last executing test programs:

3m37.880357526s ago: executing program 0 (id=288):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001)
r1 = fcntl$dupfd(r0, 0x0, r0)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1)

3m36.97062332s ago: executing program 0 (id=295):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800000000fddbdf7700000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)

3m36.902738718s ago: executing program 0 (id=297):
unshare(0x2040400)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)

3m36.818982118s ago: executing program 0 (id=298):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xc)

3m36.76633016s ago: executing program 0 (id=299):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x5, @mcast1, 0xf}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast2, 0x70fd}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x80000000}}], 0x10}}], 0x2, 0x404c050)

3m36.529380847s ago: executing program 0 (id=302):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10)
mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0)

3m36.425146692s ago: executing program 32 (id=302):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10)
mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0)

3m0.307134335s ago: executing program 2 (id=685):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440))
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
read$FUSE(0xffffffffffffffff, &(0x7f0000004d80)={0x2020}, 0x2020)

2m58.457215098s ago: executing program 2 (id=706):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$unix(r0, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="c3", 0x1}], 0x1, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}], 0x20, 0x4000001}}], 0x2, 0x40015)

2m58.397286462s ago: executing program 2 (id=708):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e)
write$binfmt_script(r0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

2m58.195468002s ago: executing program 2 (id=709):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

2m57.895779939s ago: executing program 2 (id=710):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip6tnl0\x00'}]}}]}, 0x48}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000)

2m57.566683453s ago: executing program 2 (id=712):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d1f, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0)

2m57.114277785s ago: executing program 33 (id=712):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1d1f, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0)

2m23.352651692s ago: executing program 4 (id=1093):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e24, 0x3, 'wrr\x00', 0x25, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x1, 0xcf, 0x12d5c, 0x12d5c}}, 0x44)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg(r4, &(0x7f00000018c0)=[{{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x6}}], 0x1, 0x8094)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x10005}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x24004004)
setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x12002, 0x8, 0x48001}}, 0x44)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x23, 0x0, &(0x7f00000000c0))

2m23.094609732s ago: executing program 4 (id=1096):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x800, 0x1, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000400"}, 0x0, 0x1, {0x0}, 0xea})

2m22.991044747s ago: executing program 4 (id=1099):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x2}, 0x18)
utimes(0x0, 0x0)

2m22.864671435s ago: executing program 4 (id=1100):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2101000, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x138, 0x4)

2m22.342899173s ago: executing program 4 (id=1104):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup3(r0, r1, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r3, 0x1, 0xfffffffe, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @val={0x8}, @void}}}, 0x24}}, 0xc800)

2m21.855000421s ago: executing program 4 (id=1106):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r0, 0x0, 0xffffffffffffff59, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10)

2m21.580974621s ago: executing program 34 (id=1106):
r0 = socket$l2tp(0x2, 0x2, 0x73)
sendto$l2tp(r0, 0x0, 0xffffffffffffff59, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10)

40.537218759s ago: executing program 3 (id=2164):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)

40.526891502s ago: executing program 3 (id=2166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)

39.509944029s ago: executing program 3 (id=2172):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x14, 0x43, 0x101, 0x70bd2d, 0x25dfdbfb, {0xa}}, 0x14}}, 0x0)

39.204341508s ago: executing program 3 (id=2173):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

38.799597516s ago: executing program 3 (id=2177):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

38.001381407s ago: executing program 3 (id=2185):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000140)=0xb1e0, 0x4)

37.784570678s ago: executing program 35 (id=2185):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000140)=0xb1e0, 0x4)

34.636538443s ago: executing program 5 (id=2221):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_test', 0x121a02, 0x0)
sendfile(r1, r0, &(0x7f0000000140)=0x27, 0x1a)

34.415815043s ago: executing program 5 (id=2224):
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)

34.316774469s ago: executing program 5 (id=2226):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x7, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30)

34.215032515s ago: executing program 5 (id=2227):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000840)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="49440fb4005cba20653d2326292c265c2c00e79feca4a2e1053fdd2c84e7a89aa4ee02cbb47695d7ade8fd4362d0e37fbbb365b529e3d4cfa7ec78bc709784cc24ff7cfd3accb1a53fcd27bcb1794fcc15fc6eeae6dd85887fec609d9df9eb63c1eb27e9a7e7c87e551a878ce3db471a5a29b9509986d21054cc6d2e9be1e16b9e2e6e9df5b4b95e1b", @ANYRESHEX, @ANYBLOB="bdc3431c9da13b91fe44b13626dc250440d97b1d7b383c38c083c1c6716e836772a33640a6a075db845dea3b0d7f2f96bc9f9f4a2bb54c58d5c376a3799a230c7469c1f819f58a378b914f2676904a776b09c138307a4afd9c5ea327a9bde666812ce42e7c51e72698a2da24bb4b118bbf23f5bfe72852a834ba083ebba4da259bd186b6936176a008073b6ae9fcf2bac230665f3aafdfda02823a69030b19126f82a4", @ANYRES8, @ANYRESOCT], 0x21, 0x1502, &(0x7f0000002180)="$eJzs3AvYTdX2MPAx5pyLl6Sd5D7HHIsdLyZJkkuSXJIkOZLklpAkSZJU7rckJCH3JPeQ3EJyv99yT5IkSRKSWzK/R6fz6ZzO/+uc/7//4/nOO37Ps553jr32mGvMPd7nXWvt99n72/YDK9etUqE2M8P/CP71RxcASAGAPgBwDQBEAFAiS4ksl/Zn0Njlf3YQ8ed6YMqVrkBcSdL/tE36n7ZJ/9M26X/aJv1P26T/aZv0P22T/guRlm2ZmvNa2dLuJu//p2Vy/v8PcqjIqC/XFbm+w7+RIv1P26T/aZv0P22T/qdt0v+0Tfqftkn/0zbpvxBp2X//vWP538F/wnalf/+EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQNZ8NlBgD+Nr7SdQkhhBBCCCGEEOLPE9Jf6QqEEEIIIYQQQgjxvw9BgQYDEaSD9JACGSAjXAWZ4GrIDNdAAq6FLHAdZIXrIRtkhxyQE3JBbsgDFggcMMSQF/JBEm6A/FAAUqEgFILC4KEIFIUboRjcBMXhZigBt0BJuBVKQWkoA2XhNigHt0N5uAMqwJ1QESpBZagCd0FVuBuqwT1QHe6FGnAf1IT7oRb8BWrDA1AHHoS68BDUg4ehPjSAhtAIGv+38l+AF+El6ASdoQt0hW7QHXpAT+gFvaEPvAx9IeXX12YADITXYBC8DoPhDRgCQ2EYvAnDYQSMhFEwGsbAWHgLxsHbMB7egQkwESbBZJgCU2EavAvTYQbMhPdgFrwPs2EOzIV5MB8+gAWwEBbBh7AYPoIlsBSWwXJYASthFayGNbAW1sF62AAbYRNshi3wMWyFbbAddsBO2AW74RPYA5/CXvgM9sHn/2b+mX/I74CAgAoVGjSYDtNhCqZgRsyImTATZsbMmMAEZsEsmBWzYjbMViAH5sBcmAvzYB4kJGRkzIt5MYlJzI/5MRVTsRAWQo8ei2JRLIY3YXEsjiWwBJbEklgKS2NpLItlsRyWw/JYHitgBayIFbEyVsa78C68G6thNayO1bEG1sCaWBMP5a6FtbE21sE6WBfrYj2sh/WxPjbEhtgYG2MTbIJNsSk2x+bYAltgS2yJrbAVtsbW2AbbYFtsi+2wHbbH9tgBn8fn8QV8AV/Cl7AzVlRdsRt2wx7YA3thb+yNL2NffAVfwVexPw7Agfgavoav42A8jUNwKA7DYVhOjcCROApZjcGxOBbH4Tgcj+NxAk7EiTgZp+BUnIbTcDrOwBn4Hs7C9/F9nINzcB7Ox/m4ABfiIlyEi/EMLsGluAyX4wpciStwNa7B1bgO1+M63IgbcTNuxo/xY9yG23AH7sBdaADwE/wUP8X+uA/34X7cjwfwAB7Eg3gID+FhPIxH8AgexaN4DI/hcTyBJ/EEnsJTeBrP4Fk8i+fxPF7AZ3N9XWdXwbX9QV1ilFHpVDqVolJURpVRZVKZVGaVWSVUQmVRWVRWlVVlU9lUDpVD5VK5VB51TpEixSpWeVVelVRJlV/lV6kqVRVShZRXXhVVRVUxVUwVV8VVCXWLKqluVaVUadXMl1VlVTnV3JdXd6gKqoKqqCqpyqqKqqKqqqqqmqqmqqvqqoaqoWqq+1Ut1RV74QPqUmfqqgFYTw3E+qqBaqgaqdfxEdVEDcamqplqrh5TQ3EItlRNfCv1pGqtRmIb9bQahc+odmoMtlfPqQ7qedVRvaBeVE19J9VZTcCuqpuajD1UT9VL9VbTsZK61LHK6lXVXw1QA9Vrah6+rgarN9QQNVQNU2+q4WqEGqlGqdFqjBqr3lLj1NtqvHpHTVAT1SQ1WU1RU9U09a6armaomeo9NUu9r2arOWqumqfmqw/UArVQLVIfqsXqI7VELVXL1HK1Qq1Uq9RqtUatVevUerVBbVSb1Ga1RX2stqptarvaoXaqXWq3+kTtUZ+qveoztU99rvarL9QB9aU6qL5Sh9TX6rD6Rh1R36qj6jt1TH2vjqsT6qT6QZ1SP6rT6ow6q86p8+ondUH9rC6qoECjVlproyOdTqfXKTqDzqiv0pn01TqzvkYn9LU6i75OZ9XX62w6u86hc+pcOrfOo60m7TTrWOfV+XRS36Dz6wI6VRfUhXRh7XURXVTfqIvpm3RxfbMuoW/RJfWtupQurcvosvo2XU7frsvrO3QFfaeuqCvpyrqKvktX1XfravoeXV3fq2vo+3RNfb+upf+ia+sHdB39oK6rH9L19MO6vm6gG+pGurF+RDfRj+qmuplurh/TLfTjuqV+QrfST+rW+indRj+t2+pndDv9rG6vn9Md9PO6o/5ZX9RBd9KddRfdVXfT3XUP3VP30r11H/2y7qtf0f30q7q/HqAH6tf0IP26Hqzf0EP0UD1Mv6mH6xF6pB6lR+sxeqx+S4/Tb+vx+h09QU/Uk/RkPUVP1b1+nWnmv5D/9j/J7/fL0TfrLfpjvVVv09v1Dr1T79K79W69R+/Re/VevU/v0/v1fn1AH9AH9UF9SB/Sh/VhfUQf0Uf1UX1MH9PH9Ql9Tv+gT+kf9Wl9Rp/R5/R5fV5f+PU1AINGGW2MiUw6k96kmAwmo7nKZDJXm8zmGpMw15os5jqT1VxvspnsJofJaXKZ3CaPsYaMM2xik9fkM0lzA/560jSFTGHjTRFT1Nz47+Sb/KaASTUF/y7/j+prbBqbJqaJaWqamuamuWlhWpiWpuVNl+pobVqbNqaNaWvamnamnWlv2psOpoPpaDqaF82LppPpZLqYLqab6W56mJ6ml+lt+piXTV/T1/Qz/Ux/098MNAPNIDPIDDaDzRAzxAwzw8xwM9yMNCPNaDPajDVjzTgzzow3480EM8FMMpPMFDPFTDPTzHQz3cw0M80sM8vMNrPNXDPXzDfzzQKzwCwyi8xis9gsMUvNUrPcLDcrzUqz2qw2a81as96sNxvNRrMk/RazxWw1W812s93sNDvNbrPb7DF7zF6z1+wz+8x+s98cMAfMQXPQHDKHzGFz2BwxR8xRc9QcM8fMcXPcnDQnzSlzypw2p81Zc9acN+fNBXPBXDQXL132RSpSkYlMlC5KF6VEKVHGKGOUKcoUZY4yR4koEWWJskRZo+ujbFH2KEeUM8oV5Y7yRDaiyEUcxVHeKF+UjG6I8kcFotSoYFQoKhz5qEhUNLoxKhbdFBWPbo5KRLdEJaNbo1JR6ahMVDa6LSoX3R6Vj+6IKkR3RhWjSlHlqEp0V1Q1ujuqFt0TVY/ujWpE90U1o/ujWtFfotrRA1Gd6MGobvRQVC96OKofNYgaRo2ixn/q/CGczv6o72Q72y62q+1mu9setqftZXvbPvZl29e+YvvZV21/O8AOtK/ZQfZ1O9i+YYfYoXaYfdMOtyPsSDvKjrZj7Fj7lh1n37bj7Tt2gp1oJ9nJdoqdaqfZd+10O8POtO/ZWfZ9O9vOsXPtPDvffmAX2IV2kf3QLrYf2SV2qV1ml9sVdqVdZVfbNXatXWfX2w12o91kN9st9mO71W6z2+0Ou9PusrvtJ3aP/dTutZ/ZffZzu99+YQ/YL+1B+5U9ZL+2h+039oj91h6139lj9nt73J6wJ+0P9pT90Z62Z+xZe86etz/ZC/Zne9GGSxf3l07vZMhQOkpHKZRCGSkjZaJMlJkyU4ISlIWyUFbKStkoG+WgHJSLclEeykOXMDHlpbyUpCTlp/yUSqlUiAqRJ09FqSgVo2JUnIpTCSpBJakklaJSVIbK0G10G91Ot9MddAfdSXdSJapEVagKVaWqVI2qUXWqTjWoBtWkmlSLalFtqk11qA7VpbpUj+pRfapPDakhNabG1ISaUFNqSs2pObWgFtSSWlIrakWtqTW1oTbUltpSO2pH7ak9daAO1JE60ov0InWiTtSFulA36kY9qAf1ol7Uh/pQX+pL/agf9af+NJAG0iAaRINpMA2hoTSM3qThNIJG0igaTWNoLI2lcTSOxtN4mkATaBJNoik0habRNJpO02kmzaRZNItm02yaS3NpPs2nBbSAFtEiWkyLaQktoWW0jFbQClpFq2gNraF1tI420AbaRJtoC22hrbSVttN22kk7aTftpj20h/bSXtpH+2g/7acDdIAO0kE6RIfoMB2mI3SEjtJROkbH6Dgdp5N0kk7RKTpNp+ksnaXz9BNdoJ/pIgVKcRlcRneVy+SudpndNe4f4xwup8vlcrs8zrpsLvvfxeScS3UFXSFX2HlXxBV1N7rUS7dUv4lLudKujCvrbnPl3O2u/O/iqu5uV83d46q7e10Vd9ffxTXcfa6me8jVcg+72q6Bq+MaubruIVfPPezquwauoWvkWrjHXUv3hGvlnnSt3VO/ixe4hW6NW+vWufVuj/vUnXXn3BH3rTvvfnKdXGfXx73s+rpXXD/3quvvBvwuHubedMPdCDfSjXKj3ZjfxZPcZDfFTXXT3Ltuupvxu3i++8DNcovcbDfHzXXzfokv1bTIfegWu4/cErfULXPL3Qq30q1yq/9vrcvdRrfJbXa73Sduq9vmtrsdbqfb9Ut8aR173Wdun/vcHXbfuAPuS3fQHXWH3Ne/xJfWd9R95465791xd8KddD+4U+5Hd9qd+WX9l9b+g/vZXXTBASMr1mw44nScnlM4A2fkqzgTX82Z+RpO8LWcha/jrHw9Z+PsnINzci7OzXnYMrFj5pjzcj5O8g2cnwtwKhfkQlyYPRfhonwjF+ObuDjfzCX4Fi7Jt3IpLs1luCzfxuX4di7Pd3AFvpMrciWuzFX4Lq7Kd3M1voer871cg+/jmnw/1+K/cG1+gOvwg1yXH+J6/DDX5wbckBtxY36Em/Cj3JSbcXN+jFvw49ySn+BW/CS35qe4DT/NbfkZbsfPcnt+jjvw89yRX+AX+SXuxJ25C3flbtyde3BP7sW9uQ+/zH35Fe7Hr3J/HsAD+TUexK/zYH6Dh/BQHsZv8nAewSN5FI/mMTyW3+Jx/DaP53d4Ak/kSTyZp/BUnsbv8nSewTP5PZ7F7/NsnsNzeR7P5w94AS/kRfwhL+aPeAkv5WW8nFfwSl7Fq3kNr+V1vJ438EbexJt5C3/MW3kbb+cdvJN38W7+hPfwp7yXP+N9/Dnv5y/4AH/JB/krPsRf82H+ho/wt3yUv+Nj/D0f5xN8kn/gU/wjn+YzfJbP8Xn+iS/wz3yRA0OMsYp1bOIoThenj1PiDHHG+Ko4U3x1nDm+Jk7E18ZZ4uvirPH1cbY4e5wjzhnninPHeWIbU+xijuM4b5wvTsY3xPnjAnFqXDAuFBeOfVwkLhrfGBeLb4qLxzfHJeJb4pLxrXGpuHT80L1l49vicvHtcfn4jrhCfGdcMa4UV46rxHfFVeO742rxPXH1+N64eHxfXDO+P4ZfP69SJ34wrhs/FNeLH47rxw3ihnGjuHH8SNwkfjRuGjeLm8ePxS3ix+OW8RNxq/jJuHX81B/u7xJ3jbvF3ePucQj36LnJecn5yQ+SC5ILk4uSHyYXJz9KLkkuTS5LLk+uSK5MrkquTq5Jrk2uS65PbkhuTG5Kbk6GUCU9ePTKa2985NP59D7FZ/AZ/VU+k7/aZ/bX+IS/1mfx1/ms/nqfzWf3OXxOn8vn9nm89eSdZx/7vD6fT/obfH5fwKf6gr6QL+y9L+KL+ka+sW/sm/hHfVPfzDf3j/nH/OP+cf+Ef8I/6Vv7p3wb/7Rv65/x7fyz/ln/nO/gn/cd/Qv+Rf+S7+Q7+y6+i+/mu/kevofv5Xv5Pr6P7+v7+n6+n+/v+/uBfqAf5Af5wX6wH+KH+GF+mB/uh/uRfqQf7Uf7sX6sH+fH+fF+vJ/gJ/hJfpKf4qf4aX6an+6n+5l+pp+VOsvP9rP9XD/Xz/fz/QK/wC/yi/xiv9gv8Uv8Mr/Mr/Ar/Cq/yq/xa/w6v85v8Bv8Jr/Jb/Fb/Fa/1W/32/1Ov9Pv9rv9Hr/H7/V7/T6/z+/3+/0Bf8Af9F/5Q/5rf9h/44/4b/1R/50/5r/3x/0Jf9L/4E/5H/1pf8af9ef8ef+Tv+B/9hd98GMTbyXGJd5OjE+8k5iQmJiYlJicmJKYmpiWeDcxPTEjMTPxXmJW4v3E7MScxNzEvMT8xAeJBYmFiUWJDxOLEx8lliSWJpYllidWJFYmQsi9NQ55Q76QDDeE/KFASA0FQ6FQOPhQJBQNN4Zi4aZQPNwcSoRbQslwaygVSocy4eFQPzQIDUOj0Dg8EpqER0PT0Cw0D4+FFuHx0DI8EVqFJ0Pr8FRoE54ObcMzoV14NrQPz4UOf7vjCi+FTqFz6BK6hm6he+gReoZeoXfoE14OfcMroV94NfQPA8LA8FoYFF4Pg8MbYUgYGoaFN8PwMCKMDKPC6DAmjA1vhXHh7TA+vBMmhIlhUpgcpoSpYVp4N0wPM8LM8F6YFd4Ps8OcMDfMC/PDB2FBWBgWhQ/D4vBRWBKWhmVheVgRVoZVYXVYE9aGdWF92BA2hk1hc9gSPg5bw7awPewIO8OusDt8EvaET8Pe8FnYFz4P+8MX4UD4MhwMX4VD4etwOHwTjoRvw9HwXTgWvg/Hw4lwMvwQToUfw+lwJpwN58L58FO4EH4OF+Uza0IIIYQQ/5Luf7C/6z95zACA+nXcDQCu3pbz0G/3awDYkO2v454qV4sEADzZuf0Df9sqVuzSpcuvz12iIco3BwAS/3CAX+Ol0Bweh1bQDIr90/p6qufP8x/Mn7wFIONvclLgcnx5/i/+i/kfeWzYgpLx2Sz/j/nnAKTmu5yTAS7HS6H5pdVAMyj+X8yfvckf1J/hy7EATX+Tkwkux5frLwqPwlPQ6u+eKYQQQgghhBBC/FVPVabtH90/X7o/z2Uu56SHy/Ef3Z8LIYQQQgghhBDiynvm+Y5PPNKqVbO2//og/b/zZBnIQAb/Pw6u9F8mIYQQQgghxJ/t8kX/5ccyXMmChBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKINOg3X/qVAQD+V75O7EqvUQghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhLjS/k8AAAD//4/5MoY=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

