last executing test programs:

2m54.663277475s ago: executing program 1 (id=1108):
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10)
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000240)="f24306000000000000009929ea89", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'})

2m54.457770816s ago: executing program 1 (id=1113):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)

2m54.248863026s ago: executing program 1 (id=1115):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x8, 0x1, 0x18e}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4000, @fd=r0, 0x4000000000000000, 0x0, 0xff, 0x4, 0x0, {0x1, r3}})
io_uring_enter(r0, 0x3d16, 0x10, 0x0, 0x0, 0x0)

2m54.117121763s ago: executing program 1 (id=1117):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$eJzsmL9uE0EQxr/dO59tAgiaFDQURCIIYsfnJk0EQUKiQkgJ/yqwyBEFOzFyDolYQiiioYGOAomGghegiEQqCjpeIBIUgIQEEi4oaNIcmt31ee3D+HJJx/yK1bc7s7sz470pDIZh/lu+fvn9+en5mYUzAA5iAnmz/t0BhNBaWv6fXtw//Xz2wss3H1+/Xz38cGvwPNoSRf0LhX/c7wJ4N+fgUXxTvHuHxISZLECS/kH6CiROmfVrECgZfQsSV40OIHDD6LuWbpJ/qXRnuRGUbjcbiySmaajQ4NNQHYyvsyGwaOZR5EBY9rX1dr3WaAQtS7jG9hdTJhFfVh9P1C8HD505mUMcXxRRFa8/ebxB825tpnX9FBVIVEwSVQjMm/UZ5Lu10SWx8j/m9s53Evkns915q3zJMCrJghazv/alWCQ8aHF0Kts5k5TOuaTpCLLEg/5dOfRMVMn9SXno01HCHf0Wz5ofdHdXjNEDuJQ2i2dFAHvKK58qwt1m0SfGO1sfkqZvo7ZHYvQVIv37KaSNufshZq9qEe263EvFhgW2van7R/RK4KTVn1yrf5TDlXvltfX21PJKbSlYClZ9v5of0zbViMpqTPS9Xn8uqv50wDo/N8TXkx4e1MKwVdGjJzwUEYYtX81967OZ32z+vGm2hbgI4ISeUNv04hOdxB3C0z5S+ZKaTDoxDMMwDMMwDMMwDMMwDMNk4jiE+heU2D6EWA/gX1befwIAAP//gpVaLg==")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0xd00, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
msgget(0x0, 0x400)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)

2m53.199044244s ago: executing program 1 (id=1125):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000340)=""/151, 0x97, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/185, 0xfffffff0, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f00000005c0)=""/238, 0xee, 0x0, 0x3, 0x3}}, 0x48)

2m52.941518439s ago: executing program 1 (id=1130):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0xfe33)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r1 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x2, 0x5, 0x2, 0x3, 0x1, {0x400000080001, 0xff, 0x20fb, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x82000001}}, {0x0, 0x13}}}, 0xa0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m52.810722513s ago: executing program 32 (id=1130):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0xfe33)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
r1 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x2, 0x5, 0x2, 0x3, 0x1, {0x400000080001, 0xff, 0x20fb, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x82000001}}, {0x0, 0x13}}}, 0xa0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m35.564838083s ago: executing program 0 (id=1285):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="3678f68852ed9dff79e6baa0a717d3c8a69d87ad4d5dc2733c0a8163e3eac273755b7824c45c69134b6442eb09df827fee7afc88f1c7d5c686166248bd493fb28131bfd2a352461dc5db360dc77f62eb033dec2d1cfabd759e4c040c4169a9662766121aee72ba341505bf70ca632cab3e779db90cc0e689b6ea2a6ec023af3ce32943f7f3237baea32d85a23a427243895cf2af02711188e9b912dd1ed0cca10f7a5bd7eac8e1d11b3017fa5ac2062b38367dfb772a90540e4fef4d423318e04eca5be2d7bc8cfdc7dea18cd2334ac702d60c0a73418e8248776f4af3b4748e"], 0x1, 0x5f55, &(0x7f000000ef80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)

2m34.443107866s ago: executing program 0 (id=1291):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})

2m33.774461843s ago: executing program 0 (id=1303):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1200000078000106000000000000000007"], 0x18}], 0x1}, 0x0)

2m33.605732336s ago: executing program 0 (id=1305):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@umask={'umask', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)

2m33.455774036s ago: executing program 0 (id=1307):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x3f7, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @random="bdfec6d04adb", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

2m33.163962831s ago: executing program 0 (id=1310):
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0)
lseek(r0, 0x9, 0x3)

2m32.977057321s ago: executing program 33 (id=1310):
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0)
lseek(r0, 0x9, 0x3)

2m2.789167975s ago: executing program 4 (id=1659):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18, &(0x7f0000000240)=ANY=[], 0x1, 0x713, &(0x7f0000000f80)="$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")
readlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)=""/203, 0xcb)

2m2.578906144s ago: executing program 4 (id=1660):
add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe)

2m2.400232075s ago: executing program 4 (id=1661):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000000300)=0x8)
bind$xdp(r0, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
set_mempolicy(0x8006, 0x0, 0x5)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r4 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
ftruncate(r4, 0xffff)
fcntl$addseals(r4, 0x409, 0x7)
r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r4, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, 0x0)

2m0.631811549s ago: executing program 4 (id=1668):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2000004c, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14f5, &(0x7f0000001580)="$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")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc10700", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)

2m0.512221027s ago: executing program 4 (id=1670):
r0 = socket$inet6(0xa, 0x1, 0x100)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="5980a642beaf34ff0f0000121690ad0d2b", 0x11}], 0x1}, 0x2000c001)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)

2m0.300694669s ago: executing program 4 (id=1675):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x3c}}, 0x0)

2m0.195968336s ago: executing program 34 (id=1675):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x3c}}, 0x0)

1.777615419s ago: executing program 2 (id=3551):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
fcntl$setsig(r0, 0xa, 0x21)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a)
fallocate(r1, 0x0, 0x0, 0x9000f3)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
rt_sigtimedwait(&(0x7f0000000580)={[0x400]}, 0x0, 0x0, 0x8)

1.597694063s ago: executing program 2 (id=3555):
sigaltstack(&(0x7f0000000540)={0x0, 0x2}, 0x0)

1.51845838s ago: executing program 2 (id=3559):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x5, 0x5}, 0x8)

1.457191701s ago: executing program 2 (id=3561):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)

1.15946485s ago: executing program 3 (id=3568):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, 0x0, 0x4, 0x0)
recvmmsg(r1, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40, 0x0)

610.113737ms ago: executing program 5 (id=3577):
r0 = socket$inet(0x2, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

508.73405ms ago: executing program 5 (id=3578):
r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28)
close(r0)
r1 = getpid()
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0xc)

507.333027ms ago: executing program 2 (id=3579):
r0 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000300)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, 0x0}, 0x4850)

506.941637ms ago: executing program 2 (id=3580):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltaction={0x74, 0x31, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}]}, 0x74}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
removexattr(0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r5 = syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x1048020, &(0x7f0000000740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,cser_id=', @ANYRESDEC, @ANYRESOCT=r2, @ANYRESDEC, @ANYBLOB=',default_permissions,allow_other,euid=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, &(0x7f00000004c0)="69624d5ed8500a4072dc64fa03ad9b915d264b33233cd6858e40f4f8bad10b43be6e67e201919c4113da25536948d8b27e7e38f97276bf19dbc1ebae988baa9c0259ffeb0b4a324cd8b3df62695515d0121e61938ab26cfc399edacce7ad55087818a3460cc4e8ffc151131b15dff95f66cc7130992e8f681b71c81f04560e1b")
openat(r5, &(0x7f0000000280)='./file0\x00', 0x42440, 0x4)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x142, 0x4)
pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61)
fallocate(r6, 0x3, 0x5000000, 0x5000000)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000240)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff000000004000000458000b480400945f64009400050038925a01000000b664555bf106274b00ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x40, 0x98)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(r6, &(0x7f00000006c0)='./file0\x00', 0x101901, 0x8)
writev(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000800)="e1bab78982b39300ca2b16a14d1dbfe3f2e2033ad3fc5ea9afcba5329ae0c0e0a41bc5821003e2688faa4adc1c71b1bd24f71216fd54d7bca53958c68c6d14c67abcd3eeaded41caf8bf6b81b8e887cb3a7ae170ca2a42e4ede5ee3cc288e9de0743a4823abc3579417056c0dad624a0287eab368913780c18502992c07dca2348022f0c92a64b38bd5ec28dcf06d51b23333ece957acb42a12d0259c2ee2e1a49a697e076f832376cc0cda0acc8898b525166398be5248dc551a49c9ce60cd4d0223a4f8ce55125595d03af", 0xcc}, {&(0x7f0000000680)="73071fe88530934ce8167564cba10ad4bb8f", 0x12}], 0x2)

409.460058ms ago: executing program 5 (id=3581):
waitid(0x3, 0x0, 0x0, 0x8, 0x0)
r0 = syz_io_uring_setup(0x60db, &(0x7f0000000140)={0x0, 0x7cc, 0x40, 0x3, 0x2c0}, 0x0, &(0x7f0000000200))
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x126c5000)
getrlimit(0xb, &(0x7f0000000300))
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket(0x15, 0x5, 0x0)
getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000000))

164.725159ms ago: executing program 5 (id=3582):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2ed, &(0x7f0000000a80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

164.48144ms ago: executing program 3 (id=3583):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x1509, &(0x7f0000001c40)="$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")
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f)

149.052152ms ago: executing program 3 (id=3584):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/1425], 0x41, 0x1d3, &(0x7f0000000980)="$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")

82.940749ms ago: executing program 5 (id=3585):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0)

82.778598ms ago: executing program 3 (id=3586):
socket(0x1f, 0x803, 0xffdffff7)

82.37133ms ago: executing program 3 (id=3587):
r0 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00')
getdents64(r0, &(0x7f0000002440)=""/181, 0xb5)

222.709µs ago: executing program 3 (id=3588):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000b40)='./file1\x00')
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x100)

0s ago: executing program 5 (id=3589):
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000280)={0x20, 0x23, 0x3c, {0x3c, 0x21, "76860eb14cf01f314674c3656af2da8219129fafe34b7cf6921d056caff9ec077b82f89e939279267995ff4d7c0d749ee36f0e408f70098faaba"}}, 0x0}, 0x0)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddf8)
write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='H'], 0x69)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40)

kernel console output (not intermixed with test programs):

