last executing test programs:

4m31.375074623s ago: executing program 2 (id=367):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000730000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x400, 0x1)

4m31.318829013s ago: executing program 2 (id=369):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x200}, {{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/139, 0x8b}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f00000006c0)=""/200, 0xc8}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0)

4m31.228344162s ago: executing program 2 (id=371):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m31.128521909s ago: executing program 2 (id=373):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00')

4m31.058462597s ago: executing program 2 (id=375):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}}, 0x0)

4m30.792510595s ago: executing program 2 (id=384):
r0 = socket(0x10, 0x3, 0x0)
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x1, 0x7, 0x4, 0x1, 0xce5, 0xbc7})
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)

4m30.619033904s ago: executing program 32 (id=384):
r0 = socket(0x10, 0x3, 0x0)
capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)={0x1, 0x7, 0x4, 0x1, 0xce5, 0xbc7})
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)

3m19.881543377s ago: executing program 0 (id=1110):
io_setup(0x1, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x42200, 0x0)
io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x3ff, r1, 0x0}])

3m19.754008402s ago: executing program 0 (id=1112):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x258, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x244, 0x1, [@m_ife={0x90, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xa0, 0x14, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10080, 0xffffffffffffffff, 0x48fa, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x3e}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x9c, 0x9, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f3, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_FD={0x8}]}, {0x29, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b726cf5b56034a46fe4468bd19b5780d1bd141230a65f0d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x74, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x80}]}, {0x25, 0x6, "d53a6627b5c2b2c1126462fd280ec461bb61d2323e41566a3eaee195a84bb37143"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

3m19.693327708s ago: executing program 0 (id=1114):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)

3m19.5941607s ago: executing program 0 (id=1115):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)

3m19.544311035s ago: executing program 0 (id=1116):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x50)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000000400)={0x2020}, 0x2020)

3m19.243019705s ago: executing program 0 (id=1118):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

3m19.065276222s ago: executing program 33 (id=1118):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

3m9.490666253s ago: executing program 1 (id=1205):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x9e66, 0x200)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0xd)

3m9.369811833s ago: executing program 1 (id=1206):
syz_clone3(&(0x7f0000000240)={0x80000000, 0x0, &(0x7f0000000040), 0x0, {0x32}, 0x0, 0x0, &(0x7f0000000300)=""/26, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x9}, 0x58)

3m9.249263401s ago: executing program 1 (id=1207):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file1\x00', 0x1000840, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=mixed,sys_immutable,nfs,iocharset=cp936,shortname=lower,rodir,nocase,codepage=860,shortname=lower,shortname=lower,shortname=win95,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c73686f72746e616d653d77696e39352c756e695f786c6174653d302c0061a98eed20cb46078e5a4a40eed4c77e7462b84482aa7061236bf6bf5f48d7580feb45e35df449cbc10bccc2d8eb7a405ecd33c7efe0552ac1485c1dc47fec07062af9772ce17f7fed7c51b26811fd16e28ca3f29cfad88fc4c5504243392e01cbdde7b5c763979598f95f09b95d2c45628665902b30ddfbf9bbd38185eabec1312bac0ff85a1ffbe2a612f453253bf5fcac7dd1e683bf671e2c5362e5a7"], 0x43, 0x357, &(0x7f0000000140)="$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")
r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88)
fallocate(r0, 0x10, 0x0, 0x7000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f00000008c0)=""/195, 0xc3)

3m8.983176072s ago: executing program 1 (id=1209):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48c5, &(0x7f0000000b80)={[{@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@fat=@gid}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@sys_immutable}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

3m8.873422543s ago: executing program 1 (id=1212):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0xe, 0x2000}, 0x20)

3m8.620141138s ago: executing program 1 (id=1219):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x34, r1, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)

3m8.496012576s ago: executing program 34 (id=1219):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x34, r1, 0x303, 0x0, 0x0, {0x13}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)

2m39.960835649s ago: executing program 5 (id=1496):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

2m39.858206992s ago: executing program 5 (id=1499):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x18)
syz_clone3(&(0x7f0000000400)={0x40000400, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000100), {0xd}, &(0x7f0000000480)=""/92, 0xfffffffffffffd6b, &(0x7f0000001fc0)=""/4096, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58)

2m39.792032155s ago: executing program 5 (id=1500):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f00000000c0), 0x4)

2m39.791685075s ago: executing program 5 (id=1501):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x1a06496, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

2m39.657530033s ago: executing program 5 (id=1502):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffd}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x40}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)

2m39.219263148s ago: executing program 5 (id=1507):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)

2m38.989366092s ago: executing program 35 (id=1507):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x1000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000008c0)='syzkaller\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94)

1m15.665573585s ago: executing program 3 (id=2370):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x38, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x2a, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x6071, 0x0, 0xe7}, {"54f4"}}}}}}, 0x0)

1m14.803753219s ago: executing program 3 (id=2375):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)

1m14.694904879s ago: executing program 3 (id=2378):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1m14.643509504s ago: executing program 3 (id=2380):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x20108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

1m14.303714737s ago: executing program 3 (id=2381):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"])

1m14.101823788s ago: executing program 3 (id=2382):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113b00000000008510000002000000850000001900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1m13.756199122s ago: executing program 36 (id=2382):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113b00000000008510000002000000850000001900000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

46.513184442s ago: executing program 6 (id=2610):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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")
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
setuid(0xee01)
utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)

46.352626739s ago: executing program 6 (id=2612):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)

46.293233628s ago: executing program 6 (id=2614):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "331800", 0x48, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4e20, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0)

46.231818745s ago: executing program 6 (id=2616):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0xfffffff8}}, 0x18)

46.001449794s ago: executing program 6 (id=2617):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x3, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

45.42920938s ago: executing program 6 (id=2623):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
read$FUSE(r0, &(0x7f00000a0040)={0x2020}, 0x2020)

45.192065816s ago: executing program 37 (id=2623):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00')
read$FUSE(r0, &(0x7f00000a0040)={0x2020}, 0x2020)

1.688645223s ago: executing program 7 (id=3013):
r0 = syz_open_dev$evdev(&(0x7f0000000a00), 0x1, 0x200)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000045c0)=0x21)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000004600)=0xff)

1.688311917s ago: executing program 7 (id=3014):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20104, 0x52895}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}}, 0x44000000)

1.596471093s ago: executing program 7 (id=3015):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4)
recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/6, 0x6}, 0x7}], 0x1, 0x102, 0x0)

1.596222205s ago: executing program 7 (id=3016):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2, 0xffffffff}, {0x60}, {0x2}, {0x6}]})

1.595437137s ago: executing program 7 (id=3018):
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)

1.499799876s ago: executing program 7 (id=3020):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0)

599.912423ms ago: executing program 4 (id=3023):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20048888)

550.598137ms ago: executing program 4 (id=3024):
syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8c0c00", 0x20, 0x6, 0x0, @local, @local, {[], {{0xfffa, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xb, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x7, @multicast2, 0xb7}, @generic={0x2, 0x2}]}}}}}}}}, 0x0)

550.338411ms ago: executing program 4 (id=3025):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x2e, &(0x7f0000000100)="a944c772", 0x4)

469.69654ms ago: executing program 4 (id=3026):
syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_io_uring_setup(0x1a5a, &(0x7f0000000200)={0x0, 0xcd3e, 0x10100, 0x4, 0x6}, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x79a5, 0x2, 0x46, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)

268.935016ms ago: executing program 8 (id=3029):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000140))

268.749718ms ago: executing program 4 (id=3030):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x38, 0x1, 0x20, 0x0, {0xa}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x40010)

268.537085ms ago: executing program 8 (id=3031):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5)
r1 = dup(r0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000002640)={'team_slave_0\x00', @random="76e04c34b99d"})

200.506152ms ago: executing program 4 (id=3032):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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")
setxattr$trusted_overlay_origin(&(0x7f0000000240)='.\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)

104.500292ms ago: executing program 8 (id=3033):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1f0, 0x238, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x20044085)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0)

104.308556ms ago: executing program 8 (id=3034):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x41, 0x0)
write$6lowpan_enable(r0, 0x0, 0x0)

48.775175ms ago: executing program 8 (id=3035):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x6, 0x3a, '\x00\x00', 0x3a, 'z[&\x11k\xfc\xb24\\\xda\x16M\xb7\xf2\xc0\x8e\x1b\xcf\x9b\f\x88\b(\xfc\xee\nb\x958\x1b\xcfuT\x8d`\xbb\xbcJ\xe4\x8a\xc4\x13v\xa90P\x8a\xf2h\x8dI\x93\xcbu8^\x9e\xe7OT\xb6\xcc\xc7\x13\x7f\xe3\xa4\x062\'w\a\xf0\x8d\xe5Z\xfdl\xe7x\xf0\xe9\xbe', 0x3a, './file0'}, 0x7c)

0s ago: executing program 8 (id=3036):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e40)={0x34, &(0x7f0000000800)={0x40, 0x18, 0x4, "6b1db9ec"}, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

