last executing test programs:

3m36.078860979s ago: executing program 1 (id=24):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00')
fchdir(r0)
unshare(0x28000600)
unshare(0x66020000)
mount$9p_fd(0x0, &(0x7f0000000180)='./cgroup/file0\x00', 0x0, 0xa042, 0x0)

3m36.027754377s ago: executing program 1 (id=29):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000009e01000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r2}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2}, 0x38)

3m35.785836905s ago: executing program 1 (id=33):
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r0, 0x107, 0x1f, 0x0, &(0x7f00000001c0))

3m35.713859692s ago: executing program 1 (id=34):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r1 = open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x162)

3m35.636790248s ago: executing program 1 (id=37):
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x14, 0x9, 0xf8, 0xfffffffffffffe08, 0x0, 0x0})

3m33.876248244s ago: executing program 1 (id=58):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0e"], 0x22)

3m33.770493348s ago: executing program 32 (id=58):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0e"], 0x22)

2m40.237801394s ago: executing program 0 (id=645):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff01, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8e, 0x2, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x5, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x4, 0xb, 0x4, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0xbc, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x2, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x0, 0x8, 0x7f, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x1, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0xa, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x3, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

2m40.137690431s ago: executing program 0 (id=646):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

2m40.037920665s ago: executing program 0 (id=647):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000100), 0x6)
recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x12142, 0x0)

2m40.036436242s ago: executing program 0 (id=648):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x88, &(0x7f0000000140)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@bsdgroups}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@noinit_itable}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0x8004587d, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc1}})
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})

2m39.916254262s ago: executing program 0 (id=649):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x5, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000d9ff00000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)

2m38.985050621s ago: executing program 0 (id=659):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write(r0, &(0x7f0000000540)="95", 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x119)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0xffd, 0x108000})

2m38.868999124s ago: executing program 33 (id=659):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write(r0, &(0x7f0000000540)="95", 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x119)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0xffd, 0x108000})

1m2.214407852s ago: executing program 4 (id=1987):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x9c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x0)

1m2.08982214s ago: executing program 4 (id=1989):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000012c0)="6d380a5f3b52493e88531b22ebf474f3090718f6fb7589425fa3c7422378aa776a10", 0x22}, 0x1, 0x0, 0x0, 0x4040051}, 0x4000080)

1m2.012999195s ago: executing program 4 (id=1991):
creat(&(0x7f0000000100)='./file0\x00', 0x40)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
unlink(&(0x7f0000000180)='./file0\x00')

1m2.012662175s ago: executing program 4 (id=1992):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00')

1m1.9103896s ago: executing program 4 (id=1993):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x4b4b, &(0x7f0000000040))

1m1.542896734s ago: executing program 4 (id=1996):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @loopback, 0x7}, 0x1c)

1m1.363300689s ago: executing program 34 (id=1996):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @loopback, 0x7}, 0x1c)

14.574258876s ago: executing program 5 (id=2626):
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
readv(r1, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2)
tkill(r0, 0x8)

14.440209539s ago: executing program 5 (id=2627):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e24, 0xfa9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}], 0x2c)
r0 = io_uring_setup(0x4dc2, &(0x7f0000000200)={0x0, 0x40, 0x100, 0x0, 0x20})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1)

14.439944083s ago: executing program 5 (id=2628):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40}}}}}]}}]}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000001000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

13.132368461s ago: executing program 5 (id=2642):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

12.972115421s ago: executing program 5 (id=2643):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/rcu_normal', 0x40002, 0x142)
write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x2d, 'cpuacct'}]}, 0x9)

12.643587273s ago: executing program 5 (id=2645):
r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0)

12.466912765s ago: executing program 35 (id=2645):
r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0)

2.720712383s ago: executing program 3 (id=2780):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r0, 0x0, 0x0)

2.64814597s ago: executing program 3 (id=2781):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000240)={0x69, 0x3, 0x0, {0x3, 0x5b, 0x0, '\b\xe4\xbb\x1e?U,|?\xc7\xe9\xaa\xa2^\x12\x15\x02\x81?\x00\x01\x00\x00\x01A\xa5\xa3\xcf~m\x06\x00\x00\x00\xf2\x97(\xf7\x18\xefx\xc5\x90\xa2\xe5\xe5\xbfq\x8f\x92ZN\x97\xeb\xdaeu\x16\xc5\xcb\xf7@H\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\x01\x9eNX\xbfm\xb8}j\xfe\x00\xc5&\xcf\xb7x\xf5\xe4\xb5\x9cZ\x93p\xb8\x18.`\x8f\a\x00\x00\x00\x00\x00\x00\x00\xc0\xd7\x92\x9b\xb0\xfa\xeagR\xcb\xc1\x80\x92\xa0\x00\x14\x92\x18i\x95\xf1\x02\xe8J(PO\x8a\x81\xa2I1[\x06*\xa0\xf1Z\xdc'}}, 0x69)

2.647939528s ago: executing program 3 (id=2782):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0)

2.573244166s ago: executing program 3 (id=2783):
syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000005900)='./file0\x00', 0x2018000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x5979, &(0x7f000000b2c0)="$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")

2.314566269s ago: executing program 3 (id=2784):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, @loopback, @loopback}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.195401591s ago: executing program 3 (id=2785):
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x28, 0x0, 0x80000000000000, {{0x9, 0xfffffffffffffffc, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1, 0x0, 0x1000000})

1.129761711s ago: executing program 2 (id=2797):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.129462315s ago: executing program 2 (id=2798):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fcntl$dupfd(r2, 0x406, 0xffffffffffffffff)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mlock(&(0x7f0000002000/0x2000)=nil, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>0xffffffffffffffff, {0x30e}}, './file0\x00'})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRESOCT=0x0, @ANYBLOB, @ANYBLOB="76c97806680bbc98935eb43799c0f6255538915216ffd83778b6b16306e1bd635ef052787a1ea017fc88ac23583251cfe57410b0d221b6c20bacc40b948e99520f63e1ced0a8f833c37064c5d6284bf226cb35de62a9b4f9ebf1a372ee9854c186441d79435ba91217466e861273ef9a581517da91e10791c6da6f87e63436445af294098825c95cb919a6ca4853b49736c84923f9dba8fd9925df3ab340ea4b1bb7be9ab0ff4d3c0882a7a8af393a10ca3458a9d8940b441211de0c5e55a2a1dc465fae2eda4ad3acaf9d0381ddad6af7c785d10016585c68deacecdbabdf05", @ANYRES64=r4, @ANYRES64=r4, @ANYBLOB="187eda045027387c204d0c6f3b183ce1baf523cdd481abc5e44094e052a6da09b605b2a9ceec257c1b01abe6f80e505865bd9ac64dbdb0fc28a8beb3e193b1c812", @ANYRES64=r4], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r4}, 0x94)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0))
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r7, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg(r7, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)='7', 0x1}], 0x1}}], 0x1, 0x2c000011)
sendmmsg(r7, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001340)='r', 0x100000}], 0x1}}], 0x1, 0x4000025)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000180)=0x329)
signalfd(0xffffffffffffffff, 0x0, 0x0)

507.613196ms ago: executing program 6 (id=2800):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)

507.405678ms ago: executing program 6 (id=2801):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f00000003c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x40003}}, 0x5c)

423.974766ms ago: executing program 6 (id=2802):
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x1000000000000e)

423.737408ms ago: executing program 6 (id=2803):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x6, 0x1800}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x2c}, 0x20)

347.576588ms ago: executing program 6 (id=2804):
syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')

347.347962ms ago: executing program 6 (id=2805):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x105042, 0x1db)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000021c0)={0x0, 0x102})

194.39691ms ago: executing program 2 (id=2806):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8000000, 0x500, 0x32525942, 0x9, 0x0, [{}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x6}, {0x6}], 0x0, 0x8, 0x16, 0x1, 0x7}})

114.207743ms ago: executing program 2 (id=2807):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x40005, 0x4)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/4082, 0x1020}, 0x80181}], 0x400000000000039, 0x10000, 0x0)

113.852185ms ago: executing program 2 (id=2808):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

0s ago: executing program 2 (id=2809):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB='journal_transaction_names,metadata_checksum=crc32c,nochanges,compression=zstd,journal_flush_disabled,ratelimit_errors,inodes_32bit,reconstruct_alloc,str_hash=crc32c,fowner>', @ANYRESDEC, @ANYBLOB='\x00\x00'], 0x1, 0x593f, &(0x7f0000007d40)="$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")

kernel console output (not intermixed with test programs):