handling: 0
[  195.152896][ T9212] ubi31: background thread "ubi_bgt31d" started, PID 9212
[  195.606300][ T6027] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  195.778885][ T6027] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  195.789877][ T6027] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  195.805229][ T6027] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  195.833836][ T6027] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  195.840303][ T6027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  195.848018][ T6027] usb 3-1: SerialNumber: syz
[  196.045217][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'.
[  196.067997][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'.
[  196.187971][ T6027] rndis_host 3-1:253.0: RNDIS init failed, -71
[  196.217410][ T6027] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71
[  196.235004][ T6027] usb 3-1: USB disconnect, device number 19
[  197.258640][ T9231] netlink: 'syz.3.1244': attribute type 11 has an invalid length.
[  197.288191][ T9229] loop2: detected capacity change from 0 to 40427
[  197.293380][ T9229] F2FS-fs (loop2): build fault injection rate: 14
[  197.305981][ T9229] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  197.314678][ T9229] F2FS-fs (loop2): invalid crc value
[  197.323885][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  197.330566][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  197.359454][ T9229] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  197.363101][ T9229] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  197.368586][ T9229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  197.384377][ T9229] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  197.389430][   T33] audit: type=1800 audit(1756825335.448:49): pid=9229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1243" name="file2" dev="loop2" ino=10 res=0 errno=0
[  197.390636][ T9229] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  197.405775][ T9229] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  197.450324][ T5848] bio_check_eod: 1348 callbacks suppressed
[  197.450335][ T5848] syz-executor: attempt to access beyond end of device
[  197.450335][ T5848] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  197.460565][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  197.460580][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.460585][ T5848] Call Trace:
[  197.460588][ T5848]  <TASK>
[  197.460591][ T5848]  dump_stack_lvl+0x189/0x250
[  197.460606][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.460615][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[  197.460622][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  197.460637][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  197.460658][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[  197.460679][ T5848]  f2fs_write_end_io+0x886/0xb60
[  197.460701][ T5848]  __submit_merged_bio+0x27a/0x6a0
[  197.460715][ T5848]  __submit_merged_write_cond+0x255/0x530
[  197.460727][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[  197.460736][ T5848]  ? __lock_acquire+0xab9/0xd20
[  197.460757][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  197.460783][ T5848]  ? __mod_zone_page_state+0xd7/0x140
[  197.460796][ T5848]  ? folios_put_refs+0x560/0x640
[  197.460812][ T5848]  ? __lock_acquire+0xab9/0xd20
[  197.460830][ T5848]  ? do_raw_spin_lock+0x121/0x290
[  197.460850][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  197.460863][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  197.460879][ T5848]  do_writepages+0x32e/0x550
[  197.460896][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  197.460905][ T5848]  filemap_fdatawrite+0x199/0x240
[  197.460914][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  197.460941][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  197.460950][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[  197.460963][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[  197.460978][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  197.461003][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[  197.461012][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[  197.461021][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[  197.461026][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[  197.461039][ T5848]  ? shrinker_free+0x2ce/0x3e0
[  197.461047][ T5848]  deactivate_locked_super+0xbc/0x130
[  197.461060][ T5848]  cleanup_mnt+0x425/0x4c0
[  197.461072][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.461088][ T5848]  task_work_run+0x1d4/0x260
[  197.461098][ T5848]  ? __pfx_task_work_run+0x10/0x10
[  197.461106][ T5848]  ? __x64_sys_umount+0x122/0x160
[  197.461117][ T5848]  ? exit_to_user_mode_loop+0x40/0x110
[  197.461134][ T5848]  exit_to_user_mode_loop+0xec/0x110
[  197.461150][ T5848]  do_syscall_64+0x2bd/0x3b0
[  197.461157][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  197.461166][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.461173][ T5848]  ? exc_page_fault+0x9f/0xf0
[  197.461182][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.461189][ T5848] RIP: 0033:0x7ff2b0b8ff17
[  197.461196][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  197.461203][ T5848] RSP: 002b:00007ffdc00173a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  197.461211][ T5848] RAX: 0000000000000000 RBX: 00007ff2b0c11c05 RCX: 00007ff2b0b8ff17
[  197.461216][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdc0017460
[  197.461220][ T5848] RBP: 00007ffdc0017460 R08: 0000000000000000 R09: 0000000000000000
[  197.461224][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdc00184f0
[  197.461228][ T5848] R13: 00007ff2b0c11c05 R14: 000000000003015b R15: 00007ffdc0018530
[  197.461240][ T5848]  </TASK>
[  197.461243][ T5848] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  197.471588][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.800030][ T9259] loop0: detected capacity change from 0 to 128
[  197.807269][ T9259] ufs: You didn't specify the type of your ufs filesystem
[  197.807269][ T9259] 
[  197.807269][ T9259] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  197.807269][ T9259] 
[  197.807269][ T9259] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  197.826313][ T9259] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  198.186656][ T9273] loop0: detected capacity change from 0 to 4096
[  198.203605][ T9273] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  198.253431][ T9273] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  198.265047][ T9273] ntfs3(loop0): Failed to load root (-22).
[  198.319741][ T9275] loop2: detected capacity change from 0 to 4096
[  199.010525][ T9286] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1267'.
[  199.506243][ T9303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1274'.
[  199.510495][ T9303] netlink: 'syz.0.1274': attribute type 7 has an invalid length.
[  199.514325][ T9303] netlink: 'syz.0.1274': attribute type 8 has an invalid length.
[  199.524619][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'.
[  200.167857][ T9318] [U] V3Fپ"S/4:XTZWTLW=
[  200.172158][ T9318] [U] J"E:"
[  200.173725][ T9318] [U] 
[  200.301996][ T9321] loop0: detected capacity change from 0 to 256
[  200.341511][ T9321] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x19066d23, utbl_chksum : 0xe619d30d)
[  201.075533][ T9333] loop2: detected capacity change from 0 to 1024
[  201.080729][ T9333] ext4: Unknown parameter 'fowner>00000000000000000000'
[  201.338563][ T9326] loop0: detected capacity change from 0 to 32768
[  201.428905][ T9326] ialloc: diAlloc returned -5!
[  201.438531][ T9340] ialloc: diAlloc returned -5!
[  202.169736][ T9371] loop3: detected capacity change from 0 to 256
[  202.204042][ T9371] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  202.459509][ T9379] loop0: detected capacity change from 0 to 256
[  202.482363][ T9379] exfat: Deprecated parameter 'namecase'
[  202.498482][ T9379] exfat: Deprecated parameter 'utf8'
[  202.508244][ T9379] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  202.566459][ T9373] loop2: detected capacity change from 0 to 32768
[  202.597738][ T9373] bcachefs (/dev/loop2): error validating superblock: Invalid option errors: too big (max 4)
[  202.601992][ T9373] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big
[  202.704816][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  202.861200][   T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.861333][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  202.878440][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  202.882971][   T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  202.888781][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.902333][   T24] usb 4-1: config 0 descriptor??
[  202.959107][   T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.022201][   T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.100681][   T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.113103][   T24] ath6kl: Failed to submit usb control message: -71
[  203.116691][   T24] ath6kl: unable to send the bmi data to the device: -71
[  203.118890][   T24] ath6kl: Unable to send get target info: -71
[  203.121388][   T24] ath6kl: Failed to init ath6kl core: -71
[  203.123977][   T24] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  203.136853][   T24] usb 4-1: USB disconnect, device number 2
[  203.229429][   T12] bridge0: port 3(batadv0) entered disabled state
[  203.238030][   T12] bridge_slave_1: left allmulticast mode
[  203.240580][   T12] bridge_slave_1: left promiscuous mode
[  203.242977][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.256715][   T12] : left allmulticast mode
[  203.259151][   T12] : left promiscuous mode
[  203.261201][   T12] bridge0: port 1() entered disabled state
[  203.357861][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  203.363254][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  203.368468][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  203.372698][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  203.387596][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  203.788556][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  203.795300][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  203.800997][   T12] bond0 (unregistering): (slave team0): Releasing backup interface
[  203.807816][   T12] bond0 (unregistering): Released all slaves
[  204.258863][ T9408] loop3: detected capacity change from 0 to 256
[  204.554281][ T9408] exfat: Unknown parameter 'discard9i'
[  204.649249][   T12] hsr_slave_0: left promiscuous mode
[  204.652172][   T12] hsr_slave_1: left promiscuous mode
[  204.656404][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  204.659661][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  204.663128][   T12] batman_adv: batadv0: Interface deactivated: 26
[  204.666096][   T12] batman_adv: batadv0: Removing interface: 26
[  204.688395][   T12] veth1_macvtap: left promiscuous mode
[  204.690933][   T12] veth0_macvtap: left promiscuous mode
[  204.693243][   T12] veth1_vlan: left promiscuous mode
[  204.695971][   T12] veth0_vlan: left promiscuous mode
[  204.772086][   T12] pimreg (unregistering): left allmulticast mode
[  205.152111][   T12] team0 (unregistering): Port device team_slave_1 removed
[  205.190012][   T12] team0 (unregistering): Port device team_slave_0 removed
[  205.474608][ T5851] Bluetooth: hci2: command tx timeout
[  205.605539][ T9390] chnl_net:caif_netlink_parms(): no params data found
[  205.691537][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.695605][ T9390] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.699145][ T9390] bridge_slave_0: entered allmulticast mode
[  205.703819][ T9390] bridge_slave_0: entered promiscuous mode
[  205.710808][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.717782][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.720996][ T9390] bridge_slave_1: entered allmulticast mode
[  205.725936][ T9390] bridge_slave_1: entered promiscuous mode
[  205.768711][ T9390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.781440][ T9390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.829342][ T9390] team0: Port device team_slave_0 added
[  205.846200][ T9390] team0: Port device team_slave_1 added
[  205.908857][ T9390] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.911759][ T9390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.925062][ T9390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.931503][ T9390] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.943607][ T9390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.959209][ T9390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.019077][   T12] IPVS: stop unused estimator thread 0...
[  206.030686][ T9390] hsr_slave_0: entered promiscuous mode
[  206.031216][ T9390] hsr_slave_1: entered promiscuous mode
[  206.031487][ T9390] debugfs: 'hsr0' already exists in 'hsr'
[  206.031496][ T9390] Cannot create hsr debugfs directory
[  206.371523][ T9390] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  206.379140][ T9390] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  206.385373][ T9390] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  206.416319][ T9390] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  206.460352][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.463658][ T9390] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.466955][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.469882][ T9390] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.494460][ T9448] net_ratelimit: 12 callbacks suppressed
[  206.494476][ T9448] openvswitch: netlink: Multiple metadata blocks provided
[  206.636463][ T9390] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.683525][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.717692][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.748139][ T9390] 8021q: adding VLAN 0 to HW filter on device team0
[  206.762500][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.765110][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.780758][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.783542][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.839598][ T9390] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  206.852190][ T9390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.026618][ T9390] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.089637][ T9460] loop2: detected capacity change from 0 to 32768
[  207.162265][ T9460] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  207.230377][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[  207.330068][ T9390] veth0_vlan: entered promiscuous mode
[  207.339534][ T9390] veth1_vlan: entered promiscuous mode
[  207.355723][ T9482] loop3: detected capacity change from 0 to 16384
[  207.396956][ T9390] veth0_macvtap: entered promiscuous mode
[  207.409815][ T9390] veth1_macvtap: entered promiscuous mode
[  207.419093][ T9491] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.436192][ T9390] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.448188][ T9390] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.467451][ T5717] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.477129][ T5717] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.507439][ T9482] 8021q: adding VLAN 0 to HW filter on device bond1
[  207.512554][ T5717] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.524129][ T9482] futex_wake_op: syz.3.1331 tries to shift op by -1; fix this program
[  207.526031][ T5717] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.553713][ T5851] Bluetooth: hci2: command tx timeout
[  207.631466][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.644472][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.708048][ T6070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.710690][ T6070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.985631][ T9516] syz_tun: entered promiscuous mode
[  207.987709][ T9516] vlan2: entered promiscuous mode
[  208.140745][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1343'.
[  208.147532][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1343'.
[  208.597291][ T9543] loop2: detected capacity change from 0 to 16
[  208.616946][ T9543] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 66300)
[  208.911815][ T9553] loop3: detected capacity change from 0 to 2048
[  208.918222][ T9553] EXT4-fs: Ignoring removed mblk_io_submit option
[  208.933512][ T9553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.975584][ T9553] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1356: bg 0: block 234: padding at end of block bitmap is not set
[  208.989066][ T9553] EXT4-fs (loop3): Remounting filesystem read-only
[  209.015690][ T8935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.412887][ T9587] netem: change failed
[  209.542955][ T9595] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1374'.
[  209.633557][ T5851] Bluetooth: hci2: command tx timeout
[  210.166914][ T9617] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1382'.
[  210.210974][ T9622] loop2: detected capacity change from 0 to 1024
[  210.385043][   T29] hfsplus: b-tree write err: -5, ino 4
[  210.734773][ T9636] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1391'.
[  210.846618][ T9626] loop4: detected capacity change from 0 to 32768
[  210.859315][ T9626] jfs_mount: Failed to read FILESYSTEM_I
[  210.861516][ T9626] Mount JFS Failure: -5
[  210.871639][ T9626] jfs_mount failed w/return code = -5
[  210.883403][ T9644] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  211.009692][ T6027] IPVS: starting estimator thread 0...
[  211.012809][ T9652] IPVS: ip_vs_edit_dest(): server weight less than zero
[  211.033653][ T5884] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  211.093136][ T9653] IPVS: using max 82 ests per chain, 196800 per kthread
[  211.150277][ T9663] mmap: syz.4.1404 (9663): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  211.186525][ T5884] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.190782][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  211.205893][ T5884] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  211.211488][ T5884] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  211.216855][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.230482][ T9665] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  211.238547][ T5884] hub 4-1:1.0: bad descriptor, ignoring hub
[  211.247573][ T5884] hub 4-1:1.0: probe with driver hub failed with error -5