33.942762448s ago: executing program 5 (id=2228):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x0, 0x0, [{}, {}, {0x0, 0x2000}, {}, {}, {}, {0x87f}]}})

33.423281629s ago: executing program 5 (id=2229):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f00000001c0))

33.177954939s ago: executing program 36 (id=2229):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f00000001c0))

4.245570547s ago: executing program 6 (id=2527):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = userfaultfd(0x80001)
read(r5, &(0x7f0000000080)=""/129, 0x20)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x4, 0x4002)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a30"], 0x94}}, 0x0)

3.285539116s ago: executing program 6 (id=2532):
syz_read_part_table(0x5d6, &(0x7f0000000880)="$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")

3.078309082s ago: executing program 6 (id=2535):
mq_open(0x0, 0x40, 0x8b, 0xfffffffffffffffc)

2.950955508s ago: executing program 6 (id=2538):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x8000002)

1.871729661s ago: executing program 1 (id=2542):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x60, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0x0, @in=@broadcast, 0x800000, 0x3, 0x0, 0x4b}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x4d4, 0x6c}, 0x0, @in6=@remote, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x4, 0x0, 0xfc, 0x1}]}]}, 0x23c}}, 0x20004040)

1.77567759s ago: executing program 1 (id=2543):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ftruncate(r0, 0x5)

1.471504139s ago: executing program 1 (id=2545):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x5, 0x8, 0xf}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)

1.34223242s ago: executing program 1 (id=2546):
prctl$PR_SCHED_CORE(0x4d, 0x4, 0x0, 0x0, 0x0)

1.341985309s ago: executing program 1 (id=2547):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
r1 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000)
memfd_create(&(0x7f0000000040)='batadv_slave_1\x00', 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
close(r3)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0xc100, 0x0)
ppoll(&(0x7f00000000c0)=[{r2, 0x200}], 0x1, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'})
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

1.130263665s ago: executing program 1 (id=2548):
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xc8, 0x9e, 0xdf, 0x40, 0x959, 0x2bd0, 0x8650, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9f, 0x0, 0x2, 0x97, 0xba, 0x2e, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}}]}}]}}]}}, 0x0)

868.784947ms ago: executing program 7 (id=2551):
r0 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040))

868.483575ms ago: executing program 7 (id=2552):
r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x6, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xa0000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)

620.711167ms ago: executing program 7 (id=2553):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100], [0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0)

311.827906ms ago: executing program 7 (id=2554):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x800, 0xe}})

311.586135ms ago: executing program 6 (id=2555):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

211.693199ms ago: executing program 6 (id=2556):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

211.140473ms ago: executing program 7 (id=2557):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
truncate(&(0x7f0000000040)='./file0\x00', 0x1b1c)

0s ago: executing program 7 (id=2558):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/44}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000000040)='\'', 0x1)

kernel console output (not intermixed with test programs):

