last executing test programs:

4m10.551969356s ago: executing program 32 (id=337):
ioprio_set$pid(0x3, 0x0, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

3m49.49884285s ago: executing program 1 (id=528):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x60, 0x0, 0x800000000000ed2a, {{0x7, 0x10000007ffd, 0x3, 0x2, 0x400002, 0xd7c, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=""/229)

3m49.276245074s ago: executing program 1 (id=529):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18)
r2 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080))
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=ANY=[], 0x2c}], 0x1, 0x20004000)

3m49.215244876s ago: executing program 1 (id=530):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)

3m49.162882509s ago: executing program 1 (id=531):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000340)={0x1d, r1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0)

3m49.162681436s ago: executing program 1 (id=532):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008452, &(0x7f0000000000), 0x7, 0x4d2, &(0x7f0000000740)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

3m49.011023529s ago: executing program 1 (id=535):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000b80)="$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")
symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

3m33.99340127s ago: executing program 33 (id=535):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000b80)="$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")
symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

3m16.425230504s ago: executing program 4 (id=824):
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)=0x12)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/251, 0x0, 0x100000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0)

3m14.343933022s ago: executing program 4 (id=842):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fstat(0xffffffffffffffff, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x52}, 0x28)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)

3m13.360376818s ago: executing program 4 (id=851):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
close_range(r0, r0, 0x0)

3m13.360189906s ago: executing program 4 (id=852):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x16, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

3m13.275257212s ago: executing program 4 (id=854):
syz_emit_ethernet(0xfffffffffffffde8, 0x0, 0x0)

3m12.993784686s ago: executing program 4 (id=858):
ustat(0x801, &(0x7f0000000300))

3m12.692406178s ago: executing program 34 (id=858):
ustat(0x801, &(0x7f0000000300))

3m4.856023871s ago: executing program 2 (id=909):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x28)
r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0)
getdents64(r2, &(0x7f0000fc4fbe)=""/80, 0x50)
unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200)
r3 = open(&(0x7f0000022ff6)='./control\x00', 0x50500, 0x0)
getdents(r3, &(0x7f0000000280)=""/79, 0x4f)
rmdir(&(0x7f00000003c0)='./control\x00')

3m4.833360497s ago: executing program 2 (id=910):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x2000000, &(0x7f0000000540)=[{0x0}], 0x0, 0x1}, 0x20)

3m4.755302668s ago: executing program 2 (id=911):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x40, 0x30, 0xc, "008000010a01000000000080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m3.144546267s ago: executing program 2 (id=927):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x800088, &(0x7f0000000cc0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nls=maccenteuro,session=0x0000000080000001,force,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c00033535581a8c93022615d197068a585571f9e001682f64b69c250d32a806d038c69e92463d89236f11ed181e846b20639efe06565a7339be5124740524d0f6b1e7210a5251729cffe820717f00dbdf5993aa65c2586a838662613a63030aa4daf67afc0b9b3984982f81f11ea99bdda5c3bd61dff3b0ef4569954e9767b63da48d58086c70101b2a7663f55c9c962fe9c984d6ef0a74576865d5798b6aca5e93287321e3ef2d"], 0x1, 0x6f7, &(0x7f00000010c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0)

3m3.052451354s ago: executing program 2 (id=928):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815", 0x45, 0x6d91fb6102d8910c, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x40000, 0x0, 0x0)
recvfrom(r0, 0x0, 0x0, 0x800004c4, 0x0, 0x0)

3m2.646226434s ago: executing program 2 (id=929):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]})
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619)

3m2.587517192s ago: executing program 35 (id=929):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]})
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619)

2m59.685593169s ago: executing program 3 (id=946):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@loopback, 0x4d2, 0x2b}, 0x0, @in6=@private1, 0x3504, 0x3, 0x3, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600)

2m59.625306266s ago: executing program 3 (id=947):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xa, @pix={0x0, 0x6, 0x33565348}})

2m59.624990329s ago: executing program 3 (id=948):
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, 0x0)

2m59.564183681s ago: executing program 3 (id=949):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x800810, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]})
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0x22, 0x3, 0x0, {0x6, 0x1, 0x0, '/'}}, 0x22)

2m59.310335261s ago: executing program 3 (id=950):
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9, 0x9d, 0xc3, 0x20, 0x12d1, 0x7ef3, 0x5468, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x10, [{{0x9, 0x4, 0x59, 0x0, 0x2, 0xff, 0x6, 0x3d, 0x0, [], [{{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x0, 0xff}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)

2m58.905446282s ago: executing program 3 (id=951):
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
io_uring_enter(0xffffffffffffffff, 0x3a57, 0x7151, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000010000000000000f04000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100"], 0x14}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0)
syz_open_dev$dri(&(0x7f0000000200), 0x67bb8c60, 0x40c100)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0)

2m58.784736285s ago: executing program 36 (id=951):
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
io_uring_enter(0xffffffffffffffff, 0x3a57, 0x7151, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000010000000000000f04000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100"], 0x14}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0)
syz_open_dev$dri(&(0x7f0000000200), 0x67bb8c60, 0x40c100)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0)

2m0.940030558s ago: executing program 5 (id=1506):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40048c4)

2m0.911185633s ago: executing program 5 (id=1507):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0)

2m0.804184311s ago: executing program 5 (id=1511):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r1, 0x0, 0x20)
ioctl$SNDCTL_SEQ_RESET(r2, 0x5100)

1m59.204641505s ago: executing program 5 (id=1520):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48c5, &(0x7f0000000340)={[{@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@fat=@flush}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

1m59.053669788s ago: executing program 5 (id=1523):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
close_range(r0, 0xffffffffffffffff, 0x0)

1m58.775743872s ago: executing program 5 (id=1526):
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
unshare(0x28020480)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2b4d, 0x1, 0x801}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x1, 0x8}, 0x0, 0x0)

1m58.68744943s ago: executing program 37 (id=1526):
socket$inet6(0xa, 0x80002, 0x0)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
unshare(0x28020480)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x2b4d, 0x1, 0x801}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x1, 0x8}, 0x0, 0x0)

1m3.324399655s ago: executing program 6 (id=2056):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0xefa699ef1c0e57d8, {{0x41, 0x20000003}, 0x2}}, 0x10)

1m3.323975714s ago: executing program 6 (id=2058):
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x4, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bb000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m3.223049737s ago: executing program 6 (id=2061):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

1m3.164777066s ago: executing program 6 (id=2065):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0)

1m3.024315768s ago: executing program 6 (id=2068):
r0 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

1m1.374494587s ago: executing program 6 (id=2084):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@discard_unit_segment}, {@nolazytime}, {@noinline_dentry}, {@nogc_merge}, {@noextent_cache}, {@discard}, {@fastboot}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@two_active_logs}, {@disable_ext_identify}]}, 0x1, 0x5512, &(0x7f0000005a80)="$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")
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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")

1m1.258903232s ago: executing program 38 (id=2084):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@discard_unit_segment}, {@nolazytime}, {@noinline_dentry}, {@nogc_merge}, {@noextent_cache}, {@discard}, {@fastboot}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@two_active_logs}, {@disable_ext_identify}]}, 0x1, 0x5512, &(0x7f0000005a80)="$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")
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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")

23.512487591s ago: executing program 9 (id=2407):
recvmsg(0xffffffffffffffff, 0x0, 0x40010022)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
r4 = dup(0xffffffffffffffff)
ioctl$UFFDIO_COPY(r4, 0xc028aa03, 0x0)

22.392241649s ago: executing program 9 (id=2409):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xf7fffffb})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110a400000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x29)

22.342780737s ago: executing program 9 (id=2411):
timer_create(0x2, 0x0, &(0x7f0000000480))
timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000480)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_delete(r0)

22.342202545s ago: executing program 9 (id=2413):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00')
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00')

22.276484291s ago: executing program 9 (id=2415):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ppoll(&(0x7f00000005c0)=[{r0, 0x2743}], 0x1, 0x0, 0x0, 0x0)

22.137923643s ago: executing program 9 (id=2416):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

21.981955077s ago: executing program 39 (id=2416):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

4.623627816s ago: executing program 8 (id=2570):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r2, 0x10000)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r1, 0x204)

4.62354711s ago: executing program 8 (id=2571):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00')
pread64(r0, &(0x7f000001a240)=""/102386, 0x18ff2, 0x5)

4.551059231s ago: executing program 8 (id=2572):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1c044)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}}, 0x0)
socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea0485000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000083c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x8000}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x1fd, &(0x7f0000000480)=<r7=>0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r6, &(0x7f00000000c0)='!', 0xb7f40}])
dup3(r6, r4, 0x80000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00003c8000/0x4000)=nil, 0x4000, 0x0)

3.585352384s ago: executing program 8 (id=2584):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@nomblk_io_submit}, {@auto_da_alloc}, {@minixdf}]}, 0xfe, 0x572, &(0x7f0000000240)="$eJzs3U1rVFcfAPD/nSS+JD4aQeRpFyXgohbrxCR9sdCFXZZWKrR7OyTXIJk4kpmISYXqom66KVIopdLSD9B9l9Iv0E8htIIUCe2imyl35o6OyUwS42hG5/eDq+fcc6/nnrn3fzxnzgwTwMCayP4oRLwSEd8kEYfayoYjL5xoHrf24NpstiVRr3/6VxJJvq91fJL/PZZn/h8Rv30VcaKwsd7qyupCqVxOl/L8ZG3x8mR1ZfXkxcXSfDqfXpqemTn99sz0e+++s/HkvTtr6xvn/vn+kzsfnv762Np3v9w7fCuJM3EgL2tvx1O43p6ZiIn8NRmJM+sOnOpBZf0k2e0LYEeG8jgfiawPOBRDedQDL78vI6IODKhE/MOAas4AMs25/abz4PrLN8u7/0FzAtRq+6P2J833RmJfY240upY8NjPKXonxHtSf1fHrn7dvZVv07n0IgC1dvxERp4aHH+v/DkZb/7dzp7ZxzPo69H/w/NzJxj9v7u0w/ik8HP9Eh/HPWIfY3Ymt479wr/OZO1wEWicb/70fncZ/Dxetxofy3P8aY76R5MLFcpr1bVk3eTxG9mb5zdZzTq/drXcrax//ZVtWf2ssmF/HveF1TZ0r1UpP0+Z2929EvLrF+DfpcP+z1+PcNus4mt5+rVvZ1u1/tuo/R7ze8f4/muskm69PTjaeh8nWU7HR3zeP/t6t/t1uf3b/Rzdv/3jSvl5bffI6ftr3b9qtbCLJF02f8Pnfk3zWSO/J910t1WpLUxF7ko837p9upn9sy7eOz9p//Fjn+N/s+d8fEZ9vs/03j9zsemg/3P+5J7r/XRL1pGvR3Y+++KFb/dvr/95qpI7ne7bT/3W+0tG89GmeZgAAAAAAAOhfhYg4EEmh+DBdKBSLzc93HInRQrlSrZ24UFm+NBeN78qOx0ihtdI91vZ5iKn887Ct/PS6/ExEHI6Ib4f2N/LF2Up5brcbDwAAAAAAAAAAAAAAAAAAAH1irMv3/zN/DO321QHPnJ/8hsG1Zfz34peegL7k/38YXOIfBpf4h8El/mFwiX8YXOIfBpf4h8El/gEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp09m231tQfXZrP83JWV5YXKlZNzaXWhuLg8W5ytLF0uzlcq8+W0OFtZ3OrfK1cql6emY/nqZC1NapPVldXzi5XlS7XzFxdL8+n5dOS5tAoAAAAAAAAAAAAAAAAAAABeLNWV1YVSuZwuvVyJQt68bZ91MD+hHy7+xUoM98dlSPQ4sYudEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs818AAAD//0efKxA=")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3.431676314s ago: executing program 8 (id=2588):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x2, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x100000000]}})

3.221184075s ago: executing program 8 (id=2594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001040)="9222cc839d", 0x5}], 0x1}}, {{&(0x7f0000002300)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002380)="5fa27951", 0x4}], 0x1, &(0x7f00000028c0)=[{0x10, 0x101, 0x8}], 0x10}}], 0x2, 0x20050)

3.1163794s ago: executing program 40 (id=2594):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001040)="9222cc839d", 0x5}], 0x1}}, {{&(0x7f0000002300)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002380)="5fa27951", 0x4}], 0x1, &(0x7f00000028c0)=[{0x10, 0x101, 0x8}], 0x10}}], 0x2, 0x20050)

1.323469146s ago: executing program 0 (id=2616):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x2c, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd}]}]}, 0x2c}], 0x1}, 0x20000000)

1.11187655s ago: executing program 7 (id=2619):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r0, &(0x7f0000000280), 0x0}, 0x20)

1.053859236s ago: executing program 7 (id=2620):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000023c0)=ANY=[@ANYBLOB="180000006a000507006f9b3699e260de0000000000000006"], 0x18}], 0x1}, 0x0)

278.329553ms ago: executing program 0 (id=2621):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8695, 0x20001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7f}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000c010}, 0x0)

278.088728ms ago: executing program 7 (id=2622):
r0 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x200}, 0x1c)

213.495853ms ago: executing program 7 (id=2623):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1, 0x0, 0x1800}, 0x0)

143.342844ms ago: executing program 7 (id=2624):
r0 = socket(0x2, 0x2, 0x1)
bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)

141.988213ms ago: executing program 0 (id=2625):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18)
sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ec}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0)

71.414373ms ago: executing program 7 (id=2626):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file0\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@ref_verify}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x308, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
rmdir(0x0)

71.119087ms ago: executing program 0 (id=2627):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

149.731µs ago: executing program 0 (id=2628):
setuid(0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffebb)

0s ago: executing program 0 (id=2629):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x40880}, 0x20004000)

kernel console output (not intermixed with test programs):