00003e syscall=16 compat=0 ip=0x7f2950b8e7eb code=0x7ffc0000
[  177.561151][ T9855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.615011][ T7793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.850599][ T9883] kAFS: unparsable volume name
[  178.849868][ T9906] delete_channel: no stack
[  178.852554][ T9905] delete_channel: no stack
[  179.041673][ T9912] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  179.077891][ T9912] bond1: entered promiscuous mode
[  179.080020][ T9912] bond1: entered allmulticast mode
[  179.082615][ T9912] 8021q: adding VLAN 0 to HW filter on device bond1
[  179.827699][ T9919] loop3: detected capacity change from 0 to 32768
[  179.832968][ T9919] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section
[  179.832968][ T9919] clean (size 2912):
[  179.832968][ T9919] flags:          0
[  179.832968][ T9919] journal_seq:    10
[  179.832968][ T9919] write_buffer_keys: btree=inodes level=0 u64s 8 type deleted 0:21474836481:0 len 0 ver 562954248388608: 
[  179.832968][ T9919] usage: type=key_version v=0
[  179.832968][ T9919] usage: type=reserved v=0
[  179.832968][ T9919] usage: type=reserved v=0
[  179.832968][ T9919] usage: type=reserved v=0
[  179.832968][ T9919] usage: type=reserved v=0
[  179.832968][ T9919] data_usage: btree: 1/1 [0]=2816
[  179.832968][ T9919] data_usage: journal: 1/1 [0]=0
[  179.832968][ T9919] data_usage: user: 1/1 [0]=16
[  179.832968][ T9919] dev_usage: dev=0  
[  179.832968][ T9919]   free: buckets=83 sectors=0 fragmented=0
[  179.832968][ T9919]   sb: buckets=25 sectors=6152 fragmented=248
[  179.832968][ T9919]   journal: buckets=8 sectors=2048 fragmented=0
[  179.832968][ T9919]   btree: buckets=11 sectors=2816 fragmented=0
[  179.832968][ T9919]   user: buckets=1 sectors=16 fragmented=240
[  179.832968][ T9919]   cached: buckets=0 sectors=0 fragmented=0
[  179.832968][ T9919]   parity: buckets=0 sectors=0 fragmented=0
[  179.832968][ T9919]   stripe: buckets=0 sectors=0 fragmented=0
[  179.832968][ T9919]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  179.832968][ T9919]   need_discard: buckets=0 sectors=0 fragmented=0
[  179.832968][ T9919] clock: read=0
[  179.832968][ T9919] clock:
[  179.833190][ T9919] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  180.303993][ T9944] loop4: detected capacity change from 0 to 128
[  180.307521][ T9944] EXT4-fs: Ignoring removed nobh option
[  180.327180][ T9944] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.340212][ T9944] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  180.393605][ T7793] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.721961][ T9966] loop4: detected capacity change from 0 to 16
[  180.730787][ T9966] erofs (device loop4): mounted with root inode @ nid 36.
[  180.743512][ T9966] erofs (device loop4): failed to decompress 1929 in[58, 4038] out[2639]
[  180.752870][ T9966] erofs (device loop4): read error -117 @ 39 of nid 36
[  181.669131][ T9979] loop4: detected capacity change from 0 to 64
[  181.854653][ T9983] syz.4.1496: attempt to access beyond end of device
[  181.854653][ T9983] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  181.861066][ T9983] Buffer I/O error on dev loop4, logical block 8388608, async page read
[  181.873977][ T9983] syz.4.1496: attempt to access beyond end of device
[  181.873977][ T9983] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  181.882375][ T9983] Buffer I/O error on dev loop4, logical block 8388608, async page read
[  182.358947][ T9999] loop3: detected capacity change from 0 to 1024
[  182.551326][ T9999] hfsplus: bad catalog file entry
[  182.640280][   T26] hfsplus: b-tree write err: -5, ino 3
[  182.642656][   T26] hfsplus: bad catalog file entry
[  182.790550][T10002] loop3: detected capacity change from 0 to 512
[  182.813527][T10002] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  182.851614][T10002] EXT4-fs (loop3): 1 truncate cleaned up
[  182.863647][T10002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.957361][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.627193][T10038] loop3: detected capacity change from 0 to 32768
[  183.628955][T10042] 9pnet_fd: Insufficient options for proto=fd
[  183.647219][T10038] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  183.655601][T10038] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  183.688855][T10038] __find_get_block_slow() failed. block=504403158265495552, b_blocknr=0, b_state=0x00000019, b_size=512, device loop3 blocksize: 512
[  183.694026][T10038] grow_buffers: requested out-of-range block 504403158265495552 for device loop3
[  183.697172][T10038] (syz.3.1521,10038,0):ocfs2_read_blocks:239 ERROR: status = -12
[  183.699875][T10038] (syz.3.1521,10038,0):ocfs2_search_chain:1852 ERROR: status = -12
[  183.702518][T10038] (syz.3.1521,10038,0):ocfs2_search_chain:1940 ERROR: status = -12
[  183.705472][T10038] (syz.3.1521,10038,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12
[  183.708275][T10038] (syz.3.1521,10038,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12
[  183.710956][T10038] (syz.3.1521,10038,0):__ocfs2_claim_clusters:2438 ERROR: status = -12
[  183.714009][T10038] (syz.3.1521,10038,0):__ocfs2_claim_clusters:2446 ERROR: status = -12
[  183.718856][T10038] (syz.3.1521,10038,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -12
[  183.721987][T10038] (syz.3.1521,10038,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -12
[  183.725256][T10038] (syz.3.1521,10038,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12
[  183.728648][T10038] (syz.3.1521,10038,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12
[  183.731953][T10038] (syz.3.1521,10038,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12
[  183.736587][T10038] (syz.3.1521,10038,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12
[  183.740773][T10038] (syz.3.1521,10038,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12
[  183.744010][T10038] (syz.3.1521,10038,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12
[  183.747688][T10038] (syz.3.1521,10038,0):ocfs2_mknod:360 ERROR: status = -12
[  183.750212][T10038] (syz.3.1521,10038,0):ocfs2_mknod:505 ERROR: status = -12
[  183.752736][T10038] (syz.3.1521,10038,0):ocfs2_mkdir:661 ERROR: status = -12
[  183.782704][ T6083] ocfs2: Unmounting device (7,3) on (node local)
[  184.026422][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'.
[  184.029613][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1531'.
[  184.223531][T10075] netlink: 'syz.4.1537': attribute type 6 has an invalid length.
[  184.243845][T10075] netlink: 'syz.4.1537': attribute type 6 has an invalid length.
[  184.367208][T10080] loop3: detected capacity change from 0 to 4096
[  184.388211][T10082] loop4: detected capacity change from 0 to 512
[  184.417017][T10082] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  184.420677][T10082] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  184.457435][T10082] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  184.475012][T10082] System zones: 0-2, 18-18, 34-35
[  184.483154][T10082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  184.513171][T10082] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  184.544796][T10082] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  184.558435][T10082] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  184.570640][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  184.570683][   T33] audit: type=1800 audit(1755257414.255:470): pid=10082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1541" name="file1" dev="loop4" ino=15 res=0 errno=0
[  184.582409][T10082] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1541: bg 0: block 353: padding at end of block bitmap is not set
[  184.632766][ T7793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.890170][T10103] loop3: detected capacity change from 0 to 128
[  184.913503][T10103] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  184.921599][T10103] ext4 filesystem being mounted at /487/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  184.959769][ T6083] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  185.259916][T10129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1562'.
[  185.301307][T10134] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1564'.
[  185.540024][T10138] loop3: detected capacity change from 0 to 32768
[  185.565137][T10138] (syz.3.1565,10138,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  185.565137][T10138] found = 1, set = 0, taken = 0, off = 0
[  185.585028][T10138] (syz.3.1565,10138,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  185.588400][T10138] (syz.3.1565,10138,0):ocfs2_check_volume:2404 ERROR: status = -22
[  185.591702][T10138] (syz.3.1565,10138,0):ocfs2_check_volume:2432 ERROR: status = -22
[  185.597664][T10138] (syz.3.1565,10138,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  185.601466][T10138] (syz.3.1565,10138,0):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode.
[  185.624514][T10138] (syz.3.1565,10138,0):ocfs2_fill_super:1177 ERROR: status = -22
[  185.843611][T10160] overlayfs: failed to clone upperpath
[  185.977043][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'.
[  186.007132][T10168] bridge_slave_1: left allmulticast mode
[  186.019681][T10168] bridge_slave_1: left promiscuous mode
[  186.022255][T10168] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.039027][T10168] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.731543][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1585'.
[  186.736253][ T5892] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  186.833014][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1588'.
[  186.838250][T10195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1588'.
[  186.874391][   T55] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  186.875239][ T5238] Bluetooth: hci3: command 0x1003 tx timeout
[  186.887464][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.893878][ T5892] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  186.905142][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.921387][ T5892] usb 4-1: config 0 descriptor??
[  187.196669][T10199] loop4: detected capacity change from 0 to 32768
[  187.242791][T10199] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  187.284379][T10199] XFS (loop4): Metadata corruption detected at __xfs_buf_ioend+0x342/0x6f0, xfs_inode block 0x2280 xfs_inode_buf_verify
[  187.289449][T10199] XFS (loop4): Unmount and run xfs_repair
[  187.291790][T10199] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  187.294880][T10199] 00000000: 49 4e 07 00 00 00 00 00 00 00 00 00 00 00 00 00  IN..............
[  187.298480][T10199] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  187.302185][T10199] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  187.306181][T10199] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  187.309812][T10199] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  187.313538][T10199] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  187.318903][T10199] 00000060: ff ff ff ff 01 81 e9 80 00 00 00 00 00 00 00 00  ................
[  187.322805][T10199] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  187.327091][T10199] XFS (loop4): metadata I/O error in "xfs_imap_to_bp+0x127/0x2f0" at daddr 0x2280 len 64 error 117
[  187.331509][T10199] XFS (loop4): Failed to read root inode 0x1140, error 117
[  187.335634][T10199] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  187.536064][ T5892] usbhid 4-1:0.0: can't add hid device: -71
[  187.538551][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  187.552726][ T5892] usb 4-1: USB disconnect, device number 19
[  187.617008][T10224] bridge0: entered promiscuous mode
[  187.618993][T10224] bridge0: entered allmulticast mode
[  188.420444][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'.
[  188.424031][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'.
[  188.619394][T10257] loop4: detected capacity change from 0 to 1024
[  188.635788][T10255] loop3: detected capacity change from 0 to 40427
[  188.664658][T10255] F2FS-fs (loop3): invalid crc value
[  188.697988][ T1097] hfsplus: b-tree write err: -5, ino 4
[  188.712859][T10255] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.720147][T10255] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  188.757246][ T6083] syz-executor: attempt to access beyond end of device
[  188.757246][ T6083] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  188.770208][ T6083] CPU: 0 UID: 0 PID: 6083 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  188.770228][ T6083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.770234][ T6083] Call Trace:
[  188.770239][ T6083]  <TASK>
[  188.770245][ T6083]  dump_stack_lvl+0x189/0x250
[  188.770265][ T6083]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.770279][ T6083]  ? __pfx_queue_work_on+0x10/0x10
[  188.770303][ T6083]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  188.770317][ T6083]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  188.770339][ T6083]  f2fs_handle_critical_error+0x37c/0x540
[  188.770360][ T6083]  f2fs_write_end_io+0x886/0xb60
[  188.770386][ T6083]  __submit_merged_bio+0x27a/0x6a0
[  188.770407][ T6083]  __submit_merged_write_cond+0x255/0x530
[  188.770427][ T6083]  f2fs_write_data_pages+0x261d/0x3000
[  188.770469][ T6083]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  188.770519][ T6083]  ? __mod_zone_page_state+0xd7/0x140
[  188.770542][ T6083]  ? folios_put_refs+0x560/0x640
[  188.770564][ T6083]  ? __lock_acquire+0xab9/0xd20
[  188.770625][ T6083]  ? do_raw_spin_lock+0x121/0x290
[  188.770651][ T6083]  ? do_raw_spin_unlock+0x4d/0x240
[  188.770664][ T6083]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  188.770680][ T6083]  do_writepages+0x32e/0x550
[  188.770706][ T6083]  ? do_raw_spin_unlock+0x4d/0x240
[  188.770722][ T6083]  filemap_fdatawrite+0x199/0x240
[  188.770737][ T6083]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  188.770786][ T6083]  ? do_raw_spin_unlock+0x4d/0x240
[  188.770797][ T6083]  f2fs_sync_dirty_inodes+0x31f/0x830
[  188.770811][ T6083]  f2fs_write_checkpoint+0x95a/0x1df0
[  188.770830][ T6083]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  188.770858][ T6083]  ? kill_f2fs_super+0x298/0x6c0
[  188.770868][ T6083]  kill_f2fs_super+0x2c3/0x6c0
[  188.770878][ T6083]  ? __pfx_kill_f2fs_super+0x10/0x10
[  188.770883][ T6083]  ? radix_tree_delete_item+0x2b6/0x400
[  188.770895][ T6083]  ? shrinker_free+0x2ce/0x3e0
[  188.770904][ T6083]  deactivate_locked_super+0xbc/0x130
[  188.770914][ T6083]  cleanup_mnt+0x425/0x4c0
[  188.770922][ T6083]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.770933][ T6083]  task_work_run+0x1d4/0x260
[  188.770943][ T6083]  ? __pfx_task_work_run+0x10/0x10
[  188.770951][ T6083]  ? __x64_sys_umount+0x122/0x160
[  188.770962][ T6083]  ? exit_to_user_mode_loop+0x40/0x110
[  188.770973][ T6083]  exit_to_user_mode_loop+0xec/0x110
[  188.770982][ T6083]  do_syscall_64+0x2bd/0x3b0
[  188.770992][ T6083]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.771000][ T6083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.771007][ T6083]  ? exc_page_fault+0x9f/0xf0
[  188.771016][ T6083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.771022][ T6083] RIP: 0033:0x7f328d78ff17
[  188.771030][ T6083] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  188.771036][ T6083] RSP: 002b:00007ffe083f5cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  188.771045][ T6083] RAX: 0000000000000000 RBX: 00007f328d811c05 RCX: 00007f328d78ff17
[  188.771049][ T6083] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe083f5d70
[  188.771053][ T6083] RBP: 00007ffe083f5d70 R08: 0000000000000000 R09: 0000000000000000
[  188.771058][ T6083] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe083f6e00
[  188.771062][ T6083] R13: 00007f328d811c05 R14: 000000000002e023 R15: 00007ffe083f6e40
[  188.771075][ T6083]  </TASK>
[  188.771078][ T6083] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  189.513610][T10305] syz.3.1632: attempt to access beyond end of device
[  189.513610][T10305] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0
[  189.521078][T10305] efs: cannot read volume header
[  189.819272][T10307] loop4: detected capacity change from 0 to 32768
[  189.989549][T10316] loop3: detected capacity change from 0 to 32768
[  190.217928][T10330] futex_wake_op: syz.3.1644 tries to shift op by -1; fix this program
[  190.364620][ T5892] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  190.484936][T10334] loop3: detected capacity change from 0 to 32768
[  190.520520][ T5892] usb 5-1: Using ep0 maxpacket: 32
[  190.535427][ T5892] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  190.539049][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.564223][ T5892] usb 5-1: config 0 descriptor??
[  190.771015][ T5892] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  190.783080][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  190.791592][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  190.799760][ T5892] usb 5-1: media controller created
[  190.814995][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  190.979701][ T5892] az6027: usb out operation failed. (-71)
[  190.985749][ T5892] az6027: usb out operation failed. (-71)
[  190.988017][ T5892] stb0899_attach: Driver disabled by Kconfig
[  190.990614][ T5892] az6027: no front-end attached
[  190.990614][ T5892] 
[  190.993418][ T5892] az6027: usb out operation failed. (-71)
[  190.995587][ T5892] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  190.999033][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  191.007817][ T5892] dvb-usb: schedule remote query interval to 400 msecs.
[  191.010437][ T5892] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  191.015332][ T5892] usb 5-1: USB disconnect, device number 15
[  191.052195][ T5892] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  191.143298][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1655'.
[  191.147114][T10355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1655'.
[  191.157262][T10355] gretap0: entered promiscuous mode
[  191.161025][T10355] gretap0: left promiscuous mode
[  191.318024][T10361] bridge1: entered allmulticast mode
[  191.542918][T10372] loop4: detected capacity change from 0 to 3
[  191.751578][T10383] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  191.757035][T10383] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  191.971014][T10389] loop3: detected capacity change from 0 to 40427
[  191.974358][ T5892] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  192.032969][T10389] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.038775][T10389] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  192.077422][ T6083] syz-executor: attempt to access beyond end of device
[  192.077422][ T6083] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  192.082696][ T6083] CPU: 0 UID: 0 PID: 6083 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  192.082713][ T6083] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.082719][ T6083] Call Trace:
[  192.082725][ T6083]  <TASK>
[  192.082730][ T6083]  dump_stack_lvl+0x189/0x250
[  192.082750][ T6083]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.082762][ T6083]  ? __pfx_queue_work_on+0x10/0x10
[  192.082770][ T6083]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  192.082784][ T6083]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.082807][ T6083]  f2fs_handle_critical_error+0x37c/0x540
[  192.082828][ T6083]  f2fs_write_end_io+0x886/0xb60
[  192.082854][ T6083]  __submit_merged_bio+0x27a/0x6a0
[  192.082875][ T6083]  __submit_merged_write_cond+0x255/0x530
[  192.082889][ T6083]  f2fs_write_data_pages+0x261d/0x3000
[  192.082932][ T6083]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.082989][ T6083]  ? folios_put_refs+0x559/0x640
[  192.083011][ T6083]  ? __lock_acquire+0xab9/0xd20
[  192.083034][ T6083]  ? do_raw_spin_lock+0x121/0x290
[  192.083056][ T6083]  ? do_raw_spin_unlock+0x4d/0x240
[  192.083069][ T6083]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.083086][ T6083]  do_writepages+0x32e/0x550
[  192.083105][ T6083]  ? do_raw_spin_unlock+0x4d/0x240
[  192.083119][ T6083]  filemap_fdatawrite+0x199/0x240
