last executing test programs:

3m5.988414746s ago: executing program 0 (id=489):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x1f, 0x49, 0xcb, r1}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFA_LABEL={0x14}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x3c}}, 0x0)

3m5.987471447s ago: executing program 0 (id=491):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
ioctl(r0, 0x8b1b, &(0x7f0000000040))

3m5.90172075s ago: executing program 0 (id=493):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}, @exit], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x1, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x76c}}, 0x30)

3m5.841822466s ago: executing program 0 (id=495):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000000f00)={[{@uid_forget}, {@unhide}, {@volume={'volume', 0x3d, 0x4}}, {@session}, {@gid}, {@rootdir={'rootdir', 0x3d, 0x5}}, {@adinicb}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@session={'session', 0x3d, 0x10001}}, {@longad}, {@uid_ignore}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x10, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b732673618000000fffff2ff0000000000edcce000", [0x1]})
pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0xb762)

3m5.696990778s ago: executing program 0 (id=499):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b4d6d275fd3a39311000000000000000000080001"], 0x20}}, 0x0)

3m5.439082389s ago: executing program 0 (id=503):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000740)=0xffffffff, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

3m5.27455048s ago: executing program 32 (id=503):
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000740)=0xffffffff, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

2m15.596148033s ago: executing program 2 (id=980):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newsa={0x104, 0x10, 0xeac0e19b6999623b, 0x0, 0x0, {{@in6=@remote, @in=@remote}, {@in=@empty, 0x0, 0x2b}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}, [@coaddr={0x14, 0xe, @in=@dev}]}, 0x104}}, 0x0)

2m15.524567589s ago: executing program 2 (id=981):
syz_usb_connect(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe00c0000904eb02027f9c1f000905060220000200020905a229"], 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)

2m14.975424061s ago: executing program 2 (id=983):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
socket(0xa, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4)

2m14.116964059s ago: executing program 2 (id=990):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4)

2m13.97650834s ago: executing program 2 (id=992):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18)
signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0)

2m13.460150786s ago: executing program 2 (id=995):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)

2m13.343507746s ago: executing program 33 (id=995):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1m24.040208252s ago: executing program 3 (id=1505):
r0 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x20000fe}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

1m23.97001582s ago: executing program 3 (id=1506):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r1, 0xf}, 0x8)

1m23.96970857s ago: executing program 3 (id=1507):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000380)="48e8", 0x2}], 0x1}, 0x2c001)
ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote})

1m23.91697011s ago: executing program 3 (id=1509):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f5, &(0x7f0000002400)="$eJzs3c1vHGcdB/DvrNeut1Sp0yY0QkGYRCpIFokTK4VwwSCEcqhQVQ49W4nTWNkkVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmft3fX6LfFLAp9PNJ5n5nnmmd/85pkZ7zqrDfB/68pMmg9S5MrMm/fL5bXVufba6twLdXU7SVluJM3uLMXtpHiYzJf1Rd+UvvkmHy9dfvuzR2ufd5ea9VS1H9tuuxFGtF2pp0zX/U2P3HJ8t7tYqcPLS0mu1vNBE7vta6BhmbSz9RyOXGdQI52VvWy+l+sWeMb0nk5F97m5yVTyYpLJ+veA1HeHxuFFuK++3ivs6S4HAAAAz6lP7xx1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD8qb7/v7W+2OiuSqZT9L7/f6K3ri4/g+b7F8a2a/ngwGMBAAAAAAAAgIP3tcd5nPs5VpbHk3SK6m/+Z6rKE/mik3wp7+deFnM353I/C1nOcu7mQpKpvo4m7i8sL9+9sL5lafSWF0duefEwjxoAAAAAAAAA/uf8Mq3u3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBZUSRj3Vk1najnmUqjmY26rCT/TDJx1PHuQTFq5YPDjwMAAACeyuQTbPPy4zzO/RzrLXeK6jX/l6vXy5N5P7eznKUsp53FXKtfQ5ev+htrq3PttdW5W+VULg/2+/1/7ymMibqHsWpp1J5PVS1auZ6las25XK2CuZZGd99nk1O9ePri6vNRGVPxvdouI2vWaS139vut3kXYF4NvRTS2adnaCC5Zz8hsHVu55fFuBorqjZpkOBPDZ2fTzpoDS1NVk/H1PV1IY/2dnxMHkPMX63l5PL850JzvRn8u1jPRSJWJi73RV14z22ci+cZf//TOjfbtmzeu35s52kPag7Et1g+Pibm+TLz2XGeiucf2s1UmTq4vX8mP8pPMZDpv5W6W8tMsZDmL6dT1C/V4Ln9ObZ+p+YGlt3aKZKI+L91ztpuYpvPDqrSQM9W2x7KUIndyLYt5o/p3MRfy7VzKpVzuO8Mnt4y7Orbqqm8MX/W9M/23kcGf/WZdKO9uv924y81vd8Rbjc790r33l3k93pfX7qh/tN7qeN91MNuXpVd62Rkf2fmT3BubX6kL5T5+tcNz4nBN1ZkoL6DeU6IX3avdTDSrZ9Hmcf6HTrld2rc7nRsL723R/8rQ8uv1vBxWq1/dqXXP6FOxv8rx8kom6zvJ4Ogo615dv8v01XU2xnK3bvCJW253sqorit6V+uPcqQbA5it1ov4dbnNPF6u614bqTtf38LLuVF/dwO9buZN2rvUf6MwhJBOAXfrHO+vFqbw40fpX69PWJ61ft2603pz8wQvfeeH0RMb/Pv7d5uzY643TxV/ySX6+8fofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4cvc++PDmQru9eHd0obF11UChleE1O/U8VCjqL/QZ1eZm/S0Fe+rwiAuTSQbWVN9ztP/7am7fpjUcxqZC5xfJoeen9yWCo9v8riw0d3W65wfW/Hlzhx/tHM9YhsbhLq6LAyw0ciA9d17eYiSMZfQAOKo7EnBYzi/feu/8vQ8+/NbSrYV3F99dvD1+6dLl2cuX3pg7f32pvTjb/XnUUQIHYeOhf9SRAAAAAAAAAAAAALs16qMCZ17a6UMjmwqNJMOf8fA/CwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9cWUmzQcpcmH23Gy5vLY61y6nXnmjZTNJo5EUP0uKh8l8ulOm+ror8seH6YzYz8dLl9/+7NHa5xt9Nbvtk0Y939r2tUlW6inTScbq+VMY6O/qU/dX/Kd3DGXCvuh0OvNPFx/sj/8GAAD//92u7JE=")
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)

1m23.726427839s ago: executing program 3 (id=1512):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_SIOCINQ(r0, 0x800448d2, &(0x7f0000000000))

1m23.068637379s ago: executing program 3 (id=1513):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="02053bbbd457bfc786"], 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

1m22.912462881s ago: executing program 34 (id=1513):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="02053bbbd457bfc786"], 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

1m19.618488793s ago: executing program 1 (id=1540):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000200)=@l={0x92, 0xf, 0xc0, 0x11, 0xc, 0xb, 0x8})

1m19.517065087s ago: executing program 1 (id=1541):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x80, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x80}}, 0x0)

1m18.459403805s ago: executing program 1 (id=1545):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000005000100070000000900020073797a300000000005000500020000001400078005001500020000000800114000000000050004000000000012000300686173683a6e6574"], 0x60}}, 0x4080)

1m18.382425325s ago: executing program 1 (id=1546):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m18.10681365s ago: executing program 1 (id=1550):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0xfffffffc, 0xe, 0x3631564e, 0x7, 0x2, [{}, {0x277c}, {}, {}, {}, {0xd360}, {0x7, 0xfffffffd}, {0x4, 0xc50}], 0x10, 0x9, 0x0, 0x0, 0x2}})

1m17.645942457s ago: executing program 1 (id=1555):
r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r1 = dup(r0)
r2 = fanotify_init(0x0, 0x40000)
fanotify_mark(r2, 0x1, 0x40000010, r1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c8030000000000004000000000000000f605430000000000000001000500380046"], 0x78)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1m17.517052699s ago: executing program 35 (id=1555):
r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r1 = dup(r0)
r2 = fanotify_init(0x0, 0x40000)
fanotify_mark(r2, 0x1, 0x40000010, r1, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c8030000000000004000000000000000f605430000000000000001000500380046"], 0x78)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

53.10548374s ago: executing program 5 (id=1803):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

51.044138388s ago: executing program 5 (id=1829):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000c00080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f000500090001"], 0x58}}, 0x0)

50.962879086s ago: executing program 5 (id=1831):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

50.815023249s ago: executing program 5 (id=1837):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x61d0, &(0x7f000000cb40)="$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")
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
mkdir(&(0x7f0000000300)='./bus\x00', 0x4)

49.938641252s ago: executing program 5 (id=1838):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x70bd25, 0xfffffffe, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0)

49.544866681s ago: executing program 5 (id=1844):
syz_emit_ethernet(0x1be, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x29, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4f, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x30, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0)

49.346074489s ago: executing program 36 (id=1844):
syz_emit_ethernet(0x1be, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x29, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4f, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x30, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0)

4.637443442s ago: executing program 6 (id=2244):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})

4.538627942s ago: executing program 6 (id=2247):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x14}, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x60, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000b00)={0x40, 0x18, 0x1, ','}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.75979986s ago: executing program 4 (id=2272):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)

1.759537044s ago: executing program 4 (id=2273):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x64}}, 0x4000010)

1.676570202s ago: executing program 4 (id=2274):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket(0x6, 0x80002, 0xfffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="8000000088fca44108a9c17bd7bd22a501a7b87e4774ee990051eb12b9434098ddc41fa6a559399d85f4ebfc8ece6db9e79d021c5a90f6b2bb6099196ab0dc85a42c186bb169473fd369da9fa5dd8bb718dbfc582306ae7833e290e47aae7458b410952cfc78e85d2eada81cd7f5367644d67dca2188bc0c4b80bc57d5e212174b45d9a2", @ANYRES16=r6, @ANYBLOB="796104000000000000007e000000"], 0x14}}, 0x40000)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x30)
sendto$inet(r3, &(0x7f0000000300)="faab32", 0x3, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0})

1.449863584s ago: executing program 6 (id=2275):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x4, 0x4)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="27f931178b1a83a8c8fcf0b1be112339297df7c8786e0f200df180078e8555ed61db62de0ebeaf4841e966f29651e7d6c64e6f0d841a9b05a5f6c141c855253e39bb787e5e3300f7c78ee06483b4ee4c32817461e31a19eac4c88841ba5632d9b4269bf23482d70326a381337f48cf24f6180bdfa9e9d1f558089e316487838d61", 0x81}], 0x1}}], 0x2, 0x20000000)

1.298270754s ago: executing program 6 (id=2276):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x50, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_TYPE={0x8}]}]}, 0x50}}, 0x20000000)

1.173361381s ago: executing program 6 (id=2278):
memfd_create(&(0x7f0000000680)='-&:\n-\xb2];\x0f\xb2\x86NV6&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92\x87#Yg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='net/ip_vs_stats_percpu\x00')
fchdir(r0)
truncate(&(0x7f0000000000)='./file0\x00', 0x4)

1.168834175s ago: executing program 6 (id=2279):
r0 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1})
io_uring_enter(r0, 0x52de, 0xf62e, 0x8, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

207.9482ms ago: executing program 4 (id=2281):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)

207.680588ms ago: executing program 7 (id=2283):
r0 = getpid()
kcmp(r0, r0, 0x300, 0xffffffffffffffff, 0xffffffffffffffff)

207.469145ms ago: executing program 4 (id=2284):
capset(&(0x7f0000000500)={0x19980330}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x6, 0x7})
r0 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000600)=0x1d, 0x4)

145.772287ms ago: executing program 7 (id=2285):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001ac0), 0x40, 0x0)
ftruncate(r0, 0x4)

145.586212ms ago: executing program 4 (id=2286):
syz_usb_connect(0x1, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x0, 0x6e, 0xdb, 0x10, 0x8, 0x525, 0xa4a0, 0x6fb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x41, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x5f, 0x0, 0x0, 0x59, 0x71, 0x8, 0x20}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

145.502691ms ago: executing program 7 (id=2287):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'bridge_slave_1\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}})

69.198993ms ago: executing program 7 (id=2288):
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x4, 0x849})

68.917368ms ago: executing program 7 (id=2289):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x58}}, 0x1020)