duct=0, SerialNumber=0
[  225.161498][  T974] usb 2-1: config 0 descriptor??
[  225.167832][  T974] ftdi_sio 2-1:0.188: FTDI USB Serial Device converter detected
[  225.171161][  T974] ftdi_sio ttyUSB0: unknown device type: 0xdcab
[  225.360177][T10396] loop3: detected capacity change from 0 to 32768
[  225.364183][T10396] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1621 (10396)
[  225.379187][  T974] usb 2-1: USB disconnect, device number 22
[  225.386789][  T974] ftdi_sio 2-1:0.188: device disconnected
[  225.391943][T10396] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.395434][T10396] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  225.480638][T10396] BTRFS info (device loop3): enabling ssd optimizations
[  225.483486][T10396] BTRFS info (device loop3): enabling free space tree
[  225.514265][ T6790] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.853059][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'.
[  225.911286][T10426] loop3: detected capacity change from 0 to 512
[  225.984083][T10426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.991021][T10426] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.009655][T10426] fs-verity (loop3, inode 15): Unrecognized descriptor size: 0 bytes
[  226.067208][T10433] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.109161][ T6790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.424011][T10433] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.488880][T10433] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.546221][T10433] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.639359][   T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.653295][   T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.668058][   T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.679244][   T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.924510][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'.
[  226.928578][T10439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1632'.
[  227.010465][T10443] loop1: detected capacity change from 0 to 1024
[  227.013246][T10443] hfsplus: Unknown parameter '5_%{쑤>VW϶$Ec_7ɱK<X'
[  227.183274][T10451] loop1: detected capacity change from 0 to 2048
[  227.188959][T10451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  228.395919][T10485] loop1: detected capacity change from 0 to 2048
[  228.401729][T10485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  228.508819][T10489] loop5: detected capacity change from 0 to 512
[  228.530300][T10489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.542572][T10487] loop1: detected capacity change from 0 to 4096
[  228.547339][T10487] ntfs3(loop1): ino=3, Correct links count -> 2.
[  228.565467][T10489] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.658556][ T8989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.856865][T10494] loop1: detected capacity change from 0 to 32768
[  228.868333][T10494] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  228.911060][T10494] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  229.034673][ T5854] ocfs2: Unmounting device (7,1) on (node local)
[  229.119946][T10506] bond0: entered promiscuous mode
[  229.127530][T10506] bond_slave_0: entered promiscuous mode
[  229.130266][T10506] bond_slave_1: entered promiscuous mode
[  229.134228][T10506] batadv0: entered promiscuous mode
[  229.142234][T10506] hsr1: entered allmulticast mode
[  229.144178][T10506] bond0: entered allmulticast mode
[  229.148575][T10506] bond_slave_0: entered allmulticast mode
[  229.151413][T10506] bond_slave_1: entered allmulticast mode
[  229.154031][T10506] batadv0: entered allmulticast mode
[  229.159471][T10506] 8021q: adding VLAN 0 to HW filter on device hsr1
[  229.169249][T10506] bond0: left promiscuous mode
[  229.171670][T10506] bond_slave_0: left promiscuous mode
[  229.186026][T10506] bond_slave_1: left promiscuous mode
[  229.199884][T10506] batadv0: left promiscuous mode
[  229.357098][T10508] loop3: detected capacity change from 0 to 32768
[  229.367872][T10508] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  229.457985][ T6790] ocfs2: Unmounting device (7,3) on (node local)
[  230.024996][   T95] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  230.177694][   T95] usb 2-1: config 0 has no interfaces?
[  230.188992][   T95] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  230.192471][   T95] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  230.195904][   T95] usb 2-1: Manufacturer: syz
[  230.200670][   T95] usb 2-1: config 0 descriptor??
[  230.414299][    T9] usb 2-1: USB disconnect, device number 23
[  230.832159][T10559] loop5: detected capacity change from 0 to 32768
[  230.890001][T10559] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  230.890016][T10559]   allowing incompatible features above 0.0: (unknown version)
[  230.890022][T10559]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  230.905966][T10559] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  230.908394][T10559] bcachefs (loop5): initializing new filesystem
[  230.911932][T10563] loop3: detected capacity change from 0 to 32768
[  230.923356][T10559] bcachefs (loop5): going read-write
[  230.972934][T10559] bcachefs (loop5): marking superblocks
[  230.991592][T10563] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  231.039110][T10563] XFS (loop3): Ending clean mount
[  231.044350][T10559] bcachefs (loop5): initializing freespace
[  231.055735][T10559] bcachefs (loop5): done initializing freespace
[  231.081833][T10559] bcachefs (loop5): reading snapshots table
[  231.090180][T10559] bcachefs (loop5): reading snapshots done
[  231.098997][ T6790] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  231.155966][T10559] bcachefs (loop5): done starting filesystem
[  231.345481][ T8989] bcachefs (loop5): shutting down
[  231.347229][ T8989] bcachefs (loop5): going read-only
[  231.350717][ T8989] bcachefs (loop5): finished waiting for writes to stop
[  231.375483][ T8989] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  231.410793][T10593] loop3: detected capacity change from 0 to 1024
[  231.507347][ T8989] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  231.518459][ T8989] bcachefs (loop5): clean shutdown complete, journal seq 4
[  231.521606][ T8989] bcachefs (loop5): marking filesystem clean
[  231.551159][ T8989] bcachefs (loop5): shutdown complete
[  231.556658][T10595] 
[  232.615345][T10609] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  233.087194][  T974] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  233.235176][  T974] usb 4-1: Using ep0 maxpacket: 32
[  233.246322][  T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.255733][  T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.259912][  T974] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  233.284125][  T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.321868][  T974] usb 4-1: config 0 descriptor??
[  233.605907][T10615] loop1: detected capacity change from 0 to 40427
[  233.633727][T10615] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  233.690909][T10626] loop5: detected capacity change from 0 to 512
[  233.712911][T10626] EXT4-fs (loop5): external journal device major/minor numbers have changed
[  233.747811][  T974] hid_parser_main: 60 callbacks suppressed
[  233.747831][  T974] ft260 0003:0403:6030.0012: unknown main item tag 0x7
[  233.753796][T10615] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  233.760297][T10626] EXT4-fs (loop5): failed to open journal device unknown-block(11,127) -6
[  233.771292][T10615] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  233.942520][  T974] ft260 0003:0403:6030.0012: chip code: 6424 8183
[  234.157380][  T974] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[  234.512017][  T974] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup
[  234.539379][  T974] ft260 0003:0403:6030.0012: failed to retrieve status: -32
[  234.814083][  T974] usb 4-1: USB disconnect, device number 20
[  235.323329][T10669] loop5: detected capacity change from 0 to 1024
[  235.400369][ T7260] hfsplus: b-tree write err: -5, ino 4
[  235.741017][T10672] loop1: detected capacity change from 0 to 32768
[  235.752336][T10672] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1720 (10672)
[  235.770877][T10672] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.774224][T10672] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  235.836658][T10672] BTRFS info (device loop1): rebuilding free space tree
[  235.859411][T10672] BTRFS info (device loop1): enabling ssd optimizations
[  235.861899][T10672] BTRFS info (device loop1): using spread ssd allocation scheme
[  235.864366][T10672] BTRFS info (device loop1): enabling free space tree
[  235.869521][T10672] BTRFS info (device loop1): force clearing of disk cache
[  236.027732][ T5854] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.182286][T10716] binder: 10715:10716 ioctl c0306201 2000000003c0 returned -14
[  236.380507][T10719] program syz.3.1735 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  236.481546][T10724] loop3: detected capacity change from 0 to 128
[  236.724998][T10733] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[  237.193192][T10722] loop1: detected capacity change from 0 to 32768
[  237.196740][T10722] xfs: Unknown parameter 'smackfstransmute'
[  237.947166][T10747] block device autoloading is deprecated and will be removed.
[  238.566752][T10766] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  238.570616][T10765] IPVS: stopping backup sync thread 10766 ...
[  238.757730][ T5904] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  238.905133][ T5904] usb 6-1: Using ep0 maxpacket: 16
[  238.910436][ T5904] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[  238.919378][ T5904] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  238.931055][ T5904] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  238.937932][ T5904] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  238.941911][ T5904] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  238.950321][ T5904] usb 6-1: config 1 interface 0 has no altsetting 0
[  238.953223][ T5904] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  238.957298][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.974300][ T5904] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[  239.010607][T10773] loop1: detected capacity change from 0 to 32768
[  239.047607][T10773] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  239.108750][T10773] XFS (loop1): Ending clean mount
[  239.208703][ T5904] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22
[  239.222721][ T5904] usb 6-1: USB disconnect, device number 9
[  239.269644][ T5854] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  239.875133][ T5904] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  239.991874][T10810] loop5: detected capacity change from 0 to 32768
[  240.019210][T10810] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  240.019210][T10810] 
[  240.028921][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.036172][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  240.054259][ T5904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  240.065186][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.068308][ T5904] usb 2-1: Product: syz
[  240.075018][ T5904] usb 2-1: Manufacturer: syz
[  240.076763][ T5904] usb 2-1: SerialNumber: syz
[  240.303553][ T5904] usb 2-1: 0:2 : does not exist
[  240.313607][ T5904] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  240.336645][ T5904] usb 2-1: USB disconnect, device number 24
[  240.371225][ T7127] udevd[7127]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  240.454707][T10820] loop3: detected capacity change from 0 to 32768
[  240.474060][T10820] JBD2: Ignoring recovery information on journal
[  240.510313][T10820] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  240.539007][ T6790] ocfs2: Unmounting device (7,3) on (node local)
[  241.000574][T10841] loop1: detected capacity change from 0 to 1024
[  241.005492][  T974] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  241.037737][T10841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.059924][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.161483][  T974] usb 4-1: Using ep0 maxpacket: 32
[  241.166887][  T974] usb 4-1: config 4 has an invalid interface number: 128 but max is 0
[  241.170563][  T974] usb 4-1: config 4 has no interface number 0
[  241.177663][  T974] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.181906][  T974] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.194589][  T974] usb 4-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00
[  241.220781][  T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.241545][  T974] hub 4-1:4.128: USB hub found
[  241.450986][  T974] hub 4-1:4.128: config failed, can't read hub descriptor (err -90)
[  241.589850][T10856] loop1: detected capacity change from 0 to 40427
[  241.638479][T10856] F2FS-fs (loop1): invalid crc value
[  241.676466][  T974] usb 4-1: USB disconnect, device number 21
[  241.753425][T10856] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  241.757652][T10856] F2FS-fs (loop1): Start checkpoint disabled!
[  241.763364][T10856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  241.776987][T10856] syz.1.1788: attempt to access beyond end of device
[  241.776987][T10856] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  241.807234][   T28] kworker/u9:1: attempt to access beyond end of device
[  241.807234][   T28] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  241.813058][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[  241.813078][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.813087][   T28] Workqueue: writeback wb_workfn (flush-7:1)
[  241.813108][   T28] Call Trace:
[  241.813114][   T28]  <TASK>
[  241.813122][   T28]  dump_stack_lvl+0x189/0x250
[  241.813143][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.813158][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  241.813171][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  241.813191][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  241.813222][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  241.813249][   T28]  f2fs_write_end_io+0x886/0xb60
[  241.813280][   T28]  __submit_merged_bio+0x27a/0x6a0
[  241.813306][   T28]  __submit_merged_write_cond+0x255/0x530
[  241.813331][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  241.813377][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  241.813404][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  241.813451][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  241.813482][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[  241.813502][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[  241.813523][   T28]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  241.813549][   T28]  ? unwind_next_frame+0xa5/0x2390
[  241.813562][   T28]  ? rcu_is_watching+0x15/0xb0
[  241.813578][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  241.813593][   T28]  do_writepages+0x32e/0x550
[  241.813616][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  241.813630][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  241.813655][   T28]  __writeback_single_inode+0x145/0xff0
[  241.813672][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  241.813692][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  241.813741][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  241.813828][   T28]  ? rcu_is_watching+0x15/0xb0
[  241.813851][   T28]  wb_writeback+0x43b/0xaf0
[  241.813876][   T28]  ? queue_io+0x3a1/0x590
[  241.813895][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  241.813921][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.813945][   T28]  wb_workfn+0x409/0xef0
[  241.813974][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  241.813993][   T28]  ? __lock_acquire+0xab9/0xd20
[  241.814023][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  241.814044][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.814061][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  241.814073][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  241.814088][   T28]  process_scheduled_works+0xae1/0x17b0
[  241.814130][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  241.814161][   T28]  worker_thread+0x8a0/0xda0
[  241.814201][   T28]  kthread+0x711/0x8a0
[  241.814221][   T28]  ? __pfx_worker_thread+0x10/0x10
[  241.814234][   T28]  ? __pfx_kthread+0x10/0x10
[  241.814252][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.814271][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.814282][   T28]  ? __pfx_kthread+0x10/0x10
[  241.814299][   T28]  ret_from_fork+0x3fc/0x770
[  241.814317][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  241.814337][   T28]  ? __switch_to_asm+0x39/0x70
[  241.814352][   T28]  ? __switch_to_asm+0x33/0x70
[  241.814366][   T28]  ? __pfx_kthread+0x10/0x10
[  241.814384][   T28]  ret_from_fork_asm+0x1a/0x30
[  241.814416][   T28]  </TASK>
[  241.825206][   T28] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  242.547162][T10875] loop5: detected capacity change from 0 to 4096
[  242.550732][T10875] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  242.572358][T10875] ntfs3(loop5): ino=b, mi_enum_attr
[  242.574013][T10875] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  242.580159][T10875] ntfs3(loop5): Failed to load $Extend (-22).
[  242.582686][T10875] ntfs3(loop5): Failed to initialize $Extend.
[  242.586047][    T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  242.792068][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  242.816380][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  242.820397][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  242.823864][    T9] usb 4-1: config 1 has no interface number 1
[  242.826981][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  242.832037][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  242.881091][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  242.884713][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.887909][    T9] usb 4-1: Product: syz
[  242.889866][    T9] usb 4-1: Manufacturer: syz
[  242.891753][    T9] usb 4-1: SerialNumber: syz
[  243.091443][T10901] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1807'.
[  243.180425][    T9] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  243.277373][    T9] usb 4-1: USB disconnect, device number 22
[  243.367946][ T9807] udevd[9807]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  243.406387][T10912] macvlan3: entered promiscuous mode
[  243.408219][T10912] macvlan3: entered allmulticast mode
[  243.712125][T10918] loop1: detected capacity change from 0 to 32768
[  243.726046][T10918] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 0 smaller than block size 8
[  243.726046][T10918] members_v2 (size 152):
[  243.726046][T10918] Device:                        0
[  243.726046][T10918]   Label:                       (none)
[  243.726046][T10918]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  243.726046][T10918]   Size:                        0
[  243.726046][T10918]   read errors:                 0
[  243.726046][T10918]   write errors:                0
[  243.726046][T10918]   checksum errors:             0
[  243.726046][T10918]   seqread iops:                0
[  243.726046][T10918]   seqwrite iops:               0
[  243.726046][T10918]   randread iops:               0
[  243.726046][T10918]   randwrite iops:              0
[  243.726046][T10918]   Bucket size:                 0
[  243.726046][T10918]   First bucket:                0
[  243.726046][T10918]   Buckets:                     128
[  243.726046][T10918]   Last mount:                  1714681267
[  243.726046][T10918]   Last superblock write:       42
[  243.726046][T10918]   State:                       rw
[  243.726046][T10918]   Data allowed:                journal,btree,user
[  243.726046][T10918]   Has data:                    btree
[  243.726046][T10918]   Btree allocated bitmap blocksize:128
[  243.726046][T10918]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  243.726046][T10918]   Durability:        
[  243.726142][T10918] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  243.777850][   T95] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  243.915159][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  243.955188][   T95] usb 6-1: Using ep0 maxpacket: 16
[  243.961170][   T95] usb 6-1: config 0 has an invalid interface number: 9 but max is 1
[  243.965163][   T95] usb 6-1: config 0 has an invalid interface number: 9 but max is 1
[  243.968628][   T95] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  243.975248][   T95] usb 6-1: config 0 has no interface number 0
[  243.982579][   T95] usb 6-1: config 0 interface 9 has no altsetting 0
[  243.993049][   T95] usb 6-1: config 0 interface 9 has no altsetting 1
[  244.001167][   T95] usb 6-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0
[  244.006746][   T95] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.009909][   T95] usb 6-1: Product: syz
[  244.011511][   T95] usb 6-1: Manufacturer: syz
[  244.013383][   T95] usb 6-1: SerialNumber: syz
[  244.036042][   T95] usb 6-1: config 0 descriptor??
[  244.066970][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  244.074796][    T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  244.078731][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  244.081925][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.087158][T10920] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  244.092870][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  244.260270][   T95] usb 6-1: selecting invalid altsetting 1
[  244.262653][   T95] sierra 6-1:0.9: Sierra USB modem converter detected
[  244.273130][   T95] usb 6-1: Sierra USB modem converter now attached to ttyUSB0
[  244.281905][   T95] usb 6-1: USB disconnect, device number 10
[  244.291762][   T95] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  244.310068][   T95] sierra 6-1:0.9: device disconnected
[  244.341997][ T5896] usb 4-1: USB disconnect, device number 23
[  244.885234][   T95] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  244.898438][T10946] loop5: detected capacity change from 0 to 256
[  245.095076][   T95] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  245.098735][   T95] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.117237][   T95] usb 2-1: Product: syz
[  245.119327][   T95] usb 2-1: Manufacturer: syz
[  245.121205][   T95] usb 2-1: SerialNumber: syz
[  245.128680][   T95] usb 2-1: config 0 descriptor??
[  245.305014][ T5904] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  245.343152][   T95] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  245.359258][T10956] loop3: detected capacity change from 0 to 32768
[  245.455069][ T5904] usb 6-1: Using ep0 maxpacket: 32
[  245.466672][ T5904] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.470556][ T5904] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  245.476784][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0
[  245.479308][ T5904] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  245.482709][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.488822][ T5904] usb 6-1: config 0 descriptor??
[  245.908246][ T5904] betop 0003:20BC:5500.0013: unbalanced collection at end of report description
[  245.911699][ T5904] betop 0003:20BC:5500.0013: parse failed
