.446 (7371)
[  103.722894][ T7371] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  103.726279][ T7371] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  103.730378][ T7371] BTRFS info (device loop4): using free-space-tree
[  103.807554][ T6363] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  103.902888][   T47] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  104.076533][   T47] usb 2-1: Using ep0 maxpacket: 32
[  104.080385][   T47] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  104.083421][   T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.087046][   T47] usb 2-1: config 0 has no interface number 0
[  104.091351][   T47] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  104.094350][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.097324][   T47] usb 2-1: Product: syz
[  104.099017][   T47] usb 2-1: Manufacturer: syz
[  104.101074][   T47] usb 2-1: SerialNumber: syz
[  104.107171][   T47] usb 2-1: config 0 descriptor??
[  104.113350][   T47] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  104.118913][   T47] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input4
[  104.319598][ T5875] usb 2-1: USB disconnect, device number 10
[  105.044509][   T24] pegasus 3-1:0.0: setup Pegasus II specific registers
[  105.050851][ T7400] loop1: detected capacity change from 0 to 32768
[  105.058280][ T7400] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  105.066058][ T7400] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  105.118533][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[  105.162301][   T24] pegasus 3-1:0.0: can't locate MII phy, using default
[  105.190110][ T7404] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.453'.
[  105.190951][   T24] pegasus 3-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, e6:56:de:82:4f:9d
[  105.211534][   T24] usb 3-1: USB disconnect, device number 10
[  105.284271][ T7408] loop1: detected capacity change from 0 to 512
[  105.298597][ T7408] EXT4-fs (loop1): orphan cleanup on readonly fs
[  105.305444][ T7408] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.455: bg 0: block 248: padding at end of block bitmap is not set
[  105.314201][ T7408] Quota error (device loop1): write_blk: dquota write failed
[  105.319029][ T7408] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  105.323024][ T7408] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.455: Failed to acquire dquot type 1
[  105.332247][ T7408] EXT4-fs (loop1): 1 truncate cleaned up
[  105.337852][ T7408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.348166][ T7408] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  105.353557][ T7408] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0
[  105.381368][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.718903][ T7419] loop2: detected capacity change from 0 to 32768
[  106.980079][ T7455] loop1: detected capacity change from 0 to 32768
[  107.083563][ T7457] loop4: detected capacity change from 0 to 128
[  107.842655][ T7476] loop1: detected capacity change from 0 to 256
[  107.846142][ T7476] exfat: Deprecated parameter 'namecase'
[  107.879790][ T7476] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  108.045301][ T1226] kworker/u9:4: attempt to access beyond end of device
[  108.045301][ T1226] loop4: rw=1, sector=153, nr_sectors = 8 limit=128
[  108.053547][ T1226] kworker/u9:4: attempt to access beyond end of device
[  108.053547][ T1226] loop4: rw=1, sector=169, nr_sectors = 8 limit=128
[  108.059170][ T1226] kworker/u9:4: attempt to access beyond end of device
[  108.059170][ T1226] loop4: rw=1, sector=185, nr_sectors = 8 limit=128
[  108.064348][ T1226] kworker/u9:4: attempt to access beyond end of device
[  108.064348][ T1226] loop4: rw=1, sector=201, nr_sectors = 8 limit=128
[  108.070185][ T1226] kworker/u9:4: attempt to access beyond end of device
[  108.070185][ T1226] loop4: rw=1, sector=217, nr_sectors = 8 limit=128
[  108.075342][ T1226] kworker/u9:4: attempt to access beyond end of device
[  108.075342][ T1226] loop4: rw=1, sector=233, nr_sectors = 8 limit=128
[  108.080510][ T1226] kworker/u9:4: attempt to access beyond end of device
[  108.080510][ T1226] loop4: rw=1, sector=249, nr_sectors = 8 limit=128
[  108.085359][ T1226] kworker/u9:4: attempt to access beyond end of device
[  108.085359][ T1226] loop4: rw=1, sector=265, nr_sectors = 8 limit=128
[  108.090269][ T1226] kworker/u9:4: attempt to access beyond end of device
[  108.090269][ T1226] loop4: rw=1, sector=281, nr_sectors = 8 limit=128
[  108.095327][ T1226] kworker/u9:4: attempt to access beyond end of device
[  108.095327][ T1226] loop4: rw=1, sector=297, nr_sectors = 8 limit=128
[  108.358950][ T7480] loop2: detected capacity change from 0 to 32768
[  108.371119][ T7480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.487 (7480)
[  108.409068][ T7480] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  108.412734][ T7480] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  108.416034][ T7480] BTRFS info (device loop2): disk space caching is enabled
[  108.435219][ T7480] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  108.566194][ T7515] loop4: detected capacity change from 0 to 128
[  108.571723][ T7515] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.574167][ T7515] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.595317][ T7480] BTRFS info (device loop2): rebuilding free space tree
[  108.613349][ T7515] EXT4-fs (loop4): Test dummy encryption mode enabled
[  108.632516][ T7515] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  108.637879][ T7515] ext4 filesystem being mounted at /110/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  108.642500][ T7480] BTRFS info (device loop2): disabling free space tree
[  108.645501][ T7480] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  108.655723][ T7480] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  108.666101][ T6363] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  108.783168][ T5852] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  108.916563][   T47] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  108.989716][ T7526] use of bytesused == 0 is deprecated and will be removed in the future,
[  108.992919][ T7526] use the actual size instead.
[  109.018169][ T7526] loop4: detected capacity change from 0 to 256
[  109.100661][ T7528] pim6reg9: entered allmulticast mode
[  109.107166][   T47] usb 2-1: Using ep0 maxpacket: 8
[  109.113348][   T47] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  109.120458][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.128133][   T47] usb 2-1: Product: syz
[  109.131948][   T47] usb 2-1: Manufacturer: syz
[  109.165222][   T47] usb 2-1: SerialNumber: syz
[  109.177150][   T47] usb 2-1: config 0 descriptor??
[  109.209264][ T7530] loop2: detected capacity change from 0 to 8
[  109.392228][   T47] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  109.489551][ T7542] loop2: detected capacity change from 0 to 2048
[  109.521109][ T5848]  loop2: p1 p2 < > p3 < p5 p6 > p4
[  109.523843][ T5848] loop2: partition table partially beyond EOD, truncated
[  109.528646][ T5848] loop2: p2 start 4278190080 is beyond EOD, truncated
[  109.532634][ T5848] loop2: p4 size 8192 extends beyond EOD, truncated
[  109.536420][ T5848] loop2: p6 size 8192 extends beyond EOD, truncated
[  109.570059][ T7542]  loop2: p1 p2 < > p3 < p5 p6 > p4
[  109.572394][ T7542] loop2: partition table partially beyond EOD, truncated
[  109.584652][ T7542] loop2: p2 start 4278190080 is beyond EOD, truncated
[  109.590407][ T7542] loop2: p4 size 8192 extends beyond EOD, truncated
[  109.601180][ T7542] loop2: p6 size 8192 extends beyond EOD, truncated
[  109.655627][ T5293]  loop2: p1 p2 < > p3 < p5 p6 > p4
[  109.660580][ T5293] loop2: partition table partially beyond EOD, truncated
[  109.665429][ T5293] loop2: p2 start 4278190080 is beyond EOD, truncated
[  109.671430][ T5293] loop2: p4 size 8192 extends beyond EOD, truncated
[  109.681936][ T5293] loop2: p6 size 8192 extends beyond EOD, truncated
[  109.723122][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  109.728173][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  109.744211][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  109.753167][ T7547] udevd[7547]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  109.760106][ T6760] udevd[6760]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  109.780320][ T5922] udevd[5922]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  109.788260][ T7550] udevd[7550]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  109.792852][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  109.798443][ T7547] udevd[7547]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  109.803641][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  110.177817][ T7553] loop2: detected capacity change from 0 to 32768
[  110.206383][ T7553] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.249108][ T7553] XFS (loop2): Ending clean mount
[  110.258669][ T7553] XFS (loop2): Quotacheck needed: Please wait.
[  110.285880][ T7553] XFS (loop2): Quotacheck: Done.
[  110.328119][ T5852] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.615000][ T7576] loop2: detected capacity change from 0 to 22
[  110.622207][ T7576] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  110.638608][ T7576] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  110.684956][   T33] audit: type=1326 audit(1755553604.368:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  110.694551][   T33] audit: type=1326 audit(1755553604.368:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  110.709206][   T33] audit: type=1326 audit(1755553604.378:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.520" exe="/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  110.720479][   T33] audit: type=1326 audit(1755553604.378:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  110.732702][   T33] audit: type=1326 audit(1755553604.378:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  110.744969][   T33] audit: type=1326 audit(1755553604.378:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.520" exe="/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  110.759745][   T33] audit: type=1326 audit(1755553604.378:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.2.520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  110.774684][ T7580] Bluetooth: MGMT ver 1.23
[  110.827948][   T47] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  110.852281][   T47] usb 2-1: USB disconnect, device number 11
[  110.859277][ T7584] loop2: detected capacity change from 0 to 1024
[  110.874744][ T7584] hfsplus: cannot replace xattr
[  110.896197][ T3019] hfsplus: b-tree write err: -5, ino 4
[  112.176010][ T7595] Device name cannot be null; rc = [-22]
[  112.496073][    C0] hpet: Lost 1 RTC interrupts
[  112.729227][    C0] hpet: Lost 1 RTC interrupts
[  113.300210][ T7608] syz.4.533 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  113.400955][ T7610] netlink: 'syz.4.534': attribute type 1 has an invalid length.
[  113.466752][ T5310] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  113.636775][ T5310] usb 3-1: Using ep0 maxpacket: 32
[  113.646975][ T5310] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  113.650453][ T5310] usb 3-1: config 0 has no interface number 0
[  113.653219][ T5310] usb 3-1: config 0 interface 50 has no altsetting 0
[  113.661915][ T7616] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  113.683051][ T5310] usb 3-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=13.70
[  113.686094][ T5310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.690171][ T5310] usb 3-1: Product: syz
[  113.696561][ T5310] usb 3-1: Manufacturer: syz
[  113.698721][ T5310] usb 3-1: SerialNumber: syz
[  113.706701][ T5310] usb 3-1: config 0 descriptor??