12:61): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1766" name="file1" dev="loop8" ino=7 res=0 errno=0
[  258.648707][T11204] loop7: detected capacity change from 0 to 4096
[  258.660220][T11204] NILFS (loop7): mounting unchecked fs
[  258.664895][T11204] NILFS (loop7): recovery required for readonly filesystem
[  258.667314][T11204] NILFS (loop7): write access will be enabled during recovery
[  258.685579][T11204] NILFS (loop7): invalid segment: Checksum error in super root
[  258.688153][T11204] NILFS (loop7): error -22 while loading super root
[  258.729596][T11187] ERROR: (device loop8): dbAdjCtl: the maximum free buddy is not the old root
[  258.729596][T11187] 
[  258.812594][T11208] netlink: 'syz.7.1776': attribute type 1 has an invalid length.
[  258.854691][T11187] ERROR: (device loop8): remounting filesystem as read-only
[  258.998627][T11213] trusted_key: syz.6.1775 sent an empty control message without MSG_MORE.
[  260.116538][   T33] audit: type=1326 audit(1755255451.892:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11233 comm="syz.8.1787" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f136f58ebe9 code=0x0
[  260.250578][T11245] netlink: 'syz.6.1792': attribute type 1 has an invalid length.
[  260.267896][T11245] 8021q: adding VLAN 0 to HW filter on device bond1
[  260.284290][T11245] bond1: (slave ip6erspan0): making interface the new active one
[  260.288859][T11245] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[  260.610058][T11257] bond1: entered promiscuous mode
[  260.612821][T11257] 8021q: adding VLAN 0 to HW filter on device bond1
[  261.008804][T11270] loop8: detected capacity change from 0 to 8
[  262.344211][   T33] audit: type=1326 audit(1755255454.102:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.7.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536658ebe9 code=0x7ffc0000
[  262.377523][   T33] audit: type=1326 audit(1755255454.112:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.7.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536658ebe9 code=0x7ffc0000
[  262.401075][   T33] audit: type=1326 audit(1755255454.132:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.7.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f536658ebe9 code=0x7ffc0000
[  262.428962][   T33] audit: type=1326 audit(1755255454.132:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.7.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536658ebe9 code=0x7ffc0000
[  262.446864][   T33] audit: type=1326 audit(1755255454.132:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.7.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536658ebe9 code=0x7ffc0000
[  262.456972][   T33] audit: type=1326 audit(1755255454.132:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.7.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f536658ebe9 code=0x7ffc0000
[  262.466710][   T33] audit: type=1326 audit(1755255454.132:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.7.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536658ebe9 code=0x7ffc0000
[  262.479270][   T33] audit: type=1326 audit(1755255454.132:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11290 comm="syz.7.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f536658ebe9 code=0x7ffc0000
[  262.769315][T11295] loop8: detected capacity change from 0 to 1024
[  262.797822][T11295] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  262.809664][T11295] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  262.816553][T11295] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869)
[  262.821579][T11295] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  262.829365][T11295] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: inode #17: comm syz.8.1809: iget: bad i_size value: 4398046511204
[  262.843782][T11295] EXT4-fs (loop8): no journal found
[  263.046179][T11302] loop8: detected capacity change from 0 to 512
[  264.122334][T11314] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1817'.
[  264.128526][T11314] netlink: 43 bytes leftover after parsing attributes in process `syz.8.1817'.
[  264.135228][T11314] netlink: 'syz.8.1817': attribute type 6 has an invalid length.
[  264.138989][T11314] netlink: 'syz.8.1817': attribute type 5 has an invalid length.
[  264.142320][T11314] netlink: 43 bytes leftover after parsing attributes in process `syz.8.1817'.
[  264.651438][T11332] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  264.658259][T11332] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  265.073090][T11338] loop6: detected capacity change from 0 to 32768
[  265.145048][T11338] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  265.145061][T11338]   allowing incompatible features above 0.0: (unknown version)
[  265.145065][T11338]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  265.157958][T11338] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  265.160798][T11338] bcachefs (loop6): initializing new filesystem
[  265.167230][T11338] bcachefs (loop6): going read-write
[  265.173035][T11338] bcachefs (loop6): marking superblocks
[  265.192161][T11338] bcachefs (loop6): initializing freespace
[  265.207363][T11338] bcachefs (loop6): done initializing freespace
[  265.216055][T11338] bcachefs (loop6): reading snapshots table
[  265.218563][T11338] bcachefs (loop6): reading snapshots done
[  265.246660][T11338] bcachefs (loop6): done starting filesystem
[  265.399596][ T8679] bcachefs (loop6): shutting down
[  265.401889][ T8679] bcachefs (loop6): going read-only
[  265.405485][ T8679] bcachefs (loop6): finished waiting for writes to stop
[  265.409180][ T8679] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  265.441596][ T8679] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  265.446789][ T8679] bcachefs (loop6): clean shutdown complete, journal seq 4
[  265.449863][ T8679] bcachefs (loop6): marking filesystem clean
[  265.488231][ T8679] bcachefs (loop6): shutdown complete
[  266.803246][T11397] Bluetooth: MGMT ver 1.23
[  266.960315][T11403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.975200][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1848'.
[  266.983833][T11405] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  267.032839][T11407] loop8: detected capacity change from 0 to 512
[  267.061484][T11407] EXT4-fs: Ignoring removed i_version option
[  267.068022][T11407] EXT4-fs: Ignoring removed nobh option
[  267.076202][T11407] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  267.142076][T11407] EXT4-fs (loop8): 1 truncate cleaned up
[  267.169323][T11407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.277172][T10433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.431831][T11423] loop8: detected capacity change from 0 to 2048
[  267.445974][T11425] loop7: detected capacity change from 0 to 8
[  267.460148][T11423] NILFS (loop8): couldn't mount RDWR because of unsupported optional features (40)
[  267.586058][T11415] loop6: detected capacity change from 0 to 32768
[  267.589846][T11415] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1829 (11415)
[  267.664204][T11415] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.668623][T11415] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  267.672058][T11415] BTRFS info (device loop6): using free-space-tree
[  267.781735][T11415] BTRFS info (device loop6): rebuilding free space tree
[  267.936219][ T8679] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.085903][T11427] loop8: detected capacity change from 0 to 32768
[  268.114324][T11427] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1858 (11427)
[  268.156494][T11427] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.163949][T11427] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  268.193990][T11427] BTRFS info (device loop8): using free-space-tree
[  268.370919][T11471] loop6: detected capacity change from 0 to 4096
[  268.448306][T10433] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  268.482284][T11471] ntfs3(loop6): failed to convert "0080" to cp860
[  268.526203][T11471] ntfs3(loop6): failed to convert name for inode 1e.
[  268.543064][T11471] ntfs3(loop6): ino=1f, mi_enum_attr
[  268.548339][T11471] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  269.069487][T11485] loop8: detected capacity change from 0 to 2048
[  269.126778][T11486] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.364748][ T5966] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  270.515890][ T5966] usb 7-1: config 0 interface 0 has no altsetting 0
[  270.518668][ T5966] usb 7-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  270.522387][ T5966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.530423][ T5966] usb 7-1: config 0 descriptor??
[  270.789360][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.880890][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  270.957823][ T5966] logitech 0003:046D:C294.000B: unknown main item tag 0x6
[  270.960996][ T5966] logitech 0003:046D:C294.000B: item fetching failed at offset 5/7
[  270.965196][ T5966] logitech 0003:046D:C294.000B: parse failed
[  270.967724][ T5966] logitech 0003:046D:C294.000B: probe with driver logitech failed with error -22
[  270.985380][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.049066][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.166705][ T8918] usb 7-1: USB disconnect, device number 8
[  271.193012][   T12] bridge_slave_1: left allmulticast mode
[  271.202134][   T12] bridge_slave_1: left promiscuous mode
[  271.208206][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.213562][   T12] bridge_slave_0: left allmulticast mode
[  271.217913][   T12] bridge_slave_0: left promiscuous mode
[  271.220362][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.266301][T11507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.478153][T11509] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  271.486075][T11509] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  271.601028][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.609502][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.613381][   T12] bond0 (unregistering): Released all slaves
[  271.633927][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.638025][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.856612][   T33] audit: type=1804 audit(1755255463.604:71): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1882" name="file0" dev="ramfs" ino=28091 res=1 errno=0
[  271.879925][   T33] audit: type=1804 audit(1755255463.654:72): pid=11517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1882" name="file0" dev="ramfs" ino=28091 res=1 errno=0
[  271.929810][   T12] hsr_slave_0: left promiscuous mode
[  271.932323][   T12] hsr_slave_1: left promiscuous mode
[  271.935964][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.938895][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.942368][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.946870][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.960324][   T12] veth1_macvtap: left promiscuous mode
[  271.962458][   T12] veth0_macvtap: left promiscuous mode
[  271.966682][   T12] veth1_vlan: left promiscuous mode
[  271.968763][   T12] veth0_vlan: left promiscuous mode
[  272.199028][T11524] netlink: 'syz.8.1885': attribute type 5 has an invalid length.
[  273.250802][   T12] team0 (unregistering): Port device team_slave_1 removed
[  273.313302][   T12] team0 (unregistering): Port device team_slave_0 removed
[  274.069121][T11554] loop8: detected capacity change from 0 to 256
[  274.091019][T11554] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  274.096854][T11554] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[  274.100862][T11554] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  274.114954][T11554] UDF-fs: Scanning with blocksize 512 failed
[  274.125885][T11554] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  274.140991][T11554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  274.182760][   T33] audit: type=1800 audit(1755255465.944:73): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1896" name="file1" dev="loop8" ino=55 res=0 errno=0
[  274.279622][ T5383] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  274.302391][   T12] IPVS: stop unused estimator thread 0...
[  274.436673][ T5383] usb 7-1: not running at top speed; connect to a high speed hub
[  274.449681][ T5383] usb 7-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  274.465658][ T5383] usb 7-1: config 1 interface 0 has no altsetting 0
[  274.475669][ T5383] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.62
[  274.489770][ T5383] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.492998][ T5383] usb 7-1: Product: syz
[  274.500148][ T5383] usb 7-1: Manufacturer: syz
[  274.514178][ T5383] usb 7-1: SerialNumber: syz
[  274.736812][T11552] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1895'.
[  274.737346][T11573] loop7: detected capacity change from 0 to 32768
[  274.746466][ T5383] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input11
[  274.759689][ T5282] bcm5974 7-1:1.0: could not read from device
[  274.764253][ T5383] usb 7-1: USB disconnect, device number 9
[  274.771665][ T5282] bcm5974 7-1:1.0: could not read from device
[  274.830789][T11573] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  274.830806][T11573]   allowing incompatible features above 0.0: (unknown version)
[  274.830815][T11573]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  274.846406][T11573] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  274.849568][T11573] bcachefs (loop7): initializing new filesystem
[  274.857719][T11573] bcachefs (loop7): going read-write
[  274.868608][T11573] bcachefs (loop7): marking superblocks
[  274.877429][T11573] bcachefs (loop7): initializing freespace
[  274.882314][T11573] bcachefs (loop7): done initializing freespace
[  274.886707][T11573] bcachefs (loop7): reading snapshots table
[  274.889182][T11573] bcachefs (loop7): reading snapshots done
[  274.916435][T11573] bcachefs (loop7): done starting filesystem
[  275.727416][ T8761] bcachefs (loop7): shutting down
[  275.729579][ T8761] bcachefs (loop7): going read-only
[  275.736050][ T8761] bcachefs (loop7): finished waiting for writes to stop
[  275.749139][ T8761] bcachefs (loop7): flushing journal and stopping allocators, journal seq 4
[  275.803794][ T8761] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 5
[  275.811759][ T8761] bcachefs (loop7): clean shutdown complete, journal seq 6
[  275.815780][ T8761] bcachefs (loop7): marking filesystem clean
[  275.829453][ T8761] bcachefs (loop7): shutdown complete
[  276.050688][T11592] loop8: detected capacity change from 0 to 32768
[  276.059852][T11592] JBD2: Unrecognised features on journal
[  276.062136][T11592] (syz.8.1909,11592,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  276.066659][T11592] (syz.8.1909,11592,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  276.070363][T11592] (syz.8.1909,11592,0):ocfs2_check_volume:2432 ERROR: status = -22
[  276.073552][T11592] (syz.8.1909,11592,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  276.087177][T11592] (syz.8.1909,11592,1):ocfs2_fill_super:1177 ERROR: status = -22
[  276.222497][T11603] loop8: detected capacity change from 0 to 1024
[  276.264331][ T5966] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  276.434145][ T5966] usb 7-1: Using ep0 maxpacket: 8
[  276.439891][ T5966] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  276.443018][ T5966] usb 7-1: config 0 has no interface number 0
[  276.449312][ T5966] usb 7-1: config 0 interface 1 has no altsetting 0
[  276.460686][ T5966] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d
[  276.466058][ T5966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.469315][ T5966] usb 7-1: Product: syz
[  276.471132][ T5966] usb 7-1: Manufacturer: syz
[  276.473067][ T5966] usb 7-1: SerialNumber: syz
[  276.482235][ T5966] usb 7-1: config 0 descriptor??
[  276.944267][ T5966] i2c-cp2615 7-1:0.1: probe with driver i2c-cp2615 failed with error -71
[  276.952292][ T5966] usb 7-1: USB disconnect, device number 10
[  277.376641][T11618] IPv6: addrconf: prefix option has invalid lifetime
[  277.643118][T11630] loop7: detected capacity change from 0 to 4096
[  277.655466][T11630] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  277.670915][T11630] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 4096)
[  277.698001][T11630] NILFS (loop7): mounting unchecked fs
[  277.907666][T11630] NILFS (loop7): recovery complete
[  277.911107][T11635] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.099884][T11641] loop8: detected capacity change from 0 to 4096
[  278.227167][ T4311] ntfs3(loop8): ino=5, mi_enum_attr
[  278.507009][T11664] loop7: detected capacity change from 0 to 2048
[  278.532457][T11662] loop8: detected capacity change from 0 to 4096
[  278.540452][T11664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.582837][T11664] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  278.659680][   T33] audit: type=1326 audit(1755255470.424:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.6.1941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ff8ebe9 code=0x7ffc0000
[  278.669878][   T33] audit: type=1326 audit(1755255470.424:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.6.1941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ff8ebe9 code=0x7ffc0000
[  278.680953][ T8761] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.688259][   T33] audit: type=1326 audit(1755255470.434:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.6.1941" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f160ff8ebe9 code=0x7ffc0000
[  278.706006][   T33] audit: type=1326 audit(1755255470.454:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.6.1941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ff8ebe9 code=0x7ffc0000
[  278.719317][   T33] audit: type=1326 audit(1755255470.454:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.6.1941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ff8ebe9 code=0x7ffc0000
[  278.731622][   T33] audit: type=1326 audit(1755255470.454:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.6.1941" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f160ffc14a5 code=0x7ffc0000
[  278.753854][   T33] audit: type=1326 audit(1755255470.494:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.6.1941" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f160ff8d84a code=0x7ffc0000
[  278.766091][   T33] audit: type=1326 audit(1755255470.494:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.6.1941" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f160ffc14a5 code=0x7ffc0000
[  278.797247][T11676] Bluetooth: hci3: Frame reassembly failed (-84)
[  278.812848][T11678] loop8: detected capacity change from 0 to 2048
[  278.821941][ T6170] udevd[6170]: incorrect nilfs2 checksum on /dev/loop8
[  278.830142][   T33] audit: type=1326 audit(1755255470.594:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11672 comm="syz.6.1941" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f160ff8ebe9 code=0x7ffc0000
[  278.830306][T11678] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  278.860700][ T6170] udevd[6170]: incorrect nilfs2 checksum on /dev/loop8
[  278.874152][T11679] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.933426][   T33] audit: type=1326 audit(1755255470.694:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11670 comm="syz.6.1941" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f160ff8ebe9 code=0x7ffc0000
[  279.995810][T11687] loop8: detected capacity change from 0 to 4096
[  280.003973][T11687] NILFS (loop8): invalid segment: Inconsistency found
[  280.007257][T11687] NILFS (loop8): trying rollback from an earlier position
[  280.022505][T11687] NILFS (loop8): recovery complete
[  280.027689][T11689] loop6: detected capacity change from 0 to 256
[  280.031964][T11690] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  280.268371][T11702] erspan1: entered allmulticast mode
[  280.391642][T11711] loop8: detected capacity change from 0 to 4096