[  192.083134][ T6083]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  192.083187][ T6083]  ? do_raw_spin_unlock+0x4d/0x240
[  192.083198][ T6083]  f2fs_sync_dirty_inodes+0x31f/0x830
[  192.083221][ T6083]  f2fs_write_checkpoint+0x95a/0x1df0
[  192.083257][ T6083]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  192.083300][ T6083]  ? kill_f2fs_super+0x298/0x6c0
[  192.083316][ T6083]  kill_f2fs_super+0x2c3/0x6c0
[  192.083332][ T6083]  ? __pfx_kill_f2fs_super+0x10/0x10
[  192.083341][ T6083]  ? radix_tree_delete_item+0x2b6/0x400
[  192.083361][ T6083]  ? shrinker_free+0x2ce/0x3e0
[  192.083376][ T6083]  deactivate_locked_super+0xbc/0x130
[  192.083385][ T6083]  cleanup_mnt+0x425/0x4c0
[  192.083397][ T6083]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.083414][ T6083]  task_work_run+0x1d4/0x260
[  192.083431][ T6083]  ? __pfx_task_work_run+0x10/0x10
[  192.083443][ T6083]  ? __x64_sys_umount+0x122/0x160
[  192.083463][ T6083]  ? exit_to_user_mode_loop+0x40/0x110
[  192.083479][ T6083]  exit_to_user_mode_loop+0xec/0x110
[  192.083489][ T6083]  do_syscall_64+0x2bd/0x3b0
[  192.083502][ T6083]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.083516][ T6083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.083527][ T6083]  ? exc_page_fault+0x9f/0xf0
[  192.083567][ T6083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.083576][ T6083] RIP: 0033:0x7f328d78ff17
[  192.083587][ T6083] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  192.083596][ T6083] RSP: 002b:00007ffe083f5cb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  192.083610][ T6083] RAX: 0000000000000000 RBX: 00007f328d811c05 RCX: 00007f328d78ff17
[  192.083617][ T6083] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe083f5d70
[  192.083624][ T6083] RBP: 00007ffe083f5d70 R08: 0000000000000000 R09: 0000000000000000
[  192.083630][ T6083] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe083f6e00
[  192.083638][ T6083] R13: 00007f328d811c05 R14: 000000000002edac R15: 00007ffe083f6e40
[  192.083660][ T6083]  </TASK>
[  192.083666][ T6083] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  192.227977][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  192.233969][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  192.238936][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  192.245724][ T5892] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  192.249263][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.252405][ T5892] usb 5-1: Product: syz
[  192.254913][ T5892] usb 5-1: Manufacturer: syz
[  192.256798][ T5892] usb 5-1: SerialNumber: syz
[  192.260682][ T5892] usb 5-1: config 0 descriptor??
[  192.263409][T10386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  192.267334][T10386] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  192.276207][ T5892] usb 5-1: ucan: probing device on interface #0
[  192.438430][T10399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1672'.
[  193.084563][ T5892] usb 5-1: ucan: failed to retrieve device info
[  193.087222][ T5892] usb 5-1: ucan: probe failed; try to update the device firmware
[  193.103360][ T5892] usb 5-1: USB disconnect, device number 16
[  193.646430][T10439] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1692'.
[  193.650699][T10439] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1692'.
[  193.810964][T10449] bridge: RTM_NEWNEIGH with invalid ether address
[  194.001388][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.003659][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.336336][T10483] macvlan2: entered promiscuous mode
[  194.601756][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1726'.
[  194.605236][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1726'.
[  194.976654][ T2306] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  195.224692][ T2306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.251015][ T2306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.275060][ T2306] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  195.286823][ T2306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.351075][ T2306] usb 4-1: config 0 descriptor??
[  195.838641][ T2306] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0
[  195.842038][ T2306] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0
[  195.856087][ T2306] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0009/input/input12
[  195.985621][ T2306] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  196.049996][ T2306] usb 4-1: USB disconnect, device number 20
[  197.622268][ T5892] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  197.786543][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.790127][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.794263][ T5892] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  197.797805][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.805692][ T5892] usb 4-1: config 0 descriptor??
[  198.267333][ T5892] samsung 0003:0419:0600.000A: collection stack underflow
[  198.271213][ T5892] samsung 0003:0419:0600.000A: item 0 0 0 12 parsing failed
[  198.275985][ T5892] samsung 0003:0419:0600.000A: parse failed
[  198.278633][ T5892] samsung 0003:0419:0600.000A: probe with driver samsung failed with error -22
[  198.491121][ T5892] usb 4-1: USB disconnect, device number 21
[  198.868182][  T792] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  199.039263][  T792] usb 5-1: Using ep0 maxpacket: 16
[  199.044757][  T792] usb 5-1: config 0 has an invalid interface number: 142 but max is 0
[  199.048237][  T792] usb 5-1: config 0 has no interface number 0
[  199.062375][  T792] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1
[  199.071816][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.075180][  T792] usb 5-1: Product: syz
[  199.076885][  T792] usb 5-1: Manufacturer: syz
[  199.078782][  T792] usb 5-1: SerialNumber: syz
[  199.095262][  T792] usb 5-1: config 0 descriptor??
[  199.327662][  T792] usb 5-1: Found UVC 0.00 device syz (1bcf:0b40)
[  199.331520][  T792] usb 5-1: Forcing UVC version to 1.0a
[  199.334746][  T792] usb 5-1: No valid video chain found.
[  199.357133][  T792] usb 5-1: USB disconnect, device number 17
[  199.364120][T10603] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1771'.
[  199.780517][T10624] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1780'.
[  199.783979][T10624] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  200.532813][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1789'.
[  200.642085][T10636] loop4: detected capacity change from 0 to 32768
[  200.659333][T10636] (syz.4.1786,10636,0):ocfs2_get_clusters:616 ERROR: status = -34
[  200.662769][T10636] (syz.4.1786,10636,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -34
[  200.696720][T10636] (syz.4.1786,10636,0):ocfs2_map_slot_buffers:378 ERROR: status = -34
[  200.705684][T10636] (syz.4.1786,10636,0):ocfs2_init_slot_info:426 ERROR: status = -34
[  200.712617][T10636] (syz.4.1786,10636,0):ocfs2_initialize_super:2222 ERROR: status = -34
[  200.717037][T10636] (syz.4.1786,10636,0):ocfs2_fill_super:1177 ERROR: status = -34
[  201.386670][T10669] tipc: Started in network mode
[  201.388905][T10669] tipc: Node identity a6044d5381dd, cluster identity 4711
[  201.403254][T10669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.408282][T10669] syzkaller0: entered promiscuous mode
[  201.410674][T10669] syzkaller0: entered allmulticast mode
[  201.457626][T10669] tipc: Resetting bearer <eth:syzkaller0>
[  201.464498][T10667] tipc: Resetting bearer <eth:syzkaller0>
[  201.469315][T10662] loop3: detected capacity change from 0 to 32768
[  201.479403][T10662] (syz.3.1798,10662,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  201.492592][T10662] (syz.3.1798,10662,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  201.500805][T10667] tipc: Disabling bearer <eth:syzkaller0>
[  201.507059][T10662] JBD2: Ignoring recovery information on journal
[  201.527701][T10662] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  201.535668][T10662] (syz.3.1798,10662,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xf53e8faf, computed 0xf6557595. Applying ECC.
[  201.601940][ T6083] ocfs2: Unmounting device (7,3) on (node local)
[  201.911072][T10698] netlink: 'syz.3.1815': attribute type 1 has an invalid length.
[  202.047967][T10705] loop4: detected capacity change from 0 to 256
[  202.277831][ T2306] IPVS: starting estimator thread 0...
[  202.280087][T10727] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  202.347846][T10740] cifs: Bad value for 'port'
[  202.376280][T10734] IPVS: using max 87 ests per chain, 208800 per kthread
[  203.393090][T10764] loop3: detected capacity change from 0 to 256
[  204.113470][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1847'.
[  204.117200][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1847'.
[  204.212967][T10830] loop3: detected capacity change from 0 to 32768
[  204.234973][T10830] overlayfs: upper fs needs to support d_type.
[  204.237849][T10830] overlayfs: upper fs does not support tmpfile.
[  204.244043][T10830] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  204.251070][T10830] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  204.251070][T10830] 
[  204.261758][T10830] ERROR: (device loop3): remounting filesystem as read-only
[  204.264376][T10830] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[  204.759853][   T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  204.930133][   T24] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50
[  204.938051][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.942044][   T24] usb 4-1: Product: syz
[  204.944090][   T24] usb 4-1: Manufacturer: syz
[  204.946993][   T24] usb 4-1: SerialNumber: syz
[  204.963257][   T24] usb 4-1: config 0 descriptor??
[  204.975446][   T24] usb 4-1: Waiting for MOTU Microbook II to boot up...
[  204.982244][   T24] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22
[  204.985688][   T24] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  205.193357][   T24] usb 4-1: USB disconnect, device number 22
[  205.212510][   T33] audit: type=1326 audit(1755257434.043:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.4.1861" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2950b8ebe9 code=0x7ffc0000
[  205.220728][   T33] audit: type=1326 audit(1755257434.052:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.4.1861" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2950b8ebe9 code=0x7ffc0000
[  205.240998][   T33] audit: type=1326 audit(1755257434.052:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.4.1861" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f2950b8ebe9 code=0x7ffc0000
[  205.248529][   T33] audit: type=1326 audit(1755257434.052:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.4.1861" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2950b8ebe9 code=0x7ffc0000
[  205.255787][   T33] audit: type=1326 audit(1755257434.052:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10883 comm="syz.4.1861" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2950b8ebe9 code=0x7ffc0000
[  205.851745][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'.
[  205.932918][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1874'.
[  206.094527][T10931] loop3: detected capacity change from 0 to 128
[  206.485676][ T2306] IPVS: starting estimator thread 0...
[  206.592432][T10942] IPVS: using max 86 ests per chain, 206400 per kthread
[  207.264470][T10973] loop3: detected capacity change from 0 to 512
[  207.272271][T10973] EXT4-fs: Ignoring removed i_version option
[  207.410805][T10973] EXT4-fs (loop3): 1 orphan inode deleted
[  207.423062][T10973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.573176][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'.
[  207.932615][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.616323][T11020] loop3: detected capacity change from 0 to 40427
[  208.626483][T11020] F2FS-fs (loop3): invalid crc value
[  208.661130][T11020] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  208.664998][T11020] F2FS-fs (loop3): Start checkpoint disabled!
[  208.670536][T11020] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  208.678563][   T33] audit: type=1800 audit(1755257437.280:476): pid=11020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1902" name="file1" dev="loop3" ino=10 res=0 errno=0
[  208.914004][   T33] audit: type=1800 audit(1755257437.486:477): pid=11038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1902" name="file1" dev="loop3" ino=10 res=0 errno=0
[  209.109954][T11046] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  209.122129][T11046] CIFS: Unable to determine destination address
[  209.428221][   T32] kworker/u9:1: attempt to access beyond end of device
[  209.428221][   T32] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  209.434489][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  209.434502][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.434507][   T32] Workqueue: writeback wb_workfn (flush-7:3)
[  209.434522][   T32] Call Trace:
[  209.434525][   T32]  <TASK>
[  209.434529][   T32]  dump_stack_lvl+0x189/0x250
[  209.434541][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.434549][   T32]  ? __pfx_queue_work_on+0x10/0x10
[  209.434556][   T32]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  209.434565][   T32]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  209.434579][   T32]  f2fs_handle_critical_error+0x37c/0x540
[  209.434592][   T32]  f2fs_write_end_io+0x886/0xb60
[  209.434607][   T32]  __submit_merged_bio+0x27a/0x6a0
[  209.434620][   T32]  __submit_merged_write_cond+0x255/0x530
[  209.434632][   T32]  f2fs_write_data_pages+0x261d/0x3000
[  209.434657][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  209.434673][   T32]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  209.434696][   T32]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  209.434705][   T32]  ? look_up_lock_class+0x74/0x170
[  209.434719][   T32]  ? trace_f2fs_writepages+0x7f/0x200
[  209.434729][   T32]  ? f2fs_write_node_pages+0x478/0x6e0
[  209.434740][   T32]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  209.434755][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  209.434765][   T32]  do_writepages+0x32e/0x550
[  209.434777][   T32]  ? reacquire_held_locks+0x127/0x1d0
[  209.434784][   T32]  ? writeback_sb_inodes+0x384/0x1010
[  209.434796][   T32]  __writeback_single_inode+0x145/0xff0
[  209.434804][   T32]  ? do_raw_spin_unlock+0x4d/0x240
[  209.434815][   T32]  writeback_sb_inodes+0x6c7/0x1010
[  209.434827][   T32]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  209.434843][   T32]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  209.434870][   T32]  ? rcu_is_watching+0x15/0xb0
[  209.434882][   T32]  wb_writeback+0x43b/0xaf0
[  209.434894][   T32]  ? queue_io+0x3c1/0x590
[  209.434904][   T32]  ? __pfx_wb_writeback+0x10/0x10
[  209.434916][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.434927][   T32]  wb_workfn+0x409/0xef0
[  209.434941][   T32]  ? __pfx_wb_workfn+0x10/0x10
[  209.434951][   T32]  ? __lock_acquire+0xab9/0xd20
[  209.434981][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  209.434993][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.435001][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  209.435007][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  209.435021][   T32]  process_scheduled_works+0xae1/0x17b0
[  209.435042][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  209.435057][   T32]  worker_thread+0x8a0/0xda0
[  209.435077][   T32]  kthread+0x711/0x8a0
[  209.435087][   T32]  ? __pfx_worker_thread+0x10/0x10
[  209.435094][   T32]  ? __pfx_kthread+0x10/0x10
[  209.435103][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.435111][   T32]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.435118][   T32]  ? __pfx_kthread+0x10/0x10
[  209.435126][   T32]  ret_from_fork+0x3fc/0x770
[  209.435136][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  209.435146][   T32]  ? __switch_to_asm+0x39/0x70
[  209.435154][   T32]  ? __switch_to_asm+0x33/0x70
[  209.435161][   T32]  ? __pfx_kthread+0x10/0x10
[  209.435170][   T32]  ret_from_fork_asm+0x1a/0x30
[  209.435186][   T32]  </TASK>
[  209.437017][   T32] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  210.014618][T11064] Invalid source name
[  210.018370][T11064] UBIFS error (pid: 11064): cannot open "ubifs", error -22
[  210.160868][T11061] loop3: detected capacity change from 0 to 32768
[  210.170682][T11061] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1913 (11061)
[  210.173328][T11076] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  210.210031][T11061] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  210.230763][T11061] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  210.243037][T11061] BTRFS info (device loop3): disk space caching is enabled
[  210.252263][T11061] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  210.328320][T11061] BTRFS info (device loop3): rebuilding free space tree
[  210.373088][T11061] BTRFS info (device loop3): disabling free space tree
[  210.378109][T11061] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  210.382576][T11061] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  210.584028][ T6083] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  210.895963][T11130] sd 0:0:0:0: PR command failed: 1026
[  210.897965][T11130] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  210.900177][T11130] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  211.157091][T11152] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1936'.
[  211.336826][T11167] loop3: detected capacity change from 0 to 512
[  211.359502][T11167] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  211.371402][T11167] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  211.375767][T11167] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1942: Corrupt directory, running e2fsck is recommended
[  211.402556][T11167] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  211.406615][T11167] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1942: corrupted in-inode xattr: invalid ea_ino
[  211.413043][T11167] EXT4-fs (loop3): Remounting filesystem read-only
[  211.417867][T11167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.426710][T11167] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  211.431354][T11167] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  211.435027][T11167] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1942: Corrupt directory, running e2fsck is recommended
[  211.438528][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'.
[  211.474086][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.184301][ T5892] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  212.358548][ T5892] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4
[  212.363183][ T5892] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  212.374583][ T5892] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  212.378604][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.381927][ T5892] usb 5-1: Product: syz
[  212.383721][ T5892] usb 5-1: Manufacturer: syz
[  212.385720][ T5892] usb 5-1: SerialNumber: syz
[  212.527124][T11211] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1953'.
[  212.646896][ T5892] usb 5-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  212.654463][ T5892] usb 5-1: found format II with max.bitrate = 3, frame size=7
[  212.661447][ T5892] usb 5-1: 2:1 : unknown format tag 0x3 is detected.  processed as MPEG.
[  212.666643][ T5892] usb 5-1: found format II with max.bitrate = 3, frame size=7
[  212.709649][ T5892] usb 5-1: USB disconnect, device number 18
[  212.796842][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.845948][T11257] tipc: Started in network mode
[  212.851528][T11257] tipc: Node identity ac1414aa, cluster identity 4711
[  212.855645][T11257] tipc: Enabled bearer <udp:s>, priority 10
[  213.371323][T11280] loop3: detected capacity change from 0 to 32768
[  213.411327][T11280] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  213.457228][T11280] XFS (loop3): Ending clean mount
[  213.467184][T11280] XFS (loop3): Quotacheck needed: Please wait.