[  113.726894][ T5310] pl2303 3-1:0.50: required interrupt-in endpoint missing
[  113.764385][ T7618] loop4: detected capacity change from 0 to 512
[  113.775170][ T7618] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  113.794258][ T7618] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.538: invalid indirect mapped block 4294967295 (level 0)
[  113.803965][ T7618] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.538: invalid indirect mapped block 4294967295 (level 1)
[  113.811140][ T7618] EXT4-fs (loop4): 1 orphan inode deleted
[  113.814054][ T7618] EXT4-fs (loop4): 1 truncate cleaned up
[  113.817261][ T7618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.848733][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.933906][ T5310] usb 3-1: USB disconnect, device number 11
[  113.983159][ T7636] CUSE: DEVNAME unspecified
[  114.013926][ T7640] loop1: detected capacity change from 0 to 2048
[  114.072182][ T5847]  loop1: p3 < > p4 < >
[  114.074031][ T5847] loop1: partition table partially beyond EOD, truncated
[  114.078220][ T5847] loop1: p3 start 4284289 is beyond EOD, truncated
[  114.099346][ T7640]  loop1: p3 < > p4 < >
[  114.101102][ T7640] loop1: partition table partially beyond EOD, truncated
[  114.104056][ T7640] loop1: p3 start 4284289 is beyond EOD, truncated
[  114.815314][ T7658] loop2: detected capacity change from 0 to 8
[  114.852113][ T7658] SQUASHFS error: xz decompression failed, data probably corrupt
[  114.855603][ T7658] SQUASHFS error: Failed to read block 0x108: -5
[  114.860953][ T7658] SQUASHFS error: Unable to read metadata cache entry [106]
[  114.864033][ T7658] SQUASHFS error: Unable to read inode 0x11f
[  115.300246][ T7665] loop2: detected capacity change from 0 to 512
[  115.797866][ T7668] loop4: detected capacity change from 0 to 40427
[  115.805225][ T7668] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  115.810043][ T7668] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  115.813863][ T7668] F2FS-fs (loop4): build fault injection rate: 17008
[  115.816226][ T7668] F2FS-fs (loop4): build fault injection type: 0x7
[  115.823060][ T7668] F2FS-fs (loop4): invalid crc value
[  115.863599][ T7668] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  115.870107][ T7668] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  115.873020][ T7668] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  115.906572][ T6363] bio_check_eod: 102 callbacks suppressed
[  115.906582][ T6363] syz-executor: attempt to access beyond end of device
[  115.906582][ T6363] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  115.914947][ T6363] CPU: 1 UID: 0 PID: 6363 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  115.914959][ T6363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.914963][ T6363] Call Trace:
[  115.914967][ T6363]  <TASK>
[  115.914970][ T6363]  dump_stack_lvl+0x189/0x250
[  115.914985][ T6363]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.914993][ T6363]  ? __pfx_queue_work_on+0x10/0x10
[  115.915000][ T6363]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  115.915009][ T6363]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.915022][ T6363]  f2fs_handle_critical_error+0x37c/0x540
[  115.915034][ T6363]  f2fs_write_end_io+0x886/0xb60
[  115.915047][ T6363]  __submit_merged_bio+0x27a/0x6a0
[  115.915059][ T6363]  __submit_merged_write_cond+0x255/0x530
[  115.915070][ T6363]  f2fs_write_data_pages+0x261d/0x3000
[  115.915117][ T6363]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  115.915156][ T6363]  ? __lock_acquire+0xab9/0xd20
[  115.915169][ T6363]  ? do_raw_spin_lock+0x121/0x290
[  115.915182][ T6363]  ? do_raw_spin_unlock+0x4d/0x240
[  115.915189][ T6363]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  115.915199][ T6363]  do_writepages+0x32e/0x550
[  115.915213][ T6363]  ? do_raw_spin_unlock+0x4d/0x240
[  115.915222][ T6363]  filemap_fdatawrite+0x199/0x240
[  115.915231][ T6363]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  115.915258][ T6363]  ? do_raw_spin_unlock+0x4d/0x240
[  115.915267][ T6363]  f2fs_sync_dirty_inodes+0x31f/0x830
[  115.915279][ T6363]  f2fs_write_checkpoint+0x95a/0x1df0
[  115.915295][ T6363]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  115.915320][ T6363]  ? kill_f2fs_super+0x298/0x6c0
[  115.915329][ T6363]  kill_f2fs_super+0x2c3/0x6c0
[  115.915338][ T6363]  ? __pfx_kill_f2fs_super+0x10/0x10
[  115.915343][ T6363]  ? radix_tree_delete_item+0x2b6/0x400
[  115.915355][ T6363]  ? shrinker_free+0x2ce/0x3e0
[  115.915364][ T6363]  deactivate_locked_super+0xbc/0x130
[  115.915374][ T6363]  cleanup_mnt+0x425/0x4c0
[  115.915382][ T6363]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.915392][ T6363]  task_work_run+0x1d4/0x260
[  115.915402][ T6363]  ? __pfx_task_work_run+0x10/0x10
[  115.915409][ T6363]  ? __x64_sys_umount+0x122/0x160
[  115.915420][ T6363]  ? exit_to_user_mode_loop+0x40/0x110
[  115.915432][ T6363]  exit_to_user_mode_loop+0xec/0x110
[  115.915441][ T6363]  do_syscall_64+0x2bd/0x3b0
[  115.915449][ T6363]  ? lockdep_hardirqs_on+0x9c/0x150
[  115.915457][ T6363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.915464][ T6363]  ? exc_page_fault+0x9f/0xf0
[  115.915473][ T6363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.915479][ T6363] RIP: 0033:0x7fc40cd8ff17
[  115.915486][ T6363] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  115.915498][ T6363] RSP: 002b:00007ffd884c9f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  115.915506][ T6363] RAX: 0000000000000000 RBX: 00007fc40ce11c05 RCX: 00007fc40cd8ff17
[  115.915511][ T6363] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd884c9fe0
[  115.915514][ T6363] RBP: 00007ffd884c9fe0 R08: 0000000000000000 R09: 0000000000000000
[  115.915518][ T6363] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd884cb070
[  115.915523][ T6363] R13: 00007fc40ce11c05 R14: 000000000001c445 R15: 00007ffd884cb0b0
[  115.915534][ T6363]  </TASK>
[  115.915639][ T6363] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  116.238046][ T7684] netlink: 'syz.4.564': attribute type 29 has an invalid length.
[  116.242808][ T7684] netlink: 'syz.4.564': attribute type 29 has an invalid length.
[  116.422249][ T7694] loop4: detected capacity change from 0 to 512
[  116.431799][ T7694] EXT4-fs (loop4): orphan cleanup on readonly fs
[  116.438319][ T7694] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  116.441946][ T7694] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  116.452823][ T7694] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.568: attempt to clear invalid blocks 2 len 1
[  116.457917][ T7694] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.568: invalid indirect mapped block 1819239214 (level 0)
[  116.462624][ T7694] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.568: invalid indirect mapped block 1819239214 (level 1)
[  116.468174][ T7694] EXT4-fs (loop4): 1 truncate cleaned up
[  116.470906][ T7694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  116.478656][ T7694] EXT4-fs error (device loop4): ext4_lookup:1784: inode #2: comm syz.4.568: 'file1' linked to parent dir
[  116.497852][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.050185][   T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  117.121238][ T7714] loop1: detected capacity change from 0 to 512
[  117.125770][ T7714] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  117.140592][ T7714] EXT4-fs (loop1): 1 truncate cleaned up
[  117.157852][ T7714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.205333][   T47] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  117.210921][   T47] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  117.221761][   T47] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  117.232148][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.264583][ T7706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  117.294058][   T47] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  117.305404][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.711447][ T5310] usb 3-1: USB disconnect, device number 12
[  117.836986][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  117.957812][ T7722] loop4: detected capacity change from 0 to 512
[  117.960389][ T7722] vfat: Unknown parameter 'UVvS+ &;Sw//S 0xRCk̕.'
[  118.006686][   T10] usb 2-1: Using ep0 maxpacket: 8
[  118.010886][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  118.014913][   T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  118.020348][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.025863][   T10] usb 2-1: config 0 descriptor??
[  118.424322][   T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  118.511459][   T47] usb 2-1: USB disconnect, device number 12
[  118.605696][ T7736] loop2: detected capacity change from 0 to 64
[  118.891964][ T7738] loop2: detected capacity change from 0 to 40427
[  118.896263][ T7738] F2FS-fs (loop2): Image doesn't support compression
[  118.899575][ T7738] F2FS-fs (loop2): build fault injection rate: 690
[  118.918149][ T7738] F2FS-fs (loop2): invalid crc value
[  118.963801][ T7738] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  118.968318][ T7738] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  118.990061][ T7749] loop4: detected capacity change from 0 to 512
[  118.994456][ T7749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  119.004514][   T33] audit: type=1800 audit(1755553612.688:27): pid=7738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.586" name="file1" dev="loop2" ino=10 res=0 errno=0
[  119.014115][ T7749] EXT4-fs (loop4): 1 truncate cleaned up
[  119.025512][ T7749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.033421][ T5852] syz-executor: attempt to access beyond end of device
[  119.033421][ T5852] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.044272][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  119.044290][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.044296][ T5852] Call Trace:
[  119.044301][ T5852]  <TASK>
[  119.044306][ T5852]  dump_stack_lvl+0x189/0x250
[  119.044328][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.044342][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[  119.044353][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  119.044369][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  119.044394][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[  119.044415][ T5852]  f2fs_write_end_io+0x886/0xb60
[  119.044442][ T5852]  __submit_merged_bio+0x27a/0x6a0
[  119.044464][ T5852]  __submit_merged_write_cond+0x255/0x530
[  119.044486][ T5852]  f2fs_write_data_pages+0x261d/0x3000
[  119.044501][ T5852]  ? __lock_acquire+0xab9/0xd20
[  119.044584][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  119.044640][ T5852]  ? __mod_zone_page_state+0xd7/0x140
[  119.044665][ T5852]  ? folios_put_refs+0x560/0x640
[  119.044687][ T5852]  ? __pfx_folios_put_refs+0x10/0x10
[  119.044697][ T5852]  ? rcu_is_watching+0x15/0xb0
[  119.044716][ T5852]  ? __lock_acquire+0xab9/0xd20
[  119.044746][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  119.044763][ T5852]  do_writepages+0x32e/0x550
[  119.044787][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  119.044805][ T5852]  filemap_fdatawrite+0x199/0x240
[  119.044821][ T5852]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  119.044874][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  119.044891][ T5852]  f2fs_sync_dirty_inodes+0x31f/0x830
[  119.044917][ T5852]  f2fs_write_checkpoint+0x95a/0x1df0
[  119.044949][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  119.044999][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[  119.045015][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[  119.045031][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[  119.045040][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[  119.045060][ T5852]  ? shrinker_free+0x2ce/0x3e0
[  119.045075][ T5852]  deactivate_locked_super+0xbc/0x130
[  119.045096][ T5852]  cleanup_mnt+0x425/0x4c0
[  119.045110][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.045128][ T5852]  task_work_run+0x1d4/0x260
[  119.045147][ T5852]  ? __pfx_task_work_run+0x10/0x10
[  119.045160][ T5852]  ? __x64_sys_umount+0x122/0x160
[  119.045180][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[  119.045200][ T5852]  exit_to_user_mode_loop+0xec/0x110
[  119.045216][ T5852]  do_syscall_64+0x2bd/0x3b0
[  119.045231][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.045245][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.045256][ T5852]  ? exc_page_fault+0x9f/0xf0
[  119.045272][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.045283][ T5852] RIP: 0033:0x7f8eef58ff17
[  119.045294][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  119.045303][ T5852] RSP: 002b:00007ffd35c99908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  119.045316][ T5852] RAX: 0000000000000000 RBX: 00007f8eef611c05 RCX: 00007f8eef58ff17
[  119.045324][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd35c999c0
[  119.045330][ T5852] RBP: 00007ffd35c999c0 R08: 0000000000000000 R09: 0000000000000000
[  119.045337][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd35c9aa50
[  119.045344][ T5852] R13: 00007f8eef611c05 R14: 000000000001d07a R15: 00007ffd35c9aa90
[  119.045366][ T5852]  </TASK>
[  119.045372][ T5852] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  119.238680][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.471260][ T7771] 9pnet_fd: p9_fd_create_tcp (7771): problem binding to privport
[  119.480467][ T7772] netlink: 'syz.2.600': attribute type 47 has an invalid length.