[  245.921708][ T5904] betop 0003:20BC:5500.0013: probe with driver betop failed with error -22
[  245.978216][T10962] loop3: detected capacity change from 0 to 32768
[  246.001721][T10962] read_mapping_page failed!
[  246.006565][T10962] ERROR: (device loop3): txCommit: 
[  246.006565][T10962] 
[  246.114846][   T24] usb 6-1: USB disconnect, device number 11
[  246.189813][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'.
[  246.418892][T10970] syzkaller1: entered promiscuous mode
[  246.421797][T10970] syzkaller1: entered allmulticast mode
[  246.556176][   T95] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  246.567673][   T95] usb 2-1: USB disconnect, device number 25
[  246.723215][T10977] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.727802][T10977] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.807536][T10977] veth0_to_bond: left allmulticast mode
[  246.826435][T10977] batadv_slave_0: left promiscuous mode
[  246.985674][T10977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.232237][T10977] bond1: left allmulticast mode
[  247.236519][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.241668][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.249421][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.261709][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.499078][T10990] trusted_key: encrypted_key: insufficient parameters specified
[  247.669506][T10993] syz_tun: entered allmulticast mode
[  247.674533][T10992] syz_tun: left allmulticast mode
[  248.015233][   T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  248.129046][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'.
[  248.185940][   T24] usb 4-1: Using ep0 maxpacket: 16
[  248.192609][   T24] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  248.196450][   T24] usb 4-1: config 0 has no interface number 0
[  248.199485][   T24] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  248.203062][   T24] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  248.209619][   T24] usb 4-1: config 0 interface 41 has no altsetting 0
[  248.215442][   T24] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  248.223689][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.226882][   T95] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  248.233427][   T24] usb 4-1: Product: syz
[  248.235021][   T24] usb 4-1: Manufacturer: syz
[  248.236667][   T24] usb 4-1: SerialNumber: syz
[  248.243575][   T24] usb 4-1: config 0 descriptor??
[  248.250890][T11001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  248.253784][T11001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  248.300514][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'.
[  248.304338][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1862'.
[  248.395314][   T95] usb 6-1: Using ep0 maxpacket: 8
[  248.400042][   T95] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.404310][   T95] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.414600][   T95] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  248.420254][   T95] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  248.423637][   T95] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.442565][   T95] usb 6-1: config 0 descriptor??
[  248.470407][T11001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  248.473618][T11001] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  248.705067][ T5904] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  248.857115][ T5904] usb 2-1: Using ep0 maxpacket: 16
[  248.861248][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.863632][   T95] nzxt-kraken2 0003:1E71:170E.0014: hidraw0: USB HID v0.04 Device [HID 1e71:170e] on usb-dummy_hcd.5-1/input0
[  248.870848][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  248.877978][ T5904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  248.881160][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.883908][ T5904] usb 2-1: Product: syz
[  248.886597][ T5904] usb 2-1: Manufacturer: syz
[  248.888325][ T5904] usb 2-1: SerialNumber: syz
[  249.053351][  T974] usb 6-1: USB disconnect, device number 12
[  249.089534][   T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  249.296366][   T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  249.301309][   T24] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[  249.306251][   T24] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  249.306705][ T5904] usb 2-1: 0:2 : does not exist
[  249.314971][   T24] usb 4-1: USB disconnect, device number 24
[  249.713462][ T5904] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  249.732772][ T5904] usb 2-1: USB disconnect, device number 26
[  249.758062][ T7127] udevd[7127]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  249.846100][T11027] loop5: detected capacity change from 0 to 32768
[  249.888608][T11027] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  249.945967][T11027] XFS (loop5): Starting recovery (logdev: internal)
[  249.985338][T11027] XFS (loop5): Ending recovery (logdev: internal)
[  250.013310][T11041] loop3: detected capacity change from 0 to 2048
[  250.030299][T11041] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  250.047536][ T8989] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[  250.311771][T11049] loop5: detected capacity change from 0 to 1024
[  250.316692][T11049] EXT4-fs: Ignoring removed nomblk_io_submit option
[  250.335285][T11049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.397484][ T8989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.458941][T11057] loop5: detected capacity change from 0 to 2048
[  250.491656][T11057] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.1875: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349)
[  250.500020][T11057] EXT4-fs (loop5): Remounting filesystem read-only
[  250.502390][T11057] EXT4-fs (loop5): get root inode failed
[  250.504459][T11057] EXT4-fs (loop5): mount failed
[  250.728822][T11062] loop1: detected capacity change from 0 to 32768
[  250.756473][T11062] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt
[  250.756473][T11062] 
[  250.771695][T11062] ERROR: (device loop1): remounting filesystem as read-only
[  250.774248][T11062] jfs_lookup: dtSearch returned -5
[  250.790663][  T116] blkno = 8ed2c, nblocks = 1
[  250.792415][  T116] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  250.792415][  T116] 
[  250.797690][  T116] JFS: metapage_get_blocks failed
[  250.800335][  T116] ERROR: (device loop1): release_metapage: metapage_write_one() failed
[  250.800335][  T116] 
[  250.803898][  T116] blkno = 8ed2c, nblocks = 1
[  250.806757][  T116] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  250.806757][  T116] 
[  250.836158][ T5904] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  250.898736][T11070] loop3: detected capacity change from 0 to 512
[  250.901711][T11070] EXT4-fs: Ignoring removed mblk_io_submit option
[  250.904718][T11070] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  250.908471][T11070] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  250.918257][T11070] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  250.923590][T11070] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102]
[  250.927663][T11070] System zones: 0-2, 18-18, 34-34
[  250.932916][T11070] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1881: iget: bad i_size value: 360287970189639680
[  250.940339][T11070] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1881: couldn't read orphan inode 15 (err -117)
[  250.947611][T11070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.997057][ T5904] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  251.000859][ T5904] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  251.003730][ T5904] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  251.008411][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.015988][T11064] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  251.020837][ T5904] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  251.605250][   T24] usb 6-1: USB disconnect, device number 13
[  251.843271][ T6790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.943916][T11084] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.107803][T11092] overlayfs: missing 'lowerdir'
[  252.163376][T11082] loop1: detected capacity change from 0 to 32768
[  252.166779][T11082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1884 (11082)
[  252.175167][T11082] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.178337][T11082] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  252.259823][T11082] BTRFS info (device loop1): enabling ssd optimizations
[  252.265171][T11082] BTRFS info (device loop1): enabling free space tree
[  252.345374][ T5854] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.583152][T11095] loop5: detected capacity change from 0 to 32768
[  252.668875][T11095] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  252.700263][T11135] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  252.702383][T11135] overlayfs: failed to set xattr on upper
[  252.704143][T11135] overlayfs: ...falling back to index=off.
[  252.709305][T11135] overlayfs: ...falling back to uuid=null.
[  252.750337][T11095] XFS (loop5): Ending clean mount
[  252.769430][T11095] XFS (loop5): Quotacheck needed: Please wait.
[  252.889972][T11095] XFS (loop5): Quotacheck: Done.
[  252.977779][ T8989] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  253.257109][T11149] netlink: 'syz.5.1902': attribute type 2 has an invalid length.
[  253.262219][T11149] netlink: 'syz.5.1902': attribute type 1 has an invalid length.
[  253.535687][T11160] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  253.970484][T11183] autofs: Bad value for 'fd'
[  254.105109][ T5904] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  254.187174][T11193] loop5: detected capacity change from 0 to 4096
[  254.213472][T11193] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  254.217494][T11193] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  254.241425][T11193] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  254.251958][T11192] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  254.252497][T11199] loop1: detected capacity change from 0 to 4096
[  254.265198][T11199] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  254.265455][ T5904] usb 4-1: Using ep0 maxpacket: 32
[  254.283615][T11199] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  254.286760][ T5904] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  254.289518][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.292301][ T5904] usb 4-1: Product: syz
[  254.293670][ T5904] usb 4-1: Manufacturer: syz
[  254.301313][ T5904] usb 4-1: SerialNumber: syz
[  254.304783][ T5904] usb 4-1: config 0 descriptor??
[  254.310889][ T1091] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  254.313698][ T8989] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  254.318814][ T8989] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  254.321583][ T8989] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  254.324516][ T1091] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  254.514046][ T5904] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device:
[  254.525275][ T5904] eb 9a 47 80 9b f8 7a f0 
[  254.527194][ T5904] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  254.674430][T11222] loop1: detected capacity change from 0 to 1024
[  254.729124][ T1091] hfsplus: bad catalog file entry
[  254.734094][ T5896] usb 4-1: USB disconnect, device number 25
[  255.490579][T11247] loop5: detected capacity change from 0 to 1024
[  255.581976][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  256.232958][T11267] loop1: detected capacity change from 0 to 1024
[  256.240606][T11267] EXT4-fs: Ignoring removed bh option
[  256.259759][T11267] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  256.285420][T11273] loop3: detected capacity change from 0 to 1024
[  256.289100][T11273] EXT4-fs: Ignoring removed orlov option
[  256.290550][T11267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.291395][T11273] EXT4-fs: Ignoring removed nomblk_io_submit option
[  256.326445][T11273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.343993][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.432632][ T6790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.702156][T11296] netlink: 'syz.5.1969': attribute type 21 has an invalid length.
[  256.705216][T11296] netlink: 'syz.5.1969': attribute type 1 has an invalid length.
[  256.753038][T11299] netlink: 'syz.5.1970': attribute type 1 has an invalid length.
[  256.885073][ T5896] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  257.035231][ T5896] usb 4-1: Using ep0 maxpacket: 8
[  257.038756][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.042796][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.047949][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  257.052689][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  257.056149][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.060802][ T5896] usb 4-1: config 0 descriptor??
[  257.480490][ T5896] logitech 0003:046D:C293.0015: unknown main item tag 0x0
[  257.482865][ T5896] logitech 0003:046D:C293.0015: unknown main item tag 0x0
[  257.486248][ T5896] logitech 0003:046D:C293.0015: unknown main item tag 0x0
[  257.488897][ T5896] logitech 0003:046D:C293.0015: unknown main item tag 0x0
[  257.499677][ T5896] logitech 0003:046D:C293.0015: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.3-1/input0
[  257.503382][ T5896] logitech 0003:046D:C293.0015: no inputs found
[  257.675291][ T5896] usb 4-1: USB disconnect, device number 26
[  257.971048][T11315] XFS (nullb0): Invalid superblock magic number
[  258.324851][T11328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1980'.
[  258.572744][T11332] loop3: detected capacity change from 0 to 8
[  258.599566][T11332] SQUASHFS error: zlib decompression failed, data probably corrupt
[  258.613703][T11332] SQUASHFS error: Failed to read block 0x9b: -5
[  258.623395][T11332] SQUASHFS error: Unable to read metadata cache entry [99]
[  258.630241][T11332] SQUASHFS error: Unable to read inode 0x127
[  258.754154][T11327] loop1: detected capacity change from 0 to 32768
[  258.800106][T11327] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  258.869222][T11327] XFS (loop1): Ending clean mount
[  258.881360][T11327] XFS (loop1): Quotacheck needed: Please wait.
[  258.988213][T11327] XFS (loop1): Quotacheck: Done.
[  258.994338][T11327] syz.1.1981: attempt to access beyond end of device
[  258.994338][T11327] loop1: rw=4096, sector=360777285631, nr_sectors = 1 limit=32768
[  259.028588][T11348] loop5: detected capacity change from 0 to 512
[  259.072059][T11348] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1986: iget: bad i_size value: 38620345925642
[  259.077674][T11348] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1986: couldn't read orphan inode 15 (err -117)
[  259.082787][T11351] loop3: detected capacity change from 0 to 2368
[  259.083120][T11348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.090003][T11351] iso9660: Bad value for 'sbsector'
[  259.105088][T11352] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  259.124319][   T33] audit: type=1326 audit(1757678000.734:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.3.1987" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8bf58eba9 code=0x0
[  259.155678][ T8989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.333391][T11361] loop6: detected capacity change from 0 to 524287999
[  259.529913][ T5854] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.708234][ T5904] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  259.855049][ T5904] usb 6-1: Using ep0 maxpacket: 32
[  259.859169][ T5904] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  259.864945][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.875691][ T5904] usb 6-1: config 0 descriptor??
[  259.881373][ T5904] gspca_main: nw80x-2.14.0 probing 055f:d001
[  259.943999][T11377] mmap: syz.1.1998 (11377) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  261.056905][  T974] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  261.096369][ T5904] gspca_nw80x: reg_w err -71
[  261.097915][ T5904] nw80x 6-1:0.0: probe with driver nw80x failed with error -71
[  261.110963][ T5904] usb 6-1: USB disconnect, device number 14
[  261.222781][  T974] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  261.232055][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.240760][  T974] usb 2-1: Product: syz
[  261.242654][  T974] usb 2-1: Manufacturer: syz
[  261.244568][  T974] usb 2-1: SerialNumber: syz
[  261.252136][  T974] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  261.311018][    T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  261.730463][ T5896] usb 2-1: USB disconnect, device number 27
[  261.983728][T11442] loop5: detected capacity change from 0 to 32768
[  262.039852][T11442] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=crc64,data_checksum=none,compression=lz4,background_compression=lz4,erasure_code,recovery_pass_last=check_allocations,nojournal_transaction_names,read_only,no_data_io
[  262.039868][T11442]   allowing incompatible features above 0.0: (unknown version)
[  262.039873][T11442]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  262.054306][T11442] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  262.057680][T11442] bcachefs (loop5): invalid journal entry, version=1.7: mi_btree_bitmap type=blacklist in superblock: invalid journal seq blacklist entry: bad size, fixing
[  262.062904][T11442] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  262.065683][T11442] bcachefs (loop5): Version upgrade required:
[  262.065683][T11442] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  262.065683][T11442] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  262.065683][T11442]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  262.103820][T11442] bcachefs (loop5): btree node read error at btree alloc level 0/0
[  262.103861][T11442]   u64s 11 type btree_ptr_v2 283673999966207:U64_MAX:U32_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  262.103868][T11442]   loop5 node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX
[  262.103873][T11442]   loop5 btree validate error
[  262.103877][T11442]   flagging btree alloc lost data
[  262.103881][T11442]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  262.103886][T11442]   ret btree_node_read_err_bad_node
[  262.127789][T11442] bcachefs (loop5): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  262.143872][T11442] bcachefs (loop5): check_topology... done
[  262.149110][T11442] bcachefs (loop5): accounting_read... done
[  262.152764][T11442] bcachefs (loop5): alloc_read... done
[  262.156017][T11442] bcachefs (loop5): snapshots_read... done
[  262.159340][T11442] bcachefs (loop5): check_allocations...
[  262.168350][T11442] bcachefs (loop5): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[  262.168368][T11442]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  262.182721][T11442] bcachefs (loop5): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[  262.182738][T11442]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  262.192968][T11442] bcachefs (loop5): bucket 0:31 data type btree ptr gen 0 missing in alloc btree
[  262.192984][T11442]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing
[  262.206812][T11442] bcachefs (loop5): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[  262.206831][T11442]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  262.217887][T11442] bcachefs (loop5): bucket 0:32 data type btree ptr gen 0 missing in alloc btree
[  262.217904][T11442]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  262.228193][T11442] bcachefs (loop5): bucket 0:28 data type btree ptr gen 0 missing in alloc btree
[  262.228209][T11442]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing
[  262.241348][T11442] bcachefs (loop5): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[  262.241364][T11442]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  262.251198][T11442] bcachefs (loop5): bucket 0:37 data type btree ptr gen 0 missing in alloc btree
[  262.251213][T11442]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing
[  262.261327][T11442] bcachefs (loop5): bucket 0:42 data type btree ptr gen 0 missing in alloc btree
[  262.261342][T11442]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing
[  262.290053][T11442]  done
[  262.291180][T11442] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  262.299168][T11442] bcachefs (loop5): done starting filesystem
[  262.385014][    T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  262.388505][    T9] ath9k_htc: Failed to initialize the device
[  262.392433][ T5896] usb 2-1: ath9k_htc: USB layer deinitialized
[  262.547920][ T8989] bcachefs (loop5): shutting down
[  262.602264][ T8989] bcachefs (loop5): shutdown complete
[  263.337350][T11483] loop1: detected capacity change from 0 to 512
[  263.364563][T11483] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.2048: corrupted in-inode xattr: invalid ea_ino
[  263.370884][T11483] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2048: couldn't read orphan inode 15 (err -117)
[  263.379823][T11483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.095554][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.240269][T11503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2055'.
[  265.435527][T11526] loop1: detected capacity change from 0 to 32768
[  265.439100][T11526] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  265.439100][T11526] clean (size 2912):
[  265.439100][T11526] flags:          0
[  265.439100][T11526] journal_seq:    8
[  265.439100][T11526] usage: type=inodes v=8
[  265.439100][T11526] usage: type=key_version v=0
[  265.439100][T11526] usage: type=reserved v=0
[  265.439100][T11526] usage: type=reserved v=0
[  265.439100][T11526] usage: type=reserved v=0
[  265.439100][T11526] usage: type=reserved v=0
[  265.439100][T11526] data_usage: btree: 1/1 [0]=2816
[  265.439100][T11526] data_usage: journal: 1/1 [0]=0
[  265.439100][T11526] btree_keys: btree=extents level=0 u64s 8 type deleted 0:2048:0 len 8 ver 1065151889408: 
[  265.439100][T11526] btree_keys: btree=extents level=0 u64s 1 type deleted POS_MIN len 224 ver 137438953472: 
[  265.439100][T11526] btree_keys: btree=extents level=0 u64s 32 type deleted POS_MIN len 0 ver 962072674304: 
[  265.439100][T11526] clock: read=0
[  265.439100][T11526] clock: write=1288
[  265.439100][T11526] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee356 written 16 min_key POS_MIN ptr: 0:6912 gen 0
[  265.439100][T11526] btree_root: btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq efdd7a26d7396dd5 written 24 min_key POS_MIN ptr: 0:9728 gen 0
[  265.439100][T11526] btree_root: btree=dirents l
[  265.439205][T11526] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  265.668180][T11530] netlink: 'syz.1.2064': attribute type 6 has an invalid length.
[  265.967215][T11532] loop3: detected capacity change from 0 to 32768
[  265.973441][T11532] XFS: noikeep mount option is deprecated.
[  265.983384][T11532] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  266.013899][T11532] XFS (loop3): Ending clean mount
[  266.018472][T11532] XFS (loop3): Quotacheck needed: Please wait.
[  266.061766][T11532] XFS (loop3): Quotacheck: Done.