0s ago: executing program 7 (id=2290):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

kernel console output (not intermixed with test programs):

ess_scheduled_works+0x10/0x10
[  191.234158][   T26]  worker_thread+0x8a0/0xda0
[  191.234196][   T26]  kthread+0x711/0x8a0
[  191.234214][   T26]  ? __pfx_worker_thread+0x10/0x10
[  191.234226][   T26]  ? __pfx_kthread+0x10/0x10
[  191.234244][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  191.234264][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.234276][   T26]  ? __pfx_kthread+0x10/0x10
[  191.234293][   T26]  ret_from_fork+0x439/0x7d0
[  191.234309][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  191.234328][   T26]  ? __switch_to_asm+0x39/0x70
[  191.234342][   T26]  ? __switch_to_asm+0x33/0x70
[  191.234356][   T26]  ? __pfx_kthread+0x10/0x10
[  191.234372][   T26]  ret_from_fork_asm+0x1a/0x30
[  191.234402][   T26]  </TASK>
[  191.235161][   T26] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  191.251361][ T9257] Trying to free block not in datazone
[  191.294716][ T5858] Bluetooth: hci0: command 0x0406 tx timeout
[  191.296072][ T5886] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  191.372074][ T9257] Trying to free block not in datazone
[  191.374941][ T9257] Trying to free block not in datazone
[  191.377190][ T9257] Trying to free block not in datazone
[  191.380300][ T9257] Trying to free block not in datazone
[  191.382747][ T9257] Trying to free block not in datazone
[  191.385129][ T9257] Trying to free block not in datazone
[  191.387451][ T9257] Trying to free block not in datazone
[  191.389807][ T9257] Trying to free block not in datazone
[  191.392263][ T9257] Trying to free block not in datazone
[  191.394803][ T9257] Trying to free block not in datazone
[  191.397057][ T9257] Trying to free block not in datazone
[  191.399240][ T9257] Trying to free block not in datazone
[  191.401379][ T9257] Trying to free block not in datazone
[  191.403622][ T9257] Trying to free block not in datazone
[  191.406587][ T9257] Trying to free block not in datazone
[  191.409252][ T9257] Trying to free block not in datazone
[  191.411659][ T9257] Trying to free block not in datazone
[  191.414052][ T9257] Trying to free block not in datazone
[  191.416344][ T9257] Trying to free block not in datazone
[  191.418636][ T9257] Trying to free block not in datazone
[  191.420990][ T9257] Trying to free block not in datazone
[  191.423468][ T9257] Trying to free block not in datazone
[  191.426353][ T9257] Trying to free block not in datazone
[  191.428873][ T9257] Trying to free block not in datazone
[  191.431152][ T9257] Trying to free block not in datazone
[  191.433218][ T9257] Trying to free block not in datazone
[  191.437645][ T9257] Trying to free block not in datazone
[  191.439832][ T9257] Trying to free block not in datazone
[  191.441949][ T9257] Trying to free block not in datazone
[  191.443855][ T9257] Trying to free block not in datazone
[  191.446173][ T9257] Trying to free block not in datazone
[  191.450852][ T9257] Trying to free block not in datazone
[  191.452709][ T9257] Trying to free block not in datazone
[  191.454921][ T9257] Trying to free block not in datazone
[  191.456871][ T9257] Trying to free block not in datazone
[  191.458869][ T9257] Trying to free block not in datazone
[  191.460597][ T9257] Trying to free block not in datazone
[  191.462423][ T9257] Trying to free block not in datazone
[  191.464381][ T9257] Trying to free block not in datazone
[  191.474749][ T9257] Trying to free block not in datazone
[  191.477793][ T9257] Trying to free block not in datazone
[  191.479948][ T9257] Trying to free block not in datazone
[  191.482184][ T9257] Trying to free block not in datazone
[  191.484833][ T9257] Trying to free block not in datazone
[  191.487121][ T9257] Trying to free block not in datazone
[  191.489482][ T9257] Trying to free block not in datazone
[  191.491739][ T9257] Trying to free block not in datazone
[  191.493817][ T9257] Trying to free block not in datazone
[  191.496627][ T9257] Trying to free block not in datazone
[  191.498537][ T9257] Trying to free block not in datazone
[  191.500361][ T9257] Trying to free block not in datazone
[  191.502201][ T9257] Trying to free block not in datazone
[  191.504254][ T9257] Trying to free block not in datazone
[  191.507097][ T9257] Trying to free block not in datazone
[  191.509433][ T9257] Trying to free block not in datazone
[  191.511829][ T9257] Trying to free block not in datazone
[  191.513761][ T9257] Trying to free block not in datazone
[  191.517916][ T9257] Trying to free block not in datazone
[  191.519741][ T9257] Trying to free block not in datazone
[  191.521525][ T9257] Trying to free block not in datazone
[  191.523333][ T9257] Trying to free block not in datazone
[  191.525715][ T9257] Trying to free block not in datazone
[  191.528078][ T9257] Trying to free block not in datazone
[  191.530346][ T9257] Trying to free block not in datazone
[  191.532406][ T9257] Trying to free block not in datazone
[  191.534502][ T9257] Trying to free block not in datazone
[  191.536973][ T9257] Trying to free block not in datazone
[  191.538835][ T9257] Trying to free block not in datazone
[  191.540907][ T9257] Trying to free block not in datazone
[  191.543104][ T9257] Trying to free block not in datazone
[  191.545910][ T9257] Trying to free block not in datazone
[  191.548447][ T9257] Trying to free block not in datazone
[  191.550807][ T9257] Trying to free block not in datazone
[  191.553111][ T9257] Trying to free block not in datazone
[  191.556019][ T9257] Trying to free block not in datazone
[  191.558494][ T9257] Trying to free block not in datazone
[  191.560837][ T9257] Trying to free block not in datazone
[  191.563212][ T9257] Trying to free block not in datazone
[  191.568600][ T9257] Trying to free block not in datazone
[  191.570847][ T9257] Trying to free block not in datazone
[  191.574257][ T9257] Trying to free block not in datazone
[  191.581568][ T9257] Trying to free block not in datazone
[  191.584295][ T9257] Trying to free block not in datazone
[  191.586796][ T9257] Trying to free block not in datazone
[  191.589073][ T9257] Trying to free block not in datazone
[  191.590893][ T9257] Trying to free block not in datazone
[  191.592825][ T9257] Trying to free block not in datazone
[  191.595146][ T5886] usb 2-1: Using ep0 maxpacket: 32
[  191.597567][ T9257] Trying to free block not in datazone
[  191.600152][ T9257] Trying to free block not in datazone
[  191.602696][ T9257] Trying to free block not in datazone
[  191.606641][ T5886] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[  191.610139][ T5886] usb 2-1: config 0 has no interface number 0
[  191.613029][ T5886] usb 2-1: config 0 interface 196 has no altsetting 0
[  191.616201][ T9257] Trying to free block not in datazone
[  191.618051][ T9257] Trying to free block not in datazone
[  191.620175][ T9257] Trying to free block not in datazone
[  191.622769][ T9257] Trying to free block not in datazone
[  191.625343][ T9257] Trying to free block not in datazone
[  191.627839][ T9257] Trying to free block not in datazone
[  191.630518][ T9257] Trying to free block not in datazone
[  191.635654][ T9257] Trying to free block not in datazone
[  191.638139][ T9257] Trying to free block not in datazone
[  191.640349][ T5886] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  191.644164][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.647602][ T5886] usb 2-1: Product: syz
[  191.649031][ T5886] usb 2-1: Manufacturer: syz
[  191.650386][ T5886] usb 2-1: SerialNumber: syz
[  191.652863][ T9257] Trying to free block not in datazone
[  191.656243][ T5886] usb 2-1: config 0 descriptor??
[  191.658423][ T9257] Trying to free block not in datazone
[  191.660233][ T9257] Trying to free block not in datazone
[  191.662493][ T9257] Trying to free block not in datazone
[  191.666030][ T9257] Trying to free block not in datazone
[  191.668001][ T9257] Trying to free block not in datazone
[  191.669893][ T9257] Trying to free block not in datazone
[  191.672083][ T9257] Trying to free block not in datazone
[  191.674319][ T9257] Trying to free block not in datazone
[  191.676629][ T9257] Trying to free block not in datazone
[  191.678590][ T9257] Trying to free block not in datazone
[  191.681530][ T9257] Trying to free block not in datazone
[  191.683651][ T9257] Trying to free block not in datazone
[  191.685879][ T9257] Trying to free block not in datazone
[  191.687991][ T9257] Trying to free block not in datazone
[  191.690206][ T9257] Trying to free block not in datazone
[  191.692421][ T9257] Trying to free block not in datazone
[  191.694822][ T9257] Trying to free block not in datazone
[  191.697095][ T9257] Trying to free block not in datazone
[  191.699326][ T9257] Trying to free block not in datazone
[  191.701765][ T9257] Trying to free block not in datazone
[  191.704125][ T9257] Trying to free block not in datazone
[  191.706758][ T9257] Trying to free block not in datazone
[  191.708925][ T9257] Trying to free block not in datazone
[  191.710899][ T9257] Trying to free block not in datazone
[  191.712727][ T9257] Trying to free block not in datazone
[  191.715212][ T9257] Trying to free block not in datazone
[  191.717512][ T9257] Trying to free block not in datazone
[  191.719631][ T9257] Trying to free block not in datazone
[  191.721506][ T9257] Trying to free block not in datazone
[  191.723743][ T9257] Trying to free block not in datazone
[  191.726240][ T9257] Trying to free block not in datazone
[  191.728550][ T9257] Trying to free block not in datazone
[  191.730900][ T9257] Trying to free block not in datazone
[  191.733201][ T9257] Trying to free block not in datazone
[  191.735362][ T9257] Trying to free block not in datazone
[  191.737076][ T9257] Trying to free block not in datazone
[  191.738996][ T9257] Trying to free block not in datazone
[  191.743363][ T9257] Trying to free block not in datazone
[  191.745253][ T9257] Trying to free block not in datazone
[  191.749798][ T9257] Trying to free block not in datazone
[  191.751856][ T9257] Trying to free block not in datazone
[  191.756161][ T9257] Trying to free block not in datazone
[  191.758920][ T9257] Trying to free block not in datazone
[  191.761305][ T9257] Trying to free block not in datazone
[  191.763262][ T9257] Trying to free block not in datazone
[  191.766520][ T9257] Trying to free block not in datazone
[  191.769293][ T9257] Trying to free block not in datazone
[  191.771986][ T9257] Trying to free block not in datazone
[  191.774414][ T9257] Trying to free block not in datazone
[  191.776876][ T9257] Trying to free block not in datazone
[  191.779764][ T9257] Trying to free block not in datazone
[  191.782201][ T9257] Trying to free block not in datazone
[  191.786736][ T9257] Trying to free block not in datazone
[  191.789141][ T9257] Trying to free block not in datazone
[  191.792093][ T9257] Trying to free block not in datazone
[  191.794393][ T9257] Trying to free block not in datazone
[  191.797521][ T9257] Trying to free block not in datazone
[  191.800076][ T9257] Trying to free block not in datazone
[  191.802706][ T9257] Trying to free block not in datazone
[  191.805484][ T9257] Trying to free block not in datazone
[  191.808450][ T9257] Trying to free block not in datazone
[  191.810855][ T9257] Trying to free block not in datazone
[  191.813187][ T9257] Trying to free block not in datazone
[  191.816209][ T9257] Trying to free block not in datazone
[  191.818760][ T9257] Trying to free block not in datazone
[  191.821077][ T9257] Trying to free block not in datazone
[  191.823417][ T9257] Trying to free block not in datazone
[  191.827426][ T9257] Trying to free block not in datazone
[  191.830103][ T9257] Trying to free block not in datazone
[  191.832553][ T9257] Trying to free block not in datazone
[  191.835348][ T9257] Trying to free block not in datazone
[  191.837653][ T9257] Trying to free block not in datazone
[  191.840154][ T9257] Trying to free block not in datazone
[  191.843178][ T9257] Trying to free block not in datazone
[  191.846419][ T9257] Trying to free block not in datazone
[  191.848811][ T9257] Trying to free block not in datazone
[  191.851549][ T9257] Trying to free block not in datazone
[  191.854049][ T9257] Trying to free block not in datazone
[  191.856719][ T9257] Trying to free block not in datazone
[  191.859752][ T9257] Trying to free block not in datazone
[  191.862781][ T9257] Trying to free block not in datazone
[  191.867055][ T9257] Trying to free block not in datazone
[  191.869543][ T9257] Trying to free block not in datazone
[  191.872253][ T9257] Trying to free block not in datazone
[  191.883164][ T5886] ipheth 2-1:0.196: Unable to find endpoints
[  191.892334][ T5886] usb 2-1: USB disconnect, device number 18
[  191.895513][ T9257] Trying to free block not in datazone
[  191.898168][ T9257] Trying to free block not in datazone
[  191.900354][ T9257] Trying to free block not in datazone
[  191.902676][ T9257] Trying to free block not in datazone
[  191.909618][ T9257] Trying to free block not in datazone
[  191.912273][ T9257] Trying to free block not in datazone
[  191.914468][ T9257] Trying to free block not in datazone
[  191.920704][ T9257] Trying to free block not in datazone
[  191.923353][ T9257] Trying to free block not in datazone
[  191.926051][ T9257] Trying to free block not in datazone
[  191.928500][ T9257] Trying to free block not in datazone
[  191.930798][ T9257] Trying to free block not in datazone
[  191.933278][ T9257] Trying to free block not in datazone
[  191.936471][ T9257] Trying to free block not in datazone
[  191.939269][ T9257] Trying to free block not in datazone
[  191.941835][ T9257] Trying to free block not in datazone
[  191.944299][ T9257] Trying to free block not in datazone
[  191.947091][ T9257] Trying to free block not in datazone
[  191.949412][ T9257] Trying to free block not in datazone
[  191.951829][ T9257] Trying to free block not in datazone
[  191.954340][ T9257] Trying to free block not in datazone
[  191.957156][ T9257] Trying to free block not in datazone
[  191.959298][ T9257] Trying to free block not in datazone
[  191.961619][ T9257] Trying to free block not in datazone
[  191.963903][ T9257] Trying to free block not in datazone
[  191.966181][ T9257] Trying to free block not in datazone
[  191.968525][ T9257] Trying to free block not in datazone
[  191.971047][ T9257] Trying to free block not in datazone
[  191.973445][ T9257] Trying to free block not in datazone
[  191.979704][ T9257] Trying to free block not in datazone
[  191.994734][ T9257] Trying to free block not in datazone
[  191.997512][ T9257] Trying to free block not in datazone
[  192.001724][ T9257] Trying to free block not in datazone
[  192.004340][ T9257] Trying to free block not in datazone
[  192.008852][ T9257] Trying to free block not in datazone
[  192.011330][ T9257] Trying to free block not in datazone
[  192.013657][ T9257] Trying to free block not in datazone
[  192.016294][ T9257] Trying to free block not in datazone
[  192.018820][ T9257] Trying to free block not in datazone
[  192.021274][ T9257] Trying to free block not in datazone
[  192.023461][ T9257] Trying to free block not in datazone
[  192.026531][ T9257] Trying to free block not in datazone
[  192.029008][ T9257] Trying to free block not in datazone
[  192.031211][ T9257] Trying to free block not in datazone
[  192.033523][ T9257] Trying to free block not in datazone
[  192.036177][ T9257] Trying to free block not in datazone
[  192.038669][ T9257] Trying to free block not in datazone
[  192.041111][ T9257] Trying to free block not in datazone
[  192.043472][ T9257] Trying to free block not in datazone
[  192.046511][ T9257] Trying to free block not in datazone
[  192.049429][ T9257] Trying to free block not in datazone
[  192.084281][ T9257] Trying to free block not in datazone
[  192.453497][   T68] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  193.324852][ T9283] loop4: detected capacity change from 0 to 40427
[  193.328903][ T9283] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(3072)
[  193.332231][ T9283] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  193.339919][ T9283] F2FS-fs (loop4): invalid crc value
[  193.388916][ T9283] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  193.403367][ T9283] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30
[  193.406227][ T9283] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  193.451289][ T9283] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0