[  119.517683][   T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  119.600480][ T7780] input: syz0 as /devices/virtual/input/input5
[  119.746680][   T24] usb 2-1: Using ep0 maxpacket: 32
[  119.749820][   T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.753645][   T24] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.759646][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  119.762677][   T24] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  119.765430][   T24] usb 2-1: Product: syz
[  119.767395][   T24] usb 2-1: Manufacturer: syz
[  119.771469][   T24] hub 2-1:4.0: USB hub found
[  120.073776][   T24] hub 2-1:4.0: 2 ports detected
[  120.243946][   T24] hub 2-1:4.0: hub_hub_status failed (err = -71)
[  120.249299][   T24] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  120.279827][   T24] usb 2-1: USB disconnect, device number 13
[  120.556394][ T7810] loop4: detected capacity change from 0 to 256
[  120.598229][ T7810] overlayfs: failed lookup in lower (/, name='file1', err=-40): overlapping layers
[  120.798498][ T7816] trusted_key: syz.2.619 sent an empty control message without MSG_MORE.
[  121.040690][ T7822] loop1: detected capacity change from 0 to 512
[  121.054431][ T7822] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  121.060884][ T7822] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  121.073466][ T7822] EXT4-fs (loop1): 1 truncate cleaned up
[  121.075467][ T7815] loop4: detected capacity change from 0 to 32768
[  121.076617][ T7822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.080477][ T7815] XFS: ikeep mount option is deprecated.
[  121.083480][ T7815] XFS: ikeep mount option is deprecated.
[  121.085409][ T7815] XFS: noikeep mount option is deprecated.
[  121.102741][ T7815] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  121.128556][ T7815] XFS (loop4): Ending clean mount
[  121.140584][ T5844] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /192/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  121.152140][ T5844] EXT4-fs error (device loop1): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  121.168022][ T5844] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  121.173648][ T5844] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /192/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  121.187540][ T5844] EXT4-fs error (device loop1): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  121.198236][ T6363] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  121.198856][ T5844] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  121.215422][ T5844] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /192/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  121.225972][ T5844] EXT4-fs error (device loop1): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  121.235569][ T5844] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  121.242955][ T5844] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /192/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  121.255226][ T5844] EXT4-fs error (device loop1): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  121.268286][ T5844] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  121.274746][ T5844] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /192/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  121.288410][ T5844] EXT4-fs error (device loop1): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  121.298309][ T5844] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  121.305134][ T5844] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  121.316031][ T5844] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  121.333324][ T5844] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  121.342054][ T5844] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  121.351256][ T5844] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  121.475758][ T7840] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.518249][ T7840] 8021q: adding VLAN 0 to HW filter on device bond1
[  121.525221][ T7840] bond0: (slave bond1): Enslaving as an active interface with an up link
[  121.615822][ T7850] loop4: detected capacity change from 0 to 512
[  121.652494][ T7850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.658976][ T7850] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.700624][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.809750][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.865037][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.937545][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.020732][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.111549][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.159078][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  122.163401][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  122.168200][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  122.172356][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  122.175150][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  122.283192][   T13] bridge_slave_1: left allmulticast mode
[  122.287534][   T13] bridge_slave_1: left promiscuous mode
[  122.291288][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.301296][   T13] bridge_slave_0: left allmulticast mode
[  122.303604][   T13] bridge_slave_0: left promiscuous mode
[  122.305593][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.575647][ T7877] loop2: detected capacity change from 0 to 2048
[  122.603004][ T7877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.640187][ T7877] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  122.655938][ T7877] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  122.665158][ T7877] EXT4-fs (loop2): This should not happen!! Data will be lost
[  122.665158][ T7877] 
[  122.669693][ T7877] EXT4-fs (loop2): Total free blocks count 0
[  122.672744][ T7877] EXT4-fs (loop2): Free/Dirty block details
[  122.676789][ T7877] EXT4-fs (loop2): free_blocks=4096
[  122.678975][ T7877] EXT4-fs (loop2): dirty_blocks=16
[  122.680970][ T7877] EXT4-fs (loop2): Block reservation details
[  122.683407][ T7877] EXT4-fs (loop2): i_reserved_data_blocks=1
[  122.698616][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.703449][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.712856][ T3019] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28
[  122.713240][   T13] bond0 (unregistering): Released all slaves
[  122.953858][ T7865] chnl_net:caif_netlink_parms(): no params data found
[  123.182598][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.185749][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.192790][ T7865] bridge_slave_0: entered allmulticast mode
[  123.196139][ T7865] bridge_slave_0: entered promiscuous mode
[  123.207099][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.224411][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.228450][ T7865] bridge_slave_1: entered allmulticast mode
[  123.231874][ T7865] bridge_slave_1: entered promiscuous mode
[  123.242807][   T13] hsr_slave_0: left promiscuous mode
[  123.245583][   T13] hsr_slave_1: left promiscuous mode
[  123.248678][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.252286][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.255896][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.260362][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.272684][   T13] veth1_macvtap: left promiscuous mode
[  123.275142][   T13] veth0_macvtap: left promiscuous mode
[  123.278929][   T13] veth1_vlan: left promiscuous mode
[  123.280808][   T13] veth0_vlan: left promiscuous mode
[  123.613020][   T13] team0 (unregistering): Port device team_slave_1 removed
[  123.650899][   T13] team0 (unregistering): Port device team_slave_0 removed
[  124.138229][ T7865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.143028][ T7865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.196584][   T54] Bluetooth: hci0: command tx timeout
[  124.240639][ T7865] team0: Port device team_slave_0 added
[  124.245257][ T7865] team0: Port device team_slave_1 added
[  124.316077][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.323812][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.351882][ T7865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.371011][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.384639][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  124.404957][ T7865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.508174][ T7865] hsr_slave_0: entered promiscuous mode
[  124.510609][ T7865] hsr_slave_1: entered promiscuous mode
[  124.802995][ T7865] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  124.810215][ T7920] loop8: detected capacity change from 0 to 7
[  124.815248][ T7865] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  124.820335][ T7920] Dev loop8: unable to read RDB block 7
[  124.822238][ T7920]  loop8: unable to read partition table
[  124.824204][ T7920] loop8: partition table beyond EOD, truncated
[  124.828772][ T7865] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  124.834054][ T7865] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  124.840617][ T7920] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5)
[  124.930358][ T7865] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.948057][ T7865] 8021q: adding VLAN 0 to HW filter on device team0
[  124.955512][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.958057][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.963790][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.966165][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.143850][ T7865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.650823][ T7865] veth0_vlan: entered promiscuous mode
[  125.655781][ T7865] veth1_vlan: entered promiscuous mode
[  125.691098][ T7865] veth0_macvtap: entered promiscuous mode
[  125.704940][ T7865] veth1_macvtap: entered promiscuous mode
[  125.747960][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.761833][ T7865] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.776018][ T5872] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.780922][ T5872] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.786052][ T5872] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.791611][ T5872] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.885068][ T1226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.893643][ T1226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.912337][ T1226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.915167][ T1226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.018094][ T7982] loop9: detected capacity change from 0 to 7
[  126.024622][ T7982] Dev loop9: unable to read RDB block 7
[  126.030120][ T7982]  loop9: AHDI p1 p2 p3
[  126.033016][ T7982] loop9: partition table partially beyond EOD, truncated
[  126.036224][ T7982] loop9: p1 start 1601398130 is beyond EOD, truncated
[  126.039675][ T7982] loop9: p2 start 1702059890 is beyond EOD, truncated
[  126.203931][ T7993] loop4: detected capacity change from 0 to 128
[  126.278152][   T54] Bluetooth: hci0: command tx timeout
[  126.285533][ T7993] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  126.299615][ T7993] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  126.630233][ T6363] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  126.778353][ T8024] loop4: detected capacity change from 0 to 128
[  126.798082][ T8024] qnx6: unable to set blocksize
[  127.066659][ T5875] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  127.235566][ T5875] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  127.241796][ T5875] usb 3-1: config 0 has no interface number 0
[  127.251286][ T5875] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  127.255039][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.259437][ T5875] usb 3-1: Product: syz
[  127.260814][ T5875] usb 3-1: Manufacturer: syz
[  127.263534][ T5875] usb 3-1: SerialNumber: syz
[  127.284184][ T5875] usb 3-1: config 0 descriptor??
[  127.455939][ T8064] loop4: detected capacity change from 0 to 1024
[  127.498279][ T1089] hfsplus: b-tree write err: -5, ino 4
[  127.526649][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  127.678179][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.681492][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3
[  127.684487][   T10] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  127.688212][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.694928][   T10] usb 6-1: config 0 descriptor??
[  127.893210][ T5875] usb 3-1: Firmware version (0.0) predates our first public release.
[  127.897079][ T5875] usb 3-1: Please update to version 0.2 or newer
[  127.909645][   T10] Bluetooth: Can't get state to change to load ram patch err
[  127.915282][   T10] Bluetooth: Loading patch file failed
[  127.917313][   T10] ath3k 6-1:0.0: probe with driver ath3k failed with error -71
[  127.921840][   T10] usb 6-1: USB disconnect, device number 2
[  127.940350][ T5875] usb 3-1: USB disconnect, device number 13
[  128.357041][   T54] Bluetooth: hci0: command tx timeout
[  128.694942][ T8103] capability: warning: `syz.5.697' uses 32-bit capabilities (legacy support in use)
[  130.251928][ T8161] loop2: detected capacity change from 0 to 40427
[  130.256931][ T8161] F2FS-fs (loop2): invalid crc value
[  130.300227][ T8161] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  130.304926][ T8161] F2FS-fs (loop2): Start checkpoint disabled!