"syz.4.2091" name="file1" dev="loop4" ino=4 res=0 errno=0
[  268.179093][T11793] ERROR: (device loop4): diWrite: ixpxd invalid
[  268.179093][T11793] 
[  268.188971][T11793] ERROR: (device loop4): remounting filesystem as read-only
[  268.194561][T11793] ERROR: (device loop4): txCommit: 
[  268.194561][T11793] 
[  268.217293][T11806] netlink: 'syz.6.2097': attribute type 15 has an invalid length.
[  268.220779][T11806] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2097'.
[  268.610537][   T33] audit: type=1800 audit(2000000094.960:222): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2090" name="/" dev="fuse" ino=0 res=0 errno=0
[  268.656214][T11820] loop3: detected capacity change from 0 to 512
[  268.691637][T11820] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  268.717002][T11820] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #17: comm syz.3.2103: iget: bad i_size value: -6917529027641081756
[  268.722176][T11820] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2103: couldn't read orphan inode 17 (err -117)
[  268.727532][T11820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.759464][ T6847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.529900][T11878] loop6: detected capacity change from 0 to 512
[  270.534485][T11878] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  270.539791][T11870] loop3: detected capacity change from 0 to 8192
[  270.570863][T11878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.584354][T11878] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  270.619822][T11877] loop4: detected capacity change from 0 to 8192
[  270.665263][ T5849]  loop4: p3 p4
[  270.667574][T10132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.670330][ T5849] loop4: partition table partially beyond EOD, truncated
[  270.678330][ T5849] loop4: p3 start 8323105 is beyond EOD, truncated
[  270.716191][T11877]  loop4: p3 p4
[  270.717454][T11877] loop4: partition table partially beyond EOD, truncated
[  270.724503][T11877] loop4: p3 start 8323105 is beyond EOD, truncated
[  270.864492][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  270.893342][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  271.250142][ T5894] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  271.411646][ T5894] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  271.414870][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.419682][ T5894] usb 5-1: config 0 descriptor??
[  271.423895][ T5894] cp210x 5-1:0.0: cp210x converter detected
[  271.430254][  T974] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  272.023681][  T974] usb 7-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea
[  272.027575][  T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.046421][  T974] usb 7-1: config 0 descriptor??
[  272.053317][  T974] usb 7-1: Invalid firmware size=18.
[  272.191453][ T5894] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  272.222360][ T5894] usb 5-1: cp210x converter now attached to ttyUSB0
[  272.271775][ T5894] usb 7-1: USB disconnect, device number 6
[  272.403471][   T24] usb 5-1: USB disconnect, device number 10
[  272.416772][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  272.427213][   T24] cp210x 5-1:0.0: device disconnected
[  272.480593][  T974] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  272.630109][  T974] usb 4-1: Using ep0 maxpacket: 32
[  272.635541][  T974] usb 4-1: unable to get BOS descriptor or descriptor too short
[  272.640750][  T974] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  272.644410][  T974] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  272.648593][  T974] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  272.652813][  T974] usb 4-1: config 128 has no interface number 0
[  272.655657][  T974] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 194, changing to 11
[  272.661530][  T974] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33851, setting to 1024
[  272.666275][  T974] usb 4-1: config 128 interface 127 has no altsetting 0
[  272.674809][  T974] usb 4-1: string descriptor 0 read error: -22
[  272.677620][  T974] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  272.681850][  T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.689546][T11919] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  272.749275][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  272.918466][  T974] usb 4-1: USB disconnect, device number 17
[  274.677951][T11968] loop3: detected capacity change from 0 to 1024
[  274.685352][T11968] EXT4-fs: Ignoring removed nomblk_io_submit option
[  274.688988][T11968] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  274.694819][T11968] EXT4-fs (loop3): Test dummy encryption mode enabled
[  274.699135][T11968] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (37511!=20869)
[  274.707016][T11968] EXT4-fs (loop3): group descriptors corrupted!
[  275.084337][T11981] loop3: detected capacity change from 0 to 256
[  275.551213][T11985] netlink: 'syz.6.2169': attribute type 11 has an invalid length.
[  275.811079][T11995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2173'.
[  275.896878][T12000] loop4: detected capacity change from 0 to 128
[  275.904984][   T33] audit: type=1800 audit(2000000102.250:223): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2175" name="file2" dev="loop4" ino=1048689 res=0 errno=0
[  275.914125][T12000] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  275.921323][T12000] FAT-fs (loop4): Filesystem has been set read-only
[  275.930293][T12000] syz.4.2175: attempt to access beyond end of device
[  275.930293][T12000] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  275.940640][T12000] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  275.945267][T12000] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  275.965236][T12000] syz.4.2175: attempt to access beyond end of device
[  275.965236][T12000] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  275.969847][T12000] syz.4.2175: attempt to access beyond end of device
[  275.969847][T12000] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  275.981870][T12000] syz.4.2175: attempt to access beyond end of device
[  275.981870][T12000] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  275.986784][T12000] syz.4.2175: attempt to access beyond end of device
[  275.986784][T12000] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  275.992804][T12000] syz.4.2175: attempt to access beyond end of device
[  275.992804][T12000] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  275.997628][T12000] syz.4.2175: attempt to access beyond end of device
[  275.997628][T12000] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  276.003950][T12000] syz.4.2175: attempt to access beyond end of device
[  276.003950][T12000] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  276.012474][T12000] syz.4.2175: attempt to access beyond end of device
[  276.012474][T12000] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  276.029123][T12003] syz.4.2175: attempt to access beyond end of device
[  276.029123][T12003] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128
[  276.034902][T12003] Buffer I/O error on dev loop4, logical block 2065, async page read
[  276.040653][T12003] Buffer I/O error on dev loop4, logical block 2066, async page read
[  276.059014][T12003] Buffer I/O error on dev loop4, logical block 2067, async page read
[  276.069226][T12003] Buffer I/O error on dev loop4, logical block 2068, async page read
[  276.079378][T12003] Buffer I/O error on dev loop4, logical block 2069, async page read
[  276.099712][T12003] Buffer I/O error on dev loop4, logical block 2070, async page read
[  276.109875][T12003] Buffer I/O error on dev loop4, logical block 2071, async page read
[  276.120482][T12003] Buffer I/O error on dev loop4, logical block 2072, async page read
[  276.124144][T12003] Buffer I/O error on dev loop4, logical block 2065, async page read
[  276.127850][T12003] Buffer I/O error on dev loop4, logical block 2066, async page read
[  276.214345][T12009] bridge0: entered promiscuous mode
[  277.318888][T12024] /dev/nullb0: Can't open blockdev
[  277.548740][T12030] loop6: detected capacity change from 0 to 256
[  277.570281][T12030] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  277.754343][T12038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.795261][T12040] loop4: detected capacity change from 0 to 1024
[  277.818921][T12040] hfsplus: keylen 65060 too large
[  278.062465][T12051] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8)
[  278.065447][T12051] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  278.118291][T12051] vhci_hcd vhci_hcd.0: Device attached
[  278.137956][T12045] loop4: detected capacity change from 0 to 32768
[  278.154229][T12045] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  278.168326][T12045] XFS (loop4): Ending clean mount
[  278.186502][T12045] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  278.226664][ T8802] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  278.367977][   T24] usb 45-1: new high-speed USB device number 2 using vhci_hcd
[  278.625679][T12066] loop4: detected capacity change from 0 to 32768
[  278.641391][T12066] bcachefs (/dev/loop4): error validating superblock: Invalid superblock layout type 7
[  278.646277][T12066] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_type
[  279.311613][T12052] vhci_hcd: connection reset by peer
[  279.335253][T12076] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 3, id = 0
[  279.353550][   T13] vhci_hcd: stop threads
[  279.365787][   T13] vhci_hcd: release socket
[  279.376840][   T13] vhci_hcd: disconnect device
[  279.467323][T12080] tmpfs: Bad value for 'mpol'
[  279.719324][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2208'.
[  280.194015][T12090] loop4: detected capacity change from 0 to 4096
[  280.233945][ T5895] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[  280.233954][T12090] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  280.234181][T12090] ntfs3(loop4): Failed to load $Extend (-22).
[  280.245122][T12090] ntfs3(loop4): Failed to initialize $Extend.
[  280.271599][T12090] ntfs3(loop4): ino=1b, "file0" ntfs_readdir
[  280.278167][T12078] loop3: detected capacity change from 0 to 32768
[  280.285016][T12078] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2205 (12078)
[  280.307527][T12078] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.313791][T12078] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  280.317535][T12078] BTRFS info (device loop3): disk space caching is enabled
[  280.337005][T12078] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  280.398237][ T5895] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  280.406041][ T5895] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  280.413849][ T5895] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  280.417816][ T5895] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  280.418502][T12102] loop4: detected capacity change from 0 to 2048
[  280.435882][ T5895] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  280.442127][ T5895] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  280.463886][ T5895] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  280.469619][ T5895] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  280.476264][ T5895] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  280.479523][ T5895] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  280.483293][T12102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.489516][T12078] BTRFS info (device loop3): rebuilding free space tree
[  280.510378][ T5895] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  280.516550][T12078] BTRFS info (device loop3): disabling free space tree
[  280.520233][T12078] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  280.524312][T12078] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  280.530303][ T5895] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  280.534653][ T5895] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  280.545217][ T5895] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  280.557239][ T5895] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  280.563259][ T8802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.567170][ T5895] usb 7-1: config 246 descriptor has 1 excess byte, ignoring
[  280.583138][ T5895] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42
[  280.597226][ T5895] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF
[  280.603171][ T5895] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8
[  280.609928][ T5895] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  280.614524][ T5895] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  280.632318][ T5895] usb 7-1: string descriptor 0 read error: -22
[  280.636821][ T5895] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  280.641792][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.680446][ T6847] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.685998][ T5895] adutux 7-1:246.0: ADU100  now attached to /dev/usb/adutux0
[  280.895957][ T5894] usb 7-1: USB disconnect, device number 7
[  281.202035][T12126] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  281.202035][T12126] The task syz.4.2219 (12126) triggered the difference, watch for misbehavior.
[  281.734827][T12137] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2221'.
[  281.826517][T12139] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2221'.
[  281.940280][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2223'.
[  281.973989][ T8857] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  281.977449][ T8857] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  281.986828][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2223'.
[  281.994571][ T8857] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  282.007666][ T8857] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  282.368757][T12163] loop3: detected capacity change from 0 to 256
[  282.373255][T12163] exfat: Deprecated parameter 'utf8'
[  282.376207][T12163] exfat: Deprecated parameter 'utf8'
[  282.378792][T12163] exfat: Deprecated parameter 'utf8'
[  282.387825][T12163] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x743489c8, utbl_chksum : 0xe619d30d)
[  282.589805][T12171] loop3: detected capacity change from 0 to 1024
[  282.627439][ T9158] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  282.630127][ T9158] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  282.632626][ T9158] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  282.635471][ T9158] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  282.638531][ T9158] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  282.642432][ T9158] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  282.645148][ T9158] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  282.647890][ T9158] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  282.651162][ T9158] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  282.654004][ T9158] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  282.674378][ T9158] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  283.182791][T12179] loop3: detected capacity change from 0 to 40427
[  283.213268][T12179] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0)
[  283.216183][T12179] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  283.217659][T12195] loop4: detected capacity change from 0 to 1024
[  283.250736][T12179] F2FS-fs (loop3): invalid crc value
[  283.295576][T12179] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  283.299861][T12179] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30
[  283.305450][T12179] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  283.330974][   T32] hfsplus: b-tree write err: -5, ino 3
[  283.355207][ T8802] hfsplus: node 4:3 still has 1 user(s)!
[  283.450173][   T24] vhci_hcd: vhci_device speed not set
[  284.109030][T12221] loop6: detected capacity change from 0 to 32768
[  284.131790][T12221] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.176865][T12221] XFS (loop6): Ending clean mount
[  284.180717][T12221] XFS (loop6): Quotacheck needed: Please wait.
[  284.254694][T12221] XFS (loop6): Quotacheck: Done.
[  284.334877][T10132] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.366066][T12249] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  284.509891][ T1960] wlan1: Trigger new scan to find an IBSS to join
[  284.608405][T12258] loop4: detected capacity change from 0 to 256
[  284.619433][T12258] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  284.632518][T12258] exFAT-fs (loop4): error, data size is invalid(10)
[  284.635714][T12258] exFAT-fs (loop4): Filesystem has been set read-only
[  284.643681][T12258] exFAT-fs (loop4): error, data size is invalid(10)
[  284.840573][  T974] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  285.016065][  T974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.030307][  T974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  285.054430][  T974] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  285.058315][  T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.062950][  T974] usb 7-1: Product: syz
[  285.065041][  T974] usb 7-1: Manufacturer: syz
[  285.067032][  T974] usb 7-1: SerialNumber: syz
[  285.304758][  T974] usb 7-1: 0:2 : does not exist
[  285.313334][  T974] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  285.358267][  T974] usb 7-1: USB disconnect, device number 8
[  285.418230][ T6856] udevd[6856]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  286.064918][T12271] loop4: detected capacity change from 0 to 4096
[  286.070276][T12271] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  286.094471][T12271] ntfs3(loop4): ino=b, mi_enum_attr
[  286.096703][T12271] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  286.099711][T12271] ntfs3(loop4): Failed to load $Extend (-22).
[  286.102798][T12271] ntfs3(loop4): Failed to initialize $Extend.