[  213.500319][T11300] loop4: detected capacity change from 0 to 8192
[  213.524602][T11300] syz.4.1974: attempt to access beyond end of device
[  213.524602][T11300] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  213.530606][T11300] Buffer I/O error on dev loop4, logical block 57847, async page read
[  213.538225][T11300] syz.4.1974: attempt to access beyond end of device
[  213.538225][T11300] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  213.544683][T11300] Buffer I/O error on dev loop4, logical block 57847, async page read
[  213.546559][T11280] XFS (loop3): Quotacheck: Done.
[  213.548455][   T33] audit: type=1800 audit(1755257441.835:478): pid=11300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1974" name="file2" dev="loop4" ino=1048637 res=0 errno=0
[  213.628361][ T6083] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  213.995368][T11346] input: syz1 as /devices/virtual/input/input13
[  214.070345][ T5892] tipc: Node number set to 2886997162
[  214.074283][T11357] loop3: detected capacity change from 0 to 1024
[  214.081161][T11357] EXT4-fs: Ignoring removed oldalloc option
[  214.101760][T11357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.146469][T11365] ieee802154 phy0 wpan0: encryption failed: -22
[  214.150484][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.236614][T11374] loop4: detected capacity change from 0 to 512
[  214.241686][T11374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  214.253957][T11374] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  214.265618][T11374] EXT4-fs (loop4): 1 truncate cleaned up
[  214.271487][T11374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.311555][ T7793] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /359/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  214.325231][ T7793] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  214.335969][ T7793] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  214.341219][ T7793] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /359/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  214.359240][ T7793] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  214.369163][ T7793] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  214.374348][ T7793] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /359/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  214.382738][ T7793] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  214.391169][ T7793] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  214.398336][ T7793] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /359/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  214.406285][ T7793] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  214.414223][ T7793] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  214.421257][ T7793] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz-executor: path /359/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  214.429543][ T7793] EXT4-fs error (device loop4): empty_inline_dir:1760: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  214.436629][ T7793] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  214.444483][ T7793] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  214.450623][ T7793] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  214.456335][ T7793] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  214.463773][ T7793] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  214.469825][ T7793] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 2147483648, rec_len 0, name_len 0inline size 60
[  214.512997][T11382] loop3: detected capacity change from 0 to 32768
[  214.522443][T11382] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1995 (11382)
[  214.551568][T11382] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  214.558217][T11382] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  214.563256][T11382] BTRFS info (device loop3): using free-space-tree
[  214.640269][ T7793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.675839][T11382] BTRFS info (device loop3): rebuilding free space tree
[  214.725798][ T5870] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.757680][T11382] BTRFS info (device loop3): balance: start -susage=34359738372,drange=7..526332,limit=4294967292..6
[  214.765810][T11382] BTRFS info (device loop3): balance: ended with status: 0
[  214.811080][ T6083] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  214.865533][ T5870] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.008193][ T5870] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.051043][T11413] loop3: detected capacity change from 0 to 512
[  215.062964][T11413] EXT4-fs: Ignoring removed oldalloc option
[  215.098073][T11413] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1998: Parent and EA inode have the same ino 15
[  215.115794][T11413] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1998: Parent and EA inode have the same ino 15
[  215.141571][T11413] EXT4-fs (loop3): 1 orphan inode deleted
[  215.141704][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.145659][T11413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.151560][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.156672][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.159600][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.162140][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.167134][ T5870] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.204774][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.486037][T11471] loop3: detected capacity change from 0 to 2048
[  215.493138][T11471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.508831][ T5870] bridge_slave_1: left allmulticast mode
[  215.512647][ T5870] bridge_slave_1: left promiscuous mode
[  215.515087][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.532738][ T5870] bridge_slave_0: left allmulticast mode
[  215.537841][ T5870] bridge_slave_0: left promiscuous mode
[  215.544132][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.738018][ T5870] bond2 (unregistering): (slave gretap1): Releasing backup interface
[  215.807714][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  215.882691][T11488] netlink: 'syz.2.2005': attribute type 1 has an invalid length.
[  215.989424][   T10] usb 4-1: Using ep0 maxpacket: 32
[  215.994215][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  215.999012][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  215.999303][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.003588][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  216.006052][   T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e
[  216.016268][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.019734][   T10] usb 4-1: Product: syz
[  216.020215][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.021815][   T10] usb 4-1: Manufacturer: syz
[  216.027521][   T10] usb 4-1: SerialNumber: syz
[  216.037707][ T5870] bond0 (unregistering): Released all slaves
[  216.040725][   T10] usb 4-1: config 0 descriptor??
[  216.051570][   T10] iguanair 4-1:0.0: probe with driver iguanair failed with error -12
[  216.163130][ T5870] bond1 (unregistering): (slave veth3): Releasing active interface
[  216.166548][ T5870] veth0_to_bond: entered promiscuous mode
[  216.171535][ T5870] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface
[  216.176756][ T5870] bond1 (unregistering): Released all slaves
[  216.188867][ T5870] bond2 (unregistering): (slave bond3): Releasing backup interface
[  216.193283][ T5870] bond2 (unregistering): Released all slaves
[  216.273474][   T10] usb 4-1: USB disconnect, device number 23
[  216.332391][ T5870] bond3 (unregistering): Released all slaves
[  216.401125][T11416] chnl_net:caif_netlink_parms(): no params data found
[  216.420352][T11571] netlink: 'syz.2.2007': attribute type 29 has an invalid length.
[  216.450713][T11571] netlink: 'syz.2.2007': attribute type 29 has an invalid length.
[  216.505522][ T5870] tipc: Left network mode
[  216.622500][T11416] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.629318][T11416] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.675974][T11416] bridge_slave_0: entered allmulticast mode
[  216.681537][T11416] bridge_slave_0: entered promiscuous mode
[  216.690596][T11416] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.705479][T11416] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.708820][T11416] bridge_slave_1: entered allmulticast mode
[  216.712841][T11416] bridge_slave_1: entered promiscuous mode
[  217.039482][ T5870] batman_adv: batadv0: Interface deactivated: wlan0
[  217.087900][ T5870] batman_adv: batadv0: Removing interface: wlan0
[  217.127914][T11416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.163103][T11416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.230941][ T5870] hsr_slave_0: left promiscuous mode
[  217.236122][ T5870] hsr_slave_1: left promiscuous mode
[  217.238668][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.241519][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.244853][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.247737][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.263891][ T5870] veth1_macvtap: left promiscuous mode
[  217.266398][ T5870] veth0_macvtap: left promiscuous mode
[  217.268887][ T5870] veth1_vlan: left promiscuous mode
[  217.271415][ T5870] veth0_vlan: left promiscuous mode
[  217.315105][   T55] Bluetooth: hci1: command tx timeout
[  217.355186][ T5892] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  217.545402][ T5892] usb 4-1: Using ep0 maxpacket: 8
[  217.551857][ T5892] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  217.557191][ T5892] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  217.563831][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.566799][ T5892] usb 4-1: Product: syz
[  217.572768][ T5892] usb 4-1: Manufacturer: syz
[  217.587016][ T5892] usb 4-1: SerialNumber: syz
[  217.599430][ T5892] usb 4-1: config 0 descriptor??
[  217.641792][ T5892] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  217.645214][ T5892] usb 4-1: setting power ON
[  217.647874][ T5892] dvb-usb: bulk message failed: -22 (2/0)
[  217.674605][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  217.694275][ T5892] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  217.697862][ T5892] usb 4-1: media controller created
[  217.726651][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  217.770739][ T5892] usb 4-1: selecting invalid altsetting 6
[  217.773565][ T5892] usb 4-1: digital interface selection failed (-22)
[  217.778660][ T5892] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  217.791781][ T5892] usb 4-1: setting power OFF
[  217.794180][ T5892] dvb-usb: bulk message failed: -22 (2/0)
[  217.798116][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  217.801989][ T5892] (NULL device *): no alternate interface
[  217.829065][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  217.848737][ T5892] usb 4-1: USB disconnect, device number 24
[  218.211765][ T5870] team0 (unregistering): Port device team_slave_1 removed
[  218.244807][ T5870] team0 (unregistering): Port device team_slave_0 removed
[  218.832049][T11738] kernel profiling enabled (shift: 17)
[  219.169981][T11416] team0: Port device team_slave_0 added
[  219.177469][T11416] team0: Port device team_slave_1 added
[  219.190571][  T792] syz1: Port: 1 Link DOWN
[  219.252854][T11416] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.257167][T11416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.267919][T11416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.285421][T11416] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.297309][T11416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.314655][T11416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.766563][   T55] Bluetooth: hci1: command tx timeout
[  220.186373][T11416] hsr_slave_0: entered promiscuous mode
[  220.189636][T11416] hsr_slave_1: entered promiscuous mode
[  220.281676][T11817] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2019'.
[  220.824185][T11416] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  220.830678][T11416] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  220.845914][T11416] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  220.853223][T11416] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  220.912526][T11416] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.931634][T11416] 8021q: adding VLAN 0 to HW filter on device team0
[  220.943029][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.945821][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.963419][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.965732][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.081356][T11416] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.219789][T11943] pim6reg: entered allmulticast mode
[  221.227314][T11943] pim6reg: left allmulticast mode
[  221.272268][T11416] veth0_vlan: entered promiscuous mode
[  221.276726][T11416] veth1_vlan: entered promiscuous mode
[  221.311516][T11416] veth0_macvtap: entered promiscuous mode
[  221.317550][T11416] veth1_macvtap: entered promiscuous mode
[  221.329004][T11416] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.335419][T11416] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.344834][T11731] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.353626][T11731] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.393279][T11731] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.442367][T11731] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.519612][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.522257][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.567846][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.573813][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.651010][   T33] audit: type=1326 audit(1755257449.412:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d578ebe9 code=0x7ffc0000
[  221.687620][   T33] audit: type=1326 audit(1755257449.412:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d578ebe9 code=0x7ffc0000
[  221.708965][   T33] audit: type=1326 audit(1755257449.431:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fb1d578ebe9 code=0x7ffc0000
[  221.732945][   T33] audit: type=1326 audit(1755257449.431:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d578ebe9 code=0x7ffc0000
[  221.740162][   T33] audit: type=1326 audit(1755257449.431:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11984 comm="syz.2.2036" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d578ebe9 code=0x7ffc0000
[  221.845054][T11983] loop5: detected capacity change from 0 to 32768
[  221.865236][T11983] XFS: attr2 mount option is deprecated.
[  221.885874][T11957] loop3: detected capacity change from 0 to 32768
[  221.906591][T11983] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  221.909931][T11983] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  221.937110][   T55] Bluetooth: hci1: command tx timeout
[  221.952577][T11983] XFS (loop5): Ending clean mount
[  221.952996][T11957] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  221.962308][T11983] XFS (loop5): Quotacheck needed: Please wait.
[  222.007779][T11983] XFS (loop5): Quotacheck: Done.
[  222.025504][T11416] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.162488][ T6083] ocfs2: Unmounting device (7,3) on (node local)
[  222.574252][T12051] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  222.592322][T12051] overlayfs: failed to set xattr on upper
[  222.603039][T12051] overlayfs: ...falling back to index=off.
[  222.622766][T12051] overlayfs: ...falling back to uuid=null.
[  222.771305][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'.
[  222.776096][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'.
[  222.933253][T12061] loop3: detected capacity change from 0 to 8192
[  222.943987][T12061] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  222.974391][T12061] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  222.977112][T12061] ntfs3(loop3): ino=5, mi_enum_attr
[  223.504721][T12085] sctp: [Deprecated]: syz.5.2054 (pid 12085) Use of struct sctp_assoc_value in delayed_ack socket option.
[  223.504721][T12085] Use struct sctp_sack_info instead
[  223.909553][T12118] netlink: 'syz.5.2063': attribute type 9 has an invalid length.
[  223.926322][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2063'.
[  224.157487][   T55] Bluetooth: hci1: command tx timeout
[  224.321360][T12145] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  224.328409][T12145] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  224.452165][   T33] audit: type=1326 audit(1755257452.031:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.2.2076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d578ebe9 code=0x7ffc0000
[  224.462877][   T33] audit: type=1326 audit(1755257452.031:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.2.2076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d578ebe9 code=0x7ffc0000
[  224.470661][   T33] audit: type=1326 audit(1755257452.041:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.2.2076" exe="/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fb1d578ebe9 code=0x7ffc0000
[  224.479628][   T33] audit: type=1326 audit(1755257452.041:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.2.2076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d578ebe9 code=0x7ffc0000
[  224.488988][   T33] audit: type=1326 audit(1755257452.041:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.2.2076" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d578ebe9 code=0x7ffc0000
[  224.649010][ T5875] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  224.706246][T12175] loop3: detected capacity change from 0 to 32768
[  224.760837][T12175]  loop3: p9 p11 p16
[  224.778827][ T5298]  loop3: p9 p11 p16
[  224.818109][ T5875] usb 6-1: config 129 has an invalid interface number: 180 but max is 0
[  224.830777][ T5875] usb 6-1: config 129 has no interface number 0
[  224.833260][ T5875] usb 6-1: config 129 interface 180 has no altsetting 0
[  224.836109][ T5875] usb 6-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=9a.87
[  224.867729][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.989622][ T6994] udevd[6994]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[  224.995897][ T6352] udevd[6352]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[  224.999460][ T6996] udevd[6996]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory
[  225.031073][ T6352] udevd[6352]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[  225.039891][ T6994] udevd[6994]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory
[  225.072768][ T6352] udevd[6352]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[  225.108816][ T5875] usb 6-1: string descriptor 0 read error: -71
[  225.124724][ T5875] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251
[  225.129421][ T5875] gspca_sn9c20x: Write register 1000 failed -71
[  225.132312][ T5875] gspca_sn9c20x: Device initialization failed
[  225.135118][ T5875] gspca_sn9c20x 6-1:129.180: probe with driver gspca_sn9c20x failed with error -71
[  225.141457][ T5875] usb 6-1: USB disconnect, device number 2
[  225.672715][   T47] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  225.880450][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  225.892170][   T47] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  225.916526][   T47] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  225.921210][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.941684][   T47] usb 4-1: config 0 descriptor??
[  225.947884][T12229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  225.956194][T12229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  226.241764][T12239] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  226.402849][   T47] lenovo 0003:17EF:6067.000B: hidraw0: USB HID v1.01 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0
[  226.446305][T12239] usb 6-1: config 0 has an invalid interface number: 71 but max is 0
[  226.449143][T12239] usb 6-1: config 0 has no interface number 0