[  130.310088][ T8161] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  130.316803][   T33] audit: type=1800 audit(1755553625.009:28): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.721" name="file1" dev="loop2" ino=10 res=0 errno=0
[  130.335170][ T1226] kworker/u9:4: attempt to access beyond end of device
[  130.335170][ T1226] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  130.341530][ T1226] CPU: 1 UID: 0 PID: 1226 Comm: kworker/u9:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  130.341543][ T1226] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.341549][ T1226] Workqueue: writeback wb_workfn (flush-7:2)
[  130.341563][ T1226] Call Trace:
[  130.341567][ T1226]  <TASK>
[  130.341571][ T1226]  dump_stack_lvl+0x189/0x250
[  130.341583][ T1226]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.341591][ T1226]  ? __pfx_queue_work_on+0x10/0x10
[  130.341598][ T1226]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  130.341608][ T1226]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.341622][ T1226]  f2fs_handle_critical_error+0x37c/0x540
[  130.341640][ T1226]  f2fs_write_end_io+0x886/0xb60
[  130.341660][ T1226]  __submit_merged_bio+0x27a/0x6a0
[  130.341678][ T1226]  __submit_merged_write_cond+0x255/0x530
[  130.341694][ T1226]  f2fs_write_data_pages+0x261d/0x3000
[  130.341716][ T1226]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.341730][ T1226]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  130.341750][ T1226]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  130.341759][ T1226]  ? look_up_lock_class+0x74/0x170
[  130.341771][ T1226]  ? trace_f2fs_writepages+0x7f/0x200
[  130.341781][ T1226]  ? f2fs_write_node_pages+0x478/0x6e0
[  130.341798][ T1226]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.341808][ T1226]  do_writepages+0x32e/0x550
[  130.341819][ T1226]  ? reacquire_held_locks+0x127/0x1d0
[  130.341826][ T1226]  ? writeback_sb_inodes+0x384/0x1010
[  130.341837][ T1226]  __writeback_single_inode+0x145/0xff0
[  130.341845][ T1226]  ? do_raw_spin_unlock+0x4d/0x240
[  130.341855][ T1226]  writeback_sb_inodes+0x6c7/0x1010
[  130.341862][ T1226]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.341879][ T1226]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  130.341903][ T1226]  ? rcu_is_watching+0x15/0xb0
[  130.341914][ T1226]  wb_writeback+0x43b/0xaf0
[  130.341925][ T1226]  ? queue_io+0x341/0x590
[  130.341934][ T1226]  ? __pfx_wb_writeback+0x10/0x10
[  130.341946][ T1226]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.341955][ T1226]  wb_workfn+0x409/0xef0
[  130.341968][ T1226]  ? __pfx_wb_workfn+0x10/0x10
[  130.341977][ T1226]  ? __lock_acquire+0xab9/0xd20
[  130.341990][ T1226]  ? process_scheduled_works+0x9ef/0x17b0
[  130.341999][ T1226]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.342006][ T1226]  ? process_scheduled_works+0x9ef/0x17b0
[  130.342012][ T1226]  ? process_scheduled_works+0x9ef/0x17b0
[  130.342019][ T1226]  process_scheduled_works+0xae1/0x17b0
[  130.342037][ T1226]  ? __pfx_process_scheduled_works+0x10/0x10
[  130.342050][ T1226]  worker_thread+0x8a0/0xda0
[  130.342058][ T1226]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.342069][ T1226]  ? __kthread_parkme+0x7b/0x200
[  130.342080][ T1226]  kthread+0x711/0x8a0
[  130.342089][ T1226]  ? __pfx_worker_thread+0x10/0x10
[  130.342095][ T1226]  ? __pfx_kthread+0x10/0x10
[  130.342104][ T1226]  ? _raw_spin_unlock_irq+0x23/0x50
[  130.342111][ T1226]  ? lockdep_hardirqs_on+0x9c/0x150
[  130.342119][ T1226]  ? __pfx_kthread+0x10/0x10
[  130.342127][ T1226]  ret_from_fork+0x3fc/0x770
[  130.342136][ T1226]  ? __pfx_ret_from_fork+0x10/0x10
[  130.342145][ T1226]  ? __switch_to_asm+0x39/0x70
[  130.342153][ T1226]  ? __switch_to_asm+0x33/0x70
[  130.342160][ T1226]  ? __pfx_kthread+0x10/0x10
[  130.342168][ T1226]  ret_from_fork_asm+0x1a/0x30
[  130.342182][ T1226]  </TASK>
[  130.342185][ T1226] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  130.437075][   T54] Bluetooth: hci0: command tx timeout
[  130.595269][ T8166] netlink: 'syz.2.722': attribute type 4 has an invalid length.
[  131.009202][ T8188] loop2: detected capacity change from 0 to 32768
[  131.014305][ T8188] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.732 (8188)
[  131.029439][ T8188] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.033535][ T8188] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  131.036809][ T8188] BTRFS info (device loop2): disk space caching is enabled
[  131.039479][ T8188] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  131.074594][ T3019] BTRFS warning (device loop2): checksum verify failed on logical 5287936 mirror 1 wanted 0xba2f3320fe4f0dfed931d5a5c7a64dbbccc1fca522c14bbe02198145e0728966 found 0xb937183608d9deb3b5d1d57d8a08a021a222f18007389cac0d84f34558159855 level 0
[  131.088539][ T8188] BTRFS warning (device loop2): failed to read root (objectid=4): -5
[  131.139850][ T8188] BTRFS error (device loop2): open_ctree failed: -5
[  131.486879][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  131.646690][   T24] usb 3-1: Using ep0 maxpacket: 32
[  131.654530][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  131.661068][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  131.665090][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  131.669888][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  131.673391][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  131.682254][   T24] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  131.686222][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.689795][   T24] usb 3-1: Product: syz
[  131.691314][   T24] usb 3-1: Manufacturer: syz
[  131.693218][   T24] usb 3-1: SerialNumber: syz
[  131.700398][   T24] usb 3-1: config 0 descriptor??
[  131.845366][ T8213] loop4: detected capacity change from 0 to 4096
[  131.857876][ T8213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.894955][ T6363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.030091][ T8221] ptrace attach of "/syz-executor exec"[6363] was attempted by "/syz-executor exec"[8221]
[  132.121286][   T24] input input6: Device does not respond to id packet M
[  132.322247][   T24] iforce 3-1:0.0: usb_submit_urb failed: -71
[  132.325546][   T24] input input6: Device does not respond to id packet P
[  132.329365][   T24] iforce 3-1:0.0: usb_submit_urb failed: -71
[  132.331483][   T24] input input6: Device does not respond to id packet B
[  132.334036][   T24] iforce 3-1:0.0: usb_submit_urb failed: -71
[  132.335989][   T24] input input6: Device does not respond to id packet N
[  132.340859][   T24] iforce 3-1:0.0: usb_submit_urb failed: -71
[  132.343248][   T24] iforce 3-1:0.0: usb_submit_urb failed: -71
[  132.345644][   T24] iforce 3-1:0.0: usb_submit_urb failed: -71
[  132.348882][   T24] iforce 3-1:0.0: usb_submit_urb failed: -71
[  132.355483][   T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6
[  132.384584][   T24] usb 3-1: USB disconnect, device number 14
[  132.456755][  T792] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  132.608925][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.611043][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.620352][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.624681][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.628557][  T792] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  132.631651][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.636369][  T792] usb 6-1: config 0 descriptor??
[  133.029057][ T8231] overlayfs: unescaped trailing colons in lowerdir mount option.
[  133.088728][  T792] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  133.094359][  T792] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  133.120414][  T792] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0004/input/input7
[  133.204863][  T792] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  133.293512][ T5310] usb 6-1: USB disconnect, device number 3
[  133.673343][   T47] IPVS: starting estimator thread 0...
[  133.776970][ T8248] IPVS: using max 49 ests per chain, 117600 per kthread
[  134.007304][    C0] hpet: Lost 1 RTC interrupts
[  134.091351][ T8258] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  134.320945][ T8261] warning: `syz.5.753' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  134.690009][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz.5.754'.
[  135.087531][ T8273] loop4: detected capacity change from 0 to 128
[  135.117661][ T8273] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.138578][ T8273] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.169669][ T8279] loop2: detected capacity change from 0 to 1024
[  135.194907][ T8273] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  135.225262][ T8279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  135.249038][ T8279] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.274774][ T6363] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.328223][   T27] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm kworker/u10:0: lblock 0 mapped to illegal pblock 0 (length 1)
[  135.335133][   T27] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  135.343136][   T27] EXT4-fs (loop2): This should not happen!! Data will be lost
[  135.343136][   T27] 
[  135.350290][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  136.691786][ T8315] loop4: detected capacity change from 0 to 164
[  136.720237][ T8315] iso9660: Corrupted directory entry in block 4 of inode 1792
[  137.048198][ T8326] netlink: 44 bytes leftover after parsing attributes in process `syz.2.779'.
[  138.133345][ T8356] loop4: detected capacity change from 0 to 32768
[  138.165903][ T8356] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.787 (8356)
[  138.210842][ T8356] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.215183][ T8356] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  138.227325][ T8356] BTRFS info (device loop4): disk space caching is enabled
[  138.229845][ T8356] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  138.514231][ T8356] BTRFS info (device loop4): rebuilding free space tree
[  138.668939][   T27] Bluetooth: hci3: Frame reassembly failed (-84)
[  138.684377][ T8356] BTRFS info (device loop4): disabling free space tree
[  138.700948][ T8356] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.710804][ T8356] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.984627][ T6363] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.542096][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'.
[  139.682775][ T8426] loop4: detected capacity change from 0 to 128
[  139.695530][ T8426] EXT4-fs: Ignoring removed nomblk_io_submit option
[  139.710864][ T8426] EXT4-fs (loop4): Test dummy encryption mode enabled
[  139.723222][ T8426] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.766379][ T8426] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  139.799938][ T6363] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.026030][ T8443] loop4: detected capacity change from 0 to 4096
[  140.123344][ T8449] loop5: detected capacity change from 0 to 4096
[  140.213200][ T8449] ntfs3(loop5): ino=b, mi_enum_attr
[  140.215485][ T8449] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  140.219970][ T8449] ntfs3(loop5): Failed to load $Extend (-22).
[  140.222057][ T8449] ntfs3(loop5): Failed to initialize $Extend.
[  140.466729][   T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  140.617178][   T47] usb 6-1: Using ep0 maxpacket: 8
[  140.624678][   T47] usb 6-1: config index 0 descriptor too short (expected 48667, got 27)
[  140.629014][   T47] usb 6-1: config 110 has an invalid descriptor of length 189, skipping remainder of the config
[  140.633296][   T47] usb 6-1: config 110 has 0 interfaces, different from the descriptor's value: 22
[  140.638198][   T47] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  140.642055][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.676568][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  140.677510][ T5845] Bluetooth: hci3: command 0x1003 tx timeout
[  141.062148][   T47] usb 6-1: string descriptor 0 read error: -71
[  141.070516][   T47] usb 6-1: USB disconnect, device number 4
[  142.998677][ T8486] loop5: detected capacity change from 0 to 32768
[  143.014772][ T8486] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  143.045220][ T8486] XFS (loop5): Ending clean mount
[  143.053147][ T8486] XFS (loop5): Quotacheck needed: Please wait.
[  143.073945][ T8486] XFS (loop5): Quotacheck: Done.
[  143.109826][ T7865] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  143.147422][ T8508] loop2: detected capacity change from 0 to 8
[  143.154634][ T8508] SQUASHFS error: xz decompression failed, data probably corrupt
[  143.158684][ T8508] SQUASHFS error: Failed to read block 0x108: -5
[  143.160895][ T8508] SQUASHFS error: Unable to read metadata cache entry [106]
[  143.163405][ T8508] SQUASHFS error: Unable to read inode 0x0
[  143.617425][ T1271] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  143.689562][ T8525] random: crng reseeded on system resumption
[  143.968100][ T8510] loop2: detected capacity change from 0 to 40427
[  143.982761][ T8510] F2FS-fs (loop2): invalid crc value
[  144.031815][ T8510] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  144.037121][ T8510] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  144.046910][ T1271] usb 6-1: Using ep0 maxpacket: 16
[  144.053793][ T1271] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  144.058968][ T1271] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  144.062291][ T1271] usb 6-1: Product: syz
[  144.067697][ T1271] usb 6-1: Manufacturer: syz
[  144.070672][ T1271] usb 6-1: SerialNumber: syz
[  144.071327][ T8510] syz.2.824: attempt to access beyond end of device
[  144.071327][ T8510] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  144.079544][ T1271] usb 6-1: config 0 descriptor??