[  280.394683][T11711] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  280.407234][T11711] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  280.414418][T11711] ntfs3(loop8): ino=19, mi_enum_attr
[  280.434210][T11711] ntfs3(loop8): failed to convert "c46c" to macceltic
[  280.440081][T11711] ntfs3(loop8): ino=20, mi_enum_attr
[  280.564993][T11709] loop6: detected capacity change from 0 to 32768
[  280.601827][T11709] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  280.620056][T11709] XFS (loop6): Ending clean mount
[  280.712424][ T8679] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  280.874503][ T5945] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  281.123873][T11731] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  281.124307][ T5985] IPVS: starting estimator thread 0...
[  281.214206][T11735] IPVS: using max 44 ests per chain, 105600 per kthread
[  281.621321][T11745] loop7: detected capacity change from 0 to 2048
[  281.680569][T11745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  282.803119][T11763] loop6: detected capacity change from 0 to 1024
[  282.862679][   T40] hfsplus: b-tree write err: -5, ino 4
[  282.970938][T11773] IPv4: Oversized IP packet from 172.20.20.24
[  282.974622][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  282.977526][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  283.179365][T11771] loop7: detected capacity change from 0 to 32768
[  283.292451][T11771] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  283.292468][T11771]   allowing incompatible features above 0.0: (unknown version)
[  283.292477][T11771]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  283.309836][T11771] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  283.313265][T11771] bcachefs (loop7): initializing new filesystem
[  283.322374][T11771] bcachefs (loop7): going read-write
[  283.329812][T11771] bcachefs (loop7): marking superblocks
[  283.367038][T11771] bcachefs (loop7): initializing freespace
[  283.372279][T11771] bcachefs (loop7): done initializing freespace
[  283.391321][T11771] bcachefs (loop7): reading snapshots table
[  283.393675][T11771] bcachefs (loop7): reading snapshots done
[  283.433121][T11771] bcachefs (loop7): done starting filesystem
[  283.549841][T11797] veth0_to_bridge: entered promiscuous mode
[  283.562000][T11796] veth0_to_bridge: left promiscuous mode
[  283.568068][T11779] loop6: detected capacity change from 0 to 32768
[  283.628213][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1989'.
[  283.640976][T11779] add_index: next_index = 0.  Resetting!
[  283.643764][T11779] non-latin1 character 0x3ff found in JFS file name
[  283.664181][T11779] mount with iocharset=utf8 to access
[  283.688177][T11801] netlink: 312 bytes leftover after parsing attributes in process `syz.8.1990'.
[  283.705761][ T8761] bcachefs (loop7): shutting down
[  283.707809][ T8761] bcachefs (loop7): going read-only
[  283.709974][ T8761] bcachefs (loop7): finished waiting for writes to stop
[  283.722058][ T8761] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2
[  283.742612][T11803] loop8: detected capacity change from 0 to 1024
[  283.760226][T11803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.773501][ T8761] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  283.783730][ T8761] bcachefs (loop7): clean shutdown complete, journal seq 4
[  283.794514][ T8761] bcachefs (loop7): marking filesystem clean
[  283.812618][ T8761] bcachefs (loop7): shutdown complete
[  283.826885][T10433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.041073][T11808] loop8: detected capacity change from 0 to 32768
[  284.079900][T11808] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  284.102962][T11808] XFS (loop8): Ending clean mount
[  284.115992][T11818] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1993'.
[  284.118967][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1993'.
[  284.163814][T10433] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  284.551741][T11830] loop8: detected capacity change from 0 to 32768
[  284.683903][T11830] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  284.683914][T11830]   allowing incompatible features above 0.0: (unknown version)
[  284.683919][T11830]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  284.714215][T11830] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  284.717652][T11830] bcachefs (loop8): initializing new filesystem
[  284.746193][T11830] bcachefs (loop8): going read-write
[  284.761951][T11830] bcachefs (loop8): marking superblocks
[  284.785859][T11830] bcachefs (loop8): initializing freespace
[  284.791290][T11830] bcachefs (loop8): done initializing freespace
[  284.796527][T11830] bcachefs (loop8): reading snapshots table
[  284.798801][T11830] bcachefs (loop8): reading snapshots done
[  284.820602][T11830] bcachefs (loop8): done starting filesystem
[  284.908575][T10433] bcachefs (loop8): shutting down
[  284.910624][T10433] bcachefs (loop8): going read-only
[  284.912531][T10433] bcachefs (loop8): finished waiting for writes to stop
[  284.918065][T10433] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[  284.941901][T10433] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  284.946774][T10433] bcachefs (loop8): clean shutdown complete, journal seq 4
[  284.949872][T10433] bcachefs (loop8): marking filesystem clean
[  284.987408][T10433] bcachefs (loop8): shutdown complete
[  285.512563][T11858] loop6: detected capacity change from 0 to 256
[  285.580892][T11860] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2009'.
[  285.585520][T11860] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2009'.
[  285.671534][T11864] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2011'.
[  285.719246][T11866] loop6: detected capacity change from 0 to 1024
[  286.002175][T11879] kernel read not supported for file /   (pid: 11879 comm: syz.6.2018)
[  286.017512][   T33] kauditd_printk_skb: 22 callbacks suppressed
[  286.017523][   T33] audit: type=1800 audit(1755255477.784:106): pid=11879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2018" name=200120 dev="mqueue" ino=29593 res=0 errno=0
[  286.037000][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'.
[  286.040097][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2019'.
[  286.052861][T11881] netlink: 'syz.7.2019': attribute type 12 has an invalid length.
[  286.056219][T11881] netlink: 'syz.7.2019': attribute type 11 has an invalid length.
[  286.108783][T11883] loop6: detected capacity change from 0 to 1024
[  286.181865][T11887] could not open pipe file descriptor
[  286.239424][T11889] loop6: detected capacity change from 0 to 1024
[  286.242912][T11889] EXT4-fs: Ignoring removed bh option
[  286.246616][T11889] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  286.251862][T11889] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  286.257521][T11889] EXT4-fs (loop6): orphan cleanup on readonly fs
[  286.260758][T11889] EXT4-fs error (device loop6): ext4_quota_enable:7124: comm syz.6.2023: inode #2304: comm syz.6.2023: iget: illegal inode #
[  286.279627][T11889] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.2023: Bad quota inode: 2304, type: 2
[  286.296985][T11889] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  286.324627][T11889] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  286.327926][T11889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  286.373238][ T8679] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.513242][T11891] loop7: detected capacity change from 0 to 32768
[  286.527735][T11891] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  286.555384][T11891] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  286.628896][ T8761] ocfs2: Unmounting device (7,7) on (node local)
[  286.777379][T11896] loop6: detected capacity change from 0 to 32768
[  286.791639][T11896] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section journal: journal bucket 128 past end of device (nbuckets 128)
[  286.791639][T11896] journal (size 32):
[  286.791639][T11896] Buckets:  9 7 128
[  286.791639][T11896] 
[  286.805765][T11896] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  286.813592][T11898] loop8: detected capacity change from 0 to 32768
[  286.937043][T11898] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  286.937063][T11898]   allowing incompatible features above 0.0: (unknown version)
[  286.937070][T11898]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  286.965503][T11898] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  286.978724][T11898] bcachefs (loop8): initializing new filesystem
[  287.006293][T11898] bcachefs (loop8): going read-write
[  287.030956][T11898] bcachefs (loop8): marking superblocks
[  287.053643][T11898] bcachefs (loop8): initializing freespace
[  287.067795][T11898] bcachefs (loop8): done initializing freespace
[  287.078387][T11898] bcachefs (loop8): reading snapshots table
[  287.081005][T11898] bcachefs (loop8): reading snapshots done
[  287.109782][T11922] vlan3: entered allmulticast mode
[  287.111001][T11898] bcachefs (loop8): done starting filesystem
[  287.111966][T11922] erspan0: entered allmulticast mode
[  287.252776][T10433] bcachefs (loop8): shutting down
[  287.261747][T10433] bcachefs (loop8): going read-only
[  287.263790][T10433] bcachefs (loop8): finished waiting for writes to stop
[  287.268386][T10433] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[  287.274284][   T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  287.317164][T10433] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  287.322212][T10433] bcachefs (loop8): clean shutdown complete, journal seq 4
[  287.328877][T10433] bcachefs (loop8): marking filesystem clean
[  287.354698][T10433] bcachefs (loop8): shutdown complete
[  287.424358][   T10] usb 7-1: Using ep0 maxpacket: 16
[  287.435507][   T10] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  287.443652][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.454148][   T10] usb 7-1: config 0 has no interface number 0
[  287.472660][   T10] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  287.478102][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.481412][   T10] usb 7-1: Product: syz
[  287.483110][   T10] usb 7-1: Manufacturer: syz
[  287.489130][   T10] usb 7-1: SerialNumber: syz
[  287.497441][   T10] usb 7-1: config 0 descriptor??
[  287.507001][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2038'.
[  287.513957][   T10] usb 7-1: Found UVC 0.00 device syz (046d:08f3)
[  287.517662][   T10] usb 7-1: No valid video chain found.
[  287.745188][   T10] usb 7-1: USB disconnect, device number 11
[  288.558412][ T5938] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  288.561445][ T5938] Bluetooth: hci0: Injecting HCI hardware error event
[  288.567189][ T5938] Bluetooth: hci0: hardware error 0x00
[  288.648666][T11944] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2042'.
[  288.840946][T11959] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  288.849874][T11959] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  288.864504][T11959] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  288.885486][T11962] netlink: 'syz.8.2051': attribute type 1 has an invalid length.
[  289.155165][T11989] loop7: detected capacity change from 0 to 1024
[  289.629166][T12009] 9pnet: p9_errstr2errno: server reported unknown error @΂00000000000000000005
[  289.808006][T12015] loop7: detected capacity change from 0 to 256
[  289.816236][T12015] exfat: Deprecated parameter 'namecase'
[  289.818771][T12015] exfat: Deprecated parameter 'utf8'
[  289.826857][T12015] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  290.146618][T12027] loop7: detected capacity change from 0 to 256
[  290.674462][ T5938] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  290.936262][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.944373][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  291.023011][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.028029][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  291.084789][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.089196][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  291.184444][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.188746][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  291.287233][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  291.297643][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  291.302645][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  291.311940][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  291.314946][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  291.341655][   T12] bridge_slave_1: left allmulticast mode
[  291.347081][   T12] bridge_slave_1: left promiscuous mode
[  291.350985][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.359355][   T12] bridge_slave_0: left promiscuous mode
[  291.361968][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.491037][   T12] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  291.969430][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.976183][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  291.981467][   T12] bond0 (unregistering): Released all slaves
[  292.115882][   T12] bond1 (unregistering): Released all slaves
[  292.190903][   T12] tipc: Disabling bearer <udp:syz2>
[  292.205032][   T12] tipc: Left network mode
[  292.347959][T12034] chnl_net:caif_netlink_parms(): no params data found
[  292.431001][   T12] hsr_slave_0: left promiscuous mode
[  292.435573][   T12] hsr_slave_1: left promiscuous mode
[  292.438560][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.441788][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.445867][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.449101][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.465406][   T12] veth1_macvtap: left promiscuous mode
[  292.467983][   T12] veth0_macvtap: left promiscuous mode
[  292.470612][   T12] veth1_vlan: left promiscuous mode
[  292.473021][   T12] veth0_vlan: left promiscuous mode
[  293.036949][   T12] team0 (unregistering): Port device team_slave_1 removed
[  293.077503][   T12] team0 (unregistering): Port device team_slave_0 removed
[  293.358188][ T5938] Bluetooth: hci0: command tx timeout
[  293.778185][T12049] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.813695][T12034] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.819653][T12034] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.823024][T12034] bridge_slave_0: entered allmulticast mode
[  293.827056][T12034] bridge_slave_0: entered promiscuous mode
[  293.833076][T12034] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.846981][T12034] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.850080][T12034] bridge_slave_1: entered allmulticast mode
[  293.860355][T12034] bridge_slave_1: entered promiscuous mode
[  293.976975][T12049] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.001422][T12034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.011484][T12034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.076884][T12049] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.148687][T12034] team0: Port device team_slave_0 added
[  294.155900][T12034] team0: Port device team_slave_1 added
[  294.261462][T12049] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.283455][T12034] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.286468][T12034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.296165][T12034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.316498][T12034] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.323574][T12034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.336258][T12034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.499095][T12034] hsr_slave_0: entered promiscuous mode
[  294.502800][T12034] hsr_slave_1: entered promiscuous mode
[  294.645901][   T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  294.712952][   T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  294.826991][ T5968] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  294.860067][ T5968] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.977373][T12060] netlink: 'syz.8.2093': attribute type 1 has an invalid length.
[  295.068155][T12034] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  295.080354][T12034] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  295.090616][T12034] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  295.098978][T12034] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  295.213966][T12034] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.236073][T12034] 8021q: adding VLAN 0 to HW filter on device team0
[  295.245363][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.247032][ T5985] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  295.248046][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.261501][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.263898][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.376853][T12034] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.415935][ T5985] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  295.420629][ T5985] usb 9-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  295.434338][ T5938] Bluetooth: hci0: command tx timeout
[  295.436627][ T5985] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  295.439875][ T5985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.460799][ T5985] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  295.463995][ T5985] usb 9-1: invalid MIDI out EP 0
[  295.536147][ T5985] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22
[  295.550432][ T6170] udevd[6170]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  295.589588][T12034] veth0_vlan: entered promiscuous mode
[  295.613736][T12034] veth1_vlan: entered promiscuous mode
[  295.648287][T12034] veth0_macvtap: entered promiscuous mode
[  295.652133][T12034] veth1_macvtap: entered promiscuous mode
[  295.663945][T12034] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.671732][T12034] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.685502][ T5383] usb 9-1: USB disconnect, device number 3
[  295.690870][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.705545][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.709299][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.719909][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  295.776054][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.778760][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.803262][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  295.808178][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  295.887770][T12089] loop9: detected capacity change from 0 to 512
[  295.917765][T12089] EXT4-fs (loop9): Test dummy encryption mode enabled
[  295.920760][T12089] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  295.938284][T12089] EXT4-fs (loop9): 1 truncate cleaned up
[  295.942053][T12089] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.581948][T12100] loop8: detected capacity change from 0 to 4096
[  296.648322][T12100] ntfs3(loop8): failed to convert "0080" to koi8-ru
[  296.656278][T12100] ntfs3(loop8): failed to convert name for inode 1e.
[  296.661957][T12100] ntfs3(loop8): ino=1f, mi_enum_attr
[  296.663778][T12100] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  296.765662][T12106] loop7: detected capacity change from 0 to 4096
[  296.788723][T12106] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  296.831102][T12034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.994882][ T5383] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  297.056819][T12121] openvswitch: netlink: Missing key (keys=40, expected=100)
[  297.145517][ T5383] usb 9-1: Using ep0 maxpacket: 32
[  297.153327][ T5383] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[  297.160812][ T5383] usb 9-1: config 0 has no interface number 0
[  297.173021][ T5383] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  297.177258][ T5383] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.180706][ T5383] usb 9-1: Product: syz