[  211.255747][ T5884] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  211.308570][ T9661] loop2: detected capacity change from 0 to 32768
[  211.312756][ T9661] bcachefs (/dev/loop2): error reading superblock: block size (0) smaller than device block size (512)
[  211.317990][ T9661] bcachefs: bch2_fs_get_tree() error: block_size_too_small
[  211.563586][ T6027] usb 4-1: USB disconnect, device number 3
[  211.645547][ T9682] loop2: detected capacity change from 0 to 2048
[  211.656306][ T9682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.715156][ T5851] Bluetooth: hci2: command tx timeout
[  211.963414][ T1273] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  212.123599][ T1273] usb 3-1: too many configurations: 151, using maximum allowed: 8
[  212.138460][ T1273] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  212.152646][ T1273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  212.156432][ T1273] usb 3-1: Product: syz
[  212.158226][ T1273] usb 3-1: Manufacturer: syz
[  212.160237][ T1273] usb 3-1: SerialNumber: syz
[  212.164672][ T1273] usb 3-1: config 0 descriptor??
[  212.281923][ T9693] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  212.336653][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1418'.
[  212.382462][ T1273] usb 3-1: USB disconnect, device number 20
[  212.447318][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.488573][ T9700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.529328][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.587063][ T9700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.620238][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.669246][ T9700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.713534][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.750932][ T9700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.914768][   T12] bridge_slave_1: left allmulticast mode
[  212.917663][   T12] bridge_slave_1: left promiscuous mode
[  212.920384][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.950722][   T12] bridge_slave_0: left allmulticast mode
[  212.953211][   T12] bridge_slave_0: left promiscuous mode
[  212.956117][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.033636][ T9708] loop3: detected capacity change from 0 to 512
[  213.065706][ T9708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.128568][ T8935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.377713][ T9717] loop3: detected capacity change from 0 to 32768
[  213.381926][ T9717] bcachefs (/dev/loop3): error validating superblock: Invalid superblock: optional field with size 0 (type 0)
[  213.387487][ T9717] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  213.566383][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  213.571752][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.577224][   T12] bond0 (unregistering): Released all slaves
[  213.634928][ T5877] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.647892][   T12] tipc: Disabling bearer <eth:batadv0>
[  213.650973][   T12] tipc: Left network mode
[  213.704612][ T5912] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.743559][ T5912] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.750703][ T5912] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.861039][   T12] team0: Port device wlan1 removed
[  213.941467][ T9729] loop3: detected capacity change from 0 to 32768
[  213.957339][ T9729] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1430 (9729)
[  213.988465][ T9729] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  214.003330][ T9729] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  214.062807][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  214.120750][ T9729] BTRFS info (device loop3): enabling ssd optimizations
[  214.123662][ T9729] BTRFS info (device loop3): enabling free space tree
[  214.159442][   T12] hsr_slave_0: left promiscuous mode
[  214.175031][   T12] hsr_slave_1: left promiscuous mode
[  214.179901][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  214.183665][   T12] batadv0: mtu less than device minimum
[  214.187210][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  214.193077][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  214.198640][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  214.204396][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  214.209854][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  214.215389][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  214.220732][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  214.226338][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  214.231831][   T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  214.256165][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  214.265000][ T8935] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  214.268665][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.302910][ T5884] usb 5-1: Using ep0 maxpacket: 16
[  214.307066][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  214.317708][ T5884] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  214.321640][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.325615][ T5884] usb 5-1: Product: syz
[  214.327472][ T5884] usb 5-1: Manufacturer: syz
[  214.329473][ T5884] usb 5-1: SerialNumber: syz
[  214.334633][   T12] batman_adv: batadv0: Interface deactivated: dummy0
[  214.337463][   T12] batman_adv: batadv0: Removing interface: dummy0
[  214.341179][ T5884] usb 5-1: config 0 descriptor??
[  214.397803][   T12] veth1_macvtap: left promiscuous mode
[  214.413091][   T12] veth0_macvtap: left promiscuous mode
[  214.417400][   T12] veth1_vlan: left promiscuous mode
[  214.419814][   T12] veth0_vlan: left promiscuous mode
[  214.856821][ T5884] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  214.897492][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  214.911083][ T5884] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  214.917471][ T5884] usb 5-1: media controller created
[  214.966413][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  215.063785][ T5884] zl10353_read_register: readreg error (reg=127, ret==0)
[  215.066745][ T5884] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  215.069924][ T5884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  215.077281][ T5884] usb 5-1: USB disconnect, device number 2
[  215.146365][ T5884] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  215.281428][   T12] team0 (unregistering): Port device team_slave_1 removed
[  215.309988][   T12] team0 (unregistering): Port device team_slave_0 removed
[  215.424599][ T9790] loop2: detected capacity change from 0 to 512
[  215.436787][ T9790] EXT4-fs: Ignoring removed nobh option
[  215.444415][ T9790] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1443: iget: bad i_size value: 38620345925642
[  215.450168][ T9790] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1443: couldn't read orphan inode 15 (err -117)
[  215.456278][ T9790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.535240][ T9790] EXT4-fs (loop2): shut down requested (0)
[  215.561519][ T1153] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u9:10: bg 0: block 5: invalid block bitmap
[  215.580074][ T1153] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 576 with error 28
[  215.594428][ T1153] EXT4-fs (loop2): This should not happen!! Data will be lost
[  215.594428][ T1153] 
[  215.603123][ T1153] EXT4-fs (loop2): Total free blocks count 0
[  215.613541][ T1153] EXT4-fs (loop2): Free/Dirty block details
[  215.629819][ T1153] EXT4-fs (loop2): free_blocks=0
[  215.646890][ T1153] EXT4-fs (loop2): dirty_blocks=580
[  215.649495][ T1153] EXT4-fs (loop2): Block reservation details
[  215.653812][ T1153] EXT4-fs (loop2): i_reserved_data_blocks=580
[  217.191336][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'.
[  217.197651][ T9843] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1457'.
[  218.074046][ T9863] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  218.416183][ T9877] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  218.790184][ T9896] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  218.936555][ T9902] Bluetooth: hci0: service_discovery: too big uuid_count value 65535
[  219.234928][ T9922] delete_channel: no stack
[  219.411829][   T47] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  219.636171][   T47] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  219.639632][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.645004][   T47] usb 4-1: config 0 descriptor??
[  219.878557][   T47] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  220.071613][   T47] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  220.075905][   T47] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  220.080450][   T47] asix 4-1:0.0: probe with driver asix failed with error -71
[  220.092213][   T47] usb 4-1: USB disconnect, device number 4
[  220.782130][ T9972] loop2: detected capacity change from 0 to 4096
[  220.791634][ T9972] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  220.825420][ T9972] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  220.835270][ T9972] ntfs3(loop2): ino=19, mi_enum_attr
[  220.853158][ T9972] ntfs3(loop2): failed to convert "c46c" to cp874
[  220.856343][ T9972] ntfs3(loop2): ino=20, mi_enum_attr
[  220.963905][ T9978] loop2: detected capacity change from 0 to 128
[  220.968508][ T9978] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  221.055763][ T9980] netlink: 'syz.3.1509': attribute type 6 has an invalid length.
[  221.059103][ T9980] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1509'.
[  221.783008][T10003] autofs: Bad value for 'fd'
[  221.821767][ T5849] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  221.898241][T10009] loop4: detected capacity change from 0 to 64
[  222.011634][ T5849] usb 3-1: config 0 has no interfaces?
[  222.016338][ T5849] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e
[  222.020197][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.031527][ T5849] usb 3-1: Product: syz
[  222.033395][ T5849] usb 3-1: Manufacturer: syz
[  222.035425][ T5849] usb 3-1: SerialNumber: syz
[  222.040666][ T5849] usb 3-1: config 0 descriptor??
[  222.075479][T10011] loop4: detected capacity change from 0 to 4096
[  222.094052][T10011] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  222.276444][   T47] usb 3-1: USB disconnect, device number 21
[  222.308267][T10019] loop4: detected capacity change from 0 to 32768
[  222.341431][T10019] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.350419][T10019] XFS (loop4): Ending clean mount
[  222.378509][ T9390] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.525886][T10035] Unsupported ieee802154 address type: 0
[  222.705651][T10041] loop4: detected capacity change from 0 to 32768
[  223.057628][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1540'.
[  223.057984][T10062] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1541'.
[  223.060562][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1540'.
[  223.536984][T10078] loop3: detected capacity change from 0 to 8192
[  223.553011][T10078] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  224.962375][T10144] loop4: detected capacity change from 0 to 256
[  225.175654][ T6027] libceph: connect (1)[c::]:6789 error -101
[  225.177853][ T6027] libceph: mon0 (1)[c::]:6789 connect error
[  225.206239][T10166] netlink: 'syz.3.1559': attribute type 8 has an invalid length.
[  225.277643][T10159] ceph: No mds server is up or the cluster is laggy
[  225.963872][T10182] loop3: detected capacity change from 0 to 1764
[  226.758321][T10207] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.770653][T10207] vxfs: unable to read disk superblock at 1
[  226.773344][T10207] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  226.776662][T10207] vxfs: unable to read disk superblock at 8
[  226.778658][T10207] vxfs: can't find superblock.
[  227.344158][T10223] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1581'.
[  227.353703][T10223] netlink: 'syz.2.1581': attribute type 1 has an invalid length.
[  227.483055][T10231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1585'.
[  227.930153][ T6027] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  228.081791][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  228.086752][ T6027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.090935][ T6027] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  228.091074][T10258] loop4: detected capacity change from 0 to 1024
[  228.093912][ T6027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.098185][T10258] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  228.108101][T10258] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  228.109868][ T6027] usb 4-1: config 0 descriptor??
[  228.111065][T10258] EXT4-fs (loop4): orphan cleanup on readonly fs
[  228.111611][T10258] Quota error (device loop4): v2_read_file_info: Block with free entry 1283 out of range (1, 6).
[  228.119944][T10258] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  228.125476][T10258] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  228.128446][T10258] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1597: Freeing blocks not in datazone - block = 0, count = 4096
[  228.135817][T10258] EXT4-fs (loop4): 1 orphan inode deleted
[  228.138916][T10258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  228.217818][   T33] audit: type=1326 audit(1756825366.273:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.4.1597" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af438ebe9 code=0x7ffc0000
[  228.237455][   T33] audit: type=1326 audit(1756825366.273:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.4.1597" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af438ebe9 code=0x7ffc0000
[  228.346027][T10273] netlink: 'syz.2.1604': attribute type 4 has an invalid length.
[  228.424376][T10277] net_ratelimit: 30 callbacks suppressed
[  228.424387][T10277] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  228.457563][T10279] loop2: detected capacity change from 0 to 256
[  228.544532][ T6027] glorious 0003:258A:0036.0003: unknown main item tag 0x1
[  228.556223][ T6027] glorious 0003:258A:0036.0003: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0
[  228.990444][ T9390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.995528][   T10] usb 4-1: USB disconnect, device number 5
[  229.086467][T10292] fuse: Bad value for 'fd'
[  229.094090][T10292] lo speed is unknown, defaulting to 1000
[  229.097692][T10292] lo speed is unknown, defaulting to 1000
[  229.104038][T10292] lo speed is unknown, defaulting to 1000
[  229.111559][T10292] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  229.118945][T10292] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  229.163712][T10292] lo speed is unknown, defaulting to 1000
[  229.173359][T10292] lo speed is unknown, defaulting to 1000
[  229.177820][T10292] lo speed is unknown, defaulting to 1000
[  229.182794][T10292] lo speed is unknown, defaulting to 1000
[  229.186734][T10292] lo speed is unknown, defaulting to 1000
[  229.586132][T10323] bond0: option use_carrier: invalid value (255)
[  229.854585][T10343] loop2: detected capacity change from 0 to 512
[  229.876738][T10343] EXT4-fs (loop2): filesystem is read-only
[  229.890658][T10343] EXT4-fs (loop2): filesystem is read-only
[  229.893772][T10343] EXT4-fs (loop2): orphan cleanup on readonly fs
[  229.895918][T10343] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1627: bad orphan inode 16
[  229.900442][T10343] ext4_test_bit(bit=15, block=3) = 0
[  229.903077][T10343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  229.948800][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.050837][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  230.232193][   T10] usb 4-1: Using ep0 maxpacket: 16
[  230.272552][   T10] usb 4-1: config 4 has an invalid interface number: 51 but max is 0
[  230.281346][   T10] usb 4-1: config 4 has no interface number 0
[  230.284260][   T10] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  230.288406][   T10] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  230.310231][   T10] usb 4-1: config 4 interface 51 has no altsetting 0
[  230.314778][   T10] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  230.318802][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.635124][   T10] usb 4-1: Product: syz
[  230.636986][   T10] usb 4-1: Manufacturer: syz
[  230.638982][   T10] usb 4-1: SerialNumber: syz
[  230.667009][T10340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.674369][T10340] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.886229][   T10] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -71
[  230.911476][   T10] usb 4-1: USB disconnect, device number 6
[  231.078166][T10389] loop4: detected capacity change from 0 to 512
[  231.081438][T10389] EXT4-fs: Ignoring removed oldalloc option
[  231.100739][T10389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.113250][T10389] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  231.141217][ T9390] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.081458][T10418] loop2: detected capacity change from 0 to 512
[  233.283819][T10433] loop4: detected capacity change from 0 to 764
[  235.366831][T10456] loop4: detected capacity change from 0 to 256
[  235.399469][T10456] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  235.451728][T10456] loop4: detected capacity change from 256 to 64
[  235.981528][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  235.987413][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  235.992470][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  235.995506][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.000365][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.164680][T10472] chnl_net:caif_netlink_parms(): no params data found
[  236.217233][T10472] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.221646][T10472] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.224196][T10472] bridge_slave_0: entered allmulticast mode
[  236.227110][T10472] bridge_slave_0: entered promiscuous mode
[  236.232574][T10472] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.235249][T10472] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.237998][T10472] bridge_slave_1: entered allmulticast mode
[  236.243114][T10472] bridge_slave_1: entered promiscuous mode
[  236.274465][T10472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.282769][T10472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.306834][T10472] team0: Port device team_slave_0 added