[  144.109249][ T5852] syz-executor: attempt to access beyond end of device
[  144.109249][ T5852] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  144.116409][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  144.116446][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.116455][ T5852] Call Trace:
[  144.116460][ T5852]  <TASK>
[  144.116466][ T5852]  dump_stack_lvl+0x189/0x250
[  144.116488][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.116503][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[  144.116515][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.116530][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.116555][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[  144.116584][ T5852]  f2fs_write_end_io+0x886/0xb60
[  144.116611][ T5852]  __submit_merged_bio+0x27a/0x6a0
[  144.116634][ T5852]  __submit_merged_write_cond+0x255/0x530
[  144.116656][ T5852]  f2fs_write_data_pages+0x261d/0x3000
[  144.116704][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.116762][ T5852]  ? ktime_get+0x3e/0x1f0
[  144.116776][ T5852]  ? ktime_get+0x3e/0x1f0
[  144.116791][ T5852]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  144.116804][ T5852]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  144.116828][ T5852]  ? rcu_is_watching+0x15/0xb0
[  144.116847][ T5852]  ? __lock_acquire+0xab9/0xd20
[  144.116879][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.116897][ T5852]  do_writepages+0x32e/0x550
[  144.116923][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  144.116941][ T5852]  filemap_fdatawrite+0x199/0x240
[  144.116957][ T5852]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  144.117014][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  144.117032][ T5852]  f2fs_sync_dirty_inodes+0x31f/0x830
[  144.117058][ T5852]  f2fs_write_checkpoint+0x95a/0x1df0
[  144.117090][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  144.117137][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[  144.117154][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[  144.117170][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[  144.117180][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[  144.117202][ T5852]  ? shrinker_free+0x2ce/0x3e0
[  144.117217][ T5852]  deactivate_locked_super+0xbc/0x130
[  144.117234][ T5852]  cleanup_mnt+0x425/0x4c0
[  144.117249][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.117266][ T5852]  task_work_run+0x1d4/0x260
[  144.117285][ T5852]  ? __pfx_task_work_run+0x10/0x10
[  144.117298][ T5852]  ? __x64_sys_umount+0x122/0x160
[  144.117318][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[  144.117337][ T5852]  exit_to_user_mode_loop+0xec/0x110
[  144.117380][ T5852]  do_syscall_64+0x2bd/0x3b0
[  144.117397][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.117411][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.117424][ T5852]  ? exc_page_fault+0x9f/0xf0
[  144.117441][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.117451][ T5852] RIP: 0033:0x7f8eef58ff17
[  144.117463][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  144.117474][ T5852] RSP: 002b:00007ffd35c99908 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  144.117488][ T5852] RAX: 0000000000000000 RBX: 00007f8eef611c05 RCX: 00007f8eef58ff17
[  144.117495][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd35c999c0
[  144.117503][ T5852] RBP: 00007ffd35c999c0 R08: 0000000000000000 R09: 0000000000000000
[  144.117510][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd35c9aa50
[  144.117518][ T5852] R13: 00007f8eef611c05 R14: 0000000000023261 R15: 00007ffd35c9aa90
[  144.117541][ T5852]  </TASK>
[  144.257196][    C0] hpet: Lost 8 RTC interrupts
[  144.280810][ T5852] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  144.300313][ T1271] usb 6-1: USB disconnect, device number 5
[  144.852713][ T8548] netlink: 424 bytes leftover after parsing attributes in process `syz.2.837'.
[  144.861889][ T8548] netlink: 'syz.2.837': attribute type 1 has an invalid length.
[  144.905046][ T8552] loop4: detected capacity change from 0 to 128
[  144.937439][ T8555] loop5: detected capacity change from 0 to 256
[  144.942286][ T8555] exfat: Deprecated parameter 'utf8'
[  144.944002][ T8555] exfat: Deprecated parameter 'utf8'
[  144.945882][ T8555] exfat: Deprecated parameter 'utf8'
[  144.953283][ T8555] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  145.624783][ T8570] loop2: detected capacity change from 0 to 16
[  145.643896][ T8570] erofs (device loop2): mounted with root inode @ nid 36.
[  145.913280][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.989069][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.039711][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.121561][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.233615][   T13] bridge_slave_1: left allmulticast mode
[  146.235923][   T13] bridge_slave_1: left promiscuous mode
[  146.239394][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.248137][   T13] bridge_slave_0: left allmulticast mode
[  146.252411][   T13] bridge_slave_0: left promiscuous mode
[  146.258099][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.394069][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  146.401194][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  146.406084][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  146.414519][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  146.429941][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  146.688691][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.701711][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.712106][   T13] bond0 (unregistering): (slave bond1): Releasing backup interface
[  146.717932][   T13] bond0 (unregistering): Released all slaves
[  146.722103][   T33] audit: type=1326 audit(1755553641.409:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.2.851" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7fc00000
[  146.932073][ T8596] kAFS: unparsable volume name
[  146.952169][   T13] bond1 (unregistering): Released all slaves
[  147.325665][ T8586] chnl_net:caif_netlink_parms(): no params data found
[  147.483901][ T8616] loop2: detected capacity change from 0 to 4096
[  147.492905][ T8616] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  147.512206][ T8616] ntfs3(loop2): ino=1a, mi_enum_attr
[  147.514216][ T8616] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  147.518214][ T8616] ntfs3(loop2): ino=1a, mi_enum_attr
[  147.520120][ T8616] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  147.545834][ T8616] ntfs3(loop2): ino=1b, mi_enum_attr
[  147.550355][ T8621] loop5: detected capacity change from 0 to 512
[  147.552650][ T8616] ntfs3(loop2): ino=1b, mi_enum_attr
[  147.583621][ T8616] overlayfs: upper fs does not support tmpfile.
[  147.590750][ T8621] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  147.600069][ T8616] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  147.612319][ T8616] overlayfs: failed to get uuid (/file0, err=-22); falling back to uuid=null.
[  147.617306][   T13] hsr_slave_0: left promiscuous mode
[  147.619373][ T8616] overlayfs: failed to get origin (-22)
[  147.622440][   T13] hsr_slave_1: left promiscuous mode
[  147.625936][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.629037][ T8616] ntfs3(loop2): ino=1b, "file0" mi_enum_attr
[  147.629087][ T8616] ntfs3(loop2): ino=1b, "file0" mi_enum_attr
[  147.629737][ T8616] ntfs3(loop2): ino=1b, "file0" mi_enum_attr
[  147.634186][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.641116][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.644220][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.649134][ T8616] overlayfs: failed to verify upper root origin
[  147.683688][   T13] veth1_macvtap: left promiscuous mode
[  147.688896][   T13] veth0_macvtap: left promiscuous mode
[  147.691819][   T13] veth1_vlan: left promiscuous mode
[  147.694102][   T13] veth0_vlan: left promiscuous mode
[  147.815054][ T8631] Invalid source name
[  147.817507][ T8631] UBIFS error (pid: 8631): cannot open "./file0", error -22
[  148.160586][   T13] team0 (unregistering): Port device team_slave_1 removed
[  148.191577][   T13] team0 (unregistering): Port device team_slave_0 removed
[  148.439787][ T5845] Bluetooth: hci1: command tx timeout
[  148.537600][ T8627] syz_tun: entered allmulticast mode
[  148.568448][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.571678][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.574686][ T8586] bridge_slave_0: entered allmulticast mode
[  148.598266][ T8586] bridge_slave_0: entered promiscuous mode
[  148.605132][ T8636] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.869'.
[  148.612683][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.621148][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.624051][ T8586] bridge_slave_1: entered allmulticast mode
[  148.635354][ T8586] bridge_slave_1: entered promiscuous mode
[  148.704409][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  148.709207][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.739802][ T8586] team0: Port device team_slave_0 added
[  148.751683][ T8586] team0: Port device team_slave_1 added
[  148.799518][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.802647][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.818277][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.827797][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.831066][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.843254][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.866719][ T8597] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  148.895352][ T8586] hsr_slave_0: entered promiscuous mode
[  148.900094][ T8586] hsr_slave_1: entered promiscuous mode
[  148.902889][ T8586] debugfs: 'hsr0' already exists in 'hsr'
[  148.905448][ T8586] Cannot create hsr debugfs directory
[  148.913313][   T13] IPVS: stop unused estimator thread 0...
[  148.936753][ T1271] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  149.033093][ T8597] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  149.037269][ T8597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.046774][ T8597] usb 6-1: Product: syz
[  149.048917][ T8597] usb 6-1: Manufacturer: syz
[  149.050962][ T8597] usb 6-1: SerialNumber: syz
[  149.071595][ T8597] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  149.088889][ T1271] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  149.113350][ T1271] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  149.126955][ T1271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  149.136804][ T1271] usb 3-1: SerialNumber: syz
[  149.167775][ T8597] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  149.246382][ T8586] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  149.255390][ T8586] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  149.260930][ T8586] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  149.277257][ T8586] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  149.308481][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.312357][ T8586] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.348531][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.366919][ T8644] loop2: detected capacity change from 0 to 1024
[  149.374196][ T8644] EXT4-fs: Ignoring removed bh option
[  149.380819][ T1226] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.412112][ T8644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  149.423932][ T8586] 8021q: adding VLAN 0 to HW filter on device team0
[  149.441004][ T1226] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.443832][ T1226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.452538][ T1226] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.455413][ T1226] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.485368][ T8671] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.872: corrupted in-inode xattr: e_value out of bounds
[  149.524092][ T1271] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  149.540059][ T1271] usb 3-1: USB disconnect, device number 15
[  149.710553][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.727454][ T5900] usb 6-1: USB disconnect, device number 6
[  149.839273][ T8586] veth0_vlan: entered promiscuous mode
[  149.846010][ T8586] veth1_vlan: entered promiscuous mode
[  149.865424][ T8586] veth0_macvtap: entered promiscuous mode
[  149.872197][ T8586] veth1_macvtap: entered promiscuous mode
[  149.880643][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.889060][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.894990][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.910627][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.922372][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.936169][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.983208][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.985754][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.010991][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.013639][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.076215][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  150.182182][   T33] audit: type=1326 audit(1755553644.869:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.6.876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fab8ebe9 code=0x7ffc0000
[  150.200057][ T8597] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  150.215612][ T8597] ath9k_htc: Failed to initialize the device
[  150.219285][   T33] audit: type=1326 audit(1755553644.869:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.6.876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fab8ebe9 code=0x7ffc0000
[  150.238656][ T5900] usb 6-1: ath9k_htc: USB layer deinitialized
[  150.265859][   T33] audit: type=1326 audit(1755553644.869:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.6.876" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f81fab8ebe9 code=0x7ffc0000
[  150.298290][   T33] audit: type=1326 audit(1755553644.869:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.6.876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fab8ebe9 code=0x7ffc0000
[  150.320719][ T8711] loop6: detected capacity change from 0 to 4096
[  150.332246][   T33] audit: type=1326 audit(1755553644.869:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.6.876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fab8ebe9 code=0x7ffc0000
[  150.347457][   T33] audit: type=1326 audit(1755553644.869:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.6.876" exe="/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f81fab8ebe9 code=0x7ffc0000
[  150.378300][ T8711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.394667][   T33] audit: type=1326 audit(1755553644.869:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.6.876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fab8ebe9 code=0x7ffc0000
[  150.418664][ T8711] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #15: comm syz.6.878: corrupted inode contents
[  150.424499][ T8711] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #15: comm syz.6.878: mark_inode_dirty error
[  150.430379][ T8711] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #15: comm syz.6.878: corrupted inode contents
[  150.434511][ T8711] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #15: comm syz.6.878: mark_inode_dirty error
[  150.439812][   T33] audit: type=1326 audit(1755553644.869:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.6.876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fab8ebe9 code=0x7ffc0000
[  150.446764][ T8711] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #15: comm syz.6.878: corrupted inode contents
[  150.451612][ T8711] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #15: comm syz.6.878: mark_inode_dirty error
[  150.456127][ T8711] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #15: comm syz.6.878: corrupted inode contents
[  150.465504][ T8711] EXT4-fs error (device loop6): ext4_truncate:4666: inode #15: comm syz.6.878: mark_inode_dirty error
[  150.469972][ T8711] EXT4-fs error (device loop6): ext4_evict_inode:265: comm syz.6.878: couldn't truncate inode 15 (err -117)
[  150.472417][   T33] audit: type=1326 audit(1755553644.869:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.6.876" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f81fab8ebe9 code=0x7ffc0000
[  150.517234][ T5845] Bluetooth: hci1: command tx timeout
[  150.519983][   T33] audit: type=1326 audit(1755553644.869:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.6.876" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81fab8ebe9 code=0x7ffc0000
[  150.529979][ T8586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.585573][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'.