[  193.850503][ T9303] loop1: detected capacity change from 0 to 4096
[  193.874475][ T9303] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  194.106096][ T9303] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  194.113303][ T9303] ntfs3(loop1): Failed to load $UpCase (-22).
[  194.322172][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  195.247081][ T9319] loop3: detected capacity change from 0 to 1024
[  195.663209][ T9330] sctp: [Deprecated]: syz.3.1372 (pid 9330) Use of struct sctp_assoc_value in delayed_ack socket option.
[  195.663209][ T9330] Use struct sctp_sack_info instead
[  195.700062][ T9337] loop4: detected capacity change from 0 to 128
[  195.759458][   T33] audit: type=1800 audit(1759038646.344:480): pid=9337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1376" name="file1" dev="loop4" ino=1048613 res=0 errno=0
[  195.786699][ T9343] loop3: detected capacity change from 0 to 16
[  195.790677][ T9343] erofs (device loop3): mounted with root inode @ nid 36.
[  195.817541][ T9343] erofs (device loop3): inconsistent algorithmtype 0 for nid 36
[  195.820960][ T9343] erofs (device loop3): inconsistent algorithmtype 0 for nid 36
[  195.824148][ T9343] erofs (device loop3): read error -117 @ 72 of nid 36
[  196.006849][ T9357] loop4: detected capacity change from 0 to 64
[  196.184879][ T5901] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  196.340262][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  196.344701][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  196.348869][ T5901] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  196.352424][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.358275][ T5901] usb 4-1: config 0 descriptor??
[  196.360717][ T9353] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  196.366109][ T5901] hub 4-1:0.0: USB hub found
[  196.577543][ T5901] hub 4-1:0.0: 2 ports detected
[  196.778897][ T5901] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  196.784314][ T5901] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  196.798280][ T5901] usbhid 4-1:0.0: can't add hid device: -71
[  196.805151][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  196.830863][ T5901] usb 4-1: USB disconnect, device number 14
[  196.954034][ T9370] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  197.119173][ T9379] loop1: detected capacity change from 0 to 1024
[  197.122788][ T9379] EXT4-fs: Ignoring removed bh option
[  197.127126][ T9379] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  197.143256][ T9379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.161262][ T9379] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.1396: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  197.177409][ T9379] EXT4-fs (loop1): Remounting filesystem read-only
[  197.208971][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.346425][ T9386] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  198.833924][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'.
[  200.026229][ T9445] proc: Bad value for 'gid'
[  201.706491][ T9464] netlink: 'syz.1.1431': attribute type 1 has an invalid length.
[  201.714979][ T9464] netlink: 'syz.1.1431': attribute type 1 has an invalid length.
[  201.838179][ T9467] loop3: detected capacity change from 0 to 4096
[  202.241252][ T9478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  202.261347][ T9480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1438'.
[  202.274183][ T9480] vlan2: entered promiscuous mode
[  202.277495][ T9480] gretap0: entered promiscuous mode
[  202.875664][ T5901] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  203.025026][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  203.028903][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short
[  203.034203][ T5901] usb 4-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0
[  203.038200][ T5901] usb 4-1: config 12 interface 0 has no altsetting 0
[  203.042802][ T5901] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  203.049121][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.052007][ T5901] usb 4-1: Product: syz
[  203.053451][ T5901] usb 4-1: Manufacturer: syz
[  203.055203][ T5901] usb 4-1: SerialNumber: syz
[  203.285384][ T5901] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  203.287885][ T5901] usb 4-1: selecting invalid altsetting 0
[  203.318056][ T5901] usb 4-1: USB disconnect, device number 15
[  203.431210][ T5886] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  203.615338][ T5886] usb 2-1: Using ep0 maxpacket: 8
[  203.713200][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  203.721551][ T5886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  203.730209][ T5886] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  203.734013][ T5886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.738230][ T5886] usb 2-1: Product: syz
[  203.742248][ T5886] usb 2-1: Manufacturer: syz
[  203.746464][ T5886] usb 2-1: SerialNumber: syz
[  203.751328][ T5886] usb 2-1: config 0 descriptor??
[  203.954200][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1452'.
[  204.186337][ T5315] usb 2-1: USB disconnect, device number 19
[  205.385814][ T9535] loop1: detected capacity change from 0 to 32768
[  205.399608][ T9535] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  205.447514][ T9535] (syz.1.1462,9535,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  205.509211][ T5847] ocfs2: Unmounting device (7,1) on (node local)
[  206.670929][ T9566] netlink: 'syz.3.1475': attribute type 1 has an invalid length.
[  206.862744][ T9568] netlink: 'syz.3.1476': attribute type 46 has an invalid length.
[  206.866088][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1476'.
[  207.137008][ T9582] loop3: detected capacity change from 0 to 128
[  207.149324][ T9582] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  207.154346][ T9582] ext4 filesystem being mounted at /318/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  207.334739][ T9586] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1483'.
[  208.122382][ T9588] fscrypt (loop3, inode 12): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))")
[  208.151077][ T9588] fscrypt (loop3, inode 12): Error allocating 'cts(cbc(aes))' transform: -4
[  208.190272][ T7169] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  208.665004][ T9615] loop1: detected capacity change from 0 to 32768
[  209.050815][ T9615] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  209.050839][ T9615]   allowing incompatible features above 0.0: (unknown version)
[  209.050848][ T9615]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  209.069117][ T9615] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  209.072435][ T9615] bcachefs (loop1): initializing new filesystem
[  209.083394][ T9615] bcachefs (loop1): going read-write
[  209.094982][ T9615] bcachefs (loop1): marking superblocks
[  209.103383][ T9615] bcachefs (loop1): initializing freespace
[  209.109078][ T9615] bcachefs (loop1): done initializing freespace
[  209.113689][ T9615] bcachefs (loop1): reading snapshots table
[  209.116276][ T9615] bcachefs (loop1): reading snapshots done
[  209.154057][ T9615] bcachefs (loop1): done starting filesystem
[  209.573003][ T5237] Bluetooth: hci0: Ignoring connect complete event for invalid link type
[  209.845366][ T5847] bcachefs (loop1): shutting down
[  209.847685][ T5847] bcachefs (loop1): going read-only
[  209.849548][ T5847] bcachefs (loop1): finished waiting for writes to stop
[  209.852499][ T5847] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  209.883944][ T5847] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  209.888953][ T5847] bcachefs (loop1): clean shutdown complete, journal seq 5
[  209.891830][ T5847] bcachefs (loop1): marking filesystem clean
[  209.914257][ T5847] bcachefs (loop1): shutdown complete
[  210.004449][ T9661] loop3: detected capacity change from 0 to 512
[  210.007585][ T9661] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  211.052520][ T9667] netlink: 'syz.3.1504': attribute type 32 has an invalid length.
[  211.378861][ T9680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1497'.
[  211.427487][ T9686] loop3: detected capacity change from 0 to 1024
[  211.451901][ T9688] loop1: detected capacity change from 0 to 256
[  211.460312][ T9688] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  211.496498][ T9686] loop3: detected capacity change from 1024 to 0
[  211.523710][    C0] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 2
[  211.527261][    C0] buffer_io_error: 10225 callbacks suppressed
[  211.527277][    C0] Buffer I/O error on dev loop3, logical block 4, lost async page write
[  211.533143][    C0] I/O error, dev loop3, sector 14 op 0x1:(WRITE) flags 0x800 phys_seg 19 prio class 2
[  211.536742][    C0] Buffer I/O error on dev loop3, logical block 7, lost async page write
[  211.540066][    C0] Buffer I/O error on dev loop3, logical block 8, lost async page write
[  211.542981][    C0] Buffer I/O error on dev loop3, logical block 9, lost async page write
[  211.546356][    C0] Buffer I/O error on dev loop3, logical block 70, lost async page write
[  211.549691][    C0] I/O error, dev loop3, sector 144 op 0x1:(WRITE) flags 0x800 phys_seg 10 prio class 2
[  211.553917][    C0] Buffer I/O error on dev loop3, logical block 72, lost async page write
[  211.557443][    C0] Buffer I/O error on dev loop3, logical block 73, lost async page write
[  211.560804][    C0] Buffer I/O error on dev loop3, logical block 74, lost async page write
[  211.564197][    C0] Buffer I/O error on dev loop3, logical block 91, lost async page write
[  211.567727][    C0] Buffer I/O error on dev loop3, logical block 92, lost async page write
[  211.571245][    C0] I/O error, dev loop3, sector 192 op 0x1:(WRITE) flags 0x800 phys_seg 6 prio class 2
[  211.575095][    C0] I/O error, dev loop3, sector 520 op 0x1:(WRITE) flags 0x800 phys_seg 8 prio class 2
[  211.579059][    C0] I/O error, dev loop3, sector 570 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  211.582879][    C0] I/O error, dev loop3, sector 574 op 0x1:(WRITE) flags 0x800 phys_seg 7 prio class 2
[  211.586770][    C0] I/O error, dev loop3, sector 634 op 0x1:(WRITE) flags 0x800 phys_seg 8 prio class 2
[  211.647407][ T1088] hfsplus: b-tree write err: -5, ino 3
[  211.651142][    C0] I/O error, dev loop3, sector 6 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  211.654925][    C0] I/O error, dev loop3, sector 198 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2
[  212.312601][ T5899] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.537015][ T5899] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.579160][ T9701] loop4: detected capacity change from 0 to 512
[  212.610065][ T9701] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1518: bg 0: block 5: invalid block bitmap
[  212.621073][ T5899] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.633921][ T9701] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  212.639323][ T9701] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1518: invalid indirect mapped block 4294967295 (level 1)
[  212.645535][ T9701] EXT4-fs (loop4): 1 orphan inode deleted
[  212.647624][ T9701] EXT4-fs (loop4): 1 truncate cleaned up
[  212.651406][ T9701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.659777][ T9701] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz.4.1518: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  212.689822][ T9701] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  212.724969][ T5899] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.736972][ T8413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.786818][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  212.791582][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  212.888900][ T5899] bridge_slave_1: left allmulticast mode
[  212.896700][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  212.900080][ T5899] bridge_slave_1: left promiscuous mode
[  212.903698][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.913552][ T5899] bridge_slave_0: left allmulticast mode
[  212.922984][ T5899] bridge_slave_0: left promiscuous mode
[  212.934644][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  212.938124][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  212.964277][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.311455][ T9724] loop1: detected capacity change from 0 to 8192
[  214.318056][ T9724] msdos: Unknown parameter ''
[  214.547900][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.554284][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.560415][ T5899] bond0 (unregistering): Released all slaves
[  214.754666][ T5899] tipc: Disabling bearer <eth:team0>
[  214.759326][ T5899] tipc: Left network mode
[  215.036779][ T5858] Bluetooth: hci1: command tx timeout
[  215.068628][ T9707] chnl_net:caif_netlink_parms(): no params data found
[  215.206174][ T5899] hsr_slave_0: left promiscuous mode
[  215.208760][ T5899] hsr_slave_1: left promiscuous mode
[  215.210962][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  215.213239][ T9753] loop4: detected capacity change from 0 to 256
[  215.213623][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0
[  215.226736][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  215.229246][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1
[  215.230112][ T9753] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  215.252240][ T5899] veth1_macvtap: left promiscuous mode
[  215.254275][ T5899] veth0_macvtap: left promiscuous mode
[  215.258305][ T5899] veth1_vlan: left promiscuous mode
[  215.260437][ T5899] veth0_vlan: left promiscuous mode
[  215.686954][ T9761] loop4: detected capacity change from 0 to 32768
[  215.720918][ T9761] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  215.745643][ T9761] ocfs2: Unmounting device (7,4) on (node local)
[  216.196905][ T5899] team0 (unregistering): Port device team_slave_1 removed
[  216.243064][ T5899] team0 (unregistering): Port device team_slave_0 removed
[  216.938228][ T9707] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.952352][ T9707] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.962305][ T9707] bridge_slave_0: entered allmulticast mode
[  216.983586][ T9707] bridge_slave_0: entered promiscuous mode
[  216.989540][ T9782] loop1: detected capacity change from 0 to 512
[  216.990810][ T9707] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.994761][ T9707] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.997653][ T9707] bridge_slave_1: entered allmulticast mode
[  217.001721][ T9707] bridge_slave_1: entered promiscuous mode
[  217.006646][ T9782] EXT4-fs: Ignoring removed orlov option
[  217.015812][ T9782] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  217.039198][ T9782] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  217.063006][ T9782] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1546: corrupted in-inode xattr: e_value size too large
[  217.081872][ T9782] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1546: couldn't read orphan inode 15 (err -117)
[  217.089411][ T9782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.090673][ T9707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.113732][ T9707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.118940][ T5858] Bluetooth: hci1: command tx timeout
[  217.180824][ T9782] overlayfs: upper fs needs to support d_type.
[  217.218531][ T9707] team0: Port device team_slave_0 added
[  217.239886][ T9707] team0: Port device team_slave_1 added
[  217.288349][ T5847] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  217.306710][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.309413][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.311304][ T5847] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  217.323596][ T9707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.340630][ T9707] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.343613][ T9707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.389624][ T9707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.392583][ T9587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.489285][ T9707] hsr_slave_0: entered promiscuous mode
[  217.492502][ T9707] hsr_slave_1: entered promiscuous mode
[  217.500400][ T9707] debugfs: 'hsr0' already exists in 'hsr'
[  217.502638][ T9707] Cannot create hsr debugfs directory