[  286.107801][T12265] loop6: detected capacity change from 0 to 32768
[  286.164643][T12265] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  286.185597][T12265] XFS (loop6): Ending clean mount
[  286.219178][T12265] XFS (loop6): Quotacheck needed: Please wait.
[  286.262347][ T5236] Bluetooth: hci3: command 0x1003 tx timeout
[  286.264970][ T9142] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  286.332312][T12265] XFS (loop6): Quotacheck: Done.
[  286.390981][T10132] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  286.626555][   T24] hid-generic 0005:15C2:3010.000F: item fetching failed at offset 0/1
[  286.650436][   T24] hid-generic 0005:15C2:3010.000F: probe with driver hid-generic failed with error -22
[  286.658271][T12283] loop4: detected capacity change from 0 to 32768
[  286.838177][   T33] audit: type=1800 audit(2000000113.180:224): pid=12283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2275" name="file1" dev="loop4" ino=4 res=0 errno=0
[  286.918081][T12283] ERROR: (device loop4): dbAllocBits: leaf page corrupt
[  286.918081][T12283] 
[  286.936281][T12283] ERROR: (device loop4): remounting filesystem as read-only
[  286.969883][T12283] bio_check_eod: 3191 callbacks suppressed
[  286.979539][T12283] syz.4.2275: attempt to access beyond end of device
[  286.979539][T12283] loop4: rw=34817, sector=4680704, nr_sectors = 792 limit=32768
[  286.998269][T12283] blkno = 8ed80, nblocks = 63
[  287.003243][T12283] ERROR: (device loop4): dbFree: block to be freed is outside the map
[  287.003243][T12283] 
[  287.043739][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2281'.
[  287.154288][T12301] loop6: detected capacity change from 0 to 4096
[  287.350906][T12303] loop3: detected capacity change from 0 to 512
[  287.372367][T12303] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  287.412869][T12303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.430633][T12303] ext4 filesystem being mounted at /588/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.511256][ T6847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.546689][ T9651] wlan1: Trigger new scan to find an IBSS to join
[  287.831609][T12323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2291'.
[  287.842788][T12325] loop3: detected capacity change from 0 to 1024
[  287.849442][T12325] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  287.861108][T12325] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  287.875689][T12325] JBD2: no valid journal superblock found
[  287.878086][T12325] EXT4-fs (loop3): Could not load journal inode
[  288.236203][T12343] loop4: detected capacity change from 0 to 512
[  288.247417][T12343] EXT4-fs (loop4): VFS: Can't find ext4 filesystem
[  288.275639][T12345] loop3: detected capacity change from 0 to 512
[  288.318799][T12345] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  288.330226][T12345] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  288.332966][T12345] System zones: 1-12
[  288.334741][T12345] EXT4-fs (loop3): 1 truncate cleaned up
[  288.337912][T12345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.356910][ T9142] Bluetooth: hci0: unexpected event for opcode 0x2006
[  288.376048][ T6847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.435571][T12347] loop4: detected capacity change from 0 to 32768
[  288.493145][T12347] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  288.526071][T12347] XFS (loop4): Ending clean mount
[  288.679133][ T5894] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  288.696636][ T9653] wlan1: Creating new IBSS network, BSSID 76:0e:e9:d4:69:4f
[  288.725076][T12358] loop3: detected capacity change from 0 to 32768
[  288.824747][T12358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2304 (12358)
[  288.899689][ T5894] usb 7-1: Using ep0 maxpacket: 32
[  289.026612][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.052625][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.067092][ T5894] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  289.074198][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.082765][T12358] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  289.087098][T12358] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  289.090603][T12358] BTRFS info (device loop3): using free-space-tree
[  289.094853][ T5894] usb 7-1: config 0 descriptor??
[  289.102091][ T5894] hub 7-1:0.0: USB hub found
[  289.219707][ T8802] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  289.320049][ T5894] hub 7-1:0.0: 31 ports detected
[  289.330212][ T5894] hub 7-1:0.0: insufficient power available to use all downstream ports
[  289.461397][ T6847] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  289.523834][ T5894] hub 7-1:0.0: hub_hub_status failed (err = -71)
[  289.541224][ T5894] hub 7-1:0.0: config failed, can't get hub status (err -71)
[  289.556697][ T5894] usbhid 7-1:0.0: can't add hid device: -71
[  289.558888][ T5894] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  289.600157][ T5894] usb 7-1: USB disconnect, device number 9
[  289.900537][ T9407] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  289.905263][T12392] loop3: detected capacity change from 0 to 2048
[  289.953003][ T6856]  loop3: p1 < > p3
[  289.956794][ T6856] loop3: p3 size 134217728 extends beyond EOD, truncated
[  289.974408][T12392]  loop3: p1 < > p3
[  289.978269][T12392] loop3: p3 size 134217728 extends beyond EOD, truncated
[  290.078034][ T9407] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  290.082240][ T9407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.085230][T11969] udevd[11969]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  290.085314][ T9407] usb 5-1: Product: syz
[  290.092106][ T6856] udevd[6856]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  290.110495][ T9407] usb 5-1: Manufacturer: syz
[  290.112031][ T9407] usb 5-1: SerialNumber: syz
[  290.123188][ T9407] usb 5-1: config 0 descriptor??
[  290.135076][ T9407] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  290.400239][  T974] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  290.500268][ T5910] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  290.555250][  T974] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[  290.558193][  T974] usb 7-1: config 0 has no interface number 0
[  290.560776][  T974] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  290.564025][  T974] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  290.571817][  T974] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  290.574885][  T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.577411][  T974] usb 7-1: Product: syz
[  290.578819][  T974] usb 7-1: Manufacturer: syz
[  290.581331][  T974] usb 7-1: SerialNumber: syz
[  290.588823][  T974] usb 7-1: config 0 descriptor??
[  290.598779][T12398] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  290.604514][  T974] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  290.613194][  T974] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  290.663932][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  290.678367][ T5910] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  290.683406][ T5910] usb 4-1: config 0 has no interface number 0
[  290.685927][ T5910] usb 4-1: config 0 interface 12 has no altsetting 0
[  290.699275][ T5910] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  290.703456][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.706788][ T5910] usb 4-1: Product: syz
[  290.708605][ T5910] usb 4-1: Manufacturer: syz
[  290.710764][ T5910] usb 4-1: SerialNumber: syz
[  290.717085][ T5910] usb 4-1: config 0 descriptor??
[  290.733053][ T9407] gspca_sunplus: reg_r err -71
[  290.736355][ T9407] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  290.744416][ T9407] usb 5-1: USB disconnect, device number 11
[  291.011008][  T974] usb 7-1: USB disconnect, device number 10
[  291.024081][  T974] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  291.029547][  T974] cyberjack 7-1:0.69: device disconnected
[  291.294118][T12403] befs: (nullb0): No write support. Marking filesystem read-only
[  291.302713][T12403] befs: (nullb0): invalid magic header
[  291.354582][T12405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2316'.
[  291.460738][T12409] loop4: detected capacity change from 0 to 512
[  291.478109][T12409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.483135][T12409] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  291.541328][ T8802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.845009][   T33] audit: type=1800 audit(2000000118.190:225): pid=12425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2324" name="file1" dev="tmpfs" ino=2179 res=0 errno=0
[  291.916419][T12427] openvswitch: netlink: Message has 1 unknown bytes.
[  291.919120][T12427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.238935][T12429] loop4: detected capacity change from 0 to 32768
[  292.300087][ T9158] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  292.317848][T12429] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,data_checksum=none,compression=lz4,degraded=yes,no_splitbrain_check,fix_errors=no,norecovery,recovery_pass_last=resume_logged_ops,nojournal_transaction_names,version_upgrade=none
[  292.317872][T12429]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  292.333678][T12429] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  292.336815][T12429] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  292.339866][T12429] bcachefs (loop4): superblock requires following recovery passes to be run:
[  292.339866][T12429]   recovery_pass_empty,check_unreachable_inodes,lookup_root_inode
[  292.344714][ T5910] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  292.356823][ T5910] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  292.359469][ T5910] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  292.366883][ T5910] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  292.375114][T12429] bcachefs (loop4): accounting_read... done
[  292.377455][T12429] bcachefs (loop4): alloc_read... done
[  292.379766][T12429] bcachefs (loop4): snapshots_read...
[  292.383134][ T5910] usb 4-1: USB disconnect, device number 18
[  292.387198][T12429]  done
[  292.388318][T12429] bcachefs (loop4): done starting filesystem
[  292.442063][ T8802] bcachefs (loop4): shutting down
[  292.452562][ T9158] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.457037][ T9158] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.463349][ T9158] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  292.469292][ T9158] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  292.471505][ T8802] bcachefs (loop4): shutdown complete
[  292.475718][ T9158] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.499679][ T9158] usb 7-1: config 0 descriptor??
[  292.927347][ T9158] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  293.964406][T12454] loop4: detected capacity change from 0 to 40427
[  293.973682][T12454] F2FS-fs (loop4): invalid crc value
[  294.025901][T12454] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  294.029163][T12454] F2FS-fs (loop4): Start checkpoint disabled!
[  294.034103][T12454] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  294.089217][T12454] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  294.145330][ T9641] kworker/u10:8: attempt to access beyond end of device
[  294.145330][ T9641] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  294.157594][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: kworker/u10:8 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  294.157634][ T9641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.157654][ T9641] Workqueue: writeback wb_workfn (flush-7:4)
[  294.157702][ T9641] Call Trace:
[  294.157709][ T9641]  <TASK>
[  294.157716][ T9641]  dump_stack_lvl+0x189/0x250
[  294.157738][ T9641]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.157755][ T9641]  ? __pfx_queue_work_on+0x10/0x10
[  294.157769][ T9641]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  294.157785][ T9641]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  294.157812][ T9641]  f2fs_handle_critical_error+0x37c/0x540
[  294.157837][ T9641]  f2fs_write_end_io+0x886/0xb60
[  294.157873][ T9641]  __submit_merged_bio+0x27a/0x6a0
[  294.157897][ T9641]  __submit_merged_write_cond+0x255/0x530
[  294.157921][ T9641]  f2fs_write_data_pages+0x261d/0x3000
[  294.157972][ T9641]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  294.158066][ T9641]  ? f2fs_write_meta_pages+0x357/0x450
[  294.158094][ T9641]  ? __lock_acquire+0xab9/0xd20
[  294.158119][ T9641]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  294.158138][ T9641]  do_writepages+0x32e/0x550
[  294.158162][ T9641]  ? reacquire_held_locks+0x127/0x1d0
[  294.158176][ T9641]  ? writeback_sb_inodes+0x384/0x1010
[  294.158199][ T9641]  __writeback_single_inode+0x145/0xff0
[  294.158216][ T9641]  ? do_raw_spin_unlock+0x4d/0x240
[  294.158237][ T9641]  writeback_sb_inodes+0x6c7/0x1010
[  294.158279][ T9641]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  294.158342][ T9641]  ? rcu_is_watching+0x15/0xb0
[  294.158367][ T9641]  wb_writeback+0x43b/0xaf0
[  294.158392][ T9641]  ? queue_io+0x391/0x590
[  294.158411][ T9641]  ? __pfx_wb_writeback+0x10/0x10
[  294.158438][ T9641]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.158487][ T9641]  wb_workfn+0x409/0xef0
[  294.158515][ T9641]  ? __pfx_wb_workfn+0x10/0x10
[  294.158532][ T9641]  ? __lock_acquire+0xab9/0xd20
[  294.158559][ T9641]  ? process_scheduled_works+0x9ef/0x17b0
[  294.158577][ T9641]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.158590][ T9641]  ? process_scheduled_works+0x9ef/0x17b0
[  294.158603][ T9641]  ? process_scheduled_works+0x9ef/0x17b0
[  294.158617][ T9641]  process_scheduled_works+0xae1/0x17b0
[  294.158653][ T9641]  ? __pfx_process_scheduled_works+0x10/0x10
[  294.158687][ T9641]  worker_thread+0x8a0/0xda0
[  294.158726][ T9641]  kthread+0x711/0x8a0
[  294.158745][ T9641]  ? __pfx_worker_thread+0x10/0x10
[  294.158757][ T9641]  ? __pfx_kthread+0x10/0x10
[  294.158774][ T9641]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.158787][ T9641]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.158801][ T9641]  ? __pfx_kthread+0x10/0x10
[  294.158818][ T9641]  ret_from_fork+0x3fc/0x770
[  294.158835][ T9641]  ? __pfx_ret_from_fork+0x10/0x10
[  294.158855][ T9641]  ? __switch_to_asm+0x39/0x70
[  294.158872][ T9641]  ? __switch_to_asm+0x33/0x70
[  294.158886][ T9641]  ? __pfx_kthread+0x10/0x10
[  294.158903][ T9641]  ret_from_fork_asm+0x1a/0x30
[  294.158933][ T9641]  </TASK>
[  294.168849][ T9641] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  294.870077][T12460] loop6: detected capacity change from 0 to 512
[  294.894243][T12460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.906282][T12460] ext4 filesystem being mounted at /268/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  294.967347][T10132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.105209][ T9407] usb 7-1: USB disconnect, device number 11
[  295.997914][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2342'.
[  296.708562][T12488] input: syz0 as /devices/virtual/input/input14
[  297.034610][T12500] loop3: detected capacity change from 0 to 256
[  297.052295][T12500] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  297.073331][T12500] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  297.095159][T12500] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[  297.287984][T12503] openvswitch: netlink: Unknown key attributes 2
[  297.477740][   T33] audit: type=1326 audit(2000000123.820:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.6.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1904b8ebe9 code=0x7ffc0000
[  297.515752][   T33] audit: type=1326 audit(2000000123.830:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.6.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1904b8ebe9 code=0x7ffc0000
[  297.609775][   T33] audit: type=1326 audit(2000000123.850:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.6.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1904b8ebe9 code=0x7ffc0000
[  297.668821][   T33] audit: type=1326 audit(2000000123.980:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.6.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1904b8ebe9 code=0x7ffc0000
[  297.716779][   T33] audit: type=1326 audit(2000000123.990:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.6.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1904b8ebe9 code=0x7ffc0000
[  297.806978][   T33] audit: type=1326 audit(2000000124.150:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.6.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1904b8ebe9 code=0x7ffc0000
[  297.844627][   T33] audit: type=1326 audit(2000000124.160:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.6.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1904b8ebe9 code=0x7ffc0000
[  297.885073][   T33] audit: type=1326 audit(2000000124.160:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.6.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1904b8ebe9 code=0x7ffc0000
[  297.902644][   T33] audit: type=1326 audit(2000000124.180:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.6.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1904b8ebe9 code=0x7ffc0000
[  297.910778][   T33] audit: type=1326 audit(2000000124.180:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12496 comm="syz.6.2351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1904b8ebe9 code=0x7ffc0000
[  298.075012][T12512] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.2355'.
[  298.419340][T12528] loop3: detected capacity change from 0 to 4096
[  298.426395][ T9142] Bluetooth: hci2: command 0x0406 tx timeout
[  298.435532][T12528] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  298.438767][T12528] ntfs3(loop3): ino=3, mi_enum_attr
[  298.441683][T12528] ntfs3(loop3): Failed to load $Volume (-22).
