last executing test programs:

5.722989011s ago: executing program 1 (id=305):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
listen(r0, 0x100)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000015c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x8000}, 0x20000000)

4.662920034s ago: executing program 1 (id=313):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/3, 0x3}, 0x9}], 0x1, 0x60010020, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

4.408487099s ago: executing program 1 (id=316):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x1)

4.072541069s ago: executing program 0 (id=321):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file1\x00', 0x2008000, &(0x7f00000002c0)=ANY=[@ANYBLOB="696f636861727365743d6370313235302c6e6f6164696e6963622c6e6f6164696e6963622c73686f727461642c7569643d666f726765742c6769643d666f726765742c6769643d69676e6f72652c6e6f6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c00508d5c6fd14a140518c2f8949ec502a29ec1c3795fd47c03a3a72c97984a3502b51d8bfa33ab6090f2e4dc00fe8ed0b41f905b98973a0ca9e4c5eea9e8f394f5f12b6f8f8f86dda2c5d5dd18d0075da59034af306372c1b6cf04e02375a1f7ce9a910a4fc47c7e3a34fd"], 0x2, 0xc40, &(0x7f0000002740)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0)
pwritev(r0, &(0x7f00000012c0)=[{&(0x7f0000000140)="c8", 0x1}], 0x1, 0x0, 0x0)
r1 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0)
ftruncate(r1, 0x9)

4.06456501s ago: executing program 3 (id=322):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@resuid}, {@test_dummy_encryption}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82640, 0x8)

3.858579332s ago: executing program 0 (id=323):
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

3.39122682s ago: executing program 1 (id=324):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])

3.38898537s ago: executing program 3 (id=325):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x207)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

2.925199427s ago: executing program 3 (id=326):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000088000/0x2000)=nil, 0x2000, 0x9)

2.36918229s ago: executing program 0 (id=327):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x0, 0x82)
close(0x3)
open_by_handle_at(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000002000000"], 0x0)
syz_fuse_handle_req(r0, &(0x7f0000006900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a25000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d6d7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.36818233s ago: executing program 1 (id=328):
r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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")
setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000008380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)=r2)

2.009533461s ago: executing program 2 (id=329):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)

1.814771952s ago: executing program 2 (id=330):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
unshare(0x8000600)
fdatasync(r0)

1.386190018s ago: executing program 3 (id=331):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x400, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0xd)
sendfile(r1, r0, 0x0, 0x38)

1.334878131s ago: executing program 0 (id=332):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
tkill(r1, 0xb)

1.153677552s ago: executing program 3 (id=333):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)='!', 0x1}], 0x1}, 0x54)
sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x40000)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ed60d053e84119f4fe054ddfda622fb564500005023e3f58e76110165f450e71b0075e3002500028d459e36fff60000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000010)

1.142170532s ago: executing program 2 (id=334):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000002780)={[{@utf8no}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@fat=@showexec}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@utf8no}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8}, {@shortname_mixed}, {@shortname_win95}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1255'}}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$eJzs3c9qK1UcB/DfpGkSdZEsXInigC5cXW7vE6RIL1zMSslCXah4b0GaILRQ8A/GrgRXblz6BILQnS/hxjfwAQR3dlE4MslMk9Q07UDT+ufz2fT0nPOd8zuTaUsXOfnw5fHB0zz2T778LTqdLBr96MdZFr1oROXrWNL/LgCAf7OzlOKPNFMnl0VEZ3NlAQAbVPvv/+nGSwIANuydd997a3cw2Hs7zzvxePzN8bD4z774Ohvf3Y9PYhTP4mF04zwiXZi1H6eUJs280IvXx5PjYZEcf/BLef3d3yOm+Z3oRm/atZx/MtjbyWcW8pOijufL9ftF/lF048UV6z8Z7D1akY9hK954baH+B9GNXz+OT2MUT6dFzPNf7eT5m+n7P794vyivyGeT42F7Om8ubd3xSwMAAAAAAAAAAAAAAAAAAAAAwH/Yg/LsnHZMz+8pusrzd7bOi2+2I6/0ls/nmeWz6kKXzgeapPihOl/nYZ7nqZw4zzfjpWY072fXAAAAAAAAAAAAAAAAAAAA8M9y9NnnBx+NRs8Ob6VRnQZQva2//nVOp6n+Qs+rsT7Vnq/VKJtrloitak4WsbaeYhO3dFuuazx3Vc0//lT3gp3r52wXa3VucRfVy73QE1VPtvoeti8md6qH5OeqJ6WUWnHD1VtXDaVaj19r5VC39t1ovTBtTNbMieyqwr59Zf5zWQ5ll3fRWrrPS43tsrEQv/Rs1Hqe//67InNaBwAAAAAAAAAAAAAAAAAAbNT8Tb8rBk/WRhupvbGyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBOzT//v0ZjUoZvMLkVh0f3vEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4KAAD//+KpXP8=")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]})
mount$nfs(&(0x7f0000000100)='{.', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x81)

780.976303ms ago: executing program 1 (id=335):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r2, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000)

734.390446ms ago: executing program 0 (id=336):
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000001c0)={0x1, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4)
symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
fadvise64(r0, 0xe0ffff, 0x9, 0x3)

654.577971ms ago: executing program 2 (id=337):
socket$inet(0x2, 0x3, 0x8d)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}}, 0x10)