[  217.712268][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.718915][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  217.807439][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.811161][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  217.927623][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.931781][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  217.957731][ T9707] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  217.971447][ T9707] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  218.029118][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.033286][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  218.047028][ T9707] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  218.057419][ T9707] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  218.137596][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  218.149950][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  218.155584][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  218.162578][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  218.168252][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  218.422897][   T12] bridge_slave_1: left allmulticast mode
[  218.426450][   T12] bridge_slave_1: left promiscuous mode
[  218.429681][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.442581][   T12] bridge_slave_0: left allmulticast mode
[  218.445381][   T12] bridge_slave_0: left promiscuous mode
[  218.448308][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.868386][   T12] batman_adv: batadv0: Removing interface: geneve3
[  218.895212][   T12] bond1 (unregistering): (slave geneve2): Releasing active interface
[  219.179833][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.190573][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.194768][ T5237] Bluetooth: hci1: command tx timeout
[  219.199329][   T12] bond0 (unregistering): Released all slaves
[  219.396020][   T12] bond1 (unregistering): Released all slaves
[  219.625395][   T12] bond2 (unregistering): Released all slaves
[  219.661870][   T12] bond3 (unregistering): Released all slaves
[  219.863819][   T12] tipc: Disabling bearer <udp:syz0>
[  219.872206][   T12] tipc: Left network mode
[  220.073004][ T9707] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.192272][ T9707] 8021q: adding VLAN 0 to HW filter on device team0
[  220.234961][ T5237] Bluetooth: hci0: command tx timeout
[  220.243961][   T12] hsr_slave_0: left promiscuous mode
[  220.251190][   T12] hsr_slave_1: left promiscuous mode
[  220.254088][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.259295][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.263075][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.271334][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.290872][   T12] veth1_macvtap: left promiscuous mode
[  220.293332][   T12] veth0_macvtap: left promiscuous mode
[  220.744118][   T12] team0 (unregistering): Port device team_slave_1 removed
[  220.799494][   T12] team0 (unregistering): Port device C removed
[  221.276214][ T5237] Bluetooth: hci1: command tx timeout
[  221.354489][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.357603][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.480595][ T1185] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.483941][ T1185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.511036][ T9838] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1566'.
[  221.592222][ T9815] chnl_net:caif_netlink_parms(): no params data found
[  221.776095][   T12] IPVS: stop unused estimator thread 0...
[  221.858857][ T9815] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.861902][ T9815] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.868991][ T9815] bridge_slave_0: entered allmulticast mode
[  221.872900][ T9815] bridge_slave_0: entered promiscuous mode
[  221.879657][ T9815] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.882771][ T9815] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.885733][ T9853] netlink: 'syz.4.1571': attribute type 4 has an invalid length.
[  221.892940][ T9815] bridge_slave_1: entered allmulticast mode
[  221.897458][ T9815] bridge_slave_1: entered promiscuous mode
[  221.912299][ T9853] netlink: 'syz.4.1571': attribute type 4 has an invalid length.
[  221.964078][ T9815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.972385][ T9815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.016980][ T9815] team0: Port device team_slave_0 added
[  222.023849][ T9857] tipc: Failed to remove unknown binding: 66,1,1/0:1819744262/1819744264
[  222.030192][ T9857] tipc: Failed to remove unknown binding: 66,1,1/0:1819744262/1819744264
[  222.037032][ T9815] team0: Port device team_slave_1 added
[  222.043657][ T9707] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.107609][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.110453][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.122633][ T9815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.137958][ T9815] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.140892][ T9815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.154296][ T9815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.243202][ T9867] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  222.249031][ T9867] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  222.260010][ T9867] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  222.272914][ T9815] hsr_slave_0: entered promiscuous mode
[  222.279593][ T9815] hsr_slave_1: entered promiscuous mode
[  222.317178][ T5237] Bluetooth: hci0: command tx timeout
[  222.491791][ T9707] veth0_vlan: entered promiscuous mode
[  222.527181][ T9707] veth1_vlan: entered promiscuous mode
[  222.574396][ T9815] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  222.580253][ T9815] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  222.586372][ T9815] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  222.593664][ T9815] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  222.613450][ T9707] veth0_macvtap: entered promiscuous mode
[  222.623906][ T9707] veth1_macvtap: entered promiscuous mode
[  222.647648][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.661173][ T9707] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.671694][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.679180][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.683164][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.689130][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.780085][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.781987][ T9815] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.783160][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.818736][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.822129][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.831587][ T9815] 8021q: adding VLAN 0 to HW filter on device team0
[  222.843492][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.846408][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.858728][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.861113][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.894940][ T9815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  222.898276][ T9815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  222.985940][ T9887] loop5: detected capacity change from 0 to 1024
[  223.023266][ T9887] hfsplus: found bad thread record in catalog
[  223.023934][ T9815] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.051013][ T1088] hfsplus: found bad thread record in catalog
[  223.057561][ T1088] hfsplus: found bad thread record in catalog
[  223.095400][ T9893] netlink: 'syz.5.1579': attribute type 34 has an invalid length.
[  223.185122][ T9897] loop5: detected capacity change from 0 to 16
[  223.190169][ T9897] erofs (device loop5): mounted with root inode @ nid 36.
[  223.201391][ T9897] overlay: filesystem on ./file1 is read-only
[  223.209575][ T9897] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  223.329266][ T9815] veth0_vlan: entered promiscuous mode
[  223.355764][ T9815] veth1_vlan: entered promiscuous mode
[  223.407957][ T9815] veth0_macvtap: entered promiscuous mode
[  223.417698][ T9815] veth1_macvtap: entered promiscuous mode
[  223.446578][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.488107][ T9815] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.498979][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.567033][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.591967][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.619373][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.709685][ T9913] loop4: detected capacity change from 0 to 16
[  223.728215][ T9913] erofs (device loop4): mounted with root inode @ nid 36.
[  223.752567][ T9317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.760455][ T9317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.782354][ T9317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.786010][ T9317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.889656][ T9920] loop5: detected capacity change from 0 to 64
[  223.905932][ T9920] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  224.053585][ T9926] loop5: detected capacity change from 0 to 128
[  224.117970][ T9926] qnx6: superblock #1 checksum error
[  224.201538][ T9934] Option '    ' to dns_resolver key: bad/missing value
[  224.396386][ T5237] Bluetooth: hci0: command tx timeout
[  224.520390][ T9939] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1596'.
[  224.676449][ T9945] loop6: detected capacity change from 0 to 2048
[  224.703189][ T9945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.721406][ T9945] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz.6.1599: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  224.737815][ T9945] EXT4-fs (loop6): Remounting filesystem read-only
[  224.793735][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.944813][   T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  225.118872][   T24] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  225.122745][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.129034][   T24] usb 6-1: config 0 descriptor??
[  225.133620][   T24] cp210x 6-1:0.0: cp210x converter detected
[  225.340895][   T24] usb 6-1: cp210x converter now attached to ttyUSB0
[  225.540777][    T9] usb 6-1: USB disconnect, device number 2
[  225.549161][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  225.553188][    T9] cp210x 6-1:0.0: device disconnected
[  225.797745][ T9959] loop4: detected capacity change from 0 to 128
[  225.806173][ T9959] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  225.811415][ T9959] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.823674][ T9959] EXT4-fs (loop4): shut down requested (2)
[  225.826453][ T9959] syz.4.1604 (pid 9959) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  225.849788][ T8413] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  226.389564][ T9976] ieee802154 phy0 wpan0: encryption failed: -22
[  226.474977][ T5237] Bluetooth: hci0: command tx timeout
[  227.281548][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1614'.
[  227.285237][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'.
[  227.311579][ T9989] macsec2: entered promiscuous mode
[  227.313749][ T9989] macsec2: entered allmulticast mode
[  227.316137][ T9989] gretap0: entered allmulticast mode
[  227.664705][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  227.935169][    T9] usb 6-1: Using ep0 maxpacket: 32
[  227.947144][    T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.4d
[  227.951117][    T9] usb 6-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0
[  227.954387][    T9] usb 6-1: Product: syz
[  227.966470][    T9] usb 6-1: config 0 descriptor??
[  227.969905][ T9994] loop4: detected capacity change from 0 to 128
[  227.977249][ T9994] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  227.982060][ T9994] hpfs: filesystem error: improperly stopped
[  227.985171][ T9994] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  227.988392][ T9994] hpfs: You really don't want any checks? You are crazy...
[  227.991489][ T9994] hpfs: hpfs_map_sector(): read error
[  227.993690][ T9994] hpfs: code page support is disabled
[  228.001009][ T9991] loop6: detected capacity change from 0 to 4096
[  228.006596][ T9994] hpfs: hpfs_map_4sectors(): unaligned read
[  228.009094][ T9994] hpfs: hpfs_map_4sectors(): unaligned read
[  228.011444][ T9994] hpfs: filesystem error: unable to find root dir
[  228.029341][ T9994] hpfs: hpfs_map_4sectors(): unaligned read
[  228.037381][ T9994] hpfs: hpfs_map_sector(): read error
[  228.039711][ T9994] hpfs: hpfs_map_sector(): read error
[  228.177500][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  228.185402][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  228.192661][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  228.196428][    T9] usb 6-1: media controller created
[  228.220470][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  228.285490][T10007] loop6: detected capacity change from 0 to 1024
[  228.345755][T10009] loop6: detected capacity change from 0 to 64
[  228.383842][    T9] az6027: usb out operation failed. (-71)
[  228.391195][    T9] az6027: usb out operation failed. (-71)
[  228.393633][    T9] stb0899_attach: Driver disabled by Kconfig
[  228.397483][    T9] az6027: no front-end attached
[  228.397483][    T9] 
[  228.402400][    T9] az6027: usb out operation failed. (-71)
[  228.404794][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  228.409889][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12
[  228.568161][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  228.571607][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  228.576701][    T9] usb 6-1: USB disconnect, device number 3
[  228.621921][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  229.157287][T10015] loop5: detected capacity change from 0 to 128
[  229.168121][T10015] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  229.172634][T10015] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  229.229926][ T9707] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.433221][T10029] loop5: detected capacity change from 0 to 512
[  229.440495][T10029] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1632: casefold flag without casefold feature
[  229.450636][T10029] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1632: couldn't read orphan inode 15 (err -117)
[  229.457367][T10029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.673897][ T9707] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.751697][T10032] loop6: detected capacity change from 0 to 32768
[  229.758553][T10032] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section members_v2: device 0: too many buckets (got 18446744069414584448, max 2147483583)
[  229.758553][T10032] members_v2 (size 152):
[  229.758553][T10032] Device:                        0
[  229.758553][T10032]   Label:                       (none)
[  229.758553][T10032]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  229.758553][T10032]   Size:                        18306589330693881856
[  229.758553][T10032]   read errors:                 0
[  229.758553][T10032]   write errors:                0
[  229.758553][T10032]   checksum errors:             0
[  229.758553][T10032]   seqread iops:                0
[  229.758553][T10032]   seqwrite iops:               0
[  229.758553][T10032]   randread iops:               0
[  229.758553][T10032]   randwrite iops:              0
[  229.758553][T10032]   Bucket size:                 32632320
[  229.758553][T10032]   First bucket:                65535
[  229.758553][T10032]   Buckets:                     18446744069414584448
[  229.758553][T10032]   Last mount:                  1714681267
[  229.758553][T10032]   Last superblock write:       42
[  229.758553][T10032]   State:                       rw
[  229.758553][T10032]   Data allowed:                journal,btree,user
[  229.758553][T10032]   Has data:                    journal,btree,user
[  229.758553][T10032]   Btree allocated bitmap blocksize:256
[  229.758553][T10032]   Btree allocated bitmap:      000000
[  229.758688][T10032] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  230.127160][T10052] loop5: detected capacity change from 0 to 2048
[  230.133115][T10052] NILFS (loop5): too small inode size: 0 bytes
[  230.150604][T10056] loop6: detected capacity change from 0 to 128
[  230.159472][T10056] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  230.249247][T10060] loop5: detected capacity change from 0 to 2048
[  230.259566][T10060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  230.683347][T10064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1647'.