[  297.182744][ T5383] usb 9-1: Manufacturer: syz
[  297.187748][ T5383] usb 9-1: SerialNumber: syz
[  297.191938][ T5383] usb 9-1: config 0 descriptor??
[  297.207015][ T5383] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  297.294242][ T5966] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  297.446772][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2113'.
[  297.450959][T12128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2113'.
[  297.816686][ T5938] Bluetooth: hci0: command tx timeout
[  297.852749][ T5383] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  297.856827][T12127] loop7: detected capacity change from 0 to 40427
[  297.858809][ T5383] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  297.860842][T12127] f2fs: Unknown parameter ''
[  297.958218][ T5966] usb 10-1: Using ep0 maxpacket: 16
[  297.964917][ T5966] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.968878][ T5966] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.972757][ T5966] usb 10-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  297.976564][ T5966] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.002631][ T5966] usb 10-1: config 0 descriptor??
[  298.260614][    C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[  298.263734][ T6022] usb 9-1: USB disconnect, device number 4
[  298.274593][ T6022] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  298.287832][ T6022] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  298.292031][ T6022] quatech2 9-1:0.51: device disconnected
[  298.426746][ T5966] hid-multitouch 0003:1FD2:6007.000C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.9-1/input0
[  298.474882][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  298.622974][ T6022] usb 10-1: USB disconnect, device number 2
[  298.676754][T12142] loop7: detected capacity change from 0 to 32768
[  298.680659][T12142] btrfs: Deprecated parameter 'usebackuproot'
[  298.692389][T12142] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  298.696469][T12142] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2120 (12142)
[  298.705178][T12142] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  298.709190][T12142] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  298.712339][T12142] BTRFS info (device loop7): disk space caching is enabled
[  298.716522][T12142] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  298.736833][   T35] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  298.745119][T12142] BTRFS error (device loop7): failed to load root extent
[  298.747380][T12142] BTRFS warning (device loop7): try to load backup roots slot 1
[  298.750520][ T4582] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  298.755001][T12142] BTRFS warning (device loop7): couldn't read tree root
[  298.757171][T12142] BTRFS warning (device loop7): try to load backup roots slot 2
[  298.759743][   T35] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  298.763235][T12142] BTRFS warning (device loop7): couldn't read tree root
[  298.765848][T12142] BTRFS warning (device loop7): try to load backup roots slot 3
[  298.775801][T12142] BTRFS info (device loop7): rebuilding free space tree
[  298.791422][T12142] BTRFS info (device loop7): disabling free space tree
[  298.794808][T12142] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  298.810702][T12142] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  298.914563][ T8761] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  299.229615][T12173] loop8: detected capacity change from 0 to 128
[  299.233959][T12173] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  299.834468][T12188] loop9: detected capacity change from 0 to 512
[  299.834702][ T5945] Bluetooth: hci0: command tx timeout
[  299.857192][T12188] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  299.864224][T12188] FAT-fs (loop9): Filesystem has been set read-only
[  299.984656][T12194] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2135'.
[  300.155517][T12192] loop8: detected capacity change from 0 to 32768
[  300.159898][T12192] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2134 (12192)
[  300.174852][T12192] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  300.178827][T12192] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  300.182946][T12192] BTRFS info (device loop8): disk space caching is enabled
[  300.187524][T12192] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  300.259701][T12192] BTRFS info (device loop8): rebuilding free space tree
[  300.282425][T12192] BTRFS info (device loop8): disabling free space tree
[  300.286873][T12192] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  300.290062][T12192] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  300.925677][T10433] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  301.478347][T12236] loop9: detected capacity change from 0 to 32768
[  301.481290][T12244] loop8: detected capacity change from 0 to 32768
[  301.483832][T12236] XFS: noikeep mount option is deprecated.
[  301.553641][T12236] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  301.558377][T12244] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  301.587087][T12236] XFS (loop9): Ending clean mount
[  301.591772][T12236] XFS (loop9): Quotacheck needed: Please wait.
[  301.605551][T12244] XFS (loop8): Ending clean mount
[  301.626411][T12236] XFS (loop9): Quotacheck: Done.
[  301.645191][   T33] audit: type=1800 audit(1755255493.404:107): pid=12236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2145" name="file1" dev="loop9" ino=9286 res=0 errno=0
[  301.659768][T12236] Direct I/O collision with buffered writes! File: /file1 Comm: syz.9.2145
[  301.679359][T10433] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  301.692334][T12034] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  301.947139][T12275] loop8: detected capacity change from 0 to 128
[  301.949843][T12275] ext2: Unknown parameter 'context'
[  301.981516][T12275] loop8: detected capacity change from 0 to 128
[  302.011434][T12275] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  302.017040][T12275] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  302.524887][T10433] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  302.533515][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2161'.
[  302.671643][T12295] loop8: detected capacity change from 0 to 256
[  302.697039][T12295] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  302.708702][T12295] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  302.736205][T12295] exFAT-fs (loop8): valid_size(150994954) is greater than size(10)
[  302.746574][   T33] audit: type=1800 audit(1755255494.514:108): pid=12295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2164" name="file1" dev="loop8" ino=1048750 res=0 errno=0
[  303.049208][T12304] loop9: detected capacity change from 0 to 1024
[  303.068893][T12304] hfsplus: invalid btree flag
[  303.073796][T12304] hfsplus: failed to load attributes file
[  303.168520][T12308] netlink: 'syz.8.2171': attribute type 4 has an invalid length.
[  303.171275][T12308] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2171'.
[  303.188775][T12308] : renamed from bond0 (while UP)
[  303.584237][   T24] usb 9-1: new low-speed USB device number 5 using dummy_hcd
[  303.714189][T10624] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  303.740696][   T24] usb 9-1: unable to get BOS descriptor or descriptor too short
[  303.746727][   T24] usb 9-1: config 7 has an invalid interface number: 83 but max is 0
[  303.750374][   T24] usb 9-1: config 7 has no interface number 0
[  303.753176][   T24] usb 9-1: config 7 interface 83 altsetting 254 endpoint 0x7 has invalid maxpacket 16, setting to 0
[  303.759109][   T24] usb 9-1: No eUSB2 isoc ep 7 companion for config 7 interface 83 altsetting 254
[  303.763232][   T24] usb 9-1: config 7 interface 83 has no altsetting 0
[  303.770020][   T24] usb 9-1: string descriptor 0 read error: -22
[  303.772807][   T24] usb 9-1: New USB device found, idVendor=19d2, idProduct=0145, bcdDevice=44.f5
[  303.776895][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.795982][   T24] option 9-1:7.83: GSM modem (1-port) converter detected
[  303.884282][T10624] usb 10-1: Using ep0 maxpacket: 32
[  303.895825][T10624] usb 10-1: config 0 has an invalid interface number: 184 but max is 0
[  303.899219][T10624] usb 10-1: config 0 has no interface number 0
[  303.902426][T10624] usb 10-1: config 0 interface 184 has no altsetting 0
[  303.909238][T10624] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  303.913234][T10624] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.916743][T10624] usb 10-1: Product: syz
[  303.918939][T10624] usb 10-1: Manufacturer: syz
[  303.920990][T10624] usb 10-1: SerialNumber: syz
[  303.934393][T10624] usb 10-1: config 0 descriptor??
[  303.940661][T10624] smsc75xx v1.0.0
[  304.004754][   T24] usb 9-1: USB disconnect, device number 5
[  304.018987][   T24] option 9-1:7.83: device disconnected
[  304.299608][T12318] loop7: detected capacity change from 0 to 8
[  304.302780][T12318] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  304.319950][T12318] cramfs: Error -3 while decompressing!
[  304.322321][T12318] cramfs: ffffffff99beb628(26)->ffff8881178f7000(4096)
[  304.329370][T12318] cramfs: Error -3 while decompressing!
[  304.331756][T12318] cramfs: ffffffff99beb642(26)->ffff8881107b1000(4096)
[  304.335455][T12318] cramfs: Error -3 while decompressing!
[  304.337982][T12318] cramfs: ffffffff99beb65c(16)->ffff888111dc5000(4096)
[  304.341004][T12318] cramfs: Error -3 while decompressing!
[  304.343459][T12318] cramfs: ffffffff99beb628(26)->ffff8881178f7000(4096)
[  304.347373][   T33] audit: type=1800 audit(1755255496.114:109): pid=12318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2175" name="file2" dev="loop7" ino=348 res=0 errno=0
[  304.410880][T12320] loop7: detected capacity change from 0 to 2048
[  304.418852][T12320] udf: Bad value for 'lastblock'
[  304.667279][T12322] Invalid option length (1048180) for dns_resolver key
[  305.019032][T12327] loop8: detected capacity change from 0 to 512
[  305.046134][T12327] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  305.068963][T12327] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  305.083741][T12327] EXT4-fs (loop8): group descriptors corrupted!
[  305.546014][T10624] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  305.565646][T10624] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  305.807551][T12330] loop8: detected capacity change from 0 to 2048
[  305.875836][T12330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  306.029696][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2181'.
[  306.231402][T10624] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  306.235141][T10624] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  306.239877][T10624] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  306.245724][T10624] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71
[  306.257513][T10624] usb 10-1: USB disconnect, device number 3
[  306.282917][T12332] loop7: detected capacity change from 0 to 32768
[  306.296899][T12342] loop8: detected capacity change from 0 to 512
[  306.301388][T12332] JBD2: Ignoring recovery information on journal
[  306.332135][T12342] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  306.348023][T12332] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  306.352377][T12342] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  306.357969][T12342] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2185: Failed to acquire dquot type 1
[  306.362325][T12342] EXT4-fs (loop8): 1 truncate cleaned up
[  306.365160][T12342] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.369117][T12342] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.417589][T10433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.422556][ T8761] ocfs2: Unmounting device (7,7) on (node local)
[  306.515200][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2187'.
[  307.290607][T12386] loop9: detected capacity change from 0 to 512
[  307.290907][T12387] loop7: detected capacity change from 0 to 164
[  307.297616][T12387] ISOFS: unable to read i-node block
[  307.300774][T12387] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  307.301344][T12386] EXT4-fs (loop9): Test dummy encryption mode enabled
[  307.303853][T12387] isofs_fill_super: get root inode failed
[  307.324619][T12386] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  307.335097][ T5966] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  307.349801][T12386] EXT4-fs error (device loop9): xattr_find_entry:333: inode #15: comm syz.9.2203: corrupted xattr entries
[  307.358357][T12386] EXT4-fs (loop9): 1 orphan inode deleted
[  307.362047][T12386] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  307.374735][   T33] audit: type=1800 audit(1755255499.144:110): pid=12386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2203" name="file2" dev="loop9" ino=15 res=0 errno=0
[  307.401840][T12034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.430707][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2205'.
[  307.484475][ T5966] usb 9-1: Using ep0 maxpacket: 8
[  307.488712][ T5966] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  307.492158][ T5966] usb 9-1: config 179 has no interface number 0
[  307.495402][ T5966] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  307.499847][ T5966] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  307.505067][ T5966] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  307.509695][ T5966] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  307.515701][ T5966] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  307.520436][ T5966] usb 9-1: config 179 interface 65 has no altsetting 0
[  307.523084][ T5966] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  307.526728][ T5966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.551192][ T5966] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input12
[  307.573962][T12394] loop9: detected capacity change from 0 to 32768
[  307.580201][T12394] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[  307.596392][T12394] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  307.616101][ T5282] input input12: unable to receive magic message: -110
[  307.633220][ T5282] input input12: unable to receive magic message: -32
[  307.646169][ T5282] input input12: unable to receive magic message: -32
[  307.654799][ T6170] input input12: unable to receive magic message: -32
[  307.658339][T12034] ocfs2: Unmounting device (7,9) on (node local)
[  307.696421][ T5282] input input12: unable to receive magic message: -32
[  307.705719][ T5282] input input12: unable to receive magic message: -32
[  307.903065][T12400] loop9: detected capacity change from 0 to 32768
[  307.913109][T12400] bcachefs (/dev/loop9): error validating superblock: Bad dev_idx (got 5, nr_devices 1)
[  307.916787][T12400] bcachefs: bch2_fs_get_tree() error: invalid_sb_dev_idx
[  307.946992][ T5383] usb 9-1: USB disconnect, device number 6
[  307.947071][    C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  308.016363][T12404] loop9: detected capacity change from 0 to 1764
[  308.035147][T12404] iso9660: Corrupted directory entry in block 14 of inode 1920
[  308.068840][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2211'.
[  308.102420][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2212'.
[  308.611979][T12419] loop8: detected capacity change from 0 to 2048
[  308.617295][T12419] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=26504, location=26504
[  308.622447][T12419] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  308.631855][   T33] audit: type=1800 audit(1755255500.404:111): pid=12419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2216" name="file2" dev="loop8" ino=1347 res=0 errno=0
[  309.311902][T12445] Bluetooth: MGMT ver 1.23
[  311.127890][T12467] netlink: 'syz.9.2237': attribute type 12 has an invalid length.
[  311.130450][T12467] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2237'.
[  312.029889][T12485] loop8: detected capacity change from 0 to 512
[  312.032476][T12485] EXT4-fs: Ignoring removed orlov option
[  312.035670][T12485] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'
[  312.042680][T12485] EXT4-fs: error: could not find journal device path
[  312.291747][T12496] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2249'.
[  312.297280][T12496] unsupported nlmsg_type 40
[  312.350570][T12498] loop9: detected capacity change from 0 to 256
[  312.355478][T12498] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  312.359792][T12498] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  312.367541][T12498] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  313.935752][T12537] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2266'.
[  314.147256][T12558] loop7: detected capacity change from 0 to 16
[  314.165633][T12558] erofs (device loop7): mounted with root inode @ nid 36.
[  314.197452][T12558] erofs (device loop7): readahead error at folio 2 @ nid 89
[  314.200320][T12558] erofs (device loop7): readahead error at folio 1 @ nid 89
[  314.258354][T12558] erofs (device loop7): read error -117 @ 1 of nid 89
[  314.428432][   T33] audit: type=1800 audit(1755255506.124:112): pid=12558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2276" name="file3" dev="loop7" ino=89 res=0 errno=0
[  315.084538][T12574] sctp: [Deprecated]: syz.9.2283 (pid 12574) Use of int in maxseg socket option.
[  315.084538][T12574] Use struct sctp_assoc_value instead
[  315.804468][ T6017] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  315.836979][T12590] netlink: 'syz.7.2290': attribute type 6 has an invalid length.
[  315.840583][T12590] netlink: 'syz.7.2290': attribute type 6 has an invalid length.
[  315.911239][T12588] loop8: detected capacity change from 0 to 32768
[  315.914351][T12588] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2289 (12588)
[  315.920299][T12588] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  315.924518][T12588] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  315.928250][T12588] BTRFS info (device loop8): disk space caching is enabled
[  315.931157][T12588] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  315.959548][T12598] loop7: detected capacity change from 0 to 256
[  315.982149][ T6017] usb 10-1: config index 0 descriptor too short (expected 149, got 148)
[  315.985803][ T6017] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  315.989548][ T6017] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  315.993875][ T6017] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  315.998978][ T6017] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  316.001849][ T6017] usb 10-1: SerialNumber: syz
[  316.010789][ T6017] usb 10-1: 0:2 : does not exist
[  316.039353][T12588] BTRFS info (device loop8): rebuilding free space tree
[  316.050012][T12588] BTRFS info (device loop8): disabling free space tree
[  316.052605][T12588] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  316.056930][T12588] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  316.225897][T12618] BTRFS info (device loop8 state M): max_inline set to 4096
[  316.235748][ T5985] usb 10-1: USB disconnect, device number 4
[  316.666333][T10433] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.813218][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.816745][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.071788][ T5968] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  318.184139][ T6022] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  318.347124][ T6022] usb 10-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.350885][ T6022] usb 10-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  318.355898][ T6022] usb 10-1: config 0 interface 0 has no altsetting 0
[  318.358459][ T6022] usb 10-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  318.361932][ T6022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.366603][ T6022] usb 10-1: config 0 descriptor??