[  298.657311][T12532] loop4: detected capacity change from 0 to 32768
[  298.704375][T12532] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  298.992531][T12532] XFS (loop4): Ending clean mount
[  299.016947][T12532] XFS (loop4): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xe0, xfs_refcountbt block 0x28 
[  299.022539][T12532] XFS (loop4): Unmount and run xfs_repair
[  299.024874][T12532] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  299.027385][T12532] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  299.031301][T12532] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  299.034063][T12532] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  299.036874][T12532] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  299.039664][T12532] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  299.043856][T12532] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  299.046643][T12532] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  299.049409][T12532] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  299.052599][T12532] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x28 len 8 error 74
[  299.064563][T12532] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  299.069072][T12532] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  299.080556][T12552] loop6: detected capacity change from 0 to 32768
[  299.083123][T12552] btrfs: Unknown parameter 'seclabel'
[  299.097041][ T8802] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  299.540357][ T9158] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  299.555587][T12561] netlink: 'syz.6.2374': attribute type 29 has an invalid length.
[  299.559370][T12561] netlink: 'syz.6.2374': attribute type 29 has an invalid length.
[  299.565702][T12561] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2374'.
[  299.659635][T12567] tracefs: Invalid uid '0x00000000ffffffff'
[  299.703638][ T9158] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  299.706428][ T9158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.715576][ T9158] usb 5-1: config 0 descriptor??
[  299.723332][ T9158] gspca_main: cpia1-2.14.0 probing 0813:0001
[  299.961889][T12572] loop3: detected capacity change from 0 to 32768
[  300.123418][ T9158] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  300.147064][ T8036] syz_tun (unregistering): left allmulticast mode
[  300.153136][ T8036] team0: Port device syz_tun removed
[  300.358351][ T5862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.537464][ T9158] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[  300.557763][ T5862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.626923][ T5862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.725275][ T5862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.738806][ T9158] usb 5-1: USB disconnect, device number 12
[  300.813947][T12582] loop6: detected capacity change from 0 to 2048
[  300.843747][T12582] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  300.852566][T12582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.877602][ T9142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.890533][ T9142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.894719][ T9142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.902483][ T9142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.905662][ T9142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.928596][ T5862] bridge_slave_1: left allmulticast mode
[  300.940113][ T5862] bridge_slave_1: left promiscuous mode
[  300.949229][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.984979][ T5862] bridge_slave_0: left allmulticast mode
[  300.986832][ T5862] bridge_slave_0: left promiscuous mode
[  300.988671][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.998209][T12586] loop6: detected capacity change from 0 to 64
[  301.180356][T12590] netlink: 'syz.6.2388': attribute type 2 has an invalid length.
[  301.481872][ T2398] pvrusb2: request_firmware fatal error with code=-110
[  301.504981][ T2398] pvrusb2: Failure uploading firmware1
[  301.506774][ T2398] pvrusb2: Device initialization was not successful.
[  301.523575][ T2398] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  301.526657][ T2398] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  301.529609][   T51] pvrusb2: Device being rendered inoperable
[  301.856112][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  301.864629][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.869399][ T5862] bond0 (unregistering): Released all slaves
[  301.881707][ T5862] bond1 (unregistering): Released all slaves
[  302.257457][ T5862] bond2 (unregistering): (slave vlan2): Releasing active interface
[  302.266828][ T5862] bond2 (unregistering): Released all slaves
[  302.375519][ T5862] tipc: Left network mode
[  302.405691][ T5862] IPVS: stopping backup sync thread 12076 ...
[  302.607660][T12634] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2405'.
[  302.762514][T12583] chnl_net:caif_netlink_parms(): no params data found
[  302.861991][ T5862] hsr_slave_0: left promiscuous mode
[  302.866606][ T5862] hsr_slave_1: left promiscuous mode
[  302.869706][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.872352][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.875677][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  302.878979][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.895483][ T5862] veth1_macvtap: left promiscuous mode
[  302.897511][ T5862] veth0_macvtap: left promiscuous mode
[  302.901950][ T5862] veth0_vlan: left promiscuous mode
[  302.943351][   T51] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  302.985945][ T5236] Bluetooth: hci0: command tx timeout
[  303.104412][   T51] usb 7-1: config 0 interface 0 altsetting 60 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  303.111592][   T51] usb 7-1: config 0 interface 0 altsetting 60 endpoint 0xD has invalid wMaxPacketSize 0
[  303.119267][   T51] usb 7-1: config 0 interface 0 has no altsetting 0
[  303.127116][   T51] usb 7-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad
[  303.136786][   T51] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.146677][   T51] usb 7-1: config 0 descriptor??
[  303.373689][   T51] usb 7-1: string descriptor 0 read error: -71
[  303.376069][   T51] usb 7-1: ucan: probing device on interface #0
[  303.379530][   T51] usb 7-1: ucan: invalid endpoint configuration
[  303.384170][   T51] usb 7-1: ucan: probe failed; try to update the device firmware
[  303.389469][   T51] usb 7-1: USB disconnect, device number 12
[  303.469285][T12652] loop4: detected capacity change from 0 to 32768
[  303.476497][T12652] XFS (loop4): Invalid device [./bus], error=-2
[  303.544571][ T5862] team_slave_1 (unregistering): left allmulticast mode
[  303.548301][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  303.603242][ T5862] team_slave_0 (unregistering): left allmulticast mode
[  303.606166][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  304.080068][T12659] Invalid source name
[  304.081514][T12659] UBIFS error (pid: 12659): cannot open "ubifs", error -22
[  304.288897][T12665] loop6: detected capacity change from 0 to 512
[  304.319012][T12665] EXT4-fs: Ignoring removed orlov option
[  304.348393][T12665] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  304.365867][T12665] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  304.380087][T12583] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.382874][T12665] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.2415: corrupted in-inode xattr: e_value size too large
[  304.395016][T12583] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.397268][T12583] bridge_slave_0: entered allmulticast mode
[  304.415450][T12665] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2415: couldn't read orphan inode 15 (err -117)
[  304.419489][T12583] bridge_slave_0: entered promiscuous mode
[  304.425286][T12583] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.428777][T12665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.433053][T12583] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.435219][T12583] bridge_slave_1: entered allmulticast mode
[  304.449238][T12583] bridge_slave_1: entered promiscuous mode
[  304.530916][T12583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.558641][T10132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.570493][T12583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.673850][T12583] team0: Port device team_slave_0 added
[  304.687373][T12583] team0: Port device team_slave_1 added
[  304.758882][T12583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.761963][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.777816][T12583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.787909][T12688] pim6reg1: entered promiscuous mode
[  304.792138][T12688] pim6reg1: entered allmulticast mode
[  304.800108][T12583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.802439][T12583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.813508][T12583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.852939][ T5862] IPVS: stop unused estimator thread 0...
[  304.907046][T12684] loop6: detected capacity change from 0 to 32768
[  304.915811][T12583] hsr_slave_0: entered promiscuous mode
[  304.918334][T12583] hsr_slave_1: entered promiscuous mode
[  304.918413][T12684] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section disk_groups: label 1 empty
[  304.918413][T12684] disk_groups (size 152):
[  304.918413][T12684] [parent 0 name ] [parent 0 name ] [parent 0 name ]
[  304.929470][T12684] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  305.072443][ T5236] Bluetooth: hci0: command tx timeout
[  305.316386][T12583] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  305.323804][T12583] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  305.328363][T12583] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  305.335260][T12583] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  305.397903][T12583] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.408817][T12583] 8021q: adding VLAN 0 to HW filter on device team0
[  305.415800][  T946] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.418122][  T946] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.430860][  T946] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.433128][  T946] bridge0: port 2(bridge_slave_1) entered forwarding state
[  305.588225][T12583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.759099][T12583] veth0_vlan: entered promiscuous mode
[  305.773203][T12583] veth1_vlan: entered promiscuous mode
[  305.818979][T12583] veth0_macvtap: entered promiscuous mode
[  305.829427][T12583] veth1_macvtap: entered promiscuous mode
[  305.852727][T12583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.865315][T12583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.882365][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.885565][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.888369][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.894860][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.999127][ T9653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.019226][ T9653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.074824][ T9653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.085938][ T9653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.199234][T12749] loop7: detected capacity change from 0 to 512
[  306.270283][T12749] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.2383: casefold flag without casefold feature
[  306.292015][T12749] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2383: couldn't read orphan inode 15 (err -117)
[  306.316204][T12749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.435009][T12583] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.568337][T12762] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2434'.
[  306.580208][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.877232][T12756] loop4: detected capacity change from 0 to 32768
[  307.151234][ T5236] Bluetooth: hci0: command tx timeout
[  307.243035][T12789] overlayfs: missing 'lowerdir'
[  307.438957][T12798] syzkaller1: entered promiscuous mode
[  307.456990][T12798] syzkaller1: entered allmulticast mode
[  307.474857][T12800] loop6: detected capacity change from 0 to 256
[  307.495171][T12800] exfat: Deprecated parameter 'utf8'
[  307.522098][T12800] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  307.705773][T12780] loop7: detected capacity change from 0 to 40427
[  307.713257][T12780] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  307.729884][T12780] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  307.741841][   T33] kauditd_printk_skb: 51 callbacks suppressed
[  307.741857][   T33] audit: type=1326 audit(2000000134.080:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd698ebe9 code=0x7ffc0000
[  307.790074][   T33] audit: type=1326 audit(2000000134.080:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd698ebe9 code=0x7ffc0000
[  307.799072][   T33] audit: type=1326 audit(2000000134.100:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f1dd698ebe9 code=0x7ffc0000
[  307.830789][   T33] audit: type=1326 audit(2000000134.100:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd698ebe9 code=0x7ffc0000
[  307.863341][   T33] audit: type=1326 audit(2000000134.100:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.4.2451" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dd698ebe9 code=0x7ffc0000
[  307.904979][T12780] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  307.919889][T12780] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  307.924695][T12780] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  308.067172][T12583] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[  308.074661][T12583] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[  308.077840][T12583] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[  308.083484][T12583] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[  308.086751][T12583] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[  308.089831][T12583] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[  308.093684][T12583] F2FS-fs (loop7): invalid namelen(0), ino:0, run fsck to fix.
[  308.134731][T12813] loop6: detected capacity change from 0 to 32768
[  308.163154][T12813] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  308.190336][   T51] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  308.234610][T10132] (syz-executor,10132,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  308.244803][T10132] ocfs2: Unmounting device (7,6) on (node local)
[  308.343168][   T51] usb 5-1: config 0 interface 0 has no altsetting 0
[  308.345320][   T51] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  308.348104][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.366867][   T51] usb 5-1: config 0 descriptor??
[  308.857609][T12850] tmpfs: Bad value for 'mpol'
[  309.084454][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2464'.
[  309.086688][T12860] loop6: detected capacity change from 0 to 1024
[  309.109302][T12860] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  309.172205][T12860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.219683][   T51] video4linux radio48: keene_cmd_main failed (-71)
[  309.229226][   T51] radio-keene 5-1:0.0: V4L2 device registered as radio48
[  309.230152][ T5236] Bluetooth: hci0: command tx timeout
[  309.242386][   T51] usb 5-1: USB disconnect, device number 13
[  309.254668][T12860] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  309.271579][T12860] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.2466: missing EA_INODE flag
[  309.278009][T12860] EXT4-fs (loop6): Remounting filesystem read-only
[  309.514210][T10132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.170764][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  310.347070][    T9] usb 5-1: config 0 has an invalid interface number: 57 but max is 0
[  310.350935][    T9] usb 5-1: config 0 has no interface number 0
[  310.354460][    T9] usb 5-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63
[  310.357963][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.367095][    T9] usb 5-1: config 0 descriptor??
[  310.376651][    T9] gspca_main: mr97310a-2.14.0 probing 093a:010f
[  310.379258][    T9] gspca_mr97310a: reg write [21] error -22
[  310.388181][    T9] mr97310a 5-1:0.57: probe with driver mr97310a failed with error -22
[  310.578055][    T9] usb 5-1: USB disconnect, device number 14
[  311.361685][T12890] loop6: detected capacity change from 0 to 4096
[  311.437551][T12890] Cannot load nls iso8
[  311.572872][T12886] loop4: detected capacity change from 0 to 32768
[  311.576843][T12886] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section journal: journal bucket 1 before first bucket 32767
[  311.576843][T12886] journal (size 40):
[  311.576843][T12886] Buckets:  9 7 24 1
[  311.576843][T12886] 
[  311.595419][T12886] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  311.997639][T12903] loop7: detected capacity change from 0 to 40427
[  312.070978][T12903] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  312.075762][T12903] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  312.469476][T12910] syz.7.2482: attempt to access beyond end of device
[  312.469476][T12910] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  312.684973][T12904] loop6: detected capacity change from 0 to 32768
[  312.704236][T12583] syz-executor: attempt to access beyond end of device
[  312.704236][T12583] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  312.714235][T12583] CPU: 1 UID: 0 PID: 12583 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  312.714259][T12583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  312.714268][T12583] Call Trace:
[  312.714274][T12583]  <TASK>
[  312.714281][T12583]  dump_stack_lvl+0x189/0x250
[  312.714308][T12583]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.714326][T12583]  ? __pfx_queue_work_on+0x10/0x10