[  266.087134][   T33] audit: type=1804 audit(1757678007.704:26): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2066" name="/newroot/511/file0/bus" dev="loop3" ino=9291 res=1 errno=0
[  266.127709][ T6790] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  266.396480][T11555] netlink: 'syz.3.2072': attribute type 3 has an invalid length.
[  266.399284][T11555] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2072'.
[  266.539420][T11561] loop3: detected capacity change from 0 to 4096
[  266.542722][T11561] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  266.561504][T11561] ntfs3(loop3): Failed to load root (-22).
[  266.680801][T11567] loop3: detected capacity change from 0 to 512
[  266.708724][T11567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  266.719781][T11567] System zones: 1-12
[  266.737710][T11567] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.2078: error while reading EA inode 32 err=-116
[  266.752166][T11567] EXT4-fs (loop3): Remounting filesystem read-only
[  266.756944][T11567] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  266.761521][T11567] EXT4-fs (loop3): 1 orphan inode deleted
[  266.767825][T11567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.804203][ T6790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.965481][T11579] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  266.979733][T11578] usb usb8: usbfs: process 11578 (syz.5.2083) did not claim interface 0 before use
[  267.064172][T11581] netlink: zone id is out of range
[  267.105108][T11581] netlink: zone id is out of range
[  267.107295][T11581] netlink: del zone limit has 4 unknown bytes
[  267.131495][T11579] loop1: detected capacity change from 0 to 1024
[  267.138811][T11581] openvswitch: netlink: Multiple metadata blocks provided
[  267.214730][T11579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  267.265130][T11579] EXT4-fs error (device loop1): __ext4_remount:6740: comm syz.1.2082: Abort forced by user
[  267.279336][T11579] EXT4-fs (loop1): Remounting filesystem read-only
[  267.282016][T11579] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  267.811666][T11583] loop5: detected capacity change from 0 to 40427
[  267.918965][T11583] F2FS-fs (loop5): invalid crc value
[  268.088311][T11593] loop3: detected capacity change from 0 to 40427
[  268.096026][T11593] F2FS-fs (loop3): invalid crc value
[  268.166755][T11593] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  268.169993][T11593] F2FS-fs (loop3): Start checkpoint disabled!
[  268.180281][T11593] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  268.227968][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.259923][   T33] audit: type=1800 audit(1757678009.874:27): pid=11593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2088" name="file1" dev="loop3" ino=10 res=0 errno=0
[  268.270003][T11583] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  268.295678][T11583] F2FS-fs (loop5): Start checkpoint disabled!
[  268.303753][T11583] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  268.324476][ T1090] kworker/u9:4: attempt to access beyond end of device
[  268.324476][ T1090] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  268.334805][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[  268.334823][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  268.334831][ T1090] Workqueue: writeback wb_workfn (flush-7:3)
[  268.334847][ T1090] Call Trace:
[  268.334851][ T1090]  <TASK>
[  268.334856][ T1090]  dump_stack_lvl+0x189/0x250
[  268.334887][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.334897][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  268.334906][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  268.334919][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  268.334936][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  268.334953][ T1090]  f2fs_write_end_io+0x886/0xb60
[  268.334970][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  268.334985][ T1090]  __submit_merged_write_cond+0x255/0x530
[  268.335000][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  268.335026][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  268.335041][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  268.335068][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  268.335080][ T1090]  ? look_up_lock_class+0x74/0x170
[  268.335093][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  268.335105][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  268.335119][ T1090]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  268.335137][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  268.335145][ T1090]  do_writepages+0x32e/0x550
[  268.335160][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[  268.335167][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[  268.335182][ T1090]  __writeback_single_inode+0x145/0xff0
[  268.335192][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  268.335204][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  268.335228][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  268.335260][ T1090]  ? rcu_is_watching+0x15/0xb0
[  268.335273][ T1090]  wb_writeback+0x43b/0xaf0
[  268.335287][ T1090]  ? queue_io+0x3a1/0x590
[  268.335299][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  268.335313][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  268.335327][ T1090]  wb_workfn+0x409/0xef0
[  268.335344][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  268.335354][ T1090]  ? __lock_acquire+0xab9/0xd20
[  268.335372][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  268.335383][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  268.335394][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  268.335401][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  268.335409][ T1090]  process_scheduled_works+0xae1/0x17b0
[  268.335432][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  268.335449][ T1090]  worker_thread+0x8a0/0xda0
[  268.335471][ T1090]  kthread+0x711/0x8a0
[  268.335483][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  268.335491][ T1090]  ? __pfx_kthread+0x10/0x10
[  268.335501][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  268.335512][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.335518][ T1090]  ? __pfx_kthread+0x10/0x10
[  268.335528][ T1090]  ret_from_fork+0x3fc/0x770
[  268.335538][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  268.335549][ T1090]  ? __switch_to_asm+0x39/0x70
[  268.335558][ T1090]  ? __switch_to_asm+0x33/0x70
[  268.335567][ T1090]  ? __pfx_kthread+0x10/0x10
[  268.335577][ T1090]  ret_from_fork_asm+0x1a/0x30
[  268.335596][ T1090]  </TASK>
[  268.468276][ T1090] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  268.484066][T11602] loop1: detected capacity change from 0 to 128
[  268.532297][T11583] syz.5.2085: attempt to access beyond end of device
[  268.532297][T11583] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  268.559984][T11602] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  268.566145][ T7260] kworker/u10:7: attempt to access beyond end of device
[  268.566145][ T7260] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  268.566146][T11602] ext4 filesystem being mounted at /745/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  268.571680][ T7260] CPU: 1 UID: 0 PID: 7260 Comm: kworker/u10:7 Not tainted syzkaller #0 PREEMPT(full) 
[  268.571697][ T7260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  268.571704][ T7260] Workqueue: writeback wb_workfn (flush-7:5)
[  268.571724][ T7260] Call Trace:
[  268.571730][ T7260]  <TASK>
[  268.571736][ T7260]  dump_stack_lvl+0x189/0x250
[  268.571752][ T7260]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.571794][ T7260]  ? __pfx_queue_work_on+0x10/0x10
[  268.571805][ T7260]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  268.571823][ T7260]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  268.571849][ T7260]  f2fs_handle_critical_error+0x37c/0x540
[  268.571870][ T7260]  f2fs_write_end_io+0x886/0xb60
[  268.571894][ T7260]  __submit_merged_bio+0x27a/0x6a0
[  268.571917][ T7260]  __submit_merged_write_cond+0x255/0x530
[  268.571937][ T7260]  f2fs_write_data_pages+0x261d/0x3000
[  268.571974][ T7260]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  268.571995][ T7260]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  268.572042][ T7260]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  268.572070][ T7260]  ? trace_f2fs_writepages+0x7f/0x200
[  268.572086][ T7260]  ? f2fs_write_node_pages+0x478/0x6e0
[  268.572107][ T7260]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  268.572134][ T7260]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  268.572147][ T7260]  do_writepages+0x32e/0x550
[  268.572169][ T7260]  ? reacquire_held_locks+0x127/0x1d0
[  268.572183][ T7260]  ? writeback_sb_inodes+0x384/0x1010
[  268.572207][ T7260]  __writeback_single_inode+0x145/0xff0
[  268.572219][ T7260]  ? do_raw_spin_unlock+0x4d/0x240
[  268.572236][ T7260]  writeback_sb_inodes+0x6c7/0x1010
[  268.572277][ T7260]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  268.572324][ T7260]  ? rcu_is_watching+0x15/0xb0
[  268.572338][ T7260]  wb_writeback+0x43b/0xaf0
[  268.572353][ T7260]  ? queue_io+0x3a1/0x590
[  268.572364][ T7260]  ? __pfx_wb_writeback+0x10/0x10
[  268.572379][ T7260]  ? _raw_spin_unlock_irq+0x23/0x50
[  268.572393][ T7260]  wb_workfn+0x409/0xef0
[  268.572410][ T7260]  ? __pfx_wb_workfn+0x10/0x10
[  268.572421][ T7260]  ? __lock_acquire+0xab9/0xd20
[  268.572439][ T7260]  ? process_scheduled_works+0x9ef/0x17b0
[  268.572450][ T7260]  ? _raw_spin_unlock_irq+0x23/0x50
[  268.572461][ T7260]  ? process_scheduled_works+0x9ef/0x17b0
[  268.572468][ T7260]  ? process_scheduled_works+0x9ef/0x17b0
[  268.572476][ T7260]  process_scheduled_works+0xae1/0x17b0
[  268.572499][ T7260]  ? __pfx_process_scheduled_works+0x10/0x10
[  268.572516][ T7260]  worker_thread+0x8a0/0xda0
[  268.572526][ T7260]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  268.572542][ T7260]  ? __kthread_parkme+0x7b/0x200
[  268.572555][ T7260]  kthread+0x711/0x8a0
[  268.572566][ T7260]  ? __pfx_worker_thread+0x10/0x10
[  268.572574][ T7260]  ? __pfx_kthread+0x10/0x10
[  268.572585][ T7260]  ? _raw_spin_unlock_irq+0x23/0x50
[  268.572595][ T7260]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.572603][ T7260]  ? __pfx_kthread+0x10/0x10
[  268.572613][ T7260]  ret_from_fork+0x3fc/0x770
[  268.572623][ T7260]  ? __pfx_ret_from_fork+0x10/0x10
[  268.572635][ T7260]  ? __switch_to_asm+0x39/0x70
[  268.572644][ T7260]  ? __switch_to_asm+0x33/0x70
[  268.572653][ T7260]  ? __pfx_kthread+0x10/0x10
[  268.572664][ T7260]  ret_from_fork_asm+0x1a/0x30
[  268.572682][ T7260]  </TASK>
[  268.572687][ T7260] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  268.654655][T11602] EXT4-fs error (device loop1): make_indexed_dir:2269: inode #2: block 18: comm syz.1.2091: bad entry in directory: rec_len is smaller than minimal - offset=988, inode=128, rec_len=9, size=1000 fake=0
[  268.743262][ T5854] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  269.128819][T11619] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  269.201391][T11622] pim6reg: entered allmulticast mode
[  269.655631][T11647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.976278][ T5904] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  270.127021][ T5904] usb 2-1: config 240 has too many interfaces: 108, using maximum allowed: 32
[  270.130802][ T5904] usb 2-1: config 240 has 1 interface, different from the descriptor's value: 108
[  270.134620][ T5904] usb 2-1: config 240 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.146573][ T5904] usb 2-1: config 240 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.150830][ T5904] usb 2-1: config 240 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  270.156377][ T5904] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  270.159979][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.333006][T11663] loop3: detected capacity change from 0 to 512
[  270.356607][T11663] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  270.385214][T11663] EXT4-fs (loop3): Remounting filesystem read-only
[  270.405435][T11663] EXT4-fs (loop3): 1 truncate cleaned up
[  270.409087][T11663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.467548][ T6790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.510087][T11667] loop5: detected capacity change from 0 to 4096
[  270.573099][T11669] loop3: detected capacity change from 0 to 1024
[  270.604812][ T5904] dragonrise 0003:0079:0011.0016: unknown main item tag 0x0
[  270.612717][ T5904] dragonrise 0003:0079:0011.0016: unknown main item tag 0x0
[  270.623581][ T5904] dragonrise 0003:0079:0011.0016: unknown main item tag 0x0
[  270.628485][ T5904] dragonrise 0003:0079:0011.0016: unknown main item tag 0x0
[  270.631586][ T5904] dragonrise 0003:0079:0011.0016: unknown main item tag 0x0
[  270.647779][ T5904] dragonrise 0003:0079:0011.0016: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.1-1/input0
[  270.793535][T11675] loop5: detected capacity change from 0 to 256
[  270.795469][  T974] usb 2-1: USB disconnect, device number 28
[  270.816464][T11675] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  270.883004][T11675] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff)
[  270.944320][T11681] loop3: detected capacity change from 0 to 256
[  270.961221][T11681] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  270.982799][   T33] audit: type=1800 audit(1757678012.594:28): pid=11681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2127" name="file2" dev="loop3" ino=1048631 res=0 errno=0
[  271.080621][T11687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2130'.
[  271.084051][T11687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2130'.
[  271.304281][   T33] audit: type=1326 audit(1757678012.914:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.5.2137" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fc19e385b67 code=0x0
[  271.424531][T11711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.761906][T11701] loop3: detected capacity change from 0 to 65536
[  271.806653][T11701] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  271.838283][T11701] XFS (loop3): Ending clean mount
[  271.872590][ T6790] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  271.940570][T11735] loop1: detected capacity change from 0 to 4096
[  271.943737][T11735] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  271.970946][T11735] ntfs3(loop1): ino=1d, mi_enum_attr
[  271.974628][T11735] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  271.995773][T11735] ntfs3(loop1): ino=1d, mi_enum_attr
[  272.013821][T11735] ntfs3(loop1): ino=1d, mi_enum_attr
[  272.209609][  T974] kernel write not supported for file /snd/seq (pid: 974 comm: kworker/0:2)
[  273.034481][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2169'.
[  273.264370][T11782] loop1: detected capacity change from 0 to 256
[  273.411232][T11782] FAT-fs (loop1): Directory bread(block 64) failed
[  273.415058][T11782] FAT-fs (loop1): Directory bread(block 65) failed
[  273.417675][T11782] FAT-fs (loop1): Directory bread(block 66) failed
[  273.420111][T11782] FAT-fs (loop1): Directory bread(block 67) failed
[  273.422721][T11782] FAT-fs (loop1): Directory bread(block 68) failed
[  273.426088][T11782] FAT-fs (loop1): Directory bread(block 69) failed
[  273.429256][T11782] FAT-fs (loop1): Directory bread(block 70) failed
[  273.431744][T11782] FAT-fs (loop1): Directory bread(block 71) failed
[  273.434346][T11782] FAT-fs (loop1): Directory bread(block 72) failed
[  273.437028][T11782] FAT-fs (loop1): Directory bread(block 73) failed
[  273.452784][T11782] syz.1.2170: attempt to access beyond end of device
[  273.452784][T11782] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256
[  273.989765][T11789] loop3: detected capacity change from 0 to 1024
[  274.017577][T11789] EXT4-fs: Ignoring removed bh option
[  274.092889][T11789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.479938][ T9214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.540614][T11824] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2189'.
[  276.198801][T11830] loop1: detected capacity change from 0 to 256
[  276.220621][T11830] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  276.415670][T11832] netlink: 19 bytes leftover after parsing attributes in process `syz.1.2192'.
[  276.517731][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  276.524796][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  276.535599][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  276.539128][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  276.543669][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  276.777286][T11850] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2199'.
[  276.820194][T11833] chnl_net:caif_netlink_parms(): no params data found
[  276.847886][T11855] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2201'.
[  277.072565][T11833] bridge0: port 1(bridge_slave_0) entered blocking state
[  277.077911][T11833] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.080716][T11833] bridge_slave_0: entered allmulticast mode
[  277.084560][T11833] bridge_slave_0: entered promiscuous mode
[  277.124670][T11833] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.127759][T11833] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.130540][T11833] bridge_slave_1: entered allmulticast mode
[  277.134371][T11833] bridge_slave_1: entered promiscuous mode
[  277.196380][T11833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  277.209207][T11833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.281768][T11833] team0: Port device team_slave_0 added
[  277.297491][T11833] team0: Port device team_slave_1 added
[  277.332648][T11833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  277.334822][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.346073][T11833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  277.356698][T11833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  277.359126][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  277.368913][T11833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  277.392088][T11883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2212'.
[  277.442335][T11887] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  277.449305][T11833] hsr_slave_0: entered promiscuous mode
[  277.457619][T11833] hsr_slave_1: entered promiscuous mode
[  277.459895][T11833] debugfs: 'hsr0' already exists in 'hsr'
[  277.461643][T11833] Cannot create hsr debugfs directory
[  277.477165][T11889] loop5: detected capacity change from 0 to 512
[  277.485636][T11889] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  277.515685][T11889] EXT4-fs (loop5): 1 truncate cleaned up
[  277.519055][T11889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.568457][ T8989] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.150895][T11833] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  278.164349][T11833] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  278.176679][T11833] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  278.187739][T11833] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  278.320660][T11833] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.342112][T11833] 8021q: adding VLAN 0 to HW filter on device team0
[  278.356579][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.358881][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.443798][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.446120][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.488909][T11833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  278.616237][   T54] Bluetooth: hci0: command tx timeout
[  278.674370][T11833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  278.832846][T11929] loop1: detected capacity change from 0 to 8192
[  278.850759][T11942] loop5: detected capacity change from 0 to 256
[  278.873829][T11942] exfat: Deprecated parameter 'utf8'
[  278.890790][T11942] exfat: Deprecated parameter 'namecase'
[  278.893175][T11942] exfat: Deprecated parameter 'namecase'
[  278.925354][T11942] exfat: Deprecated parameter 'utf8'
[  278.938745][T11942] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d)
[  278.964179][T11942] exFAT-fs (loop5): start_clu is invalid cluster(0x400)
[  278.968499][T11833] veth0_vlan: entered promiscuous mode
[  279.012041][T11833] veth1_vlan: entered promiscuous mode
[  279.160657][T11833] veth0_macvtap: entered promiscuous mode
[  279.194518][T11833] veth1_macvtap: entered promiscuous mode
[  279.232941][T11833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.256613][T11833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.279564][ T5882] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.303268][ T5882] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.354291][ T5882] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.368066][ T5882] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.532057][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.542420][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.609578][ T5882] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.734346][ T5882] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.766612][ T7260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.770793][ T7260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.801664][ T5882] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.860446][ T5882] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.914774][T11958] loop1: detected capacity change from 0 to 64
[  280.216718][ T5882] bridge_slave_1: left allmulticast mode
[  280.219001][ T5882] bridge_slave_1: left promiscuous mode
[  280.221272][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.263326][ T5882] bridge_slave_0: left allmulticast mode
[  280.285321][ T5882] bridge_slave_0: left promiscuous mode
[  280.287458][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.452347][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  280.475438][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  280.481519][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  280.503414][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  280.507336][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  280.708296][   T54] Bluetooth: hci0: command tx timeout
[  280.855346][ T9150] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  280.860415][T11991] loop1: detected capacity change from 0 to 512
[  280.903765][T11991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.999150][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.057656][ T9150] usb 7-1: unable to get BOS descriptor or descriptor too short
[  281.069070][ T9150] usb 7-1: no configurations
[  281.071010][ T9150] usb 7-1: can't read configurations, error -22
[  281.169017][T11996] loop1: detected capacity change from 0 to 8
[  281.206699][T11996] cramfs: Error -3 while decompressing!
[  281.209566][T11996] cramfs: ffffffff99bf6668(26)->ffff888123c9f000(4096)
[  281.212351][T11996] cramfs: Error -3 while decompressing!
[  281.214583][T11996] cramfs: ffffffff99bf6682(26)->ffff8881247e5000(4096)
[  281.223188][T11996] cramfs: Error -3 while decompressing!
[  281.235163][T11996] cramfs: ffffffff99bf669c(16)->ffff888125195000(4096)
[  281.237870][T11996] cramfs: Error -3 while decompressing!
[  281.239801][T11996] cramfs: ffffffff99bf6668(26)->ffff888123c9f000(4096)
[  281.293954][T11998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2245'.
