last executing test programs:

1m10.817859007s ago: executing program 2 (id=281):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = io_uring_setup(0x1951, &(0x7f00000000c0)={0x0, 0xaf4})
close_range(r1, 0xffffffffffffffff, 0x0)
vmsplice(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0)

1m9.947796438s ago: executing program 2 (id=282):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0xe, 0x0, &(0x7f0000000000)="46c33c56e981df5e1559014932a2", 0x0, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m9.947479503s ago: executing program 2 (id=283):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
readv(r2, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4096, 0x1000}], 0x1)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0)

1m9.757220489s ago: executing program 2 (id=284):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r1 = open_tree(r0, &(0x7f0000000080)='./file0/file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x162)

1m9.756869941s ago: executing program 2 (id=285):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000540)='./file6\x00', 0x201080b, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8, @ANYBLOB="f9a192156bf01ca65961aa6bd8ded2e99e6d0172a290a4fb5b1c9e8d9a9f58a7c3868f3eb59150ec071f4e3228ed5671cc052363c2bc5a05b0140cd7da2c3b26425ae32d743c4d16e3c55cf800e12e64a3640a40b4f2f180a48dd8a25cf189be2fd909aa7590af8279dcc0a61037dc8c3700a8c29ca46a4843d9fefb37f83f64ea9df56d8d0de49b763efff6f4760bea6106b97d031bae46be2b0fd7048ba60a097ee8310a55b529828699f7acce", @ANYRESOCT=0x0, @ANYRES64], 0x21, 0x1cd, &(0x7f0000000280)="$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")
creat(&(0x7f00000002c0)='./file1\x00', 0x10)

1m7.27434287s ago: executing program 2 (id=293):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0xfffffffffffffffe, r1, 0x3}}, 0x18)

1m7.070352071s ago: executing program 32 (id=293):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x106, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0xfffffffffffffffe, r1, 0x3}}, 0x18)

1m1.14825152s ago: executing program 0 (id=341):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x4, 0xffffff01, 0x2, {0x9, @pix_mp={0xcf6, 0xffff, 0x3234564e, 0x2, 0x8, [{0x2e302c, 0x3}, {0x1, 0xfffffffc}, {0x4, 0xffffbfff}, {0x7fff0, 0x10000}, {0x0, 0x1}, {0x6, 0x5}, {0xde, 0x7}, {0xa, 0x10000}], 0x4, 0x5, 0x2, 0x0, 0x7}}, 0x8001})

1m1.098520265s ago: executing program 0 (id=342):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth0\x00', {0x2, 0x4e20, @empty}})

1m1.098282318s ago: executing program 0 (id=343):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48)

1m1.097886633s ago: executing program 0 (id=344):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m0.767985415s ago: executing program 0 (id=348):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000cc0)={[{@noblock_validity}, {@jqfmt_vfsold}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020)

59.856528934s ago: executing program 0 (id=359):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, <r2=>0x0, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2})

59.485284227s ago: executing program 33 (id=359):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, <r2=>0x0, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r2})

19.756898865s ago: executing program 1 (id=813):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x200, 0x4, 0x2}, 0x10)

19.756672634s ago: executing program 1 (id=814):
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000240)=0xffffffed)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)
sendmmsg$inet6(r0, 0x0, 0x0, 0x0)

18.266923135s ago: executing program 1 (id=828):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

18.133380602s ago: executing program 1 (id=833):
r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x0, 0x11dc, &(0x7f0000001280)="$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")
r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x30)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307202, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

17.508871283s ago: executing program 1 (id=839):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xe, 0x9, 0x1, "6022f57f75157653c3099800f2001000", 0x39565559})

17.228525769s ago: executing program 1 (id=846):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x11}, 0x2, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

17.142943786s ago: executing program 34 (id=846):
r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x11}, 0x2, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

2.228865371s ago: executing program 5 (id=1023):
socket(0x2, 0xa, 0x0)
socket(0x11, 0x3, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00')
socket$packet(0x11, 0x2, 0x300)
preadv(r0, &(0x7f0000002440)=[{&(0x7f0000002180)=""/125, 0x7d}], 0x1, 0x6, 0x5)

2.14860725s ago: executing program 5 (id=1024):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f00000003c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$pokeuser(0x6, r5, 0x358, 0xffff8880b8638cc0)
r6 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)}, 0x80000001}, {{&(0x7f0000000440)=@alg, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000800)=""/121, 0x79}, {0x0}, {&(0x7f00000029c0)=""/4096, 0x1000}], 0x4, &(0x7f0000000240)}, 0xbe45}], 0x4, 0x4022, 0x0)

1.029237909s ago: executing program 5 (id=1026):
futex(&(0x7f000000cffc)=0x4, 0x109, 0x4, 0x0, 0x0, 0x1)
futex(&(0x7f000000cffc), 0x5, 0x1000000, 0x0, &(0x7f0000048000)=0x2000, 0x5000003)

1.02490949s ago: executing program 3 (id=1028):
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000002080)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a4a438, &(0x7f0000002100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES32, @ANYRES64], 0xb, 0x0, &(0x7f0000000000))
bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e)

928.511853ms ago: executing program 5 (id=1029):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000780)=r1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010"], 0x54}}, 0x0)

846.968518ms ago: executing program 5 (id=1030):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r1, 0x1)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r2, 0x1)
flock(r2, 0x1)

628.10129ms ago: executing program 4 (id=1036):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'batadv_slave_0\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xe, [0xffffff01, 0x8, 0x4, 0x1, 0x3, 0x0, 0xfffffffb, 0x5, 0x4, 0xcc5, 0xe, 0x0, 0x4, 0x6, 0x2, 0x5, 0x1, 0x1, 0x4, 0x3, 0x6, 0x9, 0x400, 0xb, 0x2, 0x6df, 0x0, 0x4, 0x7, 0x8000, 0x400, 0x80000001, 0x800, 0x3, 0x0, 0x1, 0x1, 0xf36, 0x9cf4, 0x9, 0x0, 0x8, 0x7, 0x8, 0xff, 0x2, 0x8001, 0x9, 0x0, 0x2, 0x9, 0x7, 0x2, 0x80000000, 0x3, 0xffffffff, 0x3, 0x6, 0x2, 0x1ff, 0xa, 0x4, 0x9, 0x4, 0x5, 0xed, 0x9, 0x9, 0x7, 0x0, 0xe596, 0x1, 0x8, 0x7, 0x10001, 0x8, 0x4080000, 0x4, 0x80000000, 0x9, 0xff, 0x6, 0x0, 0xfffffe00, 0x7, 0x8, 0x3, 0x96, 0x8, 0x8000, 0x43df, 0x9, 0x1000, 0x5, 0x401, 0x9, 0x2, 0x1000, 0x1000, 0x2, 0xc47, 0x6, 0x9, 0x8, 0x10, 0x6, 0x4, 0x7, 0xf9c, 0x3, 0x800, 0x9ec, 0x800, 0x4, 0x5, 0xa09, 0x3, 0x8, 0x400, 0x0, 0x45af, 0x0, 0x3, 0x5, 0x4, 0x0, 0x6]}})

538.611767ms ago: executing program 3 (id=1037):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r1, 0x639, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000)

538.409229ms ago: executing program 4 (id=1038):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

538.179964ms ago: executing program 3 (id=1039):
r0 = socket(0x28, 0x1, 0x0)
connect$packet(r0, &(0x7f0000000500)={0x28, 0x2, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
connect$packet(r0, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)

488.687304ms ago: executing program 4 (id=1040):
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008800, &(0x7f0000000080), 0x81, 0x648, &(0x7f0000000dc0)="$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")

488.499004ms ago: executing program 3 (id=1041):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012009703000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x40018}, 0x880)

418.883941ms ago: executing program 3 (id=1042):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x60)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x26, 0x9d, 0x5e}, 0x2c)

355.154644ms ago: executing program 4 (id=1043):
mkdir(&(0x7f0000001c00)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100)={[{@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]})

293.724448ms ago: executing program 3 (id=1044):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00007}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2007})
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

293.512656ms ago: executing program 4 (id=1045):
syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x4, @loopback={0xfec0ffffffffffff}, 0x3}], 0x1c)

291.831µs ago: executing program 4 (id=1046):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
r1 = socket$caif_stream(0x25, 0x1, 0x4)
sendmmsg$inet(r1, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