[  151.066575][ T8734] loop6: detected capacity change from 0 to 2048
[  151.072962][ T8734] udf: Bad value for 'session'
[  151.139363][ T8713] loop5: detected capacity change from 0 to 40427
[  151.169819][ T8713] F2FS-fs (loop5): invalid crc value
[  151.216042][ T8736] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  151.234096][ T8736] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  151.310700][ T8713] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  151.315921][ T8713] F2FS-fs (loop5): Start checkpoint disabled!
[  151.327503][ T8713] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  151.399065][ T8713] syz.5.879: attempt to access beyond end of device
[  151.399065][ T8713] loop5: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  151.408951][ T8713] syz.5.879: attempt to access beyond end of device
[  151.408951][ T8713] loop5: rw=2049, sector=45224, nr_sectors = 128 limit=40427
[  151.414892][ T8744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.886'.
[  151.421669][ T8713] syz.5.879: attempt to access beyond end of device
[  151.421669][ T8713] loop5: rw=2049, sector=45352, nr_sectors = 128 limit=40427
[  151.429068][ T8713] syz.5.879: attempt to access beyond end of device
[  151.429068][ T8713] loop5: rw=2049, sector=45480, nr_sectors = 128 limit=40427
[  151.450061][ T8713] syz.5.879: attempt to access beyond end of device
[  151.450061][ T8713] loop5: rw=2049, sector=45608, nr_sectors = 128 limit=40427
[  151.468566][ T8713] syz.5.879: attempt to access beyond end of device
[  151.468566][ T8713] loop5: rw=2049, sector=45736, nr_sectors = 128 limit=40427
[  151.475969][ T8713] syz.5.879: attempt to access beyond end of device
[  151.475969][ T8713] loop5: rw=2049, sector=45864, nr_sectors = 128 limit=40427
[  151.534990][ T8746] syz.5.879: attempt to access beyond end of device
[  151.534990][ T8746] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  151.536291][ T8713] syz.5.879: attempt to access beyond end of device
[  151.536291][ T8713] loop5: rw=2049, sector=45992, nr_sectors = 128 limit=40427
[  151.575388][ T8753] loop6: detected capacity change from 0 to 8
[  151.589784][ T8713] syz.5.879: attempt to access beyond end of device
[  151.589784][ T8713] loop5: rw=2049, sector=46120, nr_sectors = 128 limit=40427
[  151.593793][ T8753] unable to read xattr id index table
[  151.747863][ T8597] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  151.772294][ T3019] CPU: 0 UID: 0 PID: 3019 Comm: kworker/u9:5 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  151.772347][ T3019] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.772364][ T3019] Workqueue: writeback wb_workfn (flush-7:5)
[  151.772384][ T3019] Call Trace:
[  151.772390][ T3019]  <TASK>
[  151.772396][ T3019]  dump_stack_lvl+0x189/0x250
[  151.772415][ T3019]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.772430][ T3019]  ? __pfx_queue_work_on+0x10/0x10
[  151.772441][ T3019]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  151.772457][ T3019]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  151.772482][ T3019]  f2fs_handle_critical_error+0x37c/0x540
[  151.772506][ T3019]  f2fs_write_end_io+0x886/0xb60
[  151.772533][ T3019]  __submit_merged_bio+0x27a/0x6a0
[  151.772556][ T3019]  __submit_merged_write_cond+0x255/0x530
[  151.772577][ T3019]  f2fs_write_data_pages+0x261d/0x3000
[  151.772621][ T3019]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  151.772708][ T3019]  ? f2fs_write_meta_pages+0x357/0x450
[  151.772734][ T3019]  ? __lock_acquire+0xab9/0xd20
[  151.772756][ T3019]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  151.772774][ T3019]  do_writepages+0x32e/0x550
[  151.772792][ T3019]  ? reacquire_held_locks+0x127/0x1d0
[  151.772804][ T3019]  ? writeback_sb_inodes+0x384/0x1010
[  151.772826][ T3019]  __writeback_single_inode+0x145/0xff0
[  151.772841][ T3019]  ? do_raw_spin_unlock+0x4d/0x240
[  151.772859][ T3019]  writeback_sb_inodes+0x6c7/0x1010
[  151.772895][ T3019]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  151.772944][ T3019]  ? rcu_is_watching+0x15/0xb0
[  151.772964][ T3019]  wb_writeback+0x43b/0xaf0
[  151.772986][ T3019]  ? queue_io+0x341/0x590
[  151.773003][ T3019]  ? __pfx_wb_writeback+0x10/0x10
[  151.773025][ T3019]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.773043][ T3019]  wb_workfn+0x409/0xef0
[  151.773069][ T3019]  ? __pfx_wb_workfn+0x10/0x10
[  151.773106][ T3019]  ? __lock_acquire+0xab9/0xd20
[  151.773134][ T3019]  ? process_scheduled_works+0x9ef/0x17b0
[  151.773151][ T3019]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.773163][ T3019]  ? process_scheduled_works+0x9ef/0x17b0
[  151.773174][ T3019]  ? process_scheduled_works+0x9ef/0x17b0
[  151.773186][ T3019]  process_scheduled_works+0xae1/0x17b0
[  151.773223][ T3019]  ? __pfx_process_scheduled_works+0x10/0x10
[  151.773249][ T3019]  worker_thread+0x8a0/0xda0
[  151.773264][ T3019]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  151.773285][ T3019]  ? __kthread_parkme+0x7b/0x200
[  151.773331][ T3019]  kthread+0x711/0x8a0
[  151.773350][ T3019]  ? __pfx_worker_thread+0x10/0x10
[  151.773367][ T3019]  ? __pfx_kthread+0x10/0x10
[  151.773383][ T3019]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.773395][ T3019]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.773409][ T3019]  ? __pfx_kthread+0x10/0x10
[  151.773424][ T3019]  ret_from_fork+0x3fc/0x770
[  151.773439][ T3019]  ? __pfx_ret_from_fork+0x10/0x10
[  151.773457][ T3019]  ? __switch_to_asm+0x39/0x70
[  151.773470][ T3019]  ? __switch_to_asm+0x33/0x70
[  151.773482][ T3019]  ? __pfx_kthread+0x10/0x10
[  151.773497][ T3019]  ret_from_fork_asm+0x1a/0x30
[  151.773543][ T3019]  </TASK>
[  151.810392][ T3019] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  151.815545][ T8761] loop6: detected capacity change from 0 to 256
[  151.911800][ T8761] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  151.946850][ T8597] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  151.961981][ T8597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.974026][ T8597] usb 3-1: config 0 descriptor??
[  152.000736][ T8597] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  152.017284][ T8597] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  152.185077][ T8597] usb 3-1: USB disconnect, device number 16
[  152.189331][ T8597] ftdi_sio 3-1:0.0: device disconnected
[  152.548373][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.905'.
[  152.551550][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.905'.
[  152.596783][ T5845] Bluetooth: hci1: command tx timeout
[  152.603434][ T8797] loop6: detected capacity change from 0 to 4096
[  152.607976][ T8797] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  152.614599][ T8797] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 4096)
[  152.623943][ T8797] NILFS (loop6): mounting unchecked fs
[  152.631761][ T8797] NILFS (loop6): recovery complete
[  152.635280][ T8798] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.756263][ T8793] loop5: detected capacity change from 0 to 32768
[  152.762244][ T8793] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.904 (8793)
[  152.779415][ T8804] loop2: detected capacity change from 0 to 16
[  152.789487][ T8804] erofs (device loop2): mounted with root inode @ nid 36.
[  152.817315][ T8793] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  152.833427][   T56] erofs (device loop2): failed to decompress -26 in[46, 0] out[9000]
[  152.837418][ T8793] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  152.844108][ T8793] BTRFS info (device loop5): using free-space-tree
[  152.893654][ T8804] erofs (device loop2): failed to decompress -26 in[46, 4050] out[8192]
[  152.909455][ T8804] erofs (device loop2): read error -117 @ 1 of nid 89
[  153.113393][ T7865] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  153.178538][ T8837] netlink: 216 bytes leftover after parsing attributes in process `syz.6.918'.
[  153.182157][ T8837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.918'.
[  153.195000][ T8837] netlink: 16 bytes leftover after parsing attributes in process `syz.6.918'.
[  153.346835][ T8844] loop5: detected capacity change from 0 to 1024
[  153.366637][ T5310] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  153.464270][ T8843] Process accounting resumed
[  153.516522][ T5310] usb 3-1: Using ep0 maxpacket: 32
[  153.522218][ T5310] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  153.534917][ T5310] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  153.541541][ T8842] loop6: detected capacity change from 0 to 32768
[  153.544414][ T5310] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  153.547959][ T5310] usb 3-1: Product: syz
[  153.558701][ T5310] usb 3-1: Manufacturer: syz
[  153.561210][ T5310] usb 3-1: SerialNumber: syz
[  153.565433][ T5310] usb 3-1: config 0 descriptor??
[  153.573065][ T8842] (syz.6.919,8842,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  153.583222][ T8835] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  153.589274][ T5310] hub 3-1:0.0: bad descriptor, ignoring hub
[  153.597195][ T5310] hub 3-1:0.0: probe with driver hub failed with error -5
[  153.600713][ T8842] (syz.6.919,8842,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  153.636345][ T8842] JBD2: Ignoring recovery information on journal
[  153.774355][ T8842] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  153.909311][ T8586] ocfs2: Unmounting device (7,6) on (node local)
[  154.406707][ T8859] Zero length message leads to an empty skb
[  154.686723][ T5845] Bluetooth: hci1: command tx timeout
[  155.625762][ T8866] loop6: detected capacity change from 0 to 16
[  155.639055][ T8866] erofs (device loop6): mounted with root inode @ nid 36.
