last executing test programs:

3m0.573775082s ago: executing program 2 (id=172):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m0.573558954s ago: executing program 2 (id=173):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r3=>0x0})
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="070200000000000000004b0000000f00a8007364636f6e646e616d6500000e0001"], 0x44}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)

3m0.494106181s ago: executing program 2 (id=174):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

3m0.444677242s ago: executing program 2 (id=175):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48c5, &(0x7f0000000340)={[{@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@fat=@flush}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

3m0.412211051s ago: executing program 2 (id=176):
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000000), 0x98)

3m0.192116699s ago: executing program 2 (id=177):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
setreuid(0xffffffffffffffff, 0xee00)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m0.038395303s ago: executing program 32 (id=177):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
setreuid(0xffffffffffffffff, 0xee00)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2m39.462579089s ago: executing program 3 (id=380):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000300)=0x401, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

2m39.462259751s ago: executing program 3 (id=381):
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m39.353420497s ago: executing program 3 (id=382):
futimesat(0xffffffffffffffff, 0x0, 0xfffffffffffffffc)

2m39.353138764s ago: executing program 3 (id=383):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

2m39.156768247s ago: executing program 3 (id=384):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000140)='cachefiles_ondemand_read\x00', r0, 0x0, 0x9}, 0x18)

2m38.641450005s ago: executing program 3 (id=388):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x8081, &(0x7f00000008c0)={[{}, {@type={'type', 0x3d, "0b4fb860"}}, {@force}, {@nodecompose}, {@force}, {@creator={'creator', 0x3d, "f5e298ff"}}, {@nls={'nls', 0x3d, 'iso8859-6'}}, {@force}, {@type={'type', 0x3d, "928fff1b"}}]}, 0x3d, 0x6e8, &(0x7f00000001c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

2m38.22983028s ago: executing program 33 (id=388):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x8081, &(0x7f00000008c0)={[{}, {@type={'type', 0x3d, "0b4fb860"}}, {@force}, {@nodecompose}, {@force}, {@creator={'creator', 0x3d, "f5e298ff"}}, {@nls={'nls', 0x3d, 'iso8859-6'}}, {@force}, {@type={'type', 0x3d, "928fff1b"}}]}, 0x3d, 0x6e8, &(0x7f00000001c0)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvZrEaays3cjeIidCZAsUjnBCOfRQhMyhJ9QDUhEHRDkjIXFFuUfiHnFg0czO2Ptjr3cT/yTp80jj+Wbm+3nn9czn3dlEG8Dn1uLbMdmKJBbPvbWZbt/fqjfub9VXi3JETEVEKaLcWUWyFpF8FnE5Okt8Id2Zd5fsNc4bDz798Oy9j+udrXK+ZPVLw9rtaA8ZoZUvMRsRE/l6TOW9+rsabw70d3esrpNqEXeasDNF4uC4tQe0xmk+wn0LPOnuRkxM7rK/FnEiIqbz1wGRzw6lIw7vwI01ywEAAMCTaWK/Cs8/jIexGTNHEw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G5LOdwYm+VIqyrORFN//X8n3pSqVY453uK/tc/yD60cUCAAAAAAAAAAcik/yD+5PP4yHsRkzxf52kn3m/1q2cTL7+Vy8FxuxHOtxPjZjKZrRjPWYj5ic6eqwsrnUbK7PD7b8baQt2+323bzlQkTUBlouHMFJAwAAAAAAAMCz62exGDPHHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIiY6q2w5WZRrUSpHxHREVNJ6rYi/FOWn2V+POwAAAAA4fNV8PZP8r1NoJ9l7/pez9/3T8V6sRTNWohmNWI5r2bOAzrv+0j9b9cb9rfpqugx2/N3/jBVH1mNETMT7e4w8l9U4td1iMb4fP4xzMRtXYj1W4sexFM1YjtmopicRS5FErdp5elEr4tw93ss9W1f6Yzvdt/1qFkk1rsdKFtv5uFqJzmOT7BzSMV/tGu1PlYi+Ed9Ps5N8Jzdijq51/b5+kz+XybWfH7GPw1HLznxyOyNzae7zbLwwPPdjXif9I81HafsZ1MmdUdLN/pGKnP9onJyfyNdprn/Zm/ODNuajtP5MLEQpv/oiXu7N+a0v33uxt/FX//W3KzdKazdvXN84d4in9Dhm96swWRT6M1HvysQrw6++PBONNBOt0TMx2b9jetSWh6uSZyObikacLb+XlZbita5L8N24FstxMeZiPi7FXHwrFqLec4Wd6slrub7am5PsXisNzm/VIcGf+UpXpV/tU/lopXl5oSuv3TNdLTuW77n865jrytKLw6++sf8KpON/MS+nY/x8+y/Ok6AnE/ncXET30vBM/K6d/txorN1cv7F0a8Txzubr9Lb9oHdu/v1BnM+jS6+XdMYtZ1tZTqrF9ZIee2k72t58VfJPXDrtSgPHTm0fq8VMrMQP9rxTK/lruMGeOsde6T72752Zs5K/vimO9bzKiXejkb0K6bPvVA3AETvx+olK9UH1H9WPqr+o3qi+Nf3m1KWpL1Vi8u/lP0/8sfSH0reT1+Oj+GnMHHekAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwLNi4fefmUqOxvL5diOn+PY9bqOw51vBClPats/XcaB1GLWL4WEleqBzsuT+NhWocUs+fRMSQOpXHHiIZ+xobu5BeyAfSYfHFadme9sQYzctFq93rlGNjeq/f4NTOXRC1m0uN/7Z76lSj65YBnnEXmqu3LmzcvvP1ldWld5bfWV5buHTx0sX6N+e/ceH6SmN5rvPzuKMEDsPG7TsTxx0DAAAAAAAAAAAAMJ78X/83H/k/M5T3qVNZ39h95NNHfaoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAU2rx7ZhsRRLzc+fn0u37W/VGuhTlnZrliChFRPKTiOSziMvRWaLW1V2y1zhvPPj0w7P3Pq7v9FUu6peGtRtNK19iNiIm8vX+pnbpZrC/q139tR4pvGT7DNOEnSkSB8ft/wEAAP//SE75+g==")
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

1m58.906884386s ago: executing program 4 (id=840):
r0 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe)
request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r0)

1m58.788419707s ago: executing program 4 (id=842):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x18, 0x0, 0xff, r1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x48050)

1m58.718151747s ago: executing program 4 (id=844):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m58.607564109s ago: executing program 4 (id=847):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x4444, &(0x7f000000cd00)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m57.872306433s ago: executing program 4 (id=853):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x14018, &(0x7f00000009c0)={[{@barrier}, {@force}, {@umask={'umask', 0x3d, 0x99}}, {@uid}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@uid}, {@umask={'umask', 0x3d, 0x200}}]}, 0xb, 0x6c4, &(0x7f00000002c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1m57.485367894s ago: executing program 4 (id=855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44080}, 0x40080c0)

1m57.322355856s ago: executing program 34 (id=855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44080}, 0x40080c0)

862.649206ms ago: executing program 0 (id=2368):
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe)
futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, &(0x7f0000000000), 0x4000000)

753.742586ms ago: executing program 0 (id=2373):
r0 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0xcb9c, 0x13200, 0x3, 0x801}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100})
io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0)

703.555284ms ago: executing program 0 (id=2374):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100"], 0x18}, 0x0, 0x20040000})
io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

533.359587ms ago: executing program 1 (id=2381):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x3d, 0x9, 0x2, 0x25dfdbfe, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

473.533767ms ago: executing program 0 (id=2382):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'veth0_macvtap\x00', @random="010000201000"})

422.471478ms ago: executing program 0 (id=2384):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

422.131632ms ago: executing program 1 (id=2385):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x800)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

421.041545ms ago: executing program 5 (id=2386):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fanotify_init(0x8, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = dup(r2)
fanotify_mark(r1, 0x201, 0x20, r3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

332.031731ms ago: executing program 0 (id=2387):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x103, 0x100, 0x7})

331.466581ms ago: executing program 1 (id=2388):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x2a, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4)

331.107904ms ago: executing program 5 (id=2389):
r0 = io_uring_setup(0x5923, &(0x7f0000000080)={0x0, 0xe37d, 0x400, 0x3, 0x3a})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff, r0]}, 0x2)

273.25599ms ago: executing program 1 (id=2390):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)

272.776005ms ago: executing program 5 (id=2391):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002cc0)=@newtaction={0x488, 0x30, 0xffff, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x0, 0x0, 0x0, 0x20000, 0x733f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xcff, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x80000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc192dfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0xad6, 0x0, 0x0, 0x5b3, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xb, 0x1000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x4, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f7}, {0x5, 0x0, 0x6, 0x800, 0x1ff}, 0x2, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)

272.240319ms ago: executing program 1 (id=2392):
setresuid(0x0, 0xee00, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0)

193.131446ms ago: executing program 1 (id=2393):
openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x120)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x40002, 0x801}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0)

192.63101ms ago: executing program 5 (id=2394):
syz_io_uring_setup(0x20236, &(0x7f0000000380)={0x0, 0x1ffffe, 0x20000, 0xfffffffe, 0xb3}, &(0x7f0000000080), 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)=0x8}})

101.149346ms ago: executing program 5 (id=2395):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r0)

0s ago: executing program 5 (id=2396):
syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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")
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00')

kernel console output (not intermixed with test programs):

