last executing test programs:

3m10.89745552s ago: executing program 0 (id=601):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e)

3m10.897243812s ago: executing program 0 (id=602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0xd, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000080}, 0x40000)

3m10.798102065s ago: executing program 0 (id=603):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendto$netrom(r0, 0x0, 0x2, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)

3m10.557264819s ago: executing program 0 (id=608):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x80a, &(0x7f0000000280)=ANY=[@ANYBLOB='iocharset=cp855,keep_last_dots,zero_size_dir,sys_tz,utf8,discard,fmask=00000000000000000000005,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x1533, &(0x7f0000001940)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
truncate(&(0x7f00000000c0)='./file1\x00', 0x6e3)

3m10.26259633s ago: executing program 0 (id=610):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r1, 0x8b22, &(0x7f0000000040))

3m9.792739329s ago: executing program 0 (id=613):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040), 0xe09)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)

3m9.642476271s ago: executing program 32 (id=613):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040), 0xe09)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)

2m56.595699049s ago: executing program 1 (id=733):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128028000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)

2m56.407885722s ago: executing program 1 (id=735):
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='source', &(0x7f00000001c0)='%(,:', 0x0)

2m56.407655965s ago: executing program 1 (id=736):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x1, 0x1, 0x87f9, 0xfffffffffffffff6})

2m56.341298803s ago: executing program 1 (id=738):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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")
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2m56.252205629s ago: executing program 1 (id=740):
keyctl$reject(0x14, 0x0, 0xfffeffffffffff18, 0x1, 0x0)

2m55.867858049s ago: executing program 1 (id=741):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)

2m55.746451981s ago: executing program 33 (id=741):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)

1m46.055322726s ago: executing program 2 (id=1475):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c0000000000000014"], 0x40}], 0x1}, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
socket(0x10, 0x803, 0x0)
splice(r0, 0x0, r2, 0x0, 0x8001, 0xd)

1m44.450136797s ago: executing program 2 (id=1478):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0x5e, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m44.320909798s ago: executing program 2 (id=1482):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1m43.359846579s ago: executing program 2 (id=1488):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8a}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f00000000c0)={{}, {0x1, 0x6}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x24, 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)

1m43.275369237s ago: executing program 2 (id=1489):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003640)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000020a010400000000000000000a0000053c000000090a010400000000000000000a0000060900010073797a3100000000080005400000001d0900020073797a310000000008000a"], 0x2ccc}, 0x1, 0x0, 0x0, 0x20048881}, 0x40)

1m41.296657576s ago: executing program 2 (id=1501):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x60, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0x0, @in=@broadcast, 0x800000, 0x3, 0x0, 0x4b}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0x6c}, 0x0, @in6=@remote, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x4, 0x0, 0xfc, 0x1}]}]}, 0x23c}}, 0x20004040)

1m41.234925283s ago: executing program 34 (id=1501):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x60, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0x0, @in=@broadcast, 0x800000, 0x3, 0x0, 0x4b}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0x6c}, 0x0, @in6=@remote, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x4, 0x0, 0xfc, 0x1}]}]}, 0x23c}}, 0x20004040)

5.272790207s ago: executing program 3 (id=2535):
unshare(0x2040400)
socket$inet6(0xa, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4)

5.183936159s ago: executing program 3 (id=2536):
unshare(0x20020400)
r0 = mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x80r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x0, 0x0)
mq_getsetattr(r0, 0x0, &(0x7f0000000200))

5.183726176s ago: executing program 3 (id=2537):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

4.997190687s ago: executing program 3 (id=2540):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff028}, {0x6, 0x10, 0x0, 0xfffffff7}]}, 0x10)

4.871324061s ago: executing program 3 (id=2542):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xd33638f234726102, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

4.243131127s ago: executing program 5 (id=2556):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000001240)=""/4092, &(0x7f0000000240)=0xffc)

4.057313296s ago: executing program 5 (id=2557):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$eJzs3c9rHFUcAPDvbHbbpK02BSnoQQI9WKndtIk/KnioR9FiQe91SaahZNMt2U1pYsH2oBcvUgQRC+If4N1j8R/wryhooUgJevASmWQ22Ta7m1/bZHU/H5j2vZnZefPmzXv5vp1dNoCBNZb9U4h4OSK+SSKOt2wrRr5xbG2/5Se3p7IliZWVT/5MIsnXNfdP8v+PNjPFiF+/jDhT2FxufXFptlKtpvN5frwxd2O8vrh09tpcZSadSa9PTE5eeGty4t133u5ZXV+//Pf3Hz/44MLXp5a/+/nRiXtJXIxj+bbWeuzBndbMWIzl16QUF5/Z8XwPCusnyUGfALsylPfzUmRjwPEYyns98P/3RUSsAANpJBL9HwZUMw5ozu035sHDBxiV7J/H769NgDbXv7j23kgMr86NjiwnT82MsvnuaA/Kz8r45Y/797Ilevc+BMCW7tyNiHPF4ubxL8nHv907t419ni3D+Af750EW/7zRLv4prMc/0Sb+Odqm7+7G1v2/8KgHxXSUxX/vtY1/1x9ajQ7luRciRkajlFy9Vk2zse3FiDgdpcNZvtvznAvLD1c6bWuN/7IlK78ZC+bn8ah4+OnXTFcalb3UudXjuxGvtI1/k/X2T9q0f3Y9Lm+zjJPp/Vc7bdu6/s/Xyk8Rr7Vt/40nWkn355Pjq/fDePOu2Oyvr07+1qn8g65/1v5Hutd/NGl9XlvfeRk/Dv+Tdtq22/v/UPLpavpQvu5WpdGYPx9xKPlo8/qJjdc28839s/qfPtV9/Gt3/49ExGfbrH+3mXQ/tP/0jtp/54mHH37+Q6fy8/qXomv7v7maOp2v2c74t90T3Mu1AwAAAAAAgH5TiIhjkRTK6+lCoVxe+3zHS3GkUK3VG2eu1hauT8fqd2VHo1RoPuk+vpZPmp9/GG3JTzyTn4yIExHx7dDIar48VatOH3TlAQAAAAAAAAAAAAAAAAAAoE8c7fD9/8zvQwd9dsBz5ye/YXBt2f978UtPQF/a7d//+R6fB7D/xP8wuPR/GFz6Pwwu/R8Gl/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBPXb50KVtWlp/cnsry0zcXF2ZrN89Op/XZ8tzCVHmqNn+jPFOrzVTT8lRtbqvjVWu1G+cnYuHWeCOtN8bri0tX5moL1xtXrs1VZtIraWlfagUAAAAAAAAAAAAAAAAAAAD/LfXFpdlKtZrOS/RzYvg5HfnO3o9T7IfrI7HjRBLd9znokQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANvwbAAD//+f9MzI=")
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)=ANY=[])
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

3.950191467s ago: executing program 3 (id=2558):
futex(&(0x7f000000cffc), 0x80000000000b, 0x2, 0x0, &(0x7f0000048000)=0x2800100, 0x2)

3.562659244s ago: executing program 4 (id=2559):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00098008000f008848"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

3.56251208s ago: executing program 4 (id=2560):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1200000078000106000000000000000007"], 0x18}], 0x1}, 0x0)

3.474197776s ago: executing program 4 (id=2561):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r2, 0x8}, &(0x7f0000000340)=0x8)

2.556228862s ago: executing program 4 (id=2562):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000480)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}}, 0x0)

2.556034436s ago: executing program 4 (id=2563):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@struct={0x6, 0x0, 0x0, 0xf, 0x0, 0x10005}]}, {0x0, [0x2e, 0x0, 0x0, 0x0, 0x0, 0xe7b8d9c5b5d01a1f]}}, 0x0, 0x2c, 0x0, 0x6}, 0x28)

2.492813833s ago: executing program 4 (id=2564):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
setpriority(0x2, 0x0, 0x5)
r3 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x7, "96ab3f272339cf3935a8824943478cb18a5722d2da3a03f39b5eaee25558f362e7"}})
r4 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000180)='gid=1\x00\x1c\x00\x00\x00m\xbe\xd7\xa9:\n\xf9\b\rk[\xa1\xcc\xd6\xa28|5}(\x06l\xa8\x86di\xf3vJ,S.\xc3\x9b\xaaNj0\xef\x810EZ\xb6\x16\x88AZg`\xee\xe2\x93r\xd7\xa3v\x1f\xdb\x04\xd1\xe0\xabR \xeb\x80\r\x1b\x17\x0e\r\x93<T\xea\xab\x19\xed\xfd\x8c-\xd4\x10\xb8\xfc\xf7F\a\x00\x00\x00W\x02\xa2\x1ed\x1fe\xd4\xec\xe8\v(\rn\x82\xa6W\x1a\xa8\xbd\x1a\x88\x8b\xa2?\x9c\x00\x00\x00\x00\x00\x00\x00\x9c\x83\xbd\xd7|\x10\x9c\xdf~\xcc\xd3\xad\x16\xd1Y\xcf\x01`\xd5\x0152\xa8E\xac\a\xd6a>K\xe6\xc3BFz\xba\x7f\xc0\x1e@\xe4\xd0\xea\x16\xaa-aR)\\\x16\x8b^>\xbf\x06p\xc8\x9b\xf0N:\x05F\xe7fJ\x9a8\xa4\xb0FA\x9a\xe9E\xf9GJaGTf\x0f\xec\xff\x00\xb4\x97\x86\xd1&\a\xb554\x86\xd7\xbdeY\xa6\x91\r@<q\x85\xf9\x8b\xe4I\xdf\r\xdd\x9f3)\xfc\x04c\xb2\xd1\xcb\x1a\xaeG\xeb/\x90\x873,\x0f\xe5\x0e\xcd\tI^^\xf5q\x9d`\x8b\xad\xd3\t<K,\x9a')
prlimit64(0x0, 0x1, &(0x7f0000000100)={0x4, 0x7}, &(0x7f0000000140))

1.969752985s ago: executing program 5 (id=2565):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x8}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c)

1.017752189s ago: executing program 5 (id=2566):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x4}, &(0x7f0000000080)=0x8)

1.017458174s ago: executing program 5 (id=2567):
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x24064044)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x10, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]})
r3 = socket$l2tp6(0xa, 0x2, 0x73)
connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a)

0s ago: executing program 5 (id=2568):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

kernel console output (not intermixed with test programs):