[  155.926659][   T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  156.076621][   T10] usb 7-1: Using ep0 maxpacket: 32
[  156.080675][   T10] usb 7-1: config 4 has an invalid interface number: 228 but max is 0
[  156.084109][   T10] usb 7-1: config 4 has no interface number 0
[  156.086824][   T10] usb 7-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  156.092141][   T10] usb 7-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0
[  156.096808][   T10] usb 7-1: config 4 interface 228 has no altsetting 0
[  156.101763][   T10] usb 7-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  156.105547][   T10] usb 7-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  156.109547][   T10] usb 7-1: Product: syz
[  156.111304][   T10] usb 7-1: Manufacturer: syz
[  156.113154][   T10] usb 7-1: SerialNumber: syz
[  156.185193][ T8870] net_ratelimit: 17 callbacks suppressed
[  156.185308][ T8870] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  156.225830][ T8872] loop5: detected capacity change from 0 to 512
[  156.242161][ T8872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.247252][ T8872] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.255100][ T8872] EXT4-fs warning (device loop5): ext4_group_add:1716: Can't resize non-sparse filesystem further
[  156.275054][ T7865] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.382052][   T10] usb 7-1: USB disconnect, device number 2
[  156.392767][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.962233][ T8896] loop6: detected capacity change from 0 to 1024
[  157.023560][ T8896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.050710][ T8586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.144570][ T8904] loop6: detected capacity change from 0 to 512
[  157.160474][ T8904] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  157.165433][ T8904] UDF-fs: Scanning with blocksize 512 failed
[  157.171024][ T8904] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  157.173671][ T8904] UDF-fs: Scanning with blocksize 1024 failed
[  157.176376][ T8904] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found
[  157.179791][ T8904] UDF-fs: Scanning with blocksize 2048 failed
[  157.182239][ T8904] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  157.187111][ T8904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.222762][   T24] usb 3-1: USB disconnect, device number 17
[  157.512847][ T8916] tipc: Started in network mode
[  157.514936][ T8916] tipc: Node identity 4, cluster identity 4711
[  157.519724][ T8916] tipc: Node number set to 4
[  158.315790][ T8923] loop2: detected capacity change from 0 to 32768
[  158.376803][   T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  158.530536][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.535127][   T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  158.556413][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.576393][   T10] usb 6-1: config 0 descriptor??
[  158.815734][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  158.815744][   T33] audit: type=1326 audit(1755553653.499:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  158.825843][   T33] audit: type=1326 audit(1755553653.509:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  158.834608][   T33] audit: type=1326 audit(1755553653.519:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  158.844058][   T33] audit: type=1326 audit(1755553653.519:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  158.854069][   T33] audit: type=1326 audit(1755553653.519:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  158.856804][   T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  158.863509][   T33] audit: type=1326 audit(1755553653.519:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  158.876179][   T33] audit: type=1326 audit(1755553653.519:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  158.884864][   T33] audit: type=1326 audit(1755553653.519:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  158.894782][   T33] audit: type=1326 audit(1755553653.519:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  158.902529][   T33] audit: type=1326 audit(1755553653.519:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8eef58ebe9 code=0x7ffc0000
[  158.996620][   T10] lua 0003:1E7D:2C2E.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.5-1/input0
[  159.030835][   T24] usb 7-1: config 0 has an invalid interface number: 153 but max is 0
[  159.034063][   T24] usb 7-1: config 0 has no interface number 0
[  159.037350][   T24] usb 7-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[  159.042161][   T24] usb 7-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  159.050892][   T24] usb 7-1: config 0 interface 153 has no altsetting 0
[  159.056011][   T24] usb 7-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  159.059893][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.062718][   T24] usb 7-1: Product: syz
[  159.064101][   T24] usb 7-1: Manufacturer: syz
[  159.066221][   T24] usb 7-1: SerialNumber: syz
[  159.074423][   T24] usb 7-1: config 0 descriptor??
[  159.082728][   T24] hub 7-1:0.153: bad descriptor, ignoring hub
[  159.085351][   T24] hub 7-1:0.153: probe with driver hub failed with error -5
[  159.089421][   T24] sierra 7-1:0.153: Sierra USB modem converter detected
[  159.201078][   T10] usb 6-1: USB disconnect, device number 7
[  159.307447][   T24] usb 7-1: USB disconnect, device number 3
[  159.310743][   T24] sierra 7-1:0.153: device disconnected
[  160.307082][ T8956] loop6: detected capacity change from 0 to 32768
[  160.348778][ T8956] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.380677][ T8956] XFS (loop6): Ending clean mount
[  160.405267][ T8956] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  160.410473][ T8956] XFS (loop6): Unmount and run xfs_repair
[  160.412962][ T8956] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  160.415617][ T8956] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  160.419265][ T8956] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  160.422794][ T8956] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  160.426958][ T8956] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  160.430164][ T8956] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  160.433087][ T8956] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  160.436092][ T8956] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  160.441421][ T8956] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  160.444508][ T8956] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74
[  160.452814][ T8956] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  160.458018][ T8956] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  160.483118][ T8586] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.682041][ T8969] loop6: detected capacity change from 0 to 512
[  160.697715][ T8969] EXT4-fs: Ignoring removed orlov option
[  160.719090][ T8969] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  160.741198][ T8969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  160.745022][ T8969] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.963: corrupted in-inode xattr: e_value size too large
[  160.753773][ T8969] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.963: couldn't read orphan inode 15 (err -117)
[  160.760992][ T8969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.800390][ T8586] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.973753][ T8982] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  160.978974][ T5310] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  161.018050][ T8984] loop6: detected capacity change from 0 to 1024
[  161.045957][   T36] hfsplus: b-tree write err: -5, ino 4
[  161.159090][ T5310] usb 6-1: unable to get BOS descriptor or descriptor too short
[  161.165677][ T5310] usb 6-1: not running at top speed; connect to a high speed hub
[  161.176574][ T5310] usb 6-1: config 1 has an invalid interface number: 138 but max is 0
[  161.179360][ T5310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.191998][ T5310] usb 6-1: config 1 has no interface number 0
[  161.194108][ T5310] usb 6-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  161.199185][ T5310] usb 6-1: config 1 interface 138 has no altsetting 0
[  161.203879][ T5310] usb 6-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  161.209010][ T5310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.219170][ T5310] usb 6-1: Product: syz
[  161.220613][ T5310] usb 6-1: Manufacturer: syz
[  161.222198][ T5310] usb 6-1: SerialNumber: syz
[  161.463350][ T5310] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  161.503792][ T5310] usb 6-1: USB disconnect, device number 8
[  161.607585][ T7550] udevd[7550]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.496663][ T9054] loop2: detected capacity change from 0 to 4096
[  162.541551][ T9059] loop6: detected capacity change from 0 to 4096
[  162.685306][ T9064] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.178245][ T9078] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1000'.
[  163.415755][ T5875] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  163.586534][ T5875] usb 3-1: Using ep0 maxpacket: 32
[  163.591772][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.595253][ T5875] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  163.602876][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.607576][ T5875] usb 3-1: config 0 descriptor??
[  163.892825][ T9097] loop5: detected capacity change from 0 to 40427
[  163.895859][ T9097] F2FS-fs (loop5): Image doesn't support compression
[  163.899298][ T9097] F2FS-fs (loop5): build fault injection rate: 690
[  163.902419][ T9097] F2FS-fs (loop5): invalid crc value
[  163.940947][ T9097] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.947834][ T9097] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  164.014895][ T5875] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[  164.024479][ T5875] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[  164.029662][ T5875] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[  164.032429][ T5875] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[  164.035198][ T5875] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[  164.046007][ T5875] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[  164.294157][ T5875] koneplus 0003:1E7D:2D51.0006: couldn't init struct koneplus_device
[  164.300380][ T5875] koneplus 0003:1E7D:2D51.0006: couldn't install mouse
[  164.319831][ T5875] koneplus 0003:1E7D:2D51.0006: probe with driver koneplus failed with error -71
[  164.338721][ T5875] usb 3-1: USB disconnect, device number 18
[  164.455952][ T9129] loop6: detected capacity change from 0 to 32768
[  164.465304][ T9129] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  164.479405][ T9129] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 3298534883360
[  164.485617][ T9129] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  164.489170][ T9129] OCFS2: File system is now read-only.
[  164.491016][ T9129] (syz.6.1011,9129,1):ocfs2_trim_mainbm:7630 ERROR: status = -30
[  164.513700][ T8586] ocfs2: Unmounting device (7,6) on (node local)
[  164.733914][ T9145] loop6: detected capacity change from 0 to 32768
[  164.743992][ T9145] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  164.771243][ T9145] 
[  164.772248][ T9145] ======================================================
[  164.775014][ T9145] WARNING: possible circular locking dependency detected
[  164.777914][ T9145] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  164.782035][ T9145] ------------------------------------------------------
[  164.784920][ T9145] syz.6.1017/9145 is trying to acquire lock:
[  164.787232][ T9145] ffff8881268f8660 (&oi->ip_alloc_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[  164.791163][ T9145] 
[  164.791163][ T9145] but task is already holding lock:
[  164.794092][ T9145] ffff8881268f86f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  164.797973][ T9145] 
[  164.797973][ T9145] which lock already depends on the new lock.