[  236.313153][T10472] team0: Port device team_slave_1 added
[  236.334012][T10472] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.337077][T10472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.352483][T10472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.357971][T10472] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.362005][T10472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.375051][T10472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.422965][T10472] hsr_slave_0: entered promiscuous mode
[  236.425379][T10472] hsr_slave_1: entered promiscuous mode
[  236.427788][T10472] debugfs: 'hsr0' already exists in 'hsr'
[  236.431270][T10472] Cannot create hsr debugfs directory
[  236.626485][T10472] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  236.652411][T10472] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  236.674678][T10472] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  236.692686][T10472] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  236.753602][T10472] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.774681][T10472] 8021q: adding VLAN 0 to HW filter on device team0
[  236.781381][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.783826][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.795082][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.798210][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.924877][T10472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.051747][T10472] veth0_vlan: entered promiscuous mode
[  237.058276][T10472] veth1_vlan: entered promiscuous mode
[  237.076283][T10472] veth0_macvtap: entered promiscuous mode
[  237.082057][T10472] veth1_macvtap: entered promiscuous mode
[  237.094823][T10472] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.105408][T10472] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.117402][ T5717] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.121469][ T5717] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.132231][ T5717] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.136546][ T5717] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.218635][T10120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.222736][T10120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.251555][T10126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.257104][T10126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.342867][T10515] gretap1: entered promiscuous mode
[  238.041649][ T5851] Bluetooth: hci2: command tx timeout
[  238.579953][T10557] loop2: detected capacity change from 0 to 1024
[  238.584255][T10557] EXT4-fs: Ignoring removed oldalloc option
[  238.598542][T10557] EXT4-fs: Ignoring removed bh option
[  238.632844][T10557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.678046][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.929971][ T5851] Bluetooth: hci0: unexpected event for opcode 0x2011
[  239.632186][T10636] futex_wake_op: syz.5.1732 tries to shift op by -1; fix this program
[  239.747564][T10640] loop5: detected capacity change from 0 to 4096
[  239.755361][T10640] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  239.769853][T10640] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  239.774435][T10640] ntfs3(loop5): ino=19, mi_enum_attr
[  240.014817][T10659] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1741'.
[  240.030824][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1741'.
[  240.108397][ T5851] Bluetooth: hci2: command tx timeout
[  241.195963][T10691] loop3: detected capacity change from 0 to 1024
[  241.206400][T10693] tipc: Started in network mode
[  241.210289][T10693] tipc: Node identity ac1414aa, cluster identity 4711
[  241.214536][T10693] tipc: Enabled bearer <udp:s>, priority 10
[  241.235126][T10691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  241.241363][T10691] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.265891][   T33] audit: type=1800 audit(1756825379.325:52): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1755" name="file1" dev="loop3" ino=15 res=0 errno=0
[  241.368154][ T8935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  241.476873][T10702] loop3: detected capacity change from 0 to 1024
[  241.494734][T10702] EXT4-fs: Ignoring removed nobh option
[  241.497185][T10702] EXT4-fs: Ignoring removed bh option
[  241.552554][T10702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.199095][ T5238] Bluetooth: hci2: command tx timeout
[  242.231377][T10731] netlink: 'syz.5.1770': attribute type 4 has an invalid length.
[  242.337902][ T5898] tipc: Node number set to 2886997162
[  242.819649][T10750] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1779'.
[  242.946984][ T8935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.436595][T10776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1786'.
[  244.277860][ T5238] Bluetooth: hci2: command 0x0419 tx timeout
[  244.920953][T10829] tipc: Failed to remove unknown binding: 66,3,3/2886997162:2887120560/2887120561
[  244.979984][T10837] netlink: 'syz.5.1819': attribute type 2 has an invalid length.
[  244.983004][T10837] netlink: 'syz.5.1819': attribute type 1 has an invalid length.
[  244.985667][T10837] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1819'.
[  245.103578][T10845] loop5: detected capacity change from 0 to 2048
[  245.139422][T10845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.224143][ T6066] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  245.237313][ T6066] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  245.245614][ T6066] EXT4-fs (loop5): This should not happen!! Data will be lost
[  245.245614][ T6066] 
[  245.250676][ T6066] EXT4-fs (loop5): Total free blocks count 0
[  245.252688][ T6066] EXT4-fs (loop5): Free/Dirty block details
[  245.254703][ T6066] EXT4-fs (loop5): free_blocks=4096
[  245.256464][ T6066] EXT4-fs (loop5): dirty_blocks=528
[  245.258686][ T6066] EXT4-fs (loop5): Block reservation details
[  245.260675][ T6066] EXT4-fs (loop5): i_reserved_data_blocks=33
[  245.263311][ T6066] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 5 with error 28
[  246.347216][ T5851] Bluetooth: hci2: command 0x0419 tx timeout
[  246.444687][T10879] loop3: detected capacity change from 0 to 40427
[  246.459169][T10879] F2FS-fs (loop3): invalid crc value
[  246.533353][T10879] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  246.538607][T10879] F2FS-fs (loop3): Start checkpoint disabled!
[  246.545455][T10879] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  246.593460][T10122] kworker/u9:14: attempt to access beyond end of device
[  246.593460][T10122] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  246.604110][T10122] CPU: 0 UID: 0 PID: 10122 Comm: kworker/u9:14 Not tainted syzkaller #0 PREEMPT(full) 
[  246.604124][T10122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  246.604131][T10122] Workqueue: writeback wb_workfn (flush-7:3)
[  246.604169][T10122] Call Trace:
[  246.604174][T10122]  <TASK>
[  246.604179][T10122]  dump_stack_lvl+0x189/0x250
[  246.604196][T10122]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.604208][T10122]  ? __pfx_queue_work_on+0x10/0x10
[  246.604219][T10122]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  246.604233][T10122]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  246.604255][T10122]  f2fs_handle_critical_error+0x37c/0x540
[  246.604273][T10122]  f2fs_write_end_io+0x886/0xb60
[  246.604288][T10122]  __submit_merged_bio+0x27a/0x6a0
[  246.604300][T10122]  __submit_merged_write_cond+0x255/0x530
[  246.604314][T10122]  f2fs_write_data_pages+0x261d/0x3000
[  246.604338][T10122]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  246.604368][T10122]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  246.604391][T10122]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  246.604405][T10122]  ? trace_f2fs_writepages+0x7f/0x200
[  246.604414][T10122]  ? f2fs_write_node_pages+0x478/0x6e0
[  246.604432][T10122]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  246.604442][T10122]  do_writepages+0x32e/0x550
[  246.604454][T10122]  ? reacquire_held_locks+0x127/0x1d0
[  246.604460][T10122]  ? writeback_sb_inodes+0x384/0x1010
[  246.604473][T10122]  __writeback_single_inode+0x145/0xff0
[  246.604481][T10122]  ? do_raw_spin_unlock+0x4d/0x240
[  246.604491][T10122]  writeback_sb_inodes+0x6c7/0x1010
[  246.604499][T10122]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.604519][T10122]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  246.604543][T10122]  ? rcu_is_watching+0x15/0xb0
[  246.604554][T10122]  wb_writeback+0x43b/0xaf0
[  246.604566][T10122]  ? queue_io+0x3a1/0x590
[  246.604596][T10122]  ? __pfx_wb_writeback+0x10/0x10
[  246.604607][T10122]  ? _raw_spin_unlock_irq+0x23/0x50
[  246.604618][T10122]  wb_workfn+0x409/0xef0
[  246.604631][T10122]  ? __pfx_wb_workfn+0x10/0x10
[  246.604640][T10122]  ? __lock_acquire+0xab9/0xd20
[  246.604654][T10122]  ? process_scheduled_works+0x9ef/0x17b0
[  246.604668][T10122]  ? _raw_spin_unlock_irq+0x23/0x50
[  246.604676][T10122]  ? process_scheduled_works+0x9ef/0x17b0
[  246.604682][T10122]  ? process_scheduled_works+0x9ef/0x17b0
[  246.604689][T10122]  process_scheduled_works+0xae1/0x17b0
[  246.604707][T10122]  ? __pfx_process_scheduled_works+0x10/0x10
[  246.604721][T10122]  worker_thread+0x8a0/0xda0
[  246.604738][T10122]  kthread+0x711/0x8a0
[  246.604748][T10122]  ? __pfx_worker_thread+0x10/0x10
[  246.604754][T10122]  ? __pfx_kthread+0x10/0x10
[  246.604763][T10122]  ? _raw_spin_unlock_irq+0x23/0x50
[  246.604771][T10122]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.604779][T10122]  ? __pfx_kthread+0x10/0x10
[  246.604788][T10122]  ret_from_fork+0x3fc/0x770
[  246.604796][T10122]  ? __pfx_ret_from_fork+0x10/0x10
[  246.604806][T10122]  ? __switch_to_asm+0x39/0x70
[  246.604814][T10122]  ? __switch_to_asm+0x33/0x70
[  246.604821][T10122]  ? __pfx_kthread+0x10/0x10
[  246.604829][T10122]  ret_from_fork_asm+0x1a/0x30
[  246.604844][T10122]  </TASK>
[  246.605020][T10122] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  247.636368][T10914] loop5: detected capacity change from 0 to 64
[  247.664179][T10913] Trying to free block not in datazone
[  247.881187][T10921] loop3: detected capacity change from 0 to 128
[  247.915902][T10921] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  248.268913][  T791] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  248.666815][  T791] usb 6-1: Using ep0 maxpacket: 8
[  248.670209][  T791] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.673596][  T791] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  248.678384][  T791] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  248.685387][  T791] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  248.690002][  T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.692891][  T791] usb 6-1: Product: syz
[  248.694570][  T791] usb 6-1: Manufacturer: syz
[  248.696349][  T791] usb 6-1: SerialNumber: syz
[  249.303326][T10937] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[  249.649004][T10950] 9pnet_fd: Insufficient options for proto=fd
[  251.071093][  T791] usb 6-1: 0:2 : does not exist
[  251.117719][  T791] usb 6-1: USB disconnect, device number 2
[  251.147881][ T5851] Bluetooth: hci1: command tx timeout
[  251.153097][ T5959] udevd[5959]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  251.916110][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  252.065978][   T24] usb 4-1: Using ep0 maxpacket: 32
[  252.075625][   T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  252.084715][   T24] usb 4-1: config 0 has no interface number 0
[  252.089873][   T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  252.093248][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.096991][   T24] usb 4-1: Product: syz
[  252.098741][   T24] usb 4-1: Manufacturer: syz
[  252.100695][   T24] usb 4-1: SerialNumber: syz
[  252.104957][   T24] usb 4-1: config 0 descriptor??
[  252.112747][   T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  252.317644][   T24] usb 4-1: qt2_setup_urbs - submit read urb failed -8
[  252.320814][   T24] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8
[  252.495324][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1881'.
[  252.519933][   T24] usb 4-1: USB disconnect, device number 7
[  252.805105][T11039] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  253.340000][T11039] loop5: detected capacity change from 0 to 32768
[  253.369985][T11039] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  253.401036][T11039] XFS (loop5): Ending clean mount
[  253.615823][T10472] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  253.838902][T11071] netlink: 'syz.5.1896': attribute type 1 has an invalid length.
[  253.841725][T11071] netlink: 'syz.5.1896': attribute type 1 has an invalid length.
[  254.161612][T11082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1905'.
[  254.289093][T11087] loop5: detected capacity change from 0 to 16
[  254.303430][T11087] erofs (device loop5): mounted with root inode @ nid 36.
[  255.001551][T11097] fuse: Bad value for 'fd'
[  255.248426][T11109] loop5: detected capacity change from 0 to 164
[  255.734958][T11152] loop5: detected capacity change from 0 to 4096
[  255.757774][T11152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.820637][T10472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.875994][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.878903][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.914409][T11171] loop5: detected capacity change from 0 to 1024
[  255.921133][T11169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1945'.
[  255.932144][T11171] EXT4-fs (loop5): filesystem is read-only
[  255.932394][T11173] overlayfs: failed to clone upperpath
[  256.255753][ T5884] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  256.415340][ T5884] usb 6-1: Using ep0 maxpacket: 32
[  256.420224][ T5884] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  256.424100][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.432213][ T5884] usb 6-1: config 0 descriptor??
[  256.439290][ T5884] gspca_main: sq930x-2.14.0 probing 041e:403c
[  257.067646][   T33] audit: type=1326 audit(1756825395.138:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186998ebe9 code=0x7ffc0000
[  257.074643][   T33] audit: type=1326 audit(1756825395.138:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f186998ebe9 code=0x7ffc0000
[  257.082761][   T33] audit: type=1326 audit(1756825395.138:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186998ebe9 code=0x7ffc0000
[  257.091583][   T33] audit: type=1326 audit(1756825395.138:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186998ebe9 code=0x7ffc0000
[  257.099529][   T33] audit: type=1326 audit(1756825395.138:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f186998ebe9 code=0x7ffc0000
[  257.108974][   T33] audit: type=1326 audit(1756825395.138:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186998ebe9 code=0x7ffc0000
[  257.129980][   T33] audit: type=1326 audit(1756825395.138:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11202 comm="syz.3.1961" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186998ebe9 code=0x7ffc0000
[  257.440777][   T33] audit: type=1326 audit(1756825395.508:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.2.1967" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b0b8ebe9 code=0x7ffc0000
[  257.454294][ T5884] gspca_sq930x: ucbus_write failed -71
[  257.456742][   T33] audit: type=1326 audit(1756825395.508:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.2.1967" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b0b8ebe9 code=0x7ffc0000
[  257.464259][   T33] audit: type=1326 audit(1756825395.518:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11214 comm="syz.2.1967" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff2b0b8ebe9 code=0x7ffc0000
[  257.471752][ T5884] sq930x 6-1:0.0: probe with driver sq930x failed with error -71
[  257.476117][ T5884] usb 6-1: USB disconnect, device number 3
[  258.066943][T11233] netlink: 'syz.5.1976': attribute type 11 has an invalid length.
[  258.316695][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1982'.
[  260.299054][T11301] openvswitch: netlink: Multiple metadata blocks provided
[  261.338970][T11334] loop5: detected capacity change from 0 to 16
[  261.341558][T11334] erofs: Unknown parameter 'sched_switch'
[  262.550568][T11356] overlayfs: conflicting lowerdir path
[  262.990100][T11380] loop5: detected capacity change from 0 to 2048
[  263.151310][T11388] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  263.153730][T11388] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  263.691304][T11402] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  263.696228][T11402] team0: Device ipvlan3 is already an upper device of the team interface
[  263.950676][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  263.950688][   T33] audit: type=1326 audit(1756825401.999:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a3d8ebe9 code=0x7ffc0000
[  263.965552][   T33] audit: type=1326 audit(1756825401.999:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a3d8ebe9 code=0x7ffc0000
[  264.019733][   T33] audit: type=1326 audit(1756825402.079:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fc9a3d8ebe9 code=0x7ffc0000
[  264.049113][   T33] audit: type=1326 audit(1756825402.089:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a3d8ebe9 code=0x7ffc0000
[  264.061121][   T33] audit: type=1326 audit(1756825402.089:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11409 comm="syz.5.2055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a3d8ebe9 code=0x7ffc0000
[  264.170421][T11426] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1
[  264.173623][T11426] ref_ctr increment failed for inode: 0x27e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888028e79580
[  264.809054][T11439] binder: 11437:11439 ioctl c00c6211 ffffffffffffffff returned -14
[  264.906606][T11444] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2070'.
[  265.080109][T11450] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2073'.
[  265.112559][T11450] loop5: detected capacity change from 0 to 256
[  265.132450][T11450] FAT-fs (loop5): Directory bread(block 64) failed
[  265.137692][T11450] FAT-fs (loop5): Directory bread(block 65) failed
[  265.142085][T11450] FAT-fs (loop5): Directory bread(block 66) failed
[  265.153200][T11454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2075'.
[  265.156977][T11450] FAT-fs (loop5): Directory bread(block 67) failed