[  281.392080][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  281.397704][ T5882] bond_slave_0: left allmulticast mode
[  281.406989][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.410485][ T5882] bond_slave_1: left allmulticast mode
[  281.415122][ T5882] bond0 (unregistering): Released all slaves
[  281.887159][ T5882] bond1 (unregistering): Released all slaves
[  282.146604][ T5882] IPVS: stopping backup sync thread 10733 ...
[  282.150079][T12018] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2251'.
[  282.462541][T11979] chnl_net:caif_netlink_parms(): no params data found
[  282.576254][T12035] loop1: detected capacity change from 0 to 256
[  282.594307][T12035] FAT-fs (loop1): Directory bread(block 64) failed
[  282.605408][T12035] FAT-fs (loop1): Directory bread(block 65) failed
[  282.607534][T12035] FAT-fs (loop1): Directory bread(block 66) failed
[  282.609544][T12035] FAT-fs (loop1): Directory bread(block 67) failed
[  282.611587][T12035] FAT-fs (loop1): Directory bread(block 68) failed
[  282.613612][T12035] FAT-fs (loop1): Directory bread(block 69) failed
[  282.617252][   T54] Bluetooth: hci2: command tx timeout
[  282.622263][T12035] FAT-fs (loop1): Directory bread(block 70) failed
[  282.624335][T12035] FAT-fs (loop1): Directory bread(block 71) failed
[  282.632848][T12035] FAT-fs (loop1): Directory bread(block 72) failed
[  282.649297][T12035] FAT-fs (loop1): Directory bread(block 73) failed
[  282.675020][ T5918] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  282.716227][T12035] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  282.763594][   T64] kworker/u10:3: attempt to access beyond end of device
[  282.763594][   T64] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256
[  282.769946][ T5882] hsr_slave_0: left promiscuous mode
[  282.779024][   T54] Bluetooth: hci0: command tx timeout
[  282.795844][ T5882] hsr_slave_1: left promiscuous mode
[  282.798601][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.801422][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.821431][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.824264][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.857672][ T5918] usb 7-1: unable to get BOS descriptor or descriptor too short
[  282.860632][ T5918] usb 7-1: not running at top speed; connect to a high speed hub
[  282.863915][ T5918] usb 7-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config
[  282.868078][ T5882] veth1_macvtap: left promiscuous mode
[  282.870294][ T5882] veth0_macvtap: left promiscuous mode
[  282.872503][ T5882] veth1_vlan: left promiscuous mode
[  282.874193][ T5918] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  282.874825][ T5882] veth0_vlan: left promiscuous mode
[  282.877537][ T5918] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  282.893525][ T5918] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  282.897469][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.900828][ T5918] usb 7-1: SerialNumber: syz
[  283.068667][T12042] loop1: detected capacity change from 0 to 32768
[  283.077893][T12042] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2255 (12042)
[  283.120823][T12042] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.125403][ T5918] cdc_ncm 7-1:1.0: invalid descriptor buffer length
[  283.127545][ T5918] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  283.129886][ T5918] cdc_ncm 7-1:1.0: bind() failure
[  283.135012][T12042] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  283.150232][ T5918] usb 7-1: USB disconnect, device number 4
[  283.247261][T12042] BTRFS info (device loop1): setting nodatasum
[  283.249623][T12042] BTRFS info (device loop1): setting nodatacow
[  283.251986][T12042] BTRFS info (device loop1): enabling free space tree
[  283.291574][T12042] BTRFS info (device loop1): max_inline set to 0
[  283.478401][ T5854] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.880560][T12066] loop1: detected capacity change from 0 to 8
[  284.442231][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  284.504333][T12069] loop1: detected capacity change from 0 to 32768
[  284.537959][ T5882] team0 (unregistering): Port device team_slave_0 removed
[  284.542376][T12069] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.587656][T12069] XFS (loop1): Ending clean mount
[  284.591985][T12069] XFS (loop1): Quotacheck needed: Please wait.
[  284.684630][T12069] XFS (loop1): Quotacheck: Done.
[  284.695228][   T54] Bluetooth: hci2: command tx timeout
[  284.805825][ T5854] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  284.856282][   T54] Bluetooth: hci0: command tx timeout
[  285.397888][    T9] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[  285.529052][T11979] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.533248][T11979] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.539765][T11979] bridge_slave_0: entered allmulticast mode
[  285.544166][T11979] bridge_slave_0: entered promiscuous mode
[  285.550491][T11979] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.553577][T11979] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.567608][T11979] bridge_slave_1: entered allmulticast mode
[  285.571346][T11979] bridge_slave_1: entered promiscuous mode
[  285.616714][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  285.621827][    T9] usb 2-1: unable to read config index 0 descriptor/start: -71
[  285.628324][    T9] usb 2-1: can't read configurations, error -71
[  285.662188][T11979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.707023][T11979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.796725][T11979] team0: Port device team_slave_0 added
[  285.806785][T11979] team0: Port device team_slave_1 added
[  285.919527][T11979] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.922178][T11979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.931930][T11979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.937961][T11979] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.943901][T11979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.956509][T11979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.094154][T11979] hsr_slave_0: entered promiscuous mode
[  286.100682][T11979] hsr_slave_1: entered promiscuous mode
[  286.110233][T11979] debugfs: 'hsr0' already exists in 'hsr'
[  286.112436][T11979] Cannot create hsr debugfs directory
[  286.118907][T12106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.438214][T11979] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  286.444493][T11979] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  286.450495][T11979] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  286.456407][T11979] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  286.493202][T11979] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.496073][T11979] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.548991][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.582738][T11979] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.593983][T11979] 8021q: adding VLAN 0 to HW filter on device team0
[  286.603521][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.606276][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  286.613662][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.616016][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.668459][T11979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  286.675343][    T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  286.775301][   T54] Bluetooth: hci2: command tx timeout
[  286.811835][T11979] 8021q: adding VLAN 0 to HW filter on device batadv0
[  286.827275][    T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  286.831309][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  286.840471][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  286.844075][    T9] usb 2-1: config 1 has no interface number 0
[  286.847466][    T9] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  286.852595][    T9] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  286.864553][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  286.869799][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.873362][    T9] usb 2-1: Product: syz
[  286.882080][    T9] usb 2-1: Manufacturer: syz
[  286.884210][    T9] usb 2-1: SerialNumber: syz
[  287.029088][T11979] veth0_vlan: entered promiscuous mode
[  287.037905][T11979] veth1_vlan: entered promiscuous mode
[  287.067535][T11979] veth0_macvtap: entered promiscuous mode
[  287.073274][T11979] veth1_macvtap: entered promiscuous mode
[  287.088927][T11979] batman_adv: batadv0: Interface activated: batadv_slave_0
[  287.098528][T11979] batman_adv: batadv0: Interface activated: batadv_slave_1
[  287.109677][ T5882] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  287.114554][ T5882] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  287.126271][    T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  287.142281][ T5882] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  287.147615][    T9] usb 2-1: USB disconnect, device number 30
[  287.165108][ T5882] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  287.192595][T12138] loop6: detected capacity change from 0 to 256
[  287.227709][T12138] FAT-fs (loop6): Directory bread(block 64) failed
[  287.230244][T12138] FAT-fs (loop6): Directory bread(block 65) failed
[  287.233020][T12138] FAT-fs (loop6): Directory bread(block 66) failed
[  287.237915][T12138] FAT-fs (loop6): Directory bread(block 67) failed
[  287.240674][T12138] FAT-fs (loop6): Directory bread(block 68) failed
[  287.247810][T12138] FAT-fs (loop6): Directory bread(block 69) failed
[  287.261469][T12138] FAT-fs (loop6): Directory bread(block 70) failed
[  287.264045][T12138] FAT-fs (loop6): Directory bread(block 71) failed
[  287.289142][T12138] FAT-fs (loop6): Directory bread(block 72) failed
[  287.292102][T12138] FAT-fs (loop6): Directory bread(block 73) failed
[  287.332627][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.343789][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.382884][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  287.388750][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  287.464572][T12140] loop6: detected capacity change from 0 to 512
[  287.515893][T12140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.526793][T12140] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.601462][T12147] loop7: detected capacity change from 0 to 4096
[  287.691186][   T33] audit: type=1800 audit(1757678029.304:30): pid=12147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2274" name="file1" dev="loop7" ino=15 res=0 errno=0
[  287.691277][T12149] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  287.726937][T12147] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  287.740192][T12147] Remounting filesystem read-only
[  287.752988][T12147] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 524288
[  287.758757][T12147] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=15)
[  287.763881][T12147] NILFS (loop7): error -5 truncating bmap (ino=15)
[  287.782903][T11833] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.788675][T11979] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer
[  287.826833][T12153] loop1: detected capacity change from 0 to 4096
[  287.832302][T12153] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  287.837194][T12153] NILFS (loop1): mounting unchecked fs
[  287.860559][ T7129] udevd[7129]: incorrect nilfs2 checksum on /dev/loop1
[  287.901249][T12153] NILFS (loop1): recovery complete
[  287.915689][T12158] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  288.062222][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2281'.
[  288.278751][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2288'.
[  288.395385][T12181] loop1: detected capacity change from 0 to 256
[  288.425861][T12181] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  288.440755][T12181] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  288.466781][T12181] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  288.674422][T12190] netlink: 'syz.6.2290': attribute type 1 has an invalid length.
[  288.855088][   T54] Bluetooth: hci2: command tx timeout
[  289.156468][T12204] virtio-fs: tag </dev/md0> not found
[  289.568597][T12224] loop7: detected capacity change from 0 to 2048
[  289.581926][T12224] hpfs: Bad magic ... probably not HPFS
[  289.612634][T12231] overlay: Unknown parameter 'subj_role'
[  289.672236][   T33] audit: type=1326 audit(1757678249.288:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12232 comm="syz.1.2311" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f76a698eba9 code=0x0
[  289.875228][  T974] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  289.979520][T12241] loop7: detected capacity change from 0 to 32768
[  289.991694][T12241] (syz.7.2314,12241,1):ocfs2_verify_heartbeat:830 ERROR: Mismatching o2cb heartbeat modes
[  290.005702][T12241] (syz.7.2314,12241,1):ocfs2_fill_super:1177 ERROR: status = -22
[  290.028670][  T974] usb 7-1: Using ep0 maxpacket: 32
[  290.049188][  T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.064735][  T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.072302][  T974] usb 7-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00
[  290.083395][  T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.092782][  T974] usb 7-1: config 0 descriptor??
[  290.410539][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2320'.
[  290.522967][  T974] logitech-hidpp-device 0003:046D:C082.0017: hidraw0: USB HID v0.02 Device [HID 046d:c082] on usb-dummy_hcd.6-1/input0
[  290.732991][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  290.749726][  T974] usb 7-1: USB disconnect, device number 5
[  290.906051][    T9] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  290.915707][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.921221][    T9] usb 8-1: config 0 descriptor??
[  290.928218][    T9] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  291.116290][T12276] loop1: detected capacity change from 0 to 1024
[  291.828877][T12299] binder: 12298:12299 ioctl c018620c 200000000040 returned -22
[  291.880004][T12301] loop1: detected capacity change from 0 to 2048
[  291.920147][T12303] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  292.133313][T12310] loop1: detected capacity change from 0 to 4096
[  292.154245][T12310] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  292.171107][    T9] usb 8-1: USB disconnect, device number 2
[  292.208847][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2343'.
[  292.212119][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2343'.
[  292.217894][T12310] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  292.266844][T12315] loop6: detected capacity change from 0 to 128
[  292.268303][   T28] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  292.271399][ T5854] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  292.271539][T12315] ufs: You didn't specify the type of your ufs filesystem
[  292.271539][T12315] 
[  292.271539][T12315] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  292.271539][T12315] 
[  292.271539][T12315] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  292.273852][ T5854] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  292.273892][ T5854] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  292.288126][T12315] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  292.308303][ T7260] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  292.992088][T12339] loop7: detected capacity change from 0 to 32768
[  292.997293][T12339] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2352 (12339)
[  293.008177][T12339] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  293.011737][T12339] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  293.074835][T12339] BTRFS info (device loop7): enabling ssd optimizations
[  293.085485][T12339] BTRFS info (device loop7): enabling free space tree
[  293.302156][T11979] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  293.501001][T12373] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  293.587937][T12375] netlink: 'syz.7.2359': attribute type 10 has an invalid length.
[  293.610230][T12375] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  293.760609][T12384] loop1: detected capacity change from 0 to 512
[  293.764117][T12384] EXT4-fs: Ignoring removed bh option
[  293.778496][T12384] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  293.816653][T12384] EXT4-fs (loop1): 1 truncate cleaned up
[  293.822729][T12384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.876799][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.938973][T12392] netlink: 'syz.1.2368': attribute type 2 has an invalid length.
[  294.119434][T12404] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2374'.
[  294.271774][T12412] loop1: detected capacity change from 0 to 256
[  294.282378][T12412] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d)
[  294.512590][T12426] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  294.666758][T12431] netlink: 'syz.7.2386': attribute type 3 has an invalid length.
[  295.190328][T12439] loop7: detected capacity change from 0 to 32768
[  295.195342][T12439] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2389 (12439)
[  295.218684][T12439] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  295.222666][T12439] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  295.396347][T12439] BTRFS info (device loop7): setting nodatasum
[  295.399808][T12439] BTRFS info (device loop7): enabling ssd optimizations
[  295.402546][T12439] BTRFS info (device loop7): disabling tree log
[  295.405031][T12439] BTRFS info (device loop7): enabling free space tree
[  295.428444][T12439] BTRFS info (device loop7): enabling auto defrag
[  295.602029][T11979] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  295.814129][T12497] loop1: detected capacity change from 0 to 512
[  295.872193][T12497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.905966][T12497] ext4 filesystem being mounted at /877/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.949668][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.226192][T12513] loop1: detected capacity change from 0 to 4096
[  296.235006][T12513] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  296.280070][T12513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.319738][   T33] audit: type=1800 audit(1757678255.938:32): pid=12513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2413" name="file1" dev="loop1" ino=15 res=0 errno=0
[  296.354593][   T33] audit: type=1800 audit(1757678255.938:33): pid=12513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2413" name="file1" dev="loop1" ino=15 res=0 errno=0
[  296.394369][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.598728][T12511] loop6: detected capacity change from 0 to 40427
[  296.610777][T12511] F2FS-fs (loop6): build fault injection rate: 14
[  296.656508][T12511] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  296.686176][T12511] F2FS-fs (loop6): invalid crc value
[  296.691289][    C0] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  296.723578][    C0] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  296.742345][T12530] loop1: detected capacity change from 0 to 2048
[  296.767465][T12530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.772375][T12530] ext4 filesystem being mounted at /883/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.845168][T12511] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  296.851800][T12511] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  296.858895][T12511] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  296.869750][T12534] loop7: detected capacity change from 0 to 2048
[  296.878038][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.894812][T12511] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  296.905054][T12534] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  296.907940][T12534] UDF-fs: Scanning with blocksize 512 failed
[  296.913227][T12534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.923642][ T7260] F2FS-fs (loop6): inject checkpoint error in f2fs_balance_fs of f2fs_write_inode+0x3fb/0x5f0
[  296.970345][ T7260] CPU: 0 UID: 0 PID: 7260 Comm: kworker/u10:7 Not tainted syzkaller #0 PREEMPT(full) 
[  296.970368][ T7260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  296.970378][ T7260] Workqueue: writeback wb_workfn (flush-7:6)
[  296.970401][ T7260] Call Trace:
[  296.970408][ T7260]  <TASK>
[  296.970415][ T7260]  dump_stack_lvl+0x189/0x250
[  296.970436][ T7260]  ? __pfx_dump_stack_lvl+0x10/0x10
[  296.970452][ T7260]  ? __pfx_queue_work_on+0x10/0x10
[  296.970465][ T7260]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  296.970485][ T7260]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  296.970507][ T7260]  ? f2fs_hw_is_readonly+0x39b/0x470
[  296.970533][ T7260]  f2fs_handle_critical_error+0x37c/0x540
[  296.970558][ T7260]  f2fs_balance_fs+0x32d/0x7f0
[  296.970581][ T7260]  ? f2fs_write_inode+0x3fb/0x5f0
[  296.970597][ T7260]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  296.970636][ T7260]  f2fs_write_inode+0x3fb/0x5f0
[  296.970688][ T7260]  __writeback_single_inode+0x6f1/0xff0
[  296.970714][ T7260]  writeback_sb_inodes+0x6c7/0x1010
[  296.970756][ T7260]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  296.970808][ T7260]  ? __pfx_down_read_trylock+0x10/0x10
[  296.970827][ T7260]  ? __pfx_move_expired_inodes+0x10/0x10
[  296.970858][ T7260]  __writeback_inodes_wb+0x111/0x240
[  296.970883][ T7260]  wb_writeback+0x44f/0xaf0
[  296.970908][ T7260]  ? queue_io+0x3a1/0x590
[  296.970927][ T7260]  ? __pfx_wb_writeback+0x10/0x10
[  296.970960][ T7260]  wb_workfn+0x90b/0xef0
[  296.970989][ T7260]  ? __pfx_wb_workfn+0x10/0x10
[  296.971008][ T7260]  ? __lock_acquire+0xab9/0xd20
[  296.971046][ T7260]  ? _raw_spin_unlock_irq+0x23/0x50
[  296.971063][ T7260]  ? process_scheduled_works+0x9ef/0x17b0
[  296.971076][ T7260]  ? process_scheduled_works+0x9ef/0x17b0
[  296.971091][ T7260]  process_scheduled_works+0xae1/0x17b0
[  296.971133][ T7260]  ? __pfx_process_scheduled_works+0x10/0x10
[  296.971163][ T7260]  worker_thread+0x8a0/0xda0
[  296.971180][ T7260]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  296.971207][ T7260]  ? __kthread_parkme+0x7b/0x200
[  296.971231][ T7260]  kthread+0x711/0x8a0
[  296.971250][ T7260]  ? __pfx_worker_thread+0x10/0x10
[  296.971263][ T7260]  ? __pfx_kthread+0x10/0x10
[  296.971281][ T7260]  ? _raw_spin_unlock_irq+0x23/0x50
[  296.971299][ T7260]  ? lockdep_hardirqs_on+0x9c/0x150
[  296.971311][ T7260]  ? __pfx_kthread+0x10/0x10
[  296.971329][ T7260]  ret_from_fork+0x3fc/0x770
[  296.971347][ T7260]  ? __pfx_ret_from_fork+0x10/0x10
[  296.971369][ T7260]  ? __switch_to_asm+0x39/0x70
[  296.971385][ T7260]  ? __switch_to_asm+0x33/0x70
[  296.971400][ T7260]  ? __pfx_kthread+0x10/0x10
[  296.971418][ T7260]  ret_from_fork_asm+0x1a/0x30
[  296.971450][ T7260]  </TASK>
[  296.971457][ T7260] F2FS-fs (loop6): Stopped filesystem due to reason: 1
[  297.135358][T12543] loop1: detected capacity change from 0 to 256
[  297.138914][T12543] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  297.143135][T12543] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  297.151520][T12543] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  297.192503][   T33] audit: type=1800 audit(1757678256.777:34): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2422" name="file1" dev="loop1" ino=1048666 res=0 errno=0