0s ago: executing program 5 (id=1047):
syz_usb_connect$uac1(0x3, 0x71, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x34, 0xa0, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x8, 0x3, {0x7, 0x25, 0x1, 0x2, 0x7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x58, 0x3, 0xfb, {0x7, 0x25, 0x1, 0x0, 0x8, 0x7e}}}}}}}]}}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
pipe2$watch_queue(&(0x7f0000000180), 0x80)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4339' (ED25519) to the list of known hosts.
syzkaller login: [   48.227927][ T5832] cgroup: Unknown subsys name 'net'
[   48.328375][ T5832] cgroup: Unknown subsys name 'cpuset'
[   48.332166][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.953681][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.120623][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.123806][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.126610][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.129272][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.129289][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.132070][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.137693][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.141320][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.145347][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.150344][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.177463][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.181423][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.184693][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.194081][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.197875][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.432448][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   54.487582][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   54.592898][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.597062][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.600239][ T5846] bridge_slave_0: entered allmulticast mode
[   54.604111][ T5846] bridge_slave_0: entered promiscuous mode
[   54.613341][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.616722][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.619809][ T5846] bridge_slave_1: entered allmulticast mode
[   54.623699][ T5846] bridge_slave_1: entered promiscuous mode
[   54.627670][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   54.682353][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.689060][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.706405][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.709129][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.711763][ T5845] bridge_slave_0: entered allmulticast mode
[   54.714337][ T5845] bridge_slave_0: entered promiscuous mode
[   54.747534][ T5846] team0: Port device team_slave_0 added
[   54.750353][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.752844][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.755205][ T5845] bridge_slave_1: entered allmulticast mode
[   54.758137][ T5845] bridge_slave_1: entered promiscuous mode
[   54.761898][ T5846] team0: Port device team_slave_1 added
[   54.800718][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.806973][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.868767][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.871760][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.883192][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.890044][ T5845] team0: Port device team_slave_0 added
[   54.893030][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.896293][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.907261][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.912395][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.915286][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.919713][ T5855] bridge_slave_0: entered allmulticast mode
[   54.923182][ T5855] bridge_slave_0: entered promiscuous mode
[   54.927701][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.930476][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.933769][ T5855] bridge_slave_1: entered allmulticast mode
[   54.937891][ T5855] bridge_slave_1: entered promiscuous mode
[   54.941895][ T5845] team0: Port device team_slave_1 added
[   54.983986][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.987038][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.996944][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.039972][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.042742][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.052935][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.061794][ T5846] hsr_slave_0: entered promiscuous mode
[   55.065073][ T5846] hsr_slave_1: entered promiscuous mode
[   55.084602][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.089726][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.129738][ T5855] team0: Port device team_slave_0 added
[   55.138719][ T5855] team0: Port device team_slave_1 added
[   55.179695][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.181968][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.190930][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.198296][ T5845] hsr_slave_0: entered promiscuous mode
[   55.200609][ T5845] hsr_slave_1: entered promiscuous mode
[   55.202713][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   55.204644][ T5845] Cannot create hsr debugfs directory
[   55.212102][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.214386][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.222814][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.259906][ T5855] hsr_slave_0: entered promiscuous mode
[   55.262113][ T5855] hsr_slave_1: entered promiscuous mode
[   55.264339][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   55.266688][ T5855] Cannot create hsr debugfs directory
[   55.472607][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.482650][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.490780][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.502138][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.541751][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.559299][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.563506][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.579492][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.602780][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.609635][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.613942][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.622110][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.707795][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.722109][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.739129][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   55.751357][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.754612][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.763298][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.772546][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.775064][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.784861][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   55.803657][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   55.810258][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.813265][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.827291][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.830319][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.844935][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.847375][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.859267][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.861670][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.005583][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.040365][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.043365][ T5846] veth0_vlan: entered promiscuous mode
[   56.058048][ T5846] veth1_vlan: entered promiscuous mode
[   56.073202][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.102919][ T5845] veth0_vlan: entered promiscuous mode
[   56.116739][ T5846] veth0_macvtap: entered promiscuous mode
[   56.121048][ T5845] veth1_vlan: entered promiscuous mode
[   56.124965][ T5846] veth1_macvtap: entered promiscuous mode
[   56.147751][ T5855] veth0_vlan: entered promiscuous mode
[   56.153529][ T5855] veth1_vlan: entered promiscuous mode
[   56.156663][ T5850] Bluetooth: hci1: command tx timeout
[   56.159705][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.166655][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.191369][ T5845] veth0_macvtap: entered promiscuous mode
[   56.195341][ T5722] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.202642][ T5722] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.209955][ T5722] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.215241][ T5845] veth1_macvtap: entered promiscuous mode
[   56.218757][ T5722] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.236202][ T5850] Bluetooth: hci2: command tx timeout
[   56.236246][ T5236] Bluetooth: hci0: command tx timeout
[   56.242922][ T5855] veth0_macvtap: entered promiscuous mode
[   56.263084][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.274713][ T5855] veth1_macvtap: entered promiscuous mode
[   56.294892][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.326892][ T3659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.329784][ T3659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.331535][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.338358][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.341854][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.350419][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.365244][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.369924][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.376804][ T5722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.398792][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.411693][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.414994][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.420823][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.432013][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.467986][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.470824][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.494801][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.530254][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.533264][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.557096][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.560147][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.611726][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.615446][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.980387][ T5928] loop6: detected capacity change from 0 to 63
[   56.984098][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read
[   56.992170][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.001152][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.004364][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.010086][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.013442][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.019406][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.022843][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.033941][ T5928] ldm_validate_partition_table(): Disk read failed.
[   57.043515][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.052412][ T5928] Buffer I/O error on dev loop6, logical block 0, async page read
[   57.058006][ T5928] Dev loop6: unable to read RDB block 8
[   57.063335][ T5928]  loop6: unable to read partition table
[   57.073644][ T5928] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[   57.096019][ T5296] ldm_validate_partition_table(): Disk read failed.
[   57.099845][ T5296] Dev loop6: unable to read RDB block 0
[   57.102352][ T5296]  loop6: unable to read partition table
[   57.171067][ T5939] netlink: 'syz.1.11': attribute type 10 has an invalid length.
[   57.173395][ T5940] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[   57.180074][ T5939] team0: Port device team_slave_0 removed
[   57.282955][ T5931] loop0: detected capacity change from 0 to 40427
[   57.310572][ T5931] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   57.324920][ T5931] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   57.340924][ T5931] F2FS-fs (loop0): invalid crc value
[   57.393354][ T5931] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   57.400247][ T5931] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   57.402822][ T5931] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   57.429312][ T5931] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[   57.522316][ T5955] loop1: detected capacity change from 0 to 32768
[   57.547165][ T5955] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   57.573943][ T5955] XFS (loop1): Ending clean mount
[   57.578151][ T5955] XFS (loop1): Quotacheck needed: Please wait.
[   57.591960][ T5955] XFS (loop1): Quotacheck: Done.
[   57.607162][ T5846] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   57.642428][ T5966] loop0: detected capacity change from 0 to 2048
[   57.676712][ T5966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.725102][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.766391][   T33] audit: type=1800 audit(1755563544.816:2): pid=5971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19" name="/" dev="9p" ino=2 res=0 errno=0
[   58.046356][ T5911] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   58.127168][ T5981] loop1: detected capacity change from 0 to 32768
[   58.136677][ T5981] =======================================================
[   58.136677][ T5981] WARNING: The mand mount option has been deprecated and
[   58.136677][ T5981]          and is ignored by this kernel. Remove the mand
[   58.136677][ T5981]          option from the mount to silence this warning.
[   58.136677][ T5981] =======================================================
[   58.161796][ T5981] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   58.189017][ T5981] XFS (loop1): Ending clean mount
[   58.198090][ T5981] XFS (loop1): Quotacheck needed: Please wait.
[   58.201343][ T5911] usb 1-1: config 0 has an invalid interface number: 197 but max is 0
[   58.204601][ T5911] usb 1-1: config 0 has no interface number 0
[   58.207033][ T5911] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[   58.210615][ T5911] usb 1-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[   58.213052][ T5981] XFS (loop1): Quotacheck: Done.
[   58.218707][ T5911] usb 1-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[   58.226230][ T5911] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[   58.229281][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   58.231795][ T5911] usb 1-1: Product: syz
[   58.233189][ T5911] usb 1-1: Manufacturer: syz
[   58.234724][ T5911] usb 1-1: SerialNumber: syz
[   58.238993][ T5911] usb 1-1: config 0 descriptor??
[   58.242323][ T5975] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   58.247236][ T5236] Bluetooth: hci1: command tx timeout
[   58.249748][ T5975] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   58.257446][ T5846] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   58.316262][ T5236] Bluetooth: hci0: command tx timeout
[   58.326329][ T5236] Bluetooth: hci2: command tx timeout
[   58.395407][ T5993] loop2: detected capacity change from 0 to 256
[   58.404731][ T5993] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[   58.425200][   T33] audit: type=1800 audit(1755563545.476:3): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.27" name="file2" dev="loop2" ino=1048592 res=0 errno=0
[   58.463570][ T5975] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   58.468611][ T5975] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   58.479189][ T5911] qmi_wwan 1-1:0.197: probe with driver qmi_wwan failed with error -22
[   58.704437][   T24] usb 1-1: USB disconnect, device number 2
[   58.755848][ T5911] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   58.805919][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   58.920114][ T5911] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[   58.923825][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   58.928352][ T5911] usb 3-1: config 0 has no interface number 0
[   58.930959][ T5911] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[   58.936081][ T5911] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[   58.939371][ T5911] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   58.944794][ T5911] usb 3-1: config 0 interface 52 has no altsetting 0
[   58.949872][ T5911] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[   58.953589][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[   58.958520][ T5911] usb 3-1: SerialNumber: syz
[   58.962965][ T5911] usb 3-1: config 0 descriptor??
[   58.968756][    T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   58.975941][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.980353][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   58.984124][    T9] usb 2-1: config 1 has no interface number 0
[   58.987071][    T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[   58.991561][    T9] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[   58.999097][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   59.003149][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.008094][    T9] usb 2-1: Product: syz
[   59.009977][    T9] usb 2-1: Manufacturer: syz
[   59.012076][    T9] usb 2-1: SerialNumber: syz
[   59.172310][ T5911] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[   59.175327][ T5911] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5
[   59.284120][ T6011] loop0: detected capacity change from 0 to 16
[   59.294639][ T6011] erofs (device loop0): mounted with root inode @ nid 36.
[   59.308237][ T6011] erofs (device loop0): bogus dirent @ nid 36
[   59.357741][ T6013] loop0: detected capacity change from 0 to 1024
[   59.376262][ T6013] syz.0.36: attempt to access beyond end of device
[   59.376262][ T6013] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024
[   59.380815][ T6013] syz.0.36: attempt to access beyond end of device
[   59.380815][ T6013] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024
[   59.389702][   T51] usb 3-1: USB disconnect, device number 2
[   59.439108][   T24] usb 2-1: USB disconnect, device number 2
[   59.469184][ T6017] input: syz1 as /devices/virtual/input/input5
[   59.554213][ T6019] loop0: detected capacity change from 0 to 4096
[   59.585972][ T6019] [syz.0.38/6019] FS: loop0 File: /memory.swap.current would truncate fibmap result
[   60.111826][ T6053] binder: 6052:6053 ioctl 400455c8 10000000002 returned -22
[   60.144430][ T6038] loop2: detected capacity change from 0 to 32768
[   60.173331][ T6038] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1)
[   60.173331][ T6038] downgrade (size 640):
[   60.173331][ T6038] version:	0.0: (unknown version)
[   60.173331][ T6038] recovery passes:	
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.0: (unknown version)
[   60.173331][ T6038] recovery passes:	
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.35: (unknown version)
[   60.173331][ T6038] recovery passes:	
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.0: (unknown version)
[   60.173331][ T6038] recovery passes:	
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.47: (unknown version)
[   60.173331][ T6038] recovery passes:	
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.0: (unknown version)
[   60.173331][ T6038] recovery passes:	fs_freespace_init,bucket_gens_init,check_snapshots,check_subvols
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.11: inode_btree_change
[   60.173331][ T6038] recovery passes:	
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.0: (unknown version)
[   60.173331][ T6038] recovery passes:	
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.34: (unknown version)
[   60.173331][ T6038] recovery passes:	
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.0: (unknown version)
[   60.173331][ T6038] recovery passes:	
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.0: (unknown version)
[   60.173331][ T6038] recovery passes:	
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.0: (unknown version)
[   60.173331][ T6038] recovery passes:	fs_freespace_init,check_snapshot_trees
[   60.173331][ T6038] errors:	
[   60.173331][ T6038] version:	0.0: (unknown version)
[   60.173331][ T6038] recover
[   60.173418][ T6038] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade
[   60.233687][ T6056] ptrace attach of "/syz-executor exec"[5846] was attempted by "/syz-executor exec"[6056]
[   60.336670][ T5236] Bluetooth: hci1: command tx timeout
[   60.396435][ T5236] Bluetooth: hci2: command tx timeout
[   60.396656][ T5850] Bluetooth: hci0: command tx timeout
[   61.328666][ T6065] loop2: detected capacity change from 0 to 40427
[   61.344089][ T6065] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   61.352746][ T6065] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   61.366904][ T6065] F2FS-fs (loop2): invalid crc value
[   61.442203][ T6065] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   61.447921][ T6065] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   61.450465][ T6065] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   61.499218][ T6072] loop0: detected capacity change from 0 to 32768
[   61.511751][ T6072] (syz.0.59,6072,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is smaller than minimal - offset=88, inode=69, rec_len=8, name_len=8
[   61.527953][ T6072] (syz.0.59,6072,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[   61.532138][ T6065] syz.2.55: attempt to access beyond end of device
[   61.532138][ T6065] loop2: rw=2049, sector=53248, nr_sectors = 16 limit=40427
[   61.538876][ T6072] (syz.0.59,6072,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[   61.538901][ T6072] (syz.0.59,6072,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[   61.555893][ T6072] (syz.0.59,6072,0):ocfs2_initialize_super:2198 ERROR: status = -22
[   61.558655][ T6072] (syz.0.59,6072,0):ocfs2_fill_super:1177 ERROR: status = -22
[   61.600488][ T5855] syz-executor: attempt to access beyond end of device
[   61.600488][ T5855] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   61.607261][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   61.607273][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.607277][ T5855] Call Trace:
[   61.607280][ T5855]  <TASK>
[   61.607284][ T5855]  dump_stack_lvl+0x189/0x250
[   61.607297][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.607305][ T5855]  ? __pfx_queue_work_on+0x10/0x10
[   61.607312][ T5855]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   61.607321][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   61.607334][ T5855]  f2fs_handle_critical_error+0x37c/0x540
[   61.607346][ T5855]  f2fs_write_end_io+0x886/0xb60
[   61.607361][ T5855]  __submit_merged_bio+0x27a/0x6a0
[   61.607372][ T5855]  __submit_merged_write_cond+0x255/0x530
[   61.607384][ T5855]  f2fs_write_data_pages+0x261d/0x3000
[   61.607408][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   61.607436][ T5855]  ? check_path+0x21/0x40
[   61.607443][ T5855]  ? check_noncircular+0xe0/0x160
[   61.607470][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   61.607480][ T5855]  do_writepages+0x32e/0x550
[   61.607494][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[   61.607503][ T5855]  filemap_fdatawrite+0x199/0x240
[   61.607512][ T5855]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   61.607566][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[   61.607578][ T5855]  f2fs_sync_dirty_inodes+0x31f/0x830
[   61.607592][ T5855]  f2fs_write_checkpoint+0x95a/0x1df0
[   61.607609][ T5855]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   61.607635][ T5855]  ? kill_f2fs_super+0x298/0x6c0
[   61.607644][ T5855]  kill_f2fs_super+0x2c3/0x6c0
[   61.607653][ T5855]  ? __pfx_kill_f2fs_super+0x10/0x10
[   61.607659][ T5855]  ? radix_tree_delete_item+0x2b6/0x400
[   61.607670][ T5855]  ? shrinker_free+0x2ce/0x3e0
[   61.607679][ T5855]  deactivate_locked_super+0xbc/0x130
[   61.607688][ T5855]  cleanup_mnt+0x425/0x4c0
[   61.607696][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.607706][ T5855]  task_work_run+0x1d4/0x260
[   61.607716][ T5855]  ? __pfx_task_work_run+0x10/0x10
[   61.607724][ T5855]  ? __x64_sys_umount+0x122/0x160
[   61.607735][ T5855]  ? exit_to_user_mode_loop+0x40/0x110