[  312.714340][T12583]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  312.714358][T12583]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  312.714386][T12583]  f2fs_handle_critical_error+0x37c/0x540
[  312.714411][T12583]  f2fs_write_end_io+0x886/0xb60
[  312.714449][T12583]  __submit_merged_bio+0x27a/0x6a0
[  312.714474][T12583]  __submit_merged_write_cond+0x255/0x530
[  312.714500][T12583]  f2fs_write_data_pages+0x261d/0x3000
[  312.714554][T12583]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  312.714586][T12583]  ? arch_stack_walk+0xfc/0x150
[  312.714632][T12583]  ? __mod_zone_page_state+0xd7/0x140
[  312.714662][T12583]  ? folios_put_refs+0x560/0x640
[  312.714688][T12583]  ? __pfx_folios_put_refs+0x10/0x10
[  312.714702][T12583]  ? rcu_is_watching+0x15/0xb0
[  312.714726][T12583]  ? __lock_acquire+0xab9/0xd20
[  312.714763][T12583]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  312.714784][T12583]  do_writepages+0x32e/0x550
[  312.714815][T12583]  ? do_raw_spin_unlock+0x4d/0x240
[  312.714837][T12583]  filemap_fdatawrite+0x199/0x240
[  312.714858][T12583]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  312.714932][T12583]  ? do_raw_spin_unlock+0x4d/0x240
[  312.714968][T12583]  f2fs_sync_dirty_inodes+0x31f/0x830
[  312.715003][T12583]  f2fs_write_checkpoint+0x95a/0x1df0
[  312.715044][T12583]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  312.715111][T12583]  ? kill_f2fs_super+0x298/0x6c0
[  312.715165][T12583]  kill_f2fs_super+0x2c3/0x6c0
[  312.715191][T12583]  ? __pfx_kill_f2fs_super+0x10/0x10
[  312.715208][T12583]  ? radix_tree_delete_item+0x2b6/0x400
[  312.715233][T12583]  ? shrinker_free+0x2ce/0x3e0
[  312.715250][T12583]  deactivate_locked_super+0xbc/0x130
[  312.715270][T12583]  cleanup_mnt+0x425/0x4c0
[  312.715303][T12583]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.715323][T12583]  task_work_run+0x1d4/0x260
[  312.715345][T12583]  ? __pfx_task_work_run+0x10/0x10
[  312.715361][T12583]  ? __x64_sys_umount+0x122/0x160
[  312.715385][T12583]  ? exit_to_user_mode_loop+0x40/0x110
[  312.715409][T12583]  exit_to_user_mode_loop+0xec/0x110
[  312.715429][T12583]  do_syscall_64+0x2bd/0x3b0
[  312.715445][T12583]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.715462][T12583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.715476][T12583]  ? exc_page_fault+0x9f/0xf0
[  312.715495][T12583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.715508][T12583] RIP: 0033:0x7fe0beb8ff17
[  312.715523][T12583] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  312.715535][T12583] RSP: 002b:00007ffffe796af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  312.715551][T12583] RAX: 0000000000000000 RBX: 00007fe0bec11c05 RCX: 00007fe0beb8ff17
[  312.715561][T12583] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffe796bb0
[  312.715569][T12583] RBP: 00007ffffe796bb0 R08: 0000000000000000 R09: 0000000000000000
[  312.715578][T12583] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffffe797c40
[  312.715587][T12583] R13: 00007fe0bec11c05 R14: 000000000004c4c9 R15: 00007ffffe797c80
[  312.715614][T12583]  </TASK>
[  312.715620][T12583] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  312.724589][T12904] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  312.890739][T12904] XFS (loop6): Ending clean mount
[  312.893948][T12904] XFS (loop6): Quotacheck needed: Please wait.
[  312.984684][T12904] XFS (loop6): Quotacheck: Done.
[  313.046185][T10132] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  313.282766][T12927] Bluetooth: MGMT ver 1.23
[  313.343265][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2488'.
[  313.651728][T12944] loop6: detected capacity change from 0 to 2048
[  313.672376][T12944] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  313.693561][T12944] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  313.734364][T12946] loop7: detected capacity change from 0 to 128
[  313.738321][T12946] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  313.770366][T12946] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  314.191214][T12948] loop6: detected capacity change from 0 to 32768
[  314.197397][T12948] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2495 (12948)
[  314.216338][T12948] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  314.223631][T12948] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  314.227201][T12948] BTRFS info (device loop6): using free-space-tree
[  314.277717][   T33] audit: type=1800 audit(2000000140.620:292): pid=12948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2495" name="file0" dev="loop6" ino=258 res=0 errno=0
[  314.303385][T12948] BTRFS info (device loop6): setting compat-ro feature flag for VERITY (0x4)
[  314.314173][   T33] audit: type=1800 audit(2000000140.660:293): pid=12948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2495" name="file0" dev="loop6" ino=258 res=0 errno=0
[  314.381643][T10132] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  314.822857][T12994] loop6: detected capacity change from 0 to 1024
[  314.938787][  T946] hfsplus: b-tree write err: -5, ino 3
[  314.964296][T10132] hfsplus: node 4:3 still has 1 user(s)!
[  315.944203][T13016] loop7: detected capacity change from 0 to 512
[  315.956615][T13016] EXT4-fs (loop7): external journal device major/minor numbers have changed
[  315.976930][T13016] EXT4-fs (loop7): failed to open journal device unknown-block(8,0) -16
[  315.985600][T13010] loop6: detected capacity change from 0 to 32768
[  315.993708][T13010] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2514 (13010)
[  316.008163][T13010] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.015643][T13010] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  316.027093][T13010] BTRFS info (device loop6): using free-space-tree
[  316.118518][T13032] netlink: 'syz.7.2517': attribute type 21 has an invalid length.
[  316.123499][T13032] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2517'.
[  316.128151][T13032] netlink: 'syz.7.2517': attribute type 5 has an invalid length.
[  316.132280][T13032] netlink: 'syz.7.2517': attribute type 6 has an invalid length.
[  316.135660][T13032] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2517'.
[  316.183476][T10132] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.233722][T13037] program syz.7.2519 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  316.575365][T13047] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  316.825421][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.828184][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.385495][T13060] openvswitch: netlink: Duplicate or invalid key (type 0).
[  317.388537][T13060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  318.468405][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2536'.
[  318.472092][T13087] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2536'.
[  318.750887][   T32] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  320.069133][T13118] can0: slcan on ptm0.
[  320.174673][T13121] loop6: detected capacity change from 0 to 2048
[  320.178158][T13121] EXT4-fs: Ignoring removed bh option
[  320.207170][ T5236] Bluetooth: hci0: Malformed LE Event: 0x1d
[  320.242143][T13121] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.292377][T13117] can0 (unregistered): slcan off ptm0.
[  320.320729][T10132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.395026][T13138] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2547'.
[  320.726734][T13153] loop4: detected capacity change from 0 to 4096
[  321.004742][T13167] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  321.072351][T13169] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  322.383204][T13183] loop6: detected capacity change from 0 to 40427
[  322.385788][T13183] F2FS-fs: heap/no_heap options were deprecated
[  322.388651][T13183] F2FS-fs (loop6): build fault injection rate: 19
[  322.390797][T13183] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  322.395019][T13183] F2FS-fs (loop6): invalid crc value
[  322.496151][T13183] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  322.592872][T13183] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  322.602788][T13183] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  322.610174][T13183] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  322.656683][T13183] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  322.674484][T13183] F2FS-fs (loop6): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9f1/0x16a0
[  322.680722][T13183] F2FS-fs (loop6): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xfaf/0x16a0
[  322.684684][T13183] syz.6.2559: attempt to access beyond end of device
[  322.684684][T13183] loop6: rw=2049, sector=45096, nr_sectors = 48 limit=40427
[  322.694550][T13183] CPU: 0 UID: 0 PID: 13183 Comm: syz.6.2559 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  322.694571][T13183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  322.694579][T13183] Call Trace:
[  322.694586][T13183]  <TASK>
[  322.694609][T13183]  dump_stack_lvl+0x189/0x250
[  322.694629][T13183]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.694640][T13183]  ? __pfx_queue_work_on+0x10/0x10
[  322.694651][T13183]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  322.694664][T13183]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  322.694676][T13183]  ? f2fs_hw_is_readonly+0x39b/0x470
[  322.694692][T13183]  f2fs_handle_critical_error+0x37c/0x540
[  322.694706][T13183]  f2fs_balance_fs+0x32d/0x7f0
[  322.694720][T13183]  ? f2fs_write_single_data_page+0xfaf/0x16a0
[  322.694732][T13183]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  322.694749][T13183]  ? folio_unlock+0x101/0x160
[  322.694764][T13183]  f2fs_write_single_data_page+0xfaf/0x16a0
[  322.694783][T13183]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  322.694801][T13183]  ? mlock_drain_local+0x79/0x490
[  322.694809][T13183]  ? mlock_drain_local+0x28e/0x490
[  322.694821][T13183]  f2fs_write_data_pages+0x195b/0x3000
[  322.694850][T13183]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  322.694883][T13183]  ? check_path+0x21/0x40
[  322.694893][T13183]  ? check_noncircular+0xe0/0x160
[  322.694904][T13183]  ? lockdep_unlock+0x89/0x120
[  322.694921][T13183]  ? __lock_acquire+0xab9/0xd20
[  322.694937][T13183]  ? do_raw_spin_lock+0x121/0x290
[  322.694953][T13183]  ? do_raw_spin_unlock+0x4d/0x240
[  322.694963][T13183]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  322.694974][T13183]  do_writepages+0x32e/0x550
[  322.694991][T13183]  ? do_raw_spin_unlock+0x4d/0x240
[  322.695003][T13183]  file_write_and_wait_range+0x23e/0x340
[  322.695017][T13183]  ? __pfx_file_write_and_wait_range+0x10/0x10
[  322.695048][T13183]  ? do_raw_spin_lock+0x121/0x290
[  322.695064][T13183]  f2fs_do_sync_file+0x5e0/0x1860
[  322.695082][T13183]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  322.695112][T13183]  ? f2fs_file_write_iter+0x4ac/0x2410
[  322.695122][T13183]  ? vfs_fsync_range+0x12c/0x1c0
[  322.695131][T13183]  ? f2fs_sync_file+0xe9/0x160
[  322.695143][T13183]  f2fs_file_write_iter+0x753/0x2410
[  322.695162][T13183]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  322.695169][T13183]  ? rcu_read_lock_any_held+0xb3/0x120
[  322.695187][T13183]  vfs_write+0x54b/0xa90
[  322.695201][T13183]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  322.695209][T13183]  ? __pfx_vfs_write+0x10/0x10
[  322.695225][T13183]  ? __fget_files+0x2a/0x420
[  322.695242][T13183]  ksys_write+0x145/0x250
[  322.695253][T13183]  ? __pfx_ksys_write+0x10/0x10
[  322.695263][T13183]  ? rcu_is_watching+0x15/0xb0
[  322.695274][T13183]  ? do_syscall_64+0xbe/0x3b0
[  322.695288][T13183]  do_syscall_64+0xfa/0x3b0
[  322.695299][T13183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.695308][T13183]  ? asm_sysvec_call_function_single+0x1a/0x20
[  322.695321][T13183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.695329][T13183] RIP: 0033:0x7f1904b8ebe9
[  322.695340][T13183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  322.695348][T13183] RSP: 002b:00007f1905a1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  322.695359][T13183] RAX: ffffffffffffffda RBX: 00007f1904db5fa0 RCX: 00007f1904b8ebe9
[  322.695373][T13183] RDX: 0000000000007bc6 RSI: 00002000000001c0 RDI: 0000000000000004
[  322.695379][T13183] RBP: 00007f1904c11e19 R08: 0000000000000000 R09: 0000000000000000
[  322.695385][T13183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  322.695391][T13183] R13: 00007f1904db6038 R14: 00007f1904db5fa0 R15: 00007ffcf2fcd2c8
[  322.695434][T13183]  </TASK>
[  322.695486][T13183] F2FS-fs (loop6): Stopped filesystem due to reason: 1
[  323.044635][T13206] vivid-007: =================  START STATUS  =================
[  323.048361][T13206] vivid-007: Generate PTS: true
[  323.051683][T13206] vivid-007: Generate SCR: true
[  323.053577][T13206] tpg source WxH: 320x240 (Y'CbCr)
[  323.055563][T13206] tpg field: 1
[  323.056986][T13206] tpg crop: (0,0)/320x240
[  323.058774][T13206] tpg compose: (0,0)/320x240
[  323.060505][T13206] tpg colorspace: 8
[  323.061599][T13202] loop4: detected capacity change from 0 to 8192
[  323.061888][T13206] tpg transfer function: 0/0
[  323.066025][T13206] tpg Y'CbCr encoding: 0/0
[  323.067477][T13206] tpg quantization: 0/0
[  323.068797][T13206] tpg RGB range: 0/2
[  323.070148][T13206] vivid-007: ==================  END STATUS  ==================
[  323.100939][T13206] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11)
[  323.103063][T13206] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  323.105519][T13206] vhci_hcd vhci_hcd.0: Device attached
[  323.112521][T13208] vhci_hcd: connection closed
[  323.124754][ T5862] vhci_hcd: stop threads
[  323.128062][ T5862] vhci_hcd: release socket
[  323.129578][ T5862] vhci_hcd: disconnect device
[  323.243805][T13211] loop4: detected capacity change from 0 to 8
[  323.398288][ T5296] udevd[5296]: worker [6856] terminated by signal 33 (Unknown signal 33)
[  323.411041][ T5296] udevd[5296]: worker [6856] failed while handling '/devices/virtual/block/loop4'
[  324.276997][T13231] ipip0: entered promiscuous mode
[  324.399458][T13221] loop6: detected capacity change from 0 to 32768
[  324.434726][T13221] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  324.475200][T13221] XFS (loop6): Ending clean mount
[  324.486138][T13247] geneve2: entered promiscuous mode
[  324.488442][T13247] geneve2: entered allmulticast mode
[  324.515173][T10132] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  324.687409][T13249] loop4: detected capacity change from 0 to 512
[  324.711685][T13249] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  324.714613][T13249] EXT4-fs (loop4): orphan cleanup on readonly fs
[  324.727981][T13249] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  324.747989][T13249] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  324.753506][T13249] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #16: comm syz.4.2579: invalid fast symlink length 9000
[  324.758056][T13249] EXT4-fs (loop4): Remounting filesystem read-only
[  324.765933][T13249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  324.791950][T13256] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  324.806995][ T8802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.866851][T13256] bond1: entered promiscuous mode
[  324.868581][T13256] bond1: entered allmulticast mode
[  324.873699][T13256] 8021q: adding VLAN 0 to HW filter on device bond1
[  325.887073][T13278] Bluetooth: (null): Invalid header checksum
[  325.909673][T13283] loop6: detected capacity change from 0 to 512
[  325.920098][T13283] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  325.940671][T13283] EXT4-fs (loop6): warning: maximal mount count reached, running e2fsck is recommended
[  325.960038][T13283] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.2590: inode #15: comm syz.6.2590: iget: illegal inode #
[  325.973419][T13283] EXT4-fs (loop6): Remounting filesystem read-only
[  325.981454][T13283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.068647][T10132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.765652][T13316] loop4: detected capacity change from 0 to 4096
[  327.775528][T13316] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  327.818677][T13316] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  327.899125][T13324] loop6: detected capacity change from 0 to 256
[  327.925072][T13326] sp0: Synchronizing with TNC
[  327.925128][T13324] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  327.935548][T13324] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  328.177838][T13336] loop6: detected capacity change from 0 to 256
[  328.194086][T13336] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  328.197899][T13336] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  328.213817][T13336] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  328.292513][T13336] loop6: detected capacity change from 256 to 0
[  328.294220][    C0] I/O error, dev loop6, sector 168 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0
[  328.299257][    C0] buffer_io_error: 3182 callbacks suppressed
[  328.299272][    C0] Buffer I/O error on dev loop6, logical block 168, lost sync page write
[  328.308295][T13336] syz.6.2616: attempt to access beyond end of device
[  328.308295][T13336] loop6: rw=2049, sector=168, nr_sectors = 1 limit=0
[  328.316644][T13336] Buffer I/O error on dev loop6, logical block 168, lost sync page write
[  328.325172][T13336] syz.6.2616: attempt to access beyond end of device
[  328.325172][T13336] loop6: rw=2049, sector=144, nr_sectors = 1 limit=0
[  328.359303][T10132] syz-executor: attempt to access beyond end of device
[  328.359303][T10132] loop6: rw=524288, sector=160, nr_sectors = 1 limit=0
[  328.390601][T10132] syz-executor: attempt to access beyond end of device