[ T5997] gspca_sunplus: reg_r err -71
[  201.731781][ T5997] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  201.735713][ T5997] usb 3-1: USB disconnect, device number 13
[  201.914572][ T9533] loop3: detected capacity change from 0 to 32768
[  201.923376][ T9533] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: OCFS2_VALID_FL not set
[  201.931598][ T9533] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  201.935801][ T9533] OCFS2: File system is now read-only.
[  201.940648][ T9533] (syz.3.1424,9533,0):ocfs2_read_locked_inode:597 ERROR: status = -30
[  201.944727][ T9533] (syz.3.1424,9533,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  201.950476][ T9533] (syz.3.1424,9533,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  201.954430][ T9533] (syz.3.1424,9533,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  201.954453][ T9533] (syz.3.1424,9533,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  201.963552][ T9533] (syz.3.1424,9533,0):ocfs2_initialize_super:2198 ERROR: status = -30
[  201.967735][ T9533] (syz.3.1424,9533,0):ocfs2_fill_super:1177 ERROR: status = -30
[  202.418976][ T9568] loop3: detected capacity change from 0 to 512
[  202.423102][ T9568] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  202.438667][ T9568] EXT4-fs (loop3): 1 truncate cleaned up
[  202.442239][ T9568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.474069][ T7318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.532943][ T9572] loop3: detected capacity change from 0 to 1024
[  202.539281][ T9572] EXT4-fs: Ignoring removed oldalloc option
[  202.544326][ T9572] EXT4-fs: Ignoring removed bh option
[  202.562574][ T9572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.592016][ T7318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.676526][ T9578] netlink: 'syz.2.1444': attribute type 21 has an invalid length.
[  202.682559][ T9578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1444'.
[  202.754201][ T9582] loop2: detected capacity change from 0 to 512
[  202.761635][ T9582] EXT4-fs: Ignoring removed bh option
[  202.769531][ T9582] EXT4-fs: Ignoring removed mblk_io_submit option
[  202.790394][ T9582] EXT4-fs (loop2): Test dummy encryption mode enabled
[  202.799769][ T9582] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.1446: inode #13: comm syz.2.1446: iget: illegal inode #
[  202.810966][ T9582] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1446: couldn't read orphan inode 13 (err -117)
[  202.820276][ T9582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.852826][ T9582] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.1446: resize_inode disabled but reserved GDT blocks non-zero
[  202.892434][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.074444][ T9581] loop3: detected capacity change from 0 to 32768
[  203.129628][ T9581] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  203.417858][ T7318] ocfs2: Unmounting device (7,3) on (node local)
[  204.213595][   T33] audit: type=1326 audit(1759350601.269:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74eab8ec29 code=0x7ffc0000
[  204.249071][   T33] audit: type=1326 audit(1759350601.289:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74eab8ec29 code=0x7ffc0000
[  204.291038][   T33] audit: type=1326 audit(1759350601.289:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1456" exe="/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f74eab8ec29 code=0x7ffc0000
[  204.340932][   T33] audit: type=1326 audit(1759350601.299:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74eab8ec29 code=0x7ffc0000
[  204.386231][   T33] audit: type=1326 audit(1759350601.299:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1456" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74eab8ec29 code=0x7ffc0000
[  204.631004][ T9616] loop2: detected capacity change from 0 to 32768
[  204.691234][ T9616] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  204.764636][ T9616] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  204.908013][ T9644] tipc: MTU too low for tipc bearer
[  205.097018][ T9652] loop4: detected capacity change from 0 to 1024
[  205.237413][ T9652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  205.255623][ T9652] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.568239][ T7704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  205.786288][ T5943] ocfs2: Unmounting device (7,2) on (node local)
[  205.985505][ T9661] overlay: Unknown parameter 'euid'
[  206.040837][ T9662] overlayfs: failed to resolve './file1': -2
[  206.685305][ T5997] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  206.858982][ T5997] usb 4-1: Using ep0 maxpacket: 32
[  206.881884][ T5997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  206.917853][ T5997] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  206.974953][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  207.070508][ T5997] usb 4-1: Product: syz
[  207.072353][ T5997] usb 4-1: Manufacturer: syz
[  207.074360][ T5997] usb 4-1: SerialNumber: syz
[  207.096123][ T5997] usb 4-1: config 0 descriptor??
[  207.340987][ T5848] usb 4-1: USB disconnect, device number 10
[  208.620309][ T5848] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  208.780892][ T5848] usb 5-1: Using ep0 maxpacket: 8
[  208.788175][ T5848] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  208.792294][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.795589][ T5848] usb 5-1: Product: syz
[  208.797350][ T5848] usb 5-1: Manufacturer: syz
[  208.799270][ T5848] usb 5-1: SerialNumber: syz
[  208.804235][ T5848] usb 5-1: config 0 descriptor??
[  208.808279][ T5848] gspca_main: sq930x-2.14.0 probing 2770:930c
[  209.084245][ T9708] loop2: detected capacity change from 0 to 512
[  209.091717][ T9708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  209.127057][ T9708] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1488: invalid indirect mapped block 4294967295 (level 1)
[  209.137560][ T9708] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1488: invalid indirect mapped block 4294967295 (level 1)
[  209.145284][ T9708] EXT4-fs (loop2): 2 truncates cleaned up
[  209.151098][ T9708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.946219][ T9710] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  210.164454][ T9724] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  210.245234][ T5848] gspca_sq930x: reg_w 0105 0c00 failed -71
[  210.313843][   T33] audit: type=1107 audit(1759350606.986:101): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3'
[  210.491158][ T5848] gspca_sq930x: Sensor ov9630 not yet treated
[  210.493780][ T5848] sq930x 5-1:0.0: probe with driver sq930x failed with error -22
[  210.503774][ T5848] usb 5-1: USB disconnect, device number 7
[  210.872884][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.982402][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.070540][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.098926][ T5943] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.171756][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  211.442933][   T13] bridge_slave_1: left allmulticast mode
[  211.445360][   T13] bridge_slave_1: left promiscuous mode
[  211.447913][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.483520][   T13] bridge_slave_0: left allmulticast mode
[  211.488817][   T13] bridge_slave_0: left promiscuous mode
[  211.491292][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.794038][   T57] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  211.813689][   T57] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  211.820884][   T57] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  211.825682][   T57] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  211.835661][   T57] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  211.853414][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  211.856523][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  211.861111][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  211.866046][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  211.868785][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  211.912310][ T9761] loop3: detected capacity change from 0 to 764
[  211.935973][ T9761] rock: directory entry would overflow storage
[  211.938523][ T9761] rock: sig=0x4654, size=5, remaining=4
[  212.033097][   T13] dvmrp1 (unregistering): left allmulticast mode
[  212.173869][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.178377][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.186162][   T13] bond0 (unregistering): Released all slaves
[  212.197201][   T13] bond1 (unregistering): Released all slaves
[  212.212484][ T5983] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  212.215610][ T9753] gtp0: entered promiscuous mode
[  212.217628][ T9753] gtp0: entered allmulticast mode
[  212.294219][ T9756] lo speed is unknown, defaulting to 1000
[  212.323778][   T13] tipc: Left network mode
[  212.414429][ T5983] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  212.424477][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.436100][ T5983] usb 4-1: config 0 descriptor??
[  212.470218][ T5983] cp210x 4-1:0.0: cp210x converter detected
[  212.632504][ T9756] chnl_net:caif_netlink_parms(): no params data found
[  212.891577][   T13] hsr_slave_0: left promiscuous mode
[  212.916282][   T13] hsr_slave_1: left promiscuous mode
[  212.919501][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.922346][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.926045][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.931832][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.945499][ T5983] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  212.971867][ T5983] usb 4-1: cp210x converter now attached to ttyUSB0
[  212.985294][   T13] veth1_macvtap: left promiscuous mode
[  212.987589][   T13] veth0_macvtap: left promiscuous mode
[  212.989986][   T13] veth1_vlan: left promiscuous mode
[  212.992275][   T13] veth0_vlan: left promiscuous mode
[  213.063472][ T9783] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  213.177893][ T5984] usb 4-1: USB disconnect, device number 11
[  213.202411][ T5984] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  213.274932][ T5984] cp210x 4-1:0.0: device disconnected
[  213.608503][   T13] team0 (unregistering): Port device team_slave_1 removed
[  213.643551][   T13] team0 (unregistering): Port device team_slave_0 removed
[  214.144598][ T5236] Bluetooth: hci2: command tx timeout
[  214.390902][   T10] lo speed is unknown, defaulting to 1000
[  214.398929][   T10] infiniband syz2: ib_query_port failed (-19)
[  214.430300][ T9756] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.437931][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.445015][ T9756] bridge_slave_0: entered allmulticast mode
[  214.462330][ T9756] bridge_slave_0: entered promiscuous mode
[  214.476226][ T9756] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.481606][ T9756] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.485059][ T9756] bridge_slave_1: entered allmulticast mode
[  214.489205][ T9756] bridge_slave_1: entered promiscuous mode
[  214.579721][ T9756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.601716][ T9756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.697401][ T9756] team0: Port device team_slave_0 added
[  214.701431][ T9756] team0: Port device team_slave_1 added
[  214.729088][ T9756] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.731504][ T9756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  214.741712][ T9756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.764746][ T9756] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.774381][ T9756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  214.785716][ T9756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  214.856850][ T9756] hsr_slave_0: entered promiscuous mode
[  214.859298][ T9756] hsr_slave_1: entered promiscuous mode
[  214.862106][ T9756] debugfs: 'hsr0' already exists in 'hsr'
[  214.865486][ T9756] Cannot create hsr debugfs directory
[  214.868123][ T9819] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  214.896471][   T13] IPVS: stop unused estimator thread 0...
[  214.920625][ T9822] vlan2: entered promiscuous mode
[  214.922263][ T9822] bond0: entered promiscuous mode
[  214.923986][ T9822] bond_slave_0: entered promiscuous mode
[  214.926119][ T9822] bond_slave_1: entered promiscuous mode
[  215.056202][ T9756] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  215.068819][ T9756] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  215.075491][ T9756] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  215.082268][ T9756] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  215.099515][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  215.119406][ T9756] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.122623][ T9756] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.190560][ T9756] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.209212][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.229382][ T9756] 8021q: adding VLAN 0 to HW filter on device team0
[  215.257734][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.260758][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.269945][   T10] usb 4-1: Using ep0 maxpacket: 16
[  215.274502][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.274527][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  215.277625][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.287917][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  215.307749][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.323857][   T10] usb 4-1: config 0 descriptor??
[  215.405148][ T9850] bridge2: entered promiscuous mode
[  215.407480][ T9850] bridge2: entered allmulticast mode
[  215.487755][ T9756] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.692075][ T9756] veth0_vlan: entered promiscuous mode
[  215.705077][ T9756] veth1_vlan: entered promiscuous mode
[  215.731237][ T9756] veth0_macvtap: entered promiscuous mode
[  215.737067][ T9756] veth1_macvtap: entered promiscuous mode
[  215.753743][ T9756] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.764315][ T9756] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.856046][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.861293][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.904793][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.908577][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.928864][ T5946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.938877][ T5946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.953018][   T10] lua 0003:1E7D:2C2E.0007: unbalanced collection at end of report description
[  215.962312][   T10] lua 0003:1E7D:2C2E.0007: parse failed
[  215.964177][   T10] lua 0003:1E7D:2C2E.0007: probe with driver lua failed with error -22
[  215.974703][ T5946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.978056][ T5946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.013859][   T10] usb 4-1: USB disconnect, device number 12
[  216.045795][ T9877] tmpfs: Bad value for 'nr_inodes'
[  216.681091][ T5236] Bluetooth: hci2: command tx timeout
[  217.246128][ T9887] kexec: Could not allocate control_code_buffer
[  217.322086][ T9890] bond2: entered promiscuous mode
[  217.329095][ T9890] bond2: entered allmulticast mode
[  217.331828][ T9890] 8021q: adding VLAN 0 to HW filter on device bond2
[  217.847972][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1550'.
[  218.011847][ T9920] loop5: detected capacity change from 0 to 2048
[  218.074712][ T9920]  loop5: p1 < > p4
[  218.074712][ T9920]  p4: <solaris: [s0] p5 [s1] p6 [s2] p7 >
[  218.081911][ T9920] loop5: p4 size 722688 extends beyond EOD, truncated
[  218.086472][ T9920] loop5: p6 start 262464109 is beyond EOD, truncated
[  218.088728][ T9920] loop5: p7 size 2304 extends beyond EOD, truncated
[  218.119963][ T5294]  loop5: p1 < > p4
[  218.119963][ T5294]  p4: <solaris: [s0] p5 [s1] p6 [s2] p7 >
[  218.126746][ T5294] loop5: p4 size 722688 extends beyond EOD, truncated
[  218.132090][ T5294] loop5: p6 start 262464109 is beyond EOD, truncated
[  218.136160][ T5294] loop5: p7 size 2304 extends beyond EOD, truncated
[  218.250656][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  218.259201][ T6667] udevd[6667]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  218.264110][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory
[  218.268163][ T5940] udevd[5940]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  218.840623][ T5236] Bluetooth: hci2: command tx timeout
[  218.860959][ T9952] loop4: detected capacity change from 0 to 32768
[  218.880420][ T9952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1568 (9952)
[  219.061620][ T9952] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.075476][ T9952] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  219.166568][ T9952] BTRFS info (device loop4): setting nodatasum
[  219.169267][ T9952] BTRFS info (device loop4): setting nodatacow
[  219.182810][ T9952] BTRFS info (device loop4): enabling free space tree
[  219.185940][ T9952] BTRFS info (device loop4): enabling auto defrag
[  219.188695][ T9952] BTRFS info (device loop4): max_inline set to 0
[  219.315249][ T7704] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.339727][ T9982] loop3: detected capacity change from 0 to 32768
[  219.586607][T10001] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  219.939551][T10019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1591'.
[  219.945070][T10019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1591'.
[  219.984005][T10021] loop3: detected capacity change from 0 to 256
[  219.998469][T10021] FAT-fs (loop3): Directory bread(block 64) failed
[  220.001316][T10021] FAT-fs (loop3): Directory bread(block 65) failed
[  220.004104][T10021] FAT-fs (loop3): Directory bread(block 66) failed
[  220.011891][T10021] FAT-fs (loop3): Directory bread(block 67) failed
[  220.014799][T10021] FAT-fs (loop3): Directory bread(block 68) failed