[  265.163395][T11450] FAT-fs (loop5): Directory bread(block 68) failed
[  265.163804][T11454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2075'.
[  265.171004][T11454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2075'.
[  265.175137][T11450] FAT-fs (loop5): Directory bread(block 69) failed
[  265.177857][T11450] FAT-fs (loop5): Directory bread(block 70) failed
[  265.185326][T11450] FAT-fs (loop5): Directory bread(block 71) failed
[  265.194394][T11450] FAT-fs (loop5): Directory bread(block 72) failed
[  265.199167][T11450] FAT-fs (loop5): Directory bread(block 73) failed
[  265.589805][T11476] loop5: detected capacity change from 0 to 4096
[  265.610356][T11476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.648032][T10472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.823326][T11488] netlink: 'syz.5.2090': attribute type 5 has an invalid length.
[  265.826658][T11488] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2090'.
[  266.985179][T11537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2108'.
[  267.126108][T11548] vlan2: entered promiscuous mode
[  267.128466][T11548] macvtap0: entered promiscuous mode
[  267.392506][T11564] : Can't lookup blockdev
[  268.476282][T11592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.586469][T11601] dns_resolver: Unsupported content type (218)
[  268.632756][T11602] loop5: detected capacity change from 0 to 4096
[  268.652107][T11602] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  268.678458][T11602] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  268.685687][T11602] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  268.696584][T11602] ntfs3(loop5): ino=1b, mi_enum_attr
[  269.348472][T11622] loop5: detected capacity change from 0 to 32768
[  269.359497][T11622] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2152 (11622)
[  269.381997][T11622] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  269.394781][T11622] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  269.479347][T11622] BTRFS info (device loop5): enabling ssd optimizations
[  269.483308][T11622] BTRFS info (device loop5): enabling free space tree
[  269.486227][T11622] BTRFS info (device loop5): use zstd compression, level 3
[  269.563265][T10472] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  269.690995][T11651] MTD: Attempt to mount non-MTD device "/dev/sr0"
[  269.829597][T11658] syzkaller1: entered allmulticast mode
[  270.058635][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2168'.
[  270.148162][T11680] overlayfs: failed to clone upperpath
[  270.313661][ T1273] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  270.486999][ T1273] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[  270.491530][ T1273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 197, setting to 64
[  270.496292][ T1273] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  270.500125][ T1273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.514884][ T1273] usb 6-1: config 0 descriptor??
[  270.517780][T11674] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  270.531067][ T1273] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  271.341058][T11711] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:20003
[  271.527236][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.531289][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.405907][T11735] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2192'.
[  273.135718][ T5898] usb 6-1: USB disconnect, device number 4
[  273.539574][T11779] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  274.209727][T11812] binder: 11811:11812 ioctl c0306201 200000000480 returned -14
[  274.445256][T11830] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2235'.
[  274.563415][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2237'.
[  275.529591][T11856] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  275.534366][T11856] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  276.460751][T11884] tmpfs: Bad value for 'usrquota_inode_hardlimit'
[  277.636424][T11916] loop5: detected capacity change from 0 to 40427
[  277.663705][T11916] F2FS-fs (loop5): invalid crc value
[  277.727331][T11916] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  277.732729][T11916] F2FS-fs (loop5): Start checkpoint disabled!
[  277.739067][T11916] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  277.830884][   T33] audit: type=1800 audit(1756825415.892:77): pid=11930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2274" name="file1" dev="loop5" ino=10 res=0 errno=0
[  277.899824][T11930] syz.5.2274: attempt to access beyond end of device
[  277.899824][T11930] loop5: rw=2049, sector=77824, nr_sectors = 984 limit=40427
[  278.188183][T11941] macvlan4: entered allmulticast mode
[  278.190486][T11941] veth1_vlan: entered allmulticast mode
[  278.205546][T11941] veth1_vlan: left allmulticast mode
[  278.278699][ T6075] kworker/u10:11: attempt to access beyond end of device
[  278.278699][ T6075] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  278.293217][ T6075] CPU: 1 UID: 0 PID: 6075 Comm: kworker/u10:11 Not tainted syzkaller #0 PREEMPT(full) 
[  278.293255][ T6075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  278.293263][ T6075] Workqueue: writeback wb_workfn (flush-7:5)
[  278.293283][ T6075] Call Trace:
[  278.293289][ T6075]  <TASK>
[  278.293295][ T6075]  dump_stack_lvl+0x189/0x250
[  278.293313][ T6075]  ? __pfx_dump_stack_lvl+0x10/0x10
[  278.293327][ T6075]  ? __pfx_queue_work_on+0x10/0x10
[  278.293339][ T6075]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  278.293356][ T6075]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  278.293379][ T6075]  f2fs_handle_critical_error+0x37c/0x540
[  278.293402][ T6075]  f2fs_write_end_io+0x886/0xb60
[  278.293433][ T6075]  __submit_merged_bio+0x27a/0x6a0
[  278.293454][ T6075]  __submit_merged_write_cond+0x255/0x530
[  278.293476][ T6075]  f2fs_write_data_pages+0x261d/0x3000
[  278.293517][ T6075]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  278.293545][ T6075]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  278.293582][ T6075]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  278.293608][ T6075]  ? trace_f2fs_writepages+0x7f/0x200
[  278.293624][ T6075]  ? f2fs_write_node_pages+0x478/0x6e0
[  278.293663][ T6075]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  278.293690][ T6075]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  278.293708][ T6075]  do_writepages+0x32e/0x550
[  278.293727][ T6075]  ? reacquire_held_locks+0x127/0x1d0
[  278.293739][ T6075]  ? writeback_sb_inodes+0x384/0x1010
[  278.293760][ T6075]  __writeback_single_inode+0x145/0xff0
[  278.293775][ T6075]  ? do_raw_spin_unlock+0x4d/0x240
[  278.293792][ T6075]  writeback_sb_inodes+0x6c7/0x1010
[  278.293825][ T6075]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  278.293870][ T6075]  ? rcu_is_watching+0x15/0xb0
[  278.293889][ T6075]  wb_writeback+0x43b/0xaf0
[  278.293910][ T6075]  ? queue_io+0x3a1/0x590
[  278.293927][ T6075]  ? __pfx_wb_writeback+0x10/0x10
[  278.293947][ T6075]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.293966][ T6075]  wb_workfn+0x409/0xef0
[  278.293990][ T6075]  ? __pfx_wb_workfn+0x10/0x10
[  278.294006][ T6075]  ? __lock_acquire+0xab9/0xd20
[  278.294030][ T6075]  ? process_scheduled_works+0x9ef/0x17b0
[  278.294047][ T6075]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.294062][ T6075]  ? process_scheduled_works+0x9ef/0x17b0
[  278.294071][ T6075]  ? process_scheduled_works+0x9ef/0x17b0
[  278.294084][ T6075]  process_scheduled_works+0xae1/0x17b0
[  278.294141][ T6075]  ? __pfx_process_scheduled_works+0x10/0x10
[  278.294167][ T6075]  worker_thread+0x8a0/0xda0
[  278.294180][ T6075]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  278.294200][ T6075]  ? __kthread_parkme+0x7b/0x200
[  278.294220][ T6075]  kthread+0x711/0x8a0
[  278.294237][ T6075]  ? __pfx_worker_thread+0x10/0x10
[  278.294248][ T6075]  ? __pfx_kthread+0x10/0x10
[  278.294263][ T6075]  ? _raw_spin_unlock_irq+0x23/0x50
[  278.294278][ T6075]  ? lockdep_hardirqs_on+0x9c/0x150
[  278.294293][ T6075]  ? __pfx_kthread+0x10/0x10
[  278.294308][ T6075]  ret_from_fork+0x3fc/0x770
[  278.294322][ T6075]  ? __pfx_ret_from_fork+0x10/0x10
[  278.294338][ T6075]  ? __switch_to_asm+0x39/0x70
[  278.294352][ T6075]  ? __switch_to_asm+0x33/0x70
[  278.294365][ T6075]  ? __pfx_kthread+0x10/0x10
[  278.294379][ T6075]  ret_from_fork_asm+0x1a/0x30
[  278.294405][ T6075]  </TASK>
[  278.294612][ T6075] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  279.034273][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2294'.
[  280.046957][T11995] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  281.041378][ T5884] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  281.231659][ T5884] usb 6-1: Using ep0 maxpacket: 16
[  281.278796][ T5884] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.284723][ T5884] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  281.292430][ T5884] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  281.296288][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  281.299624][ T5884] usb 6-1: SerialNumber: syz
[  281.312631][ T5884] cdc_acm 6-1:1.0: skipping garbage
[  281.528277][ T5884] usb 6-1: USB disconnect, device number 5
[  281.869450][T12063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2337'.
[  282.921926][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2364'.
[  282.986820][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'.
[  283.090963][ T1273] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  283.251482][ T1273] usb 6-1: Using ep0 maxpacket: 16
[  283.258290][ T1273] usb 6-1: config index 0 descriptor too short (expected 4495, got 71)
[  283.266616][ T1273] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  283.276831][ T1273] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  283.288893][ T1273] usb 6-1: config 0 has no interface number 0
[  283.302981][ T1273] usb 6-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01
[  283.306826][ T1273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.318712][ T1273] usb 6-1: Product: syz
[  283.320840][ T1273] usb 6-1: Manufacturer: syz
[  283.323773][ T1273] usb 6-1: SerialNumber: syz
[  283.341599][ T1273] usb 6-1: config 0 descriptor??
[  283.554425][ T1273] usb 6-1: Found UVC 0.00 device syz (046c:14e0)
[  283.557076][ T1273] usb 6-1: No valid video chain found.
[  283.874101][T12110] loop5: detected capacity change from 0 to 2048
[  283.877526][T12110] udf: Unknown parameter ''
[  285.839758][ T1273] usb 6-1: USB disconnect, device number 6
[  286.726277][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2423'.
[  287.547819][  T791] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  287.773687][  T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.777887][  T791] usb 6-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[  287.785942][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.798234][  T791] usb 6-1: config 0 descriptor??
[  288.450812][  T791] usb 6-1: USB disconnect, device number 7
[  289.313396][T12362] loop5: detected capacity change from 0 to 32768
[  289.325040][T12362] bcachefs (/dev/loop5): error reading default superblock: Unsupported superblock version 0.0: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive)
[  289.329292][T12368] team_slave_0: entered promiscuous mode
[  289.334474][T12368] team_slave_1: entered promiscuous mode
[  289.357345][T12362] bcachefs (/dev/loop5): error validating superblock: Bad number of member devices 126 (max 64)
[  289.372712][T12362] bcachefs: bch2_fs_get_tree() error: invalid_sb_too_many_members
[  289.598221][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2485'.
[  289.603484][T12384] openvswitch: netlink: Flow key attr not present in new flow.
[  289.634973][T12385] loop5: detected capacity change from 0 to 512
[  289.667977][T12385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.680119][T12385] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.717658][T12392] netlink: 'syz.2.2484': attribute type 1 has an invalid length.
[  289.828652][T12394] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  289.835670][T12394] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  289.840605][T12394] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  291.347606][T10472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.702644][T12445] loop5: detected capacity change from 0 to 1024
[  291.755097][T12445] hfsplus: request for non-existent node 62977 in B*Tree
[  291.758784][T12445] hfsplus: request for non-existent node 62977 in B*Tree
[  291.777152][   T26] hfsplus: b-tree write err: -5, ino 3
[  292.914674][T12457] loop5: detected capacity change from 0 to 32768
[  292.999551][T12457] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  293.018382][T12457] XFS (loop5): Ending clean mount
[  293.079397][T10472] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  293.932688][T12495] veth0_macvtap: left promiscuous mode
[  294.241499][T12510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.286505][T12516] loop5: detected capacity change from 0 to 256
[  294.302749][T12516] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  294.306514][T12516] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  294.314069][T12516] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  294.783441][T12561] comedi comedi1: fl512: a I/O base address must be specified
[  294.899842][T12573] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2565'.
[  294.902805][T12573] openvswitch: netlink: EtherType 0 is less than min 600
[  294.974693][T12577] loop5: detected capacity change from 0 to 1024
[  295.477788][T12583] loop5: detected capacity change from 0 to 32768
[  295.501395][T12583] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  295.514128][T12583] (syz.5.2571,12583,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64
[  295.521524][T12583] (syz.5.2571,12583,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  295.526181][T12583] (syz.5.2571,12583,1):ocfs2_mknod:301 ERROR: status = -2
[  295.533377][T12583] (syz.5.2571,12583,1):ocfs2_mknod:505 ERROR: status = -2
[  295.564899][T10472] ocfs2: Unmounting device (7,5) on (node local)
[  295.891000][T12593] loop5: detected capacity change from 0 to 40427
[  295.897101][T12593] F2FS-fs (loop5): invalid crc value
[  295.961806][T12596] overlayfs: failed to clone upperpath
[  295.962600][T12593] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  295.974647][T12593] F2FS-fs (loop5): Start checkpoint disabled!
[  295.981258][T12593] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  296.006000][T10118] kworker/u9:12: attempt to access beyond end of device
[  296.006000][T10118] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  296.011907][T10118] CPU: 0 UID: 0 PID: 10118 Comm: kworker/u9:12 Not tainted syzkaller #0 PREEMPT(full) 
[  296.011925][T10118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.011931][T10118] Workqueue: writeback wb_workfn (flush-7:5)
[  296.011952][T10118] Call Trace:
[  296.011956][T10118]  <TASK>
[  296.011962][T10118]  dump_stack_lvl+0x189/0x250
[  296.011980][T10118]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.011993][T10118]  ? __pfx_queue_work_on+0x10/0x10
[  296.012004][T10118]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  296.012018][T10118]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  296.012041][T10118]  f2fs_handle_critical_error+0x37c/0x540
[  296.012064][T10118]  f2fs_write_end_io+0x886/0xb60
[  296.012089][T10118]  __submit_merged_bio+0x27a/0x6a0
[  296.012109][T10118]  __submit_merged_write_cond+0x255/0x530
[  296.012130][T10118]  f2fs_write_data_pages+0x261d/0x3000
[  296.012172][T10118]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  296.012204][T10118]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  296.012243][T10118]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  296.012258][T10118]  ? look_up_lock_class+0x74/0x170
[  296.012281][T10118]  ? trace_f2fs_writepages+0x7f/0x200
[  296.012296][T10118]  ? f2fs_write_node_pages+0x478/0x6e0
[  296.012329][T10118]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  296.012346][T10118]  do_writepages+0x32e/0x550
[  296.012364][T10118]  ? reacquire_held_locks+0x127/0x1d0
[  296.012375][T10118]  ? writeback_sb_inodes+0x384/0x1010
[  296.012395][T10118]  __writeback_single_inode+0x145/0xff0
[  296.012408][T10118]  ? do_raw_spin_unlock+0x4d/0x240
[  296.012425][T10118]  writeback_sb_inodes+0x6c7/0x1010
[  296.012437][T10118]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.012470][T10118]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  296.012516][T10118]  ? rcu_is_watching+0x15/0xb0
[  296.012535][T10118]  wb_writeback+0x43b/0xaf0
[  296.012556][T10118]  ? queue_io+0x3a1/0x590
[  296.012571][T10118]  ? __pfx_wb_writeback+0x10/0x10
[  296.012591][T10118]  ? _raw_spin_unlock_irq+0x23/0x50
[  296.012609][T10118]  wb_workfn+0x409/0xef0
[  296.012633][T10118]  ? __pfx_wb_workfn+0x10/0x10
[  296.012648][T10118]  ? __lock_acquire+0xab9/0xd20
[  296.012672][T10118]  ? process_scheduled_works+0x9ef/0x17b0
[  296.012687][T10118]  ? _raw_spin_unlock_irq+0x23/0x50
[  296.012701][T10118]  ? process_scheduled_works+0x9ef/0x17b0
[  296.012710][T10118]  ? process_scheduled_works+0x9ef/0x17b0
[  296.012721][T10118]  process_scheduled_works+0xae1/0x17b0
[  296.012752][T10118]  ? __pfx_process_scheduled_works+0x10/0x10
[  296.012778][T10118]  worker_thread+0x8a0/0xda0
[  296.012814][T10118]  kthread+0x711/0x8a0
[  296.012831][T10118]  ? __pfx_worker_thread+0x10/0x10
[  296.012867][T10118]  ? __pfx_kthread+0x10/0x10
[  296.012883][T10118]  ? _raw_spin_unlock_irq+0x23/0x50
[  296.012897][T10118]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.012909][T10118]  ? __pfx_kthread+0x10/0x10
[  296.012923][T10118]  ret_from_fork+0x3fc/0x770
[  296.012936][T10118]  ? __pfx_ret_from_fork+0x10/0x10
[  296.012947][T10118]  ? __switch_to_asm+0x39/0x70
[  296.012955][T10118]  ? __switch_to_asm+0x33/0x70
[  296.012962][T10118]  ? __pfx_kthread+0x10/0x10
[  296.012971][T10118]  ret_from_fork_asm+0x1a/0x30
[  296.012987][T10118]  </TASK>
[  296.012990][T10118] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  296.211225][T12609] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  296.607495][T12627] loop5: detected capacity change from 0 to 512
[  296.620096][T12627] EXT4-fs: Ignoring removed mblk_io_submit option
[  296.629571][T12627] EXT4-fs: inline encryption not supported
[  296.637260][T12627] EXT4-fs: Ignoring removed mblk_io_submit option