[  297.235620][T12543] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff)
[  297.239016][T12543] exFAT-fs (loop1): Filesystem has been set read-only
[  297.848861][T12554] loop1: detected capacity change from 0 to 32768
[  297.892945][T12554] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  297.914942][   T33] audit: type=1800 audit(1757678257.527:35): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2425" name="file1" dev="loop1" ino=9553 res=0 errno=0
[  297.973636][   T33] audit: type=1800 audit(1757678257.587:36): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2425" name="file1" dev="loop1" ino=9553 res=0 errno=0
[  298.457878][ T5854] ocfs2: Unmounting device (7,1) on (node local)
[  298.538573][T12570] loop7: detected capacity change from 0 to 32768
[  298.592622][T12570] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section errors: entry with count 0 (id clean_but_journal_not_empty)
[  298.592622][T12570] errors (size 2912):
[  298.592622][T12570] clean_but_journal_not_empty     0               10
[  298.592622][T12570] dirty_but_no_journal_entries    196609          8
[  298.592622][T12570] dirty_but_no_journal_entries    327682          0
[  298.592622][T12570] dirty_but_no_journal_entries    327680          0
[  298.592622][T12570] dirty_but_no_journal_entries    327936          0
[  298.592622][T12570] dirty_but_no_journal_entries    328192          0
[  298.592622][T12570] dirty_but_no_journal_entries    328448          0
[  298.592622][T12570] dirty_but_no_journal_entries_post_drop_nonflushes3932162816
[  298.592622][T12570] subvol_unreachable              1               25769803778
[  298.592622][T12570] clean_but_journal_not_empty     0               65794
[  298.592622][T12570] dirty_but_no_journal_entries_post_drop_nonflushes39321616
[  298.592622][T12570] btree_node_bkey_bad_u64s        1               34359738401
[  298.592622][T12570] clean_but_journal_not_empty     0               0
[  298.592622][T12570] clean_but_journal_not_empty     0               83
[  298.592622][T12570] clean_but_journal_not_empty     0               0
[  298.592622][T12570] journal_entry_clock_bad_size    0               6152
[  298.592622][T12570] inode_bi_subvol
[  298.593046][T12570] bcachefs: bch2_fs_get_tree() error: invalid_sb_errors
[  298.855130][T12589] loop6: detected capacity change from 0 to 4096
[  298.895879][T12591] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  298.961663][T12589] NILFS error (device loop6): nilfs_dotdot: directory #12 missing '.'
[  298.976153][T12589] Remounting filesystem read-only
[  299.004398][T11833] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer
[  299.103558][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2436'.
[  299.195272][T12601] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2439'.
[  299.681417][T12618] loop1: detected capacity change from 0 to 4096
[  299.758816][T12618] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  299.865306][T12618] ntfs3(loop1): ino=0, "file0" ni_find_attr
[  300.247170][T12634] loop6: detected capacity change from 0 to 8
[  300.258938][T12634] SQUASHFS error: Unknown LZ4 version
[  300.266625][T12634] squashfs image failed sanity check
[  300.546328][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  300.696480][    T9] usb 7-1: Using ep0 maxpacket: 16
[  300.702264][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.716419][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.720107][    T9] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  300.723348][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.728921][    T9] usb 7-1: config 0 descriptor??
[  300.744268][T12648] loop1: detected capacity change from 0 to 32768
[  300.788919][T12648] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  300.826137][T12648] XFS (loop1): Ending clean mount
[  300.831632][T12648] XFS (loop1): Quotacheck needed: Please wait.
[  300.895562][T12648] XFS (loop1): Quotacheck: Done.
[  300.996482][ T5854] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  301.113526][T12664] loop7: detected capacity change from 0 to 4096
[  301.184239][T12664] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.220622][T12664] Quota error (device loop7): do_check_range: Getting block 327682 out of range 1-5
[  301.224851][T12664] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  301.234281][T12664] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2466: Failed to acquire dquot type 1
[  301.266144][T12664] Quota error (device loop7): do_check_range: Getting block 327682 out of range 1-5
[  301.274891][T12664] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  301.295614][T12664] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2466: Failed to acquire dquot type 1
[  301.344000][T11979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.818485][    T9] letsketch 0003:6161:4D15.0018: Device info:  
[  301.830627][T12686] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2475'.
[  302.033253][    T9] letsketch 0003:6161:4D15.0018: Device info: 篶
[  302.592283][    T9] usb 7-1: Max retries (5) exceeded reading string descriptor 202
[  302.603435][    T9] letsketch 0003:6161:4D15.0018: probe with driver letsketch failed with error -71
[  302.616172][    T9] usb 7-1: USB disconnect, device number 6
[  303.587213][  T974] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  303.633267][T12716] loop1: detected capacity change from 0 to 32768
[  303.639763][T12716] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2489 (12716)
[  303.655741][T12716] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  303.662507][T12716] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  303.841612][  T974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.845884][  T974] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  303.852319][T12716] BTRFS info (device loop1): enabling ssd optimizations
[  303.853889][  T974] usb 7-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  303.855003][T12716] BTRFS info (device loop1): enabling free space tree
[  303.858637][  T974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.865244][  T974] usb 7-1: config 0 descriptor??
[  303.881561][T12716] BTRFS info (device loop1): force zlib compression, level 3
[  303.971940][ T5854] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  304.244719][T12746] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2495'.
[  304.317704][  T974] megaworld 0003:07B5:0312.0019: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.6-1/input0
[  304.322023][  T974] megaworld 0003:07B5:0312.0019: no inputs found
[  304.366045][T12750] binder: 12749:12750 ioctl 4018620d 0 returned -22
[  304.382224][T12750] binder: 12749:12750 ioctl c0306201 0 returned -14
[  304.537313][  T974] usb 7-1: USB disconnect, device number 7
[  305.304488][T12757] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  305.312739][T12755] loop7: detected capacity change from 0 to 32768
[  305.312883][T12757] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  305.662587][T12755] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  305.662604][T12755]   allowing incompatible features above 0.0: (unknown version)
[  305.662609][T12755]   features: 
[  305.708372][T12755] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  305.716681][T12755] bcachefs (loop7): initializing new filesystem
[  305.739597][T12755] bcachefs (loop7): going read-write
[  305.779270][T12755] bcachefs (loop7): marking superblocks
[  305.801300][T12755] bcachefs (loop7): initializing freespace
[  305.841221][T12755] bcachefs (loop7): done initializing freespace
[  305.850167][T12755] bcachefs (loop7): reading snapshots table
[  305.852586][T12755] bcachefs (loop7): reading snapshots done
[  305.896381][T12755] bcachefs (loop7): done starting filesystem
[  306.004556][T12782] loop6: detected capacity change from 0 to 2048
[  306.046591][T12782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.088773][T11979] bcachefs (loop7): shutting down
[  306.090874][T11979] bcachefs (loop7): going read-only
[  306.093011][T11979] bcachefs (loop7): finished waiting for writes to stop
[  306.112176][T11979] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3
[  306.137425][T11833] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.181727][T11979] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 4
[  306.209054][T11979] bcachefs (loop7): clean shutdown complete, journal seq 5
[  306.212482][T11979] bcachefs (loop7): marking filesystem clean
[  306.272389][T11979] bcachefs (loop7): shutdown complete
[  306.301374][T12793] bpf: Bad value for 'uid'
[  306.302860][T12792] loop1: detected capacity change from 0 to 512
[  306.330631][T12792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.335210][T12792] ext4 filesystem being mounted at /926/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  306.364306][T12792] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2511: corrupted inode contents
[  306.379830][T12792] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2511: mark_inode_dirty error
[  306.385775][T12792] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2511: corrupted inode contents
[  306.393581][T12792] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2511: mark_inode_dirty error
[  306.404234][T12792] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2511: corrupted inode contents
[  306.421788][T12792] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2511: mark_inode_dirty error
[  306.430400][T12792] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2511: corrupted inode contents
[  306.436673][T12792] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2511: corrupted inode contents
[  306.443182][T12792] EXT4-fs error (device loop1): ext4_append:88: inode #2: comm syz.1.2511: mark_inode_dirty error
[  306.447687][T12792] EXT4-fs error (device loop1) in ext4_append:100: Corrupt filesystem
[  306.486328][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.581884][T12801] loop6: detected capacity change from 0 to 2048
[  306.631142][T12801]  loop6: p3 < > p4 < >
[  306.633233][T12801] loop6: partition table partially beyond EOD, truncated
[  306.638070][T12801] loop6: p3 start 4284289 is beyond EOD, truncated
[  306.708648][ T7127] udevd[7127]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  307.676532][T12819] loop1: detected capacity change from 0 to 4096
[  307.867466][ T5901] bridge_slave_1: left allmulticast mode
[  307.869392][ T5901] bridge_slave_1: left promiscuous mode
[  307.871457][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.917339][ T5901] bridge_slave_0: left allmulticast mode
[  307.923827][ T5901] bridge_slave_0: left promiscuous mode
[  307.930489][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.247482][T12831] loop1: detected capacity change from 0 to 32768
[  308.266355][T12831] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  308.452422][ T5854] ocfs2: Unmounting device (7,1) on (node local)
[  308.775250][T12840] loop1: detected capacity change from 0 to 4096
[  308.809819][T12840] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  308.846356][T12840] ntfs3(loop1): Failed to load $Extend (-22).
[  308.849871][T12840] ntfs3(loop1): Failed to initialize $Extend.
[  309.100978][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.115395][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.182636][ T5901] bond0 (unregistering): Released all slaves
[  309.407889][ T5901] bond1 (unregistering): Released all slaves
[  309.656054][T12854] use of bytesused == 0 is deprecated and will be removed in the future,
[  309.663861][T12854] use the actual size instead.
[  309.787180][T12859] loop6: detected capacity change from 0 to 2048
[  309.822840][T12845] loop1: detected capacity change from 0 to 32768
[  309.868354][T12845] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_v2: duplicate journal buckets in ranges 9-10, 9-16
[  309.868354][T12845] journal_v2 (size 40):
[  309.868354][T12845] Buckets:  9-16 9-10
[  309.868354][T12845] 
[  309.880776][T12845] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  309.923447][ T5901] hsr_slave_0: left promiscuous mode
[  309.969399][ T5901] hsr_slave_1: left promiscuous mode
[  309.975395][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.992895][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.224770][T12886] loop1: detected capacity change from 0 to 128
[  311.375740][T12886] syz.1.2543: attempt to access beyond end of device
[  311.375740][T12886] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128
[  311.385146][T12882] loop7: detected capacity change from 0 to 32768
[  311.395005][T12886] syz.1.2543: attempt to access beyond end of device
[  311.395005][T12886] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  311.405120][T12886] syz.1.2543: attempt to access beyond end of device
[  311.405120][T12886] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  311.409849][T12886] syz.1.2543: attempt to access beyond end of device
[  311.409849][T12886] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  311.417160][T12882] 
[  311.417160][T12882]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  311.417160][T12882] 
[  311.429453][T12886] syz.1.2543: attempt to access beyond end of device
[  311.429453][T12886] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  311.435007][T12886] syz.1.2543: attempt to access beyond end of device
[  311.435007][T12886] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  311.457219][ T5901] team0 (unregistering): Port device team_slave_1 removed
[  311.458698][T12886] syz.1.2543: attempt to access beyond end of device
[  311.458698][T12886] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  311.465661][T11979] 
[  311.465661][T11979]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  311.465661][T11979] 
[  311.484823][T12886] syz.1.2543: attempt to access beyond end of device
[  311.484823][T12886] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  311.496260][T12886] syz.1.2543: attempt to access beyond end of device
[  311.496260][T12886] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  311.509929][T11979] 
[  311.509929][T11979]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  311.509929][T11979] 
[  311.551620][T12886] syz.1.2543: attempt to access beyond end of device
[  311.551620][T12886] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  311.590391][ T5901] team0 (unregistering): Port device team_slave_0 removed
[  311.778416][T12897] loop7: detected capacity change from 0 to 256
[  311.824137][T12897] FAT-fs (loop7): Directory bread(block 64) failed
[  311.826301][T12897] FAT-fs (loop7): Directory bread(block 65) failed
[  311.844625][T12897] FAT-fs (loop7): Directory bread(block 66) failed
[  311.857807][T12897] FAT-fs (loop7): Directory bread(block 67) failed
[  311.860118][T12897] FAT-fs (loop7): Directory bread(block 68) failed
[  311.862166][T12897] FAT-fs (loop7): Directory bread(block 69) failed
[  311.864312][T12897] FAT-fs (loop7): Directory bread(block 70) failed
[  311.866584][T12897] FAT-fs (loop7): Directory bread(block 71) failed
[  311.873277][T12897] FAT-fs (loop7): Directory bread(block 72) failed
[  311.876752][T12897] FAT-fs (loop7): Directory bread(block 73) failed
[  312.128199][   T95] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  312.308095][   T95] usb 2-1: config 0 has an invalid interface number: 159 but max is 0
[  312.311662][   T95] usb 2-1: config 0 has no interface number 0
[  312.314141][   T95] usb 2-1: config 0 interface 159 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  312.323709][   T95] usb 2-1: config 0 interface 159 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  312.327964][T12910] vimc link validate: Scaler:src:16x16 (0x33524742, 1, 2, 0, 0) RGB/YUV Capture:snk:1022x2160 (0x30314752, 8, 0, 0, 0)
[  312.345065][   T95] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=86.50
[  312.349053][   T95] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.368890][   T95] usb 2-1: Product: syz
[  312.370593][   T95] usb 2-1: Manufacturer: syz
[  312.372370][   T95] usb 2-1: SerialNumber: syz
[  312.378550][   T95] usb 2-1: config 0 descriptor??
[  312.384636][   T95] HFC-S_USB 2-1:0.159: probe with driver HFC-S_USB failed with error -5
[  312.598440][ T5918] usb 2-1: USB disconnect, device number 31
[  312.885699][T12922] loop7: detected capacity change from 0 to 256
[  312.906236][T12922] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  312.919176][T12922] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  312.924822][T12922] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  313.058350][ T5901] ------------[ cut here ]------------
[  313.060568][ T5901] WARNING: CPU: 1 PID: 5901 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  313.064351][ T5901] Modules linked in:
[  313.067955][ T5901] CPU: 1 UID: 0 PID: 5901 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  313.072439][ T5901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  313.077092][ T5901] Workqueue: netns cleanup_net
[  313.079764][ T5901] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  313.082208][ T5901] Code: 98 ef de f7 4b 83 3c 2c 00 75 19 e8 8c 7d 7b f7 49 81 fd f8 07 00 00 74 1d e8 7e 7d 7b f7 49 83 c5 08 eb c9 e8 73 7d 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  313.090944][ T5901] RSP: 0018:ffffc90003a8f8b0 EFLAGS: 00010293
[  313.093340][ T5901] RAX: ffffffff8a44316d RBX: ffff888110760000 RCX: ffff888109ce9cc0
[  313.096479][ T5901] RDX: 0000000000000000 RSI: ffffffff8d9b97c6 RDI: ffff888110760000
[  313.100545][ T5901] RBP: ffffc90003a8f9b0 R08: ffffffff8fa3a037 R09: 1ffffffff1f47406
[  313.103650][ T5901] R10: dffffc0000000000 R11: fffffbfff1f47407 R12: ffff888110760000
[  313.107155][ T5901] R13: 0000000000000000 R14: ffff88802907a440 R15: dffffc0000000000
[  313.110819][ T5901] FS:  0000000000000000(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  313.114349][ T5901] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  313.117199][ T5901] CR2: 00007fee687b6940 CR3: 00000001118d8000 CR4: 00000000000006f0
[  313.120357][ T5901] Call Trace:
[  313.121729][ T5901]  <TASK>
[  313.122935][ T5901]  ops_undo_list+0x49a/0x990
[  313.125197][ T5901]  ? __pfx_ops_undo_list+0x10/0x10
[  313.127258][ T5901]  ? do_raw_spin_unlock+0x4d/0x240
[  313.129538][ T5901]  cleanup_net+0x4c5/0x800
[  313.131424][ T5901]  ? __pfx_cleanup_net+0x10/0x10
[  313.133515][ T5901]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.135717][ T5901]  ? process_scheduled_works+0x9ef/0x17b0
[  313.138279][ T5901]  ? process_scheduled_works+0x9ef/0x17b0
[  313.140631][ T5901]  process_scheduled_works+0xae1/0x17b0
[  313.142897][ T5901]  ? __pfx_process_scheduled_works+0x10/0x10
[  313.145313][ T5901]  worker_thread+0x8a0/0xda0
[  313.147199][ T5901]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  313.149859][ T5901]  ? __kthread_parkme+0x7b/0x200
[  313.151879][ T5901]  kthread+0x711/0x8a0
[  313.153516][ T5901]  ? __pfx_worker_thread+0x10/0x10
[  313.155580][ T5901]  ? __pfx_kthread+0x10/0x10
[  313.157367][ T5901]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.159571][ T5901]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.161604][ T5901]  ? __pfx_kthread+0x10/0x10
[  313.163489][ T5901]  ret_from_fork+0x3fc/0x770
[  313.165331][ T5901]  ? __pfx_ret_from_fork+0x10/0x10
[  313.167391][ T5901]  ? __switch_to_asm+0x39/0x70
[  313.169403][ T5901]  ? __switch_to_asm+0x33/0x70
[  313.171339][ T5901]  ? __pfx_kthread+0x10/0x10
[  313.173209][ T5901]  ret_from_fork_asm+0x1a/0x30
[  313.175178][ T5901]  </TASK>
[  313.176436][ T5901] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  313.179264][ T5901] CPU: 1 UID: 0 PID: 5901 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  313.182821][ T5901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  313.186733][ T5901] Workqueue: netns cleanup_net
[  313.188675][ T5901] Call Trace:
[  313.190043][ T5901]  <TASK>
[  313.191311][ T5901]  dump_stack_lvl+0x99/0x250
[  313.193299][ T5901]  ? __asan_memcpy+0x40/0x70
[  313.195295][ T5901]  ? __pfx_dump_stack_lvl+0x10/0x10
[  313.197611][ T5901]  ? __pfx__printk+0x10/0x10
[  313.199952][ T5901]  vpanic+0x281/0x750
[  313.201562][ T5901]  ? __pfx__printk+0x10/0x10
[  313.203388][ T5901]  ? __pfx_vpanic+0x10/0x10
[  313.205182][ T5901]  ? is_bpf_text_address+0x292/0x2b0
[  313.207303][ T5901]  panic+0xb9/0xc0
[  313.208912][ T5901]  ? __pfx_panic+0x10/0x10
[  313.210688][ T5901]  __warn+0x31b/0x4b0
[  313.212292][ T5901]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  313.214513][ T5901]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  313.216709][ T5901]  report_bug+0x2be/0x4f0
[  313.218475][ T5901]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  313.220645][ T5901]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  313.222801][ T5901]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  313.224958][ T5901]  handle_bug+0x84/0x160
[  313.226673][ T5901]  exc_invalid_op+0x1a/0x50
[  313.228507][ T5901]  asm_exc_invalid_op+0x1a/0x20
[  313.230467][ T5901] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  313.232997][ T5901] Code: 98 ef de f7 4b 83 3c 2c 00 75 19 e8 8c 7d 7b f7 49 81 fd f8 07 00 00 74 1d e8 7e 7d 7b f7 49 83 c5 08 eb c9 e8 73 7d 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  313.240720][ T5901] RSP: 0018:ffffc90003a8f8b0 EFLAGS: 00010293
[  313.243130][ T5901] RAX: ffffffff8a44316d RBX: ffff888110760000 RCX: ffff888109ce9cc0
[  313.246226][ T5901] RDX: 0000000000000000 RSI: ffffffff8d9b97c6 RDI: ffff888110760000
[  313.249475][ T5901] RBP: ffffc90003a8f9b0 R08: ffffffff8fa3a037 R09: 1ffffffff1f47406
[  313.252605][ T5901] R10: dffffc0000000000 R11: fffffbfff1f47407 R12: ffff888110760000
[  313.255755][ T5901] R13: 0000000000000000 R14: ffff88802907a440 R15: dffffc0000000000
[  313.258869][ T5901]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  313.261041][ T5901]  ops_undo_list+0x49a/0x990
[  313.262916][ T5901]  ? __pfx_ops_undo_list+0x10/0x10
[  313.264897][ T5901]  ? do_raw_spin_unlock+0x4d/0x240
[  313.266861][ T5901]  cleanup_net+0x4c5/0x800
[  313.268665][ T5901]  ? __pfx_cleanup_net+0x10/0x10
[  313.270658][ T5901]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.272744][ T5901]  ? process_scheduled_works+0x9ef/0x17b0
[  313.275007][ T5901]  ? process_scheduled_works+0x9ef/0x17b0
[  313.277268][ T5901]  process_scheduled_works+0xae1/0x17b0
[  313.279516][ T5901]  ? __pfx_process_scheduled_works+0x10/0x10
[  313.281950][ T5901]  worker_thread+0x8a0/0xda0
[  313.283821][ T5901]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  313.286346][ T5901]  ? __kthread_parkme+0x7b/0x200
[  313.288337][ T5901]  kthread+0x711/0x8a0
[  313.289981][ T5901]  ? __pfx_worker_thread+0x10/0x10
[  313.291992][ T5901]  ? __pfx_kthread+0x10/0x10
[  313.293855][ T5901]  ? _raw_spin_unlock_irq+0x23/0x50
[  313.295921][ T5901]  ? lockdep_hardirqs_on+0x9c/0x150
[  313.297933][ T5901]  ? __pfx_kthread+0x10/0x10
[  313.299729][ T5901]  ret_from_fork+0x3fc/0x770
[  313.301600][ T5901]  ? __pfx_ret_from_fork+0x10/0x10
[  313.303582][ T5901]  ? __switch_to_asm+0x39/0x70
[  313.305488][ T5901]  ? __switch_to_asm+0x33/0x70
[  313.307377][ T5901]  ? __pfx_kthread+0x10/0x10
[  313.309218][ T5901]  ret_from_fork_asm+0x1a/0x30
[  313.311065][ T5901]  </TASK>
[  313.312900][ T5901] Kernel Offset: disabled
[  313.314657][ T5901] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:54:14  Registers:
info registers vcpu 0