[  220.019298][T10021] FAT-fs (loop3): Directory bread(block 69) failed
[  220.022280][T10021] FAT-fs (loop3): Directory bread(block 70) failed
[  220.025199][T10021] FAT-fs (loop3): Directory bread(block 71) failed
[  220.028615][T10021] FAT-fs (loop3): Directory bread(block 72) failed
[  220.032100][T10021] FAT-fs (loop3): Directory bread(block 73) failed
[  220.921734][T10041] loop3: detected capacity change from 0 to 32768
[  220.995131][T10041] (syz.3.1602,10041,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb6731743. Applying ECC.
[  221.038170][T10041] (syz.3.1602,10041,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  221.071944][T10041] (syz.3.1602,10041,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  221.075201][ T5236] Bluetooth: hci2: command tx timeout
[  221.094311][T10041] (syz.3.1602,10041,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xa7efa3e4. Applying ECC.
[  221.226700][T10041] (syz.3.1602,10041,0):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device.
[  221.257180][T10041] (syz.3.1602,10041,0):ocfs2_fill_super:1177 ERROR: status = -22
[  221.485753][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'.
[  221.496191][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1609'.
[  221.593844][T10065] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1610'.
[  221.681290][T10069] loop5: detected capacity change from 0 to 1024
[  221.683960][T10069] EXT4-fs: Ignoring removed orlov option
[  221.702849][T10073] loop4: detected capacity change from 0 to 2048
[  221.767181][T10069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  221.773649][T10073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0600-000000000000 r/w without journal. Quota mode: none.
[  221.777465][T10069] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.782462][T10073] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.801436][T10073] EXT4-fs warning (device loop4): ext4_empty_dir:3099: inode #12: comm syz.4.1613: directory missing '..'
[  221.822329][ T7704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0600-000000000000.
[  221.841644][ T9756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  221.996450][T10092] ieee802154 phy0 wpan0: encryption failed: -22
[  222.272976][T10103] loop3: detected capacity change from 0 to 8
[  222.333993][T10101] block device autoloading is deprecated and will be removed.
[  222.346889][T10103] Page size > filesystem block size (0).  This is currently not supported!
[  222.540144][T10110] loop5: detected capacity change from 0 to 8
[  222.545963][T10110] squashfs: Unknown parameter 'smackfsroot'
[  222.806800][   T93] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  223.606681][T10129] binder: 10128:10129 ioctl 40046210 0 returned -14
[  223.716804][   T93] usb 5-1: not running at top speed; connect to a high speed hub
[  223.721407][   T93] usb 5-1: config 1 has an invalid descriptor of length 66, skipping remainder of the config
[  223.725869][   T93] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  223.729649][   T93] usb 5-1: config 1 has no interface number 1
[  223.732140][   T93] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  223.739241][   T93] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 29, changing to 4
[  223.745800][   T93] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.750001][   T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.753132][   T93] usb 5-1: Product: syz
[  223.756192][   T93] usb 5-1: Manufacturer: syz
[  223.758432][   T93] usb 5-1: SerialNumber: syz
[  223.947906][T10131] loop3: detected capacity change from 0 to 32768
[  223.957112][T10131] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1634 (10131)
[  223.981895][T10131] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  224.003023][T10131] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  224.009675][   T93] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  224.013131][   T93] usb 5-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  224.078386][   T93] usb 5-1: USB disconnect, device number 8
[  224.148658][T10131] BTRFS info (device loop3): enabling ssd optimizations
[  224.163090][T10131] BTRFS info (device loop3): enabling free space tree
[  224.169741][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  224.245309][ T7318] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  224.774590][T10174] loop4: detected capacity change from 0 to 4096
[  224.800089][T10174] EXT4-fs: Ignoring removed bh option
[  224.812872][T10174] EXT4-fs (loop4): Test dummy encryption mode enabled
[  224.821703][T10174] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  224.825149][T10174] System zones: 0-5
[  224.832733][T10174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.162958][ T7704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.239669][T10182] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1647'.
[  226.097614][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1658'.
[  226.721639][T10250] loop4: detected capacity change from 0 to 8
[  226.747812][T10250] squashfs image failed sanity check
[  227.043051][T10263] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1680'.
[  227.304891][T10270] overlayfs: failed to resolve './file0': -2
[  227.503417][T10246] loop3: detected capacity change from 0 to 40427
[  227.507663][T10246] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (0, 24)
[  227.513028][T10246] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  227.516564][T10246] F2FS-fs (loop3): build fault injection rate: 6
[  227.519240][T10246] F2FS-fs (loop3): build fault injection type: 0x0
[  227.525894][T10246] F2FS-fs (loop3): invalid crc value
[  227.586358][T10246] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  227.591597][T10246] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  227.598915][T10246] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  228.160188][T10305] loop4: detected capacity change from 0 to 16
[  228.164061][T10305] erofs (device loop4): mounted with root inode @ nid 36.
[  228.474786][T10309] loop4: detected capacity change from 0 to 32768
[  228.479092][T10309] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1694 (10309)
[  228.491949][T10309] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  228.496586][T10309] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  228.547779][T10309] BTRFS info (device loop4): rebuilding free space tree
[  228.607215][T10309] BTRFS info (device loop4): enabling ssd optimizations
[  228.612495][T10309] BTRFS info (device loop4): using spread ssd allocation scheme
[  228.615921][T10309] BTRFS info (device loop4): enabling free space tree
[  228.618844][T10309] BTRFS info (device loop4): force clearing of disk cache
[  228.651968][ T7704] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  229.157117][ T5997] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  229.329823][ T5997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.336840][ T5997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.342604][ T5997] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  229.346393][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.353268][ T5997] usb 5-1: config 0 descriptor??
[  229.651932][T10361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1709'.
[  229.743574][T10365] loop3: detected capacity change from 0 to 512
[  229.752811][T10365] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1711: corrupted in-inode xattr: invalid ea_ino
[  229.760119][T10365] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1711: couldn't read orphan inode 15 (err -117)
[  229.767248][T10365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.793717][ T7318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.802182][ T5997] samsung 0003:0419:0600.0008: unknown main item tag 0x3
[  229.825124][T10369] loop3: detected capacity change from 0 to 16
[  229.826134][ T5997] samsung 0003:0419:0600.0008: hidraw0: USB HID v0.80 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0
[  229.829097][T10369] erofs (device loop3): mounted with root inode @ nid 36.
[  229.841834][T10369] syz.3.1712: attempt to access beyond end of device
[  229.841834][T10369] loop3: rw=524288, sector=34359738360, nr_sectors = 64 limit=16
[  229.850014][T10369] syz.3.1712: attempt to access beyond end of device
[  229.850014][T10369] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  229.863543][T10369] erofs (device loop3): failed to readdir of logical block 0 of nid 36
[  229.873536][T10369] syz.3.1712: attempt to access beyond end of device
[  229.873536][T10369] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  229.881065][T10369] erofs (device loop3): failed to readdir of logical block 0 of nid 36
[  230.002522][T10372] loop3: detected capacity change from 0 to 512
[  230.020152][ T5848] usb 5-1: USB disconnect, device number 9
[  230.031456][T10372] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.048710][T10371] EXT4-fs (loop3): resizing filesystem from 256 to 1 blocks
[  230.052197][T10371] EXT4-fs warning (device loop3): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  230.083593][ T7318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.159138][T10378] veth0: entered promiscuous mode
[  230.161909][T10377] veth0: left promiscuous mode
[  230.625799][ T5848] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  230.712521][T10407] loop4: detected capacity change from 0 to 1024
[  230.716773][T10407] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  230.732179][T10407] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  230.741876][T10407] EXT4-fs error (device loop4): ext4_get_journal_inode:5808: inode #32: comm syz.4.1728: iget: special inode unallocated
[  230.750351][T10407] EXT4-fs (loop4): Remounting filesystem read-only
[  230.753184][T10407] EXT4-fs (loop4): no journal found
[  230.760574][T10407] EXT4-fs (loop4): can't get journal size
[  230.769516][T10407] EXT4-fs (loop4): filesystem is read-only
[  230.774923][T10407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  230.792668][ T5848] usb 4-1: Using ep0 maxpacket: 16
[  230.796760][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.803111][ T5848] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  230.807616][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.811028][ T5848] usb 4-1: Product: syz
[  230.812848][ T5848] usb 4-1: Manufacturer: syz
[  230.815215][ T5848] usb 4-1: SerialNumber: syz
[  230.825209][ T5848] usb 4-1: config 0 descriptor??
[  230.840518][ T5848] pegasus_notetaker 4-1:0.0: Invalid number of endpoints
[  230.843485][ T5848] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  230.852299][ T7704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.033808][T10413] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  231.044705][T10413] CIFS mount error: No usable UNC path provided in device string!
[  231.044705][T10413] 
[  231.050130][T10413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  231.067589][ T5997] usb 4-1: USB disconnect, device number 13
[  231.422454][T10429] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  231.865828][T10449] loop4: detected capacity change from 0 to 512
[  231.874884][T10449] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  231.877919][T10449] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1746: invalid indirect mapped block 2683928664 (level 1)
[  231.884917][T10449] EXT4-fs (loop4): Remounting filesystem read-only
[  231.887326][T10449] EXT4-fs (loop4): 1 truncate cleaned up
[  231.890657][T10449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.059711][T10452] loop3: detected capacity change from 0 to 8
[  232.127798][T10449] EXT4-fs (loop4): shut down requested (1)
[  232.162682][ T7704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.413687][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'.
[  232.418492][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1748'.
[  232.752521][T10471] loop5: detected capacity change from 0 to 128
[  232.915848][T10480] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  233.047421][T10491] 9pnet_fd: p9_fd_create_tcp (10491): problem connecting socket to 127.0.0.1
[  233.260119][T10499] loop3: detected capacity change from 0 to 256
[  233.277776][T10499] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  233.301705][   T33] audit: type=1326 audit(1759350628.482:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10502 comm="syz.5.1770" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1aff58ec29 code=0x0
[  234.348977][T10517] loop4: detected capacity change from 0 to 4096
[  234.474021][T10519] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.456007][T10534] loop4: detected capacity change from 0 to 2048
[  235.464775][T10534] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  235.468858][T10534] NILFS (loop4): mounting unchecked fs
[  235.511966][T10534] NILFS (loop4): recovery complete
[  235.524354][T10535] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.817497][ T5984] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  235.994181][ T5984] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  235.997649][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.010817][ T5984] usb 5-1: config 0 descriptor??
[  236.013243][ T5984] cp210x 5-1:0.0: cp210x converter detected
[  236.409844][T10550] overlayfs: failed to clone upperpath
[  236.662401][ T5984] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  236.665843][ T5984] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  236.689144][ T5984] usb 5-1: cp210x converter now attached to ttyUSB0
[  236.705646][ T5984] usb 5-1: USB disconnect, device number 10
[  236.728577][ T5984] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  236.733673][ T5984] cp210x 5-1:0.0: device disconnected
[  237.546835][T10558] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  237.847012][T10567] loop3: detected capacity change from 0 to 8
[  237.891625][T10567] SQUASHFS error: Failed to read block 0x33c: -5
[  237.894626][T10567] SQUASHFS error: Unable to read metadata cache entry [33a]
[  237.910707][T10567] SQUASHFS error: Unable to read inode 0xa7
[  238.036055][T10578] loop5: detected capacity change from 0 to 2048
[  238.045678][T10578] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  238.054621][T10578] NILFS (loop5): mounting unchecked fs
[  238.070551][T10153] udevd[10153]: incorrect nilfs2 checksum on /dev/loop5
[  238.088590][T10578] NILFS (loop5): recovery complete
[  238.095979][T10585] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.286811][ T5997] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  238.737911][ T5997] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  238.741845][ T5997] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184
[  238.745843][ T5997] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  238.750006][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.759516][ T5997] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  238.977230][ T5997] gspca_sn9c2028: read1 error -71
[  238.980448][ T5997] gspca_sn9c2028: read1 error -71
[  238.983429][ T5997] gspca_sn9c2028: read1 error -71
[  238.990893][ T5997] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -71
[  239.000032][ T5997] usb 5-1: USB disconnect, device number 11
[  239.048676][T10595] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  239.102561][T10597] input: syz0 as /devices/virtual/input/input9
[  239.787875][T10610] netlink: 'syz.3.1812': attribute type 25 has an invalid length.
[  239.791070][T10610] netlink: 'syz.3.1812': attribute type 7 has an invalid length.
[  239.999702][T10624] loop4: detected capacity change from 0 to 4096
[  240.003452][T10624] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  240.036673][T10624] ntfs3(loop4): ino=1d, mi_enum_attr
[  240.039398][T10624] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  240.051429][T10624] ntfs3(loop4): ino=1d, mi_enum_attr
[  240.055816][T10624] ntfs3(loop4): ino=1d, "file1" mi_enum_attr
[  240.290805][T10640] loop4: detected capacity change from 0 to 1024
[  240.336911][T10642] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  240.402728][T10646] loop5: detected capacity change from 0 to 512
[  240.418163][T10646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.422878][T10646] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  240.444476][T10646] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 7: comm syz.5.1829: lblock 12 mapped to illegal pblock 7 (length 22)
[  240.452981][T10646] EXT4-fs (loop5): Remounting filesystem read-only
[  240.479981][ T9756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.932060][T10688] netlink: 'syz.4.1846': attribute type 5 has an invalid length.
[  241.963741][T10689] loop3: detected capacity change from 0 to 2048
[  241.972281][T10689] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  242.064936][T10693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1849'.
[  242.319946][T10707] overlayfs: failed to clone upperpath
[  242.381725][T10705] tmpfs: Unknown parameter '01777777777777777777777'
[  242.452691][T10708] /dev/nullb0: Can't open blockdev
[  243.715605][T10719] loop3: detected capacity change from 0 to 64
[  243.775361][T10721] loop5: detected capacity change from 0 to 256
[  243.780561][   T33] audit: type=1800 audit(1759350638.285:103): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1859" name="file2" dev="loop3" ino=6 res=0 errno=0
[  245.370349][T10755] loop4: detected capacity change from 0 to 512
[  245.396631][T10755] EXT4-fs: Ignoring removed nobh option
[  245.397695][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  245.405587][T10755] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1875: iget: bad i_size value: 38620345925642
[  245.422723][T10755] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1875: couldn't read orphan inode 15 (err -117)
[  245.430696][T10755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.441824][T10755] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1875: bg 0: block 5: invalid block bitmap
[  245.456041][T10755] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28