[  328.390601][T10132] loop6: rw=524288, sector=161, nr_sectors = 1 limit=0
[  328.396146][T10132] syz-executor: attempt to access beyond end of device
[  328.396146][T10132] loop6: rw=524288, sector=162, nr_sectors = 1 limit=0
[  328.413233][T13334] loop7: detected capacity change from 0 to 32768
[  328.417792][T13334] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2615 (13334)
[  328.426425][T10132] syz-executor: attempt to access beyond end of device
[  328.426425][T10132] loop6: rw=524288, sector=163, nr_sectors = 1 limit=0
[  328.435672][T10132] syz-executor: attempt to access beyond end of device
[  328.435672][T10132] loop6: rw=524288, sector=164, nr_sectors = 1 limit=0
[  328.446198][T13334] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  328.464086][T10132] syz-executor: attempt to access beyond end of device
[  328.464086][T10132] loop6: rw=524288, sector=165, nr_sectors = 1 limit=0
[  328.469725][T13334] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  328.493744][T10132] syz-executor: attempt to access beyond end of device
[  328.493744][T10132] loop6: rw=524288, sector=166, nr_sectors = 1 limit=0
[  328.510228][T10132] syz-executor: attempt to access beyond end of device
[  328.510228][T10132] loop6: rw=524288, sector=167, nr_sectors = 1 limit=0
[  328.701960][T13334] BTRFS info (device loop7): rebuilding free space tree
[  328.783660][T13334] BTRFS info (device loop7): disabling free space tree
[  328.788766][T13334] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  328.793643][T13334] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  328.909345][T13364] loop4: detected capacity change from 0 to 512
[  328.931661][T13364] EXT4-fs: Ignoring removed oldalloc option
[  328.963715][T13364] EXT4-fs (loop4): 1 truncate cleaned up
[  328.967267][T13364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.063055][T13364] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  329.099878][ T8802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.527432][T12583] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  329.595090][ T9142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  329.625246][ T9142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  329.634438][ T9142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  329.664169][T13381] XFS (nbd4): SB validate failed with error -5.
[  329.664838][ T9142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  329.671755][ T9142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  330.054124][T13378] chnl_net:caif_netlink_parms(): no params data found
[  330.265597][T13378] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.271175][T13378] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.281150][T13378] bridge_slave_0: entered allmulticast mode
[  330.293202][T13378] bridge_slave_0: entered promiscuous mode
[  330.300914][T13378] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.303279][T13378] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.305623][T13378] bridge_slave_1: entered allmulticast mode
[  330.315950][T13378] bridge_slave_1: entered promiscuous mode
[  330.379687][T13378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  330.395389][T13378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  330.442079][T13410] FAT-fs (loop15): unable to read boot sector
[  330.463795][T13378] team0: Port device team_slave_0 added
[  330.469015][T13378] team0: Port device team_slave_1 added
[  330.521262][T13378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.523670][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.536616][T13378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.542781][T13378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.545342][T13378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.557032][T13378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.561767][ T5910] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  330.622695][T13378] hsr_slave_0: entered promiscuous mode
[  330.626438][T13378] hsr_slave_1: entered promiscuous mode
[  330.633420][T13378] debugfs: 'hsr0' already exists in 'hsr'
[  330.635981][T13378] Cannot create hsr debugfs directory
[  330.710111][ T5910] usb 5-1: Using ep0 maxpacket: 8
[  330.716682][ T5910] usb 5-1: unable to get BOS descriptor or descriptor too short
[  330.723771][ T5910] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  330.739645][ T5910] usb 5-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  330.750851][ T5910] usb 5-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  330.754373][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.767953][ T5910] usb 5-1: Product: syz
[  330.769731][ T5910] usb 5-1: Manufacturer: syz
[  330.772638][ T5910] usb 5-1: SerialNumber: syz
[  331.027963][ T5910] usb 5-1: USB disconnect, device number 15
[  331.107944][T13378] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  331.121360][T13378] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  331.135018][T13378] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  331.157577][T13378] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  331.294854][T13378] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.315759][T13378] 8021q: adding VLAN 0 to HW filter on device team0
[  331.326317][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.329629][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.348742][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.352073][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.586201][T13426] loop2: detected capacity change from 0 to 7
[  331.621302][T13426] Dev loop2: unable to read RDB block 7
[  331.623657][T13426]  loop2: unable to read partition table
[  331.626149][T13426] loop2: partition table beyond EOD, truncated
[  331.628743][T13426] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5)
[  331.646241][T13378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.783599][ T5236] Bluetooth: hci1: command tx timeout
[  331.941559][T13378] veth0_vlan: entered promiscuous mode
[  331.947913][T13378] veth1_vlan: entered promiscuous mode
[  331.973872][T13378] veth0_macvtap: entered promiscuous mode
[  331.978269][T13378] veth1_macvtap: entered promiscuous mode
[  331.990271][T13378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  331.999291][T13378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.009843][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.014368][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.024122][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.027719][   T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.123440][ T9641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.128643][ T9641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.171205][ T9651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.174463][ T9651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.650138][ T9158] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  332.706395][T13460] loop4: detected capacity change from 0 to 32768
[  332.717708][T13460] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  332.724846][T13460] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  332.769043][ T8802] ocfs2: Unmounting device (7,4) on (node local)
[  332.825525][ T9158] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.842662][ T9158] usb 9-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72
[  332.846509][ T9158] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.849879][ T9158] usb 9-1: Product: syz
[  332.856245][ T9158] usb 9-1: Manufacturer: syz
[  332.858221][ T9158] usb 9-1: SerialNumber: syz
[  332.874209][ T9158] usb 9-1: config 0 descriptor??
[  332.887479][ T9158] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  332.911816][ T9158] dvb-usb: bulk message failed: -22 (3/0)
[  332.956908][ T9158] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  332.981582][ T9158] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[  332.993541][ T9158] dvb_usb_umt_010 9-1:0.0: probe with driver dvb_usb_umt_010 failed with error -22
[  333.093443][ T9158] usb 9-1: USB disconnect, device number 2
[  333.870750][ T5236] Bluetooth: hci1: command tx timeout
[  334.463665][T13498] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2669'.
[  334.873264][ T5910] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  335.034623][ T5910] usb 5-1: Using ep0 maxpacket: 8
[  335.045146][ T5910] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  335.066929][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.072652][ T5910] usb 5-1: Product: syz
[  335.080047][ T5910] usb 5-1: Manufacturer: syz
[  335.081975][ T5910] usb 5-1: SerialNumber: syz
[  335.092284][ T5910] usb 5-1: config 0 descriptor??
[  335.309249][ T5910] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  335.950241][ T5236] Bluetooth: hci1: command tx timeout
[  336.113399][ T5910] gspca_sunplus: reg_w_riv err -71
[  336.115154][ T5910] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  336.130172][ T5910] usb 5-1: USB disconnect, device number 16
[  337.702618][T13552] loop8: detected capacity change from 0 to 32768
[  337.710609][T13552] XFS: attr2 mount option is deprecated.
[  337.728557][T13552] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  337.769487][T13552] XFS (loop8): Ending clean mount
[  337.781732][T13552] XFS (loop8): Quotacheck needed: Please wait.
[  337.832716][T13552] XFS (loop8): Quotacheck: Done.
[  337.886680][T13378] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  338.022983][ T5236] Bluetooth: hci1: command tx timeout
[  338.249597][T13570] loop7: detected capacity change from 0 to 764
[  338.468710][T13574] syzkaller1: entered promiscuous mode
[  338.475010][T13574] syzkaller1: entered allmulticast mode
[  338.547810][T13568] loop8: detected capacity change from 0 to 32768
[  338.583942][T13568] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  338.688037][T13378] ocfs2: Unmounting device (7,8) on (node local)
[  338.821401][ T5910] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  338.875754][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2703'.
[  338.879716][T13584] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  338.981797][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  338.988996][ T5910] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  338.998163][ T5910] usb 5-1: config 0 has no interface number 0
[  339.004444][ T5910] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11
[  339.010911][ T5910] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[  339.021612][ T5910] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  339.021675][T13582] loop7: detected capacity change from 0 to 32768
[  339.027504][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  339.040126][ T5910] usb 5-1: Manufacturer: syz
[  339.042161][ T5910] usb 5-1: SerialNumber: syz
[  339.046555][ T5910] usb 5-1: config 0 descriptor??
[  339.050666][T13579] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  339.377420][T13586] loop8: detected capacity change from 0 to 32768
[  339.416991][T13586] ialloc: diAlloc returned -5!
[  339.466066][ T5910] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71
[  339.476350][ T5910] usb 5-1: USB disconnect, device number 17
[  339.666223][T13592] loop7: detected capacity change from 0 to 1024
[  341.175902][T13616] loop4: detected capacity change from 0 to 8192
[  341.322094][T13620] loop8: detected capacity change from 0 to 32768
[  341.340661][T13620] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  341.386784][T13620] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  341.420347][T13378] ocfs2: Unmounting device (7,8) on (node local)
[  341.509636][T13624] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  341.513527][T13624] FAT-fs (loop4): Filesystem has been set read-only
[  341.882497][T13632] loop8: detected capacity change from 0 to 256
[  341.885934][T13632] exfat: Deprecated parameter 'namecase'
[  341.888057][T13632] exfat: Deprecated parameter 'namecase'
[  341.906070][T13632] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  342.590304][   T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  342.760086][   T24] usb 9-1: Using ep0 maxpacket: 8
[  342.764560][   T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.768602][   T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  342.772440][   T24] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.777134][   T24] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  342.781110][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.793387][   T24] hub 9-1:1.0: bad descriptor, ignoring hub
[  342.795889][   T24] hub 9-1:1.0: probe with driver hub failed with error -5
[  342.799255][   T24] cdc_wdm 9-1:1.0: skipping garbage
[  342.802787][   T24] cdc_wdm 9-1:1.0: skipping garbage
[  342.805535][   T24] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  343.279146][   T24] usb 9-1: reset high-speed USB device number 3 using dummy_hcd
[  343.750818][   T10] usb 9-1: USB disconnect, device number 3
[  343.987822][T13651] loop7: detected capacity change from 0 to 512
[  343.993215][T13651] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  344.002075][T13651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  344.006403][T13651] System zones: 1-12
[  344.008658][T13651] EXT4-fs (loop7): orphan cleanup on readonly fs
[  344.014675][T13651] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2732: invalid indirect mapped block 12 (level 1)
[  344.024030][T13651] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2732: invalid indirect mapped block 2 (level 2)
[  344.037690][T13651] EXT4-fs (loop7): 1 truncate cleaned up
[  344.043752][T13651] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  344.118104][T12583] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  344.231470][T13654] Bluetooth: hci3: Frame reassembly failed (-84)
[  344.780167][   T24] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  344.950145][   T24] usb 9-1: Using ep0 maxpacket: 8
[  344.956452][   T24] usb 9-1: config 0 has an invalid interface number: 52 but max is 0
[  344.961149][   T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  344.966138][   T24] usb 9-1: config 0 has no interface number 0
[  344.968999][   T24] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  344.974028][   T24] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  344.980361][   T24] usb 9-1: config 0 interface 52 has no altsetting 0
[  344.988214][   T24] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  344.998402][   T24] usb 9-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  345.003454][   T24] usb 9-1: Manufacturer: syz
[  345.012329][   T24] usb 9-1: config 0 descriptor??
[  345.018389][   T24] hub 9-1:0.52: bad descriptor, ignoring hub
[  345.021409][   T24] hub 9-1:0.52: probe with driver hub failed with error -5
[  345.237068][   T24] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input16
[  345.530553][   T51] usb 9-1: USB disconnect, device number 4
[  345.540400][ T5910] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  345.693226][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.697641][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.705657][ T5910] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  345.709330][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.712886][ T5910] usb 5-1: Product: syz
[  345.714595][ T5910] usb 5-1: Manufacturer: syz
[  345.716517][ T5910] usb 5-1: SerialNumber: syz
[  345.722505][ T5910] usb 5-1: config 0 descriptor??
[  345.728150][ T5910] usb 5-1: Found UVC 0.00 device syz (18ec:3288)
[  345.730994][ T5910] usb 5-1: No valid video chain found.
[  345.931703][ T5910] usb 5-1: USB disconnect, device number 18
[  346.261178][ T5236] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  346.261758][ T9142] Bluetooth: hci3: command 0x1003 tx timeout
[  346.724231][T13694] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2749'.
[  346.734998][T13693] binder: 13692:13693 ioctl c0306201 2000000001c0 returned -22
[  347.030130][   T33] audit: type=1326 audit(2000000173.370:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.7.2758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beb8ebe9 code=0x7ffc0000
[  347.047149][   T33] audit: type=1326 audit(2000000173.380:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.7.2758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beb8ebe9 code=0x7ffc0000
[  347.060699][   T33] audit: type=1326 audit(2000000173.400:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.7.2758" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe0beb8ebe9 code=0x7ffc0000
[  347.079067][   T33] audit: type=1326 audit(2000000173.400:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.7.2758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beb8ebe9 code=0x7ffc0000
[  347.079712][T13710] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  347.087738][   T33] audit: type=1326 audit(2000000173.400:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.7.2758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beb8ebe9 code=0x7ffc0000
[  347.104311][   T33] audit: type=1326 audit(2000000173.410:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.7.2758" exe="/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7fe0beb8ebe9 code=0x7ffc0000
[  347.123744][   T33] audit: type=1326 audit(2000000173.410:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.7.2758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beb8ebe9 code=0x7ffc0000
[  347.142460][   T33] audit: type=1326 audit(2000000173.410:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13707 comm="syz.7.2758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0beb8ebe9 code=0x7ffc0000
[  347.239798][T13715] program syz.4.2761 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  347.549055][T13735] loop4: detected capacity change from 0 to 1024
[  347.555675][T13735] EXT4-fs: Ignoring removed i_version option