ith checkpoint version = 48b305e5
[  139.155068][ T7885] bio_check_eod: 17 callbacks suppressed
[  139.155099][ T7885] syz.4.789: attempt to access beyond end of device
[  139.155099][ T7885] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.185746][ T6899] syz-executor: attempt to access beyond end of device
[  139.185746][ T6899] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  139.191310][ T5956] Bluetooth: hci3: command 0x1003 tx timeout
[  139.191338][ T5236] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  139.210422][ T6899] CPU: 0 UID: 0 PID: 6899 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  139.210444][ T6899] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.210452][ T6899] Call Trace:
[  139.210488][ T6899]  <TASK>
[  139.210495][ T6899]  dump_stack_lvl+0x189/0x250
[  139.210520][ T6899]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.210534][ T6899]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  139.210551][ T6899]  ? __pfx_queue_work_on+0x10/0x10
[  139.210565][ T6899]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  139.210580][ T6899]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  139.210606][ T6899]  f2fs_handle_critical_error+0x37c/0x540
[  139.210631][ T6899]  f2fs_write_end_io+0x886/0xb60
[  139.210659][ T6899]  __submit_merged_bio+0x27a/0x6a0
[  139.210683][ T6899]  __submit_merged_write_cond+0x255/0x530
[  139.210707][ T6899]  f2fs_write_data_pages+0x261d/0x3000
[  139.210754][ T6899]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.210809][ T6899]  ? check_path+0x21/0x40
[  139.210822][ T6899]  ? check_noncircular+0xe0/0x160
[  139.210878][ T6899]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.210898][ T6899]  do_writepages+0x32e/0x550
[  139.210927][ T6899]  ? do_raw_spin_unlock+0x4d/0x240
[  139.210947][ T6899]  filemap_fdatawrite+0x199/0x240
[  139.210965][ T6899]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  139.211023][ T6899]  ? do_raw_spin_unlock+0x4d/0x240
[  139.211048][ T6899]  f2fs_sync_dirty_inodes+0x31f/0x830
[  139.211074][ T6899]  f2fs_write_checkpoint+0x95a/0x1df0
[  139.211109][ T6899]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  139.211162][ T6899]  ? kill_f2fs_super+0x298/0x6c0
[  139.211181][ T6899]  kill_f2fs_super+0x2c3/0x6c0
[  139.211200][ T6899]  ? __pfx_kill_f2fs_super+0x10/0x10
[  139.211211][ T6899]  ? radix_tree_delete_item+0x2b6/0x400
[  139.211234][ T6899]  ? shrinker_free+0x2ce/0x3e0
[  139.211252][ T6899]  deactivate_locked_super+0xbc/0x130
[  139.211270][ T6899]  cleanup_mnt+0x425/0x4c0
[  139.211285][ T6899]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.211305][ T6899]  task_work_run+0x1d4/0x260
[  139.211326][ T6899]  ? __pfx_task_work_run+0x10/0x10
[  139.211341][ T6899]  ? __x64_sys_umount+0x122/0x160
[  139.211363][ T6899]  ? exit_to_user_mode_loop+0x40/0x110
[  139.211385][ T6899]  exit_to_user_mode_loop+0xec/0x110
[  139.211404][ T6899]  do_syscall_64+0x2bd/0x3b0
[  139.211421][ T6899]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.211439][ T6899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.211451][ T6899]  ? exc_page_fault+0x9f/0xf0
[  139.211493][ T6899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.211506][ T6899] RIP: 0033:0x7fdc0c78ff17
[  139.211518][ T6899] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  139.211530][ T6899] RSP: 002b:00007ffdbbb45378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  139.211543][ T6899] RAX: 0000000000000000 RBX: 00007fdc0c811c05 RCX: 00007fdc0c78ff17
[  139.211552][ T6899] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbbb45430
[  139.211560][ T6899] RBP: 00007ffdbbb45430 R08: 0000000000000000 R09: 0000000000000000
[  139.211568][ T6899] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbbb464c0
[  139.211576][ T6899] R13: 00007fdc0c811c05 R14: 0000000000021f32 R15: 00007ffdbbb46500
[  139.211600][ T6899]  </TASK>
[  139.211606][ T6899] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  139.452488][ T7905] ip6erspan0: entered promiscuous mode
[  140.305555][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'.
[  140.320026][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'.
[  140.460758][ T7950] loop4: detected capacity change from 0 to 1024
[  140.481409][ T7950] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  140.485314][ T7950] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  140.510435][ T7950] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  140.526088][ T7950] JBD2: no valid journal superblock found
[  140.528398][ T7950] EXT4-fs (loop4): Could not load journal inode
[  140.745095][ T7955] loop4: detected capacity change from 0 to 256
[  140.762462][ T7955] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  140.772368][ T7955] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  140.781650][ T7955] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  140.858169][ T7955] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  140.863765][ T7955] exFAT-fs (loop4): Filesystem has been set read-only
[  140.868904][ T7955] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  140.872273][ T7955] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  140.953860][ T7960] Invalid ELF header magic: != ELF
[  141.083249][ T7970] loop4: detected capacity change from 0 to 16
[  141.103849][ T7970] erofs (device loop4): rootino(nid 36) is not a directory(i_mode 120040)
[  141.162883][ T7976] loop1: detected capacity change from 0 to 512
[  141.187107][ T7976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.190850][ T7976] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.225537][ T5957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.395827][ T7987] loop1: detected capacity change from 0 to 512
[  141.431200][ T7987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.435132][ T7987] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.490050][ T5957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.557662][ T7996] netlink: 96 bytes leftover after parsing attributes in process `syz.4.838'.
[  141.675705][ T8003] loop1: detected capacity change from 0 to 4096
[  141.687637][ T8003] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  141.730440][ T8003] ntfs3(loop1): ino=19, mi_enum_attr
[  141.740102][ T8003] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  141.764694][ T8003] ntfs3(loop1): failed to convert "c46c" to iso8859-5
[  141.772718][ T8003] ntfs3(loop1): ino=20, mi_enum_attr
[  142.102127][ T8016] loop4: detected capacity change from 0 to 32768
[  142.109859][ T8016] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  142.174991][ T8016] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  142.271516][ T8016] loop4: detected capacity change from 32768 to 64
[  142.273997][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.851'.
[  142.279994][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'.
[  142.280953][ T8027] (syz.4.847,8027,1):ocfs2_expand_inline_dir:2927 ERROR: status = -12
[  142.287974][ T8027] (syz.4.847,8027,1):ocfs2_extend_dir:3211 ERROR: status = -12
[  142.291884][ T8027] (syz.4.847,8027,1):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -12
[  142.295372][ T8027] (syz.4.847,8027,1):ocfs2_symlink:1879 ERROR: status = -12
[  142.317673][ T8029] netlink: 'syz.0.851': attribute type 12 has an invalid length.
[  142.321739][ T8029] netlink: 'syz.0.851': attribute type 11 has an invalid length.
[  142.334775][ T8027] (syz.4.847,8027,1):ocfs2_symlink:2080 ERROR: status = -12
[  142.624906][ T6899] syz-executor: attempt to access beyond end of device
[  142.624906][ T6899] loop4: rw=0, sector=17057, nr_sectors = 1 limit=64
[  142.631174][ T6899] (syz-executor,6899,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  142.634977][ T6899] syz-executor: attempt to access beyond end of device
[  142.634977][ T6899] loop4: rw=0, sector=17057, nr_sectors = 1 limit=64
[  142.639814][ T6899] (syz-executor,6899,0):ocfs2_read_locked_inode:597 ERROR: status = -5
[  142.851470][ T8025] jbd2/loop4-75: attempt to access beyond end of device
[  142.851470][ T8025] loop4: rw=38913, sector=640, nr_sectors = 1 limit=64
[  142.856710][ T8025] Buffer I/O error on dev loop4, logical block 640, lost sync page write
[  142.860195][ T8025] JBD2: I/O error when updating journal superblock for loop4-75.
[  142.863652][ T8025] Aborting journal on device loop4-75.
[  142.868678][ T8025] jbd2/loop4-75: attempt to access beyond end of device
[  142.868678][ T8025] loop4: rw=38913, sector=640, nr_sectors = 1 limit=64
[  142.874140][ T8025] Buffer I/O error on dev loop4, logical block 640, lost sync page write
[  142.877840][ T8025] JBD2: I/O error when updating journal superblock for loop4-75.
[  142.881053][ T8025] journal_release_journal_head: freeing b_committed_data
[  142.888200][ T6899] (syz-executor,6899,0):ocfs2_start_trans:379 ERROR: status = -30
[  142.891163][ T6899] OCFS2: abort (device loop4): handle_t *ocfs2_start_trans(struct ocfs2_super *, int): Detected aborted journal
[  142.898393][ T6899] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  142.902157][ T6899] OCFS2: File system is now read-only.
[  142.904330][ T6899] (syz-executor,6899,0):ocfs2_shutdown_local_alloc:419 ERROR: status = -30
[  142.908725][ T6899] syz-executor: attempt to access beyond end of device
[  142.908725][ T6899] loop4: rw=1, sector=17024, nr_sectors = 1 limit=64
[  142.914138][ T6899] Buffer I/O error on dev loop4, logical block 17024, lost sync page write
[  142.918611][ T6899] (syz-executor,6899,0):ocfs2_write_block:78 ERROR: status = -5
[  142.921759][ T6899] (syz-executor,6899,0):ocfs2_update_disk_slot:199 ERROR: status = -5
[  142.924945][ T6899] (syz-executor,6899,0):ocfs2_put_slot:517 ERROR: status = -5
[  142.961954][ T6899] (syz-executor,6899,0):ocfs2_journal_shutdown:1107 ERROR: status = -5
[  142.969894][ T6899] ocfs2: Unmounting device (7,4) on (node local)
[  143.670087][ T5956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  143.671487][ T6017] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.681254][ T5956] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  143.686372][ T5956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  143.691812][ T5956] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  143.695651][ T5956] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  143.762898][ T8048] lo speed is unknown, defaulting to 1000
[  143.785180][ T6017] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.860559][ T6017] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.921998][ T6017] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.968307][ T8064] program syz.1.867 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  144.190265][ T8048] chnl_net:caif_netlink_parms(): no params data found
[  144.209817][ T6017] bridge_slave_1: left allmulticast mode
[  144.211671][ T6017] bridge_slave_1: left promiscuous mode
[  144.213465][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.230838][ T6017] bridge_slave_0: left allmulticast mode
[  144.234954][ T6017] bridge_slave_0: left promiscuous mode
[  144.243275][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.900498][ T6017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.911815][ T6017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.920108][ T6017] bond0 (unregistering): Released all slaves
[  145.223151][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.226163][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.229404][ T8048] bridge_slave_0: entered allmulticast mode
[  145.232608][ T8048] bridge_slave_0: entered promiscuous mode
[  145.248865][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.255391][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.259619][ T8048] bridge_slave_1: entered allmulticast mode
[  145.262520][ T8048] bridge_slave_1: entered promiscuous mode
[  145.349801][ T8048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.359075][ T8048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.394452][ T6017] hsr_slave_0: left promiscuous mode
[  145.421398][ T6017] hsr_slave_1: left promiscuous mode
[  145.423556][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.425917][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.430969][ T6017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.433308][ T6017] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.462273][ T6017] veth1_macvtap: left promiscuous mode
[  145.464002][ T6017] veth0_macvtap: left promiscuous mode
[  145.465918][ T6017] veth1_vlan: left promiscuous mode
[  145.476504][ T6017] veth0_vlan: left promiscuous mode
[  145.719148][ T8102] loop1: detected capacity change from 0 to 32768
[  145.741572][ T8102] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  145.754904][ T5236] Bluetooth: hci2: command tx timeout
[  145.901485][ T5957] ocfs2: Unmounting device (7,1) on (node local)
[  146.066624][ T8113] netlink: 104 bytes leftover after parsing attributes in process `syz.1.886'.
[  146.201768][ T6017] team0 (unregistering): Port device team_slave_1 removed
[  146.232749][ T6017] team0 (unregistering): Port device team_slave_0 removed
[  146.678571][  T792] lo speed is unknown, defaulting to 1000
[  146.681777][  T792] infiniband s: ib_query_port failed (-19)
[  146.715479][ T8115] netlink: 6 bytes leftover after parsing attributes in process `syz.1.887'.
[  146.726429][ T8115] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  146.739819][ T8048] team0: Port device team_slave_0 added
[  146.763866][ T8048] team0: Port device team_slave_1 added
[  146.838086][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.840778][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.856379][ T8048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.881219][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.883904][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.902007][ T8048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.949957][ T8124] loop1: detected capacity change from 0 to 512
[  146.967766][ T8124] EXT4-fs: Ignoring removed bh option
[  146.970641][ T8048] hsr_slave_0: entered promiscuous mode
[  146.980921][ T8124] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  146.989688][ T8048] hsr_slave_1: entered promiscuous mode
[  146.999565][ T8048] debugfs: 'hsr0' already exists in 'hsr'
[  147.002238][ T8048] Cannot create hsr debugfs directory
[  147.024050][ T8124] EXT4-fs (loop1): 1 truncate cleaned up
[  147.029389][ T8124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.130175][ T5957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.259758][ T8142] vivid-003: disconnect
[  147.261868][ T8141] vivid-003: reconnect
[  147.353537][ T8048] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  147.369082][ T8048] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  147.383910][ T8048] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  147.410852][ T8048] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  147.431116][ T8154] netlink: 60 bytes leftover after parsing attributes in process `syz.0.904'.
[  147.469261][ T8160] sp0: Synchronizing with TNC
[  147.478833][ T8159] [U] 
[  147.529568][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.546729][ T8048] 8021q: adding VLAN 0 to HW filter on device team0
[  147.569723][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.572522][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.579088][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.581498][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.614331][ T8048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  147.805094][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.826898][ T5236] Bluetooth: hci2: command tx timeout
[  148.064024][ T8184] loop1: detected capacity change from 0 to 512
[  148.117304][ T8048] veth0_vlan: entered promiscuous mode
[  148.130745][ T8184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.135426][ T8184] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  148.144223][ T8048] veth1_vlan: entered promiscuous mode
[  148.177387][ T8184] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.912: corrupted inode contents
[  148.184402][ T8048] veth0_macvtap: entered promiscuous mode
[  148.192402][ T8184] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.912: mark_inode_dirty error
[  148.193559][ T8048] veth1_macvtap: entered promiscuous mode
[  148.202019][ T8184] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.912: corrupted inode contents
[  148.209758][ T8184] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.912: mark_inode_dirty error
[  148.219211][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.234398][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.243705][ T6017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.256657][ T6017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.260080][ T6017] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.263840][ T6017] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.285100][ T5957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.434011][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.437622][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.470972][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.474184][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.503433][ T8194] loop1: detected capacity change from 0 to 2048
[  148.529657][ T8199] loop5: detected capacity change from 0 to 8
[  148.567172][ T8194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.665666][ T8194] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.914: bg 0: block 234: padding at end of block bitmap is not set
[  148.674377][ T8194] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 536 with error 28