[  226.451150][T12239] usb 6-1: config 0 interface 71 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  226.454577][T12239] usb 6-1: config 0 interface 71 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023
[  226.459638][T12239] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0
[  226.462777][T12239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.465439][T12239] usb 6-1: Product: syz
[  226.466967][T12239] usb 6-1: Manufacturer: syz
[  226.468526][T12239] usb 6-1: SerialNumber: syz
[  226.471921][T12239] usb 6-1: config 0 descriptor??
[  226.474370][T12245] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  226.477097][T12245] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  226.481232][T12239] kvaser_usb 6-1:0.71: error -ENODEV: Cannot get usb endpoint(s)
[  226.621688][  T792] usb 4-1: USB disconnect, device number 25
[  226.708245][T12245] loop5: detected capacity change from 0 to 1024
[  226.713295][T12245] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  226.745576][T12245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.416045][   T47] usb 6-1: USB disconnect, device number 3
[  227.653027][T12300] usb usb8: usbfs: process 12300 (syz.3.2097) did not claim interface 0 before use
[  228.176476][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.255601][T12307] loop5: detected capacity change from 0 to 512
[  228.286859][T12307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  228.298452][T12307] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  228.314923][T12307] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[  228.320568][T12307] System zones: 0-1, 15-15, 18-18, 34-34
[  228.323115][T12307] EXT4-fs (loop5): orphan cleanup on readonly fs
[  228.325289][T12307] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  228.339350][T12307] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  228.345732][T12317] loop3: detected capacity change from 0 to 2048
[  228.351221][T12319] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2103'.
[  228.352545][T12307] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  228.361494][T12317] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  228.366518][T12307] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2100: bg 0: block 40: padding at end of block bitmap is not set
[  228.390716][T12307] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  228.398680][T12307] EXT4-fs (loop5): 1 truncate cleaned up
[  228.402053][T12307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  228.434498][T12307] EXT4-fs (loop5): shut down requested (0)
[  228.458139][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.565526][T12345] kAFS: No cell specified
[  228.569551][T12347] loop3: detected capacity change from 0 to 128
[  228.594985][T12347] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  228.601677][T12347] ext4 filesystem being mounted at /684/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  228.687350][ T6083] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.816563][T12372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'.
[  228.822342][T12372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2118'.
[  228.992892][T12391] loop5: detected capacity change from 0 to 2048
[  229.123254][T12401] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2129'.
[  229.164297][T12407] openvswitch: netlink: Unknown key attributes 2
[  229.304369][T12421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2135'.
[  229.427335][T12437] trusted_key: encrypted_key: keylen parameter is missing
[  229.521074][T12448] loop3: detected capacity change from 0 to 4096
[  229.537434][T12448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.561617][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.976977][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'.
[  230.034775][T12511] loop5: detected capacity change from 0 to 512
[  230.053440][T12511] EXT4-fs: Ignoring removed oldalloc option
[  230.074402][T12511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.080764][T12511] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  230.166480][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.337081][   T47] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  230.497736][   T47] usb 4-1: Using ep0 maxpacket: 16
[  230.534778][   T47] usb 4-1: config 0 has an invalid interface number: 145 but max is 0
[  230.553294][   T47] usb 4-1: config 0 has no interface number 0
[  230.599325][   T47] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  230.629541][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.654437][   T47] usb 4-1: Product: syz
[  230.660866][   T47] usb 4-1: Manufacturer: syz
[  230.667485][   T47] usb 4-1: SerialNumber: syz
[  230.727303][   T47] usb 4-1: config 0 descriptor??
[  230.799310][   T47] hub 4-1:0.145: bad descriptor, ignoring hub
[  230.804321][   T47] hub 4-1:0.145: probe with driver hub failed with error -5
[  230.816488][   T47] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input15
[  231.344782][ T5875] usb 4-1: USB disconnect, device number 26
[  231.702177][T12600] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2184'.
[  231.912110][T12606] loop3: detected capacity change from 0 to 1024
[  231.925297][T12606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.955593][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.732696][T12630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2189'.
[  232.774635][T12633] loop5: detected capacity change from 0 to 8
[  232.844045][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2191'.
[  233.201434][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  233.294629][T12652] loop3: detected capacity change from 0 to 32768
[  233.311832][T12652] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  233.333383][T12652] XFS (loop3): Ending clean mount
[  233.343928][T12652] XFS (loop3): Quotacheck needed: Please wait.
[  233.361761][   T24] usb 6-1: Using ep0 maxpacket: 8
[  233.369826][   T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  233.374368][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.375324][T12652] XFS (loop3): Quotacheck: Done.
[  233.377827][   T24] usb 6-1: Product: syz
[  233.384819][   T24] usb 6-1: Manufacturer: syz
[  233.388030][   T24] usb 6-1: SerialNumber: syz
[  233.392729][   T24] usb 6-1: config 0 descriptor??
[  233.407851][   T24] radio-usb-si4713 6-1:0.0: Si4713 development board discovered: (10C4:8244)
[  233.429458][ T6083] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  233.641657][   T24] radio-usb-si4713 6-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  233.646524][   T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  233.663051][   T24] usb 6-1: USB disconnect, device number 4
[  234.527348][T12706] comedi comedi0: comedi_config --init_data is deprecated
[  234.593892][T12711] bond0: entered allmulticast mode
[  234.595649][T12711] bond_slave_0: entered allmulticast mode
[  234.597498][T12711] bond_slave_1: entered allmulticast mode
[  234.668700][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'.
[  234.680241][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'.
[  234.787827][T12725] QAT: failed to copy from user cfg_data.
[  234.952107][T12743] kernel read not supported for file /ٓ㎀Dg@]eh (pid: 12743 comm: syz.3.2210)
[  234.957606][   T33] audit: type=1800 audit(1755257461.862:489): pid=12743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2210" name=D99310E38E804467405DA6A29A65F1CE1868 dev="mqueue" ino=26163 res=0 errno=0
[  235.009717][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2211'.
[  235.014012][T12746] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  235.173289][T12753] loop5: detected capacity change from 0 to 8192
[  235.466983][T12782] openvswitch: netlink: Message has 8 unknown bytes.
[  235.655465][T12800] loop5: detected capacity change from 0 to 2048
[  235.666226][T12800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  235.741024][T12814] loop3: detected capacity change from 0 to 1024
[  235.807283][T12814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  235.818885][T12814] ext4 filesystem being mounted at /720/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.833112][   T33] audit: type=1800 audit(1755257462.686:490): pid=12814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2229" name="file1" dev="loop3" ino=15 res=0 errno=0
[  235.835146][T12814] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.2229: lblock 0 mapped to illegal pblock 0 (length 1)
[  235.857780][T12814] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  235.866042][T12814] EXT4-fs (loop3): This should not happen!! Data will be lost
[  235.866042][T12814] 
[  235.870247][T12814] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.2229: lblock 0 mapped to illegal pblock 0 (length 1)
[  235.882561][T12814] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  235.888148][T12814] EXT4-fs (loop3): This should not happen!! Data will be lost
[  235.888148][T12814] 
[  235.955774][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  236.110550][T12852] loop5: detected capacity change from 0 to 8
[  236.148803][T12852] SQUASHFS error: lzo decompression failed, data probably corrupt
[  236.151450][T12852] SQUASHFS error: Failed to read block 0x144: -5
[  236.172433][T12852] SQUASHFS error: Unable to read metadata cache entry [142]
[  236.180263][T12852] SQUASHFS error: Unable to read inode 0x11f
[  236.475334][T12891] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2248'.
[  236.496115][T12891] netlink: 'syz.3.2248': attribute type 1 has an invalid length.
[  236.775463][T12926] loop5: detected capacity change from 0 to 256
[  236.852904][T12926] FAT-fs (loop5): Directory bread(block 64) failed
[  236.855756][T12926] FAT-fs (loop5): Directory bread(block 65) failed
[  236.860245][T12926] FAT-fs (loop5): Directory bread(block 66) failed
[  236.862980][T12926] FAT-fs (loop5): Directory bread(block 67) failed
[  236.865785][T12926] FAT-fs (loop5): Directory bread(block 68) failed
[  236.869665][T12926] FAT-fs (loop5): Directory bread(block 69) failed
[  236.872636][T12926] FAT-fs (loop5): Directory bread(block 70) failed
[  236.879126][T12926] FAT-fs (loop5): Directory bread(block 71) failed
[  236.884632][T12926] FAT-fs (loop5): Directory bread(block 72) failed
[  236.887102][T12926] FAT-fs (loop5): Directory bread(block 73) failed
[  236.890077][T12935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2260'.
[  237.181788][T12964] loop5: detected capacity change from 0 to 1024
[  237.211345][T12964] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  237.228145][T12964] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2267: Invalid block bitmap block 0 in block_group 0
[  237.238111][T12964] Quota error (device loop5): write_blk: dquota write failed
[  237.240535][T12964] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  237.271083][T12964] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2267: Failed to acquire dquot type 0
[  237.276264][T12964] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.2267: Freeing blocks not in datazone - block = 0, count = 4096
[  237.284336][T12964] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2267: Invalid inode bitmap blk 0 in block_group 0
[  237.296745][T12964] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  237.301399][T12964] EXT4-fs (loop5): 1 orphan inode deleted
[  237.308836][T12964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.362246][   T36] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8
[  237.369328][   T36] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u10:1: Failed to release dquot type 0
[  237.378987][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.968650][T13008] netlink: 'syz.5.2278': attribute type 10 has an invalid length.
[  237.971626][T13008] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2278'.
[  237.976119][T13008] batman_adv: batadv0: Adding interface: vlan1
[  237.978339][T13008] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.001394][T13008] batman_adv: batadv0: Interface activated: vlan1
[  238.370997][T13021] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.381954][T13021] bond0: (slave rose0): Enslaving as an active interface with an up link
[  238.578829][T13046] dvmrp0: entered allmulticast mode
[  239.655590][T13092] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  240.492431][T12239] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  240.653040][T12239] usb 6-1: Using ep0 maxpacket: 8
[  240.661788][T12239] usb 6-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  240.666212][T12239] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.669750][T12239] usb 6-1: Product: syz
[  240.671744][T12239] usb 6-1: Manufacturer: syz
[  240.673847][T12239] usb 6-1: SerialNumber: syz
[  240.680924][T12239] usb 6-1: config 0 descriptor??
[  240.693360][T12239] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  240.706402][T12239] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18
[  240.915417][   T24] usb 6-1: USB disconnect, device number 5
[  241.099813][T13166] netlink: 'syz.2.2319': attribute type 2 has an invalid length.
[  241.104125][T13166] netlink: 'syz.2.2319': attribute type 2 has an invalid length.
[  241.405186][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2329'.
[  241.617449][T13209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2338'.
[  241.620790][T13209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2338'.
[  241.783562][ T5892] kernel write not supported for file /vcs (pid: 5892 comm: kworker/0:5)
[  241.823631][T13203] loop5: detected capacity change from 0 to 40427
[  241.828460][T13203] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0)
[  241.834321][T13203] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  241.850868][T13203] F2FS-fs (loop5): invalid crc value
[  241.913030][T13203] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  241.928029][T13203] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  241.931170][T13203] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  241.973731][T11416] syz-executor: attempt to access beyond end of device
[  241.973731][T11416] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  241.980216][T11416] CPU: 1 UID: 0 PID: 11416 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  241.980235][T11416] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.980242][T11416] Call Trace:
[  241.980246][T11416]  <TASK>
[  241.980251][T11416]  dump_stack_lvl+0x189/0x250
[  241.980272][T11416]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.980286][T11416]  ? __pfx_queue_work_on+0x10/0x10
[  241.980298][T11416]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  241.980312][T11416]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  241.980335][T11416]  f2fs_handle_critical_error+0x37c/0x540
[  241.980358][T11416]  f2fs_write_end_io+0x886/0xb60
[  241.980386][T11416]  __submit_merged_bio+0x27a/0x6a0
[  241.980409][T11416]  __submit_merged_write_cond+0x255/0x530
[  241.980428][T11416]  f2fs_write_data_pages+0x261d/0x3000
[  241.980470][T11416]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  241.980507][T11416]  ? is_bpf_text_address+0x26/0x2b0
[  241.980547][T11416]  ? kernel_text_address+0xa5/0xe0
[  241.980564][T11416]  ? __kernel_text_address+0xd/0x40
[  241.980580][T11416]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  241.980607][T11416]  ? stack_trace_save+0x9c/0xe0
[  241.980626][T11416]  ? __lock_acquire+0xab9/0xd20
[  241.980655][T11416]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  241.980670][T11416]  do_writepages+0x32e/0x550
[  241.980697][T11416]  ? do_raw_spin_unlock+0x4d/0x240
[  241.980716][T11416]  filemap_fdatawrite+0x199/0x240
[  241.980733][T11416]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  241.980816][T11416]  ? do_raw_spin_unlock+0x4d/0x240
[  241.980836][T11416]  f2fs_sync_dirty_inodes+0x31f/0x830
[  241.980861][T11416]  f2fs_write_checkpoint+0x95a/0x1df0
[  241.980892][T11416]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  241.980942][T11416]  ? kill_f2fs_super+0x298/0x6c0
[  241.980960][T11416]  kill_f2fs_super+0x2c3/0x6c0
[  241.980977][T11416]  ? __pfx_kill_f2fs_super+0x10/0x10
[  241.980987][T11416]  ? radix_tree_delete_item+0x2b6/0x400
[  241.981009][T11416]  ? shrinker_free+0x2ce/0x3e0
[  241.981022][T11416]  deactivate_locked_super+0xbc/0x130
[  241.981038][T11416]  cleanup_mnt+0x425/0x4c0
[  241.981050][T11416]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.981068][T11416]  task_work_run+0x1d4/0x260
[  241.981087][T11416]  ? __pfx_task_work_run+0x10/0x10
[  241.981100][T11416]  ? __x64_sys_umount+0x122/0x160
[  241.981120][T11416]  ? exit_to_user_mode_loop+0x40/0x110
[  241.981139][T11416]  exit_to_user_mode_loop+0xec/0x110
[  241.981156][T11416]  do_syscall_64+0x2bd/0x3b0
[  241.981171][T11416]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.981185][T11416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.981197][T11416]  ? exc_page_fault+0x9f/0xf0
[  241.981214][T11416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.981225][T11416] RIP: 0033:0x7fd49c58ff17
[  241.981237][T11416] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  241.981247][T11416] RSP: 002b:00007ffd0a720868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  241.981261][T11416] RAX: 0000000000000000 RBX: 00007fd49c611c05 RCX: 00007fd49c58ff17
[  241.981268][T11416] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0a720920
[  241.981275][T11416] RBP: 00007ffd0a720920 R08: 0000000000000000 R09: 0000000000000000
[  241.981282][T11416] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd0a7219b0
[  241.981290][T11416] R13: 00007fd49c611c05 R14: 000000000003a3fa R15: 00007ffd0a7219f0
[  241.981312][T11416]  </TASK>
[  241.981318][T11416] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  242.399626][T13236] loop5: detected capacity change from 0 to 512
[  242.407059][T13236] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  242.414302][T13236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102]
[  242.420772][T13236] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2343: corrupted in-inode xattr: e_value size too large
[  242.427042][T13236] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2343: couldn't read orphan inode 15 (err -117)
[  242.433855][T13236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.094502][T13252] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  243.424658][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.562708][T13295] bond0: entered promiscuous mode
[  243.564436][T13295] bond_slave_0: entered promiscuous mode
[  243.566914][T13295] bond_slave_1: entered promiscuous mode
[  243.569614][T13295] bond0: left allmulticast mode
[  243.574755][T13295] bond_slave_0: left allmulticast mode
[  243.576927][T13295] bond_slave_1: left allmulticast mode
[  243.732306][   T33] audit: type=1326 audit(1755257470.075:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13315 comm="syz.5.2366" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd49c58ebe9 code=0x0
[  243.870549][ T5316] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  244.041669][ T5316] usb 4-1: Using ep0 maxpacket: 32
[  244.046920][ T5316] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.051444][ T5316] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.058859][ T5316] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  244.062500][ T5316] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  244.067455][ T5316] usb 4-1: Product: syz
[  244.069225][ T5316] usb 4-1: Manufacturer: syz
[  244.079339][ T5316] hub 4-1:4.0: USB hub found
[  244.292415][ T5316] hub 4-1:4.0: 2 ports detected
[  244.507472][ T5316] hub 4-1:4.0: hub_hub_status failed (err = -71)
[  244.512794][ T5316] hub 4-1:4.0: config failed, can't get hub status (err -71)
[  244.545493][ T5316] usb 4-1: USB disconnect, device number 27
[  245.360850][T13375] loop3: detected capacity change from 0 to 512
[  245.375367][T13375] EXT4-fs: Ignoring removed i_version option
[  245.385477][T13375] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  245.401768][T13375] EXT4-fs (loop3): 1 truncate cleaned up
[  245.410106][T13375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.435269][T13375] EXT4-fs warning (device loop3): ext4_group_extend:1886: will only finish group (8193 blocks, 7937 new)