[  231.254689][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  231.440919][   T24] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  231.444732][   T24] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  231.448338][   T24] usb 6-1: config 220 has an invalid descriptor of length 184, skipping remainder of the config
[  231.452577][   T24] usb 6-1: config 220 has no interface number 2
[  231.455639][   T24] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  231.461256][   T24] usb 6-1: config 220 interface 0 has no altsetting 0
[  231.463953][   T24] usb 6-1: config 220 interface 76 has no altsetting 0
[  231.466921][   T24] usb 6-1: config 220 interface 1 has no altsetting 0
[  231.477646][   T24] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  231.481430][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.485080][   T24] usb 6-1: Product: syz
[  231.486994][   T24] usb 6-1: Manufacturer: syz
[  231.489098][   T24] usb 6-1: SerialNumber: syz
[  231.580832][T10104] loop6: detected capacity change from 0 to 47
[  231.713745][   T24] usb 6-1: selecting invalid altsetting 0
[  231.718116][   T24] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  231.728783][   T24] usb 6-1: No valid video chain found.
[  231.749101][   T24] usb 6-1: selecting invalid altsetting 0
[  231.751364][   T24] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  231.754226][ T1273] IPVS: starting estimator thread 0...
[  231.768429][   T24] usb 6-1: USB disconnect, device number 4
[  231.847177][T10112] IPVS: using max 36 ests per chain, 86400 per kthread
[  233.015556][T10129] loop6: detected capacity change from 0 to 32768
[  233.018996][T10129] XFS: noikeep mount option is deprecated.
[  233.027368][T10129] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  233.059525][T10129] XFS (loop6): Ending clean mount
[  233.069852][T10129] XFS (loop6): Quotacheck needed: Please wait.
[  233.104929][T10129] XFS (loop6): Quotacheck: Done.
[  233.138511][ T9815] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  233.342916][T10141] loop5: detected capacity change from 0 to 4096
[  233.348904][T10141] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  233.361673][T10141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.401242][ T9707] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.656298][T10165] tmpfs: Bad value for 'nr_blocks'
[  233.826634][T10180] loop5: detected capacity change from 0 to 128
[  233.829825][T10180] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  233.834180][T10180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  233.946690][T10186] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  234.116688][T10193] loop5: detected capacity change from 0 to 4096
[  234.121255][T10193] ntfs3(loop5): It is recommened to use chkdsk.
[  234.124503][T10193] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  234.127869][T10193] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  234.131348][T10193] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  234.134843][T10193] ntfs3(loop5): try to read out of volume at offset 0x3fffffc0c00
[  234.138145][T10193] ntfs3(loop5): try to read out of volume at offset 0x3fffffc1c00
[  234.141630][T10193] ntfs3(loop5): try to read out of volume at offset 0x3fffffc2c00
[  234.145260][T10193] ntfs3(loop5): try to read out of volume at offset 0x3fffffc4c00
[  234.148312][T10193] ntfs3(loop5): try to read out of volume at offset 0x3fffffc8c00
[  234.151471][T10193] ntfs3(loop5): try to read out of volume at offset 0x3fffffd0c00
[  235.142206][T10215] netlink: 'syz.4.1710': attribute type 1 has an invalid length.
[  235.186963][T10215] 8021q: adding VLAN 0 to HW filter on device bond1
[  235.258561][T10215] bond1: (slave ip6erspan0): making interface the new active one
[  235.262620][T10215] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  235.660632][T10223] loop4: detected capacity change from 0 to 32768
[  235.887520][T10240] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1720'.
[  235.907361][T10242] loop5: detected capacity change from 0 to 128
[  235.912906][T10242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  235.919448][T10242] System zones: 1-3, 19-19, 35-36
[  235.923021][T10242] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  235.929010][T10242] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  235.936629][T10242] EXT4-fs warning (device loop5): ext4_group_extend:1886: will only finish group (8193 blocks, 8129 new)
[  235.941971][T10242] EXT4-fs warning (device loop5): ext4_group_extend:1891: can't read last block, resize aborted
[  235.960028][ T9707] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  236.242320][T10257] loop5: detected capacity change from 0 to 1024
[  236.286965][ T9317] hfsplus: b-tree write err: -5, ino 4
[  237.168769][    C0] hrtimer: interrupt took 28972 ns
[  237.280857][T10273] loop4: detected capacity change from 0 to 64
[  237.530226][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'.
[  237.540151][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'.
[  237.710587][T10271] loop6: detected capacity change from 0 to 40427
[  237.716937][T10271] F2FS-fs (loop6): build fault injection rate: 771
[  237.721283][T10271] F2FS-fs (loop6): invalid crc value
[  238.026759][T10284] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[  238.029124][T10284] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  238.034207][T10284] vhci_hcd vhci_hcd.0: Device attached
[  238.087133][T10271] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  238.099333][T10271] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  238.103740][T10286] vhci_hcd: connection closed
[  238.113435][ T5899] vhci_hcd: stop threads
[  238.118968][ T5899] vhci_hcd: release socket
[  238.120747][   T33] audit: type=1800 audit(1759038944.706:481): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1733" name="file1" dev="loop6" ino=10 res=0 errno=0
[  238.128266][ T5899] vhci_hcd: disconnect device
[  238.157734][ T9815] bio_check_eod: 177 callbacks suppressed
[  238.157747][ T9815] syz-executor: attempt to access beyond end of device
[  238.157747][ T9815] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  238.172871][ T9815] CPU: 0 UID: 0 PID: 9815 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  238.172892][ T9815] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.172916][ T9815] Call Trace:
[  238.172922][ T9815]  <TASK>
[  238.172928][ T9815]  dump_stack_lvl+0x189/0x250
[  238.172951][ T9815]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.172966][ T9815]  ? __pfx_queue_work_on+0x10/0x10
[  238.172978][ T9815]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  238.172997][ T9815]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  238.173023][ T9815]  f2fs_handle_critical_error+0x37c/0x540
[  238.173047][ T9815]  f2fs_write_end_io+0x886/0xb60
[  238.173073][ T9815]  __submit_merged_bio+0x27a/0x6a0
[  238.173095][ T9815]  __submit_merged_write_cond+0x255/0x530
[  238.173117][ T9815]  f2fs_write_data_pages+0x261d/0x3000
[  238.173153][ T9815]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  238.173206][ T9815]  ? folios_put_refs+0x559/0x640
[  238.173229][ T9815]  ? __lock_acquire+0xab9/0xd20
[  238.173252][ T9815]  ? do_raw_spin_lock+0x121/0x290
[  238.173275][ T9815]  ? do_raw_spin_unlock+0x4d/0x240
[  238.173290][ T9815]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  238.173303][ T9815]  do_writepages+0x32e/0x550
[  238.173327][ T9815]  ? do_raw_spin_unlock+0x4d/0x240
[  238.173344][ T9815]  filemap_fdatawrite+0x199/0x240
[  238.173361][ T9815]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  238.173433][ T9815]  ? do_raw_spin_unlock+0x4d/0x240
[  238.173452][ T9815]  f2fs_sync_dirty_inodes+0x31f/0x830
[  238.173476][ T9815]  f2fs_write_checkpoint+0x95a/0x1df0
[  238.173507][ T9815]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  238.173550][ T9815]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  238.173562][ T9815]  ? kfree+0x18e/0x440
[  238.173578][ T9815]  ? kill_f2fs_super+0x298/0x6c0
[  238.173595][ T9815]  kill_f2fs_super+0x2c3/0x6c0
[  238.173612][ T9815]  ? __pfx_kill_f2fs_super+0x10/0x10
[  238.173624][ T9815]  ? radix_tree_delete_item+0x2b6/0x400
[  238.173642][ T9815]  ? shrinker_free+0x2ce/0x3e0
[  238.173658][ T9815]  deactivate_locked_super+0xbc/0x130
[  238.173674][ T9815]  cleanup_mnt+0x425/0x4c0
[  238.173688][ T9815]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.173703][ T9815]  task_work_run+0x1d4/0x260
[  238.173722][ T9815]  ? __pfx_task_work_run+0x10/0x10
[  238.173736][ T9815]  ? __x64_sys_umount+0x122/0x160
[  238.173756][ T9815]  ? exit_to_user_mode_loop+0x40/0x110
[  238.173776][ T9815]  exit_to_user_mode_loop+0xec/0x110
[  238.173793][ T9815]  do_syscall_64+0x2bd/0x3b0
[  238.173806][ T9815]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.173818][ T9815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.173830][ T9815]  ? exc_page_fault+0x9f/0xf0
[  238.173844][ T9815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.173856][ T9815] RIP: 0033:0x7fa386d8ff57
[  238.173873][ T9815] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  238.173884][ T9815] RSP: 002b:00007ffdbc2a8438 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  238.173898][ T9815] RAX: 0000000000000000 RBX: 00007fa386e11c2d RCX: 00007fa386d8ff57
[  238.173907][ T9815] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbc2a84f0
[  238.173914][ T9815] RBP: 00007ffdbc2a84f0 R08: 0000000000000000 R09: 0000000000000000
[  238.173922][ T9815] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbc2a9580
[  238.173929][ T9815] R13: 00007fa386e11c2d R14: 000000000003a1c4 R15: 00007ffdbc2a95c0
[  238.173950][ T9815]  </TASK>
[  238.173956][ T9815] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  238.426648][T10292] loop5: detected capacity change from 0 to 40427
[  238.430987][T10292] F2FS-fs (loop5): invalid crc value
[  238.463471][T10292] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  238.472129][T10292] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  238.504503][ T9707] syz-executor: attempt to access beyond end of device
[  238.504503][ T9707] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  238.510101][ T9707] CPU: 1 UID: 0 PID: 9707 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  238.510120][ T9707] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.510129][ T9707] Call Trace:
[  238.510135][ T9707]  <TASK>
[  238.510142][ T9707]  dump_stack_lvl+0x189/0x250
[  238.510167][ T9707]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.510183][ T9707]  ? __pfx_queue_work_on+0x10/0x10
[  238.510196][ T9707]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  238.510217][ T9707]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  238.510248][ T9707]  f2fs_handle_critical_error+0x37c/0x540
[  238.510275][ T9707]  f2fs_write_end_io+0x886/0xb60
[  238.510307][ T9707]  __submit_merged_bio+0x27a/0x6a0
[  238.510332][ T9707]  __submit_merged_write_cond+0x255/0x530
[  238.510384][ T9707]  f2fs_write_data_pages+0x261d/0x3000
[  238.510430][ T9707]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  238.510496][ T9707]  ? folios_put_refs+0x559/0x640
[  238.510524][ T9707]  ? __lock_acquire+0xab9/0xd20
[  238.510552][ T9707]  ? do_raw_spin_lock+0x121/0x290
[  238.510576][ T9707]  ? do_raw_spin_unlock+0x4d/0x240
[  238.510592][ T9707]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  238.510605][ T9707]  do_writepages+0x32e/0x550
[  238.510633][ T9707]  ? do_raw_spin_unlock+0x4d/0x240
[  238.510653][ T9707]  filemap_fdatawrite+0x199/0x240
[  238.510671][ T9707]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  238.510732][ T9707]  ? do_raw_spin_unlock+0x4d/0x240
[  238.510753][ T9707]  f2fs_sync_dirty_inodes+0x31f/0x830
[  238.510781][ T9707]  f2fs_write_checkpoint+0x95a/0x1df0
[  238.510819][ T9707]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  238.510884][ T9707]  ? kill_f2fs_super+0x298/0x6c0
[  238.510905][ T9707]  kill_f2fs_super+0x2c3/0x6c0
[  238.510926][ T9707]  ? __pfx_kill_f2fs_super+0x10/0x10
[  238.510938][ T9707]  ? radix_tree_delete_item+0x2b6/0x400
[  238.510960][ T9707]  ? shrinker_free+0x2ce/0x3e0
[  238.511001][ T9707]  deactivate_locked_super+0xbc/0x130
[  238.511022][ T9707]  cleanup_mnt+0x425/0x4c0
[  238.511038][ T9707]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.511055][ T9707]  task_work_run+0x1d4/0x260
[  238.511077][ T9707]  ? __pfx_task_work_run+0x10/0x10
[  238.511092][ T9707]  ? __x64_sys_umount+0x122/0x160
[  238.511115][ T9707]  ? exit_to_user_mode_loop+0x40/0x110
[  238.511138][ T9707]  exit_to_user_mode_loop+0xec/0x110
[  238.511157][ T9707]  do_syscall_64+0x2bd/0x3b0
[  238.511172][ T9707]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.511185][ T9707]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.511199][ T9707]  ? exc_page_fault+0x9f/0xf0
[  238.511214][ T9707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.511228][ T9707] RIP: 0033:0x7fc03118ff57
[  238.511241][ T9707] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  238.511253][ T9707] RSP: 002b:00007fff3a392a88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  238.511268][ T9707] RAX: 0000000000000000 RBX: 00007fc031211c2d RCX: 00007fc03118ff57
[  238.511277][ T9707] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3a392b40
[  238.511285][ T9707] RBP: 00007fff3a392b40 R08: 0000000000000000 R09: 0000000000000000
[  238.511293][ T9707] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3a393bd0
[  238.511302][ T9707] R13: 00007fc031211c2d R14: 000000000003a316 R15: 00007fff3a393c10
[  238.511328][ T9707]  </TASK>
[  238.511334][ T9707] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  238.582633][T10298] loop6: detected capacity change from 0 to 4096
[  238.638519][T10298] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  238.829263][T10302] openvswitch: netlink: Missing valid actions attribute.
[  238.831606][T10302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.044367][T10318] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1750'.
[  239.583249][T10356] vxcan1: entered allmulticast mode
[  239.591311][T10356] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check.
[  239.642212][T10358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1768'.
[  239.743011][T10352] loop4: detected capacity change from 0 to 32768
[  239.766646][T10352] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  239.802404][ T8413] ocfs2: Unmounting device (7,4) on (node local)
[  240.077202][T10368] block nbd0: server does not support multiple connections per device.
[  240.085821][T10368] block nbd0: shutting down sockets
[  241.415022][T10394] loop4: detected capacity change from 0 to 4096
[  241.419956][T10394] ntfs3: Invalid value for fmask.
[  241.880832][T10408] loop5: detected capacity change from 0 to 1024
[  241.970279][T10414] ieee802154 phy0 wpan0: encryption failed: -22
[  242.130061][T10424] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  242.200533][T10431] loop4: detected capacity change from 0 to 512
[  242.204500][T10431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  242.235079][T10431] EXT4-fs (loop4): 1 truncate cleaned up
[  242.264502][T10431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.301824][T10439] tipc: Failed to remove unknown binding: 66,1,1/0:4171984908/4171984910
[  242.307995][T10439] tipc: Failed to remove unknown binding: 66,1,1/0:4171984908/4171984910
[  242.374484][ T8413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.515265][ T1273] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  242.685505][ T1273] usb 6-1: Using ep0 maxpacket: 32
[  242.698542][ T1273] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.701992][ T1273] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11
[  242.718566][ T1273] usb 6-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  242.728824][ T1273] usb 6-1: config 0 interface 0 has no altsetting 0
[  242.731313][ T1273] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  242.739117][ T1273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.749888][ T1273] usb 6-1: config 0 descriptor??
[  243.251373][T10446] comedi comedi1: 8255: I/O port conflict (0x5,4)
[  243.254122][T10446] comedi comedi1: 8255: I/O port conflict (0xfffffffffff7ffff,4)
[  243.543571][ T1273] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[  243.583052][T10453] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  243.652133][T10457] loop6: detected capacity change from 0 to 1024
[  243.656840][T10457] EXT4-fs: Ignoring removed mblk_io_submit option