[  148.680399][ T8194] EXT4-fs (loop1): This should not happen!! Data will be lost
[  148.680399][ T8194] 
[  148.683993][ T8194] EXT4-fs (loop1): Total free blocks count 0
[  148.686692][ T8194] EXT4-fs (loop1): Free/Dirty block details
[  148.688959][ T8194] EXT4-fs (loop1): free_blocks=0
[  148.690850][ T8194] EXT4-fs (loop1): dirty_blocks=544
[  148.692826][ T8194] EXT4-fs (loop1): Block reservation details
[  148.695223][ T8194] EXT4-fs (loop1): i_reserved_data_blocks=34
[  148.761508][ T5957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.169805][ T8217] tipc: Started in network mode
[  149.174435][ T8217] tipc: Node identity 4, cluster identity 4711
[  149.181659][ T8217] tipc: Node number set to 4
[  149.906869][ T5236] Bluetooth: hci2: command tx timeout
[  150.376158][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  150.536459][    T9] usb 2-1: Using ep0 maxpacket: 32
[  150.541474][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  150.551284][    T9] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  150.562776][    T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  150.570882][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.574429][ T8270] overlayfs: failed to resolve './file0': -2
[  150.577045][    T9] usb 2-1: Product: syz
[  150.577065][    T9] usb 2-1: Manufacturer: syz
[  150.577079][    T9] usb 2-1: SerialNumber: syz
[  150.802673][    T9] usb 2-1: Invalid number of CPorts: 0
[  150.807750][    T9] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -22
[  151.013680][  T792] usb 2-1: USB disconnect, device number 15
[  151.495325][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.5.956'.
[  151.620456][ T8300] netlink: 'syz.5.959': attribute type 1 has an invalid length.
[  151.720948][ T5236] Bluetooth: hci0: unexpected event for opcode 0x202f
[  151.944656][ T8318] loop1: detected capacity change from 0 to 64
[  151.987214][ T5236] Bluetooth: hci2: command tx timeout
[  152.356223][  T792] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  152.506071][  T792] usb 2-1: Using ep0 maxpacket: 16
[  152.515758][  T792] usb 2-1: config 0 has an invalid interface number: 68 but max is 0
[  152.522135][  T792] usb 2-1: config 0 has no interface number 0
[  152.524834][  T792] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.537078][  T792] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  152.541553][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.544749][  T792] usb 2-1: Product: syz
[  152.550591][  T792] usb 2-1: Manufacturer: syz
[  152.553322][  T792] usb 2-1: SerialNumber: syz
[  152.663159][  T792] usb 2-1: config 0 descriptor??
[  152.690697][  T792] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  152.930725][  T792] usb 2-1: USB disconnect, device number 16
[  152.969962][ T6017] usb 2-1: Failed to submit usb control message: -71
[  152.987931][ T6017] usb 2-1: unable to send the bmi data to the device: -71
[  152.998467][ T6017] usb 2-1: unable to get target info from device
[  153.001265][ T6017] usb 2-1: could not get target info (-71)
[  153.003938][ T6017] usb 2-1: could not probe fw (-71)
[  153.632609][ T8351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  154.283933][ T8362] loop1: detected capacity change from 0 to 512
[  154.391352][ T8362] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  154.393677][ T8362] EXT4-fs (loop1): mount failed
[  154.581177][ T8365] sctp: [Deprecated]: syz.0.987 (pid 8365) Use of int in max_burst socket option.
[  154.581177][ T8365] Use struct sctp_assoc_value instead
[  154.843954][ T5236] Bluetooth: hci0: unexpected event for opcode 0x1004
[  156.417557][ T8413] netlink: 'syz.1.1007': attribute type 21 has an invalid length.
[  156.421744][ T8413] netlink: 'syz.1.1007': attribute type 1 has an invalid length.
[  156.663151][ T8425] loop5: detected capacity change from 0 to 128
[  156.816446][  T792] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  156.850119][ T8432] netlink: 'syz.5.1016': attribute type 3 has an invalid length.
[  156.967494][  T792] usb 2-1: Using ep0 maxpacket: 16
[  156.971637][  T792] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  156.974432][  T792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.979834][  T792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.984697][  T792] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  156.987831][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.990398][  T792] usb 2-1: Product: syz
[  156.992967][  T792] usb 2-1: Manufacturer: syz
[  156.996170][  T792] usb 2-1: SerialNumber: syz
[  157.005604][ T8438] loop5: detected capacity change from 0 to 1024
[  157.017129][ T8438] EXT4-fs: Ignoring removed mblk_io_submit option
[  157.023446][ T8438] EXT4-fs: inline encryption not supported
[  157.028305][ T8438] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  157.032963][ T8438] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000]
[  157.037425][ T8438] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1019: bad orphan inode 11
[  157.040824][ T8438] ext4_test_bit(bit=10, block=4) = 1
[  157.042536][ T8438] is_bad_inode(inode)=0
[  157.043852][ T8438] NEXT_ORPHAN(inode)=3254779904
[  157.045392][ T8438] max_ino=32
[  157.048910][ T8438] i_nlink=0
[  157.057314][ T8438] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1019: lblock 2 mapped to illegal pblock 2 (length 1)
[  157.062860][ T8438] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  157.065855][ T8438] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1019: lblock 0 mapped to illegal pblock 48 (length 1)
[  157.072665][ T8438] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  157.076355][ T8438] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1019: Failed to acquire dquot type 0
[  157.080352][ T8438] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  157.087433][ T8438] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1019: mark_inode_dirty error
[  157.091249][ T8438] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  157.095862][ T8438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.106918][ T8438] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.1019: Invalid inode table block 1 in block_group 0
[  157.111804][ T8438] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  157.130302][ T8048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.135299][ T8048] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  157.145823][ T8048] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  157.149399][ T8048] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  157.408180][  T792] usb 2-1: 0:2 : does not exist
[  157.536304][ T1273] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  157.687895][ T1273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  157.697177][ T1273] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a
[  157.700213][ T1273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.702709][ T1273] usb 6-1: Product: syz
[  157.707539][ T1273] usb 6-1: Manufacturer: syz
[  157.709085][ T1273] usb 6-1: SerialNumber: syz
[  157.723966][ T1273] usb 6-1: config 0 descriptor??
[  157.943647][ T1273] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-8
[  157.946837][ T1273] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -8
[  157.965054][ T1273] usb 6-1: USB disconnect, device number 2
[  158.380761][ T6000] usb 2-1: USB disconnect, device number 17
[  158.869851][ T5236] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  158.873620][ T5236] Bluetooth: hci0: Injecting HCI hardware error event
[  158.880466][ T5236] Bluetooth: hci0: hardware error 0x00
[  159.811561][ T8511] loop5: detected capacity change from 0 to 1024
[  159.850952][ T8511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  159.865839][ T8511] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.871627][ T8517] overlayfs: failed to clone upperpath
[  159.879894][ T8511] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.1049: lblock 3 mapped to illegal pblock 3 (length 3)
[  159.888798][ T8511] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  159.892980][ T8511] EXT4-fs (loop5): This should not happen!! Data will be lost
[  159.892980][ T8511] 
[  159.913365][ T8048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  160.012628][ T8521] loop5: detected capacity change from 0 to 256
[  160.019532][ T8521] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  160.422898][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1055'.
[  160.434413][ T8526] IPVS: Error joining to the multicast group
[  160.800014][ T8548] netlink: 'syz.1.1065': attribute type 3 has an invalid length.
[  160.888299][   T33] audit: type=1326 audit(1755139355.109:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.5.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  160.897362][   T33] audit: type=1326 audit(1755139355.109:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.5.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  160.920967][   T33] audit: type=1326 audit(1755139355.109:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.5.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  160.941291][   T33] audit: type=1326 audit(1755139355.109:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.5.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  160.958897][ T5236] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  160.961275][   T33] audit: type=1326 audit(1755139355.109:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.5.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  161.419723][ T8550] loop1: detected capacity change from 0 to 32768
[  161.449560][ T8550] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1066 (8550)
[  161.485859][ T8550] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  161.490466][ T8550] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  161.496621][ T8550] BTRFS info (device loop1): using free-space-tree
[  161.524649][ T8550] BTRFS info (device loop1): rebuilding free space tree
[  161.607606][ T5957] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  162.150223][ T8596] loop5: detected capacity change from 0 to 32768
[  162.214238][ T8596] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,noexcl,read_only
[  162.214280][ T8596]   allowing incompatible features above 0.0: (unknown version)
[  162.214286][ T8596]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  162.231338][ T8596] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  162.235015][ T8596] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  162.259891][ T8596] bcachefs (loop5): Version upgrade required:
[  162.259891][ T8596] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  162.259891][ T8596] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  162.259891][ T8596]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  162.281110][ T8606] vlan0: entered allmulticast mode
[  162.288430][ T8606] macvlan0: entered allmulticast mode
[  162.334616][ T8596] bcachefs (loop5): accounting_read... done
[  162.342940][ T8596] bcachefs (loop5): alloc_read... done
[  162.347271][ T8596] bcachefs (loop5): done starting filesystem
[  162.393808][ T8608] netlink: 'syz.0.1084': attribute type 4 has an invalid length.
[  162.453899][ T8048] bcachefs (loop5): shutting down
[  162.491776][ T8048] bcachefs (loop5): shutdown complete
[  162.574268][ T8620] loop1: detected capacity change from 0 to 512
[  162.579069][ T8620] EXT4-fs: Ignoring removed oldalloc option
[  162.580933][ T8620] EXT4-fs: quotafile must be on filesystem root
[  162.836256][ T6000] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  163.087884][ T6000] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.094585][ T6000] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.099320][ T6000] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  163.102719][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  163.105845][ T6000] usb 2-1: SerialNumber: syz
[  163.328213][ T6000] usb 2-1: 0:2 : does not exist
[  163.337965][ T6000] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  163.344999][ T6000] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  163.348683][ T6000] usb 2-1: unit 6 not found!
[  163.360076][ T6000] usb 2-1: USB disconnect, device number 18
[  163.389906][ T7101] udevd[7101]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.705477][ T8635] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1096'.
[  163.914991][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'.
[  163.939689][ T8643] netlink: 'syz.1.1100': attribute type 1 has an invalid length.
[  163.942846][ T8643] netlink: 'syz.1.1100': attribute type 2 has an invalid length.
[  164.038257][ T8651] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  164.656503][  T792] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  165.026825][  T792] usb 2-1: Using ep0 maxpacket: 32
[  165.043927][  T792] usb 2-1: config 0 has an invalid interface number: 242 but max is 0
[  165.047231][  T792] usb 2-1: config 0 has no interface number 0
[  165.051770][  T792] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=eb.4e
[  165.054928][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.058736][  T792] usb 2-1: Product: syz
[  165.060195][  T792] usb 2-1: Manufacturer: syz
[  165.061724][  T792] usb 2-1: SerialNumber: syz
[  165.065703][  T792] usb 2-1: config 0 descriptor??
[  165.274906][  T792] cdc_subset 2-1:0.242: probe with driver cdc_subset failed with error -71
[  165.293497][  T792] usb 2-1: USB disconnect, device number 19
[  165.759609][ T8710] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  165.945870][ T8720] loop1: detected capacity change from 0 to 1024
[  165.950802][ T8720] EXT4-fs: Ignoring removed nomblk_io_submit option
[  166.011684][ T8720] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.031709][ T8720] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  166.058272][ T5957] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  166.353752][ T8750] overlayfs: failed to clone upperpath
[  167.111458][ T8764] loop1: detected capacity change from 0 to 32768
[  167.114450][ T8764] XFS: ikeep mount option is deprecated.
[  167.146258][ T8764] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.179519][ T8764] XFS (loop1): Ending clean mount
[  167.228798][ T5957] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.513255][ T8781] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  167.522586][ T8781] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  168.377878][ T8811] loop1: detected capacity change from 0 to 512
[  168.416131][ T8811] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only
[  168.747593][ T8823] loop1: detected capacity change from 0 to 2048
[  169.001943][ T8823] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  169.023493][ T8823] UDF-fs: Scanning with blocksize 512 failed
[  169.172466][ T8823] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.176556][ T8829] netlink: 209840 bytes leftover after parsing attributes in process `syz.5.1177'.
[  169.384702][ T8840] loop1: detected capacity change from 0 to 1024
[  169.469674][ T1028] hfsplus: b-tree write err: -5, ino 4
[  169.517987][ T8846] loop1: detected capacity change from 0 to 128
[  169.561354][ T8850] loop5: detected capacity change from 0 to 512
[  169.565408][ T8850] EXT4-fs: Ignoring removed orlov option
[  169.575499][ T8850] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  169.595326][ T8850] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #17: comm syz.5.1187: corrupted in-inode xattr: overlapping e_value 
[  169.612937][ T8850] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1187: couldn't read orphan inode 17 (err -117)
[  169.625658][ T8850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.640777][ T8850] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.743947][   T33] audit: type=1326 audit(1755139363.959:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.5.1193" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad80d85ba7 code=0x7ffc0000
[  169.753215][   T33] audit: type=1326 audit(1755139363.959:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.5.1193" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad80d2add9 code=0x7ffc0000
[  169.764064][   T33] audit: type=1326 audit(1755139363.959:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.5.1193" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  169.772642][   T33] audit: type=1326 audit(1755139363.959:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.5.1193" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad80d85ba7 code=0x7ffc0000
[  169.780819][   T33] audit: type=1326 audit(1755139363.959:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.5.1193" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad80d2add9 code=0x7ffc0000
[  169.791952][   T33] audit: type=1326 audit(1755139363.959:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.5.1193" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad80d85ba7 code=0x7ffc0000
[  169.800026][   T33] audit: type=1326 audit(1755139363.959:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.5.1193" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad80d2add9 code=0x7ffc0000
[  169.810322][   T33] audit: type=1326 audit(1755139363.959:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.5.1193" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad80d85ba7 code=0x7ffc0000
[  169.818986][   T33] audit: type=1326 audit(1755139363.959:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.5.1193" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad80d2add9 code=0x7ffc0000
[  169.830319][   T33] audit: type=1326 audit(1755139363.959:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8864 comm="syz.5.1193" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad80d85ba7 code=0x7ffc0000