[   61.607746][ T5855]  exit_to_user_mode_loop+0xec/0x110
[   61.607755][ T5855]  do_syscall_64+0x2bd/0x3b0
[   61.607764][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.607771][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.607778][ T5855]  ? exc_page_fault+0x9f/0xf0
[   61.607787][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.607793][ T5855] RIP: 0033:0x7f80ef98ff17
[   61.607802][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   61.607808][ T5855] RSP: 002b:00007ffc4dd0c718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   61.607816][ T5855] RAX: 0000000000000000 RBX: 00007f80efa11c05 RCX: 00007f80ef98ff17
[   61.607820][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4dd0c7d0
[   61.607824][ T5855] RBP: 00007ffc4dd0c7d0 R08: 0000000000000000 R09: 0000000000000000
[   61.607828][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc4dd0d860
[   61.607833][ T5855] R13: 00007f80efa11c05 R14: 000000000000f005 R15: 00007ffc4dd0d8a0
[   61.607845][ T5855]  </TASK>
[   61.607848][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   61.696014][ T6080] netlink: 'syz.1.60': attribute type 12 has an invalid length.
[   61.755747][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'.
[   62.105058][ T6086] loop0: detected capacity change from 0 to 2048
[   62.132981][ T6086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.149907][ T6086] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   62.180005][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.200993][ T6091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.61'.
[   62.290472][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.367376][ T6101] loop0: detected capacity change from 0 to 4096
[   62.374567][ T6101] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   62.395919][ T5850] Bluetooth: hci1: command tx timeout
[   62.403989][ T6101] ntfs3(loop0): ino=1a, mi_enum_attr
[   62.408023][ T6101] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   62.436778][   T59] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22.
[   62.476014][ T5850] Bluetooth: hci2: command tx timeout
[   62.476093][ T5236] Bluetooth: hci0: command tx timeout
[   62.515938][ T2301] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   62.533367][ T6111] loop1: detected capacity change from 0 to 4096
[   62.544456][ T6113] loop0: detected capacity change from 0 to 8192
[   62.550097][ T6111] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   62.599008][ T5854] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[   62.608682][ T5854] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   62.613426][ T5854]  loop0: unable to read partition table
[   62.616987][ T6113] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[   62.620295][ T6113] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[   62.623021][ T6113]  loop0: unable to read partition table
[   62.624933][ T6113] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[   62.629179][ T6115] loop1: detected capacity change from 0 to 2048
[   62.659615][ T6115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   62.670981][ T2301] usb 3-1: too many configurations: 9, using maximum allowed: 8
[   62.674469][   T33] audit: type=1800 audit(1755563555.734:4): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.75" name="bus" dev="loop1" ino=18 res=0 errno=0
[   62.676831][ T2301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   62.695916][ T2301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   62.701144][ T2301] usb 3-1: config 0 interface 0 has no altsetting 0
[   62.708970][ T2301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   62.717907][ T2301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   62.720518][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.722347][ T2301] usb 3-1: config 0 interface 0 has no altsetting 0
[   62.733817][ T2301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   62.737790][ T2301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   62.746112][ T2301] usb 3-1: config 0 interface 0 has no altsetting 0
[   62.751394][ T2301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   62.754279][ T2301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   62.760630][ T2301] usb 3-1: config 0 interface 0 has no altsetting 0
[   62.767620][ T2301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   62.770560][ T2301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   62.785071][ T2301] usb 3-1: config 0 interface 0 has no altsetting 0
[   62.791275][ T2301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   62.794226][ T2301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   62.805909][ T2301] usb 3-1: config 0 interface 0 has no altsetting 0
[   62.809796][ T2301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   62.812738][ T2301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   62.813074][ T6125] loop0: detected capacity change from 0 to 4096
[   62.821981][ T6125] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   62.833469][ T2301] usb 3-1: config 0 interface 0 has no altsetting 0
[   62.843484][ T2301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[   62.847867][ T2301] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   62.853227][ T2301] usb 3-1: config 0 interface 0 has no altsetting 0
[   62.867097][ T2301] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   62.870791][ T2301] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   62.875119][ T2301] usb 3-1: Product: syz
[   62.877262][ T2301] usb 3-1: Manufacturer: syz
[   62.879319][ T2301] usb 3-1: SerialNumber: syz
[   62.886512][ T2301] usb 3-1: config 0 descriptor??
[   62.904832][ T2301] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[   62.914861][ T6127] overlay: filesystem on ./bus not supported
[   62.961301][ T6131] loop0: detected capacity change from 0 to 128
[   62.979613][ T6131] ext2: Unknown parameter 'context'
[   63.011985][ T6131] loop0: detected capacity change from 0 to 128
[   63.023934][ T6131] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   63.029235][ T6131] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   63.108185][ T6136] loop1: detected capacity change from 0 to 512
[   63.114424][ T6136] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   63.122111][ T6136] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   63.162031][ T6136] EXT4-fs (loop1): 1 truncate cleaned up
[   63.171945][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.188039][ T6136] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.84: bad entry in directory: inode out of bounds - offset=0, inode=184549378, rec_len=12, size=1024 fake=1
[   63.199861][   T24] usb 3-1: USB disconnect, device number 3
[   63.230236][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.230517][   T24] yurex 3-1:0.0: USB YUREX #0 now disconnected
[   63.739244][ T5845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   63.791684][ T6145] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   63.798222][ T6145] bond0: (slave lo): Error: Device can not be enslaved while up
[   63.948734][ T6141] loop1: detected capacity change from 0 to 32768
[   63.954133][ T6141] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.85 (6141)
[   63.985977][ T6141] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   63.991950][ T6141] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   64.004977][ T6141] BTRFS info (device loop1): using free-space-tree
[   64.111640][ T6170] loop2: detected capacity change from 0 to 4096
[   64.119409][ T6170] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   64.136444][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   64.140745][ T5846] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   64.148589][ T6170] ntfs3(loop2): ino=4, mi_enum_attr
[   64.150324][ T6170] ntfs3(loop2): ino=4, Correct links count -> 2.
[   64.153198][ T6170] ntfs3(loop2): Failed to load $AttrDef (-22)
[   64.240406][ T6176] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   64.289756][   T10] usb 1-1: Using ep0 maxpacket: 16
[   64.300397][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.303815][ T6182] trusted_key: encrypted_key: key user:syz not found
[   64.310073][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[   64.315232][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.331760][   T10] usb 1-1: config 0 descriptor??
[   64.576559][ T6195] loop2: detected capacity change from 0 to 2048
[   64.604985][ T6195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.614209][   T33] audit: type=1800 audit(1755563557.674:5): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.102" name="bus" dev="loop2" ino=18 res=0 errno=0
[   64.753265][   T10] logitech-djreceiver 0003:046D:C513.0001: unknown main item tag 0x0
[   64.756644][   T10] logitech-djreceiver 0003:046D:C513.0001: unknown main item tag 0x0
[   64.760747][   T10] logitech-djreceiver 0003:046D:C513.0001: unknown main item tag 0x0
[   64.763429][   T10] logitech-djreceiver 0003:046D:C513.0001: unknown main item tag 0x0
[   64.766567][   T10] logitech-djreceiver 0003:046D:C513.0001: unknown main item tag 0x0
[   64.850882][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.925719][ T6015] IPVS: starting estimator thread 0...
[   64.935227][ T6206] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[   64.965590][ T6015] usb 1-1: USB disconnect, device number 3
[   65.036218][ T6207] IPVS: using max 42 ests per chain, 100800 per kthread
[   65.218604][ T6211] loop2: detected capacity change from 0 to 32768
[   65.248185][ T6211] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   65.283712][ T5855] (syz-executor,5855,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[   65.295115][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[   65.523966][ T6221] loop0: detected capacity change from 0 to 2048
[   65.532318][ T6221] NILFS (loop0): invalid segment: Magic number mismatch
[   65.535276][ T6221] NILFS (loop0): trying rollback from an earlier position
[   65.547317][ T6221] NILFS (loop0): recovery complete
[   65.556930][ T6222] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   65.857570][ T6228] process 'syz.0.112' launched './file0' with NULL argv: empty string added
[   66.321348][ T6237] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   66.605856][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   66.757666][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.761225][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.766172][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   66.770140][   T24] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[   66.772963][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   66.788299][   T24] usb 3-1: config 0 descriptor??
[   67.227336][   T24] hid-multitouch 0003:0EEF:72D0.0002: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0
[   67.245602][   T33] audit: type=1326 audit(1755563560.304:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6253 comm="syz.1.125" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e88f8ebe9 code=0x0
[   67.318459][ T6256] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   67.431227][   T24] usb 3-1: USB disconnect, device number 4
[   67.524539][ T6264] loop0: detected capacity change from 0 to 128
[   67.535398][ T6264] affs: No valid root block on device loop0
[   67.609218][ T6270] loop0: detected capacity change from 0 to 1024
[   67.623766][ T6268] loop1: detected capacity change from 0 to 2048
[   67.657608][ T6268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   67.673663][ T6268] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1376)
[   69.140193][ T6320] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   69.148903][ T6320] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   69.366457][   T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   69.372076][ T6326] loop2: detected capacity change from 0 to 32768
[   69.378811][ T6326] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.160 (6326)
[   69.403776][ T6326] BTRFS info (device loop2 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   69.417431][ T6326] BTRFS info (device loop2 state S): using blake2b (blake2b-256-generic) checksum algorithm
[   69.424265][ T6326] BTRFS info (device loop2 state S): using free-space-tree
[   69.669015][  T703] BTRFS warning (device loop2 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0, ignored
[   69.679204][   T64] BTRFS warning (device loop2 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored
[   69.688155][   T64] BTRFS error (device loop2 state CS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1
[   69.717111][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[   69.725644][   T10] usb 2-1: config 95 has an invalid interface number: 1 but max is 0
[   69.729749][ T5855] BTRFS info (device loop2 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   69.730193][   T10] usb 2-1: config 95 has no interface number 0
[   69.735479][   T10] usb 2-1: config 95 interface 1 has no altsetting 0
[   69.765696][   T10] usb 2-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[   69.773220][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.784537][   T10] usb 2-1: Product: syz
[   69.786076][   T10] usb 2-1: Manufacturer: syz
[   69.787693][   T10] usb 2-1: SerialNumber: syz
[   70.281767][   T10] usb 2-1: USB disconnect, device number 3
[   70.471487][ T6358] loop0: detected capacity change from 0 to 32768
[   70.475241][ T6358] btrfs: Deprecated parameter 'usebackuproot'
[   70.478479][ T6358] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   70.483125][ T6358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.165 (6358)
[   70.491760][ T6358] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   70.496860][ T6358] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   70.500451][ T6358] BTRFS info (device loop0): using free-space-tree
[   70.517255][   T36] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[   70.522877][ T6358] BTRFS warning (device loop0): couldn't read tree root
[   70.526315][ T6358] BTRFS warning (device loop0): try to load backup roots slot 1
[   70.529834][  T703] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[   70.535053][ T6358] BTRFS warning (device loop0): couldn't read tree root
[   70.538020][ T6358] BTRFS warning (device loop0): try to load backup roots slot 2
[   70.541415][   T36] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   70.545325][ T6358] BTRFS warning (device loop0): couldn't read tree root
[   70.547949][ T6358] BTRFS warning (device loop0): try to load backup roots slot 3
[   70.561188][ T6358] BTRFS info (device loop0): rebuilding free space tree
[   70.579048][ T6358] BTRFS info (device loop0): checking UUID tree
[   70.661521][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   70.881626][ T6381] loop2: detected capacity change from 0 to 4096
[   70.916415][ T6386] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.952671][ T6385] loop0: detected capacity change from 0 to 4096
[   70.962107][   T33] audit: type=1800 audit(1755563564.024:7): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.169" name="file1" dev="loop2" ino=15 res=0 errno=0
[   70.981773][   T33] audit: type=1800 audit(1755563564.024:8): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.169" name="file1" dev="loop2" ino=15 res=0 errno=0
[   70.994599][ T6385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.044848][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.120125][ T6395] netlink: 'syz.0.172': attribute type 11 has an invalid length.
[   71.203804][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.206403][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.315631][ T6397] loop1: detected capacity change from 0 to 32768
[   71.338341][ T6397] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   71.367040][ T6397] XFS (loop1): Ending clean mount
[   71.453952][ T5846] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   71.498591][ T6411] loop2: detected capacity change from 0 to 512
[   71.499577][ T6401] loop0: detected capacity change from 0 to 32768
[   71.525247][ T6411] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   71.547421][ T6401] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.576339][ T6411] EXT4-fs (loop2): 1 orphan inode deleted
[   71.580479][ T6411] EXT4-fs (loop2): 1 truncate cleaned up
[   71.582891][ T6411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.588308][ T6401] XFS (loop0): Ending clean mount
[   71.590245][ T6411] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   71.598859][ T6401] XFS (loop0): Quotacheck needed: Please wait.
[   71.618995][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.624369][ T6401] XFS (loop0): Quotacheck: Done.
[   71.656314][ T6401] XFS (loop0): User initiated shutdown received.
[   71.663968][ T6401] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[   71.685962][ T6401] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   71.714048][ T5845] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.871601][ T6432] loop2: detected capacity change from 0 to 1024
[   72.109478][ T6430] loop0: detected capacity change from 0 to 32768
[   72.121841][ T6430] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.181 (6430)
[   72.127652][ T6439] loop2: detected capacity change from 0 to 1024
[   72.149214][ T6430] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.155656][ T6430] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   72.165838][ T6430] BTRFS info (device loop0): using free-space-tree
[   72.265928][   T33] audit: type=1800 audit(1755563565.324:9): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="file1" dev="loop0" ino=260 res=0 errno=0
[   72.285709][   T33] audit: type=1800 audit(1755563565.344:10): pid=6430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="file1" dev="loop0" ino=260 res=0 errno=0
[   72.367045][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.187'.
[   72.424055][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.429872][ T6462] loop1: detected capacity change from 0 to 2048
[   72.471464][ T5854]  loop1: p1 < >
[   72.472986][ T5854] loop1: partition table partially beyond EOD, truncated
[   72.489062][ T5854] loop1: p1 start 524289 is beyond EOD, truncated
[   72.496122][ T6462]  loop1: p1 < >
[   72.497718][ T6462] loop1: partition table partially beyond EOD, truncated
[   72.518363][ T6462] loop1: p1 start 524289 is beyond EOD, truncated
[   72.527909][ T5296]  loop1: p1 < >
[   72.532277][ T5296] loop1: partition table partially beyond EOD, truncated
[   72.535397][ T5296] loop1: p1 start 524289 is beyond EOD, truncated
[   72.816609][ T2301] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   72.928667][ T6473] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'.
[   72.996448][ T2301] usb 3-1: Using ep0 maxpacket: 16
[   73.046515][ T2301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.056700][ T2301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.067222][ T2301] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   73.076687][ T2301] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   73.086666][ T2301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.098286][ T2301] usb 3-1: config 0 descriptor??
[   73.591173][ T2301] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max
[   73.595628][ T2301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   73.603474][ T2301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   73.613633][ T2301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   73.617873][ T2301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   73.620127][ T2301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   73.626377][ T2301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   73.628665][ T2301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   73.631053][ T2301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   73.641429][ T2301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   73.647992][ T2301] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0
[   73.654603][ T2301] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0
[   73.664373][ T2301] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0
[   73.679199][ T2301] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   73.692249][ T2301] microsoft 0003:045E:07DA.0003: no inputs found
[   73.698475][ T2301] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway
[   73.803482][ T2301] usb 3-1: USB disconnect, device number 5
[   73.906004][ T6483] cgroup: Bad value for 'name'
[   74.466036][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'.
[   74.820221][ T6015] libceph: connect (1)[c::]:6789 error -101
[   74.820586][ T6015] libceph: mon0 (1)[c::]:6789 connect error
[   74.846128][ T6499] ceph: No mds server is up or the cluster is laggy
[   75.000335][ T6499] loop2: detected capacity change from 0 to 2048
[   75.051323][ T6499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.138941][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.911551][ T6508] loop2: detected capacity change from 0 to 32768
[   75.922527][ T6481] Set syz1 is full, maxelem 65536 reached
[   75.975359][ T6510] loop1: detected capacity change from 0 to 512
[   75.996560][ T6510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   76.001266][ T6510] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   76.016063][ T6508] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   76.120830][ T5855] (syz-executor,5855,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[   76.138592][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[   76.289778][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   76.502309][ T6525] loop0: detected capacity change from 0 to 128
[   76.522730][ T6525] FAT-fs (loop0): bogus number of reserved sectors
[   76.525337][ T6525] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   76.550581][ T6525] FAT-fs (loop0): Can't find a valid FAT filesystem
[   76.611589][ T6531] netem: incorrect ge model size
[   76.613919][ T6531] netem: change failed
[   76.720684][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[   76.750813][ T6542] capability: warning: `syz.0.220' uses deprecated v2 capabilities in a way that may be insecure
[   76.870110][ T6545] loop1: detected capacity change from 0 to 512
[   76.881277][ T6545] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   76.884976][ T6545] EXT4-fs (loop1): orphan cleanup on readonly fs
[   76.888609][ T6545] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   76.900661][ T6545] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   76.904065][ T6545] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #16: comm syz.1.221: iget: immutable or append flags not allowed on symlinks
[   76.913524][ T6545] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.221: couldn't read orphan inode 16 (err -117)
[   76.921201][ T6545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.984164][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.285427][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'.
[   77.345902][   T24] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   77.396343][ T6568] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.232'.
[   77.499067][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[   77.503106][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[   77.507743][   T24] usb 2-1: config 129 has an invalid interface number: 135 but max is 1
[   77.511425][   T24] usb 2-1: config 129 has no interface number 1
[   77.514318][   T24] usb 2-1: config 129 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[   77.520089][   T24] usb 2-1: config 129 interface 135 has no altsetting 0
[   77.523079][   T24] usb 2-1: config 129 interface 0 has no altsetting 0
[   77.536456][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[   77.547073][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.556316][   T24] usb 2-1: Product: syz
[   77.558172][   T24] usb 2-1: Manufacturer: syz
[   77.560126][   T24] usb 2-1: SerialNumber: syz
[   77.756126][ T6572] loop0: detected capacity change from 0 to 32768
[   77.770740][ T6572] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   77.780400][ T6572] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   77.786872][   T24] au0828: au0828: Device initialization failed.
[   77.789423][   T24] au0828: au0828: Device must be connected to a high-speed USB 2.0 port.
[   77.818646][   T24] usb 2-1: USB disconnect, device number 4
[   77.856560][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[   77.958015][ T6579] loop2: detected capacity change from 0 to 2048
[   77.965548][ T6579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)