[  296.641265][T12627] EXT4-fs (loop5): Test dummy encryption mode enabled
[  296.643523][T12627] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  296.662970][T12627] EXT4-fs (loop5): 1 truncate cleaned up
[  296.666688][T12627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.697789][T10472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.753076][T12636] netlink: 'syz.5.2593': attribute type 4 has an invalid length.
[  296.770595][T12636] netlink: 'syz.5.2593': attribute type 4 has an invalid length.
[  297.033085][T12655] netlink: 'syz.3.2602': attribute type 2 has an invalid length.
[  297.051539][T12655] : entered promiscuous mode
[  297.293189][T12666] overlayfs: failed to clone upperpath
[  297.325765][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2608'.
[  297.372183][   T47] libceph: connect (1)[c::]:6789 error -101
[  297.374340][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  297.434608][T12681] netlink: 'syz.2.2613': attribute type 4 has an invalid length.
[  297.437229][T12681] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2613'.
[  297.637806][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2616'.
[  297.644376][   T47] libceph: connect (1)[c::]:6789 error -101
[  297.647113][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  297.658591][T12690] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2616'.
[  297.662719][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2616'.
[  297.827144][T12693] smc: net device bond0 applied user defined pnetid SYZ0
[  298.229720][T12674] ceph: No mds server is up or the cluster is laggy
[  298.549595][ T1273] libceph: connect (1)[c::]:6789 error -101
[  298.552496][ T1273] libceph: mon0 (1)[c::]:6789 connect error
[  298.737363][T12699] loop5: detected capacity change from 0 to 16
[  298.743187][T12699] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  298.860340][T12709] loop5: detected capacity change from 0 to 2048
[  298.883862][T12709] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  298.892294][T12709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  299.009909][T12720] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  299.829623][T12757] loop5: detected capacity change from 0 to 32768
[  299.839516][T12757] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2646 (12757)
[  299.864476][T12757] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  299.874473][T12757] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  300.015530][T12757] BTRFS info (device loop5): enabling ssd optimizations
[  300.020547][T12757] BTRFS info (device loop5): enabling free space tree
[  300.080224][T10472] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  301.476737][T12847] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  301.487750][T12847] SQUASHFS error: Failed to read block 0x0: -5
[  301.787148][T12866] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  301.827387][T12868] tmpfs: Bad value for 'mpol'
[  301.859570][T12859] loop5: detected capacity change from 0 to 40427
[  301.864055][T12859] F2FS-fs (loop5): invalid crc value
[  301.905147][T12859] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  301.917786][T12859] F2FS-fs (loop5): Start checkpoint disabled!
[  301.924638][T12859] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  302.072505][T12877] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  302.082386][T12877] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  302.407703][T12883] program syz.5.2693 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  302.788944][   T47] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  302.792517][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2710'.
[  302.876032][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2711'.
[  302.947367][   T47] usb 6-1: Using ep0 maxpacket: 16
[  302.951206][   T47] usb 6-1: config 1 has an invalid interface number: 223 but max is 0
[  302.954920][   T47] usb 6-1: config 1 has no interface number 0
[  302.963023][   T47] usb 6-1: config 1 interface 223 has no altsetting 0
[  302.968856][   T47] usb 6-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=42.53
[  302.973030][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.976397][   T47] usb 6-1: Product: syz
[  302.981520][   T47] usb 6-1: Manufacturer: syz
[  302.983719][   T47] usb 6-1: SerialNumber: syz
[  303.008642][   T47] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.223/input/input11
[  303.201283][ T5283] bcm5974 6-1:1.223: could not read from device
[  303.243813][ T5283] bcm5974 6-1:1.223: could not read from device
[  303.249774][   T47] usb 6-1: USB disconnect, device number 8
[  303.255521][ T5283] bcm5974 6-1:1.223: could not read from device
[  303.365399][T12930] netlink: 5028 bytes leftover after parsing attributes in process `syz.3.2716'.
[  303.369296][T12930] netlink: 5028 bytes leftover after parsing attributes in process `syz.3.2716'.
[  304.044591][T12947] tipc: Failed to remove unknown binding: 66,1,1/0:1173978666/1173978668
[  304.050181][T12947] tipc: Failed to remove unknown binding: 66,1,1/0:1173978666/1173978668
[  304.053646][T12947] tipc: Failed to remove unknown binding: 66,1,1/0:1173978666/1173978668
[  304.135000][T12953] loop5: detected capacity change from 0 to 4096
[  304.141159][T12953] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  304.959844][T12965] netlink: 'syz.2.2732': attribute type 1 has an invalid length.
[  304.967109][T12965] netlink: 'syz.2.2732': attribute type 4 has an invalid length.
[  304.970758][T12965] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2732'.
[  304.984290][T12965] netlink: 'syz.2.2732': attribute type 1 has an invalid length.
[  304.987827][T12965] netlink: 'syz.2.2732': attribute type 4 has an invalid length.
[  304.991226][T12965] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2732'.
[  305.657598][T13001] loop5: detected capacity change from 0 to 512
[  305.688679][T13001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.704565][T13001] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.753197][T10472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.855593][T13010] sit0: entered promiscuous mode
[  305.863384][T13010] netlink: 'syz.2.2752': attribute type 1 has an invalid length.
[  305.866573][T13010] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2752'.
[  305.952335][T13014] overlayfs: failed to clone upperpath
[  306.288785][T13035] netlink: ct family unspecified
[  306.291119][T13035] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  306.296814][T13026] ceph: No mds server is up or the cluster is laggy
[  306.596406][T13054] @: renamed from vlan0 (while UP)
[  306.682739][T13059] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2773'.
[  307.572093][T13070] loop5: detected capacity change from 0 to 32768
[  307.593978][T13070] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2778 (13070)
[  307.717694][T13070] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  307.731252][T13070] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  307.827053][T13070] BTRFS info (device loop5): enabling ssd optimizations
[  307.836697][T13070] BTRFS info (device loop5): enabling free space tree
[  307.925164][   T33] audit: type=1800 audit(1756825445.997:78): pid=13070 uid=0 auid=0 ses=1 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2778" name="file1" dev="loop5" ino=260 res=0 errno=0
[  307.984626][T10472] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  308.451940][T13106] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2785'.
[  308.634325][T13114] autofs4:pid:13114:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2816), cmd(0xc0189375)
[  308.640565][T13114] autofs4:pid:13114:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[  309.136331][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  309.256266][ T5884] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  309.408517][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  309.412523][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  309.422556][ T5884] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  309.425961][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.430917][ T5884] usb 6-1: config 0 descriptor??
[  309.439295][ T5884] hdpvr 6-1:0.0: Could not find bulk-in endpoint
[  309.442012][ T5884] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12
[  309.651559][ T5884] usb 6-1: USB disconnect, device number 9
[  311.542011][T13222] loop5: detected capacity change from 0 to 256
[  311.557268][T13222] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  312.650073][T13253] tipc: Started in network mode
[  312.653539][T13253] tipc: Node identity 0000000000000000000085d3ab8e0001, cluster identity 4711
[  312.659339][T13253] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  312.829473][T13264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  313.625169][T13288] loop5: detected capacity change from 0 to 16
[  313.630853][T13288] erofs (device loop5): mounted with root inode @ nid 36.
[  313.637718][T13288] erofs (device loop5): bogus lookback distance 0 @ lcn 1 of nid 89
[  313.643009][T13288] erofs (device loop5): readahead error at folio 2 @ nid 89
[  313.646451][T13288] erofs (device loop5): bogus lookback distance 0 @ lcn 1 of nid 89
[  313.649508][T13288] erofs (device loop5): readahead error at folio 1 @ nid 89
[  313.679048][T13288] erofs (device loop5): bogus lookback distance 0 @ lcn 1 of nid 89
[  313.683098][T13288] erofs (device loop5): bogus lookback distance 0 @ lcn 1 of nid 89
[  313.687169][T13288] erofs (device loop5): read error -117 @ 1 of nid 89
[  313.694704][   T33] audit: type=1800 audit(1756825451.768:79): pid=13288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2867" name="file3" dev="loop5" ino=89 res=0 errno=0
[  314.084969][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2868'.
[  314.505339][ T5884] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  314.658273][ T5884] usb 6-1: Using ep0 maxpacket: 8
[  314.662967][ T5884] usb 6-1: config 1 interface 0 has no altsetting 0
[  314.671673][ T5884] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  314.674417][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.678684][ T5884] usb 6-1: SerialNumber: ꮘ阋䣗뉌鳾犹蘄Γ鈔痺屁䖋懙敫ᛵ抑仉벯쨧쎏ᘉ묥ﳄ侷㩒良䒁零销〴嶮愸司缄砳풁䊄ꔻ
[  314.913489][ T5884] usblp0: Disabling reads from problematic bidirectional printer
[  314.939697][ T5884] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 1 proto 1 vid 0x03F0 pid 0x0004
[  314.954147][ T5884] usb 6-1: USB disconnect, device number 10
[  314.961726][ T5884] usblp0: removed
[  315.190596][T13330] overlayfs: failed to clone upperpath
[  315.528520][T13333] loop5: detected capacity change from 0 to 4096
[  315.532641][T13333] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  315.555896][T13333] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  315.561499][T13333] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  315.564686][T13333] ntfs3(loop5): ino=5, mi_enum_attr
[  315.629924][T13335] loop5: detected capacity change from 0 to 1024
[  315.725893][T13341] loop5: detected capacity change from 0 to 128
[  315.744773][T13341] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  315.753927][T13341] ext4 filesystem being mounted at /324/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  315.819578][T10472] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  316.399857][T13402] netlink: 'syz.2.2918': attribute type 1 has an invalid length.
[  316.403053][T13402] netlink: 'syz.2.2918': attribute type 4 has an invalid length.
[  316.406342][T13402] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2918'.
[  316.674900][   T47] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  316.836595][   T47] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  316.841281][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  316.848972][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  316.852718][   T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  316.865750][   T47] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  316.869424][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.875973][   T47] usb 6-1: config 0 descriptor??
[  317.294902][   T47] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max
[  317.312498][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.315917][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.325612][   T47] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  317.619462][T13452] netlink: 'syz.2.2941': attribute type 29 has an invalid length.
[  317.631918][T13452] netlink: 'syz.2.2941': attribute type 29 has an invalid length.
[  317.652709][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'.
[  319.107659][   T33] audit: type=1326 audit(1756825457.179:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.5.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a3d8ebe9 code=0x7ffc0000
[  319.119859][   T33] audit: type=1326 audit(1756825457.189:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.5.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a3d8ebe9 code=0x7ffc0000
[  319.131496][   T33] audit: type=1326 audit(1756825457.199:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.5.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fc9a3d8ebe9 code=0x7ffc0000
[  319.143123][   T33] audit: type=1326 audit(1756825457.199:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.5.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a3d8ebe9 code=0x7ffc0000
[  319.153621][   T33] audit: type=1326 audit(1756825457.199:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13476 comm="syz.5.2951" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a3d8ebe9 code=0x7ffc0000
[  319.336816][  T791] usb 6-1: USB disconnect, device number 11
[  319.529816][T13509] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  319.536529][T13509] overlayfs: failed to set xattr on upper
[  319.538932][T13509] overlayfs: ...falling back to redirect_dir=nofollow.
[  319.541874][T13509] overlayfs: ...falling back to index=off.
[  319.559131][T13509] overlayfs: ...falling back to uuid=null.
[  319.572609][T13509] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  319.674634][T13517] macvlan0: entered promiscuous mode
[  319.695386][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout
[  319.717962][T13517] netlink: 'syz.5.2970': attribute type 2 has an invalid length.
[  320.057581][T13529] loop5: detected capacity change from 0 to 512
[  320.061011][T13529] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  320.463622][T13542] loop5: detected capacity change from 0 to 65
[  320.495246][T13542] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5
[  320.705333][T13550] loop5: detected capacity change from 0 to 32768
[  320.707728][T13550] XFS: noikeep mount option is deprecated.
[  320.713783][T13550] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  320.735082][T13550] XFS (loop5): Ending clean mount
[  320.742334][T13550] XFS (loop5): Quotacheck needed: Please wait.
[  320.772466][T13550] XFS (loop5): Quotacheck: Done.
[  320.800263][T10472] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  320.986972][T13570] lo speed is unknown, defaulting to 1000
[  320.989733][T13570] lo speed is unknown, defaulting to 1000
[  321.002093][T13570] lo speed is unknown, defaulting to 1000
[  321.075342][T13570] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  321.131104][T13570] lo speed is unknown, defaulting to 1000
[  321.134603][T13570] lo speed is unknown, defaulting to 1000
[  321.137953][T13570] lo speed is unknown, defaulting to 1000
[  321.141844][T13570] lo speed is unknown, defaulting to 1000
[  321.145634][T13570] lo speed is unknown, defaulting to 1000
[  321.149239][T13570] lo speed is unknown, defaulting to 1000
[  321.151992][   T33] audit: type=1326 audit(1756825459.219:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13530 comm="syz.2.2977" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2b0b8ebe9 code=0x7fc00000
[  321.894538][T13600] C: renamed from team_slave_0 (while UP)
[  321.901911][T13600] netlink: 'syz.3.3005': attribute type 2 has an invalid length.
[  321.905456][T13600] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3005'.
[  321.910035][T13600] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  321.972771][T13604] netlink: 'syz.3.3007': attribute type 62 has an invalid length.
[  322.077661][T13615] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3012'.
[  322.732028][T13630] loop5: detected capacity change from 0 to 32768
[  322.754364][T13630] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  322.767075][T13630] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  322.809934][T13630] overlayfs: upper fs does not support tmpfile.
[  322.820153][T13630] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  322.822946][T13630] overlayfs: failed to set xattr on upper
[  322.826151][T13630] overlayfs: ...falling back to redirect_dir=nofollow.
[  322.828917][T13630] overlayfs: ...falling back to index=off.
[  322.830904][T13630] overlayfs: ...falling back to uuid=null.
[  322.832855][T13630] overlayfs: upper fs missing required features.
[  322.861753][T10472] ocfs2: Unmounting device (7,5) on (node local)
[  322.971207][T13639] loop5: detected capacity change from 0 to 512
[  322.978959][T13639] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  322.998257][T13639] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3020: invalid indirect mapped block 83886080 (level 1)
[  323.009537][T13639] EXT4-fs (loop5): Remounting filesystem read-only
[  323.012905][T13639] EXT4-fs (loop5): 1 orphan inode deleted
[  323.017340][T13639] EXT4-fs (loop5): 1 truncate cleaned up
[  323.020907][T13639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.032522][T13639] EXT4-fs warning (device loop5): ext4_empty_dir:3099: inode #2: comm syz.5.3020: directory missing '..'
[  323.056849][T10472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.102613][T13649] loop5: detected capacity change from 0 to 16
[  323.106604][T13649] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  323.793222][T13667] loop5: detected capacity change from 0 to 1024
[  323.797177][T13667] EXT4-fs: Ignoring removed bh option
[  323.799554][T13667] EXT4-fs: inline encryption not supported
[  323.802724][T13667] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  323.811339][T13667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  323.822401][T13667] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3032: lblock 2 mapped to illegal pblock 2 (length 1)