[  243.660345][T10457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  243.664327][T10457] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  243.672303][T10457] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.1812: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  243.683253][T10457] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1812: couldn't read orphan inode 11 (err -117)
[  243.694326][T10457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.704335][T10463] cgroup: Unknown subsys name 'cpuset'
[  243.733059][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.737428][ T1273] hid-thrustmaster 0003:044F:B65D.0005: setup data couldn't be sent
[  243.754196][    C0] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71
[  243.765400][ T1273] usb 6-1: USB disconnect, device number 5
[  243.791278][T10467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1816'.
[  243.879857][T10473] loop6: detected capacity change from 0 to 1024
[  243.884191][T10473] hfsplus: failed to load extents file
[  244.173845][T10485] loop4: detected capacity change from 0 to 1024
[  244.229003][T10489] loop6: detected capacity change from 0 to 2048
[  244.232961][T10489] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=3932051, location=3932051
[  244.245769][T10489] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  244.303415][T10493] netlink: 'syz.5.1829': attribute type 12 has an invalid length.
[  244.367810][T10498] bond0: entered promiscuous mode
[  244.369350][T10498] bond_slave_0: entered promiscuous mode
[  244.371745][T10498] bond_slave_1: entered promiscuous mode
[  244.379293][T10498] bond0: left promiscuous mode
[  244.381036][T10498] bond_slave_0: left promiscuous mode
[  244.383375][T10498] bond_slave_1: left promiscuous mode
[  245.165296][T10512] loop5: detected capacity change from 0 to 32768
[  245.188452][T10512] 
[  245.188452][T10512]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  245.188452][T10512] 
[  245.235193][T10512] ERROR: (device loop5): diWrite: ixpxd invalid
[  245.235193][T10512] 
[  245.256883][T10512] ERROR: (device loop5): txCommit: 
[  245.256883][T10512] 
[  245.297248][T10512] jfs_mkdir: dtSearch returned -17
[  245.449778][T10515] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1839'.
[  245.465815][T10515] loop6: detected capacity change from 0 to 512
[  245.475953][T10515] EXT4-fs warning (device loop6): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  245.600160][T10517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  245.603535][T10517] IPv6: NLM_F_CREATE should be set when creating new route
[  245.774122][ T1088] ERROR: (device loop5): diWrite: ixpxd invalid
[  245.774122][ T1088] 
[  245.778125][ T1088] ERROR: (device loop5): txCommit: 
[  245.778125][ T1088] 
[  245.781120][ T1088] jfs_write_inode: jfs_commit_inode failed!
[  245.785637][T10513] 
[  245.785637][T10513]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  245.785637][T10513] 
[  245.791449][T10513] 
[  245.791449][T10513]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  245.791449][T10513] 
[  245.877750][ T5899] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.965865][ T5899] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.032857][ T5899] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.181908][T10527] loop4: detected capacity change from 0 to 4096
[  246.186642][ T5899] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.253472][T10530] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  246.414187][ T5899] bridge_slave_1: left allmulticast mode
[  246.420646][ T5899] bridge_slave_1: left promiscuous mode
[  246.425827][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.452136][ T5899] bridge_slave_0: left allmulticast mode
[  246.454474][ T5899] bridge_slave_0: left promiscuous mode
[  246.460045][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.530375][ T5858] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.545308][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.551525][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.563300][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.569498][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.643891][T10539] loop4: detected capacity change from 0 to 4096
[  246.647735][T10539] ntfs3: Unknown parameter '{ۅ:
[  246.647735][T10539] Nr[3g|q6o\g^9'
[  247.309833][ T5899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.317610][ T5899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.322588][ T5899] bond0 (unregistering): Released all slaves
[  247.341000][T10534] geneve1: entered promiscuous mode
[  247.343559][T10534] macsec1: entered promiscuous mode
[  247.345956][T10534] macsec1: entered allmulticast mode
[  247.348091][T10534] geneve1: entered allmulticast mode
[  247.354333][T10534] geneve1: left allmulticast mode
[  247.356780][T10534] geneve1: left promiscuous mode
[  247.837265][ T5899] hsr_slave_0: left promiscuous mode
[  247.840318][ T5899] hsr_slave_1: left promiscuous mode
[  247.843330][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.854668][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.858520][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.864839][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.901330][ T5899] veth1_macvtap: left promiscuous mode
[  247.910924][ T5899] veth0_macvtap: left promiscuous mode
[  247.913123][ T5899] veth1_vlan: left promiscuous mode
[  247.927698][ T5899] veth0_vlan: left promiscuous mode
[  248.590171][ T5899] team0 (unregistering): Port device team_slave_1 removed
[  248.635369][ T5237] Bluetooth: hci1: command tx timeout
[  248.652956][ T5899] team0 (unregistering): Port device team_slave_0 removed
[  249.253168][T10535] chnl_net:caif_netlink_parms(): no params data found
[  249.383838][T10571] binder: 10570:10571 ioctl c0306201 200000000500 returned -14
[  249.388077][T10535] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.390424][T10535] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.394875][T10535] bridge_slave_0: entered allmulticast mode
[  249.398503][T10535] bridge_slave_0: entered promiscuous mode
[  249.426196][T10535] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.428949][T10535] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.431420][T10535] bridge_slave_1: entered allmulticast mode
[  249.446404][T10535] bridge_slave_1: entered promiscuous mode
[  249.519093][T10535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.527642][T10535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.577747][T10535] team0: Port device team_slave_0 added
[  249.582620][T10535] team0: Port device team_slave_1 added
[  249.631062][T10535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.633385][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.644764][T10535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.649686][T10535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.652401][T10535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.662516][T10535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.710308][T10535] hsr_slave_0: entered promiscuous mode
[  249.713380][T10535] hsr_slave_1: entered promiscuous mode
[  249.716627][T10535] debugfs: 'hsr0' already exists in 'hsr'
[  249.719142][T10535] Cannot create hsr debugfs directory
[  249.868937][T10535] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  249.874237][T10535] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  249.878707][T10535] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  249.883010][T10535] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  249.905029][T10535] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.907442][T10535] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.910236][T10535] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.912889][T10535] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.960509][T10535] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.976920][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.980845][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.993458][T10535] 8021q: adding VLAN 0 to HW filter on device team0
[  250.002672][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.005629][ T9317] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.012032][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.014857][ T9317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.172347][T10535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.351125][T10535] veth0_vlan: entered promiscuous mode
[  250.358415][T10535] veth1_vlan: entered promiscuous mode
[  250.380578][T10535] veth0_macvtap: entered promiscuous mode
[  250.387923][T10535] veth1_macvtap: entered promiscuous mode
[  250.400240][T10535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.410781][T10535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  250.419020][ T5899] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  250.423324][ T5899] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  250.427327][ T5899] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  250.430768][ T5899] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  250.493468][ T9317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.497263][ T9317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.519785][ T9317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.522728][ T9317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.714921][ T5237] Bluetooth: hci1: command tx timeout
[  250.845138][T10604] loop7: detected capacity change from 0 to 32768
[  250.852707][T10604] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 1a3514d7-38a6-48b8-8393-ce0576476612
[  250.856946][T10604] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1867 (10604)
[  250.869136][T10604] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.873464][T10604] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  250.892547][T10604] BTRFS info (device loop7): setting nodatasum
[  250.895535][T10604] BTRFS info (device loop7): setting nodatacow
[  250.898152][T10604] BTRFS info (device loop7): enabling free space tree
[  250.900784][T10604] BTRFS info (device loop7): max_inline set to 0
[  250.912488][   T33] audit: type=1800 audit(1759038957.496:482): pid=10604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1867" name="file0" dev="loop7" ino=258 res=0 errno=0
[  250.973607][T10535] BTRFS info (device loop7): last unmount of filesystem 1a3514d7-38a6-48b8-8393-ce0576476612
[  251.290873][T10625] veth0: entered promiscuous mode
[  251.293492][T10624] veth0: left promiscuous mode
[  251.338151][T10627] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  251.343043][T10627] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  251.349126][T10627] overlayfs: failed to get uuid (8/file0, err=-13); falling back to uuid=null.
[  252.425487][T10663] loop6: detected capacity change from 0 to 1024
[  252.435136][T10663] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  252.467152][T10663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.478655][   T33] audit: type=1800 audit(1759038959.066:483): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1888" name="file1" dev="loop6" ino=15 res=0 errno=0
[  252.486340][T10663] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.1888: missing EA_INODE flag
[  252.493793][T10663] EXT4-fs (loop6): Remounting filesystem read-only
[  252.522832][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.688404][T10672] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  252.761365][T10675] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.1892'.
[  252.767334][T10675] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.1892'.
[  252.794728][ T5237] Bluetooth: hci1: command tx timeout
[  253.272239][T10684] loop4: detected capacity change from 0 to 128
[  253.372728][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1898'.
[  253.488276][T10690] dvmrp0: entered allmulticast mode
[  253.571449][T10686] loop4: detected capacity change from 0 to 32768
[  253.584404][T10686] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  253.611339][T10706] loop7: detected capacity change from 0 to 16
[  253.620176][T10706] erofs: Unknown parameter 'cache_stegy'
[  253.631737][T10686] XFS (loop4): Ending clean mount
[  253.637403][T10686] XFS (loop4): Quotacheck needed: Please wait.
[  253.690472][T10686] XFS (loop4): Quotacheck: Done.
[  253.846688][ T8413] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  254.003967][T10717] loop7: detected capacity change from 0 to 128
[  254.015986][T10717] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  254.021307][T10717] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  254.052295][T10535] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  254.140712][T10726] netlink: 280 bytes leftover after parsing attributes in process `syz.7.1912'.
[  254.217280][T10730] loop7: detected capacity change from 0 to 1024
[  254.228781][T10730] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.248133][   T33] audit: type=1800 audit(1759038960.826:484): pid=10730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1914" name="file1" dev="loop7" ino=15 res=0 errno=0
[  254.254755][T10730] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1914: bg 0: block 494: padding at end of block bitmap is not set
[  254.263226][T10730] EXT4-fs (loop7): Remounting filesystem read-only
[  254.267249][T10730] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[  254.880714][T10535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.886685][ T5237] Bluetooth: hci1: command tx timeout
[  254.925893][T10740] loop6: detected capacity change from 0 to 512
[  254.971187][T10740] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1917: bad orphan inode 11862016
[  254.982234][T10740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  254.996175][T10740] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.112253][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  255.369627][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1921'.
[  255.413493][T10756] macvlan2: entered promiscuous mode
[  255.420134][T10756] macvlan2: entered allmulticast mode
[  255.430968][T10756] bond1: entered promiscuous mode
[  255.456696][T10756] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  255.791614][T10756] bond1: left promiscuous mode
[  255.822116][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  256.183823][T10775] loop7: detected capacity change from 0 to 512
[  256.206870][T10775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.211872][T10775] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.241660][   T33] audit: type=1800 audit(1759038962.826:485): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1930" name="file2" dev="loop7" ino=16 res=0 errno=0
[  256.276306][T10535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.467574][T10787] loop6: detected capacity change from 0 to 128
[  256.665653][   T51] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  256.818024][   T51] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  256.821636][   T51] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  256.825668][   T51] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  256.828871][   T51] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.834232][T10785] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  256.839277][   T51] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  257.063566][ T5901] usb 8-1: USB disconnect, device number 2
[  257.299374][T10799] loop4: detected capacity change from 0 to 32768
[  257.303641][T10799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1939 (10799)
[  257.314962][T10799] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  257.322665][T10799] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  257.349260][T10799] BTRFS info (device loop4): enabling ssd optimizations
[  257.352055][T10799] BTRFS info (device loop4): enabling free space tree
[  257.411865][ T8413] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  257.783401][T10822] loop4: detected capacity change from 0 to 4096
[  258.651583][T10851] overlay: Unknown parameter '/'
[  259.197972][T10864] loop6: detected capacity change from 0 to 4096
[  259.207267][T10864] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  259.218651][T10864] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  259.221199][T10864] ntfs3(loop6): Failed to load $BadClus (-22).
[  259.300495][T10869] loop6: detected capacity change from 0 to 512
[  259.335551][T10869] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  259.348515][T10869] EXT4-fs (loop6): orphan cleanup on readonly fs
[  259.365316][T10869] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.1961: Block bitmap for bg 0 marked uninitialized