[  318.575380][ T6022] usb 10-1: string descriptor 0 read error: -71
[  318.585063][ T6022] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input13
[  318.591113][ T5282] bcm5974 10-1:0.0: could not read from device
[  318.595198][ T5282] bcm5974 10-1:0.0: could not read from device
[  318.599090][ T6022] usb 10-1: USB disconnect, device number 5
[  318.693217][T12654] loop8: detected capacity change from 0 to 256
[  319.214168][ T6022] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  319.370373][ T6022] usb 9-1: Using ep0 maxpacket: 8
[  319.376356][ T6022] usb 9-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  319.379624][ T6022] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.382273][ T6022] usb 9-1: Product: syz
[  319.383620][ T6022] usb 9-1: Manufacturer: syz
[  319.387405][ T6022] usb 9-1: SerialNumber: syz
[  319.390342][ T6022] usb 9-1: config 0 descriptor??
[  319.393650][ T6022] gspca_main: sq905-2.14.0 probing 2770:9120
[  319.499257][T12679] loop9: detected capacity change from 0 to 128
[  319.520960][T12679] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  319.527283][T12679] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  319.539587][   T33] audit: type=1800 audit(1755255511.304:113): pid=12679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2322" name="bus" dev="loop9" ino=12 res=0 errno=0
[  319.561620][T12034] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  319.600905][ T6022] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  319.604419][ T6022] sq905 9-1:0.0: probe with driver sq905 failed with error -71
[  319.616097][ T6022] usb 9-1: USB disconnect, device number 7
[  319.723503][T12685] loop7: detected capacity change from 0 to 32768
[  319.726955][T12691] tipc: Failed to remove unknown binding: 66,3,3/0:3225631793/3225631794
[  319.739498][T12685] ERROR: (device loop7): dbAlloc: the hint is outside the map
[  319.739498][T12685] 
[  319.771256][ T1089] read_mapping_page failed!
[  319.773848][ T1089] ERROR: (device loop7): txCommit: 
[  319.773848][ T1089] 
[  319.780696][ T1089] jfs_write_inode: jfs_commit_inode failed!
[  319.970075][T12693] loop9: detected capacity change from 0 to 32768
[  320.161453][T12700] loop7: detected capacity change from 0 to 32768
[  320.320224][T12700] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  320.359016][T12700] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  320.393143][T12700] XFS (loop7): Tail block (0x29) overwrite detected. Updated to 0x30
[  320.549510][T12700] XFS (loop7): Ending clean mount
[  320.706746][T12700] XFS (loop7): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1803 dinode
[  320.713405][T12700] XFS (loop7): Unmount and run xfs_repair
[  320.718934][T12700] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  320.722273][T12700] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  320.735402][T12700] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  320.739846][T12700] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  320.743685][T12700] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  320.747703][T12700] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  320.751584][T12700] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  320.757129][T12700] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  320.760998][T12700] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  320.783617][ T8761] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  321.485328][T12735] loop7: detected capacity change from 0 to 32768
[  321.488898][T12735] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2342 (12735)
[  321.497320][T12735] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  321.501324][T12735] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  321.504900][T12735] BTRFS info (device loop7): disk space caching is enabled
[  321.507206][T12735] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  321.583425][T12735] BTRFS info (device loop7): rebuilding free space tree
[  321.598908][T12735] BTRFS info (device loop7): disabling free space tree
[  321.606431][T12735] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  321.610505][T12735] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  321.670284][ T8761] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  321.675386][ T6022] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  322.055114][ T6022] usb 10-1: Using ep0 maxpacket: 16
[  322.074136][ T6022] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.078872][ T6022] usb 10-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00
[  322.082009][ T6022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.103549][ T6022] usb 10-1: config 0 descriptor??
[  322.517128][ T6022] logitech-djreceiver 0003:046D:C714.000D: unknown main item tag 0x0
[  322.521512][ T6022] logitech-djreceiver 0003:046D:C714.000D: unknown main item tag 0x0
[  322.525629][ T6022] logitech-djreceiver 0003:046D:C714.000D: unknown main item tag 0x0
[  322.528704][ T6022] logitech-djreceiver 0003:046D:C714.000D: unknown main item tag 0x0
[  322.531579][ T6022] logitech-djreceiver 0003:046D:C714.000D: unknown main item tag 0x0
[  322.711712][T12775] loop8: detected capacity change from 0 to 2048
[  322.715034][   T24] usb 10-1: USB disconnect, device number 6
[  322.717064][T12775] udf: Unknown parameter '~nb'
[  323.577619][T12780] loop9: detected capacity change from 0 to 32768
[  323.586697][T12780] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  323.621199][T12780] XFS (loop9): Ending clean mount
[  323.635357][T12780] XFS (loop9): Quotacheck needed: Please wait.
[  323.673737][T12790] loop8: detected capacity change from 0 to 512
[  323.683824][T12780] XFS (loop9): Quotacheck: Done.
[  323.693781][T12790] journal_path: Non-blockdev passed as './bus'
[  323.699695][T12790] EXT4-fs: error: could not find journal device path
[  323.711188][T12790] loop8: detected capacity change from 0 to 128
[  323.738244][T12034] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  324.988755][ T6022] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  325.144363][ T6022] usb 9-1: Using ep0 maxpacket: 8
[  325.156574][ T6022] usb 9-1: config 32 has 1 interface, different from the descriptor's value: 2
[  325.160336][ T6022] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  325.169347][ T6022] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  325.173713][ T6022] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  325.177889][ T6022] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.424133][ T6022] usb 9-1: string descriptor 0 read error: -71
[  325.478636][ T6022] usb 9-1: USB disconnect, device number 8
[  326.023885][T12822] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2366'.
[  326.155315][T12836] binder: 12835:12836 ioctl c0306201 0 returned -14
[  326.174383][T12838] loop8: detected capacity change from 0 to 128
[  326.179577][T12838] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  326.183838][T12838] ext4 filesystem being mounted at /280/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  326.218682][T10433] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  326.331032][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2378'.
[  326.407060][T12845] loop8: detected capacity change from 0 to 32768
[  326.414247][ T6022] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  326.418699][T12845] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  326.453867][T10433] (syz-executor,10433,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  326.461767][T10433] ocfs2: Unmounting device (7,8) on (node local)
[  326.646491][ T6022] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.650233][ T6022] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  326.653184][ T6022] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  326.657697][ T6022] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.661448][ T6022] usb 10-1: config 0 descriptor??
[  326.781112][T12868] loop7: detected capacity change from 0 to 1024
[  326.905865][ T6022] usb 10-1: USB disconnect, device number 7
[  326.955241][ T5966] IPVS: starting estimator thread 0...
[  327.018200][T12877] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2390'.
[  327.048312][T12873] IPVS: using max 47 ests per chain, 112800 per kthread
[  327.116057][T12881] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  327.118927][T12881] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  327.121678][T12881] hsr_slave_0: left promiscuous mode
[  327.124300][T12881] hsr_slave_1: left promiscuous mode
[  327.332935][T12883] loop8: detected capacity change from 0 to 32768
[  327.337198][T12883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2393 (12883)
[  327.345090][T12883] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  327.348695][T12883] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  327.351760][T12883] BTRFS info (device loop8): using free-space-tree
[  327.400276][T12883] BTRFS error (device loop8): balance: invalid convert data profile single
[  327.467725][T10433] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  327.729121][T12912] loop8: detected capacity change from 0 to 512
[  327.733264][T12912] EXT4-fs: Ignoring removed nomblk_io_submit option
[  327.750956][T12910] loop9: detected capacity change from 0 to 1024
[  327.767875][T12912] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  327.782025][T12912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  327.796641][T12912] EXT4-fs (loop8): couldn't mount RDWR because of unsupported optional features (80)
[  327.797046][T12910] hfsplus: walked past end of dir
[  327.801077][T12912] EXT4-fs (loop8): Skipping orphan cleanup due to unknown ROCOMPAT features
[  327.813259][T12912] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  327.828738][T12912] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.2395: dx entry: limit 65535 != root limit 120
[  327.833492][T12912] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2395: Corrupt directory, running e2fsck is recommended
[  327.847911][T12912] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 3: comm syz.8.2395: path /294/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  327.910219][T10433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.250000][   T33] audit: type=1326 audit(1755255520.014:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.8.2402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136f58ebe9 code=0x7ffc0000
[  328.260293][   T33] audit: type=1326 audit(1755255520.014:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.8.2402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136f58ebe9 code=0x7ffc0000
[  328.275966][   T33] audit: type=1326 audit(1755255520.014:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.8.2402" exe="/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f136f58ebe9 code=0x7ffc0000
[  328.298601][   T33] audit: type=1326 audit(1755255520.014:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12920 comm="syz.8.2402" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136f58ebe9 code=0x7ffc0000
[  328.354195][T12923] loop8: detected capacity change from 0 to 512
[  328.393668][T12923] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.2403: casefold flag without casefold feature
[  328.415366][T12923] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2403: couldn't read orphan inode 15 (err -117)
[  328.445312][T12923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.563612][T10433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.940084][T12945] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2410'.
[  330.045822][T12951] loop8: detected capacity change from 0 to 256
[  330.058761][T12951] FAT-fs (loop8): Directory bread(block 64) failed
[  330.061506][T12951] FAT-fs (loop8): Directory bread(block 65) failed
[  330.064924][T12951] FAT-fs (loop8): Directory bread(block 66) failed
[  330.067490][T12951] FAT-fs (loop8): Directory bread(block 67) failed
[  330.069788][T12951] FAT-fs (loop8): Directory bread(block 68) failed
[  330.078016][T12951] FAT-fs (loop8): Directory bread(block 69) failed
[  330.082527][T12951] FAT-fs (loop8): Directory bread(block 70) failed
[  330.097005][T12951] FAT-fs (loop8): Directory bread(block 71) failed
[  330.099645][T12951] FAT-fs (loop8): Directory bread(block 72) failed
[  330.102162][T12951] FAT-fs (loop8): Directory bread(block 73) failed
[  330.267983][   T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.381298][   T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.477196][   T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.589365][   T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.631073][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  330.641110][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  330.645351][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  330.648322][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  330.651618][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  330.791185][   T12] bridge_slave_1: left allmulticast mode
[  330.793670][   T12] bridge_slave_1: left promiscuous mode
[  330.796815][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  330.804407][   T12] bridge_slave_0: left allmulticast mode
[  330.806934][   T12] bridge_slave_0: left promiscuous mode
[  330.809503][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.685124][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  331.692556][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  331.701902][T12992] loop7: detected capacity change from 0 to 256
[  331.709834][   T12] bond0 (unregistering): Released all slaves
[  331.952900][T12972] chnl_net:caif_netlink_parms(): no params data found
[  332.126897][   T12] hsr_slave_0: left promiscuous mode
[  332.130520][   T12] hsr_slave_1: left promiscuous mode
[  332.133299][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  332.139607][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  332.144383][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  332.147720][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  332.151390][T13012] cgroup: fork rejected by pids controller in /syz7
[  332.173672][   T12] veth1_macvtap: left promiscuous mode
[  332.177973][   T12] veth0_macvtap: left promiscuous mode
[  332.180520][   T12] veth1_vlan: left promiscuous mode
[  332.183041][   T12] veth0_vlan: left promiscuous mode
[  332.696769][   T12] team0 (unregistering): Port device team_slave_1 removed
[  332.719096][ T5945] Bluetooth: hci0: command tx timeout
[  332.740503][   T12] team0 (unregistering): Port device team_slave_0 removed
[  332.982758][T13016] loop8: detected capacity change from 0 to 32768
[  333.162190][T13018] loop8: detected capacity change from 0 to 256
[  333.369048][T12972] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.372426][T12972] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.376671][T12972] bridge_slave_0: entered allmulticast mode
[  333.380532][T12972] bridge_slave_0: entered promiscuous mode
[  333.395245][T12972] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.398217][T12972] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.401196][T12972] bridge_slave_1: entered allmulticast mode
[  333.416507][T12972] bridge_slave_1: entered promiscuous mode
[  333.453647][T12972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  333.458443][T12972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  333.509254][T12972] team0: Port device team_slave_0 added
[  333.517345][T12972] team0: Port device team_slave_1 added
[  333.587152][T12972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  333.590119][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.616372][T12972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  333.636776][T12972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  333.639813][T12972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  333.673338][T12972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  333.778790][T12972] hsr_slave_0: entered promiscuous mode
[  333.782062][T12972] hsr_slave_1: entered promiscuous mode
[  333.892577][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.900759][T13033] loop6: detected capacity change from 0 to 63
[  333.906420][T13033] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.910856][T13033] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.927633][T13033] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.931082][T13033] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.938706][T13033] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.942004][T13033] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.948425][T13033] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.951875][T13033] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.957436][T13033] Buffer I/O error on dev loop6, logical block 0, async page read
[  333.960927][T13033] Buffer I/O error on dev loop6, logical block 0, async page read
[  334.202808][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  334.212199][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  334.217066][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  334.220775][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  334.227499][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  334.329581][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.453679][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.541056][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.796532][ T5945] Bluetooth: hci0: command tx timeout
[  335.052719][   T12] bridge_slave_1: left allmulticast mode
[  335.056155][   T12] bridge_slave_1: left promiscuous mode
[  335.058667][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.064944][   T12] bridge_slave_0: left allmulticast mode
[  335.067328][   T12] bridge_slave_0: left promiscuous mode
[  335.069840][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.588690][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.596478][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.601195][   T12] bond0 (unregistering): Released all slaves
[  335.748015][   T12] bond1 (unregistering): Released all slaves
[  335.770873][T13047] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2453'.
[  335.797117][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2453'.
[  335.801847][T13035] chnl_net:caif_netlink_parms(): no params data found
[  335.967530][T13035] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.970722][T13035] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.973891][T13035] bridge_slave_0: entered allmulticast mode
[  335.978227][T13035] bridge_slave_0: entered promiscuous mode
[  335.987076][T13035] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.990153][T13035] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.993419][T13035] bridge_slave_1: entered allmulticast mode
[  335.999355][T13035] bridge_slave_1: entered promiscuous mode
[  336.072906][T13035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  336.081838][T13035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  336.128034][   T12] hsr_slave_0: left promiscuous mode
[  336.131010][   T12] hsr_slave_1: left promiscuous mode
[  336.133920][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  336.138471][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  336.142175][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  336.146324][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  336.161614][   T12] veth1_macvtap: left promiscuous mode
[  336.164200][   T12] veth0_macvtap: left promiscuous mode
[  336.166621][   T12] veth1_vlan: left promiscuous mode
[  336.168928][   T12] veth0_vlan: left promiscuous mode
[  336.326421][ T5945] Bluetooth: hci2: command tx timeout
[  336.535462][T13062] loop8: detected capacity change from 0 to 16
[  336.557325][T13062] erofs (device loop8): mounted with root inode @ nid 36.
[  336.625911][T13064] loop8: detected capacity change from 0 to 128
[  336.784998][T13066] syz.8.2458: attempt to access beyond end of device