[  245.463438][T10755] EXT4-fs (loop4): This should not happen!! Data will be lost
[  245.463438][T10755] 
[  245.467453][T10755] EXT4-fs (loop4): Total free blocks count 0
[  245.469982][T10755] EXT4-fs (loop4): Free/Dirty block details
[  245.472705][T10755] EXT4-fs (loop4): free_blocks=0
[  245.474895][T10755] EXT4-fs (loop4): dirty_blocks=16
[  245.477008][T10755] EXT4-fs (loop4): Block reservation details
[  245.482513][T10755] EXT4-fs (loop4): i_reserved_data_blocks=16
[  245.593223][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.602887][ T7704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.606572][   T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  245.618482][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.657705][   T10] usb 4-1: config 0 descriptor??
[  245.680086][   T33] audit: type=1326 audit(1759350640.062:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.4.1881" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb78058ec29 code=0x0
[  246.096863][   T10] cypress 0003:04B4:BCA1.0009: item fetching failed at offset 0/3
[  246.103565][   T10] cypress 0003:04B4:BCA1.0009: parse failed
[  246.106019][   T10] cypress 0003:04B4:BCA1.0009: probe with driver cypress failed with error -22
[  246.314175][ T5848] usb 4-1: USB disconnect, device number 14
[  247.233052][T10791] loop3: detected capacity change from 0 to 128
[  247.243088][T10791] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  247.252901][T10791] hpfs: filesystem error: improperly stopped
[  247.266959][T10791] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  247.270162][T10791] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  247.275067][T10791] hpfs: You really don't want any checks? You are crazy...
[  247.278757][T10791] hpfs: hpfs_map_sector(): read error
[  247.281031][T10791] hpfs: code page support is disabled
[  247.283358][T10791] hpfs: hpfs_map_4sectors(): unaligned read
[  247.286991][T10791] hpfs: hpfs_map_4sectors(): unaligned read
[  247.290132][T10791] hpfs: filesystem error: unable to find root dir
[  247.347588][T10795] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  247.351537][T10795] team0: Device ipvlan2 is already an upper device of the team interface
[  247.428072][T10801] loop3: detected capacity change from 0 to 128
[  247.478212][T10805] loop3: detected capacity change from 0 to 256
[  247.484894][T10803] sctp: [Deprecated]: syz.5.1895 (pid 10803) Use of int in maxseg socket option.
[  247.484894][T10803] Use struct sctp_assoc_value instead
[  247.497019][T10805] FAT-fs (loop3): Directory bread(block 64) failed
[  247.499272][T10805] FAT-fs (loop3): Directory bread(block 65) failed
[  247.501613][T10805] FAT-fs (loop3): Directory bread(block 66) failed
[  247.512408][T10805] FAT-fs (loop3): Directory bread(block 67) failed
[  247.515527][T10805] FAT-fs (loop3): Directory bread(block 68) failed
[  247.518189][T10805] FAT-fs (loop3): Directory bread(block 69) failed
[  247.520507][T10805] FAT-fs (loop3): Directory bread(block 70) failed
[  247.527448][T10805] FAT-fs (loop3): Directory bread(block 71) failed
[  247.529744][T10805] FAT-fs (loop3): Directory bread(block 72) failed
[  247.531892][T10805] FAT-fs (loop3): Directory bread(block 73) failed
[  248.579353][T10846] loop4: detected capacity change from 0 to 512
[  248.592790][T10846] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  248.626913][T10846] EXT4-fs (loop4): 1 truncate cleaned up
[  248.629511][T10846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.665634][ T7704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.692744][   T33] audit: type=1800 audit(1759350642.831:105): pid=10846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1914" name="file0" dev="loop4" ino=13 res=0 errno=0
[  248.735233][ T5848] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  248.896422][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.900114][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  248.906581][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10
[  248.910354][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  248.920671][ T5848] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  248.927351][ T5848] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  248.930451][ T5848] usb 4-1: Manufacturer: syz
[  248.945645][ T5848] usb 4-1: config 0 descriptor??
[  249.307968][ T5984] usb 4-1: USB disconnect, device number 15
[  249.978093][T10863] ptrace attach of "/syz-executor exec"[7318] was attempted by "\x22"[10863]
[  250.622716][T10879] loop5: detected capacity change from 0 to 40427
[  250.627300][T10879] F2FS-fs: heap/no_heap options were deprecated
[  250.635137][T10879] F2FS-fs (loop5): build fault injection rate: 14
[  250.637830][T10879] F2FS-fs (loop5): build fault injection type: 0x3bfe8b
[  250.648090][T10879] F2FS-fs (loop5): invalid crc value
[  250.652923][T10879] F2FS-fs (loop5): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4520/0x7170
[  250.657541][T10879] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12)
[  250.745331][ T5998] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  250.918343][ T5998] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  250.921532][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.924675][ T5998] usb 5-1: Product: syz
[  250.926438][ T5998] usb 5-1: Manufacturer: syz
[  250.927957][ T5998] usb 5-1: SerialNumber: syz
[  251.158311][T10271] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  251.393529][T10271] usb 6-1: Using ep0 maxpacket: 8
[  251.397655][T10271] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  251.401819][T10271] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  251.406374][T10271] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  251.410317][T10271] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  251.418205][T10271] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f
[  251.421396][T10271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.424311][T10271] usb 6-1: Product: syz
[  251.425853][T10271] usb 6-1: Manufacturer: syz
[  251.427848][T10271] usb 6-1: SerialNumber: syz
[  251.431393][T10271] usb 6-1: config 0 descriptor??
[  251.437912][T10271] kvaser_usb 6-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  251.523447][T10898] overlayfs: failed to resolve './file0': -2
[  251.613604][ T5998] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  251.629248][ T5998] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  251.693742][ T5998] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  251.739270][ T5998] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  251.789463][ T5998] usb 5-1: USB disconnect, device number 12
[  251.799598][T10271] usb 6-1: USB disconnect, device number 2
[  252.402995][T10907] IPv6: NLM_F_CREATE should be specified when creating new route
[  252.473259][T10912] trusted_key: syz.4.1941 sent an empty control message without MSG_MORE.
[  252.482280][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1944'.
[  252.490535][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1944'.
[  252.497998][T10914] loop3: detected capacity change from 0 to 4096
[  252.532771][T10914] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  252.555681][T10914] ntfs3(loop3): ino=0, "file0" The size of extended attributes must not exceed 64KiB
[  252.579918][T10920] netlink: 'syz.5.1946': attribute type 49 has an invalid length.
[  252.746762][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'.
[  252.824652][T10942] loop5: detected capacity change from 0 to 256
[  252.835583][T10942] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  252.845990][T10942] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  252.851667][T10942] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  252.856465][T10942] exFAT-fs (loop5): failed to load alloc-bitmap
[  252.858930][T10942] exFAT-fs (loop5): failed to recognize exfat type
[  253.014079][T10949] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  254.218571][T10958] loop4: detected capacity change from 0 to 40427
[  254.236774][T10958] F2FS-fs (loop4): invalid crc value
[  254.289423][T10958] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  254.292885][T10958] F2FS-fs (loop4): Start checkpoint disabled!
[  254.296893][T10958] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  254.302034][T10958] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  254.361190][ T1090] kworker/u10:4: attempt to access beyond end of device
[  254.361190][ T1090] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  254.366269][ T1090] CPU: 1 UID: 0 PID: 1090 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  254.366281][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.366287][ T1090] Workqueue: writeback wb_workfn (flush-7:4)
[  254.366304][ T1090] Call Trace:
[  254.366308][ T1090]  <TASK>
[  254.366312][ T1090]  dump_stack_lvl+0x189/0x250
[  254.366325][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.366333][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  254.366340][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  254.366350][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.366364][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  254.366375][ T1090]  f2fs_write_end_io+0x886/0xb60
[  254.366392][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  254.366403][ T1090]  __submit_merged_write_cond+0x255/0x530
[  254.366418][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  254.366442][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  254.366457][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  254.366488][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  254.366496][ T1090]  ? look_up_lock_class+0x74/0x170
[  254.366509][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  254.366518][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  254.366527][ T1090]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  254.366537][ T1090]  ? __lock_acquire+0xab9/0xd20
[  254.366550][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  254.366559][ T1090]  do_writepages+0x32e/0x550
[  254.366569][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[  254.366576][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[  254.366588][ T1090]  __writeback_single_inode+0x145/0xff0
[  254.366596][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  254.366607][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  254.366626][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  254.366653][ T1090]  ? rcu_is_watching+0x15/0xb0
[  254.366664][ T1090]  wb_writeback+0x43b/0xaf0
[  254.366676][ T1090]  ? queue_io+0x331/0x590
[  254.366686][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  254.366697][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.366708][ T1090]  wb_workfn+0x409/0xef0
[  254.366726][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  254.366741][ T1090]  ? __lock_acquire+0xab9/0xd20
[  254.366756][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  254.366769][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.366777][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  254.366787][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  254.366798][ T1090]  process_scheduled_works+0xae1/0x17b0
[  254.366823][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  254.366841][ T1090]  worker_thread+0x8a0/0xda0
[  254.366864][ T1090]  ? __kthread_parkme+0x7b/0x200
[  254.366883][ T1090]  kthread+0x711/0x8a0
[  254.366898][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  254.366916][ T1090]  ? __pfx_kthread+0x10/0x10
[  254.366930][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.366943][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.366956][ T1090]  ? __pfx_kthread+0x10/0x10
[  254.366971][ T1090]  ret_from_fork+0x4bc/0x870
[  254.367018][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  254.367033][ T1090]  ? __switch_to_asm+0x39/0x70
[  254.367042][ T1090]  ? __switch_to_asm+0x33/0x70
[  254.367050][ T1090]  ? __pfx_kthread+0x10/0x10
[  254.367059][ T1090]  ret_from_fork_asm+0x1a/0x30
[  254.367076][ T1090]  </TASK>
[  254.367079][ T1090] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  254.505056][ T1090] CPU: 1 UID: 0 PID: 1090 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  254.505075][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.505084][ T1090] Workqueue: writeback wb_workfn (flush-7:4)
[  254.505111][ T1090] Call Trace:
[  254.505116][ T1090]  <TASK>
[  254.505122][ T1090]  dump_stack_lvl+0x189/0x250
[  254.505142][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.505157][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  254.505168][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  254.505183][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.505207][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  254.505227][ T1090]  f2fs_write_end_io+0x886/0xb60
[  254.505257][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  254.505276][ T1090]  __submit_merged_write_cond+0x255/0x530
[  254.505303][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  254.505347][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  254.505373][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  254.505420][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  254.505435][ T1090]  ? look_up_lock_class+0x74/0x170
[  254.505458][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  254.505473][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  254.505491][ T1090]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  254.505507][ T1090]  ? __lock_acquire+0xab9/0xd20
[  254.505539][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  254.505555][ T1090]  do_writepages+0x32e/0x550
[  254.505572][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[  254.505584][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[  254.505605][ T1090]  __writeback_single_inode+0x145/0xff0
[  254.505619][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  254.505637][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  254.505673][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  254.505722][ T1090]  ? rcu_is_watching+0x15/0xb0
[  254.505742][ T1090]  wb_writeback+0x43b/0xaf0
[  254.505762][ T1090]  ? queue_io+0x331/0x590
[  254.505777][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  254.505798][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.505816][ T1090]  wb_workfn+0x409/0xef0
[  254.505847][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  254.505869][ T1090]  ? __lock_acquire+0xab9/0xd20
[  254.505895][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  254.505918][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.505930][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  254.505945][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  254.505964][ T1090]  process_scheduled_works+0xae1/0x17b0
[  254.506036][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  254.506069][ T1090]  worker_thread+0x8a0/0xda0
[  254.506098][ T1090]  ? __kthread_parkme+0x7b/0x200
[  254.506119][ T1090]  kthread+0x711/0x8a0
[  254.506136][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  254.506152][ T1090]  ? __pfx_kthread+0x10/0x10
[  254.506168][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.506182][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.506195][ T1090]  ? __pfx_kthread+0x10/0x10
[  254.506210][ T1090]  ret_from_fork+0x4bc/0x870
[  254.506229][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  254.506255][ T1090]  ? __switch_to_asm+0x39/0x70
[  254.506267][ T1090]  ? __switch_to_asm+0x33/0x70
[  254.506280][ T1090]  ? __pfx_kthread+0x10/0x10
[  254.506294][ T1090]  ret_from_fork_asm+0x1a/0x30
[  254.506322][ T1090]  </TASK>
[  254.506328][ T1090] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  254.690787][T10969] loop3: detected capacity change from 0 to 164
[  254.698584][T10969] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  254.945528][T10977] loop3: detected capacity change from 0 to 2048
[  254.965505][T10977] NILFS (loop3): invalid segment: Inconsistency found
[  254.968327][T10977] NILFS (loop3): trying rollback from an earlier position
[  254.982594][T10977] NILFS (loop3): recovery complete
[  255.005056][T10978] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.031000][T10977] NILFS error (device loop3): nilfs_readdir: zero-length directory entry
[  255.044769][T10980] loop5: detected capacity change from 0 to 1024
[  255.049947][T10977] Remounting filesystem read-only
[  255.078185][T10980] EXT4-fs: Ignoring removed i_version option
[  255.096030][T10980] EXT4-fs (loop5): mounted filesystem 00010100-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  255.100927][T10980] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.137351][T10980] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.1973: lblock 0 mapped to illegal pblock 0 (length 4)
[  255.161690][T10980] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  255.195815][T10980] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 5 with error 28
[  255.210076][T10980] EXT4-fs (loop5): This should not happen!! Data will be lost
[  255.210076][T10980] 
[  255.222417][T10980] EXT4-fs (loop5): Total free blocks count 0
[  255.229629][T10980] EXT4-fs (loop5): Free/Dirty block details
[  255.232502][T10980] EXT4-fs (loop5): free_blocks=4293918720
[  255.234960][T10980] EXT4-fs (loop5): dirty_blocks=16
[  255.239432][T10980] EXT4-fs (loop5): Block reservation details
[  255.241622][T10980] EXT4-fs (loop5): i_reserved_data_blocks=1
[  255.309813][ T9756] EXT4-fs (loop5): unmounting filesystem 00010100-0000-0006-0000-000000000000.
[  255.620363][T10999] loop5: detected capacity change from 0 to 512
[  255.624521][T10999] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal
[  255.734865][T11022] loop4: detected capacity change from 0 to 2048
[  256.075093][T11032] netlink: 'syz.4.1993': attribute type 2 has an invalid length.
[  256.209400][T11038] sock: sock_timestamping_bind_phc: sock not bind to device
[  256.499658][T11047] netlink: 'syz.3.1999': attribute type 153 has an invalid length.