[  259.388224][T10869] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  259.417932][T10869] EXT4-fs (loop6): 1 orphan inode deleted
[  259.421793][T10869] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  259.452873][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.628073][T10882] blk_print_req_error: 4 callbacks suppressed
[  259.628097][T10882] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  259.633429][T10882] FAT-fs (loop13): unable to read boot sector
[  260.471747][T10921] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  260.482398][T10921] CIFS mount error: No usable UNC path provided in device string!
[  260.482398][T10921] 
[  260.486882][T10921] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  261.756447][T10942] loop6: detected capacity change from 0 to 2640
[  261.759820][T10942] buffer_io_error: 11 callbacks suppressed
[  261.759835][T10942] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.778790][T10942] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.782256][T10942] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.806261][T10942] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.813167][T10942] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.819667][T10942] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.823777][T10942] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.829315][T10942] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.832524][T10942] ldm_validate_partition_table(): Disk read failed.
[  261.839147][T10942] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.842852][T10942] Buffer I/O error on dev loop6, logical block 0, async page read
[  261.846788][T10942] Dev loop6: unable to read RDB block 0
[  261.849526][T10942]  loop6: unable to read partition table
[  261.852007][T10942] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[  262.129158][T10955] block nbd0: shutting down sockets
[  262.693276][T10978] loop7: detected capacity change from 0 to 1024
[  262.723792][T10978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.743151][T10978] EXT4-fs error (device loop7): ext4_xattr_set_entry:1660: inode #16: comm syz.7.2003: corrupted xattr entries
[  262.759188][T10978] EXT4-fs (loop7): Remounting filesystem read-only
[  262.807782][T10535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.142463][T10996] loop4: detected capacity change from 0 to 164
[  263.149845][T10996] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  263.215872][T10996] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  263.253666][T10996] Symlink component flag not implemented
[  263.264638][T10996] Symlink component flag not implemented
[  263.297667][T10996] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  263.307045][T10996] rock: directory entry would overflow storage
[  263.314643][T10996] rock: sig=0x4f50, size=4, remaining=3
[  263.317126][T10996] iso9660: Corrupted directory entry in block 4 of inode 1792
[  263.322932][T10996] Symlink component flag not implemented (7)
[  263.335160][T10996] Symlink component flag not implemented (116)
[  264.377566][T11029] netlink: 'syz.6.2012': attribute type 1 has an invalid length.
[  264.392797][T11029] netlink: 'syz.6.2012': attribute type 2 has an invalid length.
[  264.402390][T11028] loop7: detected capacity change from 0 to 4096
[  264.453054][T11028] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  264.485190][T11028] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[  264.537268][T10535] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[  264.786160][T11051] bridge1: entered promiscuous mode
[  264.821546][T11055] loop7: detected capacity change from 0 to 128
[  264.920814][T11059] loop4: detected capacity change from 0 to 4096
[  264.923980][T11059] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  264.932077][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2031'.
[  265.155117][T11063] team0 (unregistering): Port device team_slave_0 removed
[  265.162398][T11063] team0 (unregistering): Port device team_slave_1 removed
[  266.017265][T11077] loop7: detected capacity change from 0 to 32768
[  266.031631][T11077] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  266.059675][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.059889][T11077] XFS (loop7): Ending clean mount
[  266.203283][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.235329][T10535] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  266.350961][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.506396][   T12] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.992529][   T12] bridge_slave_1: left allmulticast mode
[  266.997057][   T12] bridge_slave_1: left promiscuous mode
[  267.001973][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.052704][   T12] bridge_slave_0: left promiscuous mode
[  267.055432][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.585167][T11098] loop7: detected capacity change from 0 to 32768
[  267.591082][T11098] XFS: ikeep mount option is deprecated.
[  267.647179][T11098] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  267.717237][T11098] XFS (loop7): Ending clean mount
[  267.769919][T11098] XFS (loop7): Quotacheck needed: Please wait.
[  267.804183][T11108] loop6: detected capacity change from 0 to 512
[  267.809931][T11108] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  267.875124][T11108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002]
[  267.879704][T11108] System zones: 1-12
[  267.880679][T11098] XFS (loop7): Quotacheck: Done.
[  267.881570][T11108] EXT4-fs (loop6): orphan cleanup on readonly fs
[  267.924030][T11108] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2045: bg 0: block 361: padding at end of block bitmap is not set
[  267.948841][T11108] EXT4-fs (loop6): Remounting filesystem read-only
[  267.951521][T11108] EXT4-fs (loop6): 1 truncate cleaned up
[  267.954900][T11108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  268.003111][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  268.072120][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.128226][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.153562][   T12] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  268.175020][T10535] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  268.183463][   T12] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  268.197193][   T12] veth1_vlan: left allmulticast mode
[  268.223411][   T12] bond0 (unregistering): Released all slaves
[  268.249530][   T12] bond1 (unregistering): Released all slaves
[  268.423467][T11117] loop6: detected capacity change from 0 to 4096
[  268.443429][T11117] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  268.505100][T11117] ntfs3(loop6): ino=1a, mi_enum_attr
[  268.507333][T11117] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  268.510415][T11117] ntfs3(loop6): ino=1a, mi_enum_attr
[  268.512531][T11117] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  268.588787][   T12] bond2 (unregistering): (slave veth3): Releasing active interface
[  268.595562][   T12] bond2 (unregistering): Released all slaves
[  268.910545][   T33] audit: type=1800 audit(1759038975.426:486): pid=11123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2047" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  269.322154][ T5917] Process accounting resumed
[  269.356009][T11137] loop4: detected capacity change from 0 to 512
[  269.368161][   T12] hsr_slave_0: left promiscuous mode
[  269.373581][   T12] hsr_slave_1: left promiscuous mode
[  269.376958][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.380004][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.413556][T11137] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2057: invalid indirect mapped block 27 (level 1)
[  269.419539][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.423400][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.438322][T11137] EXT4-fs (loop4): Remounting filesystem read-only
[  269.461861][T11137] EXT4-fs (loop4): 1 truncate cleaned up
[  269.473950][T11137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.487479][T11137] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.491481][   T12] veth1_macvtap: left promiscuous mode
[  269.491553][   T12] veth0_macvtap: left promiscuous mode
[  269.491682][   T12] veth1_vlan: left promiscuous mode
[  269.491780][   T12] veth0_vlan: left promiscuous mode
[  269.739306][T11148] loop4: detected capacity change from 0 to 512
[  269.806111][T11148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.844348][   T33] audit: type=1800 audit(1759038976.416:487): pid=11148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2062" name="file1" dev="loop4" ino=15 res=0 errno=0
[  269.902334][T11152] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2061'.
[  270.105721][T11147] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.2062: bg 0: bad block bitmap checksum
[  270.208482][T11140] loop6: detected capacity change from 0 to 32768
[  270.211322][T11140] XFS (loop6): sunit and swidth must be specified together
[  270.224148][ T8413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.719018][T11168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  270.724341][T11157] loop4: detected capacity change from 0 to 32768
[  270.771454][T11157]  loop4: p9 p11 p16
[  270.957332][   T12] team0 (unregistering): Port device team_slave_1 removed
[  271.020404][   T12] team0 (unregistering): Port device team_slave_0 removed
[  271.682921][T11183] batadv_slave_1: entered promiscuous mode
[  271.762950][T11182] batadv_slave_1: left promiscuous mode
[  271.819630][T11187] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  272.463963][   T12] IPVS: stop unused estimator thread 0...
[  272.508257][ T5901] IPVS: starting estimator thread 0...
[  272.552011][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2085'.
[  272.565564][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2085'.
[  272.575936][T11208] bridge0: port 3(vlan2) entered blocking state
[  272.578595][T11208] bridge0: port 3(vlan2) entered disabled state
[  272.582147][T11208] vlan2: entered allmulticast mode
[  272.584367][T11208] bridge0: entered allmulticast mode
[  272.590235][T11208] vlan2: left allmulticast mode
[  272.592353][T11208] bridge0: left allmulticast mode
[  272.594821][T11206] IPVS: using max 49 ests per chain, 117600 per kthread
[  272.853056][T11214] loop7: detected capacity change from 0 to 2048
[  272.858987][T11214] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  272.881736][T11218] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  273.022433][T11222] netlink: 'syz.4.2090': attribute type 24 has an invalid length.
[  273.101641][T11230] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2094'.
[  273.180344][T11234] loop4: detected capacity change from 0 to 8
[  273.201910][T11234] SQUASHFS error: lzo decompression failed, data probably corrupt
[  273.217298][T11234] SQUASHFS error: Failed to read block 0x91: -5
[  273.219728][T11234] SQUASHFS error: Unable to read metadata cache entry [8f]
[  273.237961][T11234] SQUASHFS error: Unable to read inode 0x11f
[  273.327714][T11227] loop6: detected capacity change from 0 to 32768
[  273.351948][T11227] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  273.358738][T11241] ptrace attach of "/syz-executor exec"[10535] was attempted by "       S                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 
[  273.378545][T11227] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  273.507601][ T9815] ocfs2: Unmounting device (7,6) on (node local)
[  273.685197][T11256] tc_dump_action: action bad kind
[  274.079783][T11289] loop4: detected capacity change from 0 to 256
[  274.112603][T11289] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  274.153898][T11291] loop6: detected capacity change from 0 to 4096
[  274.188814][T11291] Cannot load nls cp12R
[  274.248676][T11295] loop7: detected capacity change from 0 to 1024
[  274.254101][T11295] EXT4-fs: Ignoring removed nobh option
[  274.315004][ T5858] Bluetooth: hci1: command 0x0405 tx timeout
[  274.318673][T11295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.330925][T11302] loop4: detected capacity change from 0 to 256
[  274.446712][T10535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.709465][T11309] loop4: detected capacity change from 0 to 512
[  274.744690][ T5901] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  274.748286][T11309] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2128: casefold flag without casefold feature
[  274.762036][T11309] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2128: couldn't read orphan inode 15 (err -117)
[  274.774807][T11309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.893584][ T8413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.911793][ T5901] usb 8-1: unable to get BOS descriptor or descriptor too short
[  274.920243][ T5901] usb 8-1: not running at top speed; connect to a high speed hub
[  274.936878][ T5901] usb 8-1: config 7 has an invalid interface number: 6 but max is 0
[  274.956917][ T5901] usb 8-1: config 7 has no interface number 0
[  274.959543][ T5901] usb 8-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254
[  274.963078][ T5901] usb 8-1: config 7 interface 6 has no altsetting 0
[  274.992359][ T5901] usb 8-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  274.999439][ T5901] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.002806][ T5901] usb 8-1: Product: syz
[  275.007607][ T5901] usb 8-1: Manufacturer: syz
[  275.009603][ T5901] usb 8-1: SerialNumber: syz
[  275.265622][ T5901] option 8-1:7.6: GSM modem (1-port) converter detected
[  275.280883][ T5901] usb 8-1: USB disconnect, device number 3
[  275.281644][T11317] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2131'.
[  275.286024][ T5901] option 8-1:7.6: device disconnected
[  275.289871][T11317] sock: sock_set_timeout: `syz.4.2131' (pid 11317) tries to set negative timeout
[  275.593551][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2133'.
[  275.621434][T11321] 8021q: adding VLAN 0 to HW filter on device bond2
[  275.645643][T11321] bond2: (slave batadv1): Opening slave failed
[  275.741956][T11319] loop4: detected capacity change from 0 to 32768
[  275.746009][T11319] XFS: ikeep mount option is deprecated.
[  275.748663][T11319] XFS: ikeep mount option is deprecated.
[  275.755142][T11319] XFS: noikeep mount option is deprecated.
[  275.782678][T11328] loop6: detected capacity change from 0 to 512
[  275.792568][T11319] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.796960][T11328] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2134: iget: bad extended attribute block 1
[  275.802446][T11328] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2134: couldn't read orphan inode 15 (err -117)
[  275.811285][T11328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.839126][T11336] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2135'.
[  275.845042][T11328] EXT4-fs warning (device loop6): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed
[  275.851312][T11319] XFS (loop4): Ending clean mount
[  275.896683][ T8413] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.946646][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.222637][T11343] loop6: detected capacity change from 0 to 32768
[  276.226085][T11343] BTRFS info: device /dev/loop6 (7:6) using temp-fsid 8821387b-3523-4ba1-8c28-b08724d7543b
[  276.230178][T11343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2139 (11343)
[  276.239330][T11343] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  276.243290][T11343] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  276.280165][T11343] BTRFS info (device loop6): enabling ssd optimizations
[  276.283185][T11343] BTRFS info (device loop6): enabling free space tree
[  276.346397][T11345] loop4: detected capacity change from 0 to 32768
[  276.350316][T11345] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2137 (11345)
[  276.360215][T11345] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  276.364441][T11345] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  276.402988][T11345] BTRFS info (device loop4): enabling ssd optimizations
[  276.408221][T11345] BTRFS info (device loop4): enabling free space tree
[  276.448332][ T8413] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  276.703211][ T9815] BTRFS info (device loop6): last unmount of filesystem 8821387b-3523-4ba1-8c28-b08724d7543b
[  279.378986][T11405] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2152'.
[  279.491387][T11411] loop7: detected capacity change from 0 to 512