[  169.896265][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1196'.
[  169.899061][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'.
[  170.664001][ T8896] loop1: detected capacity change from 0 to 2048
[  170.690819][ T8899] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.845541][ T8909] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  171.059844][ T8921] loop1: detected capacity change from 0 to 1024
[  171.094309][ T1089] hfsplus: b-tree write err: -5, ino 4
[  171.357693][ T8937] loop1: detected capacity change from 0 to 128
[  171.365100][ T8937] EXT4-fs (loop1): Test dummy encryption mode enabled
[  171.375358][ T8935] pim6reg1: entered allmulticast mode
[  171.388465][ T8937] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.401012][ T8937] ext4 filesystem being mounted at /370/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  171.436301][ T8937] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.467965][ T5957] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.589247][ T8948] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  171.594599][ T8948] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  171.677649][ T8955] loop1: detected capacity change from 0 to 128
[  171.702550][ T8955] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.722302][ T8955] ext4 filesystem being mounted at /372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  171.759757][ T8955] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.1236: bg 0: bad block bitmap checksum
[  171.794396][ T8965] loop5: detected capacity change from 0 to 1024
[  171.823422][   T36] hfsplus: b-tree write err: -5, ino 4
[  171.831728][ T5957] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  172.478719][ T8983] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  172.967406][ T8997] netlink: 'syz.5.1255': attribute type 6 has an invalid length.
[  173.128972][ T9001] loop5: detected capacity change from 0 to 4096
[  173.140131][ T9001] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  173.173978][ T9001] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  173.477889][   T53] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  173.482115][ T8048] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  173.485210][ T8048] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  173.490503][ T8048] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  173.494312][   T86] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  173.930936][  T792] kernel write not supported for file /uhid (pid: 792 comm: kworker/1:2)
[  175.520889][ T9070] tipc: Failed to obtain node identity
[  175.523089][ T9070] tipc: Enabling of bearer <ib:sit0> rejected, failed to enable media
[  175.648856][ T9078] netlink: 'syz.5.1291': attribute type 1 has an invalid length.
[  175.651299][ T9078] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1291'.
[  175.885470][ T9090] loop5: detected capacity change from 0 to 8192
[  175.899226][ T9090] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  176.080105][ T9102] loop5: detected capacity change from 0 to 512
[  176.089446][ T9102] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  176.118597][ T9106] loop1: detected capacity change from 0 to 128
[  176.144680][ T9106] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  176.173605][ T9106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.184812][ T9102] EXT4-fs (loop5): 1 truncate cleaned up
[  176.198246][ T9102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.619536][ T8048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.542942][ T9130] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  177.945521][ T9153] loop5: detected capacity change from 0 to 1024
[  177.981761][ T9153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.985695][ T9153] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.999101][ T9159] PKCS8: Unsupported PKCS#8 version
[  178.025289][ T8048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.041573][ T9161] netlink: 'syz.0.1323': attribute type 10 has an invalid length.
[  178.061371][ T9161] vlan0: entered allmulticast mode
[  178.062877][ T9163] loop5: detected capacity change from 0 to 128
[  178.065860][ T9161] veth0_vlan: entered allmulticast mode
[  178.067509][ T9163] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  178.072767][ T9163] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  178.166951][ T9161] team0: Port device vlan0 added
[  178.339080][   T33] kauditd_printk_skb: 16 callbacks suppressed
[  178.339279][   T33] audit: type=1326 audit(1755139372.539:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.5.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  178.374780][   T33] audit: type=1326 audit(1755139372.539:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.5.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  178.411086][   T33] audit: type=1326 audit(1755139372.539:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.5.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  178.454761][   T33] audit: type=1326 audit(1755139372.549:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.5.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  178.499249][   T33] audit: type=1326 audit(1755139372.549:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.5.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  178.542067][   T33] audit: type=1326 audit(1755139372.549:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.5.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  178.562522][   T33] audit: type=1326 audit(1755139372.549:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.5.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  178.587327][   T33] audit: type=1326 audit(1755139372.549:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.5.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  178.608042][   T33] audit: type=1326 audit(1755139372.549:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.5.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  178.625879][   T33] audit: type=1326 audit(1755139372.549:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.5.1324" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  178.916151][  T792] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  178.992727][ T9192] netem: incorrect ge model size
[  178.994810][ T9192] netem: change failed
[  179.069501][  T792] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  179.072307][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.078503][  T792] usb 2-1: Product: syz
[  179.079842][  T792] usb 2-1: Manufacturer: syz
[  179.081267][  T792] usb 2-1: SerialNumber: syz
[  179.084326][  T792] usb 2-1: config 0 descriptor??
[  179.241222][ T9204] loop5: detected capacity change from 0 to 512
[  179.313528][  T792] hso 2-1:0.0: Failed to find BULK IN ep
[  179.329872][  T792] usb-storage 2-1:0.0: USB Mass Storage device detected
[  179.535000][    T9] usb 2-1: USB disconnect, device number 20
[  179.623570][ T9206] loop5: detected capacity change from 0 to 32768
[  179.641124][ T9206] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1344 (9206)
[  179.663291][ T9206] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  179.672973][ T9206] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  179.677417][ T9206] BTRFS info (device loop5): using free-space-tree
[  179.904845][ T8048] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  180.125819][ T9251] binder: 9250:9251 ioctl 40046205 0 returned -22
[  180.686471][ T9272] capability: warning: `syz.0.1366' uses 32-bit capabilities (legacy support in use)
[  180.881508][ T9283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.931216][ T9285] loop5: detected capacity change from 0 to 512
[  180.934043][ T9285] EXT4-fs: Ignoring removed nobh option
[  180.939028][ T9285] EXT4-fs (loop5): Test dummy encryption mode enabled
[  180.958586][ T9285] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1372: iget: bad i_size value: 38620345925642
[  180.963209][ T9285] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1372: couldn't read orphan inode 15 (err -117)
[  180.969587][ T9285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.020400][ T8048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.362317][ T9319] syz_tun: entered allmulticast mode
[  181.504317][ T9317] loop1: detected capacity change from 0 to 32768
[  181.521596][ T9317] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1386 (9317)
[  181.549143][ T9317] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  181.553428][ T9317] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  181.557288][ T9317] BTRFS info (device loop1): using free-space-tree
[  181.699850][ T5957] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  182.478838][ T9352] loop1: detected capacity change from 0 to 32768
[  182.551268][ T9352] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  182.864939][ T5957] ocfs2: Unmounting device (7,1) on (node local)
[  184.700977][ T9426] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1427'.
[  185.174900][ T9440] netlink: 'syz.0.1433': attribute type 1 has an invalid length.
[  185.492573][ T9466] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1447'.
[  187.086216][ T1273] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  187.246372][ T1273] usb 6-1: Using ep0 maxpacket: 32
[  187.253007][ T1273] usb 6-1: config 0 has an invalid interface number: 23 but max is 0
[  187.257703][ T1273] usb 6-1: config 0 has no interface number 0
[  187.260161][ T1273] usb 6-1: config 0 interface 23 has no altsetting 0
[  187.265205][ T1273] usb 6-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad
[  187.270212][ T1273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.273302][ T1273] usb 6-1: Product: syz
[  187.274954][ T1273] usb 6-1: Manufacturer: syz
[  187.286081][ T1273] usb 6-1: SerialNumber: syz
[  187.290375][ T1273] usb 6-1: config 0 descriptor??
[  187.502183][ T9490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.505692][ T9490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.529367][ T1273] kaweth 6-1:0.23: Firmware present in device.
[  187.532400][ T1273] kaweth 6-1:0.23: Error reading configuration (-71), no net device created
[  187.535488][ T1273] kaweth 6-1:0.23: probe with driver kaweth failed with error -5
[  187.541675][ T1273] usb 6-1: USB disconnect, device number 3
[  188.578225][ T9510] loop1: detected capacity change from 0 to 4096
[  188.680009][ T9510] ntfs3(loop1): ino=1e, "file1" attr_set_size
[  188.778820][ T9521] loop5: detected capacity change from 0 to 512
[  188.781661][ T9521] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  188.807871][ T9521] EXT4-fs (loop5): 1 truncate cleaned up
[  188.810473][ T9521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.849125][ T9521] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 5 (only 1 groups)
[  188.890557][ T8048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.020676][ T9530] batadv1: entered promiscuous mode
[  189.023586][ T9530] 8021q: adding VLAN 0 to HW filter on device batadv1
[  189.037516][ T9532] loop5: detected capacity change from 0 to 16
[  189.051651][ T9532] erofs (device loop5): mounted with root inode @ nid 36.
[  189.181868][ T9540] loop5: detected capacity change from 0 to 2048
[  189.195224][ T9540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.305283][ T9544] loop5: detected capacity change from 0 to 4096
[  189.311627][ T9544] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  189.332231][ T9544] ntfs3(loop5): ino=19, mi_enum_attr
[  189.334043][ T9544] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  189.351624][ T9544] ntfs3(loop5): failed to convert "c46c" to maccyrillic
[  189.364578][ T9544] ntfs3(loop5): ino=20, mi_enum_attr
[  189.532933][ T9546] loop1: detected capacity change from 0 to 32768
[  189.727290][ T9559] loop1: detected capacity change from 0 to 1024
[  189.737067][ T9559] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  189.740763][ T9559] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  189.744332][ T9559] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  189.748548][ T9559] EXT4-fs (loop1): invalid journal inode
[  189.797548][ T9561] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  189.800275][ T9561] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  189.810391][ T9561] vhci_hcd vhci_hcd.0: Device attached
[  189.815913][ T9561] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5)
[  189.818450][ T9561] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  189.821704][ T9561] vhci_hcd vhci_hcd.0: Device attached
[  189.828437][ T9561] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7)
[  189.830983][ T9561] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  189.836753][ T9561] vhci_hcd vhci_hcd.0: Device attached
[  189.844776][ T9561] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9)
[  189.847163][ T9561] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  189.854446][ T9561] vhci_hcd vhci_hcd.0: Device attached
[  189.868329][ T9561] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11)
[  189.870961][ T9561] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  189.886202][ T6000] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  189.886226][ T9561] vhci_hcd vhci_hcd.0: Device attached
[  189.914369][ T9568] vhci_hcd: connection closed
[  189.914502][ T9566] vhci_hcd: connection closed
[  189.916858][ T9564] vhci_hcd: connection closed
[  189.920325][ T9562] vhci_hcd: connection closed
[  189.922310][   T12] vhci_hcd: stop threads
[  189.925679][ T9570] vhci_hcd: connection closed
[  189.928076][   T12] vhci_hcd: release socket
[  189.933902][   T12] vhci_hcd: disconnect device
[  189.937822][   T12] vhci_hcd: stop threads
[  189.939536][   T12] vhci_hcd: release socket
[  189.941210][   T12] vhci_hcd: disconnect device
[  189.943080][   T12] vhci_hcd: stop threads
[  189.944789][   T12] vhci_hcd: release socket
[  189.948191][   T12] vhci_hcd: disconnect device
[  189.950053][   T12] vhci_hcd: stop threads
[  189.951476][   T12] vhci_hcd: release socket
[  189.953066][   T12] vhci_hcd: disconnect device
[  189.954897][   T12] vhci_hcd: stop threads
[  189.956690][   T12] vhci_hcd: release socket
[  189.958279][   T12] vhci_hcd: disconnect device
[  189.986699][   T47] vhci_hcd: vhci_device speed not set
[  190.048070][ T6000] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  190.051713][ T6000] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  190.055668][ T6000] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  190.062817][ T6000] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  190.066638][ T6000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.069721][ T6000] usb 6-1: Product: syz
[  190.071351][ T6000] usb 6-1: Manufacturer: syz
[  190.073256][ T6000] usb 6-1: SerialNumber: syz
[  190.208203][ T1273] IPVS: starting estimator thread 0...
[  190.306146][ T9574] IPVS: using max 64 ests per chain, 153600 per kthread
[  190.734245][ T9580] tipc: Enabling of bearer <h:s> rejected, media not registered
[  190.740437][ T6000] usb 6-1: 0:2 : does not exist
[  190.781947][ T9582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1491'.
[  190.788121][ T9582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1491'.
[  190.873799][ T5236] Bluetooth: hci1: unexpected cc 0x2039 length: 9 > 1
[  191.433675][ T9604] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1501'.
[  191.477066][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1502'.
[  192.209499][ T9637] loop1: detected capacity change from 0 to 512
[  192.213056][ T9637] EXT4-fs: Ignoring removed nobh option
[  192.220767][ T9637] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  192.232569][ T9637] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1517: iget: bad i_size value: 38620345925642
[  192.242202][ T9637] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1517: couldn't read orphan inode 15 (err -117)
[  192.248950][ T9637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.259839][ T9637] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1517: bg 0: block 5: invalid block bitmap
[  192.269505][ T9637] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28
[  192.274498][ T9637] EXT4-fs (loop1): This should not happen!! Data will be lost
[  192.274498][ T9637] 
[  192.279526][ T9637] EXT4-fs (loop1): Total free blocks count 0
[  192.281933][ T9637] EXT4-fs (loop1): Free/Dirty block details
[  192.284302][ T9637] EXT4-fs (loop1): free_blocks=0
[  192.286510][ T9637] EXT4-fs (loop1): dirty_blocks=1
[  192.288502][ T9637] EXT4-fs (loop1): Block reservation details
[  192.291060][ T9637] EXT4-fs (loop1): i_reserved_data_blocks=1
[  192.317672][ T5957] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.664771][ T6000] usb 6-1: USB disconnect, device number 4
[  192.769443][ T9665] loop5: detected capacity change from 0 to 764
[  193.187963][ T5236] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  193.191420][ T5236] Bluetooth: hci2: Injecting HCI hardware error event
[  193.197234][ T5236] Bluetooth: hci2: hardware error 0x00
[  193.214636][ T9685] netlink: 'syz.0.1538': attribute type 1 has an invalid length.
[  193.310866][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1542'.
[  193.507768][ T9708] netlink: 'syz.1.1549': attribute type 14 has an invalid length.
[  194.062260][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.064363][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.351728][ T9720] loop1: detected capacity change from 0 to 2048
[  194.368553][ T9720] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.411490][ T9723] IPv6: NLM_F_CREATE should be specified when creating new route