syzkaller
syzkaller login: [   78.211879][ T6591] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   78.220945][ T6593] loop2: detected capacity change from 0 to 8
[   78.239940][ T6593] SQUASHFS error: Unable to read directory block [629:26]
[   78.354539][ T6597] loop2: detected capacity change from 0 to 2048
[   78.364930][ T6597] EXT4-fs: Ignoring removed nobh option
[   78.391709][ T6597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.406256][ T6597] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.593855][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.619078][ T6605] loop0: detected capacity change from 0 to 40427
[   78.622753][ T6605] F2FS-fs (loop0): build fault injection rate: 14
[   78.624814][ T6605] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   78.628291][   T33] audit: type=1800 audit(1755563571.494:11): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.245" name="file0" dev="loop2" ino=13 res=0 errno=0
[   78.666408][ T6605] F2FS-fs (loop0): invalid crc value
[   78.672566][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   78.685304][    C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   78.702748][ T6613] loop2: detected capacity change from 0 to 256
[   78.718291][ T6613] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[   78.732918][ T6605] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   78.736820][ T6605] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   78.743364][ T6605] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   78.750791][ T6605] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   78.757891][ T6605] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[   78.763295][ T6605] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[   78.829355][    C0] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[   78.832937][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[   78.832946][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   78.832950][    C0] Call Trace:
[   78.832953][    C0]  <TASK>
[   78.832956][    C0]  dump_stack_lvl+0x189/0x250
[   78.832968][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[   78.832976][    C0]  ? __pfx_queue_work_on+0x10/0x10
[   78.832984][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   78.832992][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   78.833000][    C0]  ? f2fs_hw_is_readonly+0x39b/0x470
[   78.833011][    C0]  f2fs_handle_critical_error+0x37c/0x540
[   78.833021][    C0]  f2fs_write_end_io+0x886/0xb60
[   78.833033][    C0]  blk_update_request+0x57e/0xe60
[   78.833045][    C0]  blk_mq_end_request+0x3e/0x70
[   78.833052][    C0]  blk_flush_complete_seq+0x678/0xcc0
[   78.833063][    C0]  flush_end_io+0xbaf/0xe60
[   78.833074][    C0]  __blk_mq_end_request+0x426/0x600
[   78.833083][    C0]  blk_done_softirq+0x10a/0x160
[   78.833091][    C0]  handle_softirqs+0x286/0x870
[   78.833099][    C0]  ? run_ksoftirqd+0x9b/0x100
[   78.833107][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[   78.833114][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   78.833121][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   78.833127][    C0]  run_ksoftirqd+0x9b/0x100
[   78.833133][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[   78.833143][    C0]  smpboot_thread_fn+0x542/0xa60
[   78.833149][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[   78.833158][    C0]  kthread+0x711/0x8a0
[   78.833167][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[   78.833173][    C0]  ? __pfx_kthread+0x10/0x10
[   78.833180][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[   78.833188][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[   78.833195][    C0]  ? __pfx_kthread+0x10/0x10
[   78.833203][    C0]  ret_from_fork+0x3fc/0x770
[   78.833210][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[   78.833219][    C0]  ? __switch_to_asm+0x39/0x70
[   78.833226][    C0]  ? __switch_to_asm+0x33/0x70
[   78.833233][    C0]  ? __pfx_kthread+0x10/0x10
[   78.833240][    C0]  ret_from_fork_asm+0x1a/0x30
[   78.833253][    C0]  </TASK>
[   78.833255][    C0] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   78.913308][    C0] vkms_vblank_simulate: vblank timer overrun
[   78.923812][ T6616] cgroup: fork rejected by pids controller in /syz2
[   78.930465][ T6608] loop1: detected capacity change from 0 to 32768
[   78.935405][ T5845] F2FS-fs (loop0): do_checkpoint failed err:-5, stop checkpoint
[   78.964838][ T6608] JBD2: Ignoring recovery information on journal
[   78.980962][ T6608] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   79.033675][ T5846] ocfs2: Unmounting device (7,1) on (node local)
[   79.451085][ T6626] loop1: detected capacity change from 0 to 32768
[   79.464885][ T6626] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.256 (6626)
[   79.473461][ T5896] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.504889][ T6626] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   79.519626][ T6626] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   79.526738][ T6626] BTRFS info (device loop1): disk space caching is enabled
[   79.529616][ T6626] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   79.608546][ T5896] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.654798][ T6628] loop0: detected capacity change from 0 to 32768
[   79.669218][ T6626] BTRFS info (device loop1): rebuilding free space tree
[   79.705207][ T6626] BTRFS info (device loop1): disabling free space tree
[   79.713719][ T6626] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   79.724670][ T6626] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   79.726452][ T5896] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.801979][ T5846] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   79.877491][ T5896] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   79.950124][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   79.960975][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   79.967269][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   79.987622][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.006087][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.158856][ T5896] bridge_slave_1: left allmulticast mode
[   80.161363][ T5896] bridge_slave_1: left promiscuous mode
[   80.164703][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.198247][ T5896] bridge_slave_0: left allmulticast mode
[   80.200726][ T5896] bridge_slave_0: left promiscuous mode
[   80.208562][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.333883][ T6660] loop1: detected capacity change from 0 to 40427
[   80.336897][ T6660] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   80.339316][ T6660] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   80.347135][ T6660] F2FS-fs (loop1): invalid crc value
[   80.379513][ T6660] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   80.383930][ T6660] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   80.386398][ T6660] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   80.401368][ T6665] Illegal XDP return value 94901476 on prog  (id 29) dev N/A, expect packet loss!
[   80.461595][ T6672] loop0: detected capacity change from 0 to 512
[   80.515624][ T6672] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   80.575946][ T6672] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[   80.580425][ T6672] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.265: Corrupt directory, running e2fsck is recommended
[   80.930915][ T6672] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[   80.934615][ T6672] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.265: corrupted in-inode xattr: invalid ea_ino
[   80.942264][ T6672] EXT4-fs (loop0): Remounting filesystem read-only
[   80.946749][ T6672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.955956][   T33] audit: type=1800 audit(1755563573.684:12): pid=6675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.262" name="file1" dev="loop1" ino=10 res=0 errno=0
[   80.992493][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.169636][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.175089][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.179936][ T5896] bond0 (unregistering): Released all slaves
[   81.384855][ T6686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.266'.
[   81.386866][   T59] kworker/u9:2: attempt to access beyond end of device
[   81.386866][   T59] loop1: rw=1048577, sector=77824, nr_sectors = 4096 limit=40427
[   81.415231][ T6646] chnl_net:caif_netlink_parms(): no params data found
[   81.422292][   T59] kworker/u9:2: attempt to access beyond end of device
[   81.422292][   T59] loop1: rw=1048577, sector=49152, nr_sectors = 4096 limit=40427
[   81.441570][  T791] cfg80211: failed to load regulatory.db
[   81.508501][   T59] kworker/u9:2: attempt to access beyond end of device
[   81.508501][   T59] loop1: rw=1048577, sector=57344, nr_sectors = 20480 limit=40427
[   81.539828][   T59] kworker/u9:2: attempt to access beyond end of device
[   81.539828][   T59] loop1: rw=1048577, sector=81920, nr_sectors = 3952 limit=40427
[   81.611541][ T6646] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.614235][ T6646] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.617952][ T6646] bridge_slave_0: entered allmulticast mode
[   81.621304][ T6646] bridge_slave_0: entered promiscuous mode
[   81.648838][ T6646] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.651410][ T6646] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.653760][ T6646] bridge_slave_1: entered allmulticast mode
[   81.657021][ T6646] bridge_slave_1: entered promiscuous mode
[   81.692983][ T6646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.700299][ T6646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.738594][ T5911] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   81.743702][ T5896] hsr_slave_0: left promiscuous mode
[   81.746737][ T5896] hsr_slave_1: left promiscuous mode
[   81.749332][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.754822][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.765941][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.769277][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.789124][ T5896] veth1_macvtap: left promiscuous mode
[   81.791784][ T5896] veth0_macvtap: left promiscuous mode
[   81.794314][ T5896] veth1_vlan: left promiscuous mode
[   81.801614][ T5896] veth0_vlan: left promiscuous mode
[   81.898427][ T5911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.909530][ T5911] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   81.923996][ T5911] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   81.930413][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.933710][ T5911] usb 1-1: Product: syz
[   81.935398][ T5911] usb 1-1: Manufacturer: syz
[   81.938197][ T5911] usb 1-1: SerialNumber: syz
[   82.077831][ T5850] Bluetooth: hci2: command tx timeout
[   82.150517][ T5911] usb 1-1: 0:2 : does not exist
[   82.163697][ T5911] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   82.185093][ T5911] usb 1-1: USB disconnect, device number 4
[   82.214922][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   82.228537][ T5896] team0 (unregistering): Port device team_slave_1 removed
[   82.263151][ T5896] team0 (unregistering): Port device team_slave_0 removed
[   82.578947][ T6646] team0: Port device team_slave_0 added
[   82.582688][ T6646] team0: Port device team_slave_1 added
[   82.644208][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.648838][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.661909][ T6646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.668669][ T6646] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.678643][ T6646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.698783][ T6646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.794057][ T6646] hsr_slave_0: entered promiscuous mode
[   82.805093][ T6646] hsr_slave_1: entered promiscuous mode
[   82.810250][ T6646] debugfs: 'hsr0' already exists in 'hsr'
[   82.812398][ T6646] Cannot create hsr debugfs directory
[   82.813723][ T6703] loop0: detected capacity change from 0 to 4096
[   82.819667][ T6703] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   82.822199][ T6703] UDF-fs: Scanning with blocksize 512 failed
[   82.827890][ T6703] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[   82.952782][ T5896] IPVS: stop unused estimator thread 0...
[   83.136017][  T791] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   83.286205][  T791] usb 1-1: Using ep0 maxpacket: 16
[   83.295370][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.297170][ T5846] syz-executor: attempt to access beyond end of device
[   83.297170][ T5846] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[   83.305860][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.310200][  T791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   83.314357][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   83.314371][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.314378][ T5846] Call Trace:
[   83.314382][ T5846]  <TASK>
[   83.314386][ T5846]  dump_stack_lvl+0x189/0x250
[   83.314404][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[   83.314415][ T5846]  ? __pfx_queue_work_on+0x10/0x10
[   83.314425][ T5846]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   83.314438][ T5846]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   83.314486][ T5846]  f2fs_handle_critical_error+0x37c/0x540
[   83.314506][ T5846]  f2fs_write_end_io+0x886/0xb60
[   83.314527][ T5846]  __submit_merged_bio+0x27a/0x6a0
[   83.314539][ T5846]  ? up_write+0x1c4/0x420
[   83.314553][ T5846]  __submit_merged_write_cond+0x44c/0x530
[   83.314570][ T5846]  f2fs_sync_node_pages+0x1479/0x15e0
[   83.314595][ T5846]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   83.314625][ T5846]  ? f2fs_write_checkpoint+0xe43/0x1df0
[   83.314638][ T5846]  ? up_write+0x1c4/0x420
[   83.314651][ T5846]  f2fs_write_checkpoint+0xe6f/0x1df0
[   83.314690][ T5846]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   83.314729][ T5846]  ? kill_f2fs_super+0x298/0x6c0
[   83.314742][ T5846]  kill_f2fs_super+0x2c3/0x6c0
[   83.314756][ T5846]  ? __pfx_kill_f2fs_super+0x10/0x10
[   83.314764][ T5846]  ? radix_tree_delete_item+0x2b6/0x400
[   83.314781][ T5846]  ? shrinker_free+0x2ce/0x3e0
[   83.314794][ T5846]  deactivate_locked_super+0xbc/0x130
[   83.314807][ T5846]  cleanup_mnt+0x425/0x4c0
[   83.314817][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.314832][ T5846]  task_work_run+0x1d4/0x260
[   83.314847][ T5846]  ? __pfx_task_work_run+0x10/0x10
[   83.314857][ T5846]  ? __x64_sys_umount+0x122/0x160
[   83.314873][ T5846]  ? exit_to_user_mode_loop+0x40/0x110
[   83.314889][ T5846]  exit_to_user_mode_loop+0xec/0x110
[   83.314902][ T5846]  do_syscall_64+0x2bd/0x3b0
[   83.314914][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[   83.314926][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.314940][ T5846]  ? exc_page_fault+0x9f/0xf0
[   83.314953][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.314962][ T5846] RIP: 0033:0x7f6e88f8ff17
[   83.314972][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   83.314980][ T5846] RSP: 002b:00007ffdfeff3008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   83.314992][ T5846] RAX: 0000000000000000 RBX: 00007f6e89011c05 RCX: 00007f6e88f8ff17
[   83.314998][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfeff30c0
[   83.315004][ T5846] RBP: 00007ffdfeff30c0 R08: 0000000000000000 R09: 0000000000000000
[   83.315010][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdfeff4150
[   83.315016][ T5846] R13: 00007f6e89011c05 R14: 0000000000013d33 R15: 00007ffdfeff4190
[   83.315034][ T5846]  </TASK>
[   83.315038][ T5846] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   83.326287][  T791] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   83.442682][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.454777][  T791] usb 1-1: config 0 descriptor??
[   83.644133][ T6646] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.659913][ T6646] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.675551][ T6646] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.704247][ T6646] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.808678][ T6646] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.824783][ T6646] 8021q: adding VLAN 0 to HW filter on device team0
[   83.833380][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.836231][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.845120][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.848051][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.878837][  T791] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input6
[   83.906194][  T791] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   83.914532][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'.
[   84.027649][ T6740] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   84.083587][  T791] usb 1-1: USB disconnect, device number 5
[   84.118360][ T6646] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.156306][ T5850] Bluetooth: hci2: command tx timeout
[   84.207580][ T6646] veth0_vlan: entered promiscuous mode
[   84.324724][ T6646] veth1_vlan: entered promiscuous mode
[   84.350637][ T6646] veth0_macvtap: entered promiscuous mode
[   84.356795][ T6646] veth1_macvtap: entered promiscuous mode
[   84.372108][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.381091][ T6646] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.738662][ T6765] netlink: 'syz.0.276': attribute type 9 has an invalid length.
[   85.125607][ T5722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.129192][ T5722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.141330][ T5722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.145947][ T5722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.219934][ T6772] loop1: detected capacity change from 0 to 4096
[   85.225924][ T6772] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   85.270754][ T6772] ntfs3(loop1): ino=19, mi_enum_attr
[   85.272922][ T6772] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   85.291052][  T703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.300071][  T703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.318650][   T33] audit: type=1800 audit(1755563578.374:13): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.277" name="file1" dev="loop1" ino=33 res=0 errno=0
[   85.340120][  T703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.342699][  T703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.405466][ T6783] loop1: detected capacity change from 0 to 256
[   85.461842][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   85.482871][ T6785] warning: `syz.2.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.718975][ T6789] loop1: detected capacity change from 0 to 4096
[   85.723711][ T6789] ntfs3: Unknown parameter '01777777777777777777777ѣ4r&B|B2+3x5d%1C;8C>-'
[   85.786882][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.810566][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.835569][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   85.872367][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   85.894546][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.942113][    T9] usb 1-1: config 0 descriptor??
[   86.236202][ T5850] Bluetooth: hci2: command tx timeout
[   86.353208][    T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[   86.355880][    T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[   86.358483][    T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[   86.360998][    T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[   86.363506][    T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[   86.366239][    T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[   86.383648][    T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   86.620859][    T9] usb 1-1: USB disconnect, device number 6
[   87.391104][ T6801] loop0: detected capacity change from 0 to 40427
[   87.395134][ T6801] F2FS-fs (loop0): build fault injection rate: 14
[   87.397710][ T6801] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   87.404898][ T6801] F2FS-fs (loop0): invalid crc value
[   87.412567][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   87.422817][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   87.469579][ T6801] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.473113][ T6801] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   87.478810][ T6801] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   87.770058][ T6808] No buffer was provided with the request
[   88.633579][ T6812] loop1: detected capacity change from 0 to 512
[   88.672275][ T6812] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002]
[   88.676369][ T6812] System zones: 0-2, 18-18, 34-35
[   88.699197][ T6812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.704502][ T6812] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   88.745269][ T6812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   88.749070][ T6812] EXT4-fs (loop1): can't enable nombcache during remount
[   88.800299][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.134929][ T6817] loop1: detected capacity change from 0 to 32768
[   89.156797][ T6817] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.291 (6817)
[   89.217280][ T6817] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   89.220733][ T6817] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   89.224371][ T5722] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.226158][ T6817] BTRFS info (device loop1): disk space caching is enabled
[   89.230589][ T6817] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   89.286367][ T6817] BTRFS info (device loop1): rebuilding free space tree
[   89.316212][ T6817] BTRFS info (device loop1): disabling free space tree
[   89.318854][ T6817] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   89.322291][ T6817] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   89.349390][ T5722] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.471819][ T6821] loop0: detected capacity change from 0 to 32768
[   89.482186][ T5722] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.505405][ T6821] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.507415][ T5846] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   89.517356][ T6821] XFS (loop0): Ending clean mount
[   89.521349][ T6821] XFS (loop0): Quotacheck needed: Please wait.
[   89.536758][ T6821] XFS (loop0): Quotacheck: Done.
[   89.578425][ T6821] XFS (loop0): User initiated shutdown received.
[   89.580605][ T6821] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[   89.585634][ T6821] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   89.605248][ T5722] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.703129][ T5845] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.708072][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   89.713775][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   89.718548][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   89.722776][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   89.730344][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   89.765345][ T5722] bridge_slave_1: left allmulticast mode
[   89.778297][ T5722] bridge_slave_1: left promiscuous mode
[   89.780466][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.827584][ T5722] bridge_slave_0: left allmulticast mode
[   89.829653][ T5722] bridge_slave_0: left promiscuous mode
[   89.831890][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.008376][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[   90.063197][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[   90.086188][ T5857] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   90.126199][ T5722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.130213][ T5722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.133703][ T5722] bond0 (unregistering): Released all slaves
[   90.249795][ T5857] usb 2-1: Using ep0 maxpacket: 16
[   90.257660][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.266925][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.275293][ T5857] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[   90.279337][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.290104][ T5857] usb 2-1: config 0 descriptor??
[   90.415664][ T5722] hsr_slave_0: left promiscuous mode
[   90.417998][ T5722] hsr_slave_1: left promiscuous mode
[   90.420262][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.422719][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.425498][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.432994][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.444469][ T5722] veth1_macvtap: left promiscuous mode
[   90.448225][ T5722] veth0_macvtap: left promiscuous mode
[   90.450454][ T5722] veth1_vlan: left promiscuous mode
[   90.452397][ T5722] veth0_vlan: left promiscuous mode
[   90.535901][  T791] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   90.720167][  T791] usb 1-1: config 0 interface 0 has no altsetting 0
[   90.722725][  T791] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[   90.728258][ T5857] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0006/input/input8
[   90.729356][ T5722] team0 (unregistering): Port device team_slave_1 removed
[   90.733041][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.758749][  T791] usb 1-1: config 0 descriptor??
[   90.795691][ T5722] team0 (unregistering): Port device team_slave_0 removed
[   90.829973][ T5857] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0006/input/input9
[   90.938928][ T5857] kye 0003:0458:5012.0006: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0
[   91.100135][ T5857] usb 2-1: USB disconnect, device number 5
[   91.199623][  T791] zeroplus 0003:0C12:0005.0007: item fetching failed at offset 0/3
[   91.202911][  T791] zeroplus 0003:0C12:0005.0007: parse failed
[   91.205199][  T791] zeroplus 0003:0C12:0005.0007: probe with driver zeroplus failed with error -22
[   91.253941][ T6849] chnl_net:caif_netlink_parms(): no params data found
[   91.353756][ T6849] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.356977][ T6849] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.359408][ T6849] bridge_slave_0: entered allmulticast mode
[   91.367784][ T6849] bridge_slave_0: entered promiscuous mode
[   91.378057][ T6849] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.380691][ T6849] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.383373][ T6849] bridge_slave_1: entered allmulticast mode
[   91.386682][ T6849] bridge_slave_1: entered promiscuous mode
[   91.412393][  T791] usb 1-1: USB disconnect, device number 7
[   91.447742][ T6849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.454129][ T6849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.509506][ T6890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'.
[   91.531397][ T6849] team0: Port device team_slave_0 added
[   91.555756][ T6849] team0: Port device team_slave_1 added