[  336.784998][T13066] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128
[  336.789685][T13066] syz.8.2458: attempt to access beyond end of device
[  336.789685][T13066] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128
[  336.804807][T13066] syz.8.2458: attempt to access beyond end of device
[  336.804807][T13066] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128
[  336.810493][T13066] syz.8.2458: attempt to access beyond end of device
[  336.810493][T13066] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128
[  336.816058][T13066] syz.8.2458: attempt to access beyond end of device
[  336.816058][T13066] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128
[  336.822049][T13066] syz.8.2458: attempt to access beyond end of device
[  336.822049][T13066] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128
[  336.834803][   T12] team0 (unregistering): Port device team_slave_1 removed
[  336.842012][T13066] syz.8.2458: attempt to access beyond end of device
[  336.842012][T13066] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128
[  336.848152][T13066] syz.8.2458: attempt to access beyond end of device
[  336.848152][T13066] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128
[  336.874410][T13066] syz.8.2458: attempt to access beyond end of device
[  336.874410][T13066] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128
[  336.889444][ T5945] Bluetooth: hci0: command tx timeout
[  336.892119][T13066] syz.8.2458: attempt to access beyond end of device
[  336.892119][T13066] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128
[  336.900393][   T12] team0 (unregistering): Port device team_slave_0 removed
[  337.068063][T13068] loop8: detected capacity change from 0 to 1024
[  337.091410][T13068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.127367][T13068] EXT4-fs error (device loop8): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.8.2459: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  337.156900][T13068] EXT4-fs (loop8): Remounting filesystem read-only
[  337.190372][T10433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.519671][T13035] team0: Port device team_slave_0 added
[  337.592201][T13035] team0: Port device team_slave_1 added
[  337.637042][T13035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  337.640026][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.653143][T13035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  337.717825][T13077] loop8: detected capacity change from 0 to 256
[  337.730652][T13077] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  337.736059][T13077] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  337.740780][T13035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  337.743750][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  337.779068][T13035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  337.821515][T13035] hsr_slave_0: entered promiscuous mode
[  337.823895][T13035] hsr_slave_1: entered promiscuous mode
[  337.828263][T13035] debugfs: 'hsr0' already exists in 'hsr'
[  337.830165][T13035] Cannot create hsr debugfs directory
[  337.963555][   T12] IPVS: stop unused estimator thread 0...
[  338.000728][T12972] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  338.010857][T12972] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  338.025295][T12972] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  338.057905][T12972] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  338.151076][T12972] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.170511][T12972] 8021q: adding VLAN 0 to HW filter on device team0
[  338.178845][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.182027][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.193054][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.196352][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.452638][ T5945] Bluetooth: hci2: command tx timeout
[  338.651836][T12972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.722437][T13035] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  338.728564][T13035] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  338.732918][T12972] veth0_vlan: entered promiscuous mode
[  338.737903][T13035] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  338.742503][T13035] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  338.757483][T12972] veth1_vlan: entered promiscuous mode
[  338.793136][T12972] veth0_macvtap: entered promiscuous mode
[  338.801427][T12972] veth1_macvtap: entered promiscuous mode
[  338.818395][T12972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.830858][T12972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.847409][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.850679][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.853595][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.866666][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.871784][T13035] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.911273][T13035] 8021q: adding VLAN 0 to HW filter on device team0
[  338.933038][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.935972][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.948323][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.951190][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.954682][ T5945] Bluetooth: hci0: command tx timeout
[  339.057952][ T3041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.064136][ T3041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.080176][ T3041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.083644][ T3041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.218289][T13035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.288782][T13125] loop8: detected capacity change from 0 to 2048
[  339.325428][T13125]  loop8: p3 < > p4 < >
[  339.327323][T13125] loop8: partition table partially beyond EOD, truncated
[  339.330977][T13125] loop8: p3 start 4284289 is beyond EOD, truncated
[  339.523581][T13138] loop0: detected capacity change from 0 to 8
[  339.541721][T13035] veth0_vlan: entered promiscuous mode
[  339.878209][T13035] veth1_vlan: entered promiscuous mode
[  339.923662][T13035] veth0_macvtap: entered promiscuous mode
[  339.932664][T13035] veth1_macvtap: entered promiscuous mode
[  339.945782][T13035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  339.953486][T13035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.963843][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.976628][T13141] loop0: detected capacity change from 0 to 40427
[  339.979131][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.979669][T13141] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  339.983462][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.985288][T13141] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  340.010056][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.018364][T13141] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  340.022131][T13141] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  340.024710][T13141] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  340.111735][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.116547][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.145315][T12972] CPU: 0 UID: 0 PID: 12972 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  340.145336][T12972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  340.145344][T12972] Call Trace:
[  340.145349][T12972]  <TASK>
[  340.145354][T12972]  dump_stack_lvl+0x189/0x250
[  340.145377][T12972]  ? __pfx_dump_stack_lvl+0x10/0x10
[  340.145391][T12972]  ? __pfx_queue_work_on+0x10/0x10
[  340.145404][T12972]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  340.145420][T12972]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  340.145446][T12972]  f2fs_handle_critical_error+0x37c/0x540
[  340.145475][T12972]  f2fs_write_end_io+0x886/0xb60
[  340.145531][T12972]  __submit_merged_bio+0x27a/0x6a0
[  340.145556][T12972]  __submit_merged_write_cond+0x255/0x530
[  340.145578][T12972]  f2fs_write_data_pages+0x261d/0x3000
[  340.145625][T12972]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  340.145691][T12972]  ? folios_put_refs+0x559/0x640
[  340.145714][T12972]  ? __pfx_folios_put_refs+0x10/0x10
[  340.145725][T12972]  ? rcu_is_watching+0x15/0xb0
[  340.145745][T12972]  ? __lock_acquire+0xab9/0xd20
[  340.145777][T12972]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  340.145795][T12972]  do_writepages+0x32e/0x550
[  340.145822][T12972]  ? do_raw_spin_unlock+0x4d/0x240
[  340.145840][T12972]  filemap_fdatawrite+0x199/0x240
[  340.145857][T12972]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  340.145909][T12972]  ? do_raw_spin_unlock+0x4d/0x240
[  340.145927][T12972]  f2fs_sync_dirty_inodes+0x31f/0x830
[  340.145953][T12972]  f2fs_write_checkpoint+0x95a/0x1df0
[  340.145985][T12972]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  340.146033][T12972]  ? call_rcu+0x6ff/0x9c0
[  340.146044][T12972]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.146060][T12972]  ? kill_f2fs_super+0x298/0x6c0
[  340.146076][T12972]  kill_f2fs_super+0x2c3/0x6c0
[  340.146093][T12972]  ? __pfx_kill_f2fs_super+0x10/0x10
[  340.146104][T12972]  ? radix_tree_delete_item+0x2b6/0x400
[  340.146124][T12972]  ? shrinker_free+0x2ce/0x3e0
[  340.146139][T12972]  deactivate_locked_super+0xbc/0x130
[  340.146154][T12972]  cleanup_mnt+0x425/0x4c0
[  340.146169][T12972]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.146186][T12972]  task_work_run+0x1d4/0x260
[  340.146205][T12972]  ? __pfx_task_work_run+0x10/0x10
[  340.146217][T12972]  ? __x64_sys_umount+0x122/0x160
[  340.146235][T12972]  ? exit_to_user_mode_loop+0x40/0x110
[  340.146254][T12972]  exit_to_user_mode_loop+0xec/0x110
[  340.146268][T12972]  do_syscall_64+0x2bd/0x3b0
[  340.146282][T12972]  ? lockdep_hardirqs_on+0x9c/0x150
[  340.146295][T12972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.146306][T12972]  ? exc_page_fault+0x9f/0xf0
[  340.146321][T12972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.146331][T12972] RIP: 0033:0x7ff795d8ff17
[  340.146343][T12972] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  340.146353][T12972] RSP: 002b:00007ffe16f45038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  340.146366][T12972] RAX: 0000000000000000 RBX: 00007ff795e11c05 RCX: 00007ff795d8ff17
[  340.146374][T12972] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe16f450f0
[  340.146381][T12972] RBP: 00007ffe16f450f0 R08: 0000000000000000 R09: 0000000000000000
[  340.146388][T12972] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe16f46180
[  340.146396][T12972] R13: 00007ff795e11c05 R14: 0000000000052ffa R15: 00007ffe16f461c0
[  340.146420][T12972]  </TASK>
[  340.146425][T12972] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  340.170073][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  340.274439][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  340.474478][ T5945] Bluetooth: hci2: command tx timeout
[  340.590317][T13152] loop7: detected capacity change from 0 to 65536
[  340.640763][T13152] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  340.661944][T13152] XFS (loop7): Ending clean mount
[  340.937383][T13166] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  340.942432][T13166] XFS (loop7): Unmount and run xfs_repair
[  340.945243][T13166] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  340.948554][T13166] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  340.952444][T13166] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  340.956450][T13166] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  340.960401][T13166] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  340.964668][T13166] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  340.968647][T13166] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  340.972974][T13166] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  340.977393][T13166] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  340.981659][T13166] XFS (loop7): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  341.016390][T13166] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  341.021389][T13166] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  341.282330][T13035] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  342.088676][T13191] loop7: detected capacity change from 0 to 8
[  342.107135][T13191] SQUASHFS error: zlib decompression failed, data probably corrupt
[  342.111047][T13191] SQUASHFS error: Failed to read block 0x9b: -5
[  342.113686][T13191] SQUASHFS error: Unable to read metadata cache entry [99]
[  342.118396][T13191] SQUASHFS error: Unable to read inode 0x104
[  342.554322][ T5945] Bluetooth: hci2: command tx timeout
[  342.832383][T13207] loop0: detected capacity change from 0 to 256
[  343.106398][T13217] exFAT-fs (loop0): start_clu is invalid cluster(0x400)
[  343.377575][T13219] loop7: detected capacity change from 0 to 512
[  343.383860][T13219] EXT4-fs (loop7): orphan cleanup on readonly fs
[  343.387069][T13219] Quota error (device loop7): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  343.391654][T13219] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  343.399420][T13219] EXT4-fs (loop7): Cannot turn on quotas: error -117
[  343.407062][T13219] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2505: bg 0: block 248: padding at end of block bitmap is not set
[  343.412739][T13219] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  343.417907][T13219] EXT4-fs (loop7): 1 orphan inode deleted
[  343.421787][T13219] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  343.444626][T13035] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.522330][T13226] loop7: detected capacity change from 0 to 1024
[  343.539906][   T27] hfsplus: b-tree write err: -5, ino 4
[  343.841330][T13245] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2517'.
[  343.936968][T13251] Bluetooth: MGMT ver 1.23
[  343.960270][T13253] loop0: detected capacity change from 0 to 512
[  343.979612][T13253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.986843][T13253] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  344.008845][   T33] audit: type=1800 audit(1755255535.764:118): pid=13253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2520" name="file1" dev="loop0" ino=15 res=0 errno=0
[  344.079177][T12972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.129597][T13258] loop0: detected capacity change from 0 to 256
[  344.349641][T13260] exFAT-fs (loop0): start_clu is invalid cluster(0x400)
[  344.954377][ T5237] Bluetooth: hci3: command 0x1003 tx timeout
[  344.954931][ T5945] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  345.568144][T13294] loop8: detected capacity change from 0 to 1024
[  345.602593][T13294] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  345.608036][T13294] hfsplus: xattr search failed
[  345.984870][T13306] loop7: detected capacity change from 0 to 4096
[  346.028841][T13310] batadv_slave_0: entered promiscuous mode
[  346.032019][T13309] batadv_slave_0: left promiscuous mode
[  346.113380][T13316] loop7: detected capacity change from 0 to 2048
[  346.121730][T13316] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  346.359094][T13318] loop0: detected capacity change from 0 to 40427
[  346.362993][T13318] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0)
[  346.366573][T13318] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  346.372316][T13318] F2FS-fs (loop0): invalid crc value
[  346.415375][T13318] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  346.419205][T13318] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  346.421648][T13318] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  346.463532][T12972] bio_check_eod: 65 callbacks suppressed
[  346.463542][T12972] syz-executor: attempt to access beyond end of device
[  346.463542][T12972] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  346.472803][T12972] CPU: 1 UID: 0 PID: 12972 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  346.472821][T12972] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  346.472828][T12972] Call Trace:
[  346.472834][T12972]  <TASK>
[  346.472839][T12972]  dump_stack_lvl+0x189/0x250
[  346.472861][T12972]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.472876][T12972]  ? __pfx_queue_work_on+0x10/0x10
[  346.472888][T12972]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  346.472904][T12972]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  346.472929][T12972]  f2fs_handle_critical_error+0x37c/0x540
[  346.472953][T12972]  f2fs_write_end_io+0x886/0xb60
[  346.472981][T12972]  __submit_merged_bio+0x27a/0x6a0
[  346.473004][T12972]  __submit_merged_write_cond+0x255/0x530
[  346.473027][T12972]  f2fs_write_data_pages+0x261d/0x3000
[  346.473075][T12972]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  346.473141][T12972]  ? folios_put_refs+0x559/0x640
[  346.473164][T12972]  ? __pfx_folios_put_refs+0x10/0x10
[  346.473175][T12972]  ? rcu_is_watching+0x15/0xb0
[  346.473196][T12972]  ? __lock_acquire+0xab9/0xd20
[  346.473227][T12972]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  346.473244][T12972]  do_writepages+0x32e/0x550
[  346.473268][T12972]  ? do_raw_spin_unlock+0x4d/0x240
[  346.473285][T12972]  filemap_fdatawrite+0x199/0x240
[  346.473300][T12972]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  346.473357][T12972]  ? do_raw_spin_unlock+0x4d/0x240
[  346.473383][T12972]  f2fs_sync_dirty_inodes+0x31f/0x830
[  346.473435][T12972]  f2fs_write_checkpoint+0x95a/0x1df0
[  346.473471][T12972]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  346.473525][T12972]  ? kill_f2fs_super+0x298/0x6c0
[  346.473542][T12972]  kill_f2fs_super+0x2c3/0x6c0
[  346.473580][T12972]  ? __pfx_kill_f2fs_super+0x10/0x10
[  346.473591][T12972]  ? radix_tree_delete_item+0x2b6/0x400
[  346.473613][T12972]  ? shrinker_free+0x2ce/0x3e0
[  346.473629][T12972]  deactivate_locked_super+0xbc/0x130
[  346.473646][T12972]  cleanup_mnt+0x425/0x4c0
[  346.473660][T12972]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.473678][T12972]  task_work_run+0x1d4/0x260
[  346.473697][T12972]  ? __pfx_task_work_run+0x10/0x10
[  346.473710][T12972]  ? __x64_sys_umount+0x122/0x160
[  346.473731][T12972]  ? exit_to_user_mode_loop+0x40/0x110
[  346.473750][T12972]  exit_to_user_mode_loop+0xec/0x110
[  346.473767][T12972]  do_syscall_64+0x2bd/0x3b0
[  346.473782][T12972]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.473797][T12972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.473808][T12972]  ? exc_page_fault+0x9f/0xf0
[  346.473824][T12972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.473835][T12972] RIP: 0033:0x7ff795d8ff17
[  346.473847][T12972] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  346.473857][T12972] RSP: 002b:00007ffe16f45038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  346.473870][T12972] RAX: 0000000000000000 RBX: 00007ff795e11c05 RCX: 00007ff795d8ff17
[  346.473878][T12972] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe16f450f0
[  346.473885][T12972] RBP: 00007ffe16f450f0 R08: 0000000000000000 R09: 0000000000000000
[  346.473892][T12972] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe16f46180
[  346.473900][T12972] R13: 00007ff795e11c05 R14: 00000000000548cc R15: 00007ffe16f461c0
[  346.473923][T12972]  </TASK>
[  346.600947][T12972] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  347.083855][T13353] tmpfs: Cannot enable quota on remount
[  347.425028][ T6017] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  347.574198][ T6017] usb 1-1: Using ep0 maxpacket: 16
[  347.578006][ T6017] usb 1-1: config 0 has an invalid interface number: 49 but max is 0
[  347.581289][ T6017] usb 1-1: config 0 has no interface number 0
[  347.583830][ T6017] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  347.588209][ T6017] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9
[  347.592801][ T6017] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  347.597147][ T6017] usb 1-1: config 0 interface 49 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0