[  256.917296][T11082] loop4: detected capacity change from 0 to 256
[  256.930527][T11082] exfat: Deprecated parameter 'namecase'
[  256.938793][T11082] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  257.143563][T11082] futex_wake_op: syz.4.2016 tries to shift op by -1; fix this program
[  257.754403][ T5848] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  257.930506][ T5848] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  257.934802][ T5848] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  257.947378][ T5848] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  257.951268][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.963785][ T5848] usbtmc 4-1:16.0: bulk endpoints not found
[  258.033175][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2027'.
[  258.139775][ T5998] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  258.186546][ T5848] usb 4-1: USB disconnect, device number 16
[  258.312780][ T5998] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[  258.317620][ T5998] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 197, setting to 64
[  258.322990][ T5998] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  258.326730][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.335713][ T5998] usb 5-1: config 0 descriptor??
[  258.338728][T11104] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  258.344402][ T5998] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  259.017231][T11119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.021209][T11119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.043879][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  259.046831][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  259.264761][T11128] netlink: 'syz.5.2035': attribute type 3 has an invalid length.
[  259.268196][T11128] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2035'.
[  259.502823][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2043'.
[  260.337518][T11158] loop3: detected capacity change from 0 to 512
[  260.356875][T11158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.361244][T11158] ext4 filesystem being mounted at /491/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  260.403696][ T7318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.681411][T11170] loop5: detected capacity change from 0 to 1024
[  260.762812][T11170] hfsplus: xattr search failed
[  260.813698][ T9756] hfsplus: node 4:3 still has 1 user(s)!
[  260.906275][T11175] loop5: detected capacity change from 0 to 512
[  260.923871][T11175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.996384][ T9756] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.404507][  T793] usb 5-1: USB disconnect, device number 13
[  261.442752][ T5984] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  261.459422][T11190] loop4: detected capacity change from 0 to 512
[  261.462454][T11190] EXT4-fs: inline encryption not supported
[  261.479973][T11190] EXT4-fs: Ignoring removed oldalloc option
[  261.483675][T11190] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  261.500441][T11190] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.2060: iget: special inode unallocated
[  261.507583][T11190] EXT4-fs (loop4): get root inode failed
[  261.509478][T11190] EXT4-fs (loop4): mount failed
[  261.545704][T11195] loop3: detected capacity change from 0 to 256
[  261.548358][T11195] exfat: Bad value for 'errors'
[  261.688651][ T5984] usb 6-1: Using ep0 maxpacket: 16
[  261.692700][ T5984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  261.696701][ T5984] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  261.700395][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.705828][ T5984] usb 6-1: config 0 descriptor??
[  262.270326][ T5984] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  262.642722][T11205] loop4: detected capacity change from 0 to 8
[  262.668672][T11205] SQUASHFS error: zlib decompression failed, data probably corrupt
[  262.681801][T11205] SQUASHFS error: Failed to read block 0x4e8: -5
[  262.685120][T11205] SQUASHFS error: zlib decompression failed, data probably corrupt
[  262.688550][T11205] SQUASHFS error: Failed to read block 0x4ee: -5
[  262.691485][T11205] SQUASHFS error: zlib decompression failed, data probably corrupt
[  262.695205][T11205] SQUASHFS error: Failed to read block 0x4ef: -5
[  262.697717][   T33] audit: type=1800 audit(1759350655.982:106): pid=11205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2066" name="file1" dev="loop4" ino=5 res=0 errno=0
[  262.761572][ T5997] usb 6-1: USB disconnect, device number 3
[  263.459859][T11229] loop4: detected capacity change from 0 to 128
[  263.479728][T11229] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  263.494446][T11229] ext4 filesystem being mounted at /419/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  263.600804][   T33] audit: type=1326 audit(1759350656.824:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11233 comm="syz.5.2079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aff58ec29 code=0x7ffc0000
[  263.612875][   T33] audit: type=1326 audit(1759350656.824:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11233 comm="syz.5.2079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aff58ec29 code=0x7ffc0000
[  263.626036][   T33] audit: type=1326 audit(1759350656.852:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11233 comm="syz.5.2079" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f1aff58ec29 code=0x7ffc0000
[  263.666807][   T33] audit: type=1326 audit(1759350656.852:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11233 comm="syz.5.2079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aff58ec29 code=0x7ffc0000
[  263.699157][   T33] audit: type=1326 audit(1759350656.852:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11233 comm="syz.5.2079" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aff58ec29 code=0x7ffc0000
[  263.714783][ T7704] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  264.248317][T11253] loop4: detected capacity change from 0 to 256
[  264.270471][   T33] audit: type=1800 audit(1759350657.451:112): pid=11253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2086" name="file2" dev="loop4" ino=1048695 res=0 errno=0
[  264.517894][T11259] macvlan0: entered promiscuous mode
[  264.521938][T11259] batadv0: entered promiscuous mode
[  264.525254][T11259] hsr1: entered allmulticast mode
[  264.527280][T11259] macvlan0: entered allmulticast mode
[  264.529476][T11259] veth1_vlan: entered allmulticast mode
[  264.531781][T11259] batadv0: entered allmulticast mode
[  264.856710][T11271] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2096'.
[  264.860962][ T5998] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  264.930873][T11275] loop5: detected capacity change from 0 to 2048
[  264.954184][T11275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  265.036500][ T5998] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.045330][ T5998] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  265.050551][ T5998] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.057649][ T5998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  265.061955][ T5998] usb 5-1: SerialNumber: syz
[  265.216414][ T5997] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  265.285618][ T5998] cdc_ether 5-1:1.0: skipping garbage
[  265.287460][ T5998] usb 5-1: bad CDC descriptors
[  265.292584][ T5998] usb 5-1: USB disconnect, device number 14
[  265.389416][ T5997] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.394496][ T5997] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  265.400891][ T5997] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  265.404556][ T5997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  265.407772][ T5997] usb 6-1: SerialNumber: syz
[  265.631648][ T5997] usb 6-1: 0:2 : does not exist
[  265.646604][ T5997] usb 6-1: USB disconnect, device number 4
[  265.667425][T10153] udevd[10153]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  265.860232][T11285] loop4: detected capacity change from 0 to 512
[  265.873395][T11285] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2102: iget: bad i_size value: 38620345925642
[  265.888608][T11285] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2102: couldn't read orphan inode 15 (err -117)
[  265.904894][T11285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.932482][ T7704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.144358][T11302] netlink: 'syz.4.2109': attribute type 12 has an invalid length.
[  266.516402][T11313] loop5: detected capacity change from 0 to 2048
[  266.525667][T11313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.617074][ T5998] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  266.777542][ T5998] usb 5-1: Using ep0 maxpacket: 8
[  266.784087][ T5998] usb 5-1: config 1 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  266.791055][ T5998] usb 5-1: config 1 interface 0 has no altsetting 0
[  266.802217][ T5998] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.40
[  266.806419][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.809585][ T5998] usb 5-1: Product: 諻䦝࠯躔ᬜ⺡ଯ姬ᯱ릜
[  266.812529][ T5998] usb 5-1: Manufacturer: ￅ릀㉢潐荺슏ূ퀍ಏ닝嚻団➆ꮮ羹弰皏㍗珡拈膠⌆쫏ꑐ뗔湔剡䵎Ụᘛ힆ห蒃趿쵫⫚妎᧪愬֬糍䎆哉뙋륗☐閺ᚮ똸몎❺㍶ᴎ纙裡㆟竕䉙뛔፶ᥣ㡮剼䴮㘚౴ꄁ䭊惜룵焺籠牮ӂ꾀匳ﲣ㺂흜價೴謕酔㰂㨯㾴칼ꝟ岓혩ꝗ쿆찻얰菏
[  266.826514][ T5998] usb 5-1: SerialNumber: ﳿ
[  267.170472][ T5998] usbhid 5-1:1.0: can't add hid device: -71
[  267.179675][ T5998] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  267.197969][ T5998] usb 5-1: USB disconnect, device number 15
[  267.519815][ T5997] IPVS: starting estimator thread 0...
[  267.622051][T11326] IPVS: using max 83 ests per chain, 199200 per kthread
[  267.799516][T11331] tmpfs: Group quota block hardlimit too large.
[  268.066289][T11349] ptrace attach of "/syz-executor exec"[11344] was attempted by "/syz-executor exec"[11349]
[  268.248969][T11358] erspan0: entered promiscuous mode
[  268.283378][T11360] netlink: 'syz.4.2130': attribute type 1 has an invalid length.
[  268.295792][T11360] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2130'.
[  268.424865][T11370] loop5: detected capacity change from 0 to 128
[  268.437022][T11370] befs: (loop5): No write support. Marking filesystem read-only
[  268.444032][T11370] befs: (loop5): invalid magic header
[  269.118633][ T5848] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  269.300242][ T5848] usb 6-1: Using ep0 maxpacket: 16
[  269.304674][ T5848] usb 6-1: config index 0 descriptor too short (expected 12592, got 72)
[  269.308062][ T5848] usb 6-1: config 55 has too many interfaces: 55, using maximum allowed: 32
[  269.315624][ T5848] usb 6-1: config 55 has an invalid descriptor of length 0, skipping remainder of the config
[  269.319846][ T5848] usb 6-1: config 55 has 0 interfaces, different from the descriptor's value: 55
[  269.326415][ T5848] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  269.329992][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.333957][ T5848] usb 6-1: Product: syz
[  269.335787][ T5848] usb 6-1: Manufacturer: syz
[  269.337694][ T5848] usb 6-1: SerialNumber: syz
[  269.506007][T11406] loop3: detected capacity change from 0 to 512
[  269.519194][T11406] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2151: bg 0: block 393: padding at end of block bitmap is not set
[  269.532819][T11406] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  269.537960][T11406] EXT4-fs (loop3): 2 truncates cleaned up
[  269.541044][T11406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  269.551419][T11406] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.3.2151: path /520/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  269.584140][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.587194][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.628778][ T7318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.674088][T11412] IPv6: NLM_F_CREATE should be specified when creating new route
[  269.690103][T11414] veth0: entered promiscuous mode
[  269.697403][T11414] veth0: left promiscuous mode
[  270.037194][T11416] loop3: detected capacity change from 0 to 40427
[  270.085868][T11416] F2FS-fs (loop3): Image doesn't support compression
[  270.099016][T11416] F2FS-fs (loop3): build fault injection rate: 690
[  270.103537][T11416] F2FS-fs (loop3): build fault injection type: 0x35f7
[  270.110406][T11416] F2FS-fs (loop3): invalid crc value
[  270.226386][T11422] fuse: Bad value for 'fd'
[  270.411652][T11416] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  270.415590][T11416] F2FS-fs (loop3): Start checkpoint disabled!
[  270.419384][T11416] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  270.423510][T11416] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  270.440162][   T33] audit: type=1800 audit(1759350663.222:113): pid=11416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2155" name="file1" dev="loop3" ino=10 res=0 errno=0
[  270.458125][ T6264] kworker/u9:4: attempt to access beyond end of device
[  270.458125][ T6264] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  270.463908][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  270.463920][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.463926][ T6264] Workqueue: writeback wb_workfn (flush-7:3)
[  270.463943][ T6264] Call Trace:
[  270.463947][ T6264]  <TASK>
[  270.463950][ T6264]  dump_stack_lvl+0x189/0x250
[  270.463963][ T6264]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.463971][ T6264]  ? __pfx_queue_work_on+0x10/0x10
[  270.463979][ T6264]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  270.463988][ T6264]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.464001][ T6264]  f2fs_handle_critical_error+0x37c/0x540
[  270.464012][ T6264]  f2fs_write_end_io+0x886/0xb60
[  270.464030][ T6264]  __submit_merged_bio+0x27a/0x6a0
[  270.464041][ T6264]  __submit_merged_write_cond+0x255/0x530
[  270.464056][ T6264]  f2fs_write_data_pages+0x261d/0x3000
[  270.464079][ T6264]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  270.464094][ T6264]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  270.464119][ T6264]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  270.464142][ T6264]  ? trace_f2fs_writepages+0x7f/0x200
[  270.464154][ T6264]  ? f2fs_write_node_pages+0x478/0x6e0
[  270.464170][ T6264]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  270.464185][ T6264]  ? __lock_acquire+0xab9/0xd20
[  270.464207][ T6264]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  270.464222][ T6264]  do_writepages+0x32e/0x550
[  270.464246][ T6264]  ? reacquire_held_locks+0x127/0x1d0
[  270.464257][ T6264]  ? writeback_sb_inodes+0x384/0x1010
[  270.464277][ T6264]  __writeback_single_inode+0x145/0xff0
[  270.464289][ T6264]  ? do_raw_spin_unlock+0x4d/0x240
[  270.464309][ T6264]  writeback_sb_inodes+0x6c7/0x1010
[  270.464339][ T6264]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  270.464385][ T6264]  ? rcu_is_watching+0x15/0xb0
[  270.464406][ T6264]  wb_writeback+0x43b/0xaf0
[  270.464426][ T6264]  ? queue_io+0x331/0x590
[  270.464440][ T6264]  ? __pfx_wb_writeback+0x10/0x10
[  270.464458][ T6264]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.464475][ T6264]  wb_workfn+0x409/0xef0
[  270.464504][ T6264]  ? __pfx_wb_workfn+0x10/0x10
[  270.464517][ T6264]  ? __lock_acquire+0xab9/0xd20
[  270.464533][ T6264]  ? process_scheduled_works+0x9ef/0x17b0
[  270.464546][ T6264]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.464554][ T6264]  ? process_scheduled_works+0x9ef/0x17b0
[  270.464564][ T6264]  ? process_scheduled_works+0x9ef/0x17b0
[  270.464575][ T6264]  process_scheduled_works+0xae1/0x17b0
[  270.464600][ T6264]  ? __pfx_process_scheduled_works+0x10/0x10
[  270.464627][ T6264]  worker_thread+0x8a0/0xda0
[  270.464667][ T6264]  kthread+0x711/0x8a0
[  270.464683][ T6264]  ? __pfx_worker_thread+0x10/0x10
[  270.464699][ T6264]  ? __pfx_kthread+0x10/0x10
[  270.464739][ T6264]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.464753][ T6264]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.464765][ T6264]  ? __pfx_kthread+0x10/0x10
[  270.464779][ T6264]  ret_from_fork+0x4bc/0x870
[  270.464793][ T6264]  ? __pfx_ret_from_fork+0x10/0x10
[  270.464813][ T6264]  ? __switch_to_asm+0x39/0x70
[  270.464839][ T6264]  ? __switch_to_asm+0x33/0x70
[  270.464852][ T6264]  ? __pfx_kthread+0x10/0x10
[  270.464867][ T6264]  ret_from_fork_asm+0x1a/0x30
[  270.464896][ T6264]  </TASK>
[  270.468131][ T6264] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  270.966676][T11433] loop4: detected capacity change from 0 to 256
[  270.970692][T11433] exFAT-fs (loop4): bogus sectors bits per cluster : 193
[  270.973779][T11433] exFAT-fs (loop4): failed to read boot sector
[  270.976411][T11433] exFAT-fs (loop4): failed to recognize exfat type
[  271.023208][T11435] loop3: detected capacity change from 0 to 128
[  271.045995][T11435] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  271.093860][ T7318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  271.273748][T11448] bridge4: entered promiscuous mode
[  271.566675][ T5997] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  271.733271][ T5997] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  271.736380][ T5997] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.740504][ T5997] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  271.749087][ T5997] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  271.752004][ T5997] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  271.754670][ T5997] usb 5-1: Manufacturer: syz
[  271.757575][ T5997] usb 5-1: config 0 descriptor??
[  271.802592][ T5848] usb 6-1: USB disconnect, device number 5
[  271.930353][T11467] loop5: detected capacity change from 0 to 1764
[  271.995854][ T5997] usb 5-1: USB disconnect, device number 16
[  272.185233][T11482] loop5: detected capacity change from 0 to 32768
[  272.202320][T11482] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  272.270814][ T9756] ocfs2: Unmounting device (7,5) on (node local)
[  272.789434][T11488] loop5: detected capacity change from 0 to 65536