[  245.441130][T13375] EXT4-fs warning (device loop3): ext4_group_extend:1891: can't read last block, resize aborted
[  245.471964][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.535463][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2386'.
[  245.877327][T13403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.187594][T13413] netlink: del zone limit has 4 unknown bytes
[  247.570617][ T5892] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  247.651810][T13465] loop5: detected capacity change from 0 to 1024
[  247.691949][T13465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  247.696915][T13465] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.715744][T13465] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.2413: lblock 0 mapped to illegal pblock 0 (length 1)
[  247.722912][T13465] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  247.726901][T13465] EXT4-fs (loop5): This should not happen!! Data will be lost
[  247.726901][T13465] 
[  247.734063][T13465] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: comm syz.5.2413: lblock 0 mapped to illegal pblock 0 (length 1)
[  247.739895][   T33] audit: type=1800 audit(1755257473.817:492): pid=13465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2413" name="file1" dev="loop5" ino=15 res=0 errno=0
[  247.756195][ T5892] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  247.759298][ T5892] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  247.765558][ T5892] usb 4-1: config 0 has no interface number 0
[  247.768027][ T5892] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  247.772003][ T5892] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  247.779718][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  247.783684][ T5892] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  247.788100][ T5892] usb 4-1: config 0 interface 52 has no altsetting 0
[  247.797681][ T5892] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  247.800769][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  247.803725][ T5892] usb 4-1: Product: syz
[  247.805515][ T5892] usb 4-1: SerialNumber: syz
[  247.816817][ T5892] usb 4-1: config 0 descriptor??
[  248.045177][ T5892] input: syz (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input19
[  248.269436][ T5892] usb 4-1: USB disconnect, device number 28
[  249.044881][T13580] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  249.938443][T13617] loop3: detected capacity change from 0 to 64
[  250.261895][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2455'.
[  250.809964][T13683] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2469'.
[  251.125969][T13707] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2477'.
[  251.287882][T13708] 9pnet_fd: Insufficient options for proto=fd
[  251.897017][T13718] netlink: 'syz.3.2482': attribute type 4 has an invalid length.
[  252.190221][ T5316] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  252.354655][ T5316] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  252.358185][ T5316] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  252.361923][ T5316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  252.366091][ T5316] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  252.372316][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2499'.
[  252.377593][ T5316] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  252.382765][ T5316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.386952][ T5316] usb 6-1: Product: syz
[  252.388763][ T5316] usb 6-1: Manufacturer: syz
[  252.391220][ T5316] usb 6-1: SerialNumber: syz
[  252.402238][ T5316] usb 6-1: config 0 descriptor??
[  252.413146][ T5316] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected
[  252.420748][ T5316] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  252.426213][ T5316] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  252.685566][ T5875] usb 6-1: USB disconnect, device number 6
[  252.700257][ T5875] garmin_gps 6-1:0.0: device disconnected
[  253.506975][ T5875] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  253.624366][T13802] loop5: detected capacity change from 0 to 32768
[  253.670308][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  253.675497][T13802] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  253.685139][ T5875] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  253.702505][ T5875] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  253.717346][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  253.722059][ T5875] usb 4-1: SerialNumber: syz
[  253.878232][T11416] ocfs2: Unmounting device (7,5) on (node local)
[  253.965609][ T5875] usb 4-1: USB disconnect, device number 29
[  254.113996][T13833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2509'.
[  254.120010][T13833] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2509'.
[  254.131211][T13833] netlink: 'syz.5.2509': attribute type 6 has an invalid length.
[  254.311967][T13842] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2512'.
[  254.320913][T13842] netlink: zone id is out of range
[  254.323095][T13842] netlink: zone id is out of range
[  254.326269][T13842] netlink: zone id is out of range
[  254.328532][T13842] netlink: zone id is out of range
[  254.330687][T13842] netlink: zone id is out of range
[  254.332999][T13842] netlink: zone id is out of range
[  254.335161][T13842] netlink: zone id is out of range
[  254.341911][T13842] netlink: zone id is out of range
[  254.344217][T13842] netlink: zone id is out of range
[  254.346371][T13842] netlink: zone id is out of range
[  254.877728][T13860] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  255.043507][T13873] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2520'.
[  255.091736][T13878] No source specified
[  255.485004][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2532'.
[  255.718246][T13925] loop3: detected capacity change from 0 to 512
[  255.725298][T13925] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  255.736231][T13925] EXT4-fs (loop3): 1 truncate cleaned up
[  255.741617][T13925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.717113][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.069417][T13976] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  257.327236][T13994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'.
[  257.561348][T14012] loop3: detected capacity change from 0 to 512
[  257.583011][T14012] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0000)
[  257.720340][T14027] loop5: detected capacity change from 0 to 512
[  257.733792][T14027] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  257.755376][T14027] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2569: bad orphan inode 16
[  257.759860][T14027] ext4_test_bit(bit=15, block=4) = 0
[  257.761668][T14027] EXT4-fs (loop5): 1 orphan inode deleted
[  257.770581][T14027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.798001][T14036] loop3: detected capacity change from 0 to 256
[  257.806819][T11416] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.856743][T14042] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  257.860959][T14042] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  257.984899][T14052] netlink: 'syz.3.2574': attribute type 3 has an invalid length.
[  258.209923][T14070] XFS (nullb0): Invalid superblock magic number
[  258.676261][T14101] pimreg: entered allmulticast mode
[  258.689841][T14101] pimreg: left allmulticast mode
[  258.837191][T14116] loop5: detected capacity change from 0 to 256
[  258.846838][T14116] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  258.938370][T14125] loop5: detected capacity change from 0 to 1024
[  258.970950][T14129] loop3: detected capacity change from 0 to 512
[  258.974350][T14129] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  258.992253][T14129] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  258.998548][T14129] System zones: 1-12
[  259.000305][T14129] EXT4-fs (loop3): orphan cleanup on readonly fs
[  259.010126][T14129] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2602: invalid indirect mapped block 12 (level 1)
[  259.024848][T14129] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2602: invalid indirect mapped block 2 (level 2)
[  259.032384][T14129] EXT4-fs (loop3): 1 truncate cleaned up
[  259.032667][T14136] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2603'.
[  259.035905][T14129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  259.080967][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  259.644201][T14182] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2614'.
[  259.829242][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  259.832277][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  259.898754][ T5316] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  260.109583][ T5316] usb 6-1: Using ep0 maxpacket: 8
[  260.113602][ T5316] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  260.117111][ T5316] usb 6-1: config 179 has no interface number 0
[  260.119869][ T5316] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  260.124928][ T5316] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  260.130065][ T5316] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  260.134890][ T5316] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  260.139646][ T5316] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  260.145537][ T5316] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  260.149393][ T5316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.157398][T14176] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  260.850662][   T24] usb 6-1: USB disconnect, device number 7
[  260.850662][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  260.856705][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  261.248122][T14211] loop3: detected capacity change from 0 to 32768
[  261.256539][T14211] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  261.278894][T14211] XFS (loop3): Ending clean mount
[  261.283223][T14211] XFS (loop3): Quotacheck needed: Please wait.
[  261.310952][T14211] XFS (loop3): Quotacheck: Done.
[  261.414595][ T6083] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  262.087356][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  262.250044][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  262.254489][   T24] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  262.258198][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.271020][   T24] usb 6-1: config 0 descriptor??
[  262.530630][T14240] Bluetooth: hci0: unsupported parameter 4096
[  262.533193][T14240] Bluetooth: hci0: invalid len left 4, exp >= 243
[  262.561660][   T24] usbhid 6-1:0.0: can't add hid device: -71
[  262.569072][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  262.585822][   T24] usb 6-1: USB disconnect, device number 8
[  262.779518][T14271] overlayfs: upper fs does not support file handles, falling back to index=off.
[  262.783059][T14271] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  262.940291][   T33] audit: type=1326 audit(1755257488.035:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.2639" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328d78ebe9 code=0x7ffc0000
[  262.949950][   T33] audit: type=1326 audit(1755257488.035:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.2639" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328d78ebe9 code=0x7ffc0000
[  262.960895][   T33] audit: type=1326 audit(1755257488.044:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.2639" exe="/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f328d78ebe9 code=0x7ffc0000
[  262.969230][   T33] audit: type=1326 audit(1755257488.044:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.2639" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328d78ebe9 code=0x7ffc0000
[  262.984884][   T33] audit: type=1326 audit(1755257488.044:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14288 comm="syz.3.2639" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328d78ebe9 code=0x7ffc0000
[  263.152641][T14297] loop5: detected capacity change from 0 to 1024
[  263.182709][T14297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.193485][T14292] loop3: detected capacity change from 0 to 32768
[  263.202302][T14292] XFS: ikeep mount option is deprecated.
[  263.239443][T14292] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  263.251627][T14292] XFS (loop3): Ending clean mount
[  263.257137][T11416] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  263.258485][T14292] XFS (loop3): Quotacheck needed: Please wait.
[  263.268848][T11416] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  263.305139][T14292] XFS (loop3): Quotacheck: Done.
[  263.330309][T13318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.407270][ T6083] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  263.642941][T14324] loop3: detected capacity change from 0 to 1024
[  264.369641][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  264.378278][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  264.382690][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  264.386747][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  264.391834][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  264.560784][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2653'.
[  264.624798][T14378] netlink: 'syz.2.2653': attribute type 1 has an invalid length.
[  264.628180][T14378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2653'.
[  264.730728][T14332] chnl_net:caif_netlink_parms(): no params data found
[  265.585552][T14332] bridge0: port 1(bridge_slave_0) entered blocking state
[  265.591780][T14332] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.596226][T14332] bridge_slave_0: entered allmulticast mode
[  265.602040][T14332] bridge_slave_0: entered promiscuous mode
[  265.606108][T14332] bridge0: port 2(bridge_slave_1) entered blocking state
[  265.608857][T14332] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.611674][T14332] bridge_slave_1: entered allmulticast mode
[  265.614970][T14332] bridge_slave_1: entered promiscuous mode
[  265.644982][T14332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.650563][T14332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.680846][T14332] team0: Port device team_slave_0 added
[  265.684235][T14332] team0: Port device team_slave_1 added
[  265.731515][T14332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.735277][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.745768][T14332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.760287][T14332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.763139][T14332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.778671][T14332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  266.038664][T14332] hsr_slave_0: entered promiscuous mode
[  266.042089][T14332] hsr_slave_1: entered promiscuous mode
[  266.046807][T14332] debugfs: 'hsr0' already exists in 'hsr'
[  266.049670][T14332] Cannot create hsr debugfs directory
[  266.413257][T14332] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  266.423325][T14332] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  266.439993][T14332] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  266.446642][T14332] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  266.590720][ T5238] Bluetooth: hci1: command tx timeout
[  266.635113][T14332] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.660924][T14332] 8021q: adding VLAN 0 to HW filter on device team0
[  266.674188][ T1229] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.677024][ T1229] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.689302][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.692584][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.973316][T14332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.138220][T14757] loop3: detected capacity change from 0 to 32768
[  267.156624][T14757] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2682 (14757)
[  267.191594][T14757] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.195570][T14757] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  267.216086][T14757] BTRFS info (device loop3): using free-space-tree
[  267.279082][T14332] veth0_vlan: entered promiscuous mode
[  267.288523][T14332] veth1_vlan: entered promiscuous mode
[  267.322299][T14332] veth0_macvtap: entered promiscuous mode
[  267.333296][T14332] veth1_macvtap: entered promiscuous mode
[  267.349689][T14332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  267.363239][T14332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  267.373571][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  267.387304][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  267.391634][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.409847][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.427665][ T6083] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.555804][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.558550][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.616278][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.618890][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.727145][T14810] netlink: 'syz.2.2689': attribute type 1 has an invalid length.
[  267.734934][T14812] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  267.737583][T14810] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2689'.
[  267.825799][T14819] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.245534][ T5316] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  268.675255][ T5316] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  268.679216][ T5316] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  268.687918][ T5316] usb 7-1: config 220 has no interface number 2
[  268.690785][ T5316] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  268.696428][ T5316] usb 7-1: config 220 interface 0 has no altsetting 0
[  268.699217][ T5316] usb 7-1: config 220 interface 76 has no altsetting 0
[  268.702138][ T5316] usb 7-1: config 220 interface 1 has no altsetting 0
[  268.712240][ T5316] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  268.719824][ T5316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.723160][ T5316] usb 7-1: Product: syz
[  268.724912][ T5316] usb 7-1: Manufacturer: syz
[  268.728945][ T5316] usb 7-1: SerialNumber: syz
[  268.767737][T14876] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2709'.
[  268.801426][ T5238] Bluetooth: hci1: command tx timeout
[  268.969304][ T5316] usb 7-1: selecting invalid altsetting 0
[  268.974671][ T5316] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  268.977431][ T5316] usb 7-1: No valid video chain found.
[  269.057067][ T5316] usb 7-1: selecting invalid altsetting 0
[  269.061750][ T5316] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  269.079906][ T5316] usb 7-1: USB disconnect, device number 2
[  269.224834][T14903] netlink: 'syz.2.2716': attribute type 2 has an invalid length.
[  269.258983][T14892] loop3: detected capacity change from 0 to 40427
[  269.265137][T14892] F2FS-fs (loop3): invalid crc value
[  269.300610][T14892] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  269.305171][T14892] F2FS-fs (loop3): Start checkpoint disabled!
[  269.308832][T14892] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  269.339064][   T33] audit: type=1800 audit(1755257494.021:498): pid=14892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2714" name="file1" dev="loop3" ino=10 res=0 errno=0
[  269.644602][T14915] syz.3.2714: attempt to access beyond end of device
[  269.644602][T14915] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  269.659467][T14915] syz.3.2714: attempt to access beyond end of device
[  269.659467][T14915] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  269.668467][T14915] syz.3.2714: attempt to access beyond end of device
[  269.668467][T14915] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  269.677811][T14915] syz.3.2714: attempt to access beyond end of device
[  269.677811][T14915] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  269.685354][T14915] syz.3.2714: attempt to access beyond end of device