[  347.603297][ T6017] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  347.607846][ T6017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.611134][ T6017] usb 1-1: Product: syz
[  347.612893][ T6017] usb 1-1: Manufacturer: syz
[  347.616438][ T6017] usb 1-1: SerialNumber: syz
[  347.620498][ T6017] usb 1-1: config 0 descriptor??
[  347.623530][T13361] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  347.910313][ T6017] qcserial 1-1:0.49: Qualcomm USB modem converter detected
[  347.919415][ T6017] usb 1-1: USB disconnect, device number 8
[  347.923972][ T6017] qcserial 1-1:0.49: device disconnected
[  348.543324][T13392] loop7: detected capacity change from 0 to 4096
[  348.546686][T13392] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  348.557536][T13392] ntfs3(loop7): ino=19, mi_enum_attr
[  348.559523][T13392] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  348.568113][T13392] ntfs3(loop7): failed to convert "c46c" to maccenteuro
[  348.571078][T13392] ntfs3(loop7): ino=20, mi_enum_attr
[  348.756420][T13408] loop8: detected capacity change from 0 to 1024
[  348.759693][T13408] EXT4-fs: Ignoring removed nomblk_io_submit option
[  348.780055][T13408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.878608][T10433] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  348.888651][T10433] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  348.925268][T13406] loop7: detected capacity change from 0 to 32768
[  348.930776][T13406] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2585 (13406)
[  348.943944][T13406] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  348.948753][T13406] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  348.954760][T13406] BTRFS info (device loop7): using free-space-tree
[  349.063212][T10433] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.118615][T13035] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  349.148575][   T13] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.286152][   T13] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.345063][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  349.359339][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  349.364513][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  349.369492][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  349.373049][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  349.414883][   T13] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.445875][T13449] netlink: 'syz.7.2598': attribute type 10 has an invalid length.
[  349.449664][T13449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.527963][   T13] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.675332][T13453] loop7: detected capacity change from 0 to 32768
[  349.678714][T13453] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2600 (13453)
[  349.690007][T13453] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  349.693338][T13453] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  349.697494][T13453] BTRFS info (device loop7): using free-space-tree
[  349.707501][T13462] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2602'.
[  349.782145][T13441] chnl_net:caif_netlink_parms(): no params data found
[  349.796756][   T33] audit: type=1800 audit(1755255541.564:119): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2600" name="file1" dev="loop7" ino=260 res=0 errno=0
[  349.806217][   T13] bridge_slave_1: left allmulticast mode
[  349.808921][   T13] bridge_slave_1: left promiscuous mode
[  349.810754][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.815105][   T13] bridge_slave_0: left allmulticast mode
[  349.817017][   T13] bridge_slave_0: left promiscuous mode
[  349.819073][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.835186][T13035] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  349.990944][T13470] loop0: detected capacity change from 0 to 40427
[  350.000617][T13470] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  350.003212][T13470] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  350.007311][T13470] F2FS-fs (loop0): invalid crc value
[  350.022189][T13483] loop7: detected capacity change from 0 to 512
[  350.061734][T13470] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  350.062155][T13483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.070992][T13483] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  350.087982][T13470] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  350.090511][T13470] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  350.107492][T13035] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.500965][T13498] loop7: detected capacity change from 0 to 4096
[  350.541135][T13502] loop0: detected capacity change from 0 to 512
[  350.547135][T13502] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  350.551721][T13502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002]
[  350.556013][T13502] System zones: 1-12
[  350.561425][T13502] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2612: iget: bogus i_mode (700)
[  350.568211][   T33] audit: type=1800 audit(1755255542.334:120): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2611" name="file1" dev="loop7" ino=30 res=0 errno=0
[  350.573283][T13498] ntfs3(loop7): ino=1e, "file1" attr_set_size
[  350.581146][   T13]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  350.581784][T13502] EXT4-fs (loop0): Remounting filesystem read-only
[  350.584864][   T33] audit: type=1800 audit(1755255542.334:121): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2611" name="file1" dev="loop7" ino=30 res=0 errno=0
[  350.588552][T13502] EXT4-fs (loop0): 1 orphan inode deleted
[  350.601472][T13502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.604420][   T13]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  350.613808][   T13]  (unregistering): Released all slaves
[  350.662886][T12972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.833217][T13441] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.835774][T13441] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.837729][T13512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2615'.
[  350.838808][T13441] bridge_slave_0: entered allmulticast mode
[  350.846714][T13441] bridge_slave_0: entered promiscuous mode
[  350.849980][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2615'.
[  350.850595][T13441] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.867702][T13441] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.870762][T13441] bridge_slave_1: entered allmulticast mode
[  350.873850][T13441] bridge_slave_1: entered promiscuous mode
[  350.968475][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.974143][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.977043][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.979608][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.995102][   T13] veth1_macvtap: left promiscuous mode
[  350.998033][   T13] veth0_macvtap: left promiscuous mode
[  350.999849][   T13] veth1_vlan: left promiscuous mode
[  351.001647][   T13] veth0_vlan: left promiscuous mode
[  351.015873][T13505] loop7: detected capacity change from 0 to 32768
[  351.409192][   T13] team0 (unregistering): Port device team_slave_1 removed
[  351.437120][ T5237] Bluetooth: hci1: command tx timeout
[  351.449549][   T13] team0 (unregistering): Port device team_slave_0 removed
[  351.956437][T13441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.973243][T13441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  352.023075][T13441] team0: Port device team_slave_0 added
[  352.093894][T13524] 8021q: adding VLAN 0 to HW filter on device bond1
[  352.108636][T13441] team0: Port device team_slave_1 added
[  352.194782][T13441] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.200375][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.213060][T13441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.219795][T13441] batman_adv: batadv0: Adding interface: batadv_slave_1
[  352.222199][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.254422][T13441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.325161][T13441] hsr_slave_0: entered promiscuous mode
[  352.335141][T13441] hsr_slave_1: entered promiscuous mode
[  352.339982][T13441] debugfs: 'hsr0' already exists in 'hsr'
[  352.341989][T13441] Cannot create hsr debugfs directory
[  352.350840][   T13] ==================================================================
[  352.353545][   T13] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  352.356418][   T13] Write of size 8 at addr ffff88802b81e430 by task kworker/u8:1/13
[  352.360027][   T13] 
[  352.360829][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  352.360839][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  352.360844][   T13] Workqueue: netns cleanup_net
[  352.360858][   T13] Call Trace:
[  352.360862][   T13]  <TASK>
[  352.360865][   T13]  dump_stack_lvl+0x189/0x250
[  352.360875][   T13]  ? __virt_addr_valid+0x1c8/0x5c0
[  352.360883][   T13]  ? rcu_is_watching+0x15/0xb0
[  352.360889][   T13]  ? __kasan_check_byte+0x12/0x40
[  352.360900][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.360907][   T13]  ? rcu_is_watching+0x15/0xb0
[  352.360913][   T13]  ? lock_release+0x4b/0x3e0
[  352.360922][   T13]  ? __virt_addr_valid+0x1c8/0x5c0
[  352.360929][   T13]  ? __virt_addr_valid+0x4a5/0x5c0
[  352.360937][   T13]  print_report+0xca/0x240
[  352.360944][   T13]  ? __xfrm_state_delete+0x696/0xca0
[  352.360953][   T13]  kasan_report+0x118/0x150
[  352.360962][   T13]  ? __xfrm_state_delete+0x696/0xca0
[  352.360971][   T13]  __xfrm_state_delete+0x696/0xca0
[  352.360982][   T13]  xfrm_state_flush+0x45f/0x770
[  352.360992][   T13]  xfrm6_tunnel_net_exit+0x3f/0x100
[  352.361002][   T13]  ops_undo_list+0x49a/0x990
[  352.361013][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  352.361022][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  352.361030][   T13]  cleanup_net+0x4c5/0x800
[  352.361039][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  352.361047][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.361055][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  352.361062][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  352.361068][   T13]  process_scheduled_works+0xae1/0x17b0
[  352.361079][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  352.361087][   T13]  worker_thread+0x8a0/0xda0
[  352.361097][   T13]  kthread+0x711/0x8a0
[  352.361107][   T13]  ? __pfx_worker_thread+0x10/0x10
[  352.361113][   T13]  ? __pfx_kthread+0x10/0x10
[  352.361120][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.361127][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.361136][   T13]  ? __pfx_kthread+0x10/0x10
[  352.361143][   T13]  ret_from_fork+0x3fc/0x770
[  352.361151][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  352.361158][   T13]  ? __switch_to_asm+0x39/0x70
[  352.361165][   T13]  ? __switch_to_asm+0x33/0x70
[  352.361173][   T13]  ? __pfx_kthread+0x10/0x10
[  352.361180][   T13]  ret_from_fork_asm+0x1a/0x30
[  352.361190][   T13]  </TASK>
[  352.361193][   T13] 
[  352.453332][   T13] Allocated by task 11799:
[  352.455187][   T13]  kasan_save_track+0x3e/0x80
[  352.457164][   T13]  __kasan_slab_alloc+0x6c/0x80
[  352.459297][   T13]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  352.461685][   T13]  xfrm_state_alloc+0x24/0x2f0
[  352.463448][   T13]  xfrm_add_acquire+0xf7/0xb20
[  352.465350][   T13]  xfrm_user_rcv_msg+0x7a3/0xab0
[  352.467246][   T13]  netlink_rcv_skb+0x208/0x470
[  352.468838][   T13]  xfrm_netlink_rcv+0x79/0x90
[  352.470523][   T13]  netlink_unicast+0x82f/0x9e0
[  352.472485][   T13]  netlink_sendmsg+0x805/0xb30
[  352.474529][   T13]  __sock_sendmsg+0x21c/0x270
[  352.476580][   T13]  ____sys_sendmsg+0x505/0x830
[  352.478663][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  352.480379][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  352.482060][   T13]  do_syscall_64+0xfa/0x3b0
[  352.483582][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.485544][   T13] 
[  352.486359][   T13] Freed by task 11799:
[  352.487815][   T13]  kasan_save_track+0x3e/0x80
[  352.489347][   T13]  kasan_save_free_info+0x46/0x50
[  352.491009][   T13]  __kasan_slab_free+0x5b/0x80
[  352.492639][   T13]  kmem_cache_free+0x18f/0x400
[  352.494257][   T13]  xfrm_add_acquire+0x280/0xb20
[  352.496241][   T13]  xfrm_user_rcv_msg+0x7a3/0xab0
[  352.498121][   T13]  netlink_rcv_skb+0x208/0x470
[  352.499748][   T13]  xfrm_netlink_rcv+0x79/0x90
[  352.501438][   T13]  netlink_unicast+0x82f/0x9e0
[  352.503075][   T13]  netlink_sendmsg+0x805/0xb30
[  352.504685][   T13]  __sock_sendmsg+0x21c/0x270
[  352.506233][   T13]  ____sys_sendmsg+0x505/0x830
[  352.507883][   T13]  ___sys_sendmsg+0x21f/0x2a0
[  352.509839][   T13]  __x64_sys_sendmsg+0x19b/0x260
[  352.511789][   T13]  do_syscall_64+0xfa/0x3b0
[  352.513600][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.515711][   T13] 
[  352.516588][   T13] The buggy address belongs to the object at ffff88802b81e400
[  352.516588][   T13]  which belongs to the cache xfrm_state of size 928
[  352.521874][   T13] The buggy address is located 48 bytes inside of
[  352.521874][   T13]  freed 928-byte region [ffff88802b81e400, ffff88802b81e7a0)
[  352.527340][   T13] 
[  352.528416][   T13] The buggy address belongs to the physical page:
[  352.530978][   T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b81e400 pfn:0x2b81c
[  352.534877][   T13] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  352.538027][   T13] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  352.541104][   T13] page_type: f5(slab)
[  352.542781][   T13] raw: 00fff00000000040 ffff88801dbad280 dead000000000122 0000000000000000
[  352.546345][   T13] raw: ffff88802b81e400 00000000800e0005 00000000f5000000 0000000000000000
[  352.549838][   T13] head: 00fff00000000040 ffff88801dbad280 dead000000000122 0000000000000000
[  352.553451][   T13] head: ffff88802b81e400 00000000800e0005 00000000f5000000 0000000000000000
[  352.557151][   T13] head: 00fff00000000002 ffffea0000ae0701 00000000ffffffff 00000000ffffffff
[  352.560871][   T13] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  352.564474][   T13] page dumped because: kasan: bad access detected
[  352.567193][   T13] page_owner tracks the page as allocated
[  352.569555][   T13] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 8165, tgid 8159 (syz.3.781), ts 151313596454, free_ts 147199046289
[  352.577494][   T13]  post_alloc_hook+0x240/0x2a0
[  352.579454][   T13]  get_page_from_freelist+0x21e4/0x22c0
[  352.581717][   T13]  __alloc_frozen_pages_noprof+0x181/0x370
[  352.583952][   T13]  alloc_pages_mpol+0x232/0x4a0
[  352.585593][   T13]  allocate_slab+0x8a/0x370
[  352.587189][   T13]  ___slab_alloc+0xbeb/0x1410
[  352.589230][   T13]  kmem_cache_alloc_noprof+0x283/0x3c0
[  352.591355][   T13]  xfrm_state_alloc+0x24/0x2f0
[  352.592948][   T13]  xfrm_state_find+0x37d4/0x5400
[  352.595070][   T13]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  352.597649][   T13]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  352.599590][   T13]  xfrm_lookup_route+0x3c/0x1c0
[  352.601240][   T13]  ip6_sk_dst_lookup_flow+0x790/0x980
[  352.603159][   T13]  udpv6_sendmsg+0x183b/0x24b0
[  352.605133][   T13]  __sock_sendmsg+0xe5/0x270
[  352.606720][   T13]  ____sys_sendmsg+0x52d/0x830
[  352.608354][   T13] page last free pid 5936 tgid 5936 stack trace:
[  352.610450][   T13]  __free_frozen_pages+0xbc4/0xd30
[  352.612087][   T13]  __put_partials+0x156/0x1a0
[  352.613667][   T13]  put_cpu_partial+0x17c/0x250
[  352.615244][   T13]  __slab_free+0x2d5/0x3c0
[  352.616678][   T13]  qlist_free_all+0x97/0x140
[  352.618175][   T13]  kasan_quarantine_reduce+0x148/0x160
[  352.619957][   T13]  __kasan_slab_alloc+0x22/0x80
[  352.621539][   T13]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  352.623265][   T13]  ptlock_alloc+0x20/0x70
[  352.625057][   T13]  pte_alloc_one+0x7d/0x170
[  352.626951][   T13]  __pte_alloc+0x25/0x1a0
[  352.628810][   T13]  copy_pmd_range+0x6a91/0x71d0
[  352.630856][   T13]  copy_page_range+0xc14/0x1270
[  352.632930][   T13]  dup_mmap+0xf57/0x1ac0
[  352.634725][   T13]  copy_mm+0x13c/0x4b0
[  352.636425][   T13]  copy_process+0x1706/0x3c00
[  352.638268][   T13] 
[  352.639350][   T13] Memory state around the buggy address:
[  352.641787][   T13]  ffff88802b81e300: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  352.645242][   T13]  ffff88802b81e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  352.648695][   T13] >ffff88802b81e400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  352.652143][   T13]                                      ^
[  352.654573][   T13]  ffff88802b81e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  352.657930][   T13]  ffff88802b81e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  352.661334][   T13] ==================================================================
[  352.664977][   T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  352.667953][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  352.673180][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  352.676638][   T13] Workqueue: netns cleanup_net
[  352.678231][   T13] Call Trace:
[  352.679441][   T13]  <TASK>
[  352.680687][   T13]  dump_stack_lvl+0x99/0x250
[  352.682563][   T13]  ? __asan_memcpy+0x40/0x70
[  352.684495][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.686644][   T13]  ? __pfx__printk+0x10/0x10
[  352.688619][   T13]  vpanic+0x281/0x750
[  352.690405][   T13]  ? __pfx_print_hex_dump+0x10/0x10
[  352.692555][   T13]  ? __pfx_vpanic+0x10/0x10
[  352.694406][   T13]  ? irqentry_exit+0x74/0x90
[  352.696322][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.698543][   T13]  panic+0xb9/0xc0
[  352.700119][   T13]  ? __pfx_panic+0x10/0x10
[  352.702005][   T13]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  352.704487][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  352.707085][   T13]  ? __xfrm_state_delete+0x696/0xca0
[  352.709262][   T13]  check_panic_on_warn+0x89/0xb0
[  352.711329][   T13]  ? __xfrm_state_delete+0x696/0xca0
[  352.713524][   T13]  end_report+0x78/0x160
[  352.715218][   T13]  kasan_report+0x129/0x150
[  352.717073][   T13]  ? __xfrm_state_delete+0x696/0xca0
[  352.719217][   T13]  __xfrm_state_delete+0x696/0xca0
[  352.721394][   T13]  xfrm_state_flush+0x45f/0x770
[  352.723440][   T13]  xfrm6_tunnel_net_exit+0x3f/0x100
[  352.725646][   T13]  ops_undo_list+0x49a/0x990
[  352.727625][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  352.729714][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  352.731800][   T13]  cleanup_net+0x4c5/0x800
[  352.733625][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  352.735545][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.737684][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  352.739946][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  352.742333][   T13]  process_scheduled_works+0xae1/0x17b0
[  352.744611][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  352.747080][   T13]  worker_thread+0x8a0/0xda0
[  352.749011][   T13]  kthread+0x711/0x8a0
[  352.750750][   T13]  ? __pfx_worker_thread+0x10/0x10
[  352.752831][   T13]  ? __pfx_kthread+0x10/0x10
[  352.754697][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.756745][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.758841][   T13]  ? __pfx_kthread+0x10/0x10
[  352.760772][   T13]  ret_from_fork+0x3fc/0x770
[  352.762642][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  352.764735][   T13]  ? __switch_to_asm+0x39/0x70
[  352.766672][   T13]  ? __switch_to_asm+0x33/0x70
[  352.768732][   T13]  ? __pfx_kthread+0x10/0x10
[  352.770631][   T13]  ret_from_fork_asm+0x1a/0x30
[  352.772732][   T13]  </TASK>
[  352.774882][   T13] Kernel Offset: disabled
[  352.776699][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:59:04  Registers:
info registers vcpu 0