CPU#0
RAX=00007fb86694d6f0 RBX=00007fb866a83928 RCX=00007fb866b71a80 RDX=00007fb8669fc320
RSI=0000000000001000 RDI=00007fb8668e33c0 RBP=00007ffe76b25410 RSP=00007ffe76b25310
R8 =00007ffe76b25288 R9 =00007fb866b39500 R10=00007fb866a78c88 R11=0000000000000007
R12=00007fb866b39000 R13=00007fb866940a89 R14=00007fb866b37868 R15=00007fb866b3ab70
RIP=00007fb866b500e9 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb866838380 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb866a2c8e5 CR3=00000000276c1000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ff000000 0000000000000000 XMM01=0000000000ffffff ffffffffffffffff
XMM02=0200000000352e32 2e325f4342494c47 XMM03=0000000034366461 657270006c6c6f74
XMM04=6766007469617764 656d697467697300 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000049 RBX=0000000000000049 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003a8f050
R8 =ffff8881006d0237 R9 =1ffff110200da046 R10=dffffc0000000000 R11=ffffffff854f6ec0
R12=dffffc0000000000 R13=ffffffff99b008e7 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f6f3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fee687b6940 CR3=00000001118d8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ff00000000ff 000000ff00000000 XMM05=0000000000000061 0000000000000036
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffff00 XMM09=2e6364755f796d6d 75642f6364752f36
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