[  347.592430][T13735] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  347.596648][T13735] EXT4-fs (loop4): group descriptors corrupted!
[  347.808735][T13744] loop4: detected capacity change from 0 to 1024
[  348.464336][T13744] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  348.467756][T13744] hfsplus: xattr search failed
[  349.052559][ T9158] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  349.089212][ T5910] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  349.214225][ T9158] usb 5-1: Using ep0 maxpacket: 8
[  349.248869][ T9158] usb 5-1: unable to get BOS descriptor or descriptor too short
[  349.273272][ T5910] usb 9-1: Using ep0 maxpacket: 8
[  349.277635][ T5910] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7
[  349.284984][ T5910] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  349.289351][ T9158] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[  349.292421][ T5910] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  349.292775][ T9158] usb 5-1: config 0 has no interface number 0
[  349.296285][ T5910] usb 9-1: Product: syz
[  349.298879][ T9158] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  349.302634][ T5910] usb 9-1: Manufacturer: syz
[  349.305232][ T9158] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  349.309472][ T5910] usb 9-1: SerialNumber: syz
[  349.311280][ T9158] usb 5-1: config 0 interface 88 has no altsetting 0
[  349.396591][ T9158] usb 5-1: string descriptor 0 read error: -22
[  349.399418][ T9158] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  349.405618][ T9158] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  349.431218][ T9158] usb 5-1: config 0 descriptor??
[  349.444815][ T9158] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input17
[  349.535844][ T5910] usb 9-1: palm_os_3_probe - error -71 getting connection information
[  349.543394][ T5910] visor 9-1:1.0: probe with driver visor failed with error -71
[  349.575736][ T5910] usb 9-1: USB disconnect, device number 5
[  349.651052][T11975] udevd[11975]: Error opening device "/dev/input/event3": Input/output error
[  349.654101][T11975] udevd[11975]: Unable to EVIOCGABS device "/dev/input/event3"
[  349.656534][ T9158] usb 5-1: USB disconnect, device number 19
[  349.656725][T11975] udevd[11975]: Unable to EVIOCGABS device "/dev/input/event3"
[  349.788506][T13602] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  350.496973][T13764] netlink: 'syz.4.2783': attribute type 13 has an invalid length.
[  352.222870][T13764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  352.475527][ T5910] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  352.602452][T13774] 8021q: adding VLAN 0 to HW filter on device bond1
[  352.692907][T13777] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  352.712820][ T5862] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  352.736679][ T5910] usb 9-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[  352.740377][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.752953][ T5910] usb 9-1: Product: syz
[  352.754948][ T5910] usb 9-1: Manufacturer: syz
[  352.756591][ T5910] usb 9-1: SerialNumber: syz
[  352.762160][ T5910] usb 9-1: config 0 descriptor??
[  352.777339][ T5910] usb 9-1: disable ehci-hcd to run US-144
[  352.843063][ T5909] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  353.019417][ T5910] usb 9-1: USB disconnect, device number 6
[  353.181559][T13779] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  354.660564][ T5236] Bluetooth: hci0: command 0x0c1a tx timeout
[  355.343546][T13832] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2813'.
[  355.435318][T13842] loop4: detected capacity change from 0 to 1024
[  355.881096][T13844] loop8: detected capacity change from 0 to 40427
[  355.908998][T13844] F2FS-fs (loop8): build fault injection rate: 771
[  355.958392][T13844] F2FS-fs (loop8): invalid crc value
[  356.183874][T13844] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  356.191233][T13844] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  356.264395][T13378] bio_check_eod: 6 callbacks suppressed
[  356.264409][T13378] syz-executor: attempt to access beyond end of device
[  356.264409][T13378] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  356.275151][T13378] CPU: 1 UID: 0 PID: 13378 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  356.275174][T13378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  356.275183][T13378] Call Trace:
[  356.275189][T13378]  <TASK>
[  356.275197][T13378]  dump_stack_lvl+0x189/0x250
[  356.275225][T13378]  ? __pfx_dump_stack_lvl+0x10/0x10
[  356.275239][T13378]  ? __pfx_queue_work_on+0x10/0x10
[  356.275254][T13378]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  356.275272][T13378]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  356.275298][T13378]  f2fs_handle_critical_error+0x37c/0x540
[  356.275325][T13378]  f2fs_write_end_io+0x886/0xb60
[  356.275358][T13378]  __submit_merged_bio+0x27a/0x6a0
[  356.275380][T13378]  __submit_merged_write_cond+0x255/0x530
[  356.275403][T13378]  f2fs_write_data_pages+0x261d/0x3000
[  356.275455][T13378]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  356.275519][T13378]  ? folios_put_refs+0x559/0x640
[  356.275550][T13378]  ? __lock_acquire+0xab9/0xd20
[  356.275580][T13378]  ? do_raw_spin_lock+0x121/0x290
[  356.275605][T13378]  ? do_raw_spin_unlock+0x4d/0x240
[  356.275622][T13378]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  356.275641][T13378]  do_writepages+0x32e/0x550
[  356.275671][T13378]  ? do_raw_spin_unlock+0x4d/0x240
[  356.275693][T13378]  filemap_fdatawrite+0x199/0x240
[  356.275713][T13378]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  356.275784][T13378]  ? do_raw_spin_unlock+0x4d/0x240
[  356.275806][T13378]  f2fs_sync_dirty_inodes+0x31f/0x830
[  356.275839][T13378]  f2fs_write_checkpoint+0x95a/0x1df0
[  356.275882][T13378]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  356.275939][T13378]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  356.275958][T13378]  ? kfree+0x18e/0x440
[  356.275977][T13378]  ? kill_f2fs_super+0x298/0x6c0
[  356.276038][T13378]  kill_f2fs_super+0x2c3/0x6c0
[  356.276063][T13378]  ? __pfx_kill_f2fs_super+0x10/0x10
[  356.276097][T13378]  ? radix_tree_delete_item+0x2b6/0x400
[  356.276123][T13378]  ? shrinker_free+0x2ce/0x3e0
[  356.276142][T13378]  deactivate_locked_super+0xbc/0x130
[  356.276163][T13378]  cleanup_mnt+0x425/0x4c0
[  356.276181][T13378]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.276200][T13378]  task_work_run+0x1d4/0x260
[  356.276225][T13378]  ? __pfx_task_work_run+0x10/0x10
[  356.276241][T13378]  ? __x64_sys_umount+0x122/0x160
[  356.276264][T13378]  ? exit_to_user_mode_loop+0x40/0x110
[  356.276288][T13378]  exit_to_user_mode_loop+0xec/0x110
[  356.276306][T13378]  do_syscall_64+0x2bd/0x3b0
[  356.276323][T13378]  ? lockdep_hardirqs_on+0x9c/0x150
[  356.276338][T13378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.276352][T13378]  ? exc_page_fault+0x9f/0xf0
[  356.276369][T13378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  356.276383][T13378] RIP: 0033:0x7f7f8618ff17
[  356.276399][T13378] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  356.276412][T13378] RSP: 002b:00007ffeb0e92b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  356.276429][T13378] RAX: 0000000000000000 RBX: 00007f7f86211c05 RCX: 00007f7f8618ff17
[  356.276439][T13378] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb0e92bc0
[  356.276448][T13378] RBP: 00007ffeb0e92bc0 R08: 0000000000000000 R09: 0000000000000000
[  356.276457][T13378] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb0e93c50
[  356.276466][T13378] R13: 00007f7f86211c05 R14: 0000000000056f0a R15: 00007ffeb0e93c90
[  356.276492][T13378]  </TASK>
[  356.290161][T13378] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  356.464134][T13879] lo: entered promiscuous mode
[  356.466115][T13879] lo: entered allmulticast mode
[  356.704850][T13885] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2837'.
[  356.730308][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  356.821246][T13895] netlink: 'syz.8.2840': attribute type 12 has an invalid length.
[  356.880849][   T10] usb 5-1: Using ep0 maxpacket: 8
[  356.893809][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  356.899121][   T10] usb 5-1: unable to read config index 0 descriptor/start: -71
[  356.905099][   T10] usb 5-1: can't read configurations, error -71
[  356.996924][T13905] loop8: detected capacity change from 0 to 128
[  357.002623][T13905] hpfs: Unexpected value for 'help'
[  357.334041][T13911] loop8: detected capacity change from 0 to 32768
[  357.359201][T13911] ERROR: (device loop8): dbAlloc: unable to allocate blocks
[  357.359201][T13911] 
[  357.365312][T13911] jfs_create: dtInsert returned -EIO
[  357.367205][T13911] ERROR: (device loop8): jfs_create: 
[  357.367205][T13911] 
[  357.418236][T13921] loop7: detected capacity change from 0 to 4096
[  357.431700][T13921] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  357.463171][T13921] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  357.468145][T13921] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  357.535810][T13927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  357.538988][T13927] IPv6: NLM_F_CREATE should be set when creating new route
[  357.541584][T13927] IPv6: NLM_F_CREATE should be set when creating new route
[  357.815794][T13944] loop7: detected capacity change from 0 to 512
[  357.838381][T13944] EXT4-fs: Ignoring removed bh option
[  357.844872][T13944] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  357.856080][T13944] EXT4-fs (loop7): 1 truncate cleaned up
[  357.872389][T13944] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.033749][T13952] netlink: 2036 bytes leftover after parsing attributes in process `syz.8.2864'.
[  358.037442][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2864'.
[  358.682907][T12583] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.737106][T14004] loop8: detected capacity change from 0 to 1024
[  359.934750][   T32] hfsplus: b-tree write err: -5, ino 3
[  359.948057][T13378] hfsplus: node 4:3 still has 3 user(s)!
[  360.103119][T14014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.204518][T14023] loop7: detected capacity change from 0 to 256
[  360.882858][ T5910] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  361.030075][ T5910] usb 5-1: Using ep0 maxpacket: 16
[  361.034371][ T5910] usb 5-1: config 0 has an invalid interface number: 48 but max is 0
[  361.037593][ T5910] usb 5-1: config 0 has no interface number 0
[  361.042576][ T5910] usb 5-1: config 0 interface 48 has no altsetting 0
[  361.047230][ T5910] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  361.051173][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.054415][ T5910] usb 5-1: Product: syz
[  361.056160][ T5910] usb 5-1: Manufacturer: syz
[  361.058103][ T5910] usb 5-1: SerialNumber: syz
[  361.063051][ T5910] usb 5-1: config 0 descriptor??
[  361.273808][ T9158] usb 5-1: USB disconnect, device number 22
[  361.726193][T14049] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2906'.
[  361.822105][T14051] loop8: detected capacity change from 0 to 8192
[  362.219052][T14064] loop8: detected capacity change from 0 to 32768
[  362.708311][T14077] sctp: [Deprecated]: syz.4.2919 (pid 14077) Use of int in maxseg socket option.
[  362.708311][T14077] Use struct sctp_assoc_value instead
[  362.878470][T14086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2923'.
[  362.942348][ T5910] usb 9-1: new full-speed USB device number 7 using dummy_hcd
[  363.099711][ T5910] usb 9-1: config 8 has an invalid interface number: 177 but max is 0
[  363.103057][ T5910] usb 9-1: config 8 has no interface number 0
[  363.105158][ T5910] usb 9-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88
[  363.109068][ T5910] usb 9-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64
[  363.119407][ T5910] usb 9-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  363.123088][ T5910] usb 9-1: config 8 interface 177 has no altsetting 0
[  363.125290][ T5910] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  363.128481][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.135761][T14079] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  363.358544][ T5910] usb 9-1: string descriptor 0 read error: -71
[  363.364855][ T5910] ir_toy 9-1:8.177: required endpoints not found
[  363.369255][ T5910] usb 9-1: USB disconnect, device number 7
[  363.510094][   T51] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  363.626785][T14110] netlink: 'syz.7.2935': attribute type 29 has an invalid length.
[  363.630724][T14110] netlink: 'syz.7.2935': attribute type 29 has an invalid length.
[  363.660213][   T51] usb 5-1: Using ep0 maxpacket: 16
[  363.665875][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  363.671519][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  363.675534][   T51] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  363.679385][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.690441][   T51] usb 5-1: config 0 descriptor??
[  363.774597][T14115] loop7: detected capacity change from 0 to 2048
[  363.810971][T14115] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.851372][T12583] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.501952][ T5910] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  364.569838][   T51] letsketch 0003:6161:4D15.0011: Device info: ࠇ
[  364.657068][ T5910] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  364.663502][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.666995][ T5910] usb 9-1: Product: syz
[  364.668792][ T5910] usb 9-1: Manufacturer: syz
[  364.671709][ T5910] usb 9-1: SerialNumber: syz
[  364.676350][ T5910] usb 9-1: config 0 descriptor??
[  364.693088][ T5910] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 008
[  364.773739][   T51] letsketch 0003:6161:4D15.0011: Device info: ఁ
[  364.894007][ T5910]  (null): failure setting delay to 10us
[  364.896555][ T5910] i2c-tiny-usb 9-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  364.911228][ T5910] usb 9-1: USB disconnect, device number 8
[  364.980922][   T51] letsketch 0003:6161:4D15.0011: Device info: 擃
[  365.417777][   T51] usb 5-1: Max retries (5) exceeded reading string descriptor 2
[  365.426149][   T51] letsketch 0003:6161:4D15.0011: probe with driver letsketch failed with error -71
[  365.435015][   T51] usb 5-1: USB disconnect, device number 23
[  365.528617][T14146] tmpfs: Bad value for 'mpol'
[  365.647753][T14151] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  365.655606][T14151] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  367.117831][T14187] loop4: detected capacity change from 0 to 2048
[  367.176767][T14192] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  367.229931][T14194] loop8: detected capacity change from 0 to 256
[  367.245901][T14194] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  367.250923][T14194] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  367.259909][T14194] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  367.336757][T14196] loop4: detected capacity change from 0 to 64
[  367.371016][T14196] Bad inode number on dev loop4: 6 is out of range
[  367.378892][T14198] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2971'.
[  368.155887][T14214] loop8: detected capacity change from 0 to 32768
[  368.170501][T14214] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  368.187534][T14214] XFS (loop8): Ending clean mount
[  368.192517][T14214] XFS (loop8): Quotacheck needed: Please wait.
[  368.225459][T14214] XFS (loop8): Quotacheck: Done.
[  368.250959][T13378] XFS (loop8): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  368.519143][T14230] loop8: detected capacity change from 0 to 512
[  368.530079][T14230] EXT4-fs (loop8): can't read group descriptor 0
[  368.745509][T14234] ieee802154 phy0 wpan0: encryption failed: -22
[  369.096921][T14236] loop8: detected capacity change from 0 to 4096
[  369.170862][T14236] ntfs3(loop8): ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  369.337770][T14246] loop7: detected capacity change from 0 to 4096
[  369.538761][T14261] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2995'.
[  369.555302][T14261] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2995'.
[  369.558913][T14261] netlink: 'syz.4.2995': attribute type 6 has an invalid length.
[  369.562069][T14261] netlink: 'syz.4.2995': attribute type 5 has an invalid length.
[  369.564453][T14261] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2995'.
[  369.576303][T14258] can0: slcan on ptm0.
[  369.661249][T14257] can0 (unregistered): slcan off ptm0.
[  370.135074][T14279] loop8: detected capacity change from 0 to 4096
[  370.891022][ T9158] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  371.041790][ T9158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  371.045399][ T9158] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  371.049730][ T9158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  371.055739][ T9158] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  371.059240][ T9158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.065464][ T9158] usb 5-1: Product: syz
[  371.067064][ T9158] usb 5-1: Manufacturer: syz
[  371.068812][ T9158] usb 5-1: SerialNumber: syz
[  371.073286][ T9158] usb 5-1: config 0 descriptor??
[  371.081447][ T9158] radioshark2 5-1:0.0: Invalid radioSHARK2 device
[  371.083868][ T9158] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22
[  371.087324][ T9158] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  371.291753][   T51] usb 5-1: USB disconnect, device number 24
[  371.309295][T14302] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  371.672093][T14305] loop8: detected capacity change from 0 to 32768
[  371.742551][T14305] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=gzip,str_hash=crc32c,journal_flush_disabled,recovery_pass_last=set_may_go_rw,reconstruct_alloc