[   91.659978][ T6849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   91.662735][ T6849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.672209][ T6849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   91.681067][ T6849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   91.684240][ T6849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   91.694601][ T6849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.731532][ T6849] hsr_slave_0: entered promiscuous mode
[   91.734581][ T6849] hsr_slave_1: entered promiscuous mode
[   91.738540][ T6849] debugfs: 'hsr0' already exists in 'hsr'
[   91.740680][ T6849] Cannot create hsr debugfs directory
[   91.756233][ T5236] Bluetooth: hci2: command tx timeout
[   91.895961][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   91.902336][ T6849] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.908356][ T6849] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.915074][ T6849] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.921051][ T6849] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   92.028718][ T6849] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.046094][ T6849] 8021q: adding VLAN 0 to HW filter on device team0
[   92.048677][    T9] usb 2-1: Using ep0 maxpacket: 32
[   92.059754][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.063948][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   92.069239][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.072355][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.078269][    T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[   92.089856][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.092524][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.092841][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.116733][    T9] usb 2-1: config 0 descriptor??
[   92.301336][ T6911] loop0: detected capacity change from 0 to 32768
[   92.315019][ T6849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.342716][ T6849] veth0_vlan: entered promiscuous mode
[   92.372722][ T6849] veth1_vlan: entered promiscuous mode
[   92.455722][ T6849] veth0_macvtap: entered promiscuous mode
[   92.472933][ T6849] veth1_macvtap: entered promiscuous mode
[   92.490572][ T6849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.507518][ T6849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.522466][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.540229][ T5722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.544075][ T5722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.560549][ T5722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.567003][    T9] ft260 0003:0403:6030.0008: unknown main item tag 0x7
[   92.680167][ T3601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.688777][ T3601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.708259][ T6932] CIFS: VFS: Malformed UNC in devname
[   92.756673][    T9] ft260 0003:0403:6030.0008: chip code: 6424 8183
[   92.799755][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.802837][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.951108][    T9] ft260 0003:0403:6030.0008: failed to retrieve system status
[   92.965303][    T9] ft260 0003:0403:6030.0008: probe with driver ft260 failed with error -71
[   92.998144][    T9] usb 2-1: USB disconnect, device number 6
[   93.133962][ T6952] loop0: detected capacity change from 0 to 2048
[   93.161028][ T6952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.167718][ T6952] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.215586][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.330757][ T6965] loop0: detected capacity change from 0 to 512
[   93.334790][ T6965] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   93.348989][ T6965] EXT4-fs (loop0): orphan cleanup on readonly fs
[   93.351834][ T6965] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.317: Block bitmap for bg 0 marked uninitialized
[   93.371489][ T6965] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   93.376278][ T6965] EXT4-fs (loop0): 1 orphan inode deleted
[   93.379758][ T6965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   93.386962][ T6965] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   93.392604][ T6965] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   93.403309][ T6965] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.317: Block bitmap for bg 0 marked uninitialized
[   93.410740][ T6965] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.317: Block bitmap for bg 0 marked uninitialized
[   93.419783][ T6965] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.317: Block bitmap for bg 0 marked uninitialized
[   93.425000][ T6965] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.317: Block bitmap for bg 0 marked uninitialized
[   93.430970][ T6965] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.317: Block bitmap for bg 0 marked uninitialized
[   93.437884][ T6965] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.317: Block bitmap for bg 0 marked uninitialized
[   93.467349][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.550463][ T6973] ptrace attach of "/syz-executor exec"[5845] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "[6973]
[   93.684628][ T6981] loop0: detected capacity change from 0 to 512
[   93.720568][ T6981] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   93.846239][ T5236] Bluetooth: hci2: command tx timeout
[   93.960009][ T6991] loop0: detected capacity change from 0 to 32768
[   93.966802][ T6991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.324 (6991)
[   94.008563][ T6991] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   94.024904][ T6991] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   94.035048][ T6991] BTRFS info (device loop0): disk space caching is enabled
[   94.041698][ T6991] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   94.090940][ T6991] BTRFS info (device loop0): rebuilding free space tree
[   94.116719][ T6991] BTRFS info (device loop0): disabling free space tree
[   94.119380][ T6991] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   94.127674][ T6991] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   94.168285][   T33] audit: type=1800 audit(1755563587.234:14): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.324" name="file1" dev="loop0" ino=260 res=0 errno=0
[   94.233257][   T33] audit: type=1804 audit(1755563587.294:15): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.324" name="/newroot/136/file1/file0/file3" dev="loop0" ino=260 res=1 errno=0
[   94.348974][ T7025] random: crng reseeded on system resumption
[   94.714390][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   94.857031][ T7040] loop0: detected capacity change from 0 to 256
[   94.860565][ T7040] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   94.864828][ T7040] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   94.872050][ T7040] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   94.939080][ T7042] pim6reg: entered allmulticast mode
[   94.943066][ T7042] netlink: 'syz.0.338': attribute type 10 has an invalid length.
[   94.957817][ T7042] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[   94.961603][ T7042] team0: Failed to send options change via netlink (err -105)
[   94.964624][ T7042] team0: Port device netdevsim0 added
[   95.012580][ T7044] loop0: detected capacity change from 0 to 2048
[   95.020544][ T7044] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   95.037644][ T7044] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[   95.038240][ T7045] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   95.044833][ T7044] Remounting filesystem read-only
[   95.118398][ T7047] loop0: detected capacity change from 0 to 4096
[   95.431493][ T7056] loop0: detected capacity change from 0 to 40427
[   95.445539][ T7056] F2FS-fs (loop0): build fault injection rate: 690
[   95.457475][ T7056] F2FS-fs (loop0): invalid crc value
[   95.499509][ T7056] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   95.504015][ T7056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   95.589752][ T5845] syz-executor: attempt to access beyond end of device
[   95.589752][ T5845] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   95.598698][ T5845] syz-executor: attempt to access beyond end of device
[   95.598698][ T5845] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   95.637821][ T3659] kworker/u9:6: attempt to access beyond end of device
[   95.637821][ T3659] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[   95.655551][ T3659] CPU: 0 UID: 0 PID: 3659 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[   95.655568][ T3659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.655576][ T3659] Workqueue: writeback wb_workfn (flush-7:0)
[   95.655595][ T3659] Call Trace:
[   95.655600][ T3659]  <TASK>
[   95.655607][ T3659]  dump_stack_lvl+0x189/0x250
[   95.655626][ T3659]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.655640][ T3659]  ? __pfx_queue_work_on+0x10/0x10
[   95.655651][ T3659]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   95.655665][ T3659]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.655688][ T3659]  f2fs_handle_critical_error+0x37c/0x540
[   95.655709][ T3659]  f2fs_write_end_io+0x886/0xb60
[   95.655734][ T3659]  __submit_merged_bio+0x27a/0x6a0
[   95.655755][ T3659]  __submit_merged_write_cond+0x255/0x530
[   95.655797][ T3659]  f2fs_write_data_pages+0x261d/0x3000
[   95.655839][ T3659]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.655866][ T3659]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   95.655904][ T3659]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   95.655929][ T3659]  ? trace_f2fs_writepages+0x7f/0x200
[   95.655951][ T3659]  ? f2fs_write_node_pages+0x478/0x6e0
[   95.655970][ T3659]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   95.655996][ T3659]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.656014][ T3659]  do_writepages+0x32e/0x550
[   95.656033][ T3659]  ? reacquire_held_locks+0x127/0x1d0
[   95.656044][ T3659]  ? writeback_sb_inodes+0x384/0x1010
[   95.656064][ T3659]  __writeback_single_inode+0x145/0xff0
[   95.656079][ T3659]  ? do_raw_spin_unlock+0x4d/0x240
[   95.656096][ T3659]  writeback_sb_inodes+0x6c7/0x1010
[   95.656131][ T3659]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   95.656176][ T3659]  ? rcu_is_watching+0x15/0xb0
[   95.656195][ T3659]  wb_writeback+0x43b/0xaf0
[   95.656216][ T3659]  ? queue_io+0x391/0x590
[   95.656233][ T3659]  ? __pfx_wb_writeback+0x10/0x10
[   95.656254][ T3659]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.656272][ T3659]  wb_workfn+0x409/0xef0
[   95.656296][ T3659]  ? __pfx_wb_workfn+0x10/0x10
[   95.656312][ T3659]  ? __lock_acquire+0xab9/0xd20
[   95.656337][ T3659]  ? process_scheduled_works+0x9ef/0x17b0
[   95.656353][ T3659]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.656365][ T3659]  ? process_scheduled_works+0x9ef/0x17b0
[   95.656375][ T3659]  ? process_scheduled_works+0x9ef/0x17b0
[   95.656388][ T3659]  process_scheduled_works+0xae1/0x17b0
[   95.656446][ T3659]  ? __pfx_process_scheduled_works+0x10/0x10
[   95.656472][ T3659]  worker_thread+0x8a0/0xda0
[   95.656486][ T3659]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.656507][ T3659]  ? __kthread_parkme+0x7b/0x200
[   95.656527][ T3659]  kthread+0x711/0x8a0
[   95.656544][ T3659]  ? __pfx_worker_thread+0x10/0x10
[   95.656555][ T3659]  ? __pfx_kthread+0x10/0x10
[   95.656570][ T3659]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.656584][ T3659]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.656597][ T3659]  ? __pfx_kthread+0x10/0x10
[   95.656612][ T3659]  ret_from_fork+0x3fc/0x770
[   95.656627][ T3659]  ? __pfx_ret_from_fork+0x10/0x10
[   95.656644][ T3659]  ? __switch_to_asm+0x39/0x70
[   95.656658][ T3659]  ? __switch_to_asm+0x33/0x70
[   95.656670][ T3659]  ? __pfx_kthread+0x10/0x10
[   95.656685][ T3659]  ret_from_fork_asm+0x1a/0x30
[   95.656710][ T3659]  </TASK>
[   95.774129][ T3659] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   95.776857][ T3659] CPU: 0 UID: 0 PID: 3659 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[   95.776867][ T3659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.776871][ T3659] Workqueue: writeback wb_workfn (flush-7:0)
[   95.776885][ T3659] Call Trace:
[   95.776888][ T3659]  <TASK>
[   95.776892][ T3659]  dump_stack_lvl+0x189/0x250
[   95.776903][ T3659]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.776911][ T3659]  ? __pfx_queue_work_on+0x10/0x10
[   95.776918][ T3659]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   95.776927][ T3659]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.776942][ T3659]  f2fs_handle_critical_error+0x37c/0x540
[   95.776955][ T3659]  f2fs_write_end_io+0x886/0xb60
[   95.776970][ T3659]  __submit_merged_bio+0x27a/0x6a0
[   95.776982][ T3659]  __submit_merged_write_cond+0x255/0x530
[   95.776994][ T3659]  f2fs_write_data_pages+0x261d/0x3000
[   95.777018][ T3659]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.777033][ T3659]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   95.777055][ T3659]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   95.777069][ T3659]  ? trace_f2fs_writepages+0x7f/0x200
[   95.777078][ T3659]  ? f2fs_write_node_pages+0x478/0x6e0
[   95.777089][ T3659]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   95.777104][ T3659]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.777113][ T3659]  do_writepages+0x32e/0x550
[   95.777125][ T3659]  ? reacquire_held_locks+0x127/0x1d0
[   95.777131][ T3659]  ? writeback_sb_inodes+0x384/0x1010
[   95.777144][ T3659]  __writeback_single_inode+0x145/0xff0
[   95.777152][ T3659]  ? do_raw_spin_unlock+0x4d/0x240
[   95.777162][ T3659]  writeback_sb_inodes+0x6c7/0x1010
[   95.777181][ T3659]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   95.777207][ T3659]  ? rcu_is_watching+0x15/0xb0
[   95.777219][ T3659]  wb_writeback+0x43b/0xaf0
[   95.777231][ T3659]  ? queue_io+0x391/0x590
[   95.777240][ T3659]  ? __pfx_wb_writeback+0x10/0x10
[   95.777252][ T3659]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.777262][ T3659]  wb_workfn+0x409/0xef0
[   95.777276][ T3659]  ? __pfx_wb_workfn+0x10/0x10
[   95.777285][ T3659]  ? __lock_acquire+0xab9/0xd20
[   95.777299][ T3659]  ? process_scheduled_works+0x9ef/0x17b0
[   95.777308][ T3659]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.777315][ T3659]  ? process_scheduled_works+0x9ef/0x17b0
[   95.777321][ T3659]  ? process_scheduled_works+0x9ef/0x17b0
[   95.777328][ T3659]  process_scheduled_works+0xae1/0x17b0
[   95.777348][ T3659]  ? __pfx_process_scheduled_works+0x10/0x10
[   95.777362][ T3659]  worker_thread+0x8a0/0xda0
[   95.777370][ T3659]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.777381][ T3659]  ? __kthread_parkme+0x7b/0x200
[   95.777393][ T3659]  kthread+0x711/0x8a0
[   95.777402][ T3659]  ? __pfx_worker_thread+0x10/0x10
[   95.777431][ T3659]  ? __pfx_kthread+0x10/0x10
[   95.777440][ T3659]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.777448][ T3659]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.777455][ T3659]  ? __pfx_kthread+0x10/0x10
[   95.777463][ T3659]  ret_from_fork+0x3fc/0x770
[   95.777472][ T3659]  ? __pfx_ret_from_fork+0x10/0x10
[   95.777482][ T3659]  ? __switch_to_asm+0x39/0x70
[   95.777489][ T3659]  ? __switch_to_asm+0x33/0x70
[   95.777496][ T3659]  ? __pfx_kthread+0x10/0x10
[   95.777505][ T3659]  ret_from_fork_asm+0x1a/0x30
[   95.777520][ T3659]  </TASK>
[   95.777523][ T3659] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   95.891752][ T7073] loop1: detected capacity change from 0 to 128
[   95.896154][ T3659] CPU: 0 UID: 0 PID: 3659 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[   95.896166][ T3659] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.896173][ T3659] Workqueue: writeback wb_workfn (flush-7:0)
[   95.896191][ T3659] Call Trace:
[   95.896197][ T3659]  <TASK>
[   95.896202][ T3659]  dump_stack_lvl+0x189/0x250
[   95.896219][ T3659]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.896232][ T3659]  ? __pfx_queue_work_on+0x10/0x10
[   95.896242][ T3659]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   95.896256][ T3659]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.896278][ T3659]  f2fs_handle_critical_error+0x37c/0x540
[   95.896293][ T3659]  f2fs_write_end_io+0x886/0xb60
[   95.896317][ T3659]  __submit_merged_bio+0x27a/0x6a0
[   95.896337][ T3659]  __submit_merged_write_cond+0x255/0x530
[   95.896357][ T3659]  f2fs_write_data_pages+0x261d/0x3000
[   95.896391][ T3659]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.896441][ T3659]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   95.896482][ T3659]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   95.896500][ T3659]  ? trace_f2fs_writepages+0x7f/0x200
[   95.896515][ T3659]  ? f2fs_write_node_pages+0x478/0x6e0
[   95.896533][ T3659]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   95.896558][ T3659]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   95.896575][ T3659]  do_writepages+0x32e/0x550
[   95.896593][ T3659]  ? reacquire_held_locks+0x127/0x1d0
[   95.896601][ T3659]  ? writeback_sb_inodes+0x384/0x1010
[   95.896618][ T3659]  __writeback_single_inode+0x145/0xff0
[   95.896631][ T3659]  ? do_raw_spin_unlock+0x4d/0x240
[   95.896654][ T3659]  writeback_sb_inodes+0x6c7/0x1010
[   95.896688][ T3659]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   95.896727][ T3659]  ? rcu_is_watching+0x15/0xb0
[   95.896746][ T3659]  wb_writeback+0x43b/0xaf0
[   95.896766][ T3659]  ? queue_io+0x391/0x590
[   95.896782][ T3659]  ? __pfx_wb_writeback+0x10/0x10
[   95.896803][ T3659]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.896820][ T3659]  wb_workfn+0x409/0xef0
[   95.896843][ T3659]  ? __pfx_wb_workfn+0x10/0x10
[   95.896853][ T3659]  ? __lock_acquire+0xab9/0xd20
[   95.896876][ T3659]  ? process_scheduled_works+0x9ef/0x17b0
[   95.896892][ T3659]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.896903][ T3659]  ? process_scheduled_works+0x9ef/0x17b0
[   95.896912][ T3659]  ? process_scheduled_works+0x9ef/0x17b0
[   95.896925][ T3659]  process_scheduled_works+0xae1/0x17b0
[   95.896956][ T3659]  ? __pfx_process_scheduled_works+0x10/0x10
[   95.896979][ T3659]  worker_thread+0x8a0/0xda0
[   95.896993][ T3659]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   95.897012][ T3659]  ? __kthread_parkme+0x7b/0x200
[   95.897032][ T3659]  kthread+0x711/0x8a0
[   95.897047][ T3659]  ? __pfx_worker_thread+0x10/0x10
[   95.897058][ T3659]  ? __pfx_kthread+0x10/0x10
[   95.897072][ T3659]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.897085][ T3659]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.897097][ T3659]  ? __pfx_kthread+0x10/0x10
[   95.897109][ T3659]  ret_from_fork+0x3fc/0x770
[   95.897119][ T3659]  ? __pfx_ret_from_fork+0x10/0x10
[   95.897135][ T3659]  ? __switch_to_asm+0x39/0x70
[   95.897147][ T3659]  ? __switch_to_asm+0x33/0x70
[   95.897159][ T3659]  ? __pfx_kthread+0x10/0x10
[   95.897173][ T3659]  ret_from_fork_asm+0x1a/0x30
[   95.897196][ T3659]  </TASK>
[   95.897200][ T3659] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   95.920274][ T7073] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   95.936070][ T5236] Bluetooth: hci2: command tx timeout
[   95.937572][ T7073] FAT-fs (loop1): Filesystem has been set read-only
[   96.031284][ T7073] syz.1.350: attempt to access beyond end of device
[   96.031284][ T7073] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[   96.036575][ T7073] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   96.039426][ T7073] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[   96.044475][ T7073] syz.1.350: attempt to access beyond end of device
[   96.044475][ T7073] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[   96.058777][   T33] audit: type=1800 audit(1755563589.114:16): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.350" name="file2" dev="loop1" ino=1048607 res=0 errno=0
[   96.104364][ T7076] netlink: 'syz.1.351': attribute type 1 has an invalid length.
[   96.107228][ T7076] netlink: 224 bytes leftover after parsing attributes in process `syz.1.351'.
[   96.351643][ T5722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.398398][ T7093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.356'.
[   96.593112][ T5722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.690163][ T5722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.818252][ T5722] team0: Port device netdevsim0 removed
[   96.839138][ T5722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.159256][ T5722] bridge_slave_1: left allmulticast mode
[   97.161536][ T5722] bridge_slave_1: left promiscuous mode
[   97.175012][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.197364][ T5722] bridge_slave_0: left allmulticast mode
[   97.199596][ T5722] bridge_slave_0: left promiscuous mode
[   97.203016][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.618708][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   97.629678][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   97.637307][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   97.645322][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   97.659287][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   97.840664][ T5722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   97.847656][ T5722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.854194][ T5722] bond0 (unregistering): Released all slaves
[   97.883994][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[   97.887995][ T7102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.363'.
[   97.998943][ T5236] Bluetooth: hci2: command tx timeout
[   98.044667][ T7112] capability: warning: `syz.1.365' uses 32-bit capabilities (legacy support in use)
[   98.397561][ T5722] hsr_slave_0: left promiscuous mode
[   98.407527][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   98.411244][ T5722] hsr_slave_1: left promiscuous mode
[   98.414037][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.417430][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.421112][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.424118][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.454977][ T5722] veth1_macvtap: left promiscuous mode
[   98.475896][ T5722] veth0_macvtap: left promiscuous mode
[   98.478264][ T5722] veth1_vlan: left promiscuous mode
[   98.480577][ T5722] veth0_vlan: left promiscuous mode
[   98.566358][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.570833][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.574581][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   98.590801][    T9] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[   98.594105][    T9] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[   98.600044][    T9] usb 2-1: Product: syz
[   98.610587][    T9] usb 2-1: config 0 descriptor??
[   98.648781][ T5722] pim6reg (unregistering): left allmulticast mode
[   98.993057][ T5722] team0 (unregistering): Port device team_slave_1 removed
[   99.028175][ T5722] team0 (unregistering): Port device team_slave_0 removed
[   99.042429][    T9] waltop 0003:172F:0037.0009: unknown main item tag 0x0
[   99.045093][    T9] waltop 0003:172F:0037.0009: unknown main item tag 0x0
[   99.146597][    T9] waltop 0003:172F:0037.0009: unknown main item tag 0x0
[   99.154142][    T9] waltop 0003:172F:0037.0009: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[   99.245463][    T9] usb 2-1: USB disconnect, device number 7
[   99.395620][ T7103] chnl_net:caif_netlink_parms(): no params data found
[   99.590510][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.593325][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.604013][ T7103] bridge_slave_0: entered allmulticast mode
[   99.610329][ T7103] bridge_slave_0: entered promiscuous mode
[   99.615682][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.631719][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.634583][ T7103] bridge_slave_1: entered allmulticast mode
[   99.649892][ T7103] bridge_slave_1: entered promiscuous mode
[   99.709273][ T7103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.738648][ T7103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.755948][ T5236] Bluetooth: hci0: command tx timeout
[   99.804859][ T7103] team0: Port device team_slave_0 added
[   99.812257][ T7103] team0: Port device team_slave_1 added
[   99.860555][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_0
[   99.863125][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.874181][ T7103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   99.880681][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_1
[   99.883418][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   99.894034][ T7103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.960362][ T7103] hsr_slave_0: entered promiscuous mode
[   99.963242][ T7103] hsr_slave_1: entered promiscuous mode
[   99.968145][ T7103] debugfs: 'hsr0' already exists in 'hsr'
[   99.970470][ T7103] Cannot create hsr debugfs directory
[   99.978284][  T791] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  100.113015][ T7170] Zero length message leads to an empty skb
[  100.119873][ T7170] random: crng reseeded on system resumption
[  100.165946][  T791] usb 4-1: Using ep0 maxpacket: 8
[  100.176873][  T791] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  100.183534][  T791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.194166][  T791] usb 4-1: config 0 has no interface number 0
[  100.202512][  T791] usb 4-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  100.222252][  T791] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  100.226801][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.231052][  T791] usb 4-1: Product: syz
[  100.232885][  T791] usb 4-1: Manufacturer: syz
[  100.234880][  T791] usb 4-1: SerialNumber: syz
[  100.251181][  T791] usb 4-1: config 0 descriptor??
[  100.304174][ T7103] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  100.322892][ T7103] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  100.358260][ T7103] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  100.386490][ T7103] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  100.460081][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.463487][ T7103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.468340][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.471666][ T7103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.472791][  T791] usb 4-1: NFC: intf ffff8881199b0000 id ffffffff8eb53b60
[  100.503127][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.515282][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.522614][  T791] usb 4-1: USB disconnect, device number 2
[  100.672873][ T7103] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.697810][ T7103] 8021q: adding VLAN 0 to HW filter on device team0
[  100.711510][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.714128][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.753376][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.756226][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.135632][ T7103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.611105][ T7207] loop3: detected capacity change from 0 to 2048
[  101.652891][ T7103] veth0_vlan: entered promiscuous mode