[  269.685354][T14915] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  269.693206][T14915] syz.3.2714: attempt to access beyond end of device
[  269.693206][T14915] loop3: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  269.705553][T14915] syz.3.2714: attempt to access beyond end of device
[  269.705553][T14915] loop3: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  269.713227][T14915] syz.3.2714: attempt to access beyond end of device
[  269.713227][T14915] loop3: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  269.721426][T14915] syz.3.2714: attempt to access beyond end of device
[  269.721426][T14915] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  269.729825][T14915] syz.3.2714: attempt to access beyond end of device
[  269.729825][T14915] loop3: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  270.096594][   T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  270.096616][   T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  270.096625][   T53] Workqueue: writeback wb_workfn (flush-7:3)
[  270.096647][   T53] Call Trace:
[  270.096653][   T53]  <TASK>
[  270.096660][   T53]  dump_stack_lvl+0x189/0x250
[  270.096680][   T53]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.096695][   T53]  ? __pfx_queue_work_on+0x10/0x10
[  270.096707][   T53]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  270.096722][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.096747][   T53]  f2fs_handle_critical_error+0x37c/0x540
[  270.096771][   T53]  f2fs_write_end_io+0x886/0xb60
[  270.096798][   T53]  __submit_merged_bio+0x27a/0x6a0
[  270.096820][   T53]  __submit_merged_write_cond+0x255/0x530
[  270.096843][   T53]  f2fs_write_data_pages+0x261d/0x3000
[  270.096889][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  270.096905][   T53]  ? __local_bh_enable_ip+0x12d/0x1c0
[  270.096929][   T53]  ? rcu_is_watching+0x15/0xb0
[  270.096966][   T53]  ? rcu_read_lock_sched_held+0x89/0x100
[  270.096979][   T53]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  270.096996][   T53]  ? rcu_is_watching+0x15/0xb0
[  270.097028][   T53]  ? __lock_acquire+0xab9/0xd20
[  270.097058][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  270.097074][   T53]  do_writepages+0x32e/0x550
[  270.097093][   T53]  ? reacquire_held_locks+0x127/0x1d0
[  270.097104][   T53]  ? writeback_sb_inodes+0x384/0x1010
[  270.097123][   T53]  __writeback_single_inode+0x145/0xff0
[  270.097138][   T53]  ? do_raw_spin_unlock+0x4d/0x240
[  270.097156][   T53]  writeback_sb_inodes+0x6c7/0x1010
[  270.097190][   T53]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  270.097240][   T53]  ? rcu_is_watching+0x15/0xb0
[  270.097260][   T53]  wb_writeback+0x43b/0xaf0
[  270.097281][   T53]  ? queue_io+0x3c1/0x590
[  270.097331][   T53]  ? __pfx_wb_writeback+0x10/0x10
[  270.097353][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.097379][   T53]  wb_workfn+0x409/0xef0
[  270.097405][   T53]  ? __pfx_wb_workfn+0x10/0x10
[  270.097420][   T53]  ? __lock_acquire+0xab9/0xd20
[  270.097444][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  270.097462][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.097473][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  270.097483][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  270.097496][   T53]  process_scheduled_works+0xae1/0x17b0
[  270.097531][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  270.097557][   T53]  worker_thread+0x8a0/0xda0
[  270.097571][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  270.097591][   T53]  ? __kthread_parkme+0x7b/0x200
[  270.097613][   T53]  kthread+0x711/0x8a0
[  270.097629][   T53]  ? __pfx_worker_thread+0x10/0x10
[  270.097640][   T53]  ? __pfx_kthread+0x10/0x10
[  270.097656][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  270.097668][   T53]  ? lockdep_hardirqs_on+0x9c/0x150
[  270.097681][   T53]  ? __pfx_kthread+0x10/0x10
[  270.097695][   T53]  ret_from_fork+0x3fc/0x770
[  270.097710][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  270.097728][   T53]  ? __switch_to_asm+0x39/0x70
[  270.097741][   T53]  ? __switch_to_asm+0x33/0x70
[  270.097754][   T53]  ? __pfx_kthread+0x10/0x10
[  270.097768][   T53]  ret_from_fork_asm+0x1a/0x30
[  270.097797][   T53]  </TASK>
[  270.097803][   T53] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  270.226134][T14919] loop6: detected capacity change from 0 to 32768
[  270.302659][T14919] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  270.335243][T14332] ocfs2: Unmounting device (7,6) on (node local)
[  270.533353][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2721'.
[  270.545417][T14946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2721'.
[  270.675918][T14956] loop3: detected capacity change from 0 to 512
[  270.698501][T14956] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  270.702159][T14956] System zones: 0-2, 18-18, 34-34
[  270.704241][T12239] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  270.719612][T14956] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2729: bg 0: block 248: padding at end of block bitmap is not set
[  270.731446][T14956] Quota error (device loop3): write_blk: dquota write failed
[  270.734732][T14956] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  270.739780][T14956] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2729: Failed to acquire dquot type 1
[  270.750081][T14956] EXT4-fs (loop3): 1 truncate cleaned up
[  270.753664][T14956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.763889][T14956] ext4 filesystem being mounted at /881/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.794650][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.864923][T12239] usb 7-1: Using ep0 maxpacket: 32
[  270.874822][T12239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.885691][T12239] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.888964][T12239] usb 7-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  270.891980][T12239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.903586][T12239] usb 7-1: config 0 descriptor??
[  270.916869][T14972] loop3: detected capacity change from 0 to 512
[  270.932468][T14972] EXT4-fs: Ignoring removed bh option
[  270.936482][T14972] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  270.946527][T14972] EXT4-fs (loop3): 1 truncate cleaned up
[  270.949531][T14972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.975865][ T6083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.025200][ T5238] Bluetooth: hci1: command tx timeout
[  271.362678][T12239] magicmouse 0003:05AC:0265.000C: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.6-1/input0
[  271.370261][T12239] magicmouse 0003:05AC:0265.000C: magicmouse input not registered
[  271.381113][T12239] magicmouse 0003:05AC:0265.000C: probe with driver magicmouse failed with error -12
[  271.651552][T12239] usb 7-1: USB disconnect, device number 3
[  272.079599][T15032] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2748'.
[  272.314870][T15051] (unnamed net_device) (uninitialized): option ad_select: invalid value (254)
[  272.609690][T15063] loop6: detected capacity change from 0 to 32768
[  272.627898][   T33] audit: type=1800 audit(1755257497.090:499): pid=15063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2760" name="file2" dev="loop6" ino=5 res=0 errno=0
[  273.019975][T15091] loop6: detected capacity change from 0 to 4096
[  273.041911][T15091] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  273.080278][T15091] ntfs3(loop6): ino=1f, "file2" attr_set_size
[  273.099537][T14332] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22.
[  273.248403][ T5238] Bluetooth: hci1: command tx timeout
[  273.395275][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2776'.
[  273.852341][T15136] loop3: detected capacity change from 0 to 32768
[  273.856709][T15136] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  273.856709][T15136] members_v1 (size 40):
[  273.856709][T15136] nr_devices mismatch: have 0 entries, should be 1
[  273.868675][T15136] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  275.041176][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2795'.
[  276.156020][T15209] loop6: detected capacity change from 0 to 32768
[  276.167000][T15209] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2805 (15209)
[  276.193908][T15209] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  276.198604][T15209] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  276.202512][T15209] BTRFS info (device loop6): using free-space-tree
[  276.254653][    C1] ==================================================================
[  276.258114][    C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0
[  276.261458][    C1] Read of size 2 at addr ffff8880277c302a by task syz.2.2809/15234
[  276.265577][    C1] 
[  276.266595][    C1] CPU: 1 UID: 0 PID: 15234 Comm: syz.2.2809 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  276.266613][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.266620][    C1] Call Trace:
[  276.266625][    C1]  <TASK>
[  276.266631][    C1]  dump_stack_lvl+0x189/0x250
[  276.266648][    C1]  ? rcu_is_watching+0x15/0xb0
[  276.266660][    C1]  ? __kasan_check_byte+0x12/0x40
[  276.266677][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.266688][    C1]  ? rcu_is_watching+0x15/0xb0
[  276.266699][    C1]  ? lock_release+0x4b/0x3e0
[  276.266714][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  276.266727][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  276.266739][    C1]  print_report+0xca/0x240
[  276.266750][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  276.266764][    C1]  kasan_report+0x118/0x150
[  276.266779][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  276.266794][    C1]  rose_timer_expiry+0x471/0x4b0
[  276.266808][    C1]  call_timer_fn+0x17e/0x5f0
[  276.266823][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  276.266836][    C1]  ? call_timer_fn+0xbe/0x5f0
[  276.266850][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  276.266867][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  276.266881][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.266895][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  276.266908][    C1]  __run_timer_base+0x61a/0x860
[  276.266921][    C1]  ? ktime_get+0x3e/0x1f0
[  276.266934][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  276.266950][    C1]  run_timer_softirq+0xb7/0x180
[  276.266964][    C1]  handle_softirqs+0x286/0x870
[  276.266976][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  276.266987][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  276.267001][    C1]  __irq_exit_rcu+0xca/0x1f0
[  276.267011][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  276.267024][    C1]  irq_exit_rcu+0x9/0x30
[  276.267033][    C1]  sysvec_apic_timer_interrupt+0x57/0xc0
[  276.267046][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  276.267058][    C1] RIP: 0033:0x7fb1d5650c58
[  276.267070][    C1] Code: 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 <48> 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 81 fe 00 01 00 00 0f 85
[  276.267081][    C1] RSP: 002b:00007fb1d65c84a0 EFLAGS: 00000246
[  276.267093][    C1] RAX: 00000000000be81d RBX: 00007fb1d65c8540 RCX: 00000000000000e1
[  276.267101][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fb1d65c85e0
[  276.267108][    C1] RBP: 0000000000000102 R08: 00007fb1cb400000 R09: 0000000000000000
[  276.267116][    C1] R10: 0000000000000000 R11: 00007fb1d65c8550 R12: 0000000000000001
[  276.267124][    C1] R13: 00007fb1d582d980 R14: 0000000000000000 R15: 00007fb1d65c85e0
[  276.267136][    C1]  </TASK>
[  276.267140][    C1] 
[  276.377695][    C1] Allocated by task 5298:
[  276.379459][    C1]  kasan_save_track+0x3e/0x80
[  276.381395][    C1]  __kasan_kmalloc+0x93/0xb0
[  276.383356][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  276.385622][    C1]  kernfs_fop_open+0x397/0xca0
[  276.387658][    C1]  do_dentry_open+0x953/0x13f0
[  276.389702][    C1]  vfs_open+0x3b/0x340
[  276.391341][    C1]  path_openat+0x2ee5/0x3830
[  276.393253][    C1]  do_filp_open+0x1fa/0x410
[  276.395185][    C1]  do_sys_openat2+0x121/0x1c0
[  276.397173][    C1]  __x64_sys_openat+0x138/0x170
[  276.399142][    C1]  do_syscall_64+0xfa/0x3b0
[  276.401005][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.403390][    C1] 
[  276.404400][    C1] Freed by task 5298:
[  276.406064][    C1]  kasan_save_track+0x3e/0x80
[  276.407978][    C1]  kasan_save_free_info+0x46/0x50
[  276.410025][    C1]  __kasan_slab_free+0x5b/0x80
[  276.412013][    C1]  kfree+0x18e/0x440
[  276.413644][    C1]  kernfs_fop_release+0x160/0x190
[  276.415679][    C1]  __fput+0x44c/0xa70
[  276.417354][    C1]  fput_close_sync+0x119/0x200
[  276.419325][    C1]  __x64_sys_close+0x7f/0x110
[  276.421254][    C1]  do_syscall_64+0xfa/0x3b0
[  276.423128][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.425560][    C1] 
[  276.426555][    C1] The buggy address belongs to the object at ffff8880277c3000
[  276.426555][    C1]  which belongs to the cache kmalloc-512 of size 512
[  276.432259][    C1] The buggy address is located 42 bytes inside of
[  276.432259][    C1]  freed 512-byte region [ffff8880277c3000, ffff8880277c3200)
[  276.437818][    C1] 
[  276.438842][    C1] The buggy address belongs to the physical page:
[  276.441646][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880277c3000 pfn:0x277c0
[  276.445675][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  276.449093][    C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  276.452569][    C1] page_type: f5(slab)
[  276.454239][    C1] raw: 00fff00000000240 ffff88801a441c80 ffffea0000d7f410 ffffea0000e54e10
[  276.457753][    C1] raw: ffff8880277c3000 000000000010000f 00000000f5000000 0000000000000000
[  276.461307][    C1] head: 00fff00000000240 ffff88801a441c80 ffffea0000d7f410 ffffea0000e54e10
[  276.464827][    C1] head: ffff8880277c3000 000000000010000f 00000000f5000000 0000000000000000
[  276.468503][    C1] head: 00fff00000000002 ffffea00009df001 00000000ffffffff 00000000ffffffff
[  276.472085][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  276.475624][    C1] page dumped because: kasan: bad access detected
[  276.478337][    C1] page_owner tracks the page as allocated
[  276.480694][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5850, tgid 5850 (syz-executor), ts 58252154678, free_ts 58248524625
[  276.488501][    C1]  post_alloc_hook+0x240/0x2a0
[  276.490537][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  276.492828][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  276.495326][    C1]  alloc_pages_mpol+0x232/0x4a0
[  276.497397][    C1]  allocate_slab+0x8a/0x370
[  276.499318][    C1]  ___slab_alloc+0xbeb/0x1410
[  276.501309][    C1]  __kmalloc_noprof+0x305/0x4f0
[  276.503399][    C1]  fib6_info_alloc+0x30/0xf0
[  276.505343][    C1]  ip6_route_info_create+0x142/0x860
[  276.507539][    C1]  addrconf_f6i_alloc+0x1d2/0x450
[  276.509679][    C1]  addrconf_permanent_addr+0x274/0x9d0
[  276.511988][    C1]  addrconf_notify+0x887/0x1010
[  276.514042][    C1]  notifier_call_chain+0x1b6/0x3e0
[  276.517000][    C1]  __dev_notify_flags+0x18d/0x2e0
[  276.519116][    C1]  netif_change_flags+0xe8/0x1a0
[  276.521226][    C1]  do_setlink+0xc55/0x41c0
[  276.523081][    C1] page last free pid 5850 tgid 5850 stack trace:
[  276.525753][    C1]  __free_frozen_pages+0xbc4/0xd30
[  276.527814][    C1]  __slab_free+0x303/0x3c0
[  276.529605][    C1]  qlist_free_all+0x97/0x140
[  276.531510][    C1]  kasan_quarantine_reduce+0x148/0x160
[  276.533808][    C1]  __kasan_slab_alloc+0x22/0x80
[  276.535873][    C1]  __kmalloc_noprof+0x224/0x4f0
[  276.537515][    C1]  fib_create_info+0x1728/0x3210
[  276.539500][    C1]  fib_table_insert+0xc6/0x1b50
[  276.541578][    C1]  fib_magic+0x2c4/0x390
[  276.543359][    C1]  fib_add_ifaddr+0x3fb/0x5f0
[  276.545363][    C1]  fib_netdev_event+0x382/0x490
[  276.547429][    C1]  notifier_call_chain+0x1b6/0x3e0
[  276.549611][    C1]  __dev_notify_flags+0x18d/0x2e0
[  276.551758][    C1]  netif_change_flags+0xe8/0x1a0
[  276.553878][    C1]  do_setlink+0xc55/0x41c0
[  276.555765][    C1]  rtnl_newlink+0x160b/0x1c70
[  276.557706][    C1] 
[  276.558722][    C1] Memory state around the buggy address:
[  276.561062][    C1]  ffff8880277c2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  276.564416][    C1]  ffff8880277c2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  276.567713][    C1] >ffff8880277c3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.571004][    C1]                                   ^
[  276.573251][    C1]  ffff8880277c3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.576547][    C1]  ffff8880277c3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  276.579937][    C1] ==================================================================
[  276.583498][    C1] vkms_vblank_simulate: vblank timer overrun
[  276.586255][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  276.589303][    C1] CPU: 1 UID: 0 PID: 15234 Comm: syz.2.2809 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  276.594492][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.598650][    C1] Call Trace:
[  276.600071][    C1]  <TASK>
[  276.601346][    C1]  dump_stack_lvl+0x99/0x250
[  276.603308][    C1]  ? __asan_memcpy+0x40/0x70
[  276.605272][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.607507][    C1]  ? __pfx__printk+0x10/0x10
[  276.609500][    C1]  vpanic+0x281/0x750
[  276.611178][    C1]  ? __pfx_vpanic+0x10/0x10
[  276.613143][    C1]  ? irqentry_exit+0x74/0x90
[  276.615033][    C1]  panic+0xb9/0xc0
[  276.616596][    C1]  ? __pfx_panic+0x10/0x10
[  276.618467][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  276.620923][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  276.623394][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  276.625497][    C1]  check_panic_on_warn+0x89/0xb0
[  276.627559][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  276.629723][    C1]  end_report+0x78/0x160
[  276.631486][    C1]  kasan_report+0x129/0x150
[  276.633384][    C1]  ? rose_timer_expiry+0x471/0x4b0
[  276.635532][    C1]  rose_timer_expiry+0x471/0x4b0
[  276.637583][    C1]  call_timer_fn+0x17e/0x5f0
[  276.639514][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  276.641806][    C1]  ? call_timer_fn+0xbe/0x5f0
[  276.643770][    C1]  ? __pfx_call_timer_fn+0x10/0x10
[  276.645896][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  276.648035][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.650278][    C1]  ? __pfx_rose_timer_expiry+0x10/0x10
[  276.652516][    C1]  __run_timer_base+0x61a/0x860
[  276.654619][    C1]  ? ktime_get+0x3e/0x1f0
[  276.656506][    C1]  ? __pfx___run_timer_base+0x10/0x10
[  276.658860][    C1]  run_timer_softirq+0xb7/0x180
[  276.661023][    C1]  handle_softirqs+0x286/0x870
[  276.663132][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  276.665210][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  276.667552][    C1]  __irq_exit_rcu+0xca/0x1f0
[  276.669635][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  276.671918][    C1]  irq_exit_rcu+0x9/0x30
[  276.673803][    C1]  sysvec_apic_timer_interrupt+0x57/0xc0
[  276.676267][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  276.678905][    C1] RIP: 0033:0x7fb1d5650c58
[  276.680878][    C1] Code: 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 <48> 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 81 fe 00 01 00 00 0f 85
[  276.689250][    C1] RSP: 002b:00007fb1d65c84a0 EFLAGS: 00000246
[  276.691859][    C1] RAX: 00000000000be81d RBX: 00007fb1d65c8540 RCX: 00000000000000e1
[  276.695292][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007fb1d65c85e0
[  276.698619][    C1] RBP: 0000000000000102 R08: 00007fb1cb400000 R09: 0000000000000000
[  276.702096][    C1] R10: 0000000000000000 R11: 00007fb1d65c8550 R12: 0000000000000001
[  276.705574][    C1] R13: 00007fb1d582d980 R14: 0000000000000000 R15: 00007fb1d65c85e0
[  276.709043][    C1]  </TASK>
[  276.711118][    C1] Kernel Offset: disabled
[  276.713012][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:31:46  Registers:
info registers vcpu 0