[  194.507819][ T9731] loop5: detected capacity change from 0 to 128
[  194.913449][ T5958] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  194.916337][ T5958] Bluetooth: hci1: Injecting HCI hardware error event
[  194.928212][ T9739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1563'.
[  194.964719][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1563'.
[  195.222528][ T5236] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  196.096746][ T5956] Bluetooth: hci1: command 0x0406 tx timeout
[  196.099772][ T5956] Bluetooth: hci1: hardware error 0x00
[  196.667059][ T9781] overlayfs: failed to clone upperpath
[  198.012296][ T6017] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  198.138515][ T9828] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  198.144233][ T9828] Error validating options; rc = [-22]
[  198.193046][ T5956] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  198.471994][ T9834] cgroup: fork rejected by pids controller in /syz1
[  198.843110][ T9837] binder: 9836:9837 ioctl 400c620e 9999999999999999 returned -14
[  198.918851][ T9841] loop5: detected capacity change from 0 to 512
[  198.922714][ T9841] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  198.927283][ T9841] EXT4-fs (loop5): group descriptors corrupted!
[  198.960912][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1602'.
[  199.330554][ T9854] netlink: 'syz.0.1607': attribute type 3 has an invalid length.
[  199.333793][ T9854] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1607'.
[  199.338339][ T9847] loop5: detected capacity change from 0 to 32768
[  199.369509][ T9847] (syz.5.1604,9847,0):ocfs2_verify_volume:2290 ERROR: found superblock with incorrect block size bits: found 265, should be 9, 10, 11, or 12
[  199.375293][ T9847] (syz.5.1604,9847,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  199.378322][ T9847] (syz.5.1604,9847,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  199.381631][ T9847] (syz.5.1604,9847,0):ocfs2_fill_super:1177 ERROR: status = -22
[  199.641293][ T9864] tipc: Started in network mode
[  199.642910][ T9864] tipc: Node identity fc02, cluster identity 4711
[  199.647219][ T9864] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  199.901485][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  199.906543][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  199.910014][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  199.913238][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  199.917753][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  200.089829][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  200.108873][ T9880] chnl_net:caif_netlink_parms(): no params data found
[  200.205702][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.208760][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.211518][ T9880] bridge_slave_0: entered allmulticast mode
[  200.215330][ T9880] bridge_slave_0: entered promiscuous mode
[  200.220807][ T9880] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.223499][ T9880] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.226351][ T9880] bridge_slave_1: entered allmulticast mode
[  200.233297][ T9880] bridge_slave_1: entered promiscuous mode
[  200.253011][   T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  200.263419][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.266527][   T24] usb 6-1: Product: syz
[  200.268347][   T24] usb 6-1: Manufacturer: syz
[  200.270110][   T24] usb 6-1: SerialNumber: syz
[  200.274327][   T24] usb 6-1: config 0 descriptor??
[  200.286553][ T9880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.295342][ T9880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.355753][ T9880] team0: Port device team_slave_0 added
[  200.361473][ T9880] team0: Port device team_slave_1 added
[  200.394307][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.397202][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.407672][ T9880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.414068][ T9880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.416879][ T9880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.427182][ T9880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.476360][ T9880] hsr_slave_0: entered promiscuous mode
[  200.480342][ T9880] hsr_slave_1: entered promiscuous mode
[  200.480369][   T24] usb 6-1: USB disconnect, device number 5
[  200.483447][ T9880] debugfs: 'hsr0' already exists in 'hsr'
[  200.487535][ T9880] Cannot create hsr debugfs directory
[  200.621932][ T9880] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.698170][ T9880] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.767162][ T9880] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.818907][ T9880] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.394832][ T9880] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  201.404032][ T9880] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  201.417357][ T9880] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  201.484512][ T9880] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  201.637820][ T9906] loop5: detected capacity change from 0 to 4096
[  201.645037][ T9906] ntfs3: Unknown parameter '0xffffffffffffffff18446744073709551615'
[  201.945143][ T5236] Bluetooth: hci1: command tx timeout
[  202.186308][ T9880] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.280127][ T9880] 8021q: adding VLAN 0 to HW filter on device team0
[  202.310051][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.312391][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.342312][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.344610][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.721590][ T9880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.795215][ T9880] veth0_vlan: entered promiscuous mode
[  202.828303][ T9880] veth1_vlan: entered promiscuous mode
[  202.879060][ T9880] veth0_macvtap: entered promiscuous mode
[  202.898345][ T9880] veth1_macvtap: entered promiscuous mode
[  202.941183][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  202.978100][ T9880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  202.990048][ T5947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  202.995946][ T5947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.007500][ T5947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.016658][ T5947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.067323][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.069829][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.074720][   T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.077592][   T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.516725][   T47] IPVS: starting estimator thread 0...
[  203.603674][ T9947] IPVS: using max 62 ests per chain, 148800 per kthread
[  203.986892][ T5236] Bluetooth: hci1: command tx timeout
[  204.174364][ T5947] bridge_slave_1: left allmulticast mode
[  204.176682][ T5947] bridge_slave_1: left promiscuous mode
[  204.178582][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.200481][ T9981] loop5: detected capacity change from 0 to 512
[  204.202591][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  204.202601][   T33] audit: type=1326 audit(1755139398.665:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.1.1656" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f26bad8ebe9 code=0x0
[  204.213462][ T5947] bridge_slave_0: left allmulticast mode
[  204.215269][ T5947] bridge_slave_0: left promiscuous mode
[  204.217159][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.386901][   T33] audit: type=1326 audit(1755139398.848:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.5.1658" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  204.407462][   T33] audit: type=1326 audit(1755139398.848:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.5.1658" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  204.415655][   T33] audit: type=1326 audit(1755139398.848:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.5.1658" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  204.432672][   T33] audit: type=1326 audit(1755139398.848:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.5.1658" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  204.440688][   T33] audit: type=1326 audit(1755139398.848:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9986 comm="syz.5.1658" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  204.792118][ T5947] bond0 (unregistering): (slave 77): Releasing backup interface
[  204.797858][ T5947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.802496][ T5947] bond0 (unregistering): Released all slaves
[  204.827689][ T9989] can0: slcan on ttyS3.
[  204.895820][ T9990] can0 (unregistered): slcan off ttyS3.
[  205.022112][ T9991] can0: slcan on ttyS3.
[  205.268574][ T9988] can0 (unregistered): slcan off ttyS3.
[  205.366942][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'.
[  205.478626][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1664'.
[  205.547896][   T33] audit: type=1107 audit(1755139400.016:70): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  205.628284][ T5947] hsr_slave_0: left promiscuous mode
[  205.716534][ T5947] hsr_slave_1: left promiscuous mode
[  205.724767][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.728167][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.740495][ T5947] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.749417][ T5947] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.846397][ T5947] veth1_vlan: left allmulticast mode
[  205.879510][ T5947] veth1_macvtap: left promiscuous mode
[  205.884351][ T5947] veth0_macvtap: left promiscuous mode
[  205.887977][ T5947] veth1_vlan: left promiscuous mode
[  205.893775][ T5947] veth0_vlan: left promiscuous mode
[  206.015643][    T9] libceph: connect (1)[c::]:6789 error -101
[  206.018317][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  206.037266][ T5236] Bluetooth: hci1: command tx timeout
[  206.096786][T10026] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1672'.
[  206.292419][ T1273] libceph: connect (1)[c::]:6789 error -101
[  206.299082][ T1273] libceph: mon0 (1)[c::]:6789 connect error
[  206.735370][T10035] loop5: detected capacity change from 0 to 32768
[  206.809792][T10020] ceph: No mds server is up or the cluster is laggy
[  206.816139][ T1273] libceph: connect (1)[c::]:6789 error -101
[  206.818084][ T1273] libceph: mon0 (1)[c::]:6789 connect error
[  206.856133][T10035] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  206.856149][T10035]   allowing incompatible features above 0.0: (unknown version)
[  206.856154][T10035]   features: 
[  206.897200][T10035] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  206.909429][T10035] bcachefs (loop5): initializing new filesystem
[  206.928450][T10035] bcachefs (loop5): going read-write
[  206.939998][ T5947] team0 (unregistering): Port device team_slave_1 removed
[  206.958283][T10035] bcachefs (loop5): marking superblocks
[  207.037321][T10035] bcachefs (loop5): initializing freespace
[  207.040419][ T5947] team0 (unregistering): Port device team_slave_0 removed
[  207.069779][T10035] bcachefs (loop5): done initializing freespace
[  207.096229][T10035] bcachefs (loop5): reading snapshots table
[  207.102271][T10035] bcachefs (loop5): reading snapshots done
[  207.185711][T10035] bcachefs (loop5): done starting filesystem
[  207.215617][   T33] audit: type=1800 audit(1755139401.720:71): pid=10035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1676" name="file1" dev="loop5" ino=4098 res=0 errno=0
[  207.309519][ T8048] bcachefs (loop5): shutting down
[  207.311580][ T8048] bcachefs (loop5): going read-only
[  207.317311][ T8048] bcachefs (loop5): finished waiting for writes to stop
[  207.327118][ T8048] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  207.456743][ T8048] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  207.462577][ T8048] bcachefs (loop5): clean shutdown complete, journal seq 4
[  207.468938][ T8048] bcachefs (loop5): marking filesystem clean
[  207.513824][ T8048] bcachefs (loop5): shutdown complete
[  207.672428][T10065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.689219][T10066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.946368][T10088] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  207.949097][T10088] macsec1: entered promiscuous mode
[  207.955847][T10088] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  208.033168][T10092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.087775][ T5236] Bluetooth: hci1: command tx timeout
[  208.109991][T10096] loop1: detected capacity change from 0 to 512
[  208.113728][T10096] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  208.141481][T10096] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  208.145787][T10096] FAT-fs (loop1): Filesystem has been set read-only
[  208.493328][T10104] program syz.1.1701 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  208.844680][T10108] loop1: detected capacity change from 0 to 32768
[  208.865999][T10108] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  208.889801][T10108] XFS (loop1): Ending clean mount
[  208.999503][ T9880] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.871204][T10165] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1719'.
[  210.109322][T10174] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[  210.162683][T10176] lo: Caught tx_queue_len zero misconfig
[  210.209631][T10178] loop1: detected capacity change from 0 to 256
[  210.840632][T10210] loop1: detected capacity change from 0 to 32768
[  210.872746][T10210] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  210.889194][T10210] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  210.907848][   T33] audit: type=1800 audit(1755139405.464:72): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1741" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  210.946784][ T9880] ocfs2: Unmounting device (7,1) on (node local)
[  211.204052][T10226] vlan2: entered allmulticast mode
[  211.207039][T10226] macvlan0: entered allmulticast mode
[  211.227939][T10226] veth1_vlan: entered allmulticast mode
[  211.428148][T10224] loop1: detected capacity change from 0 to 32768
[  211.468717][T10224] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.523587][T10224] XFS (loop1): Ending clean mount
[  211.532685][T10224] XFS (loop1): Quotacheck needed: Please wait.
[  211.608423][T10224] XFS (loop1): Quotacheck: Done.
[  211.653747][T10258] vlan2: entered allmulticast mode
[  211.655496][T10258] macvlan0: entered allmulticast mode
[  211.657243][T10258] veth1_vlan: entered allmulticast mode
[  211.686334][ T9880] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.914032][T10272] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  212.020857][T10282] vlan2: entered allmulticast mode
[  212.025712][T10282] macvlan0: entered allmulticast mode
[  212.027879][T10282] veth1_vlan: entered allmulticast mode
[  212.112457][   T33] audit: type=1326 audit(1755139406.665:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.0.1775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5718ebe9 code=0x7ffc0000
[  212.130540][   T33] audit: type=1326 audit(1755139406.665:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.0.1775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5718ebe9 code=0x7ffc0000
[  212.165915][   T33] audit: type=1326 audit(1755139406.706:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.0.1775" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1f5718ebe9 code=0x7ffc0000
[  212.197586][   T33] audit: type=1326 audit(1755139406.706:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.0.1775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5718ebe9 code=0x7ffc0000
[  212.231250][   T33] audit: type=1326 audit(1755139406.706:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10289 comm="syz.0.1775" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5718ebe9 code=0x7ffc0000
[  212.634913][T10310] vlan2: entered allmulticast mode
[  212.760272][T10312] loop1: detected capacity change from 0 to 2048
[  212.772660][T10312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.244866][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1798'.
[  213.277428][T10343] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1799'.
[  213.310696][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1800'.
[  213.441995][T10353] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  213.610881][ T9880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.343122][ T1273] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  214.411781][T10374] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1812'.
[  214.452772][T10376] loop5: detected capacity change from 0 to 2048
[  214.461305][T10376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  214.547426][ T1273] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[  214.550278][ T1273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.554576][ T1273] usb 2-1: Product: syz
[  214.555893][ T1273] usb 2-1: Manufacturer: syz
[  214.557401][ T1273] usb 2-1: SerialNumber: syz
[  214.561848][ T1273] usb 2-1: config 0 descriptor??
[  214.570644][ T1273] usb 2-1: interface 1 not found
[  214.596527][T10380] loop5: detected capacity change from 0 to 4096
[  214.748159][T10386] rdma_op ffff8880324981f0 conn xmit_rdma 0000000000000000
[  215.074007][T10402] program syz.5.1825 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  215.118523][T10404] loop5: detected capacity change from 0 to 1024
[  215.145388][T10404] hfsplus: extend alloc file! (16384,256,150995124)
[  215.450776][T10418] netlink: 'syz.5.1833': attribute type 2 has an invalid length.