[  323.832934][T13667] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  323.836903][T13667] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3032: lblock 0 mapped to illegal pblock 48 (length 1)
[  323.842727][T13667] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  323.851676][T13667] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.3032: Failed to acquire dquot type 0
[  323.857036][T13667] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  323.869003][T13667] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3032: mark_inode_dirty error
[  323.880217][T13667] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  323.885930][T13667] EXT4-fs (loop5): 1 orphan inode deleted
[  323.889581][T13667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.911314][ T1153] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:10: lblock 1 mapped to illegal pblock 1 (length 1)
[  323.929296][ T1153] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  323.985157][ T1153] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u9:10: Failed to release dquot type 0
[  324.027408][T13667] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3032: lblock 0 mapped to illegal pblock 48 (length 1)
[  324.041970][T13667] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117
[  324.086545][T10472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.314374][T13708] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3051'.
[  325.339240][T13732] loop5: detected capacity change from 0 to 32768
[  325.349268][T13732] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  325.367509][T13732] XFS (loop5): Ending clean mount
[  325.374959][T13732] XFS (loop5): Quotacheck needed: Please wait.
[  325.417838][T13732] XFS (loop5): Quotacheck: Done.
[  325.477039][T10472] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  326.498178][T13807] loop5: detected capacity change from 0 to 32768
[  326.850534][T13807] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  326.883576][T13807] XFS (loop5): Ending clean mount
[  326.917258][T10472] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  327.493725][T13855] loop5: detected capacity change from 0 to 32768
[  327.496675][T13855] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3110 (13855)
[  327.504846][T13855] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  327.508790][T13855] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  327.539524][T13855] BTRFS info (device loop5): enabling ssd optimizations
[  327.542326][T13855] BTRFS info (device loop5): enabling free space tree
[  327.606439][T10472] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  327.827157][T13878] loop5: detected capacity change from 0 to 512
[  327.861521][T13878] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  328.155136][T13893] loop5: detected capacity change from 0 to 8192
[  328.201812][T13893] FAT-fs (loop5): error, clusters badly computed (2 != 1)
[  328.205448][T13893] FAT-fs (loop5): Filesystem has been set read-only
[  328.692412][T13921] loop5: detected capacity change from 0 to 4096
[  328.696462][T13921] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  328.700880][T13921] ntfs3(loop5): $Volume is corrupted.
[  328.777894][ T5851] Bluetooth: hci0: unexpected event for opcode 0x0809
[  329.013082][ T5898] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  329.184687][ T5898] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  329.192971][ T5898] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x81 has invalid wMaxPacketSize 0
[  329.197398][ T5898] usb 6-1: config 0 interface 0 has no altsetting 0
[  329.200233][ T5898] usb 6-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00
[  329.214861][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.225936][ T5898] usb 6-1: config 0 descriptor??
[  329.231637][T13943] netlink: 'syz.3.3145': attribute type 1 has an invalid length.
[  329.641256][ T5898] logitech 0003:046D:C283.0006: unknown main item tag 0x0
[  329.646244][ T5898] logitech 0003:046D:C283.0006: unknown main item tag 0x0
[  329.653082][ T5898] logitech 0003:046D:C283.0006: hidraw0: USB HID v0.00 Device [HID 046d:c283] on usb-dummy_hcd.5-1/input0
[  329.658109][ T5898] logitech 0003:046D:C283.0006: no inputs found
[  329.849061][ T1273] usb 6-1: USB disconnect, device number 12
[  330.478616][T13990] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3167'.
[  330.544205][T13996] netlink: 'syz.2.3170': attribute type 3 has an invalid length.
[  331.233624][ T6027] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  331.395915][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.401355][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.408133][ T6027] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  331.440785][ T6027] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  331.447763][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.538947][T14014] overlay: ./file0 is not a directory
[  331.818726][T14016] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3177'.
[  331.870984][ T6027] usb 6-1: config 0 descriptor??
[  332.289531][ T6027] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd
[  332.310845][ T6027] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  332.501750][T13994] loop5: detected capacity change from 0 to 1024
[  332.584349][ T6027] usb 6-1: USB disconnect, device number 13
[  332.737273][T14039] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3188'.
[  332.741505][T14039] bond_slave_0: entered promiscuous mode
[  332.744576][T14039] bond_slave_1: entered promiscuous mode
[  333.243932][T14049] loop5: detected capacity change from 0 to 32768
[  333.268659][T14049] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  333.319217][T14049] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature 
[  333.328219][T14049] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  333.331770][T14049] OCFS2: File system is now read-only.
[  333.336162][T14049] (syz.5.3193,14049,1):ocfs2_search_chain:1852 ERROR: status = -30
[  333.341074][T14049] (syz.5.3193,14049,1):ocfs2_search_chain:1940 ERROR: status = -30
[  333.346881][T14049] (syz.5.3193,14049,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  333.350551][T14049] (syz.5.3193,14049,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  333.354515][T14049] (syz.5.3193,14049,1):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  333.357201][T14049] (syz.5.3193,14049,1):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  333.360157][T14049] (syz.5.3193,14049,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[  333.364220][T14049] (syz.5.3193,14049,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[  333.367527][T14049] (syz.5.3193,14049,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[  333.370973][T14049] (syz.5.3193,14049,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  333.379552][T14049] (syz.5.3193,14049,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  333.399660][T14049] (syz.5.3193,14049,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  333.404965][T14049] (syz.5.3193,14049,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  333.411006][T14049] (syz.5.3193,14049,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  333.416879][T14049] (syz.5.3193,14049,0):ocfs2_lock_allocators:2775 ERROR: status = -30
[  333.419908][T14049] (syz.5.3193,14049,0):ocfs2_extend_allocation:592 ERROR: status = -30
[  333.430852][T14049] (syz.5.3193,14049,0):ocfs2_allocate_unwritten_extents:1499 ERROR: status = -30
[  333.435240][T14049] (syz.5.3193,14049,0):__ocfs2_change_file_space:2045 ERROR: status = -30
[  333.453099][T14056] vlan2: entered allmulticast mode
[  333.454912][T14056] vlan0: entered allmulticast mode
[  333.456747][T14056] veth0_vlan: entered allmulticast mode
[  333.466485][T10472] (syz-executor,10472,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  333.477464][T10472] ocfs2: Unmounting device (7,5) on (node local)
[  333.809524][ T6027] IPVS: starting estimator thread 0...
[  334.080207][T14078] IPVS: using max 47 ests per chain, 112800 per kthread
[  334.488135][ T5851] Bluetooth: hci0: unexpected event for opcode 0x201c
[  334.584260][T14090] loop5: detected capacity change from 0 to 32768
[  334.614754][T14090] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  334.789196][T10472] ocfs2: Unmounting device (7,5) on (node local)
[  335.467132][T14120] raw_sendmsg: syz.3.3221 forgot to set AF_INET. Fix it!
[  335.627852][T14132] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3227'.
[  335.637040][T14132] netlink: 15 bytes leftover after parsing attributes in process `syz.2.3227'.
[  335.646226][T14133] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  335.986351][T14151] bond0: (slave macvlan4): Error -98 calling set_mac_address
[  336.422689][T14182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  336.576436][T14198] loop5: detected capacity change from 0 to 128
[  336.580737][T14198] EXT4-fs (loop5): Test dummy encryption mode enabled
[  336.588970][T14198] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  336.598981][T14198] ext4 filesystem being mounted at /429/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  336.706573][T14198] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  337.319490][T14221] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3267'.
[  337.487467][T10472] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  337.562949][T14227] loop5: detected capacity change from 0 to 128
[  337.597379][T14227] FAT-fs (loop5): error, invalid access to FAT (entry 0x0fff0000)
[  337.600731][T14227] FAT-fs (loop5): Filesystem has been set read-only
[  337.773196][T14239] wireguard: wg2: Could not create IPv4 socket
[  337.913107][ T6027] IPVS: starting estimator thread 0...
[  337.915167][T14259] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  338.023505][T14260] IPVS: using max 43 ests per chain, 103200 per kthread
[  338.663464][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3290'.
[  338.760461][T14277] kernel read not supported for file / lhOb~h3JyxvL=QRnFGrqςû~QV7"qHd0%NnyD (pid: 14277 comm: syz.5.3293)
[  338.766971][   T33] audit: type=1800 audit(1756825476.842:86): pid=14277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3293" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=33337 res=0 errno=0
[  338.910315][T14289] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  339.068059][T14299] netlink: 'syz.5.3304': attribute type 10 has an invalid length.
[  339.081354][T14299] team0: Device dummy0 is up. Set it down before adding it as a team port
[  339.289453][T14307] overlayfs: failed to clone upperpath
[  339.461894][T14303] loop5: detected capacity change from 0 to 40427
[  339.467686][T14303] F2FS-fs (loop5): invalid crc value
[  339.479292][T14317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3313'.
[  339.534649][T14303] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  339.542033][T14303] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  339.887500][T14342] loop5: detected capacity change from 0 to 16
[  339.893355][T14342] erofs (device loop5): mounted with root inode @ nid 36.
[  339.982781][T14348] loop5: detected capacity change from 0 to 4096
[  340.025023][T14353] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  340.037529][T14348] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  340.054469][T14348] Remounting filesystem read-only
[  340.115225][T14361] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  340.431886][T14368] loop5: detected capacity change from 0 to 32768
[  340.453355][T14368] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  340.522871][T10472] (syz-executor,10472,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  340.529475][T10472] ocfs2: Unmounting device (7,5) on (node local)
[  340.719902][T14396] lo speed is unknown, defaulting to 1000
[  340.731478][   T33] audit: type=1326 audit(1756825478.812:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14400 comm="syz.5.3340" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9a3d8ebe9 code=0x0
[  340.958611][ T5851] Bluetooth: hci1: ACL packet for unknown connection handle 0
[  340.994533][T14396] geneve0: entered promiscuous mode
[  343.262513][T14469] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  343.275789][T14469] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.281423][T14469] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.315035][T14471] veth0: entered promiscuous mode
[  343.318034][T14470] veth0: left promiscuous mode
[  343.383475][T14475] loop5: detected capacity change from 0 to 2048
[  343.389576][T14475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  343.542413][T14486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  343.545387][T14486] IPv6: NLM_F_CREATE should be set when creating new route
[  343.834103][T14506] loop5: detected capacity change from 0 to 128
[  343.842769][T14506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  343.846189][T14506] System zones: 1-3, 19-19, 35-36
[  343.853579][T14506] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  343.859086][T14506] ext4 filesystem being mounted at /460/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  343.891865][T10472] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  343.944655][T14510] loop5: detected capacity change from 0 to 512
[  343.948539][T14510] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  343.955962][T14510] EXT4-fs (loop5): 1 truncate cleaned up
[  343.959643][T14510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.997393][T10472] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.654728][T14554] 9pnet_fd: Insufficient options for proto=fd
[  347.239938][  T791] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  347.422717][  T791] usb 6-1: Using ep0 maxpacket: 8
[  347.436296][  T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11
[  347.449228][  T791] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  347.458085][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.470674][  T791] usb 6-1: config 0 descriptor??
[  347.886106][  T791] hid (null): bogus close delimiter
[  347.892934][  T791] uclogic 0003:28BD:0055.0008: interface is invalid, ignoring
[  347.918879][T14627] openvswitch: netlink: IP tunnel dst address not specified
[  348.107934][  T791] usb 6-1: USB disconnect, device number 14
[  348.415374][T14641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3448'.
[  348.813704][T14662] loop5: detected capacity change from 0 to 8192
[  348.852952][T14662] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  348.856858][T14662] FAT-fs (loop5): Filesystem has been set read-only
[  348.958152][   T13] tipc: Subscription rejected, illegal request
[  349.150198][T14668] loop5: detected capacity change from 0 to 32768
[  349.167925][T14668] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.183806][T14668] XFS (loop5): Ending clean mount
[  349.228311][T10472] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.747452][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3480'.
[  350.067834][T14720] netlink: 'syz.3.3481': attribute type 1 has an invalid length.
[  350.071590][T14720] netlink: 'syz.3.3481': attribute type 2 has an invalid length.
[  350.081766][T14720] netlink: 'syz.3.3481': attribute type 1 has an invalid length.
[  350.085360][T14720] netlink: 'syz.3.3481': attribute type 2 has an invalid length.
[  350.414831][T14724] erspan0: entered promiscuous mode
[  350.603297][T14728] loop5: detected capacity change from 0 to 40427
[  350.633988][T14728] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  350.638386][T14728] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  350.655186][T14728] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[  351.001992][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3498'.
[  351.156360][T14767] loop5: detected capacity change from 0 to 1024
[  351.163666][T14767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  351.615793][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3508'.
[  351.619657][T14787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3508'.
[  351.623157][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3508'.
[  351.626273][T14787] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3508'.
[  351.631200][T14787] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3508'.
[  351.762391][T14792] loop5: detected capacity change from 0 to 1764
[  352.908937][ T1273] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  353.073384][ T1273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.077889][ T1273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.085128][ T1273] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  353.089074][ T1273] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.105724][ T1273] usb 6-1: config 0 descriptor??
[  353.514848][ T1273] samsung 0003:0419:0600.0009: collection stack underflow
[  353.517906][ T1273] samsung 0003:0419:0600.0009: item 0 0 0 12 parsing failed
[  353.530990][ T1273] samsung 0003:0419:0600.0009: parse failed
[  353.533563][ T1273] samsung 0003:0419:0600.0009: probe with driver samsung failed with error -22
[  353.716217][ T1273] usb 6-1: USB disconnect, device number 15
[  355.130164][T14927] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3573'.
[  355.133323][T14927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.176679][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3574'.
[  355.565866][  T791] kernel read not supported for file /audio1 (pid: 791 comm: kworker/0:2)
[  355.863653][T14951] loop5: detected capacity change from 0 to 128
[  355.956670][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3585'.
[  356.298238][   T12] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  356.308246][   T12] ref_tracker: netdev@ffff88802835e610 has 1/1 users at
[  356.308246][   T12]      netdev_get_by_index+0x79/0xb0
[  356.308246][   T12]      fib6_nh_init+0x1cd/0x1ff0
[  356.308246][   T12]      rtm_new_nexthop+0x38d6/0x7eb0
[  356.308246][   T12]      rtnetlink_rcv_msg+0x7cf/0xb70
[  356.308246][   T12]      netlink_rcv_skb+0x208/0x470
[  356.308246][   T12]      netlink_unicast+0x82f/0x9e0
[  356.308246][   T12]      netlink_sendmsg+0x805/0xb30
[  356.308246][   T12]      __sock_sendmsg+0x21c/0x270
[  356.308246][   T12]      ____sys_sendmsg+0x505/0x830
[  356.308246][   T12]      ___sys_sendmsg+0x21f/0x2a0
[  356.308246][   T12]      __x64_sys_sendmsg+0x19b/0x260
[  356.308246][   T12]      do_syscall_64+0xfa/0x3b0
[  356.308246][   T12]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.308246][   T12] 
[  360.327588][ T5851] Bluetooth: hci2: command 0x0419 tx timeout