[  279.511491][T11411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.516946][T11411] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  280.267173][T10535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.730336][T11428] loop7: detected capacity change from 0 to 512
[  280.733566][T11428] EXT4-fs: Ignoring removed nomblk_io_submit option
[  280.738552][T11428] EXT4-fs (loop7): filesystem is read-only
[  280.742063][T11428] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  280.748335][T11428] EXT4-fs (loop7): filesystem is read-only
[  280.750722][T11428] EXT4-fs (loop7): orphan cleanup on readonly fs
[  280.753559][T11428] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #16: comm syz.7.2161: iget: bad i_size value: 648518346341360424
[  280.760877][T11428] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2161: couldn't read orphan inode 16 (err -117)
[  280.767900][T11428] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  280.793648][T10535] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.843067][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2162'.
[  281.039010][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2165'.
[  281.288022][T11450] loop6: detected capacity change from 0 to 64
[  281.301897][T11448] loop4: detected capacity change from 0 to 2048
[  281.320605][T11451] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  281.816029][T11451] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  281.820489][T11451] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  281.850245][T11451] Remounting filesystem read-only
[  281.852745][T11448] NILFS (loop4): mounting fs with errors
[  281.857787][T11448] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  281.871825][T11448] Remounting filesystem read-only
[  281.899854][T11453] loop7: detected capacity change from 0 to 32768
[  281.905993][T11453] OCFS2: ERROR (device loop7): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: OCFS2_VALID_FL not set
[  281.912430][T11453] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  281.916918][T11453] OCFS2: File system is now read-only.
[  281.919227][T11453] (syz.7.2166,11453,1):ocfs2_read_locked_inode:597 ERROR: status = -30
[  281.932537][T11453] (syz.7.2166,11453,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  281.932900][ T8413] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  281.937051][T11453] (syz.7.2166,11453,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  281.944197][T11453] (syz.7.2166,11453,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  281.944224][T11453] (syz.7.2166,11453,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  281.953838][T11453] (syz.7.2166,11453,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  281.957248][T11453] (syz.7.2166,11453,1):ocfs2_fill_super:1177 ERROR: status = -30
[  282.058114][T11460] overlayfs: refusing to follow metacopy origin for (/file1)
[  282.148072][T11464] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2177'.
[  282.205243][T11466] loop6: detected capacity change from 0 to 512
[  282.316409][T11466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.321673][T11466] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  282.904785][   T51] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  283.069629][   T51] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.074233][   T51] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.078385][   T51] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  283.082381][   T51] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.090784][   T51] usb 8-1: config 0 descriptor??
[  283.189593][ T9815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.301087][T11491] loop6: detected capacity change from 0 to 256
[  283.305557][T11491] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  283.310304][T11491] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  283.324726][T11491] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[  283.338298][   T33] audit: type=1800 audit(1759038989.926:488): pid=11491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2187" name="file1" dev="loop6" ino=1048632 res=0 errno=0
[  283.467160][    T9] IPVS: starting estimator thread 0...
[  283.505913][   T51] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  283.565331][T11498] IPVS: using max 63 ests per chain, 151200 per kthread
[  283.570584][   T51] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected
[  283.594493][   T51] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0
[  283.618443][T11506] loop6: detected capacity change from 0 to 64
[  283.622553][T11506] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing
[  283.627071][T11506] BFS-fs: bfs_fill_super(): Last block not available on loop6: 4139327
[  283.713302][    T9] usb 8-1: USB disconnect, device number 4
[  283.729978][    T9] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected
[  284.086123][T11507] binder: 11505:11507 ioctl c0306201 0 returned -14
[  284.548656][T11513] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2196'.
[  284.683710][T11519] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2199'.
[  286.099266][T11556] loop6: detected capacity change from 0 to 512
[  286.105807][T11556] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  287.454743][ T5917] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  287.521712][T11584] loop6: detected capacity change from 0 to 65536
[  287.530972][T11584] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  287.540507][T11584] XFS (loop6): Ending clean mount
[  287.617385][ T5917] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  287.622645][ T5917] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  287.626622][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.632949][ T5917] usb 8-1: config 0 descriptor??
[  288.201712][   T28] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  288.208149][   T28] XFS (loop6): Unmount and run xfs_repair
[  288.217369][   T28] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  288.224634][   T28] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  288.229741][ T5917] aquacomputer_d5next 0003:0C70:F00B.0008: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.7-1/input0
[  288.230840][   T28] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  288.250143][   T28] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  288.253925][   T28] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  288.258118][   T28] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  288.262499][   T28] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  288.265826][   T28] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  288.269060][   T28] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  288.273217][   T28] XFS (loop6): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  288.280175][   T28] XFS (loop6): page discard on page ffffea0000b29ec0, inode 0x29, pos 0.
[  288.290739][ T9815] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  288.334346][ T9815] XFS (loop6): Uncorrected metadata errors detected; please run xfs_repair.
[  288.350991][ T5901] usb 8-1: USB disconnect, device number 5
[  288.793186][T11608] loop6: detected capacity change from 0 to 256
[  288.842687][T11608] FAT-fs (loop6): Directory bread(block 64) failed
[  288.845853][T11608] FAT-fs (loop6): Directory bread(block 65) failed
[  288.848255][T11608] FAT-fs (loop6): Directory bread(block 66) failed
[  288.850517][T11608] FAT-fs (loop6): Directory bread(block 67) failed
[  288.853512][T11608] FAT-fs (loop6): Directory bread(block 68) failed
[  288.857004][T11608] FAT-fs (loop6): Directory bread(block 69) failed
[  288.867888][T11608] FAT-fs (loop6): Directory bread(block 70) failed
[  288.870339][T11608] FAT-fs (loop6): Directory bread(block 71) failed
[  288.872650][T11608] FAT-fs (loop6): Directory bread(block 72) failed
[  288.876542][T11608] FAT-fs (loop6): Directory bread(block 73) failed
[  288.967550][T11610] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  288.975113][T11610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.667111][T11614] loop6: detected capacity change from 0 to 40427
[  289.670088][T11614] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  289.673127][T11614] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  289.677926][T11614] F2FS-fs (loop6): invalid crc value
[  289.727619][T11614] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  289.733145][T11614] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  289.735902][T11614] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  289.786103][T11614] syz.6.2235: attempt to access beyond end of device
[  289.786103][T11614] loop6: rw=34817, sector=77824, nr_sectors = 960 limit=40427
[  290.561313][T11636] loop6: detected capacity change from 0 to 2048
[  290.566467][T11636] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  290.628695][T11637] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  290.933327][T11655] loop4: detected capacity change from 0 to 64
[  291.005316][T11659] loop4: detected capacity change from 0 to 1024
[  291.042577][T11659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.138673][T11659] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2253: Allocating blocks 497-513 which overlap fs metadata
[  291.151332][   T33] audit: type=1800 audit(1759038997.646:489): pid=11659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2253" name="file1" dev="loop4" ino=15 res=0 errno=0
[  291.199900][T11658] EXT4-fs (loop4): pa ffff88802ad5e828: logic 32, phys. 161, len 22
[  291.203505][T11658] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  291.301696][T11666] IPVS: set_ctl: invalid protocol: 22 172.30.1.8:20002
[  291.386548][T11666] loop7: detected capacity change from 0 to 1024
[  291.391915][T11666] EXT4-fs: Ignoring removed bh option
[  291.393781][T11666] EXT4-fs: Ignoring removed i_version option
[  291.407874][T11666] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  291.460704][ T8413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.729253][T11673] loop4: detected capacity change from 0 to 2048
[  291.787567][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2258'.
[  291.876451][T11680] loop4: detected capacity change from 0 to 16
[  291.883990][T11680] erofs (device loop4): mounted with root inode @ nid 36.
[  291.896820][T11680] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36
[  291.910593][T11680] erofs (device loop4): failed to decompress -43 in[46, 4050] out[1851]
[  291.914206][T11680] erofs (device loop4): read error -117 @ 43 of nid 36
[  291.995885][T11684] loop4: detected capacity change from 0 to 2048
[  292.006612][T11684] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.130724][T11693] loop4: detected capacity change from 0 to 4096
[  292.151742][T11697] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.054722][    T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  293.214982][    T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  293.222121][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  293.227005][    T9] usb 8-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  293.230968][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.246993][    T9] usb 8-1: config 0 descriptor??
[  293.263049][    T9] usb 8-1: selecting invalid altsetting 0
[  293.356294][T11708] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2267'.
[  293.459462][    T9] usb 8-1: USB disconnect, device number 6
[  295.554448][T11758] loop7: detected capacity change from 0 to 32768
[  295.579700][T11758] read_mapping_page failed!
[  295.582926][T11758] ERROR: (device loop7): txCommit: 
[  295.582926][T11758] 
[  295.618284][  T115] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  295.621405][  T115] ------------[ cut here ]------------
[  295.623553][  T115] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  295.637280][  T115] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  295.640121][  T115] CPU: 1 UID: 0 PID: 115 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  295.643741][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.647696][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  295.649876][  T115] Code: e4 fd 90 0f 0b e8 21 d2 7c fe 48 c7 c7 20 23 c4 8b 48 c7 c6 19 1f c4 8b ba a3 03 00 00 48 c7 c1 20 30 c4 8b e8 12 c4 e4 fd 90 <0f> 0b e8 fa d1 7c fe 48 c7 c7 20 23 c4 8b 48 c7 c6 19 1f c4 8b ba
[  295.657928][  T115] RSP: 0018:ffffc9000245fbc8 EFLAGS: 00010246
[  295.660335][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 91f692d036a4d300
[  295.663447][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  295.666633][  T115] RBP: ffffc90001fc2048 R08: ffffc9000245f8e7 R09: 1ffff9200048bf1c
[  295.669899][  T115] R10: dffffc0000000000 R11: fffff5200048bf1d R12: dffffc0000000000
[  295.673373][  T115] R13: 1ffff11023e68989 R14: ffff88811f344c48 R15: 0000000000000000
[  295.676739][  T115] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  295.680343][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  295.682997][  T115] CR2: 00007fa387b056c0 CR3: 000000003379e000 CR4: 00000000000006f0
[  295.686188][  T115] Call Trace:
[  295.687563][  T115]  <TASK>
[  295.688807][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.690906][  T115]  jfs_lazycommit+0x584/0xa90
[  295.692841][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  295.695001][  T115]  ? __pfx_default_wake_function+0x10/0x10
[  295.697540][  T115]  ? __kthread_parkme+0x7b/0x200
[  295.699745][  T115]  ? __kthread_parkme+0x1a1/0x200
[  295.701881][  T115]  kthread+0x711/0x8a0
[  295.703591][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  295.705707][  T115]  ? __pfx_kthread+0x10/0x10
[  295.707612][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[  295.709721][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  295.711833][  T115]  ? __pfx_kthread+0x10/0x10
[  295.713744][  T115]  ret_from_fork+0x439/0x7d0
[  295.715627][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[  295.717718][  T115]  ? __switch_to_asm+0x39/0x70
[  295.719657][  T115]  ? __switch_to_asm+0x33/0x70
[  295.721725][  T115]  ? __pfx_kthread+0x10/0x10
[  295.723724][  T115]  ret_from_fork_asm+0x1a/0x30
[  295.725814][  T115]  </TASK>
[  295.727118][  T115] Modules linked in:
[  295.729322][  T115] ---[ end trace 0000000000000000 ]---
[  295.738261][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  295.740544][  T115] Code: e4 fd 90 0f 0b e8 21 d2 7c fe 48 c7 c7 20 23 c4 8b 48 c7 c6 19 1f c4 8b ba a3 03 00 00 48 c7 c1 20 30 c4 8b e8 12 c4 e4 fd 90 <0f> 0b e8 fa d1 7c fe 48 c7 c7 20 23 c4 8b 48 c7 c6 19 1f c4 8b ba
[  295.750870][  T115] RSP: 0018:ffffc9000245fbc8 EFLAGS: 00010246
[  295.753668][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 91f692d036a4d300
[  295.758730][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  295.762059][  T115] RBP: ffffc90001fc2048 R08: ffffc9000245f8e7 R09: 1ffff9200048bf1c
[  295.766111][  T115] R10: dffffc0000000000 R11: fffff5200048bf1d R12: dffffc0000000000
[  295.769613][  T115] R13: 1ffff11023e68989 R14: ffff88811f344c48 R15: 0000000000000000
[  295.773237][  T115] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  295.777974][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  295.780687][  T115] CR2: 00007fa387b056c0 CR3: 0000000029910000 CR4: 00000000000006f0
[  295.784007][  T115] Kernel panic - not syncing: Fatal exception
[  295.787277][  T115] Kernel Offset: disabled
[  295.789151][  T115] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:52:26  Registers:
info registers vcpu 0

CPU#0
RAX=ffff888023269cc0 RBX=ffffc90006f97368 RCX=ffffc90006f973f0 RDX=0000000000000060
RSI=0000000000000000 RDI=ffffc90006f97368 RBP=ffffc90006f973f0 RSP=ffffc90006f972e8
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90006f974b0 R11=fffffbfff1f474e7
R12=0000000000000000 R13=ffff888023269cc0 R14=dffffc0000000000 R15=0000000000000000
RIP=ffffffff82232dd8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ec23ff8 CR3=000000010a66e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000ff0000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000ff0000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000
RSI=ffffffff8be33f60 RDI=ffffffff8be33f20 RBP=ffffffff822e714a RSP=ffffc900071cf228
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff94000168a49
R12=0000000000000002 R13=ffffffff8e13a1a0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8b7a7156 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555590ce6500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa387b056c0 CR3=00000000232c6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa386e12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