[  101.664593][ T7103] veth1_vlan: entered promiscuous mode
[  101.669069][ T7207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.691510][ T7207] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  101.708151][ T7103] veth0_macvtap: entered promiscuous mode
[  101.718737][ T7103] veth1_macvtap: entered promiscuous mode
[  101.738854][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.748157][ T6849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.779545][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.796749][ T5876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.800342][ T5876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.803850][ T5876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.822848][ T5876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.836470][ T5236] Bluetooth: hci0: command tx timeout
[  101.974705][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.979255][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.011243][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.013927][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.072644][ T7230] loop3: detected capacity change from 0 to 128
[  102.118454][ T7230] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  102.144475][ T7232] loop4: detected capacity change from 0 to 256
[  102.151786][ T7210] loop1: detected capacity change from 0 to 40427
[  102.164463][ T7210] F2FS-fs (loop1): Image doesn't support compression
[  102.180067][ T7210] F2FS-fs (loop1): build fault injection rate: 690
[  102.188946][ T7232] 9pnet: p9_errstr2errno: server reported unknown error o$5Flr㜓^\uyiaemqww'LdQLc$F#
[  102.191232][ T7210] F2FS-fs (loop1): invalid crc value
[  102.265675][ T7230] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  102.293493][ T7230] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  102.304307][ T7210] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  102.319669][ T7210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  102.323227][ T7230] netlink: 104 bytes leftover after parsing attributes in process `syz.3.388'.
[  102.421360][ T5846] syz-executor: attempt to access beyond end of device
[  102.421360][ T5846] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  102.439906][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  102.439924][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.439930][ T5846] Call Trace:
[  102.439935][ T5846]  <TASK>
[  102.439940][ T5846]  dump_stack_lvl+0x189/0x250
[  102.439960][ T5846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.439974][ T5846]  ? __pfx_queue_work_on+0x10/0x10
[  102.439985][ T5846]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  102.440000][ T5846]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  102.440020][ T5846]  f2fs_handle_critical_error+0x37c/0x540
[  102.440041][ T5846]  f2fs_write_end_io+0x886/0xb60
[  102.440064][ T5846]  __submit_merged_bio+0x27a/0x6a0
[  102.440084][ T5846]  __submit_merged_write_cond+0x255/0x530
[  102.440104][ T5846]  f2fs_write_data_pages+0x261d/0x3000
[  102.440119][ T5846]  ? __lock_acquire+0xab9/0xd20
[  102.440157][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  102.440200][ T5846]  ? __mod_zone_page_state+0xd7/0x140
[  102.440223][ T5846]  ? folios_put_refs+0x560/0x640
[  102.440244][ T5846]  ? __lock_acquire+0xab9/0xd20
[  102.440266][ T5846]  ? do_raw_spin_lock+0x121/0x290
[  102.440286][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  102.440301][ T5846]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  102.440318][ T5846]  do_writepages+0x32e/0x550
[  102.440341][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  102.440356][ T5846]  filemap_fdatawrite+0x199/0x240
[  102.440369][ T5846]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  102.440443][ T5846]  ? do_raw_spin_unlock+0x4d/0x240
[  102.440460][ T5846]  f2fs_sync_dirty_inodes+0x31f/0x830
[  102.440482][ T5846]  f2fs_write_checkpoint+0x95a/0x1df0
[  102.440511][ T5846]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  102.440556][ T5846]  ? kill_f2fs_super+0x298/0x6c0
[  102.440571][ T5846]  kill_f2fs_super+0x2c3/0x6c0
[  102.440587][ T5846]  ? __pfx_kill_f2fs_super+0x10/0x10
[  102.440596][ T5846]  ? radix_tree_delete_item+0x2b6/0x400
[  102.440616][ T5846]  ? shrinker_free+0x2ce/0x3e0
[  102.440630][ T5846]  deactivate_locked_super+0xbc/0x130
[  102.440644][ T5846]  cleanup_mnt+0x425/0x4c0
[  102.440658][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.440674][ T5846]  task_work_run+0x1d4/0x260
[  102.440700][ T5846]  ? __pfx_task_work_run+0x10/0x10
[  102.440713][ T5846]  ? __x64_sys_umount+0x122/0x160
[  102.440733][ T5846]  ? exit_to_user_mode_loop+0x40/0x110
[  102.440753][ T5846]  exit_to_user_mode_loop+0xec/0x110
[  102.440769][ T5846]  do_syscall_64+0x2bd/0x3b0
[  102.440783][ T5846]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.440797][ T5846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.440809][ T5846]  ? exc_page_fault+0x9f/0xf0
[  102.440824][ T5846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.440834][ T5846] RIP: 0033:0x7f6e88f8ff17
[  102.440847][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  102.440857][ T5846] RSP: 002b:00007ffdfeff3008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  102.440870][ T5846] RAX: 0000000000000000 RBX: 00007f6e89011c05 RCX: 00007f6e88f8ff17
[  102.440876][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfeff30c0
[  102.440882][ T5846] RBP: 00007ffdfeff30c0 R08: 0000000000000000 R09: 0000000000000000
[  102.440889][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdfeff4150
[  102.440895][ T5846] R13: 00007f6e89011c05 R14: 0000000000018f7e R15: 00007ffdfeff4190
[  102.440912][ T5846]  </TASK>
[  102.440917][ T5846] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  102.675992][ T2301] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  102.827733][ T2301] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.832014][ T2301] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  102.837415][ T2301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  102.841160][ T2301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 224, setting to 64
[  102.845186][ T2301] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  102.853687][ T2301] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  102.858193][ T2301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  102.861284][ T2301] usb 4-1: Product: syz
[  102.862994][ T2301] usb 4-1: Manufacturer: syz
[  102.864903][ T2301] usb 4-1: SerialNumber: syz
[  102.871592][ T2301] usb 4-1: config 0 descriptor??
[  102.878731][ T7246] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  102.929357][ T7267] binder: 7263:7267 ioctl 4018620d 0 returned -22
[  102.934133][ T7267] binder: 7263:7267 ioctl c0306201 0 returned -14
[  103.092266][ T2301] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  103.094674][ T2301] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  103.292900][ T2301] radio-si470x 4-1:0.0: software version 0, hardware version 0
[  103.295534][ T2301] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  103.300583][ T2301] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  103.495254][ T2301] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71
[  103.504838][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.507122][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.509379][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.511814][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.514549][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.516931][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.519318][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.521620][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.524140][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.526880][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.529651][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.531925][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.535900][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.538530][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.540953][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.543475][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.545896][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.548156][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.550410][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.552655][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.554896][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.557141][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.559470][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.561925][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.564805][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.567113][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.569646][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.571941][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.574216][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.576750][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.579439][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.581704][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.584337][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.587909][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.590515][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.592693][ T2301] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71
[  103.595694][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.597975][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.600570][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.603150][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.605896][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.608680][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.611406][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.614084][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.616833][    C0] radio-si470x 4-1:0.0: non-zero urb status (-71)
[  103.619711][ T2301] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22
[  103.625966][ T2301] usb 4-1: USB disconnect, device number 3
[  103.656181][ T7282] loop4: detected capacity change from 0 to 512
[  103.674124][ T7282] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.397: bg 0: block 5: invalid block bitmap
[  103.682527][ T7282] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  103.690433][ T7282] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.397: invalid indirect mapped block 3 (level 2)
[  103.700486][ T7282] EXT4-fs (loop4): 1 orphan inode deleted
[  103.702842][ T7282] EXT4-fs (loop4): 1 truncate cleaned up
[  103.713831][ T7282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.745084][ T7103] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.916375][ T5236] Bluetooth: hci0: command tx timeout
[  104.120030][ T7308] loop4: detected capacity change from 0 to 128
[  104.138532][ T7308] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  104.158894][ T7308] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  104.165030][ T7309] loop3: detected capacity change from 0 to 4096
[  104.207731][ T7309] ntfs3(loop3): Failed to initialize $Secure (-22).
[  104.253071][ T1088] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  104.325608][ T7317] tipc: Started in network mode
[  104.327975][ T7317] tipc: Node identity 3a6d1bbbca79, cluster identity 4711
[  104.334649][ T7317] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.341130][ T7317] syzkaller0: entered promiscuous mode
[  104.343144][ T7317] syzkaller0: entered allmulticast mode
[  104.364938][ T7318] uprobe: syz.4.411:7318 failed to unregister, leaking uprobe
[  104.370751][ T7317] tipc: Resetting bearer <eth:syzkaller0>
[  104.376697][ T7316] tipc: Resetting bearer <eth:syzkaller0>
[  104.387017][ T7316] tipc: Disabling bearer <eth:syzkaller0>
[  104.555161][ T7330] No source specified
[  104.753681][ T7345] loop1: detected capacity change from 0 to 16
[  104.763483][ T7345] erofs (device loop1): mounted with root inode @ nid 36.
[  104.780443][ T5857] IPVS: starting estimator thread 0...
[  104.865918][ T7348] IPVS: using max 80 ests per chain, 192000 per kthread
[  105.066103][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  105.216117][    T9] usb 2-1: Using ep0 maxpacket: 16
[  105.221163][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  105.224585][    T9] usb 2-1: config 0 has no interface number 0
[  105.230180][    T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  105.235873][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.239783][    T9] usb 2-1: Product: syz
[  105.241455][    T9] usb 2-1: Manufacturer: syz
[  105.243126][    T9] usb 2-1: SerialNumber: syz
[  105.254825][    T9] usb 2-1: config 0 descriptor??
[  105.260201][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  105.462366][    T9] gspca_spca1528: reg_w err -71
[  105.475902][    T9] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  105.479661][    T9] usb 2-1: USB disconnect, device number 8
[  105.996015][ T5236] Bluetooth: hci0: command tx timeout
[  106.313029][ T7389] loop3: detected capacity change from 0 to 1024
[  106.322282][ T7382] loop1: detected capacity change from 0 to 32768
[  106.363162][ T7382] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.425 (7382)
[  106.395729][ T7382] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  106.417657][ T7382] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  106.421455][ T7382] BTRFS info (device loop1): using free-space-tree
[  106.629511][ T5846] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  106.773210][ T7426] trusted_key: syz.1.430 sent an empty control message without MSG_MORE.
[  106.838531][ T7430] loop1: detected capacity change from 0 to 512
[  106.870735][ T7430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.875351][ T7430] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.930842][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.218672][ T7452] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.535945][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  107.635955][ T6015] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  107.686484][   T10] usb 2-1: Using ep0 maxpacket: 16
[  107.694697][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.699579][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.703656][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  107.711017][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  107.714642][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.725304][   T10] usb 2-1: config 0 descriptor??
[  107.789296][ T6015] usb 4-1: config 64 has an invalid interface number: 19 but max is 0
[  107.792435][ T6015] usb 4-1: config 64 has no interface number 0
[  107.795030][ T6015] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  107.798759][ T6015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.811564][ T6015] usb 4-1: probing VID:PID(2201:012C)   
[  107.818890][ T6015] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  107.822434][ T6015] vub300 4-1:64.19: probe with driver vub300 failed with error -22
[  108.016290][ T6015] usb 4-1: USB disconnect, device number 4
[  108.141092][   T10] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.145348][   T10] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max
[  108.150441][   T10] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.153815][   T10] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.157154][   T10] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.160249][   T10] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.163319][   T10] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.166501][   T10] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.169581][   T10] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.172570][   T10] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.175457][   T10] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  108.343663][   T10] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  108.348666][   T10] microsoft 0003:045E:07DA.000A: no inputs found
[  108.351258][   T10] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  108.556549][ T5897] usb 2-1: USB disconnect, device number 9
[  108.641885][ T7471] netlink: 'syz.4.447': attribute type 2 has an invalid length.
[  109.179281][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  109.341476][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.347674][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.354791][   T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  109.360501][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.384796][   T10] usb 5-1: config 0 descriptor??
[  109.841948][   T10] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  110.014222][   T10] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00
[  110.463118][   T10] cp2112 0003:10C4:EA90.000B: error setting SMBus config
[  110.468219][   T10] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -71
[  110.472692][   T10] usb 5-1: USB disconnect, device number 2
[  110.741421][ T7503] loop3: detected capacity change from 0 to 40427
[  110.750004][ T7503] F2FS-fs (loop3): invalid crc value
[  110.807758][ T7503] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  110.811009][ T7503] F2FS-fs (loop3): Start checkpoint disabled!
[  110.818277][ T7503] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  110.833033][   T33] audit: type=1800 audit(1755563603.894:17): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.459" name="file1" dev="loop3" ino=10 res=0 errno=0
[  110.855548][   T36] kworker/u10:1: attempt to access beyond end of device
[  110.855548][   T36] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  110.861346][   T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u10:1 Not tainted syzkaller #0 PREEMPT(full) 
[  110.861378][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.861384][   T36] Workqueue: writeback wb_workfn (flush-7:3)
[  110.861397][   T36] Call Trace:
[  110.861400][   T36]  <TASK>
[  110.861404][   T36]  dump_stack_lvl+0x189/0x250
[  110.861416][   T36]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.861424][   T36]  ? __pfx_queue_work_on+0x10/0x10
[  110.861431][   T36]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  110.861440][   T36]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.861453][   T36]  f2fs_handle_critical_error+0x37c/0x540
[  110.861467][   T36]  f2fs_write_end_io+0x886/0xb60
[  110.861482][   T36]  __submit_merged_bio+0x27a/0x6a0
[  110.861494][   T36]  __submit_merged_write_cond+0x255/0x530
[  110.861506][   T36]  f2fs_write_data_pages+0x261d/0x3000
[  110.861530][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.861545][   T36]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  110.861567][   T36]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  110.861576][   T36]  ? look_up_lock_class+0x74/0x170
[  110.861590][   T36]  ? trace_f2fs_writepages+0x7f/0x200
[  110.861601][   T36]  ? f2fs_write_node_pages+0x478/0x6e0
[  110.861612][   T36]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  110.861626][   T36]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.861636][   T36]  do_writepages+0x32e/0x550
[  110.861648][   T36]  ? reacquire_held_locks+0x127/0x1d0
[  110.861654][   T36]  ? writeback_sb_inodes+0x384/0x1010
[  110.861667][   T36]  __writeback_single_inode+0x145/0xff0
[  110.861693][   T36]  ? do_raw_spin_unlock+0x4d/0x240
[  110.861703][   T36]  writeback_sb_inodes+0x6c7/0x1010
[  110.861723][   T36]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  110.861751][   T36]  ? rcu_is_watching+0x15/0xb0
[  110.861762][   T36]  wb_writeback+0x43b/0xaf0
[  110.861774][   T36]  ? queue_io+0x391/0x590
[  110.861784][   T36]  ? __pfx_wb_writeback+0x10/0x10
[  110.861796][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.861806][   T36]  wb_workfn+0x409/0xef0
[  110.861821][   T36]  ? __pfx_wb_workfn+0x10/0x10
[  110.861830][   T36]  ? __lock_acquire+0xab9/0xd20
[  110.861849][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  110.861860][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.861867][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  110.861873][   T36]  ? process_scheduled_works+0x9ef/0x17b0
[  110.861880][   T36]  process_scheduled_works+0xae1/0x17b0
[  110.861909][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  110.861932][   T36]  worker_thread+0x8a0/0xda0
[  110.861965][   T36]  kthread+0x711/0x8a0
[  110.861983][   T36]  ? __pfx_worker_thread+0x10/0x10
[  110.861994][   T36]  ? __pfx_kthread+0x10/0x10
[  110.862009][   T36]  ? _raw_spin_unlock_irq+0x23/0x50
[  110.862022][   T36]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.862036][   T36]  ? __pfx_kthread+0x10/0x10
[  110.862050][   T36]  ret_from_fork+0x3fc/0x770
[  110.862066][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  110.862082][   T36]  ? __switch_to_asm+0x39/0x70
[  110.862094][   T36]  ? __switch_to_asm+0x33/0x70
[  110.862106][   T36]  ? __pfx_kthread+0x10/0x10
[  110.862120][   T36]  ret_from_fork_asm+0x1a/0x30
[  110.862147][   T36]  </TASK>
[  110.863932][   T36] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  111.090684][ T7515] loop4: detected capacity change from 0 to 256
[  111.107216][ T7515] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  111.492530][ T7520] loop3: detected capacity change from 0 to 32768
[  111.856977][   T33] audit: type=1800 audit(1755563604.914:18): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.474" name="/" dev="9p" ino=2 res=0 errno=0
[  111.944893][ T7539] loop1: detected capacity change from 0 to 128
[  112.257466][ T7549] loop1: detected capacity change from 0 to 2048
[  112.300717][ T5854]  loop1: p1 < > p3
[  112.318987][ T5854] loop1: p3 size 134217728 extends beyond EOD, truncated
[  112.321966][ T7553] loop3: detected capacity change from 0 to 1024
[  112.324415][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'.
[  112.347222][ T7549]  loop1: p1 < > p3
[  112.356187][ T7549] loop1: p3 size 134217728 extends beyond EOD, truncated
[  112.439188][ T7559] loop4: detected capacity change from 0 to 8
[  112.453641][ T7559] SQUASHFS error: zlib decompression failed, data probably corrupt
[  112.457006][ T7559] SQUASHFS error: Failed to read block 0x9b: -5
[  112.459102][ T7559] SQUASHFS error: Unable to read metadata cache entry [99]
[  112.461780][ T7559] SQUASHFS error: Unable to read inode 0x127
[  112.604873][ T7563] pim6reg: entered allmulticast mode
[  112.624597][ T7567] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  112.631833][ T7562] pim6reg: left allmulticast mode
[  112.687502][   T33] audit: type=1326 audit(1755563605.744:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.1.489" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e88f8ebe9 code=0x0
[  112.695666][ T7571] loop3: detected capacity change from 0 to 128
[  112.709739][ T7571] vxfs: WRONG superblock magic 7b3185b5 at 1
[  112.712410][ T7571] vxfs: unsupported VxFS version (-1232326277)
[  112.936691][ T7574] loop3: detected capacity change from 0 to 32768
[  112.964299][ T7574] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  112.994591][ T6849] ocfs2: Unmounting device (7,3) on (node local)
[  113.082730][ T7578] loop4: detected capacity change from 0 to 32768
[  113.085665][ T7578] XFS: noikeep mount option is deprecated.
[  113.114258][ T7585] loop3: detected capacity change from 0 to 1024
[  113.136338][ T7578] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  113.141343][ T7585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.150981][ T7585] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.180175][ T7578] XFS (loop4): Ending clean mount
[  113.185890][ T7578] XFS (loop4): Quotacheck needed: Please wait.
[  113.187476][ T7585] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  113.195549][ T7585] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 11 with error 28
[  113.203078][ T7585] EXT4-fs (loop3): This should not happen!! Data will be lost
[  113.203078][ T7585] 
[  113.217004][ T7585] EXT4-fs (loop3): Total free blocks count 0
[  113.218930][ T7585] EXT4-fs (loop3): Free/Dirty block details
[  113.220787][ T7585] EXT4-fs (loop3): free_blocks=4293918720
[  113.222598][ T7585] EXT4-fs (loop3): dirty_blocks=48
[  113.224609][ T7585] EXT4-fs (loop3): Block reservation details
[  113.230747][ T7578] XFS (loop4): Quotacheck: Done.
[  113.233668][ T7585] EXT4-fs (loop3): i_reserved_data_blocks=3
[  113.257036][  T703] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 17 with error 28
[  113.291702][ T7103] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  113.428899][ T7604] loop3: detected capacity change from 0 to 32768
[  113.588810][ T7604] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  113.588823][ T7604]   allowing incompatible features above 0.0: (unknown version)
[  113.588827][ T7604]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  113.605844][ T7604] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  113.609174][ T7604] bcachefs (loop3): initializing new filesystem
[  113.616455][ T7604] bcachefs (loop3): going read-write
[  113.645231][ T7604] bcachefs (loop3): marking superblocks
[  113.654520][ T7604] bcachefs (loop3): initializing freespace
[  113.660533][ T7604] bcachefs (loop3): done initializing freespace
[  113.665563][ T7604] bcachefs (loop3): reading snapshots table
[  113.667695][ T7604] bcachefs (loop3): reading snapshots done
[  113.693470][ T7604] bcachefs (loop3): done starting filesystem
[  113.772528][ T7604] syz.3.497 (7604) used greatest stack depth: 16472 bytes left
[  113.817104][ T6849] bcachefs (loop3): shutting down
[  113.819190][ T6849] bcachefs (loop3): going read-only
[  113.821053][ T6849] bcachefs (loop3): finished waiting for writes to stop
[  113.841502][ T6849] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  113.895249][ T6849] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  113.901293][ T6849] bcachefs (loop3): clean shutdown complete, journal seq 4
[  113.904742][ T6849] bcachefs (loop3): marking filesystem clean
[  113.932682][ T7622] loop1: detected capacity change from 0 to 32768
[  113.954985][ T6849] bcachefs (loop3): shutdown complete
[  114.011442][ T7622] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  114.061679][ T5846] ocfs2: Unmounting device (7,1) on (node local)
[  114.071640][ T7654] loop4: detected capacity change from 0 to 256
[  114.112421][ T7654] FAT-fs (loop4): Directory bread(block 64) failed
[  114.115126][ T7654] FAT-fs (loop4): Directory bread(block 65) failed
[  114.127278][ T7654] FAT-fs (loop4): Directory bread(block 66) failed
[  114.129851][ T7654] FAT-fs (loop4): Directory bread(block 67) failed
[  114.132258][ T7654] FAT-fs (loop4): Directory bread(block 68) failed
[  114.134822][ T7654] FAT-fs (loop4): Directory bread(block 69) failed
[  114.140841][ T7654] FAT-fs (loop4): Directory bread(block 70) failed
[  114.143387][ T7654] FAT-fs (loop4): Directory bread(block 71) failed
[  114.145594][ T7654] FAT-fs (loop4): Directory bread(block 72) failed
[  114.148732][ T7654] FAT-fs (loop4): Directory bread(block 73) failed
[  114.719215][ T7663] loop4: detected capacity change from 0 to 32768