[  164.797973][ T9145] 
[  164.801702][ T9145] 
[  164.801702][ T9145] the existing dependency chain (in reverse order) is:
[  164.804966][ T9145] 
[  164.804966][ T9145] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  164.807845][ T9145]        lock_acquire+0x120/0x360
[  164.809846][ T9145]        down_read+0x46/0x2e0
[  164.811548][ T9145]        ocfs2_init_acl+0x2f9/0x720
[  164.813418][ T9145]        ocfs2_mknod+0x1321/0x2050
[  164.815289][ T9145]        ocfs2_create+0x1a5/0x440
[  164.817118][ T9145]        path_openat+0x14f4/0x3830
[  164.819018][ T9145]        do_filp_open+0x1fa/0x410
[  164.820895][ T9145]        do_sys_openat2+0x121/0x1c0
[  164.822808][ T9145]        __x64_sys_openat+0x138/0x170
[  164.824910][ T9145]        do_syscall_64+0xfa/0x3b0
[  164.826879][ T9145]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.829203][ T9145] 
[  164.829203][ T9145] -> #3 (jbd2_handle){++++}-{0:0}:
[  164.831900][ T9145]        lock_acquire+0x120/0x360
[  164.833759][ T9145]        start_this_handle+0x1fa7/0x21c0
[  164.835834][ T9145]        jbd2__journal_start+0x2c1/0x5b0
[  164.837890][ T9145]        jbd2_journal_start+0x2a/0x40
[  164.839833][ T9145]        ocfs2_start_trans+0x376/0x6d0
[  164.841957][ T9145]        ocfs2_mknod+0xe93/0x2050
[  164.843813][ T9145]        ocfs2_create+0x1a5/0x440
[  164.845668][ T9145]        path_openat+0x14f4/0x3830
[  164.847560][ T9145]        do_filp_open+0x1fa/0x410
[  164.849379][ T9145]        do_sys_openat2+0x121/0x1c0
[  164.851254][ T9145]        __x64_sys_openat+0x138/0x170
[  164.853132][ T9145]        do_syscall_64+0xfa/0x3b0
[  164.854925][ T9145]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.857355][ T9145] 
[  164.857355][ T9145] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  164.860287][ T9145]        lock_acquire+0x120/0x360
[  164.862026][ T9145]        down_read+0x46/0x2e0
[  164.863759][ T9145]        ocfs2_start_trans+0x36a/0x6d0
[  164.865693][ T9145]        ocfs2_mknod+0xe93/0x2050
[  164.867486][ T9145]        ocfs2_create+0x1a5/0x440
[  164.869278][ T9145]        path_openat+0x14f4/0x3830
[  164.871093][ T9145]        do_filp_open+0x1fa/0x410
[  164.873034][ T9145]        do_sys_openat2+0x121/0x1c0
[  164.874901][ T9145]        __x64_sys_openat+0x138/0x170
[  164.876894][ T9145]        do_syscall_64+0xfa/0x3b0
[  164.878700][ T9145]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.880942][ T9145] 
[  164.880942][ T9145] -> #1 (sb_internal#6){.+.+}-{0:0}:
[  164.883715][ T9145]        lock_acquire+0x120/0x360
[  164.885554][ T9145]        ocfs2_start_trans+0x26b/0x6d0
[  164.887691][ T9145]        ocfs2_write_begin_nolock+0x1ca6/0x4340
[  164.889917][ T9145]        ocfs2_write_begin+0x1bb/0x310
[  164.891885][ T9145]        generic_perform_write+0x2c5/0x900
[  164.893948][ T9145]        ocfs2_file_write_iter+0x157a/0x1d10
[  164.896114][ T9145]        vfs_write+0x5c9/0xb30
[  164.897865][ T9145]        ksys_write+0x145/0x250
[  164.899673][ T9145]        do_syscall_64+0xfa/0x3b0
[  164.901504][ T9145]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.903983][ T9145] 
[  164.903983][ T9145] -> #0 (&oi->ip_alloc_sem){++++}-{4:4}:
[  164.906771][ T9145]        validate_chain+0xb9b/0x2140
[  164.908735][ T9145]        __lock_acquire+0xab9/0xd20
[  164.910695][ T9145]        lock_acquire+0x120/0x360
[  164.912583][ T9145]        down_write+0x96/0x1f0
[  164.914372][ T9145]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  164.916787][ T9145]        ocfs2_truncate_file+0xda0/0x1420
[  164.918975][ T9145]        ocfs2_setattr+0x1520/0x1b40
[  164.920901][ T9145]        notify_change+0xb36/0xe40
[  164.922803][ T9145]        do_truncate+0x1a4/0x220
[  164.924670][ T9145]        path_openat+0x306c/0x3830
[  164.926623][ T9145]        do_filp_open+0x1fa/0x410
[  164.928513][ T9145]        do_sys_openat2+0x121/0x1c0
[  164.930454][ T9145]        __x64_sys_open+0x11e/0x150
[  164.932412][ T9145]        do_syscall_64+0xfa/0x3b0
[  164.934416][ T9145]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.936855][ T9145] 
[  164.936855][ T9145] other info that might help us debug this:
[  164.936855][ T9145] 
[  164.940563][ T9145] Chain exists of:
[  164.940563][ T9145]   &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem
[  164.940563][ T9145] 
[  164.945336][ T9145]  Possible unsafe locking scenario:
[  164.945336][ T9145] 
[  164.948098][ T9145]        CPU0                    CPU1
[  164.950238][ T9145]        ----                    ----
[  164.952261][ T9145]   lock(&oi->ip_xattr_sem);
[  164.953993][ T9145]                                lock(jbd2_handle);
[  164.956449][ T9145]                                lock(&oi->ip_xattr_sem);
[  164.959071][ T9145]   lock(&oi->ip_alloc_sem);
[  164.960819][ T9145] 
[  164.960819][ T9145]  *** DEADLOCK ***
[  164.960819][ T9145] 
[  164.963808][ T9145] 3 locks held by syz.6.1017/9145:
[  164.965834][ T9145]  #0: ffff888105c6a428 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  164.969238][ T9145]  #1: ffff8881268f89c0 (&sb->s_type->i_mutex_key#34){+.+.}-{4:4}, at: do_truncate+0x171/0x220
[  164.973016][ T9145]  #2: ffff8881268f86f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  164.977059][ T9145] 
[  164.977059][ T9145] stack backtrace:
[  164.979202][ T9145] CPU: 1 UID: 0 PID: 9145 Comm: syz.6.1017 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  164.979237][ T9145] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.979244][ T9145] Call Trace:
[  164.979251][ T9145]  <TASK>
[  164.979256][ T9145]  dump_stack_lvl+0x189/0x250
[  164.979272][ T9145]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.979284][ T9145]  ? __pfx__printk+0x10/0x10
[  164.979299][ T9145]  ? print_lock_name+0xde/0x100
[  164.979312][ T9145]  print_circular_bug+0x2ee/0x310
[  164.979325][ T9145]  check_noncircular+0x134/0x160
[  164.979337][ T9145]  validate_chain+0xb9b/0x2140
[  164.979354][ T9145]  __lock_acquire+0xab9/0xd20
[  164.979370][ T9145]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  164.979380][ T9145]  lock_acquire+0x120/0x360
[  164.979394][ T9145]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  164.979408][ T9145]  down_write+0x96/0x1f0
[  164.979417][ T9145]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  164.979427][ T9145]  ? __pfx_down_write+0x10/0x10
[  164.979441][ T9145]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[  164.979452][ T9145]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  164.979462][ T9145]  ? up_write+0x1c4/0x420
[  164.979472][ T9145]  ocfs2_truncate_file+0xda0/0x1420
[  164.979487][ T9145]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  164.979501][ T9145]  ? do_raw_spin_unlock+0x4d/0x240
[  164.979513][ T9145]  ? _raw_spin_unlock+0x28/0x50
[  164.979524][ T9145]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  164.979537][ T9145]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  164.979547][ T9145]  ? ocfs2_rw_lock+0x13a/0x240
[  164.979556][ T9145]  ? __pfx___dquot_initialize+0x10/0x10
[  164.979566][ T9145]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[  164.979575][ T9145]  ? setattr_prepare+0x1e7/0xac0
[  164.979587][ T9145]  ? inode_newsize_ok+0x11b/0x1c0
[  164.979598][ T9145]  ocfs2_setattr+0x1520/0x1b40
[  164.979612][ T9145]  ? __pfx_ocfs2_setattr+0x10/0x10
[  164.979624][ T9145]  ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0
[  164.979636][ T9145]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  164.979649][ T9145]  ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0
[  164.979661][ T9145]  ? current_time+0x222/0x370
[  164.979669][ T9145]  ? evm_inode_setattr+0x1b6/0x7d0
[  164.979679][ T9145]  ? __pfx_current_time+0x10/0x10
[  164.979689][ T9145]  ? try_break_deleg+0x79/0x130
[  164.979698][ T9145]  ? __pfx_ocfs2_setattr+0x10/0x10
[  164.979711][ T9145]  notify_change+0xb36/0xe40
[  164.979723][ T9145]  do_truncate+0x1a4/0x220
[  164.979735][ T9145]  ? __pfx_do_truncate+0x10/0x10
[  164.979745][ T9145]  ? apparmor_file_truncate+0x23e/0x2d0
[  164.979760][ T9145]  path_openat+0x306c/0x3830
[  164.979770][ T9145]  ? arch_stack_walk+0xfc/0x150
[  164.979783][ T9145]  ? stack_depot_save_flags+0x40/0x860
[  164.979797][ T9145]  ? __pfx_path_openat+0x10/0x10
[  164.979806][ T9145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.979818][ T9145]  do_filp_open+0x1fa/0x410
[  164.979828][ T9145]  ? __lock_acquire+0xab9/0xd20
[  164.979840][ T9145]  ? __pfx_do_filp_open+0x10/0x10
[  164.979854][ T9145]  ? _raw_spin_unlock+0x28/0x50
[  164.979863][ T9145]  ? alloc_fd+0x64c/0x6c0
[  164.979876][ T9145]  do_sys_openat2+0x121/0x1c0
[  164.979885][ T9145]  ? __se_sys_futex+0x36f/0x400
[  164.979896][ T9145]  ? __pfx_do_sys_openat2+0x10/0x10
[  164.979906][ T9145]  ? rcu_is_watching+0x15/0xb0
[  164.979915][ T9145]  __x64_sys_open+0x11e/0x150
[  164.979925][ T9145]  do_syscall_64+0xfa/0x3b0
[  164.979936][ T9145]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.979947][ T9145]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.979955][ T9145]  ? exc_page_fault+0x9f/0xf0
[  164.979966][ T9145]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.979974][ T9145] RIP: 0033:0x7f81fab8ebe9
[  164.979984][ T9145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.979992][ T9145] RSP: 002b:00007f81f8df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  164.980002][ T9145] RAX: ffffffffffffffda RBX: 00007f81fadb5fa0 RCX: 00007f81fab8ebe9
[  164.980008][ T9145] RDX: 0000000000000020 RSI: 000000000014927e RDI: 00002000000001c0
[  164.980014][ T9145] RBP: 00007f81fac11e19 R08: 0000000000000000 R09: 0000000000000000
[  164.980019][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.980024][ T9145] R13: 00007f81fadb6038 R14: 00007f81fadb5fa0 R15: 00007ffe0530b438
[  164.980033][ T9145]  </TASK>
[  165.146345][ T9147] loop5: detected capacity change from 0 to 32768
[  165.151831][ T9147] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1018 (9147)
[  165.163309][ T9147] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  165.167648][ T9147] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  165.171347][ T9147] BTRFS info (device loop5): using free-space-tree
[  165.201909][ T8586] ocfs2: Unmounting device (7,6) on (node local)
[  165.265879][ T7865] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6

VM DIAGNOSIS:
21:47:38  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff82007392 RBX=0000000000000000 RCX=0000000000080000 RDX=ffffc90028401000
RSI=000000000007ffff RDI=0000000000080000 RBP=ffff888030f03c78 RSP=ffffc90002c2f9e0
R8 =ffff888022b31cc0 R9 =0000000000000003 R10=0000000000000406 R11=0000000000000002
R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000010 R15=0000000000000003
RIP=ffffffff820073ea RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f32c67d66c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f32bc5ff000 CR3=0000000032930000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f32c5a12ee7 XMM09=0000000000000000 00007f32c5a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000023dc RDI=00000000000023dd RBP=00000000000003f8 RSP=ffffc90003b1e850
R8 =ffff8880205b8237 R9 =1ffff110040b7046 R10=dffffc0000000000 R11=ffffffff854eff30
R12=dffffc0000000000 R13=ffffffff99af9909 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f81f8df66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2d523ffc CR3=0000000110528000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=00ff0000ff000000 0000ff0000000000
XMM04=6c4e95aa00588d6b 9fa8002c30303030 XMM05=8800167cceb42f46 08ce2129d5dc3587
XMM06=1632e46798d2777b d1f432c33a445132 XMM07=ffeb322ec932a059 fbe96359bc6d9110
XMM08=0000000000000000 0000000000000003 XMM09=0000000000000000 00007f81fac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