[  272.865174][T11488] XFS (loop5): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  272.875543][T11488] XFS (loop5): Ending clean mount
[  272.889995][ T9756] XFS (loop5): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  273.283288][T11515] loop5: detected capacity change from 0 to 256
[  273.325855][T11515] FAT-fs (loop5): Directory bread(block 64) failed
[  273.329484][T11515] FAT-fs (loop5): Directory bread(block 65) failed
[  273.333421][T11515] FAT-fs (loop5): Directory bread(block 66) failed
[  273.335951][T11515] FAT-fs (loop5): Directory bread(block 67) failed
[  273.338541][T11515] FAT-fs (loop5): Directory bread(block 68) failed
[  273.340887][T11515] FAT-fs (loop5): Directory bread(block 69) failed
[  273.345286][T11515] FAT-fs (loop5): Directory bread(block 70) failed
[  273.347776][T11515] FAT-fs (loop5): Directory bread(block 71) failed
[  273.350045][T11515] FAT-fs (loop5): Directory bread(block 72) failed
[  273.352494][T11515] FAT-fs (loop5): Directory bread(block 73) failed
[  273.814423][ T5999] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  273.938423][T11544] loop3: detected capacity change from 0 to 32768
[  273.946823][T11544] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2203 (11544)
[  273.964343][T11544] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  273.968294][T11544] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  274.031221][T11544] BTRFS info (device loop3): enabling ssd optimizations
[  274.035492][T11570] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2208'.
[  274.039847][T11544] BTRFS info (device loop3): enabling free space tree
[  274.103255][ T7318] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  274.464003][T11577] loop3: detected capacity change from 0 to 40427
[  274.475012][T11577] F2FS-fs (loop3): invalid crc value
[  274.550841][T11577] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  274.559845][T11577] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  274.604992][ T7318] syz-executor: attempt to access beyond end of device
[  274.604992][ T7318] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  274.615481][ T7318] CPU: 1 UID: 0 PID: 7318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  274.615501][ T7318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  274.615509][ T7318] Call Trace:
[  274.615514][ T7318]  <TASK>
[  274.615520][ T7318]  dump_stack_lvl+0x189/0x250
[  274.615543][ T7318]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.615558][ T7318]  ? __pfx_queue_work_on+0x10/0x10
[  274.615569][ T7318]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  274.615585][ T7318]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  274.615607][ T7318]  f2fs_handle_critical_error+0x37c/0x540
[  274.615628][ T7318]  f2fs_write_end_io+0x886/0xb60
[  274.615688][ T7318]  __submit_merged_bio+0x27a/0x6a0
[  274.615707][ T7318]  __submit_merged_write_cond+0x255/0x530
[  274.615732][ T7318]  f2fs_write_data_pages+0x261d/0x3000
[  274.615773][ T7318]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  274.615839][ T7318]  ? __lock_acquire+0xab9/0xd20
[  274.615863][ T7318]  ? do_raw_spin_lock+0x121/0x290
[  274.615886][ T7318]  ? do_raw_spin_unlock+0x4d/0x240
[  274.615901][ T7318]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  274.615916][ T7318]  do_writepages+0x32e/0x550
[  274.615938][ T7318]  ? do_raw_spin_unlock+0x4d/0x240
[  274.615956][ T7318]  filemap_fdatawrite+0x199/0x240
[  274.615969][ T7318]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  274.616017][ T7318]  ? do_raw_spin_unlock+0x4d/0x240
[  274.616034][ T7318]  f2fs_sync_dirty_inodes+0x31f/0x830
[  274.616061][ T7318]  f2fs_write_checkpoint+0x93e/0x2440
[  274.616077][ T7318]  ? __lock_acquire+0xab9/0xd20
[  274.616114][ T7318]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  274.616188][ T7318]  kill_f2fs_super+0x2cc/0x6d0
[  274.616210][ T7318]  ? __pfx_kill_f2fs_super+0x10/0x10
[  274.616238][ T7318]  ? shrinker_free+0x2ce/0x3e0
[  274.616259][ T7318]  deactivate_locked_super+0xbc/0x130
[  274.616281][ T7318]  cleanup_mnt+0x425/0x4c0
[  274.616299][ T7318]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.616316][ T7318]  task_work_run+0x1d4/0x260
[  274.616334][ T7318]  ? __pfx_task_work_run+0x10/0x10
[  274.616348][ T7318]  ? __x64_sys_umount+0x122/0x160
[  274.616364][ T7318]  ? exit_to_user_mode_loop+0x40/0x130
[  274.616385][ T7318]  exit_to_user_mode_loop+0xe9/0x130
[  274.616401][ T7318]  do_syscall_64+0x2bd/0xfa0
[  274.616415][ T7318]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.616430][ T7318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.616443][ T7318]  ? exc_page_fault+0xab/0x100
[  274.616459][ T7318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.616471][ T7318] RIP: 0033:0x7fec4938ff57
[  274.616484][ T7318] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  274.616494][ T7318] RSP: 002b:00007ffc73b2cd18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  274.616508][ T7318] RAX: 0000000000000000 RBX: 00007fec49411c2d RCX: 00007fec4938ff57
[  274.616517][ T7318] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc73b2cdd0
[  274.616525][ T7318] RBP: 00007ffc73b2cdd0 R08: 0000000000000000 R09: 0000000000000000
[  274.616532][ T7318] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc73b2de60
[  274.616541][ T7318] R13: 00007fec49411c2d R14: 0000000000041e61 R15: 00007ffc73b2dea0
[  274.616563][ T7318]  </TASK>
[  274.616569][ T7318] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  275.717761][T11618] loop4: detected capacity change from 0 to 2048
[  275.750833][T11618] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 1344: 0x15 != 0x00
[  275.774236][T11618] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  276.061272][T11616] loop3: detected capacity change from 0 to 65536
[  276.111308][T11616] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  276.270338][T11616] XFS (loop3): Ending clean mount
[  276.290942][T11616] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  276.302842][T11616] XFS (loop3): Unmount and run xfs_repair
[  276.305519][T11616] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  276.308801][T11616] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  276.312906][T11616] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  276.317332][T11616] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  276.321179][T11616] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  276.324882][T11616] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  276.327868][T11616] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  276.330819][T11616] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  276.334360][T11616] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  276.338563][T11616] XFS (loop3): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  276.343363][T11616] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  276.349687][T11616] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  276.390857][ T7318] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  277.043406][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2236'.
[  277.894062][T11675] netem: incorrect ge model size
[  277.897988][T11675] netem: change failed
[  277.906338][ T5848] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  278.069170][ T5848] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  278.077247][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.081103][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  278.094646][ T5848] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  278.109435][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.124165][ T5848] usb 4-1: config 0 descriptor??
[  278.185878][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2258'.
[  278.491726][T11698] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2260'.
[  278.772277][ T5848] holtek_kbd 0003:04D9:A055.000B: unbalanced delimiter at end of report description
[  278.776766][ T5848] holtek_kbd 0003:04D9:A055.000B: probe with driver holtek_kbd failed with error -22
[  279.214051][ T5848] usb 4-1: USB disconnect, device number 17
[  279.341669][T11709] loop4: detected capacity change from 0 to 256
[  279.365754][T11709] FAT-fs (loop4): Directory bread(block 64) failed
[  279.368905][T11709] FAT-fs (loop4): Directory bread(block 65) failed
[  279.371823][T11709] FAT-fs (loop4): Directory bread(block 66) failed
[  279.374473][T11709] FAT-fs (loop4): Directory bread(block 67) failed
[  279.377227][T11709] FAT-fs (loop4): Directory bread(block 68) failed
[  279.380035][T11709] FAT-fs (loop4): Directory bread(block 69) failed
[  279.383299][T11709] FAT-fs (loop4): Directory bread(block 70) failed
[  279.386070][T11709] FAT-fs (loop4): Directory bread(block 71) failed
[  279.388849][T11709] FAT-fs (loop4): Directory bread(block 72) failed
[  279.391735][T11709] FAT-fs (loop4): Directory bread(block 73) failed
[  279.677748][T11725] netlink: 'syz.4.2271': attribute type 4 has an invalid length.
[  279.871656][T11733] loop5: detected capacity change from 0 to 16
[  279.896776][T11733] erofs (device loop5): mounted with root inode @ nid 36.
[  279.902345][T11737] cifs: Unknown parameter 'no'aN[Gzob,er;%j
[  279.902345][T11737] z,@qJ#"h/.W1ȱnNC"C׈E)8+1<;8+`#'
[  279.999162][T11739] erofs (device loop5): bogus i_mode (4355) @ nid 46
[  280.027976][T11740] loop4: detected capacity change from 0 to 128
[  280.035528][T11739] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2275'.
[  280.036754][T11740] hpfs: hpfs_map_sector(): read error
[  280.042846][T11740] hpfs: filesystem error: can't load hotfix map; already mounted read-only
[  280.053258][T11740] hpfs: hpfs_map_sector(): read error
[  280.143344][T11743] loop3: detected capacity change from 0 to 2048
[  280.236306][T11743]  loop3: p1 < > p4 < >
[  280.239825][T11743] loop3: partition table partially beyond EOD, truncated
[  280.282816][T11743] loop3: p4 start 42180 is beyond EOD, truncated
[  282.764832][T11768] kAFS: No cell specified
[  282.824807][T11766] loop3: detected capacity change from 0 to 32768
[  282.829662][T11766] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2288 (11766)
[  282.846591][T11766] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.850985][T11766] BTRFS info (device loop3 state S): using crc32c (crc32c-lib) checksum algorithm
[  282.917468][ T7111] BTRFS warning (device loop3 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  282.927911][ T1227] BTRFS warning (device loop3 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  282.950739][ T1227] BTRFS warning (device loop3 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x73153135 level 0, ignored
[  282.964626][T11766] BTRFS warning (device loop3 state S): devid 1 physical 4096 len 4194304 inside the reserved space
[  282.996045][T11766] BTRFS error (device loop3 state S): dev extent physical offset 4096 devid 1 has no corresponding chunk
[  283.000547][T11766] BTRFS error (device loop3 state S): failed to verify dev extents against chunks: -117
[  283.038476][T11766] BTRFS error (device loop3 state S): open_ctree failed: -117
[  283.166869][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2295'.
[  285.351273][T11839] loop4: detected capacity change from 0 to 16
[  285.364203][T11839] erofs (device loop4): mounted with root inode @ nid 36.
[  287.521271][   T33] audit: type=1326 audit(1759350679.199:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78058ec29 code=0x7ffc0000
[  287.535782][   T33] audit: type=1326 audit(1759350679.208:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78058ec29 code=0x7ffc0000
[  287.548139][   T33] audit: type=1326 audit(1759350679.208:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fb78058ec29 code=0x7ffc0000
[  287.557206][   T33] audit: type=1326 audit(1759350679.208:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78058ec29 code=0x7ffc0000
[  287.571319][   T33] audit: type=1326 audit(1759350679.208:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78058ec29 code=0x7ffc0000
[  287.580181][   T33] audit: type=1326 audit(1759350679.208:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb78058ec29 code=0x7ffc0000
[  287.589645][   T33] audit: type=1326 audit(1759350679.208:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78058ec29 code=0x7ffc0000
[  287.598618][   T33] audit: type=1326 audit(1759350679.208:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.4.2332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb78058ec29 code=0x7ffc0000
[  287.888086][T11908] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2341'.
[  287.891933][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2341'.
[  288.394538][ T5997] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  288.554476][ T5997] usb 4-1: Using ep0 maxpacket: 16
[  288.560957][ T5997] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  288.564598][ T5997] usb 4-1: config 0 has no interface number 0
[  288.569126][ T5997] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  288.580880][ T5997] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  288.588360][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.595269][ T5997] usb 4-1: Product: syz
[  288.599804][ T5997] usb 4-1: Manufacturer: syz
[  288.604101][ T5997] usb 4-1: SerialNumber: syz
[  288.616012][ T5997] usb 4-1: config 0 descriptor??
[  288.944344][ T5997] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71
[  288.947125][ T5997] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71
[  289.049039][ T5997] usb 4-1: USB disconnect, device number 18
[  289.749177][T11984] macvtap1: entered promiscuous mode
[  289.751250][T11984] vlan0: entered promiscuous mode
[  289.755227][T11984] macvtap1: entered allmulticast mode
[  289.757305][T11984] vlan0: entered allmulticast mode
[  289.759223][T11984] veth0_vlan: entered allmulticast mode
[  289.785703][T11984] macvtap2: entered promiscuous mode
[  289.787549][T11984] macvtap2: entered allmulticast mode
[  290.107817][T11991] loop4: detected capacity change from 0 to 128
[  290.109443][T11993] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  290.114658][T11991] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  290.144266][T11991] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  290.436535][T12005] loop3: detected capacity change from 0 to 128
[  290.436739][   T33] audit: type=1326 audit(1759350681.930:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.5.2360" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1aff58ec29 code=0x0
[  290.455326][T12005] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  290.463757][T12005] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.719549][ T1090] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  291.867055][ T7318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  292.114368][T12020] loop3: detected capacity change from 0 to 256
[  292.126623][T12020] exfat: Deprecated parameter 'utf8'
[  292.135833][T12020] exfat: Deprecated parameter 'utf8'
[  292.138312][T12020] exfat: Deprecated parameter 'utf8'
[  292.183301][T12020] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  292.245467][   T33] audit: type=1804 audit(1759350683.623:123): pid=12020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2363" name="/newroot/575/file0/file2" dev="loop3" ino=1048719 res=1 errno=0
[  292.413200][T12033] loop3: detected capacity change from 0 to 64
[  292.462147][T12036] loop5: detected capacity change from 0 to 2048
[  292.483783][T12036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.533561][T12037] loop4: detected capacity change from 0 to 8192
[  292.851060][T12043] loop5: detected capacity change from 0 to 40427
[  292.858435][T12043] F2FS-fs (loop5): invalid crc value
[  292.905466][ T5848] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  292.907268][T12043] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  292.916225][T12043] F2FS-fs (loop5): Start checkpoint disabled!
[  292.921102][T12043] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  292.926549][T12043] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  292.971294][T11956] kworker/u9:6: attempt to access beyond end of device
[  292.971294][T11956] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  292.977352][T11956] CPU: 0 UID: 0 PID: 11956 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[  292.977370][T11956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.977378][T11956] Workqueue: writeback wb_workfn (flush-7:5)
[  292.977403][T11956] Call Trace:
[  292.977408][T11956]  <TASK>
[  292.977414][T11956]  dump_stack_lvl+0x189/0x250
[  292.977434][T11956]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.977449][T11956]  ? __pfx_queue_work_on+0x10/0x10
[  292.977460][T11956]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  292.977475][T11956]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.977505][T11956]  f2fs_handle_critical_error+0x37c/0x540
[  292.977525][T11956]  f2fs_write_end_io+0x886/0xb60
[  292.977555][T11956]  __submit_merged_bio+0x27a/0x6a0
[  292.977574][T11956]  __submit_merged_write_cond+0x255/0x530
[  292.977605][T11956]  f2fs_write_data_pages+0x261d/0x3000
[  292.977648][T11956]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  292.977674][T11956]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  292.977720][T11956]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  292.977744][T11956]  ? trace_f2fs_writepages+0x7f/0x200
[  292.977759][T11956]  ? f2fs_write_node_pages+0x478/0x6e0
[  292.977776][T11956]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  292.977793][T11956]  ? __lock_acquire+0xab9/0xd20
[  292.977816][T11956]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  292.977838][T11956]  do_writepages+0x32e/0x550
[  292.977855][T11956]  ? reacquire_held_locks+0x127/0x1d0
[  292.977866][T11956]  ? writeback_sb_inodes+0x384/0x1010
[  292.977887][T11956]  __writeback_single_inode+0x145/0xff0
[  292.977901][T11956]  ? do_raw_spin_unlock+0x4d/0x240
[  292.977920][T11956]  writeback_sb_inodes+0x6c7/0x1010
[  292.977956][T11956]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  292.978004][T11956]  ? rcu_is_watching+0x15/0xb0