CPU#0
RAX=00007f406d08c878 RBX=00007f406d08c850 RCX=ffffffff8b6f38ee RDX=ffffffff8b6f38ee
RSI=ffffffff8b6f38ee RDI=00007f406d08c8c8 RBP=00007f406d08c800 RSP=00007ffdd1dc4030
R8 =00007f406d08c860 R9 =00007f406d7a2000 R10=00007f406e2e5700 R11=0000000000000000
R12=00007f406d08c7f8 R13=0000000000000012 R14=00007ffdd1dc4278 R15=00007f406cfff008
RIP=00007f406d468008 RFL=00000216 [----AP-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555583628500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055ec09e8be18 CR3=0000000027d2b000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff8b6f38ee ffffffff8b6f38ee XMM01=ffffffff8b6f38ee ffffffff8b6f38ee
XMM02=00007f406d787498 ffffffff8b6f38ee XMM03=00007f406d7874a8 00007f406d7874a0
XMM04=00007f406e2ed100 00007f406d787460 XMM05=00007f406d787478 00007f406d7874c0
XMM06=00007f406d7874b8 00007f406d7874b0 XMM07=00007f406d7874a8 00007f406d7874a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f406d612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900075173b0
R8 =ffff88801fa90237 R9 =1ffff11003f52046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9911 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb1d65c96c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb1cb4be000 CR3=00000001260f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007fb1d65c85a0 00007fb1d65c8580
XMM02=00007fb1d65c86e0 00007fb1d65c8560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007fb1d65c85a0 XMM05=0000000000000000 00007fb1d65c86e0
XMM06=00007fb1d65c86e0 00007fb1d65c8560 XMM07=00007fb1d65c85a0 00007fb1d65c8580
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007fb1d5812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