VM DIAGNOSIS:
14:13:23  Registers:
info registers vcpu 0

CPU#0
RAX=df56b90ad0247300 RBX=ffffffff8184e79e RCX=df56b90ad0247300 RDX=0000000000000000
RSI=ffffffff8d9b8202 RDI=ffffffff8be33800 RBP=ffffc900032df930 RSP=ffffc900032df830
R8 =ffff888028869bc3 R9 =1ffff1100510d378 R10=dffffc0000000000 R11=ffffed100510d379
R12=ffffffff89f0da20 R13=ffff888028869a00 R14=ffff88801f141cc0 R15=1ffff9200065bf14
RIP=ffffffff8b79d167 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558acc7500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3361fff8 CR3=000000002829c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000017 000000000003bf12
XMM02=9803600800179003 0008001788030100 XMM03=ffef080580030580 0417a00300080017
XMM04=0000000000000000 0000000000000000 XMM05=000055558acdda40 000055558acdd9b0
XMM06=000055558ace8db8 000055558ace8db0 XMM07=0300100017d0030f ffffffffffff0417
XMM08=c003001000078003 07800417b0030030 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000200 RBX=dffffc0000000000 RCX=ffffffff819e0a0d RDX=0000000000000001
RSI=0000000000000004 RDI=0000000000000001 RBP=ffff888022bb0618 RSP=ffffc90003c47b50
R8 =ffffffff8de0c043 R9 =1ffffffff1bc1808 R10=dffffc0000000000 R11=fffffbfff1bc1809
R12=dffffc0000000000 R13=ffff88801f0d8e10 R14=ffff888022bb0000 R15=1ffff92000788f90
RIP=ffffffff818ffd80 RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555590aa7500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33620ff8 CR3=0000000027d6e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007ff2b0c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