[  371.742576][T14305]   allowing incompatible features above 0.0: (unknown version)
[  371.742586][T14305]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  371.760792][T14305] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  371.764270][T14305] bcachefs (loop8): recovering from clean shutdown, journal seq 10
[  371.767640][T14305] bcachefs (loop8): Version upgrade required:
[  371.767640][T14305] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  371.767640][T14305] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  371.767640][T14305]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  371.798050][T14305] bcachefs (loop8): dropping and reconstructing all alloc info
[  371.824329][T14305] bcachefs (loop8): accounting_read... done
[  371.827272][T14305] bcachefs (loop8): alloc_read... done
[  371.829848][T14305] bcachefs (loop8): snapshots_read... done
[  371.833243][T14305] bcachefs (loop8): check_allocations... done
[  371.851087][T14305] bcachefs (loop8): going read-write
[  371.891106][T14305] bcachefs (loop8): done starting filesystem
[  371.895762][   T32] bcachefs (loop8): bucket incorrectly unset in freespace btree
[  371.895808][   T32]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  371.925098][   T32] bcachefs (loop8): bucket incorrectly unset in freespace btree
[  371.925109][   T32]   u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing
[  371.934024][   T32] bcachefs (loop8): bucket incorrectly unset in freespace btree
[  371.934033][   T32]   u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing
[  371.939532][   T32] bcachefs (loop8): bucket incorrectly unset in freespace btree
[  371.939541][   T32]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  372.047844][   T26] bcachefs (loop8): bucket incorrectly unset in freespace btree
[  372.047890][   T26]   u64s 5 type deleted 0:43:0 len 0 ver 0, , continuing
[  372.057655][T14305] bcachefs (loop8): inode 536870912 truncated to 0 but i_blocks 8 (ondisk 8)
[  372.356358][T13378] bcachefs (loop8): shutting down
[  372.361021][T13378] bcachefs (loop8): going read-only
[  372.365337][T13378] bcachefs (loop8): finished waiting for writes to stop
[  372.381024][T13378] bcachefs (loop8): flushing journal and stopping allocators, journal seq 11
[  372.439905][T14321] bcachefs (loop8): bucket incorrectly unset in freespace btree
[  372.439918][T14321]   u64s 5 type deleted 0:48:0 len 0 ver 0, , continuing
[  372.455068][T13378] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 11
[  372.466058][T13378] bcachefs (loop8): unclean shutdown complete, journal seq 12
[  372.470387][T13378] bcachefs (loop8): done going read-only, filesystem not clean
[  372.488363][T13378] bcachefs (loop8): shutdown complete
[  372.624615][T14326] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0
[  372.770639][   T33] audit: type=1326 audit(2000000199.120:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14333 comm="syz.7.3016" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0beb8ebe9 code=0x0
[  373.272724][T14340] loop4: detected capacity change from 0 to 32768
[  373.282958][T14340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3019 (14340)
[  373.302367][T14340] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  373.306517][T14340] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  373.312940][T14340] BTRFS info (device loop4): using free-space-tree
[  373.403610][ T8802] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  373.968169][T14377] netem: unknown loss type 0
[  373.970527][T14377] netem: change failed
[  374.126733][T14386] mkiss: ax0: crc mode is auto.
[  374.367225][T14390] loop4: detected capacity change from 0 to 32768
[  374.401458][T14390] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  374.413260][T14390] 
[  374.414080][T14390] ======================================================
[  374.416248][T14390] WARNING: possible circular locking dependency detected
[  374.418934][T14390] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  374.421991][T14390] ------------------------------------------------------
[  374.424524][T14390] syz.4.3032/14390 is trying to acquire lock:
[  374.426472][T14390] ffff888113ac60c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  374.430654][T14390] 
[  374.430654][T14390] but task is already holding lock:
[  374.432929][T14390] ffff888113ac23f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  374.435895][T14390] 
[  374.435895][T14390] which lock already depends on the new lock.
[  374.435895][T14390] 
[  374.439710][T14390] 
[  374.439710][T14390] the existing dependency chain (in reverse order) is:
[  374.443305][T14390] 
[  374.443305][T14390] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  374.446373][T14390]        lock_acquire+0x120/0x360
[  374.448391][T14390]        down_read+0x46/0x2e0
[  374.450236][T14390]        ocfs2_init_acl+0x2f9/0x720
[  374.452294][T14390]        ocfs2_mknod+0x1321/0x2050
[  374.454305][T14390]        ocfs2_create+0x1a5/0x440
[  374.456296][T14390]        path_openat+0x14f4/0x3830
[  374.458246][T14390]        do_filp_open+0x1fa/0x410
[  374.460223][T14390]        do_sys_openat2+0x121/0x1c0
[  374.462260][T14390]        __x64_sys_openat+0x138/0x170
[  374.464516][T14390]        do_syscall_64+0xfa/0x3b0
[  374.466521][T14390]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.468996][T14390] 
[  374.468996][T14390] -> #3 (jbd2_handle){++++}-{0:0}:
[  374.471865][T14390]        lock_acquire+0x120/0x360
[  374.473857][T14390]        start_this_handle+0x1fa7/0x21c0
[  374.476339][T14390]        jbd2__journal_start+0x2c1/0x5b0
[  374.478764][T14390]        jbd2_journal_start+0x2a/0x40
[  374.481028][T14390]        ocfs2_start_trans+0x376/0x6d0
[  374.483329][T14390]        ocfs2_mknod+0xe93/0x2050
[  374.485305][T14390]        ocfs2_create+0x1a5/0x440
[  374.487298][T14390]        path_openat+0x14f4/0x3830
[  374.489301][T14390]        do_filp_open+0x1fa/0x410
[  374.491187][T14390]        do_sys_openat2+0x121/0x1c0
[  374.493212][T14390]        __x64_sys_openat+0x138/0x170
[  374.495293][T14390]        do_syscall_64+0xfa/0x3b0
[  374.497204][T14390]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.499664][T14390] 
[  374.499664][T14390] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  374.502903][T14390]        lock_acquire+0x120/0x360
[  374.504881][T14390]        down_read+0x46/0x2e0
[  374.506655][T14390]        ocfs2_start_trans+0x36a/0x6d0
[  374.508729][T14390]        ocfs2_mknod+0xe93/0x2050
[  374.510655][T14390]        ocfs2_create+0x1a5/0x440
[  374.512874][T14390]        path_openat+0x14f4/0x3830
[  374.514820][T14390]        do_filp_open+0x1fa/0x410
[  374.516774][T14390]        do_sys_openat2+0x121/0x1c0
[  374.518595][T14390]        __x64_sys_openat+0x138/0x170
[  374.520696][T14390]        do_syscall_64+0xfa/0x3b0
[  374.522606][T14390]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.525098][T14390] 
[  374.525098][T14390] -> #1 (sb_internal#5){.+.+}-{0:0}:
[  374.528120][T14390]        lock_acquire+0x120/0x360
[  374.530155][T14390]        ocfs2_start_trans+0x26b/0x6d0
[  374.532363][T14390]        ocfs2_create_refcount_tree+0x349/0x1250
[  374.534863][T14390]        ocfs2_reflink_remap_blocks+0x2ea/0x1930
[  374.537352][T14390]        ocfs2_remap_file_range+0x4b7/0x730
[  374.539697][T14390]        vfs_clone_file_range+0x42c/0x7a0
[  374.541907][T14390]        do_vfs_ioctl+0xd2b/0x1430
[  374.543890][T14390]        __se_sys_ioctl+0x82/0x170
[  374.545820][T14390]        do_syscall_64+0xfa/0x3b0
[  374.547806][T14390]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.550288][T14390] 
[  374.550288][T14390] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  374.554410][T14390]        validate_chain+0xb9b/0x2140
[  374.556433][T14390]        __lock_acquire+0xab9/0xd20
[  374.558475][T14390]        lock_acquire+0x120/0x360
[  374.560425][T14390]        down_write+0x96/0x1f0
[  374.562334][T14390]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  374.565010][T14390]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  374.568022][T14390]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  374.570780][T14390]        ocfs2_xattr_set+0xb70/0x11f0
[  374.573028][T14390]        __vfs_setxattr+0x43c/0x480
[  374.575074][T14390]        __vfs_setxattr_noperm+0x12d/0x660
[  374.577321][T14390]        vfs_setxattr+0x16b/0x2f0
[  374.579296][T14390]        filename_setxattr+0x274/0x600
[  374.580154][ T5846] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  374.581281][T14390]        path_setxattrat+0x364/0x3a0
[  374.586315][T14390]        __x64_sys_setxattr+0xbc/0xe0
[  374.588438][T14390]        do_syscall_64+0xfa/0x3b0
[  374.590401][T14390]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.592870][T14390] 
[  374.592870][T14390] other info that might help us debug this:
[  374.592870][T14390] 
[  374.596729][T14390] Chain exists of:
[  374.596729][T14390]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  374.596729][T14390] 
[  374.602614][T14390]  Possible unsafe locking scenario:
[  374.602614][T14390] 
[  374.605465][T14390]        CPU0                    CPU1
[  374.607546][T14390]        ----                    ----
[  374.609569][T14390]   lock(&oi->ip_xattr_sem);
[  374.611392][T14390]                                lock(jbd2_handle);
[  374.613959][T14390]                                lock(&oi->ip_xattr_sem);
[  374.616703][T14390]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  374.619555][T14390] 
[  374.619555][T14390]  *** DEADLOCK ***
[  374.619555][T14390] 
[  374.622650][T14390] 3 locks held by syz.4.3032/14390:
[  374.624695][T14390]  #0: ffff8881075e0428 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  374.628233][T14390]  #1: ffff888113ac26c0 (&type->i_mutex_dir_key#25){++++}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  374.632062][T14390]  #2: ffff888113ac23f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  374.635262][T14390] 
[  374.635262][T14390] stack backtrace:
[  374.637084][T14390] CPU: 1 UID: 0 PID: 14390 Comm: syz.4.3032 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  374.637097][T14390] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  374.637102][T14390] Call Trace:
[  374.637108][T14390]  <TASK>
[  374.637112][T14390]  dump_stack_lvl+0x189/0x250
[  374.637126][T14390]  ? __pfx_dump_stack_lvl+0x10/0x10
[  374.637135][T14390]  ? __pfx__printk+0x10/0x10
[  374.637150][T14390]  ? print_lock_name+0xde/0x100
[  374.637161][T14390]  print_circular_bug+0x2ee/0x310
[  374.637172][T14390]  check_noncircular+0x134/0x160
[  374.637182][T14390]  validate_chain+0xb9b/0x2140
[  374.637190][T14390]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  374.637201][T14390]  ? look_up_lock_class+0x74/0x170
[  374.637211][T14390]  ? register_lock_class+0x51/0x320
[  374.637223][T14390]  __lock_acquire+0xab9/0xd20
[  374.637234][T14390]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  374.637248][T14390]  lock_acquire+0x120/0x360
[  374.637258][T14390]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  374.637272][T14390]  down_write+0x96/0x1f0
[  374.637282][T14390]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  374.637294][T14390]  ? __pfx_down_write+0x10/0x10
[  374.637306][T14390]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  374.637322][T14390]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  374.637331][T14390]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.637339][T14390]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  374.637347][T14390]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  374.637355][T14390]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  374.637368][T14390]  ? stack_depot_save_flags+0x41b/0x860
[  374.637379][T14390]  ? kasan_save_track+0x4f/0x80
[  374.637388][T14390]  ? kasan_save_track+0x3e/0x80
[  374.637396][T14390]  ? __kasan_kmalloc+0x93/0xb0
[  374.637405][T14390]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  374.637416][T14390]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  374.637427][T14390]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  374.637435][T14390]  ? ocfs2_xattr_set+0xb70/0x11f0
[  374.637443][T14390]  ? __vfs_setxattr+0x43c/0x480
[  374.637452][T14390]  ? __vfs_setxattr_noperm+0x12d/0x660
[  374.637462][T14390]  ? vfs_setxattr+0x16b/0x2f0
[  374.637472][T14390]  ? filename_setxattr+0x274/0x600
[  374.637482][T14390]  ? path_setxattrat+0x364/0x3a0
[  374.637490][T14390]  ? __x64_sys_setxattr+0xbc/0xe0
[  374.637506][T14390]  ? do_syscall_64+0xfa/0x3b0
[  374.637515][T14390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.637533][T14390]  ? __kasan_kmalloc+0x93/0xb0
[  374.637543][T14390]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  374.637556][T14390]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  374.637570][T14390]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  374.637581][T14390]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  374.637592][T14390]  ? __lock_acquire+0xab9/0xd20
[  374.637604][T14390]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  374.637613][T14390]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  374.637623][T14390]  ? ocfs2_xattr_set+0xb36/0x11f0
[  374.637631][T14390]  ? up_write+0x1c4/0x420
[  374.637638][T14390]  ? ocfs2_xattr_set+0x334/0x11f0
[  374.637647][T14390]  ocfs2_xattr_set+0xb70/0x11f0
[  374.637658][T14390]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  374.637666][T14390]  ? ocfs2_permission+0x107/0x1b0
[  374.637706][T14390]  ? __pfx_ocfs2_permission+0x10/0x10
[  374.637719][T14390]  ? inode_permission+0x149/0x470
[  374.637727][T14390]  ? __pfx_ocfs2_permission+0x10/0x10
[  374.637738][T14390]  ? look_up_lock_class+0x74/0x170
[  374.637747][T14390]  ? register_lock_class+0x51/0x320
[  374.637759][T14390]  ? posix_xattr_acl+0x93/0xc0
[  374.637768][T14390]  ? evm_protect_xattr+0x4d4/0xa90
[  374.637777][T14390]  ? __pfx_evm_protect_xattr+0x10/0x10
[  374.637784][T14390]  ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[  374.637793][T14390]  __vfs_setxattr+0x43c/0x480
[  374.637806][T14390]  __vfs_setxattr_noperm+0x12d/0x660
[  374.637818][T14390]  vfs_setxattr+0x16b/0x2f0
[  374.637829][T14390]  ? __pfx_vfs_setxattr+0x10/0x10
[  374.637839][T14390]  ? mnt_get_write_access+0x223/0x2a0
[  374.637849][T14390]  filename_setxattr+0x274/0x600
[  374.637861][T14390]  ? __pfx_filename_setxattr+0x10/0x10
[  374.637873][T14390]  ? getname_flags+0x1e5/0x540
[  374.637880][T14390]  path_setxattrat+0x364/0x3a0
[  374.637890][T14390]  ? __pfx_path_setxattrat+0x10/0x10
[  374.637897][T14390]  ? do_futex+0x333/0x420
[  374.637913][T14390]  ? rcu_is_watching+0x15/0xb0
[  374.637922][T14390]  __x64_sys_setxattr+0xbc/0xe0
[  374.637933][T14390]  do_syscall_64+0xfa/0x3b0
[  374.637943][T14390]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.637951][T14390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.637959][T14390]  ? exc_page_fault+0x9f/0xf0
[  374.637968][T14390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.637980][T14390] RIP: 0033:0x7f1dd698ebe9
[  374.637993][T14390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  374.638007][T14390] RSP: 002b:00007f1dd77bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  374.638022][T14390] RAX: ffffffffffffffda RBX: 00007f1dd6bb5fa0 RCX: 00007f1dd698ebe9
[  374.638030][T14390] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000240
[  374.638035][T14390] RBP: 00007f1dd6a11e19 R08: 0000000000000000 R09: 0000000000000000
[  374.638040][T14390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.638045][T14390] R13: 00007f1dd6bb6038 R14: 00007f1dd6bb5fa0 R15: 00007fff62f92d58
[  374.638054][T14390]  </TASK>
[  374.730088][ T5846] usb 9-1: Using ep0 maxpacket: 32
[  374.823961][ T5846] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  374.827089][ T5846] usb 9-1: config 0 has no interface number 0
[  374.832590][ T8802] ocfs2: Unmounting device (7,4) on (node local)
[  374.846430][ T5846] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  374.849853][ T5846] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.853060][ T5846] usb 9-1: Product: syz
[  374.854735][ T5846] usb 9-1: Manufacturer: syz
[  374.856529][ T5846] usb 9-1: SerialNumber: syz
[  374.859453][ T5846] usb 9-1: config 0 descriptor??
[  374.865718][ T5846] smsc95xx v2.0.0
[  375.467264][ T5846] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  375.472260][ T5846] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  375.476230][ T5846] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  375.481878][ T5846] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[  375.487296][ T5846] usb 9-1: USB disconnect, device number 9
[  378.262820][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.265116][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  380.804200][  T946] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)

VM DIAGNOSIS:
23:40:55  Registers:
info registers vcpu 0

CPU#0
RAX=214599e177bc8600 RBX=ffffffff81968308 RCX=214599e177bc8600 RDX=0000000000000001
RSI=ffffffff8be325e0 RDI=ffffffff81968308 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7f861733e0 CR3=000000010e722000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f1dd6a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000144e RDI=000000000000144f RBP=00000000000003f8 RSP=ffffc9000456e4b0
R8 =ffff888020008237 R9 =1ffff11004001046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18d4 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1dd77bb6c0 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3331dff8 CR3=000000010fad0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=75663d79636e6572 65686f632c6c6c75
XMM04=652c736b636f6c66 6c61636f6c2c6c6c XMM05=0000000000000000 00007f1dd77ba6e0
XMM06=00007f1dd77ba6e0 00007f1dd77ba560 XMM07=00007f1dd77ba5a0 00007f1dd77ba580
XMM08=0000000000000000 0000000000000dbe XMM09=0000000000000000 00007f1dd6a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