[  215.453721][T10418] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1833'.
[  216.687190][    T9] usb 2-1: USB disconnect, device number 21
[  216.992717][T10453] netlink: 'syz.1.1850': attribute type 2 has an invalid length.
[  216.996512][T10453] netlink: 'syz.1.1850': attribute type 1 has an invalid length.
[  217.251396][T10469] loop1: detected capacity change from 0 to 4096
[  217.265154][T10469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.295924][ T9880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.449652][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  217.610278][   T24] usb 6-1: Using ep0 maxpacket: 32
[  217.615192][   T24] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.620201][   T24] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.627690][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  217.633315][   T24] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  217.635996][   T24] usb 6-1: Product: syz
[  217.637655][   T24] usb 6-1: Manufacturer: syz
[  217.656379][   T24] hub 6-1:4.0: USB hub found
[  218.094668][   T24] hub 6-1:4.0: 2 ports detected
[  218.769549][   T24] usb 6-1: USB disconnect, device number 6
[  219.691049][T10532] loop1: detected capacity change from 0 to 512
[  219.697544][T10532] EXT4-fs: Ignoring removed nomblk_io_submit option
[  219.716226][T10532] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  219.719598][T10532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  219.740731][T10532] EXT4-fs (loop1): orphan cleanup on readonly fs
[  219.744289][T10532] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  219.756165][T10532] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  219.761932][T10532] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  219.771624][T10532] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1885: bg 0: block 40: padding at end of block bitmap is not set
[  219.780763][T10532] EXT4-fs (loop1): Remounting filesystem read-only
[  219.783628][T10532] EXT4-fs (loop1): 1 truncate cleaned up
[  219.788612][T10532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  219.867190][ T9880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.915301][   T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  220.410983][   T24] usb 6-1: Using ep0 maxpacket: 32
[  220.415214][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.431146][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.435050][   T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  220.438738][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.453439][   T24] usb 6-1: config 0 descriptor??
[  220.877009][   T24] ft260 0003:0403:6030.0003: unknown main item tag 0x7
[  221.061821][   T24] ft260 0003:0403:6030.0003: chip code: 6424 8183
[  221.302663][   T24] ft260 0003:0403:6030.0003: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[  221.835446][   T24] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup
[  222.056133][   T24] ft260 0003:0403:6030.0003: failed to reset I2C controller: -71
[  222.116052][   T24] usb 6-1: USB disconnect, device number 7
[  222.647952][T10569] veth0_macvtap: left promiscuous mode
[  223.112439][T10592] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  223.115503][ T1273] IPVS: starting estimator thread 0...
[  223.207972][T10596] IPVS: using max 63 ests per chain, 151200 per kthread
[  223.243516][   T33] audit: type=1326 audit(1755139417.882:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.0.1914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5718ebe9 code=0x7ffc0000
[  223.271280][   T33] audit: type=1326 audit(1755139417.892:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.0.1914" exe="/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1f5718ebe9 code=0x7ffc0000
[  223.286024][   T33] audit: type=1326 audit(1755139417.892:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.0.1914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5718ebe9 code=0x7ffc0000
[  223.306166][   T33] audit: type=1326 audit(1755139417.902:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.0.1914" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5718ebe9 code=0x7ffc0000
[  223.416615][T10602] loop5: detected capacity change from 0 to 40427
[  223.420119][T10602] F2FS-fs (loop5): build fault injection rate: 25
[  223.422221][T10602] F2FS-fs (loop5): build fault injection type: 0x7698c
[  223.426612][T10602] F2FS-fs (loop5): invalid crc value
[  223.429452][T10602] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[  223.436249][T10602] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  223.474101][T10602] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  223.484423][T10602] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  223.524068][T10602] F2FS-fs (loop5): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[  223.612553][ T8048] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x585/0x21b0
[  223.636690][ T8048] F2FS-fs (loop5): invalid blkaddr: 513, type: 10, run fsck to fix.
[  223.688005][T10621] loop1: detected capacity change from 0 to 2048
[  223.725740][T10621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.749090][T10621] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  223.787797][ T9880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.057202][T10638] loop5: detected capacity change from 0 to 64
[  224.126671][   T47] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  224.199150][T10640] loop5: detected capacity change from 0 to 2048
[  224.233707][T10641] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.252367][   T33] audit: type=1800 audit(1755139418.887:82): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1929" name="file2" dev="loop5" ino=16 res=0 errno=0
[  224.285881][   T47] usb 2-1: config 0 has an invalid interface number: 101 but max is 0
[  224.288936][   T47] usb 2-1: config 0 has no interface number 0
[  224.302962][T10640] NILFS (loop5): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[  224.306926][   T47] usb 2-1: config 0 interface 101 has no altsetting 0
[  224.309986][T10640] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16)
[  224.319637][   T47] usb 2-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=ef.18
[  224.327443][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.335032][   T47] usb 2-1: Product: syz
[  224.336667][   T47] usb 2-1: Manufacturer: syz
[  224.338395][   T47] usb 2-1: SerialNumber: syz
[  224.345873][T10640] Remounting filesystem read-only
[  224.363403][   T47] usb 2-1: config 0 descriptor??
[  224.377487][   T47] usb 2-1: bad CDC descriptors
[  224.396850][   T47] option 2-1:0.101: GSM modem (1-port) converter detected
[  224.409802][ T8048] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  224.575532][   T47] usb 2-1: USB disconnect, device number 22
[  224.585926][   T47] option 2-1:0.101: device disconnected
[  224.909577][T10658] Invalid option length (65058) for dns_resolver key
[  225.031852][T10664] loop5: detected capacity change from 0 to 1024
[  225.035049][T10664] EXT4-fs: Ignoring removed i_version option
[  225.037366][T10664] EXT4-fs: Ignoring removed oldalloc option
[  225.041635][T10664] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  225.045817][T10664] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  225.050674][T10664] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  225.054467][T10664] EXT4-fs (loop5): filesystem has both journal inode and journal device!
[  225.479238][T10670] loop1: detected capacity change from 0 to 32768
[  225.484314][T10670] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1943 (10670)
[  225.519891][T10670] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  225.523785][T10670] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  225.540348][T10670] BTRFS info (device loop1): disk space caching is enabled
[  225.543483][T10670] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  225.643861][T10670] BTRFS info (device loop1): rebuilding free space tree
[  225.659231][T10670] BTRFS info (device loop1): disabling free space tree
[  225.662370][T10670] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  225.670513][T10670] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  225.726513][   T33] audit: type=1800 audit(1755139420.383:83): pid=10670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1943" name="file1" dev="loop1" ino=264 res=0 errno=0
[  225.775498][    T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  225.943733][    T9] usb 6-1: config 0 has an invalid interface number: 128 but max is 0
[  225.953207][    T9] usb 6-1: config 0 has no interface number 0
[  225.966504][    T9] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  225.970106][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.973281][    T9] usb 6-1: Product: syz
[  225.981393][    T9] usb 6-1: Manufacturer: syz
[  225.983313][    T9] usb 6-1: SerialNumber: syz
[  225.995054][    T9] usb 6-1: config 0 descriptor??
[  226.160826][ T9880] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.436723][    T9] usb 6-1: Firmware version (0.0) predates our first public release.
[  226.450620][    T9] usb 6-1: Please update to version 0.2 or newer
[  226.456084][    T9] usb 6-1: Firmware: build 
[  226.517759][T10736] 9pnet_fd: Insufficient options for proto=fd
[  226.705909][    T9] usb 6-1: USB disconnect, device number 8
[  226.916216][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'.
[  227.127106][T10774] overlayfs: failed to clone upperpath
[  227.195849][T10776] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 3, id = 0
[  227.293246][T10786] usb usb6: usbfs: process 10786 (syz.5.1986) did not claim interface 63 before use
[  227.559706][T10804] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1994'.
[  227.564504][T10799] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1994'.
[  227.731921][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2002'.
[  227.736465][T10816] netlink: 'syz.5.2002': attribute type 5 has an invalid length.
[  227.744607][T10816] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2002'.
[  228.065984][T10834] loop5: detected capacity change from 0 to 32768
[  228.188466][T10834] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  228.188484][T10834]   allowing incompatible features above 0.0: (unknown version)
[  228.188490][T10834]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  228.200293][T10834] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  228.202880][T10834] bcachefs (loop5): initializing new filesystem
[  228.211231][T10834] bcachefs (loop5): going read-write
[  228.222978][T10834] bcachefs (loop5): marking superblocks
[  228.228388][T10834] bcachefs (loop5): initializing freespace
[  228.231882][T10834] bcachefs (loop5): done initializing freespace
[  228.236678][T10834] bcachefs (loop5): reading snapshots table
[  228.238556][T10834] bcachefs (loop5): reading snapshots done
[  228.272426][T10834] bcachefs (loop5): done starting filesystem
[  228.338015][   T33] audit: type=1800 audit(1755139422.993:84): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2011" name="file1" dev="loop5" ino=4098 res=0 errno=0
[  228.943208][ T8048] bcachefs (loop5): shutting down
[  228.951887][ T8048] bcachefs (loop5): going read-only
[  228.956035][ T8048] bcachefs (loop5): finished waiting for writes to stop
[  228.963530][ T8048] bcachefs (loop5): flushing journal and stopping allocators, journal seq 186
[  228.986900][ T8048] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 187
[  228.991569][ T8048] bcachefs (loop5): clean shutdown complete, journal seq 188
[  228.995436][ T8048] bcachefs (loop5): marking filesystem clean
[  229.019893][ T8048] bcachefs (loop5): shutdown complete
[  230.461779][T10904] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2035'.
[  230.465372][T10904] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2035'.
[  230.606464][T10906] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  231.756665][T10925] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2044'.
[  232.560428][T10970] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2066'.
[  232.696037][T10974] loop1: detected capacity change from 0 to 256
[  232.716282][T10974] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.720448][T10974] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  232.731940][T10974] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  233.334311][T10990] loop1: detected capacity change from 0 to 32768
[  233.509039][T10990] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  233.509064][T10990]   allowing incompatible features above 0.0: (unknown version)
[  233.509074][T10990]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  233.524338][T10990] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  233.527545][T10990] bcachefs (loop1): initializing new filesystem
[  233.528222][T10999] loop5: detected capacity change from 0 to 8192
[  233.538314][T10990] bcachefs (loop1): going read-write
[  233.557945][T10990] bcachefs (loop1): marking superblocks
[  233.567901][T10990] bcachefs (loop1): initializing freespace
[  233.573619][T10990] bcachefs (loop1): done initializing freespace
[  233.578228][T10990] bcachefs (loop1): reading snapshots table
[  233.580698][T10990] bcachefs (loop1): reading snapshots done
[  233.628502][T10990] bcachefs (loop1): done starting filesystem
[  233.631083][T10999] syz.5.2079: attempt to access beyond end of device
[  233.631083][T10999] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  233.665345][T10999] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  233.673092][T10999] FAT-fs (loop5): Filesystem has been set read-only
[  233.685478][T10999] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  233.703606][T10999] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1)
[  233.714054][ T9880] bcachefs (loop1): shutting down
[  233.716278][ T9880] bcachefs (loop1): going read-only
[  233.718867][ T9880] bcachefs (loop1): finished waiting for writes to stop
[  233.725691][ T9880] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  233.830586][ T9880] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  233.846236][ T9880] bcachefs (loop1): clean shutdown complete, journal seq 4
[  233.849829][ T9880] bcachefs (loop1): marking filesystem clean
[  233.948775][ T9880] bcachefs (loop1): shutdown complete
[  234.775644][T11022] loop5: detected capacity change from 0 to 40427
[  234.791123][T11022] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  234.794031][T11022] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  234.807201][T11022] F2FS-fs (loop5): invalid crc value
[  234.849260][T11022] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  234.855644][T11022] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  234.857904][T11022] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  235.563989][T11042] loop5: detected capacity change from 0 to 256
[  235.883345][T11052] loop5: detected capacity change from 0 to 256
[  235.891817][T11052] exfat: Deprecated parameter 'namecase'
[  235.903464][T11052] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  235.995295][T11056] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  236.510307][    T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  236.676513][    T9] usb 6-1: Using ep0 maxpacket: 32
[  236.680980][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  236.686870][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  236.696563][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  236.709598][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  236.719540][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.731043][    T9] usb 6-1: config 0 descriptor??
[  236.740844][T11069] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  236.747495][    T9] hub 6-1:0.0: USB hub found
[  236.847860][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'.
[  236.956774][    T9] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  236.974211][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  236.976162][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  237.010041][    T9] usb 6-1: USB disconnect, device number 9
[  237.713385][T11131] netlink: 'syz.1.2136': attribute type 7 has an invalid length.
[  237.719217][T11131] netlink: 'syz.1.2136': attribute type 8 has an invalid length.
[  237.932083][ T2333] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  238.092021][ T2333] usb 6-1: Using ep0 maxpacket: 16
[  238.100073][ T2333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.110404][ T2333] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.114832][ T2333] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  238.118409][ T2333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.125642][ T2333] usb 6-1: config 0 descriptor??
[  238.197614][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2141'.
[  238.366581][T11146] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2143'.
[  238.621769][T11152] loop1: detected capacity change from 0 to 512
[  238.645553][T11152] EXT4-fs (loop1): orphan cleanup on readonly fs
[  238.648862][T11152] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  238.652474][T11152] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  238.670985][T11152] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2145: attempt to clear invalid blocks 2 len 1
[  238.676346][T11152] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2145: invalid indirect mapped block 1819239214 (level 0)
[  238.681659][T11152] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2145: invalid indirect mapped block 1819239214 (level 1)
[  238.688424][T11152] EXT4-fs (loop1): 1 truncate cleaned up