[  114.803007][ T7663] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  114.902104][ T7663] XFS (loop4): Ending clean mount
[  115.009019][ T7663] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  115.570176][ T7103] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  116.533140][ T7723] loop3: detected capacity change from 0 to 32768
[  116.544164][ T7723] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.520 (7723)
[  116.581644][ T7723] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.590910][ T7723] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  116.594512][ T7723] BTRFS info (device loop3): using free-space-tree
[  116.644128][ T7721] loop4: detected capacity change from 0 to 40427
[  116.668643][ T7747] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.718479][ T7721] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  116.727185][ T7721] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  116.758973][ T7754] loop1: detected capacity change from 0 to 512
[  116.777050][ T6849] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.782103][ T7754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.793678][ T7754] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.807676][ T7103] syz-executor: attempt to access beyond end of device
[  116.807676][ T7103] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  116.826393][ T7103] CPU: 0 UID: 0 PID: 7103 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  116.826408][ T7103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.826412][ T7103] Call Trace:
[  116.826415][ T7103]  <TASK>
[  116.826419][ T7103]  dump_stack_lvl+0x189/0x250
[  116.826432][ T7103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.826440][ T7103]  ? __pfx_queue_work_on+0x10/0x10
[  116.826447][ T7103]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  116.826456][ T7103]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.826468][ T7103]  f2fs_handle_critical_error+0x37c/0x540
[  116.826481][ T7103]  f2fs_write_end_io+0x886/0xb60
[  116.826494][ T7103]  __submit_merged_bio+0x27a/0x6a0
[  116.826506][ T7103]  __submit_merged_write_cond+0x255/0x530
[  116.826517][ T7103]  f2fs_write_data_pages+0x261d/0x3000
[  116.826538][ T7103]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  116.826552][ T7103]  ? arch_stack_walk+0xfc/0x150
[  116.826570][ T7103]  ? __mod_zone_page_state+0xd7/0x140
[  116.826583][ T7103]  ? unwind_next_frame+0xa5/0x2390
[  116.826596][ T7103]  ? rcu_is_watching+0x15/0xb0
[  116.826603][ T7103]  ? __kasan_check_byte+0x12/0x40
[  116.826616][ T7103]  ? __lock_acquire+0xab9/0xd20
[  116.826629][ T7103]  ? do_raw_spin_lock+0x121/0x290
[  116.826640][ T7103]  ? do_raw_spin_unlock+0x4d/0x240
[  116.826648][ T7103]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  116.826658][ T7103]  do_writepages+0x32e/0x550
[  116.826671][ T7103]  ? do_raw_spin_unlock+0x4d/0x240
[  116.826680][ T7103]  filemap_fdatawrite+0x199/0x240
[  116.826689][ T7103]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  116.826697][ T7103]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[  116.826720][ T7103]  ? do_raw_spin_unlock+0x4d/0x240
[  116.826729][ T7103]  f2fs_sync_dirty_inodes+0x31f/0x830
[  116.826741][ T7103]  f2fs_write_checkpoint+0x95a/0x1df0
[  116.826756][ T7103]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  116.826780][ T7103]  ? kill_f2fs_super+0x298/0x6c0
[  116.826789][ T7103]  kill_f2fs_super+0x2c3/0x6c0
[  116.826797][ T7103]  ? __pfx_kill_f2fs_super+0x10/0x10
[  116.826803][ T7103]  ? radix_tree_delete_item+0x2b6/0x400
[  116.826814][ T7103]  ? shrinker_free+0x2ce/0x3e0
[  116.826823][ T7103]  deactivate_locked_super+0xbc/0x130
[  116.826832][ T7103]  cleanup_mnt+0x425/0x4c0
[  116.826840][ T7103]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.826849][ T7103]  task_work_run+0x1d4/0x260
[  116.826860][ T7103]  ? __pfx_task_work_run+0x10/0x10
[  116.826867][ T7103]  ? __x64_sys_umount+0x122/0x160
[  116.826878][ T7103]  ? exit_to_user_mode_loop+0x40/0x110
[  116.826888][ T7103]  exit_to_user_mode_loop+0xec/0x110
[  116.826897][ T7103]  do_syscall_64+0x2bd/0x3b0
[  116.826905][ T7103]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.826913][ T7103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.826919][ T7103]  ? exc_page_fault+0x9f/0xf0
[  116.826928][ T7103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.826934][ T7103] RIP: 0033:0x7f170cb8ff17
[  116.826942][ T7103] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  116.826947][ T7103] RSP: 002b:00007ffd181512a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  116.826956][ T7103] RAX: 0000000000000000 RBX: 00007f170cc11c05 RCX: 00007f170cb8ff17
[  116.826961][ T7103] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd18151360
[  116.826965][ T7103] RBP: 00007ffd18151360 R08: 0000000000000000 R09: 0000000000000000
[  116.826969][ T7103] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd181523f0
[  116.826973][ T7103] R13: 00007f170cc11c05 R14: 000000000001c7b1 R15: 00007ffd18152430
[  116.826984][ T7103]  </TASK>
[  116.826987][ T7103] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  116.828522][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.832859][ T7103] CPU: 0 UID: 0 PID: 7103 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  116.832872][ T7103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.832876][ T7103] Call Trace:
[  116.832879][ T7103]  <TASK>
[  116.832883][ T7103]  dump_stack_lvl+0x189/0x250
[  116.832897][ T7103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.832905][ T7103]  ? __pfx_queue_work_on+0x10/0x10
[  116.832912][ T7103]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  116.832922][ T7103]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.832935][ T7103]  f2fs_handle_critical_error+0x37c/0x540
[  116.832949][ T7103]  f2fs_write_end_io+0x886/0xb60
[  116.832963][ T7103]  __submit_merged_bio+0x27a/0x6a0
[  116.832975][ T7103]  __submit_merged_write_cond+0x255/0x530
[  116.832987][ T7103]  f2fs_write_data_pages+0x261d/0x3000
[  116.833011][ T7103]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  116.833026][ T7103]  ? arch_stack_walk+0xfc/0x150
[  116.833046][ T7103]  ? __mod_zone_page_state+0xd7/0x140
[  116.833059][ T7103]  ? unwind_next_frame+0xa5/0x2390
[  116.833066][ T7103]  ? rcu_is_watching+0x15/0xb0
[  116.833072][ T7103]  ? __kasan_check_byte+0x12/0x40
[  116.833087][ T7103]  ? __lock_acquire+0xab9/0xd20
[  116.833100][ T7103]  ? do_raw_spin_lock+0x121/0x290
[  116.833113][ T7103]  ? do_raw_spin_unlock+0x4d/0x240
[  116.833121][ T7103]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  116.833131][ T7103]  do_writepages+0x32e/0x550
[  116.833145][ T7103]  ? do_raw_spin_unlock+0x4d/0x240
[  116.833155][ T7103]  filemap_fdatawrite+0x199/0x240
[  116.833164][ T7103]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  116.833172][ T7103]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[  116.833198][ T7103]  ? do_raw_spin_unlock+0x4d/0x240
[  116.833208][ T7103]  f2fs_sync_dirty_inodes+0x31f/0x830
[  116.833221][ T7103]  f2fs_write_checkpoint+0x95a/0x1df0
[  116.833238][ T7103]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  116.833265][ T7103]  ? kill_f2fs_super+0x298/0x6c0
[  116.833274][ T7103]  kill_f2fs_super+0x2c3/0x6c0
[  116.833284][ T7103]  ? __pfx_kill_f2fs_super+0x10/0x10
[  116.833289][ T7103]  ? radix_tree_delete_item+0x2b6/0x400
[  116.833300][ T7103]  ? shrinker_free+0x2ce/0x3e0
[  116.833309][ T7103]  deactivate_locked_super+0xbc/0x130
[  116.833319][ T7103]  cleanup_mnt+0x425/0x4c0
[  116.833326][ T7103]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.833365][ T7103]  task_work_run+0x1d4/0x260
[  116.833377][ T7103]  ? __pfx_task_work_run+0x10/0x10
[  116.833384][ T7103]  ? __x64_sys_umount+0x122/0x160
[  116.833396][ T7103]  ? exit_to_user_mode_loop+0x40/0x110
[  116.833407][ T7103]  exit_to_user_mode_loop+0xec/0x110
[  116.833416][ T7103]  do_syscall_64+0x2bd/0x3b0
[  116.833424][ T7103]  ? lockdep_hardirqs_on+0x9c/0x150
[  116.833432][ T7103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.833439][ T7103]  ? exc_page_fault+0x9f/0xf0
[  116.833448][ T7103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.833454][ T7103] RIP: 0033:0x7f170cb8ff17
[  116.833462][ T7103] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  116.833468][ T7103] RSP: 002b:00007ffd181512a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  116.833477][ T7103] RAX: 0000000000000000 RBX: 00007f170cc11c05 RCX: 00007f170cb8ff17
[  116.833481][ T7103] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd18151360
[  116.833486][ T7103] RBP: 00007ffd18151360 R08: 0000000000000000 R09: 0000000000000000
[  116.833490][ T7103] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd181523f0
[  116.833494][ T7103] R13: 00007f170cc11c05 R14: 000000000001c7b1 R15: 00007ffd18152430
[  116.833507][ T7103]  </TASK>
[  116.833510][ T7103] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  116.963370][ T7760] loop1: detected capacity change from 0 to 4096
[  117.125099][ T7760] EXT4-fs: Ignoring removed nomblk_io_submit option
[  117.128892][ T7760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.132484][ T7760] EXT4-fs (loop1): Test dummy encryption mode enabled
[  117.151728][ T7760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.161738][ T7760] EXT4-fs: Ignoring removed nomblk_io_submit option
[  117.164537][ T7760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  117.203403][ T7760] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  117.288939][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.506064][  T791] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  117.657821][  T791] usb 4-1: Using ep0 maxpacket: 8
[  117.668077][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  117.676246][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  117.680166][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  117.700763][ T7769] loop4: detected capacity change from 0 to 32768
[  117.700931][  T791] usb 4-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[  117.714107][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.717912][  T791] usb 4-1: Product: syz
[  117.719392][  T791] usb 4-1: Manufacturer: syz
[  117.720956][  T791] usb 4-1: SerialNumber: syz
[  117.728278][ T7769] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  117.738291][  T791] usb 4-1: config 0 descriptor??
[  117.740673][ T7769] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.744510][  T791] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8
[  117.773208][ T7769] XFS (loop4): Ending clean mount
[  117.780542][ T7769] XFS (loop4): Quotacheck needed: Please wait.
[  117.798016][ T7790] netlink: 48 bytes leftover after parsing attributes in process `syz.1.536'.
[  117.801945][ T7790] netlink: 48 bytes leftover after parsing attributes in process `syz.1.536'.
[  117.815715][ T7769] XFS (loop4): Quotacheck: Done.
[  117.850642][ T7103] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.952066][ T7794] netlink: 648 bytes leftover after parsing attributes in process `syz.1.539'.
[  117.963365][  T791] usb 4-1: USB disconnect, device number 5
[  118.034008][ T7796] 9pnet: p9_errstr2errno: server reported unknown error @cDB0xffffffffffffffff
[  118.078031][ T5236] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  118.081635][ T5236] Bluetooth: hci0: Injecting HCI hardware error event
[  118.086162][ T5236] Bluetooth: hci0: hardware error 0x00
[  118.311090][ T7817] loop6: detected capacity change from 0 to 524288000
[  118.315734][ T5854] buffer_io_error: 28 callbacks suppressed
[  118.315746][ T5854] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.324418][ T5854] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.328104][ T5854] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.331497][ T5854] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.335020][ T5854] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.338525][ T5854] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.341734][ T5854] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.345107][ T5854] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.348659][ T5854] ldm_validate_partition_table(): Disk read failed.
[  118.351511][ T5854] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.354886][ T5854] Buffer I/O error on dev loop6, logical block 0, async page read
[  118.358488][ T5854] Dev loop6: unable to read RDB block 0
[  118.363134][ T5854]  loop6: unable to read partition table
[  118.398628][ T7820] loop6: detected capacity change from 524288000 to 0
[  118.398738][ T7817] ldm_validate_partition_table(): Disk read failed.
[  118.403690][ T7817] Dev loop6: unable to read RDB block 0
[  118.406433][ T7817]  loop6: unable to read partition table
[  118.408682][ T7817] loop6: partition table beyond EOD, truncated
[  118.414454][ T7817] loop_reread_partitions: partition scan of loop6 (^LA;b@֔:Bw<gnf.-ӑ.i>^.dDd) failed (rc=-5)
[  118.635939][ T2301] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  118.690400][ T7830] loop3: detected capacity change from 0 to 40427
[  118.693451][ T7830] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  118.697112][ T7830] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  118.701273][ T7830] F2FS-fs (loop3): invalid crc value
[  118.743543][ T7830] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  118.750097][ T7830] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  118.752806][ T7830] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  118.806398][ T2301] usb 5-1: Using ep0 maxpacket: 8
[  118.817771][ T2301] usb 5-1: unable to get BOS descriptor or descriptor too short
[  118.821966][ T2301] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8
[  118.828917][ T2301] usb 5-1: config 8 interface 0 has no altsetting 0
[  118.835392][ T7835] loop1: detected capacity change from 0 to 32768
[  118.841317][ T2301] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  118.845438][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.854906][ T2301] usb 5-1: Product: syz
[  118.860852][ T2301] usb 5-1: Manufacturer: syz
[  118.862506][ T2301] usb 5-1: SerialNumber: syz
[  118.864474][ T7835] ERROR: (device loop1): dbAlloc: the hint is outside the map
[  118.864474][ T7835] 
[  118.871312][ T7822] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  118.907451][   T36] read_mapping_page failed!
[  118.909378][   T36] ERROR: (device loop1): txCommit: 
[  118.909378][   T36] 
[  118.912158][   T36] jfs_write_inode: jfs_commit_inode failed!
[  119.089497][ T2301] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  119.094183][ T2301] usb 5-1: selecting invalid altsetting 0
[  119.141422][ T2301] usb 5-1: USB disconnect, device number 3
[  119.227948][ T7856] udevd[7856]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.248799][ T7859] loop1: detected capacity change from 0 to 1024
[  119.284984][ T7859] syz.1.566: attempt to access beyond end of device
[  119.284984][ T7859] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  119.293366][ T7859] syz.1.566: attempt to access beyond end of device
[  119.293366][ T7859] loop1: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  119.303763][ T7859] hfsplus: can't free extent
[  119.304786][   T33] audit: type=1800 audit(1755563612.364:20): pid=7859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.566" name="file1" dev="loop1" ino=20 res=0 errno=0
[  119.802733][ T7869] loop1: detected capacity change from 0 to 32768
[  119.811675][ T7869] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.570 (7869)
[  119.827804][ T7869] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.831951][ T7869] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  119.836821][ T7869] BTRFS info (device loop1): disk space caching is enabled
[  119.839730][ T7869] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  119.949099][ T7869] BTRFS info (device loop1): rebuilding free space tree
[  119.981404][ T7869] BTRFS info (device loop1): disabling free space tree
[  119.984614][ T7869] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  119.991138][ T7869] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  120.045913][ T2301] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  120.098772][ T5846] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.124217][ T7904] program syz.3.580 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.134279][ T7904] ata1.00: non-matching transfer count (0/2)
[  120.156243][ T5236] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  120.199838][ T2301] usb 5-1: Using ep0 maxpacket: 8
[  120.203098][ T2301] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  120.206235][ T2301] usb 5-1: config 0 has no interface number 0
[  120.208614][ T2301] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  120.227930][ T2301] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  120.237278][ T2301] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  120.240983][ T2301] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  120.274897][ T2301] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  120.279701][ T2301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.289144][ T2301] usb 5-1: config 0 descriptor??
[  120.301820][ T2301] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  120.454453][ T7924] program syz.1.589 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.510976][ T7929] loop1: detected capacity change from 0 to 1024
[  120.528165][ T7929] EXT4-fs: Ignoring removed oldalloc option
[  120.530857][ T7929] EXT4-fs: Ignoring removed orlov option
[  120.542999][ T7929] EXT4-fs (loop1): stripe (1570) is not aligned with cluster size (16), stripe is disabled
[  120.565215][ T7929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.614800][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.687571][ T7935] loop3: detected capacity change from 0 to 4096
[  120.734994][ T7935] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  120.769254][ T7935] ntfs3(loop3): Failed to load $Extend (-22).
[  120.772294][ T7935] ntfs3(loop3): Failed to initialize $Extend.
[  120.952366][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'.
[  121.058370][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'.
[  121.365745][ T7946] loop3: detected capacity change from 0 to 40427
[  121.378567][ T7946] F2FS-fs (loop3): Invalid log blocks per segment (83886089)
[  121.392031][ T7946] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  121.417147][ T7946] F2FS-fs (loop3): invalid crc value
[  121.479720][ T7946] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  121.483838][ T7946] F2FS-fs (loop3): Start checkpoint disabled!
[  121.491667][ T7946] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  121.494632][ T7946] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  121.901666][ T7967] netlink: 'syz.1.605': attribute type 7 has an invalid length.
[  122.026702][ T2301] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  122.127897][ T7975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.609'.
[  122.181882][ T2301] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  122.185691][ T2301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.197625][ T2301] usb 4-1: config 0 descriptor??
[  122.823924][   T10] usb 5-1: USB disconnect, device number 4
[  122.840708][   T10] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  122.848217][ T7980] sctp: [Deprecated]: syz.4.611 (pid 7980) Use of int in maxseg socket option.
[  122.848217][ T7980] Use struct sctp_assoc_value instead
[  123.097712][ T7986] loop1: detected capacity change from 0 to 1024
[  123.101217][ T7986] EXT4-fs: Ignoring removed nobh option
[  123.109042][ T7986] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  123.127524][ T7986] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.614: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  123.137993][ T7986] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.614: couldn't read orphan inode 11 (err -117)
[  123.144136][ T7986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.159436][ T7986] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.614: Invalid block bitmap block 0 in block_group 0
[  123.168180][ T7986] Quota error (device loop1): write_blk: dquota write failed
[  123.171525][ T7986] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  123.176224][ T7986] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.614: Failed to acquire dquot type 0
[  123.205173][ T7986] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.614: Invalid inode table block 8589934593 in block_group 0
[  123.217473][ T2301] pegasus 4-1:0.0: probe with driver pegasus failed with error -71
[  123.226031][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  123.232483][ T2301] usb 4-1: USB disconnect, device number 6
[  123.235704][   T64] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm kworker/u10:2: Invalid inode table block 8589934593 in block_group 0
[  123.250049][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.288739][ T7990] loop1: detected capacity change from 0 to 256
[  123.312758][ T7990] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  123.316990][ T7990] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  123.323895][ T7990] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[  123.405917][   T10] usb 5-1: Using ep0 maxpacket: 8
[  123.412730][   T10] usb 5-1: config 0 has an invalid interface number: 223 but max is 0
[  123.421120][   T10] usb 5-1: config 0 has no interface number 0
[  123.423645][   T10] usb 5-1: config 0 interface 223 has no altsetting 0
[  123.437733][   T10] usb 5-1: New USB device found, idVendor=0543, idProduct=1923, bcdDevice=2f.36
[  123.441470][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.444761][   T10] usb 5-1: Product: syz
[  123.446672][   T10] usb 5-1: Manufacturer: syz
[  123.448583][   T10] usb 5-1: SerialNumber: syz
[  123.452802][   T10] usb 5-1: config 0 descriptor??
[  123.563535][ T7992] loop1: detected capacity change from 0 to 32768
[  123.646294][ T7992] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  123.646339][ T7992]   allowing incompatible features above 0.0: (unknown version)
[  123.646347][ T7992]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  123.673290][   T10] usb 5-1: USB disconnect, device number 5
[  123.674917][ T7992] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  123.682857][ T7992] bcachefs (loop1): initializing new filesystem
[  123.693585][ T7992] bcachefs (loop1): going read-write
[  123.701823][ T7992] bcachefs (loop1): marking superblocks
[  123.719960][ T7992] bcachefs (loop1): initializing freespace
[  123.727642][ T7992] bcachefs (loop1): done initializing freespace
[  123.743546][ T7992] bcachefs (loop1): reading snapshots table
[  123.750690][ T7992] bcachefs (loop1): reading snapshots done
[  123.800705][ T7992] bcachefs (loop1): done starting filesystem
[  123.900977][ T5846] bcachefs (loop1): shutting down
[  123.903062][ T5846] bcachefs (loop1): going read-only
[  123.913269][ T5846] bcachefs (loop1): finished waiting for writes to stop
[  123.920006][ T5846] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  123.963390][ T5846] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  123.976141][ T5846] bcachefs (loop1): clean shutdown complete, journal seq 4
[  123.985692][ T5846] bcachefs (loop1): marking filesystem clean
[  124.013094][ T5846] bcachefs (loop1): shutdown complete
[  124.198985][ T8017] loop3: detected capacity change from 0 to 32768
[  124.248270][ T5854]  loop3: p1 p3 < >
[  124.259905][ T8017]  loop3: p1 p3 < >
[  124.339605][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'.
[  124.343371][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  124.347262][ T6356] udevd[6356]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  124.404862][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  124.415245][ T6356] udevd[6356]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  124.438403][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  124.487075][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  124.504589][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'.
[  125.127264][ T8038] loop1: detected capacity change from 0 to 1024
[  125.173696][ T3583] hfsplus: b-tree write err: -5, ino 4
[  125.585720][ T8052] mkiss: ax0: crc mode is auto.
[  126.646020][ T5850] Bluetooth: hci3: command 0x1003 tx timeout
[  126.646698][ T5236] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  126.861651][ T8083] loop1: detected capacity change from 0 to 512
[  126.867593][ T8083] EXT4-fs: Invalid want_extra_isize 1430
[  127.349369][ T8126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'.
[  127.396227][ T5857] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  127.417694][ T8132] netlink: 27 bytes leftover after parsing attributes in process `syz.3.674'.
[  127.560465][ T5857] usb 5-1: unable to get BOS descriptor or descriptor too short
[  127.566265][ T5857] usb 5-1: not running at top speed; connect to a high speed hub
[  127.576682][ T5857] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.580950][ T5857] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  127.591334][ T5857] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  127.602898][ T5857] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.606966][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.610412][ T5857] usb 5-1: Product: syz
[  127.612232][ T5857] usb 5-1: Manufacturer: syz
[  127.614261][ T5857] usb 5-1: SerialNumber: syz
[  127.870638][ T5857] usb 5-1: USB disconnect, device number 6
[  128.367150][   T33] audit: type=1326 audit(1755563621.434:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.1.679" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e88f8ebe9 code=0x7fc00000
[  128.536236][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'.
[  131.029518][ T8225] loop1: detected capacity change from 0 to 32768
[  131.040797][ T8225] (syz.1.709,8225,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  131.059158][ T8225] (syz.1.709,8225,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  131.075314][ T8225] JBD2: Ignoring recovery information on journal
[  131.106318][ T8225] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  131.186342][ T5846] ocfs2: Unmounting device (7,1) on (node local)
[  131.643058][ T8244] loop4: detected capacity change from 0 to 4096
[  131.659720][ T8244] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  131.679188][ T8244] ntfs3(loop4): ino=1a, mi_enum_attr
[  131.681528][ T8244] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  131.693407][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.720'.
[  131.816410][ T8259] loop4: detected capacity change from 0 to 256
[  131.837470][ T8259] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d)
[  131.911111][ T8262] loop1: detected capacity change from 0 to 1764
[  132.036993][ T8271] netlink: 340 bytes leftover after parsing attributes in process `syz.1.730'.
[  132.131940][ T8281] IPVS: Error connecting to the multicast addr
[  132.369408][ T8287] loop1: detected capacity change from 0 to 32768
[  132.374939][ T8286] loop4: detected capacity change from 0 to 32768