CPU#0
RAX=c1870111eab30300 RBX=1ffffd40001d5569 RCX=c1870111eab30300 RDX=0000000000000000
RSI=ffffffff8dba6026 RDI=ffffffff8be33400 RBP=0000000000000000 RSP=ffffc90002cdf348
R8 =0000000000000000 R9 =ffffffff822e4087 R10=dffffc0000000000 R11=fffff940001d5569
R12=0000000000000000 R13=ffffea0000eaab40 R14=ffffffff822e4087 R15=ffffea0000eaab58
RIP=ffffffff8b794ee0 RFL=00000296 [--S-AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff793fee6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ed1fff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=4001000802000000 ffffffff8133c57e XMM03=4001000803000000 4002000830000000
XMM04=4003000800000000 4003000812000000 XMM05=8e00400300080000 0000400300081200
XMM06=0000400100080300 0000400200083000 XMM07=0000400100080200 0000400100080c00
XMM08=0000400300088002 003c006269660001 XMM09=0000000000000000 00007ff795e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107090
R8 =ffff8881069a8237 R9 =1ffff11020d35046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9917 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555561722808 CR3=000000003990c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 00007fbcdc212e53
XMM06=0000000000000000 00007fbcdc212e4d XMM07=0000000000000000 00007fbcdc212e61
XMM08=0000000000000000 00007fbcdc212ee7 XMM09=0000000000000000 00007fbcdc212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