[  238.705532][T11152] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  238.759448][ T9880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.146767][ T2333] letsketch 0003:6161:4D15.0004: Device info: ఁ
[  239.374384][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2150'.
[  239.389789][ T2333] usb 6-1: Max retries (5) exceeded reading string descriptor 201
[  239.399447][ T2333] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -71
[  239.410491][ T2333] usb 6-1: USB disconnect, device number 10
[  239.683334][T11165] loop1: detected capacity change from 0 to 32768
[  240.669716][T11197] usb usb8: usbfs: process 11197 (syz.1.2166) did not claim interface 7 before use
[  241.506775][T11214] netlink: 'syz.5.2173': attribute type 2 has an invalid length.
[  241.509725][T11214] netlink: 'syz.5.2173': attribute type 2 has an invalid length.
[  241.805731][    T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  241.969336][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  241.972898][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.985683][ T6229] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  241.991408][    T9] pwc: Logitech/Cisco VT Camera webcam detected.
[  242.140680][ T6229] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  242.144500][ T6229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.150255][ T6229] usb 6-1: Product: syz
[  242.152437][ T6229] usb 6-1: Manufacturer: syz
[  242.154390][ T6229] usb 6-1: SerialNumber: syz
[  242.159085][ T6229] usb 6-1: config 0 descriptor??
[  242.163783][ T6229] ch341 6-1:0.0: ch341-uart converter detected
[  242.393477][    T9] pwc: send_video_command error -71
[  242.398419][    T9] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  242.401858][    T9] Philips webcam 2-1:127.0: probe with driver Philips webcam failed with error -71
[  242.408949][    T9] usb 2-1: USB disconnect, device number 23
[  242.973741][T11238] loop1: detected capacity change from 0 to 1024
[  242.980382][T11238] EXT4-fs: Ignoring removed oldalloc option
[  242.990395][T11238] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  243.024868][T11238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.057224][ T9880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.171059][ T6229] ch341-uart ttyUSB0: failed to read break control: -71
[  243.176587][ T6229] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  243.188980][ T6229] usb 6-1: USB disconnect, device number 11
[  243.192652][ T6229] ch341 6-1:0.0: device disconnected
[  244.008901][T11260] netlink: 'syz.5.2190': attribute type 3 has an invalid length.
[  244.012023][T11260] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2190'.
[  244.059251][T11262] input: syz0 as /devices/virtual/input/input9
[  244.061808][T11262] input: failed to attach handler leds to device input9, error: -6
[  244.610156][T11277] loop1: detected capacity change from 0 to 512
[  244.632829][T11277] EXT4-fs: Ignoring removed oldalloc option
[  244.646826][T11277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.650777][T11277] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  244.713473][ T9880] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.360252][T11291] syz.1.2201: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  246.366415][T11291] CPU: 1 UID: 0 PID: 11291 Comm: syz.1.2201 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  246.366429][T11291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  246.366435][T11291] Call Trace:
[  246.366440][T11291]  <TASK>
[  246.366444][T11291]  dump_stack_lvl+0x189/0x250
[  246.366461][T11291]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.366471][T11291]  ? __pfx__printk+0x10/0x10
[  246.366483][T11291]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  246.366493][T11291]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  246.366503][T11291]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  246.366513][T11291]  warn_alloc+0x214/0x310
[  246.366534][T11291]  ? __pfx_warn_alloc+0x10/0x10
[  246.366550][T11291]  ? __get_vm_area_node+0x28f/0x300
[  246.366561][T11291]  ? packet_set_ring+0x6f4/0x2350
[  246.366573][T11291]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  246.366611][T11291]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  246.366624][T11291]  ? alloc_pages_mpol+0x3c4/0x4a0
[  246.366637][T11291]  ? packet_set_ring+0x6f4/0x2350
[  246.366646][T11291]  vzalloc_noprof+0xb2/0xf0
[  246.366656][T11291]  ? packet_set_ring+0x6f4/0x2350
[  246.366666][T11291]  packet_set_ring+0x6f4/0x2350
[  246.366685][T11291]  ? __pfx_packet_set_ring+0x10/0x10
[  246.366702][T11291]  ? _copy_from_user+0x94/0xb0
[  246.366714][T11291]  packet_setsockopt+0xc5a/0x12c0
[  246.366723][T11291]  ? mpol_set_nodemask+0x311/0x3f0
[  246.366735][T11291]  ? __pfx_packet_setsockopt+0x10/0x10
[  246.366746][T11291]  ? __lock_acquire+0xab9/0xd20
[  246.366760][T11291]  ? aa_sk_perm+0x81e/0x950
[  246.366774][T11291]  ? __pfx_aa_sk_perm+0x10/0x10
[  246.366789][T11291]  ? __fget_files+0x2a/0x420
[  246.366795][T11291]  ? aa_sock_opt_perm+0xff/0x1b0
[  246.366804][T11291]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  246.366813][T11291]  ? __pfx_packet_setsockopt+0x10/0x10
[  246.366822][T11291]  do_sock_setsockopt+0x17c/0x1b0
[  246.366833][T11291]  __x64_sys_setsockopt+0x13f/0x1b0
[  246.366844][T11291]  do_syscall_64+0xfa/0x3b0
[  246.366855][T11291]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.366865][T11291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.366873][T11291]  ? exc_page_fault+0x9f/0xf0
[  246.366884][T11291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.366892][T11291] RIP: 0033:0x7f26bad8ebe9
[  246.366901][T11291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.366909][T11291] RSP: 002b:00007f26bbb4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  246.366918][T11291] RAX: ffffffffffffffda RBX: 00007f26bafb6090 RCX: 00007f26bad8ebe9
[  246.366924][T11291] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000004
[  246.366929][T11291] RBP: 00007f26bae11e19 R08: 000000000000001c R09: 0000000000000000
[  246.366934][T11291] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[  246.366939][T11291] R13: 00007f26bafb6128 R14: 00007f26bafb6090 R15: 00007ffdad1351c8
[  246.366952][T11291]  </TASK>
[  246.367016][T11291] Mem-Info:
[  246.469457][T11291] active_anon:14515 inactive_anon:0 isolated_anon:0
[  246.469457][T11291]  active_file:11369 inactive_file:38324 isolated_file:0
[  246.469457][T11291]  unevictable:1768 dirty:434 writeback:0
[  246.469457][T11291]  slab_reclaimable:10444 slab_unreclaimable:54800
[  246.469457][T11291]  mapped:23411 shmem:9688 pagetables:1263
[  246.469457][T11291]  sec_pagetables:0 bounce:0
[  246.469457][T11291]  kernel_misc_reclaimable:0
[  246.469457][T11291]  free:245784 free_pcp:26696 free_cma:0
[  246.483435][T11291] Node 0 active_anon:32740kB inactive_anon:0kB active_file:23504kB inactive_file:22592kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47060kB dirty:1096kB writeback:0kB shmem:20744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5756kB pagetables:2772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  246.493678][T11291] Node 1 active_anon:25320kB inactive_anon:0kB active_file:21972kB inactive_file:130704kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46584kB dirty:640kB writeback:0kB shmem:18008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6672kB pagetables:2280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  246.504069][T11291] Node 0 DMA free:15356kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  246.514852][T11291] lowmem_reserve[]: 0 811 811 811 811
[  246.516711][T11291] Node 0 DMA32 free:263556kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32740kB inactive_anon:0kB active_file:23504kB inactive_file:22592kB unevictable:3536kB writepending:1096kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:48516kB local_pcp:19108kB free_cma:0kB
[  246.527002][T11291] lowmem_reserve[]: 0 0 0 0 0
[  246.528544][T11291] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  246.537576][T11291] lowmem_reserve[]: 0 0 854 854 854
[  246.539214][T11291] Node 1 Normal free:245608kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25320kB inactive_anon:0kB active_file:21972kB inactive_file:130704kB unevictable:3536kB writepending:640kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:58276kB local_pcp:36456kB free_cma:0kB
[  246.549190][T11291] lowmem_reserve[]: 0 0 0 0 0
[  246.550901][T11291] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB
[  246.555412][T11291] Node 0 DMA32: 462*4kB (UME) 276*8kB (ME) 177*16kB (ME) 107*32kB (UM) 52*64kB (ME) 46*128kB (ME) 13*256kB (ME) 12*512kB (UME) 3*1024kB (UME) 9*2048kB (UM) 52*4096kB (UM) = 263496kB
[  246.561109][T11291] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  246.566125][T11291] Node 1 Normal: 17*4kB (UME) 8*8kB (UME) 3*16kB (ME) 0*32kB 2*64kB (UE) 2*128kB (UE) 1*256kB (M) 2*512kB (UM) 8*1024kB (UE) 5*2048kB (UME) 55*4096kB (UM) = 245556kB
[  246.571672][T11291] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  246.574598][T11291] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  246.577499][T11291] 59359 total pagecache pages
[  246.578984][T11291] 0 pages in swap cache
[  246.580664][T11291] Free swap  = 124996kB
[  246.582077][T11291] Total swap = 124996kB
[  246.583408][T11291] 786301 pages RAM
[  246.584634][T11291] 0 pages HighMem/MovableOnly
[  246.586100][T11291] 241330 pages reserved
[  246.587437][T11291] 0 pages cma reserved
[  246.786641][T11310] loop1: detected capacity change from 0 to 64
[  247.534259][T11323] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2213'.
[  247.626214][T11318] loop1: detected capacity change from 0 to 32768
[  247.650412][T11318] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  247.694917][T11318] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  247.702950][   T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  247.773817][ T9880] ocfs2: Unmounting device (7,1) on (node local)
[  248.053218][T11329] loop5: detected capacity change from 0 to 32768
[  248.094891][T11329] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  248.094891][T11329] clean (size 2912):
[  248.094891][T11329] flags:          0
[  248.094891][T11329] journal_seq:    8
[  248.094891][T11329] prio_ptrs: 
[  248.094891][T11329] usage: type=key_version v=0
[  248.094891][T11329] usage: type=reserved v=0
[  248.094891][T11329] usage: type=reserved v=0
[  248.094891][T11329] usage: type=reserved v=0
[  248.094891][T11329] usage: type=reserved v=0
[  248.094891][T11329] data_usage: btree: 1/1 [0]=2816
[  248.094891][T11329] data_usage: journal: 1/1 [0]=0
[  248.094891][T11329] data_usage: user: 1/1 [0]=32
[  248.094891][T11329] dev_usage: dev=0  
[  248.094891][T11329]   free: buckets=83 sectors=0 fragmented=0
[  248.094891][T11329]   sb: buckets=25 sectors=6152 fragmented=248
[  248.094891][T11329]   journal: buckets=8 sectors=2048 fragmented=0
[  248.094891][T11329]   btree: buckets=11 sectors=2816 fragmented=0
[  248.094891][T11329]   user: buckets=1 sectors=32 fragmented=224
[  248.094891][T11329]   cached: buckets=0 sectors=0 fragmented=0
[  248.094891][T11329]   parity: buckets=0 sectors=0 fragmented=0
[  248.094891][T11329]   stripe: buckets=0 sectors=0 fragmented=0
[  248.094891][T11329]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  248.094891][T11329]   need_discard: buckets=0 sectors=0 fragmented=0
[  248.094891][T11329] clock: read=0
[  248.094891][T11329] clock: write=1288
[  248.094891][T11329] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  248.096672][T11329] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  248.148968][    C1] vkms_vblank_simulate: vblank timer overrun
[  248.774212][T11351] loop1: detected capacity change from 0 to 256
[  249.033312][T11350] loop5: detected capacity change from 0 to 32768
[  249.044613][T11350] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  249.114948][T11350] XFS (loop5): Ending clean mount
[  249.121661][T11350] XFS (loop5): Quotacheck needed: Please wait.
[  249.158772][T11350] XFS (loop5): Quotacheck: Done.
[  249.192843][ T8048] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  249.462198][T11390] : entered promiscuous mode
[  249.719702][T11394] loop1: detected capacity change from 0 to 32768
[  249.724430][T11394] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2242 (11394)
[  250.131957][T11394] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.136094][T11394] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  250.158368][T11394] BTRFS info (device loop1): using free-space-tree
[  250.695254][ T9880] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.900681][T11430] ip6tnl1: entered promiscuous mode
[  250.902492][T11430] ip6tnl1: entered allmulticast mode
[  251.735077][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2259'.
[  251.739206][T11453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2259'.
[  251.941510][T11451] loop1: detected capacity change from 0 to 32768
[  252.603040][T11477] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2270'.
[  252.608010][T11477] netlink: 'syz.5.2270': attribute type 3 has an invalid length.
[  252.945586][   T33] audit: type=1326 audit(1755139447.654:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.5.2276" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  252.967730][   T33] audit: type=1326 audit(1755139447.654:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.5.2276" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  252.998728][   T33] audit: type=1326 audit(1755139447.664:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.5.2276" exe="/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  253.008022][   T33] audit: type=1326 audit(1755139447.664:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.5.2276" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  253.017356][   T33] audit: type=1326 audit(1755139447.664:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.5.2276" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad80d8ebe9 code=0x7ffc0000
[  253.216264][T11487] loop1: detected capacity change from 0 to 32768
[  253.226757][T11487] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2275 (11487)
[  253.253579][T11487] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  253.263079][T11487] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  253.266728][T11487] BTRFS info (device loop1): using free-space-tree
[  253.292929][T11487] BTRFS info (device loop1): rebuilding free space tree
[  253.696474][ T9880] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  253.886250][T11518] usb usb8: usbfs: process 11518 (syz.1.2281) did not claim interface 2 before use
[  254.863770][T11550] futex_wake_op: syz.0.2296 tries to shift op by 32; fix this program
[  254.976820][   T33] audit: type=1326 audit(1755139449.676:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.1.2286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bad8ebe9 code=0x7fc00000
[  255.005499][   T33] audit: type=1326 audit(1755139449.686:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.1.2286" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f26bad8ebe9 code=0x7fc00000
[  255.032085][   T33] audit: type=1326 audit(1755139449.686:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.1.2286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bad8ebe9 code=0x7fc00000
[  255.056448][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.058898][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  255.071838][   T33] audit: type=1326 audit(1755139449.686:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.1.2286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bad8ebe9 code=0x7fc00000
[  255.118682][   T33] audit: type=1326 audit(1755139449.686:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11527 comm="syz.1.2286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26bad8ebe9 code=0x7fc00000
[  255.525221][ T2333] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  255.690226][ T2333] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  255.695801][ T2333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.700122][ T2333] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.703045][   T47] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  255.704572][ T2333] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  255.710612][ T2333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.037672][ T2333] usb 2-1: config 0 descriptor??
[  256.215156][   T47] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.221942][   T47] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  256.225769][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.229020][   T47] usb 6-1: Product: syz
[  256.230718][   T47] usb 6-1: Manufacturer: syz
[  256.232695][   T47] usb 6-1: SerialNumber: syz
[  256.465656][   T47] usbhid 6-1:1.0: can't add hid device: -71
[  256.468352][   T47] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  256.485977][ T2333] sony 0003:054C:024B.0005: unexpected long global item
[  256.489401][ T2333] sony 0003:054C:024B.0005: parse failed
[  256.491747][ T2333] sony 0003:054C:024B.0005: probe with driver sony failed with error -22
[  256.492098][   T47] usb 6-1: USB disconnect, device number 12
[  256.682273][ T2333] usb 2-1: USB disconnect, device number 24
[  256.701396][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2318'.
[  257.106096][T11609] loop5: detected capacity change from 0 to 2048
[  257.112890][T11609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.213927][T11615] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2327'.
[  259.464802][T11708] loop1: detected capacity change from 0 to 2048