[  132.378730][ T8287] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal: journal bucket 1 before first bucket 32767
[  132.378730][ T8287] journal (size 40):
[  132.378730][ T8287] Buckets:  9 7 24 1
[  132.378730][ T8287] 
[  132.400853][ T8287] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  132.404395][ T8286] bcachefs (/dev/loop4): error validating superblock: Invalid superblock: optional field with size 0 (type 1)
[  132.420503][ T8286] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  132.604962][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'.
[  132.657232][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.659987][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.755717][ T8309] loop4: detected capacity change from 0 to 256
[  132.765846][ T8309] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  132.769699][ T8309] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  132.785392][ T8309] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  132.851583][ T8317] loop4: detected capacity change from 0 to 8
[  132.858342][ T8317] SQUASHFS error: lzo decompression failed, data probably corrupt
[  132.865843][ T8317] SQUASHFS error: Failed to read block 0x28d: -5
[  132.867917][ T8317] SQUASHFS error: Unable to read metadata cache entry [28b]
[  132.870477][ T8317] SQUASHFS error: Unable to read inode 0x11f
[  133.560323][ T8343] syz_tun: entered allmulticast mode
[  133.865308][ T8347] netlink: 'syz.3.765': attribute type 1 has an invalid length.
[  133.867993][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'.
[  134.138683][ T8361] netlink: 'syz.3.772': attribute type 3 has an invalid length.
[  134.141194][ T8361] netlink: 'syz.3.772': attribute type 27 has an invalid length.
[  134.202170][ T8365] Bluetooth: MGMT ver 1.23
[  134.214691][ T8367] netlink: 'syz.3.775': attribute type 2 has an invalid length.
[  134.240065][ T8367] : entered promiscuous mode
[  134.314936][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.779'.
[  134.352815][ T8359] loop4: detected capacity change from 0 to 32768
[  134.359806][ T8359] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.771 (8359)
[  134.391203][ T8359] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  134.405910][ T8359] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  134.409461][ T8359] BTRFS info (device loop4): using free-space-tree
[  134.730759][ T7103] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  134.869738][ T8411] netem: incorrect gi model size
[  134.871634][ T8411] netem: change failed
[  135.130255][ T8416] loop1: detected capacity change from 0 to 32768
[  135.139486][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'.
[  135.181833][ T8416] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  135.181847][ T8416]   allowing incompatible features above 0.0: (unknown version)
[  135.181851][ T8416]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  135.202262][ T8416] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  135.205093][ T8416] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  135.208483][ T5857] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  135.212837][ T8416] bcachefs (loop1): Version upgrade required:
[  135.212837][ T8416] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  135.212837][ T8416] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  135.212837][ T8416]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  135.239684][ T8416] bcachefs (loop1): dropping and reconstructing all alloc info
[  135.251344][ T8431] netlink: 'syz.3.791': attribute type 10 has an invalid length.
[  135.264217][ T8431] 8021q: adding VLAN 0 to HW filter on device team0
[  135.271803][ T8431] bond0: (slave team0): Enslaving as an active interface with an up link
[  135.276587][ T8416] bcachefs (loop1): accounting_read... done
[  135.280896][ T8416] bcachefs (loop1): alloc_read... done
[  135.283728][ T8416] bcachefs (loop1): snapshots_read... done
[  135.288458][ T8416] bcachefs (loop1): done starting filesystem
[  135.316732][ T8433] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.792'.
[  135.322610][ T8433] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  135.336328][ T8433] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  135.343510][ T5846] bcachefs (loop1): shutting down
[  135.356058][ T5857] usb 5-1: Using ep0 maxpacket: 16
[  135.362692][ T5857] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  135.367830][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.371291][ T5857] usb 5-1: Product: syz
[  135.373783][ T5857] usb 5-1: Manufacturer: syz
[  135.376435][ T5857] usb 5-1: SerialNumber: syz
[  135.377119][ T5846] bcachefs (loop1): shutdown complete
[  135.396215][ T5857] r8152-cfgselector 5-1: Unknown version 0x0000
[  135.400566][ T5857] r8152-cfgselector 5-1: config 0 descriptor??
[  135.581728][ T8447] netlink: 9 bytes leftover after parsing attributes in process `syz.3.800'.
[  135.585367][ T8447] gretap0: entered promiscuous mode
[  135.593469][ T8447] netlink: 5 bytes leftover after parsing attributes in process `syz.3.800'.
[  135.597021][ T8447] 0{X: renamed from gretap0
[  135.600787][ T8447] 0{X: left promiscuous mode
[  135.602735][ T8447] 0{X: entered allmulticast mode
[  135.605662][ T8447] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  135.623229][ T5857] r8152-cfgselector 5-1: Needed 2 retries to read version
[  135.626914][ T5857] r8152-cfgselector 5-1: Unknown version 0x0000
[  135.629725][ T5857] r8152-cfgselector 5-1: bad CDC descriptors
[  135.832047][ T5857] r8152-cfgselector 5-1: USB disconnect, device number 7
[  136.537229][ T8475] mmap: syz.1.812 (8475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  136.740149][ T2301] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  136.908058][ T2301] usb 5-1: not running at top speed; connect to a high speed hub
[  136.923315][ T2301] usb 5-1: config 2 has an invalid interface number: 33 but max is 0
[  136.926857][ T2301] usb 5-1: config 2 has no interface number 0
[  136.929698][ T2301] usb 5-1: config 2 interface 33 has no altsetting 0
[  136.949026][ T2301] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02
[  136.953621][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.956536][ T2301] usb 5-1: Product: syz
[  136.958524][ T2301] usb 5-1: Manufacturer: syz
[  136.960662][ T2301] usb 5-1: SerialNumber: syz
[  137.245062][ T2301] go7007 5-1:2.33: probe with driver go7007 failed with error -12
[  137.254010][ T2301] usb 5-1: USB disconnect, device number 8
[  137.852526][ T8493] .: renamed from bond0 (while UP)
[  138.032037][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'.
[  138.094457][ T8508] loop1: detected capacity change from 0 to 512
[  138.112053][ T8508] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  138.142855][ T8511] 9pnet_fd: Insufficient options for proto=fd
[  138.157283][ T8514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.830'.
[  138.169779][ T8508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.176911][ T8508] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  138.222188][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.759482][ T8524] loop1: detected capacity change from 0 to 8192
[  139.121818][ T5722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.179903][ T5722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.269976][ T5722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.427147][ T5722] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.658096][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  139.663457][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  139.670219][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  139.675178][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  139.679539][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  140.702597][ T8574] loop4: detected capacity change from 0 to 4096
[  140.751090][ T8580] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.825384][ T8566] chnl_net:caif_netlink_parms(): no params data found
[  140.929545][ T8566] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.932339][ T8566] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.935266][ T8566] bridge_slave_0: entered allmulticast mode
[  140.946943][ T8566] bridge_slave_0: entered promiscuous mode
[  140.951993][ T8566] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.954888][ T8566] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.958503][ T8566] bridge_slave_1: entered allmulticast mode
[  140.963784][ T8566] bridge_slave_1: entered promiscuous mode
[  141.003920][ T8566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.017678][ T8566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.054984][ T8566] team0: Port device team_slave_0 added
[  141.068440][ T8566] team0: Port device team_slave_1 added
[  141.101145][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.103461][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.123197][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'.
[  141.126017][ T8566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.141039][ T8566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.143454][ T8566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.153035][ T8566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.238357][ T8566] hsr_slave_0: entered promiscuous mode
[  141.241372][ T8566] hsr_slave_1: entered promiscuous mode
[  141.244194][ T8566] debugfs: 'hsr0' already exists in 'hsr'
[  141.259072][ T8566] Cannot create hsr debugfs directory
[  141.314837][ T8602] delete_channel: no stack
[  141.512318][ T8566] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  141.527820][ T8566] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  141.539391][ T8566] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  141.549598][ T8566] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  141.756964][ T5236] Bluetooth: hci1: command tx timeout
[  142.123865][ T8566] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.139708][ T8566] 8021q: adding VLAN 0 to HW filter on device team0
[  142.140195][ T8617] loop4: detected capacity change from 0 to 32768
[  142.153137][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.156413][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.170295][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.173153][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.181302][ T8617] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.222885][ T8617] XFS (loop4): Ending clean mount
[  142.228176][ T8617] XFS (loop4): Quotacheck needed: Please wait.
[  142.280204][ T8617] XFS (loop4): Quotacheck: Done.
[  142.345683][ T5722] bridge_slave_1: left allmulticast mode
[  142.354781][ T5722] bridge_slave_1: left promiscuous mode
[  142.358459][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.410991][ T7103] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.416544][ T5722] bridge_slave_0: left allmulticast mode
[  142.418913][ T5722] bridge_slave_0: left promiscuous mode
[  142.423077][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.035893][ T2301] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  143.078086][ T5722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.082152][ T5722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.086070][ T5722] bond0 (unregistering): Released all slaves
[  143.187555][ T2301] usb 5-1: Using ep0 maxpacket: 32
[  143.209884][ T2301] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  143.213703][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.223835][ T2301] usb 5-1: Product: syz
[  143.225701][ T2301] usb 5-1: Manufacturer: syz
[  143.230645][ T2301] usb 5-1: SerialNumber: syz
[  143.237281][ T2301] usb 5-1: config 0 descriptor??
[  143.429148][ T8566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.590657][ T5722] hsr_slave_0: left promiscuous mode
[  143.597559][ T5722] hsr_slave_1: left promiscuous mode
[  143.599802][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.602314][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.608840][ T8678] overlayfs: failed to resolve './file0': -2
[  143.611860][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.614746][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.638904][ T5722] veth1_macvtap: left promiscuous mode
[  143.640810][ T5722] veth0_macvtap: left promiscuous mode
[  143.643927][ T5722] veth1_vlan: left promiscuous mode
[  143.646260][ T5722] veth0_vlan: left promiscuous mode
[  143.837981][ T5236] Bluetooth: hci1: command tx timeout
[  143.846619][ T2301] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  143.912379][ T8692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'.
[  144.015503][ T5722] team0 (unregistering): Port device team_slave_1 removed
[  144.399142][ T2301] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71
[  144.426838][ T2301] usb 5-1: USB disconnect, device number 9
[  144.497393][ T8566] veth0_vlan: entered promiscuous mode
[  144.521301][ T8566] veth1_vlan: entered promiscuous mode
[  144.628573][ T8566] veth0_macvtap: entered promiscuous mode
[  144.633652][ T8566] veth1_macvtap: entered promiscuous mode
[  144.690628][ T8566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.703469][ T8566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.713510][ T5896] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.732502][ T5896] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.771543][ T5896] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.774490][ T5896] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.867966][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'.
[  144.871972][ T8717] tc_dump_action: action bad kind
[  144.911008][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.915349][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.966728][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.975889][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.154948][ T8715] loop4: detected capacity change from 0 to 32768
[  145.594689][ T8739] loop4: detected capacity change from 0 to 32768
[  145.624015][ T8739] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  145.681614][ T7103] ocfs2: Unmounting device (7,4) on (node local)
[  145.918620][ T5236] Bluetooth: hci1: command tx timeout
[  146.225980][   T51] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  146.360947][ T8786] loop4: detected capacity change from 0 to 32768
[  146.377103][ T8786] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.915 (8786)
[  146.384316][   T51] usb 6-1: Using ep0 maxpacket: 16
[  146.404123][   T51] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  146.412376][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.415555][   T51] usb 6-1: Product: syz
[  146.425560][   T51] usb 6-1: Manufacturer: syz
[  146.428868][ T8786] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  146.435208][   T51] usb 6-1: SerialNumber: syz
[  146.438992][ T8786] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  146.443359][   T51] usb 6-1: config 0 descriptor??
[  146.447271][ T8786] BTRFS info (device loop4): using free-space-tree
[  146.505139][ T8802] netlink: 830 bytes leftover after parsing attributes in process `syz.3.917'.
[  146.655976][   T51] speedtch 6-1:0.0: speedtch_bind: data interface not found!
[  146.661678][   T51] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  146.702937][ T7103] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  146.855046][   T51] usb 6-1: USB disconnect, device number 2
[  147.135928][ T2301] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  147.289370][ T2301] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[  147.292956][ T2301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.297459][ T2301] usb 5-1: Product: syz
[  147.299051][ T2301] usb 5-1: Manufacturer: syz
[  147.300849][ T2301] usb 5-1: SerialNumber: syz
[  147.306663][ T2301] usb 5-1: config 0 descriptor??
[  147.525917][  T791] usb 5-1: USB disconnect, device number 10
[  148.000487][ T5236] Bluetooth: hci1: command tx timeout
[  148.188504][ T8872] netlink: 'syz.3.944': attribute type 29 has an invalid length.
[  148.203001][ T8872] netlink: 'syz.3.944': attribute type 29 has an invalid length.
[  148.213902][ T8872] netlink: 500 bytes leftover after parsing attributes in process `syz.3.944'.
[  148.438854][   T33] audit: type=1326 audit(1755563641.504:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.3.949" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0256f8ebe9 code=0x0
[  148.443162][ T8868] loop4: detected capacity change from 0 to 32768
[  148.785266][ T8868] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  148.829516][ T8868] XFS (loop4): Ending clean mount
[  148.832657][ T8868] XFS (loop4): Quotacheck needed: Please wait.
[  148.864957][ T8868] XFS (loop4): Quotacheck: Done.
[  148.907915][ T7103] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.107438][ T8901] loop4: detected capacity change from 0 to 4096
[  149.165113][ T8901] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  149.168493][ T8904] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.192052][ T8901] Remounting filesystem read-only
[  149.347774][ T8917] loop5: detected capacity change from 0 to 4096
[  149.366102][ T8917] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  149.370822][ T8917] ntfs3(loop5): Failed to load $UpCase (-22).
[  149.697277][ T8920] could not allocate digest TFM handle sha1-avx2
[  149.755474][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.963'.
[  150.397935][ T8946] loop5: detected capacity change from 0 to 32768
[  150.410168][ T8946] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.972 (8946)
[  150.429761][ T8946] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.438985][ T8946] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  150.443928][ T8946] BTRFS info (device loop5): using free-space-tree
[  150.520494][ T8946] BTRFS info (device loop5): checking UUID tree
[  150.572340][ T8566] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.750746][ T8981] loop4: detected capacity change from 0 to 2048
[  150.784646][ T8981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.936878][ T8981] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  151.355973][ T2301] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  151.451141][ T8980] loop5: detected capacity change from 0 to 131072
[  151.457850][ T8980] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  151.461576][ T8980] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  151.499559][ T8980] F2FS-fs (loop5): invalid crc value
[  151.518022][ T2301] usb 5-1: config index 0 descriptor too short (expected 23569, got 27)
[  151.520907][ T2301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.531108][ T2301] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  151.541517][ T2301] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  151.544324][ T2301] usb 5-1: Manufacturer: syz
[  151.553041][ T2301] usb 5-1: config 0 descriptor??
[  151.563764][ T8980] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  151.568976][ T8980] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  151.569660][ T2301] igorplugusb 5-1:0.0: endpoint incorrect
[  151.571965][ T8980] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  151.765086][ T5911] usb 5-1: USB disconnect, device number 11
[  152.202339][ T9020] loop5: detected capacity change from 0 to 32768
[  152.208763][ T9020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.994 (9020)
[  152.216810][ T9020] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.221351][ T9020] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  152.225052][ T9020] BTRFS info (device loop5): disk space caching is enabled
[  152.228184][ T9020] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  152.340566][ T9020] BTRFS info (device loop5): rebuilding free space tree
[  152.357533][ T9020] BTRFS info (device loop5): disabling free space tree
[  152.360540][ T9020] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  152.364465][ T9020] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  152.516709][ T9042] BTRFS info (device loop5 state M): max_inline set to 4096
[  152.895987][ T9056] loop4: detected capacity change from 0 to 256
[  152.901481][ T8566] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.278517][ T9073] loop4: detected capacity change from 0 to 2048
[  153.294740][ T9073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.450628][ T9078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1012'.
[  153.481091][ T9069] loop5: detected capacity change from 0 to 32768
[  153.560449][ T9069] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.595984][ T9069] XFS (loop5): Ending clean mount
[  153.610757][ T9069] XFS (loop5): Quotacheck needed: Please wait.
[  153.643423][ T9069] XFS (loop5): Quotacheck: Done.
[  153.688361][ T8566] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.892787][ T9164] loop4: detected capacity change from 0 to 1024
[  155.908397][ T9164] EXT4-fs (loop4): Can't support bigalloc feature without extents feature
[  155.908397][ T9164] 
[  155.913132][ T9164] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities
[  156.005693][ T9167] IPVS: dh: UDP 224.0.0.2:0 - no destination available
Connection to localhost closed by remote host.
[  156.718824][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  156.844539][ T9176] syz_tun (unregistering): left allmulticast mode
[  157.113402][ T5896] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.192879][ T5896] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.248018][ T5896] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.312329][ T5896] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.447316][ T5896] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.507318][ T5896] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.574743][ T5896] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.627241][ T5896] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.700486][ T5896] bridge_slave_1: left allmulticast mode
[  157.702659][ T5896] bridge_slave_1: left promiscuous mode
[  157.704617][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.710651][ T5896] bridge_slave_0: left allmulticast mode
[  157.712970][ T5896] bridge_slave_0: left promiscuous mode
[  157.715373][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.721079][ T5896] bridge_slave_1: left allmulticast mode
[  157.723302][ T5896] bridge_slave_1: left promiscuous mode
[  157.725259][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.732232][ T5896] bridge_slave_0: left allmulticast mode
[  157.734086][ T5896] bridge_slave_0: left promiscuous mode
[  157.736144][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.084156][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.089413][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.094010][ T5896] bond0 (unregistering): (slave team0): Releasing backup interface
[  158.102140][ T5896] bond0 (unregistering): Released all slaves
[  158.396874][ T5896] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.402245][ T5896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.407168][ T5896] bond0 (unregistering): Released all slaves
[  158.491789][ T5896] : left promiscuous mode
[  158.531319][ T5896] tipc: Left network mode
[  158.844088][ T5896] hsr_slave_0: left promiscuous mode
[  158.846927][ T5896] hsr_slave_1: left promiscuous mode
[  158.849493][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.852383][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.856023][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.858506][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.864510][ T5896] hsr_slave_0: left promiscuous mode
[  158.867365][ T5896] hsr_slave_1: left promiscuous mode
[  158.870546][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.873512][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.880485][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.883551][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.910493][ T5896] veth1_macvtap: left promiscuous mode
[  158.913036][ T5896] veth0_macvtap: left promiscuous mode
[  158.915450][ T5896] veth1_vlan: left promiscuous mode
[  158.918551][ T5896] veth0_vlan: left promiscuous mode
[  158.921596][ T5896] veth1_macvtap: left promiscuous mode
[  158.923881][ T5896] veth0_macvtap: left promiscuous mode
[  158.926423][ T5896] veth1_vlan: left promiscuous mode
[  158.928753][ T5896] veth0_vlan: left promiscuous mode
[  159.353158][ T5896] team0 (unregistering): Port device team_slave_1 removed
[  159.379109][ T5896] team0 (unregistering): Port device team_slave_0 removed
[  159.960770][ T5896] team0 (unregistering): Port device team_slave_1 removed
[  160.001766][ T5896] team0 (unregistering): Port device team_slave_0 removed
[  160.860260][ T5896] IPVS: stop unused estimator thread 0...
[  160.992665][ T5896] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.089555][ T5896] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.193451][ T5896] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.273723][ T5896] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.371931][ T5896] bridge_slave_1: left allmulticast mode
[  161.374295][ T5896] bridge_slave_1: left promiscuous mode
[  161.377003][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.382418][ T5896] bridge_slave_0: left allmulticast mode
[  161.384893][ T5896] bridge_slave_0: left promiscuous mode
[  161.388026][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.918613][ T5896] . (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.923263][ T5896] . (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.928010][ T5896] . (unregistering): Released all slaves
[  162.162967][ T5896] hsr_slave_0: left promiscuous mode
[  162.165600][ T5896] hsr_slave_1: left promiscuous mode
[  162.168140][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.171202][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_0
[  162.174522][ T5896] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.177406][ T5896] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.189592][ T5896] veth1_macvtap: left promiscuous mode
[  162.191547][ T5896] veth0_macvtap: left promiscuous mode
[  162.193450][ T5896] veth1_vlan: left promiscuous mode
[  162.195430][ T5896] veth0_vlan: left promiscuous mode
[  162.525289][ T5896] team0 (unregistering): Port device team_slave_1 removed
[  162.558610][ T5896] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
00:34:13  Registers:
info registers vcpu 0

CPU#0
RAX=f575a73fef582100 RBX=ffffffff81968b88 RCX=f575a73fef582100 RDX=0000000000000001
RSI=ffffffff8d9b6963 RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561a34196680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000001f49b1e0 0000000000000008 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=fffac97b4100a400 RBX=ffffffff81968b88 RCX=fffac97b4100a400 RDX=0000000000000001
RSI=ffffffff8d9b6963 RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561a34195600 CR3=000000010ef6a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000040000007c 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000061 0000000000000000
XMM06=ffffffffff000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=0000000000306e61 632f74656e2f302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