[  292.978025][T11956]  wb_writeback+0x43b/0xaf0
[  292.978046][T11956]  ? queue_io+0x331/0x590
[  292.978063][T11956]  ? __pfx_wb_writeback+0x10/0x10
[  292.978083][T11956]  ? _raw_spin_unlock_irq+0x23/0x50
[  292.978101][T11956]  wb_workfn+0x409/0xef0
[  292.978133][T11956]  ? __pfx_wb_workfn+0x10/0x10
[  292.978155][T11956]  ? __lock_acquire+0xab9/0xd20
[  292.978181][T11956]  ? process_scheduled_works+0x9ef/0x17b0
[  292.978204][T11956]  ? _raw_spin_unlock_irq+0x23/0x50
[  292.978216][T11956]  ? process_scheduled_works+0x9ef/0x17b0
[  292.978233][T11956]  ? process_scheduled_works+0x9ef/0x17b0
[  292.978253][T11956]  process_scheduled_works+0xae1/0x17b0
[  292.978293][T11956]  ? __pfx_process_scheduled_works+0x10/0x10
[  292.978350][T11956]  worker_thread+0x8a0/0xda0
[  292.978394][T11956]  kthread+0x711/0x8a0
[  292.978411][T11956]  ? __pfx_worker_thread+0x10/0x10
[  292.978428][T11956]  ? __pfx_kthread+0x10/0x10
[  292.978444][T11956]  ? _raw_spin_unlock_irq+0x23/0x50
[  292.978457][T11956]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.978470][T11956]  ? __pfx_kthread+0x10/0x10
[  292.978485][T11956]  ret_from_fork+0x4bc/0x870
[  292.978506][T11956]  ? __pfx_ret_from_fork+0x10/0x10
[  292.978530][T11956]  ? __switch_to_asm+0x39/0x70
[  292.978544][T11956]  ? __switch_to_asm+0x33/0x70
[  292.978558][T11956]  ? __pfx_kthread+0x10/0x10
[  292.978573][T11956]  ret_from_fork_asm+0x1a/0x30
[  292.978604][T11956]  </TASK>
[  292.978609][T11956] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  293.101735][ T5848] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  293.119006][ T5848] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  293.124592][T12061] loop4: detected capacity change from 0 to 2048
[  293.127265][ T5848] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  293.149203][ T5848] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  293.155804][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.159203][ T5848] usb 4-1: Product: syz
[  293.160720][ T5848] usb 4-1: Manufacturer: syz
[  293.164879][T12061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.169059][ T5848] usb 4-1: SerialNumber: syz
[  293.179413][T12061] EXT4-fs error (device loop4): ext4_ext_precache:649: inode #2: comm syz.4.2384: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  293.186890][ T5848] usb 4-1: config 0 descriptor??
[  293.189063][T12045] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  293.191802][T12045] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  293.203933][ T5848] usb 4-1: ucan: probing device on interface #0
[  293.213308][ T7704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.797152][T12097] loop5: detected capacity change from 0 to 164
[  293.802169][T12097] rock: directory entry would overflow storage
[  293.804978][T12097] rock: sig=0x66, size=4, remaining=3
[  293.810251][T12097] rock: directory entry would overflow storage
[  293.813001][T12097] rock: sig=0x66, size=4, remaining=3
[  293.925250][ T5999] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.931721][ T5999] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.937551][ T5999] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.952241][ T5999] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.959081][ T5848] ucan 4-1:0.0: probe with driver ucan failed with error -22
[  294.387780][ T5998] usb 4-1: USB disconnect, device number 19
[  294.609860][T12105] loop5: detected capacity change from 0 to 32768
[  294.613889][T12105] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2403 (12105)
[  294.621615][T12105] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  294.625376][T12105] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  294.742460][T12105] BTRFS info (device loop5): enabling ssd optimizations
[  294.750621][T12105] BTRFS info (device loop5): enabling free space tree
[  294.926927][ T9756] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  295.032979][ T5998] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  295.214254][ T5998] usb 5-1: Using ep0 maxpacket: 8
[  295.219575][ T5998] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  295.223233][ T5998] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  295.235759][ T5998] usb 5-1: Product: syz
[  295.237161][ T5998] usb 5-1: Manufacturer: syz
[  295.238708][ T5998] usb 5-1: SerialNumber: syz
[  295.260766][ T5998] usb 5-1: config 0 descriptor??
[  295.272997][ T5998] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  295.492236][ T5997] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  295.826718][ T5998] gspca_zc3xx: reg_r err -71
[  295.840580][ T5998] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  295.880598][ T5998] usb 5-1: USB disconnect, device number 17
[  295.962673][ T5997] usb 6-1: Using ep0 maxpacket: 8
[  295.968719][ T5997] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  295.972484][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.976144][ T5997] usb 6-1: Product: syz
[  295.977929][ T5997] usb 6-1: Manufacturer: syz
[  295.979795][ T5997] usb 6-1: SerialNumber: syz
[  295.984305][ T5997] usb 6-1: config 0 descriptor??
[  296.208547][ T5997] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  296.216002][ T5997] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  296.221929][ T5997] usb 6-1: USB disconnect, device number 6
[  296.695181][T12168] loop3: detected capacity change from 0 to 4096
[  296.710994][ T5984] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  296.713175][T12168] ntfs3(loop3): Failed to load $Extend (-22).
[  296.717079][T12168] ntfs3(loop3): Failed to initialize $Extend.
[  296.779704][T12170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2427'.
[  296.892823][ T5984] usb 5-1: Using ep0 maxpacket: 8
[  296.903256][ T5984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.908309][ T5984] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  296.935568][ T5984] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  296.938631][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.941277][ T5984] usb 5-1: Product: syz
[  296.942721][ T5984] usb 5-1: Manufacturer: syz
[  296.944434][ T5984] usb 5-1: SerialNumber: syz
[  296.951464][ T5984] usb 5-1: config 0 descriptor??
[  297.655994][ T5848] usb 5-1: USB disconnect, device number 18
[  297.719376][T12179] loop5: detected capacity change from 0 to 32768
[  297.840753][T12179] ERROR: (device loop5): dbAlloc: the hint is outside the map
[  297.840753][T12179] 
[  297.849907][T12179] ERROR: (device loop5): remounting filesystem as read-only
[  297.852955][T12179] ialloc: diAlloc returned -5!
[  298.771883][T12196] loop5: detected capacity change from 0 to 32768
[  298.775883][T12196] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2437 (12196)
[  298.789689][T12196] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  298.795712][T12196] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  298.852092][T12196] BTRFS info (device loop5): enabling ssd optimizations
[  298.856073][T12196] BTRFS info (device loop5): enabling free space tree
[  298.901690][ T9756] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.645591][T12229] lo: entered allmulticast mode
[  299.649553][T12229] lo: left allmulticast mode
[  299.801807][ T5946] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.809769][ T5946] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.890716][ T5946] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.894508][ T5946] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.991155][ T5946] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  299.998873][ T5946] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.065709][T12238] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2450'.
[  300.134020][ T5946] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.138744][ T5946] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.289071][   T57] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  300.296154][   T57] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  300.300113][   T57] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  300.303687][   T57] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  300.306744][   T57] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  300.447330][T12254] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2453'.
[  300.814871][ T5946] bridge_slave_1: left allmulticast mode
[  300.817099][ T5946] bridge_slave_1: left promiscuous mode
[  300.819324][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.825173][ T5946] bridge_slave_0: left allmulticast mode
[  300.828219][ T5946] bridge_slave_0: left promiscuous mode
[  300.830464][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.534608][ T5946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  301.549499][ T5946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.553551][ T5946] bond0 (unregistering): Released all slaves
[  301.721352][T12247] chnl_net:caif_netlink_parms(): no params data found
[  301.731862][T12274] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2461'.
[  302.023755][T12247] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.031644][T12247] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.034653][T12247] bridge_slave_0: entered allmulticast mode
[  302.048323][T12247] bridge_slave_0: entered promiscuous mode
[  302.060500][ T5946] hsr_slave_0: left promiscuous mode
[  302.062905][ T5946] hsr_slave_1: left promiscuous mode
[  302.065276][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.069295][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.072315][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.074738][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.084980][ T5946] veth1_macvtap: left promiscuous mode
[  302.086827][ T5946] veth0_macvtap: left promiscuous mode
[  302.090095][ T5946] veth1_vlan: left promiscuous mode
[  302.092146][ T5946] veth0_vlan: left promiscuous mode
[  302.238541][   T93] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  302.409137][   T93] usb 5-1: Using ep0 maxpacket: 32
[  302.413935][   T93] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  302.417728][   T93] usb 5-1: config 0 has no interface number 0
[  302.424422][   T93] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  302.428519][   T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.432272][   T93] usb 5-1: Product: syz
[  302.434137][   T93] usb 5-1: Manufacturer: syz
[  302.436296][   T93] usb 5-1: SerialNumber: syz
[  302.440884][   T93] usb 5-1: config 0 descriptor??
[  302.445042][   T93] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  302.482336][ T5946] team0 (unregistering): Port device team_slave_1 removed
[  302.519598][ T5946] team0 (unregistering): Port device team_slave_0 removed
[  302.580268][   T57] Bluetooth: hci2: command tx timeout
[  302.667975][   T93] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  302.674344][   T93] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  302.975672][T12247] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.978262][T12247] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.980724][T12247] bridge_slave_1: entered allmulticast mode
[  302.984185][T12247] bridge_slave_1: entered promiscuous mode
[  303.012817][T12247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.020719][T12247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.072077][T12247] team0: Port device team_slave_0 added
[  303.076507][T12247] team0: Port device team_slave_1 added
[  303.098813][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  303.103181][   T93] usb 5-1: USB disconnect, device number 19
[  303.109784][   T93] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  303.142547][T12247] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.144972][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.147072][   T93] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  303.156019][T12247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.162295][T12247] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.164665][T12247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.173475][T12247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.188922][   T93] quatech2 5-1:0.51: device disconnected
[  303.289430][T12247] hsr_slave_0: entered promiscuous mode
[  303.291890][T12247] hsr_slave_1: entered promiscuous mode
[  303.294247][T12247] debugfs: 'hsr0' already exists in 'hsr'
[  303.297179][T12247] Cannot create hsr debugfs directory
[  303.412455][T12314] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2473'.
[  303.670712][T12330] loop3: detected capacity change from 0 to 4096
[  304.085560][T12353] loop4: detected capacity change from 0 to 4096
[  304.164356][T12358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2482'.
[  304.391280][T12247] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  304.409936][T12247] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  304.436830][T12247] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  304.451634][T12247] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  304.586431][T12247] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.611945][T12247] 8021q: adding VLAN 0 to HW filter on device team0
[  304.626514][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.629705][ T6264] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.651637][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.654953][ T6264] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.793508][   T57] Bluetooth: hci2: command tx timeout
[  304.833115][T12247] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.959156][T12394] loop3: detected capacity change from 0 to 512
[  304.965090][T12394] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  304.995017][T12394] EXT4-fs (loop3): 1 truncate cleaned up
[  305.002235][T12394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.033347][T12247] veth0_vlan: entered promiscuous mode
[  305.045395][ T7318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.052967][T12247] veth1_vlan: entered promiscuous mode
[  305.122422][T12247] veth0_macvtap: entered promiscuous mode
[  305.137316][T12247] veth1_macvtap: entered promiscuous mode
[  305.158431][T12247] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.168116][T12247] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.184540][ T5946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.193427][T12406] atomic_op ffff8881093b4998 conn xmit_atomic 0000000000000000
[  305.198800][ T5946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.211619][ T5946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.227620][ T5946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.315757][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.324190][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.342445][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.345731][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.496444][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2496'.
[  305.710481][T12432] loop5: detected capacity change from 0 to 128
[  305.736529][T12432] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  305.743269][T12432] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  305.784885][T12247] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.935826][   T57] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15
[  305.939287][   T57] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00
[  306.378972][T12457] loop3: detected capacity change from 0 to 32768
[  306.389939][T12467] loop4: detected capacity change from 0 to 128
[  306.392183][T12457] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2513 (12457)
[  306.405762][T12467] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  306.412637][T12457] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  306.416192][T12457] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  306.419721][T12467] ext4 filesystem being mounted at /586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  306.462234][ T7704] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  306.538867][T12457] BTRFS info (device loop3): enabling ssd optimizations
[  306.541245][T12457] BTRFS info (device loop3): enabling free space tree
[  306.575452][   T33] audit: type=1800 audit(1759350697.009:124): pid=12457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2513" name="file1" dev="loop3" ino=260 res=0 errno=0
[  306.652202][ T7318] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  306.685493][T12495] netlink: 'syz.4.2525': attribute type 6 has an invalid length.
[  306.692121][T12495] netlink: 'syz.4.2525': attribute type 6 has an invalid length.
[  307.016828][   T57] Bluetooth: hci2: command tx timeout
[  307.313195][T12513] loop5: detected capacity change from 0 to 32768
[  307.343155][T12513] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  307.372486][T12513] XFS (loop5): Ending clean mount
[  307.397844][T12513] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  307.599167][T12540] loop4: detected capacity change from 0 to 1024
[  307.671354][T12540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.687351][T12542] loop3: detected capacity change from 0 to 4096
[  307.709770][T12540] EXT4-fs error (device loop4): ext4_xattr_set_entry:1665: inode #16: comm syz.4.2541: corrupted xattr entries
[  307.724604][T12540] EXT4-fs (loop4): Remounting filesystem read-only
[  307.731385][T12551] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.756508][ T7704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.948024][T12567] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2553'.
[  308.727537][ T5997] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  308.941289][ T5997] usb 6-1: Using ep0 maxpacket: 32
[  308.947477][ T5997] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  308.950670][ T5997] usb 6-1: config 0 has no interface number 0
[  308.964675][ T5997] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  308.969100][ T5997] usb 6-1: config 0 interface 85 has no altsetting 0