[  259.485832][T11710] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  259.557335][T11713] loop5: detected capacity change from 0 to 1024
[  259.560311][T11713] hfsplus: Unknown parameter ''
[  259.774274][T11732] binder: 11731:11732 ioctl c0306201 0 returned -14
[  259.776706][T11732] binder: 11731:11732 ioctl 3b81 0 returned -22
[  259.847846][T11739] loop1: detected capacity change from 0 to 1024
[  259.870931][T11739] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  259.879386][T11739] EXT4-fs (loop1): group descriptors corrupted!
[  259.901772][T11739] tmpfs: Bad value for 'mpol'
[  259.973993][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'.
[  260.129400][T11758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2388'.
[  260.177617][T11762] netlink: 'syz.1.2390': attribute type 6 has an invalid length.
[  260.180325][T11762] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2390'.
[  260.450128][T11775] loop5: detected capacity change from 0 to 47
[  260.746493][T11779] ==================================================================
[  260.749084][T11779] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  260.751636][T11779] Read of size 2 at addr ffff8880311a17c2 by task syz.5.2397/11779
[  260.754274][T11779] 
[  260.756048][T11779] CPU: 1 UID: 0 PID: 11779 Comm: syz.5.2397 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  260.756071][T11779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  260.756086][T11779] Call Trace:
[  260.756097][T11779]  <TASK>
[  260.756106][T11779]  dump_stack_lvl+0x189/0x250
[  260.756138][T11779]  ? __kasan_check_byte+0x12/0x40
[  260.756167][T11779]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.756190][T11779]  ? lock_release+0x4b/0x3e0
[  260.756222][T11779]  ? __virt_addr_valid+0x4a5/0x5c0
[  260.756250][T11779]  print_report+0xca/0x240
[  260.756269][T11779]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  260.756299][T11779]  kasan_report+0x118/0x150
[  260.756328][T11779]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  260.756395][T11779]  __xfrm_state_lookup+0x6ad/0x8d0
[  260.756430][T11779]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  260.756464][T11779]  ? xfrm_state_lookup+0x45/0x1e0
[  260.756484][T11779]  xfrm_state_lookup+0x11e/0x1e0
[  260.756509][T11779]  xfrm_new_ae+0x37d/0x980
[  260.756533][T11779]  ? __pfx_xfrm_new_ae+0x10/0x10
[  260.756555][T11779]  ? apparmor_capable+0x137/0x1b0
[  260.756579][T11779]  ? __nla_parse+0x40/0x60
[  260.756606][T11779]  xfrm_user_rcv_msg+0x7a3/0xab0
[  260.756629][T11779]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  260.756664][T11779]  ? __pfx___mutex_trylock_common+0x10/0x10
[  260.756683][T11779]  ? rcu_is_watching+0x15/0xb0
[  260.756696][T11779]  ? trace_contention_end+0x39/0x120
[  260.756711][T11779]  ? __mutex_lock+0x335/0x1360
[  260.756732][T11779]  netlink_rcv_skb+0x208/0x470
[  260.756746][T11779]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  260.756755][T11779]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  260.756767][T11779]  ? netlink_deliver_tap+0x2e/0x1b0
[  260.756777][T11779]  ? netlink_deliver_tap+0x2e/0x1b0
[  260.756788][T11779]  xfrm_netlink_rcv+0x79/0x90
[  260.757033][T11779]  netlink_unicast+0x82f/0x9e0
[  260.757048][T11779]  ? __pfx_netlink_unicast+0x10/0x10
[  260.757059][T11779]  ? netlink_sendmsg+0x642/0xb30
[  260.757070][T11779]  ? skb_put+0x11b/0x210
[  260.757080][T11779]  netlink_sendmsg+0x805/0xb30
[  260.757098][T11779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.757114][T11779]  ? aa_sock_msg_perm+0xf1/0x1d0
[  260.757129][T11779]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  260.757147][T11779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.757163][T11779]  __sock_sendmsg+0x21c/0x270
[  260.757176][T11779]  ____sys_sendmsg+0x505/0x830
[  260.757186][T11779]  ? __pfx_____sys_sendmsg+0x10/0x10
[  260.757195][T11779]  ? import_iovec+0x74/0xa0
[  260.757205][T11779]  ___sys_sendmsg+0x21f/0x2a0
[  260.757213][T11779]  ? __pfx____sys_sendmsg+0x10/0x10
[  260.757227][T11779]  ? __fget_files+0x2a/0x420
[  260.757235][T11779]  ? __fget_files+0x3a0/0x420
[  260.757243][T11779]  __x64_sys_sendmsg+0x19b/0x260
[  260.757253][T11779]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  260.757263][T11779]  ? rcu_is_watching+0x15/0xb0
[  260.757272][T11779]  ? do_syscall_64+0xbe/0x3b0
[  260.757285][T11779]  do_syscall_64+0xfa/0x3b0
[  260.757295][T11779]  ? lockdep_hardirqs_on+0x9c/0x150
[  260.757304][T11779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.757313][T11779]  ? exc_page_fault+0x9f/0xf0
[  260.757323][T11779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.757331][T11779] RIP: 0033:0x7fad80d8ebe9
[  260.757340][T11779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.757348][T11779] RSP: 002b:00007fad81c43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  260.757366][T11779] RAX: ffffffffffffffda RBX: 00007fad80fb5fa0 RCX: 00007fad80d8ebe9
[  260.757373][T11779] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  260.757379][T11779] RBP: 00007fad80e11e19 R08: 0000000000000000 R09: 0000000000000000
[  260.757384][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  260.757390][T11779] R13: 00007fad80fb6038 R14: 00007fad80fb5fa0 R15: 00007fff15dfdc78
[  260.757400][T11779]  </TASK>
[  260.757404][T11779] 
[  260.886229][T11779] Allocated by task 10517:
[  260.888039][T11779]  kasan_save_track+0x3e/0x80
[  260.889930][T11779]  __kasan_slab_alloc+0x6c/0x80
[  260.891917][T11779]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  260.894106][T11779]  xfrm_state_alloc+0x24/0x2f0
[  260.896050][T11779]  __find_acq_core+0x8a7/0x1c00
[  260.898013][T11779]  xfrm_find_acq+0x78/0xa0
[  260.899823][T11779]  xfrm_alloc_userspi+0x6b3/0xc90
[  260.901827][T11779]  xfrm_user_rcv_msg+0x7a3/0xab0
[  260.903821][T11779]  netlink_rcv_skb+0x208/0x470
[  260.905723][T11779]  xfrm_netlink_rcv+0x79/0x90
[  260.907590][T11779]  netlink_unicast+0x82f/0x9e0
[  260.909360][T11779]  netlink_sendmsg+0x805/0xb30
[  260.911125][T11779]  __sock_sendmsg+0x21c/0x270
[  260.912990][T11779]  ____sys_sendmsg+0x505/0x830
[  260.914865][T11779]  ___sys_sendmsg+0x21f/0x2a0
[  260.916849][T11779]  __x64_sys_sendmsg+0x19b/0x260
[  260.918838][T11779]  do_syscall_64+0xfa/0x3b0
[  260.920628][T11779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.922738][T11779] 
[  260.923495][T11779] Freed by task 9:
[  260.924660][T11779]  kasan_save_track+0x3e/0x80
[  260.926128][T11779]  kasan_save_free_info+0x46/0x50
[  260.927973][T11779]  __kasan_slab_free+0x5b/0x80
[  260.929665][T11779]  kmem_cache_free+0x18f/0x400
[  260.931458][T11779]  xfrm_state_gc_task+0x52d/0x6b0
[  260.933257][T11779]  process_scheduled_works+0xae1/0x17b0
[  260.934935][T11779]  worker_thread+0x8a0/0xda0
[  260.936393][T11779]  kthread+0x711/0x8a0
[  260.937723][T11779]  ret_from_fork+0x3fc/0x770
[  260.939201][T11779]  ret_from_fork_asm+0x1a/0x30
[  260.940768][T11779] 
[  260.941578][T11779] The buggy address belongs to the object at ffff8880311a1680
[  260.941578][T11779]  which belongs to the cache xfrm_state of size 928
[  260.946086][T11779] The buggy address is located 322 bytes inside of
[  260.946086][T11779]  freed 928-byte region [ffff8880311a1680, ffff8880311a1a20)
[  260.950307][T11779] 
[  260.951063][T11779] The buggy address belongs to the physical page:
[  260.953009][T11779] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880311a1680 pfn:0x311a0
[  260.956335][T11779] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  260.958946][T11779] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  260.961283][T11779] page_type: f5(slab)
[  260.962519][T11779] raw: 00fff00000000040 ffff88810537a140 dead000000000122 0000000000000000
[  260.965163][T11779] raw: ffff8880311a1680 00000000800e0009 00000000f5000000 0000000000000000
[  260.967846][T11779] head: 00fff00000000040 ffff88810537a140 dead000000000122 0000000000000000
[  260.970554][T11779] head: ffff8880311a1680 00000000800e0009 00000000f5000000 0000000000000000
[  260.973304][T11779] head: 00fff00000000002 ffffea0000c46801 00000000ffffffff 00000000ffffffff
[  260.975954][T11779] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  260.978605][T11779] page dumped because: kasan: bad access detected
[  260.980600][T11779] page_owner tracks the page as allocated
[  260.982330][T11779] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6565, tgid 6564 (syz.3.284), ts 91760865773, free_ts 91757788862
[  260.988128][T11779]  post_alloc_hook+0x240/0x2a0
[  260.989618][T11779]  get_page_from_freelist+0x21e4/0x22c0
[  260.991330][T11779]  __alloc_frozen_pages_noprof+0x181/0x370
[  260.993144][T11779]  alloc_pages_mpol+0x232/0x4a0
[  260.994598][T11779]  allocate_slab+0x8a/0x370
[  260.995976][T11779]  ___slab_alloc+0xbeb/0x1410
[  260.997439][T11779]  kmem_cache_alloc_noprof+0x283/0x3c0
[  260.999137][T11779]  xfrm_state_alloc+0x24/0x2f0
[  261.000570][T11779]  __find_acq_core+0x8a7/0x1c00
[  261.002102][T11779]  xfrm_find_acq+0x78/0xa0
[  261.003471][T11779]  pfkey_getspi+0x65d/0xee0
[  261.004872][T11779]  pfkey_sendmsg+0xbfe/0x1090
[  261.006291][T11779]  __sock_sendmsg+0x21c/0x270
[  261.007935][T11779]  ____sys_sendmsg+0x505/0x830
[  261.009527][T11779]  ___sys_sendmsg+0x21f/0x2a0
[  261.010958][T11779]  __x64_sys_sendmsg+0x19b/0x260
[  261.012461][T11779] page last free pid 6564 tgid 6564 stack trace:
[  261.014486][T11779]  __free_frozen_pages+0xbc4/0xd30
[  261.016121][T11779]  stack_depot_save_flags+0x436/0x860
[  261.017756][T11779]  kasan_save_track+0x4f/0x80
[  261.019181][T11779]  __kasan_kmalloc+0x93/0xb0
[  261.020613][T11779]  __kmalloc_node_noprof+0x276/0x4e0
[  261.022286][T11779]  allocate_slab+0x16a/0x370
[  261.023876][T11779]  ___slab_alloc+0xbeb/0x1410
[  261.025303][T11779]  kmem_cache_alloc_lru_noprof+0x288/0x3d0
[  261.027197][T11779]  proc_alloc_inode+0x2a/0xc0
[  261.028642][T11779]  alloc_inode+0x6a/0x1b0
[  261.029957][T11779]  new_inode+0x22/0x170
[  261.031229][T11779]  proc_pid_make_inode+0x21/0x130
[  261.032896][T11779]  proc_pident_instantiate+0x6d/0x2b0
[  261.035068][T11779]  proc_pident_lookup+0x1b7/0x270
[  261.037038][T11779]  path_openat+0x1101/0x3830
[  261.038468][T11779]  do_filp_open+0x1fa/0x410
[  261.039884][T11779] 
[  261.040613][T11779] Memory state around the buggy address:
[  261.042408][T11779]  ffff8880311a1680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  261.044819][T11779]  ffff8880311a1700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  261.047189][T11779] >ffff8880311a1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  261.049622][T11779]                                            ^
[  261.051468][T11779]  ffff8880311a1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  261.053924][T11779]  ffff8880311a1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  261.056944][T11779] ==================================================================
[  261.059470][    C1] vkms_vblank_simulate: vblank timer overrun
[  261.073079][T11779] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  261.075761][T11779] CPU: 0 UID: 0 PID: 11779 Comm: syz.5.2397 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  261.080393][T11779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  261.084367][T11779] Call Trace:
[  261.085712][T11779]  <TASK>
[  261.086927][T11779]  dump_stack_lvl+0x99/0x250
[  261.088721][T11779]  ? __asan_memcpy+0x40/0x70
[  261.090518][T11779]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.092488][T11779]  ? __pfx__printk+0x10/0x10
[  261.094286][T11779]  vpanic+0x281/0x750
[  261.095858][T11779]  ? preempt_schedule+0xae/0xc0
[  261.097748][T11779]  ? __pfx_vpanic+0x10/0x10
[  261.099554][T11779]  ? preempt_schedule_common+0x83/0xd0
[  261.101688][T11779]  ? preempt_schedule+0xae/0xc0
[  261.103642][T11779]  ? __pfx_preempt_schedule+0x10/0x10
[  261.105711][T11779]  panic+0xb9/0xc0
[  261.107225][T11779]  ? __pfx_panic+0x10/0x10
[  261.108969][T11779]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  261.111271][T11779]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  261.113393][T11779]  check_panic_on_warn+0x89/0xb0
[  261.115350][T11779]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  261.117426][T11779]  end_report+0x78/0x160
[  261.119093][T11779]  kasan_report+0x129/0x150
[  261.120866][T11779]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  261.122936][T11779]  __xfrm_state_lookup+0x6ad/0x8d0
[  261.124972][T11779]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  261.127178][T11779]  ? xfrm_state_lookup+0x45/0x1e0
[  261.129106][T11779]  xfrm_state_lookup+0x11e/0x1e0
[  261.131092][T11779]  xfrm_new_ae+0x37d/0x980
[  261.132902][T11779]  ? __pfx_xfrm_new_ae+0x10/0x10
[  261.134847][T11779]  ? apparmor_capable+0x137/0x1b0
[  261.136850][T11779]  ? __nla_parse+0x40/0x60
[  261.138608][T11779]  xfrm_user_rcv_msg+0x7a3/0xab0
[  261.140634][T11779]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  261.142805][T11779]  ? __pfx___mutex_trylock_common+0x10/0x10
[  261.145122][T11779]  ? rcu_is_watching+0x15/0xb0
[  261.146980][T11779]  ? trace_contention_end+0x39/0x120
[  261.148983][T11779]  ? __mutex_lock+0x335/0x1360
[  261.150811][T11779]  netlink_rcv_skb+0x208/0x470
[  261.152662][T11779]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  261.154799][T11779]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  261.156907][T11779]  ? netlink_deliver_tap+0x2e/0x1b0
[  261.158966][T11779]  ? netlink_deliver_tap+0x2e/0x1b0
[  261.160964][T11779]  xfrm_netlink_rcv+0x79/0x90
[  261.162803][T11779]  netlink_unicast+0x82f/0x9e0
[  261.164629][T11779]  ? __pfx_netlink_unicast+0x10/0x10
[  261.166794][T11779]  ? netlink_sendmsg+0x642/0xb30
[  261.168723][T11779]  ? skb_put+0x11b/0x210
[  261.170391][T11779]  netlink_sendmsg+0x805/0xb30
[  261.172309][T11779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.174153][T11779]  ? aa_sock_msg_perm+0xf1/0x1d0
[  261.175683][T11779]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  261.177259][T11779]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.178924][T11779]  __sock_sendmsg+0x21c/0x270
[  261.180346][T11779]  ____sys_sendmsg+0x505/0x830
[  261.181822][T11779]  ? __pfx_____sys_sendmsg+0x10/0x10
[  261.183878][T11779]  ? import_iovec+0x74/0xa0
[  261.185682][T11779]  ___sys_sendmsg+0x21f/0x2a0
[  261.187512][T11779]  ? __pfx____sys_sendmsg+0x10/0x10
[  261.189525][T11779]  ? __fget_files+0x2a/0x420
[  261.191365][T11779]  ? __fget_files+0x3a0/0x420
[  261.193240][T11779]  __x64_sys_sendmsg+0x19b/0x260
[  261.195182][T11779]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  261.197259][T11779]  ? rcu_is_watching+0x15/0xb0
[  261.198702][T11779]  ? do_syscall_64+0xbe/0x3b0
[  261.200324][T11779]  do_syscall_64+0xfa/0x3b0
[  261.202181][T11779]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.204269][T11779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.206369][T11779]  ? exc_page_fault+0x9f/0xf0
[  261.207829][T11779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  261.209559][T11779] RIP: 0033:0x7fad80d8ebe9
[  261.210897][T11779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  261.218026][T11779] RSP: 002b:00007fad81c43038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  261.221397][T11779] RAX: ffffffffffffffda RBX: 00007fad80fb5fa0 RCX: 00007fad80d8ebe9
[  261.224563][T11779] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  261.227646][T11779] RBP: 00007fad80e11e19 R08: 0000000000000000 R09: 0000000000000000
[  261.230710][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  261.233852][T11779] R13: 00007fad80fb6038 R14: 00007fad80fb5fa0 R15: 00007fff15dfdc78
[  261.237025][T11779]  </TASK>
[  261.238970][T11779] Kernel Offset: disabled
[  261.240672][T11779] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:44:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000008eb5 RBX=00007f1f57feb540 RCX=00000000000000a2 RDX=0000000000000000
RSI=0000000000000001 RDI=00007f1f57feb5e0 RBP=0000000000000102 RSP=00007f1f57feb4a0
R8 =00007f1f4ce00000 R9 =0000000000000000 R10=0000000000000000 R11=00007f1f57feb550
R12=0000000000000001 R13=00007f1f5722d980 R14=0000000000000000 R15=00007f1f57feb5e0
RIP=00007f1f57050c4b RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1f57fec6c0 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1f4ce08000 CR3=0000000029331000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007f1f57feb5a0 00007f1f57feb580
XMM02=00007f1f57feb6e0 00007f1f57feb560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007f1f57feb5a0 XMM05=0000000000000000 00007f1f57feb6e0
XMM06=00007f1f57feb6e0 00007f1f57feb560 XMM07=00007f1f57feb5a0 00007f1f57feb580
XMM08=0000008a7c66a64b e1bbb450affff7ff XMM09=0000000000000000 00007f1f57212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000003a01 RBX=0000000000000000 RCX=ffffffff81a17501 RDX=0000000000000001
RSI=0000000000000018 RDI=ffffc90003b4e880 RBP=0000000000000000 RSP=ffffc90003b4e748
R8 =ffffc90003b4e897 R9 =1ffff92000769d12 R10=dffffc0000000000 R11=fffff52000769d13
R12=0000000000000003 R13=000000000000000d R14=fffff52000769d13 R15=1ffff92000769d10
RIP=ffffffff822301bd RFL=00000056 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fad81c436c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000000c0 CR3=000000002a69e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fad80f87498 00007fad80f87470 XMM03=00007fad80f874a8 00007fad80f874a0
XMM04=00007fad81aed100 00007fad80f87460 XMM05=00007fad80f87478 00007fad80f874c0
XMM06=00007fad80f874b8 00007fad80f874b0 XMM07=00007fad80f874a8 00007fad80f874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fad80e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