[  308.975142][ T5997] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  308.978893][ T5997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.982173][ T5997] usb 6-1: Product: syz
[  308.984540][ T5997] usb 6-1: Manufacturer: syz
[  308.986615][ T5997] usb 6-1: SerialNumber: syz
[  308.994233][ T5997] usb 6-1: config 0 descriptor??
[  309.222808][T12577] loop5: detected capacity change from 0 to 1024
[  309.239448][T12577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.244250][   T57] Bluetooth: hci2: command tx timeout
[  309.678017][ T5997] appletouch 6-1:0.85: Geyser mode initialized.
[  309.685108][ T5997] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input12
[  309.897461][   T93] usb 6-1: USB disconnect, device number 7
[  309.925617][   T93] appletouch 6-1:0.85: input: appletouch disconnected
[  310.202667][ T5848] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  310.362921][ T5848] usb 5-1: Using ep0 maxpacket: 8
[  310.366402][ T5848] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  310.369055][ T5848] usb 5-1: config 0 has no interface number 0
[  310.372893][ T5848] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  310.376126][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.378723][ T5848] usb 5-1: Product: syz
[  310.380097][ T5848] usb 5-1: Manufacturer: syz
[  310.381643][ T5848] usb 5-1: SerialNumber: syz
[  310.385412][ T5848] usb 5-1: config 0 descriptor??
[  310.455204][T12247] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  312.588779][T12606] loop5: detected capacity change from 0 to 32768
[  312.599381][T12606] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  312.626583][T12606] 
[  312.627489][T12606] ======================================================
[  312.629978][T12606] WARNING: possible circular locking dependency detected
[  312.632485][T12606] syzkaller #0 Not tainted
[  312.634227][T12606] ------------------------------------------------------
[  312.637684][T12606] syz.5.2568/12606 is trying to acquire lock:
[  312.639916][T12606] ffff88803807c0f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  312.643263][T12606] 
[  312.643263][T12606] but task is already holding lock:
[  312.645975][T12606] ffff88803991c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  312.649103][T12606] 
[  312.649103][T12606] which lock already depends on the new lock.
[  312.649103][T12606] 
[  312.652516][T12606] 
[  312.652516][T12606] the existing dependency chain (in reverse order) is:
[  312.655627][T12606] 
[  312.655627][T12606] -> #4 (jbd2_handle){++++}-{0:0}:
[  312.658258][T12606]        lock_acquire+0x120/0x360
[  312.660296][T12606]        start_this_handle+0x1fa7/0x21c0
[  312.662600][T12606]        jbd2__journal_start+0x2c1/0x5b0
[  312.664902][T12606]        jbd2_journal_start+0x2a/0x40
[  312.667069][T12606]        ocfs2_start_trans+0x376/0x6d0
[  312.669257][T12606]        ocfs2_acl_set_mode+0x169/0x810
[  312.671519][T12606]        ocfs2_iop_set_acl+0x261/0x2a0
[  312.673724][T12606]        vfs_set_acl+0x887/0xb00
[  312.675714][T12606]        do_set_acl+0xf6/0x190
[  312.677633][T12606]        filename_setxattr+0x2e0/0x600
[  312.679834][T12606]        path_setxattrat+0x364/0x3a0
[  312.682012][T12606]        __x64_sys_setxattr+0xbc/0xe0
[  312.684184][T12606]        do_syscall_64+0xfa/0xfa0
[  312.686251][T12606]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.688410][T12606] 
[  312.688410][T12606] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  312.691678][T12606]        lock_acquire+0x120/0x360
[  312.693573][T12606]        down_read+0x46/0x2e0
[  312.695237][T12606]        ocfs2_start_trans+0x36a/0x6d0
[  312.697240][T12606]        ocfs2_acl_set_mode+0x169/0x810
[  312.699068][T12606]        ocfs2_iop_set_acl+0x261/0x2a0
[  312.701022][T12606]        vfs_set_acl+0x887/0xb00
[  312.702842][T12606]        do_set_acl+0xf6/0x190
[  312.704579][T12606]        filename_setxattr+0x2e0/0x600
[  312.706368][T12606]        path_setxattrat+0x364/0x3a0
[  312.708089][T12606]        __x64_sys_setxattr+0xbc/0xe0
[  312.709938][T12606]        do_syscall_64+0xfa/0xfa0
[  312.711782][T12606]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.714245][T12606] 
[  312.714245][T12606] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  312.716986][T12606]        reacquire_held_locks+0x127/0x1d0
[  312.719090][T12606]        lock_release+0x1b4/0x3e0
[  312.720844][T12606]        up_write+0x2d/0x420
[  312.722620][T12606]        ocfs2_free_alloc_context+0x97/0x1a0
[  312.724953][T12606]        ocfs2_write_begin_nolock+0x4296/0x4340
[  312.727321][T12606]        ocfs2_write_begin+0x1bb/0x310
[  312.729463][T12606]        generic_perform_write+0x2c5/0x900
[  312.731399][T12606]        __generic_file_write_iter+0x1ae/0x230
[  312.733635][T12606]        ocfs2_file_write_iter+0x157a/0x1d10
[  312.735552][T12606]        iter_file_splice_write+0x975/0x10e0
[  312.737443][T12606]        direct_splice_actor+0x101/0x160
[  312.739252][T12606]        splice_direct_to_actor+0x5a8/0xcc0
[  312.741269][T12606]        do_splice_direct+0x181/0x270
[  312.742947][T12606]        do_sendfile+0x4da/0x7e0
[  312.744581][T12606]        __se_sys_sendfile64+0x13e/0x190
[  312.746481][T12606]        do_syscall_64+0xfa/0xfa0
[  312.748292][T12606]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.750343][T12606] 
[  312.750343][T12606] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  312.753138][T12606]        lock_acquire+0x120/0x360
[  312.754800][T12606]        down_write+0x96/0x1f0
[  312.756393][T12606]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  312.758504][T12606]        ocfs2_xattr_set+0x595/0x11f0
[  312.760469][T12606]        ocfs2_set_acl+0x701/0x7b0
[  312.762210][T12606]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  312.763945][T12606]        vfs_set_acl+0x887/0xb00
[  312.765540][T12606]        filename_setxattr+0x2e0/0x600
[  312.767324][T12606]        path_setxattrat+0x364/0x3a0
[  312.768984][T12606]        __x64_sys_setxattr+0xbc/0xe0
[  312.770803][T12606]        do_syscall_64+0xfa/0xfa0
[  312.772442][T12606]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.774665][T12606] 
[  312.774665][T12606] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  312.777458][T12606]        validate_chain+0xb9b/0x2140
[  312.779061][T12606]        __lock_acquire+0xab9/0xd20
[  312.781049][T12606]        lock_acquire+0x120/0x360
[  312.782871][T12606]        down_read+0x46/0x2e0
[  312.784651][T12606]        ocfs2_init_acl+0x2f9/0x720
[  312.786389][T12606]        ocfs2_mknod+0x1321/0x2050
[  312.788190][T12606]        ocfs2_create+0x1a5/0x440
[  312.789964][T12606]        path_openat+0x14f4/0x3830
[  312.791651][T12606]        do_filp_open+0x1fa/0x410
[  312.793374][T12606]        do_sys_openat2+0x121/0x1c0
[  312.795063][T12606]        __x64_sys_creat+0x8f/0xc0
[  312.796728][T12606]        do_syscall_64+0xfa/0xfa0
[  312.798452][T12606]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.801014][T12606] 
[  312.801014][T12606] other info that might help us debug this:
[  312.801014][T12606] 
[  312.805039][T12606] Chain exists of:
[  312.805039][T12606]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  312.805039][T12606] 
[  312.810512][T12606]  Possible unsafe locking scenario:
[  312.810512][T12606] 
[  312.813503][T12606]        CPU0                    CPU1
[  312.815621][T12606]        ----                    ----
[  312.817813][T12606]   rlock(jbd2_handle);
[  312.819512][T12606]                                lock(&journal->j_trans_barrier);
[  312.822692][T12606]                                lock(jbd2_handle);
[  312.825384][T12606]   rlock(&oi->ip_xattr_sem);
[  312.827307][T12606] 
[  312.827307][T12606]  *** DEADLOCK ***
[  312.827307][T12606] 
[  312.830580][T12606] 8 locks held by syz.5.2568/12606:
[  312.832638][T12606]  #0: ffff88803991e420 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  312.835723][T12606]  #1: ffff88803807c3c0 (&type->i_mutex_dir_key#10){+.+.}-{4:4}, at: path_openat+0x8da/0x3830
[  312.839663][T12606]  #2: ffff88802a1dc3c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  312.845198][T12606]  #3: ffff88803807b540 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  312.850738][T12606]  #4: ffff88802a1da6c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  312.856309][T12606]  #5: ffff88803991e610 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  312.860102][T12606]  #6: ffff888023867ce8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  312.864282][T12606]  #7: ffff88803991c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  312.867612][T12606] 
[  312.867612][T12606] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  312.869834][T12606] CPU: 0 UID: 0 PID: 12606 Comm: syz.5.2568 Not tainted syzkaller #0 PREEMPT(full) 
[  312.869851][T12606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  312.869861][T12606] Call Trace:
[  312.869868][T12606]  <TASK>
[  312.869875][T12606]  dump_stack_lvl+0x189/0x250
[  312.869893][T12606]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.869907][T12606]  ? __pfx__printk+0x10/0x10
[  312.869921][T12606]  ? stack_trace_save+0x9c/0xe0
[  312.869936][T12606]  print_circular_bug+0x2ee/0x310
[  312.869950][T12606]  check_noncircular+0x134/0x160
[  312.869962][T12606]  validate_chain+0xb9b/0x2140
[  312.869978][T12606]  __lock_acquire+0xab9/0xd20
[  312.870021][T12606]  ? ocfs2_init_acl+0x2f9/0x720
[  312.870038][T12606]  lock_acquire+0x120/0x360
[  312.870053][T12606]  ? ocfs2_init_acl+0x2f9/0x720
[  312.870071][T12606]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  312.870087][T12606]  down_read+0x46/0x2e0
[  312.870103][T12606]  ? ocfs2_init_acl+0x2f9/0x720
[  312.870121][T12606]  ocfs2_init_acl+0x2f9/0x720
[  312.870137][T12606]  ? ocfs2_mknod_locked+0x148/0x250
[  312.870152][T12606]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  312.870167][T12606]  ? dquot_alloc_inode+0x216/0xa50
[  312.870186][T12606]  ? ocfs2_block_signals+0x94/0xe0
[  312.870198][T12606]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  312.870209][T12606]  ? __kasan_save_free_info+0x46/0x50
[  312.870228][T12606]  ? ocfs2_init_security_get+0x139/0x1a0
[  312.870245][T12606]  ocfs2_mknod+0x1321/0x2050
[  312.870262][T12606]  ? __pfx_ocfs2_mknod+0x10/0x10
[  312.870275][T12606]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  312.870291][T12606]  ? __lock_acquire+0xab9/0xd20
[  312.870312][T12606]  ? look_up_lock_class+0x74/0x170
[  312.870327][T12606]  ? register_lock_class+0x51/0x320
[  312.870343][T12606]  ? __lock_acquire+0xab9/0xd20
[  312.870359][T12606]  ? __lock_acquire+0xab9/0xd20
[  312.870375][T12606]  ? do_raw_spin_lock+0x121/0x290
[  312.870390][T12606]  ? do_raw_spin_unlock+0x4d/0x240
[  312.870404][T12606]  ? rcu_is_watching+0x15/0xb0
[  312.870415][T12606]  ? ocfs2_lookup+0x5b9/0x9b0
[  312.870430][T12606]  ocfs2_create+0x1a5/0x440
[  312.870443][T12606]  ? __pfx_ocfs2_lookup+0x10/0x10
[  312.870456][T12606]  ? from_kgid+0x1b0/0x650
[  312.870470][T12606]  ? __pfx_ocfs2_create+0x10/0x10
[  312.870482][T12606]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  312.870498][T12606]  ? inode_permission+0x149/0x470
[  312.870513][T12606]  ? __pfx_ocfs2_permission+0x10/0x10
[  312.870524][T12606]  ? bpf_lsm_inode_create+0x9/0x20
[  312.870549][T12606]  ? __pfx_ocfs2_create+0x10/0x10
[  312.870563][T12606]  path_openat+0x14f4/0x3830
[  312.870584][T12606]  ? __pfx_path_openat+0x10/0x10
[  312.870600][T12606]  do_filp_open+0x1fa/0x410
[  312.870610][T12606]  ? __lock_acquire+0xab9/0xd20
[  312.870627][T12606]  ? __pfx_do_filp_open+0x10/0x10
[  312.870645][T12606]  ? _raw_spin_unlock+0x28/0x50
[  312.870657][T12606]  ? alloc_fd+0x64c/0x6c0
[  312.870672][T12606]  do_sys_openat2+0x121/0x1c0
[  312.870689][T12606]  ? __se_sys_futex+0x36f/0x400
[  312.870702][T12606]  ? __pfx_do_sys_openat2+0x10/0x10
[  312.870720][T12606]  __x64_sys_creat+0x8f/0xc0
[  312.870737][T12606]  do_syscall_64+0xfa/0xfa0
[  312.870750][T12606]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.870763][T12606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.870774][T12606]  ? exc_page_fault+0xab/0x100
[  312.870787][T12606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.870798][T12606] RIP: 0033:0x7f2c5e78ec29
[  312.870810][T12606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.870820][T12606] RSP: 002b:00007f2c5f547038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  312.870833][T12606] RAX: ffffffffffffffda RBX: 00007f2c5e9d5fa0 RCX: 00007f2c5e78ec29
[  312.870841][T12606] RDX: 0000000000000000 RSI: 000000000000001b RDI: 0000200000000580
[  312.870849][T12606] RBP: 00007f2c5e811e41 R08: 0000000000000000 R09: 0000000000000000
[  312.870856][T12606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.870863][T12606] R13: 00007f2c5e9d6038 R14: 00007f2c5e9d5fa0 R15: 00007ffef69945f8
[  312.870875][T12606]  </TASK>
[  313.107420][T12606] syz.5.2568 (12606) used greatest stack depth: 17960 bytes left
[  313.219036][ T5848] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  313.222397][ T5848] uvcvideo 5-1:0.31: No streaming interface found for terminal 6.
[  313.238270][ T5848] usb 5-1: USB disconnect, device number 20
[  313.245304][T12609] ocfs2: Unmounting device (7,5) on (node local)
[  313.288976][ T5946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.372025][ T5946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.487833][ T5946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  313.939541][ T5946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.943271][ T5946] bond_slave_0: left promiscuous mode
[  313.946965][ T5946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.950778][ T5946] bond_slave_1: left promiscuous mode
[  313.953722][ T5946] bond0 (unregistering): Released all slaves
[  313.959937][ T5946] bond1 (unregistering): Released all slaves
[  314.054424][ T5946] bond2 (unregistering): Released all slaves
[  314.291271][ T5946] macvlan0: left promiscuous mode
[  314.293663][ T5946] batadv0: left promiscuous mode
[  314.299249][ T5946] hsr_slave_0: left promiscuous mode
[  314.301907][ T5946] hsr_slave_1: left promiscuous mode
[  314.304411][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.307474][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.311539][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.314560][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.330722][ T5946] vlan0: left allmulticast mode
[  314.332757][ T5946] veth0_vlan: left allmulticast mode
[  314.334860][ T5946] vlan0: left promiscuous mode
[  314.337047][ T5946] veth1_macvtap: left promiscuous mode
[  314.339287][ T5946] veth0_macvtap: left promiscuous mode
[  314.341694][ T5946] veth1_vlan: left allmulticast mode
[  314.343814][ T5946] veth1_vlan: left promiscuous mode
[  314.345942][ T5946] veth0_vlan: left promiscuous mode
[  314.508113][ T5946] team0 (unregistering): Port device team_slave_1 removed
[  314.526761][ T5946] team0 (unregistering): Port device team_slave_0 removed
[  314.877474][ T5946] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.941798][ T5946] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  314.997555][ T5946] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.060215][ T5946] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.142550][ T5946] bridge_slave_1: left allmulticast mode
[  315.145496][ T5946] bridge_slave_1: left promiscuous mode
[  315.147901][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.151978][ T5946] bridge_slave_0: left allmulticast mode
[  315.155448][ T5946] bridge_slave_0: left promiscuous mode
[  315.157856][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.251886][ T5946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  315.255918][ T5946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  315.259980][ T5946] bond0 (unregistering): Released all slaves
[  315.486517][ T5946] hsr_slave_0: left promiscuous mode
[  315.489213][ T5946] hsr_slave_1: left promiscuous mode
[  315.491789][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.495242][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.497903][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.500905][ T5946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.507778][ T5946] veth1_macvtap: left promiscuous mode
[  315.509575][ T5946] veth0_macvtap: left promiscuous mode
[  315.511912][ T5946] veth1_vlan: left promiscuous mode
[  315.514112][ T5946] veth0_vlan: left promiscuous mode
[  315.668423][ T5946] team0 (unregistering): Port device team_slave_1 removed
[  315.688314][ T5946] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
20:27:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000052d4 RDI=00000000000052d5 RBP=00000000000003f8 RSP=ffffc900071d68f0
R8 =ffff888107930237 R9 =1ffff11020f26046 R10=dffffc0000000000 R11=ffffffff8556dea0
R12=dffffc0000000000 R13=ffffffff99d198ed R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556df1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2c5f5476c0 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31e1dff8 CR3=000000003a324000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f2c5e812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4ecdb RBX=1ffff11009608441 RCX=ffff888109998000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900031bf700 RSP=ffffc900031bf580
R8 =ffffffff8fc35977 R9 =1ffffffff1f86b2e R10=dffffc0000000000 R11=fffffbfff1f86b2f
R12=ffff88804b042208 R13=dffffc0000000000 R14=ffff88813663b200 R15=0000000000000000
RIP=ffffffff81b4ecc3 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe423507d60 CR3=000000000e138000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fe4229a76c3 00007fe4229a76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055558770ef8d 000055558770ef30
XMM06=0000555587701784 0000555587701780 XMM07=2e01ffffffffffff fffffb0803800336
XMM08=1000168004040104 c200616161616161 XMM09=5f68706563206220 3063666236386139
XMM10=660a79656b5f5f2e 74696e695f6e6f63 XMM11=2030656662363861 3966666666666666
XMM12=7461622062203030 3564363861396666 XMM13=6b5f5f2e74726174 735f70745f766461
XMM14=6139666666666666 66660a30312e7965 XMM15=5f76646174616220 6220303235643638