412.825945ms ago: executing program 2 (id=338):
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='coredump_filter\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])
r1 = syz_io_uring_setup(0x2e3b, &(0x7f0000000240)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000200)=[{&(0x7f00000018c0)=""/15, 0xf}, {0x0}], 0x2})
io_uring_enter(r1, 0x567, 0xa1ff, 0x5, 0x0, 0x0)

196.313078ms ago: executing program 0 (id=339):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x12, &(0x7f0000000100), 0x1, 0x4c9, &(0x7f0000000b40)="$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")
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0xf8)
getdents64(r0, 0x0, 0x22)

37.721007ms ago: executing program 2 (id=340):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60)
listen(r0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)

0s ago: executing program 3 (id=341):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001940)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@tipc_packet={0x9, 0x6, "d528ac", 0x44, 0x6, 0x1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x5, 0x0, 0x1, 0x6, 0x1, 0x3, 0x4e23, 0x4e24, 0x3}, [{0x12, 0x4, 0x10001, 0xffffff49, 0x6, 0x5, 0x2, 0xf}]}}}}}, 0x7e)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts.
[   83.079172][ T5755] cgroup: Unknown subsys name 'net'
[   83.216282][ T5755] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.907810][ T5755] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.908290][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.918486][ T5768] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.926490][ T5768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.934826][ T5768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.942828][ T5768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   86.950411][ T5768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.990788][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.999710][ T5768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.014423][ T5082] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.028740][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.038412][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   87.046750][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.075582][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.098391][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.106472][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.115968][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.124705][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.133516][ T5768] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   87.133752][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.148775][ T5768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.156502][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.199193][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.229758][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   87.237955][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.699359][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   87.956177][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   87.971540][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.979961][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.988070][ T5770] bridge_slave_0: entered allmulticast mode
[   87.995741][ T5770] bridge_slave_0: entered promiscuous mode
[   88.005225][ T5766] chnl_net:caif_netlink_parms(): no params data found
[   88.040220][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.047738][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.054963][ T5770] bridge_slave_1: entered allmulticast mode
[   88.063024][ T5770] bridge_slave_1: entered promiscuous mode
[   88.121146][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   88.163891][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.195483][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.280660][ T5770] team0: Port device team_slave_0 added
[   88.297715][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.307408][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.314873][ T5775] bridge_slave_0: entered allmulticast mode
[   88.322535][ T5775] bridge_slave_0: entered promiscuous mode
[   88.338398][ T5770] team0: Port device team_slave_1 added
[   88.344501][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.354397][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.362731][ T5766] bridge_slave_0: entered allmulticast mode
[   88.370703][ T5766] bridge_slave_0: entered promiscuous mode
[   88.379107][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.386233][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.394092][ T5766] bridge_slave_1: entered allmulticast mode
[   88.401749][ T5766] bridge_slave_1: entered promiscuous mode
[   88.409015][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.416244][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.424034][ T5775] bridge_slave_1: entered allmulticast mode
[   88.431559][ T5775] bridge_slave_1: entered promiscuous mode
[   88.479163][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.516584][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.580028][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.587134][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.616999][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.638205][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.651253][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.664819][ T5766] team0: Port device team_slave_0 added
[   88.675948][ T5766] team0: Port device team_slave_1 added
[   88.682481][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.689912][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.697170][ T5776] bridge_slave_0: entered allmulticast mode
[   88.704454][ T5776] bridge_slave_0: entered promiscuous mode
[   88.713508][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.720648][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.746829][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.798607][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.805798][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.815994][ T5776] bridge_slave_1: entered allmulticast mode
[   88.823194][ T5776] bridge_slave_1: entered promiscuous mode
[   88.865889][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.872968][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.898988][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.922448][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.929507][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.955489][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.993043][ T5770] hsr_slave_0: entered promiscuous mode
[   89.000307][ T5770] hsr_slave_1: entered promiscuous mode
[   89.008370][ T5773] Bluetooth: hci0: command tx timeout
[   89.023694][ T5775] team0: Port device team_slave_0 added
[   89.034683][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.048719][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.071508][ T5775] team0: Port device team_slave_1 added
[   89.088272][ T5773] Bluetooth: hci1: command tx timeout
[   89.156949][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.164132][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.190734][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.225592][ T5776] team0: Port device team_slave_0 added
[   89.232788][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.240529][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.267493][ T5773] Bluetooth: hci3: command tx timeout
[   89.273260][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.303402][ T5766] hsr_slave_0: entered promiscuous mode
[   89.310424][ T5766] hsr_slave_1: entered promiscuous mode
[   89.316948][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.325524][ T5766] Cannot create hsr debugfs directory
[   89.331078][ T5773] Bluetooth: hci2: command tx timeout
[   89.341061][ T5776] team0: Port device team_slave_1 added
[   89.446646][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.453928][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.480050][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.531516][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.539208][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.565641][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.595103][ T5775] hsr_slave_0: entered promiscuous mode
[   89.601743][ T5775] hsr_slave_1: entered promiscuous mode
[   89.609547][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.617163][ T5775] Cannot create hsr debugfs directory
[   89.747569][ T5776] hsr_slave_0: entered promiscuous mode
[   89.754235][ T5776] hsr_slave_1: entered promiscuous mode
[   89.760955][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.768669][ T5776] Cannot create hsr debugfs directory
[   89.925396][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.965088][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.975365][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   90.012620][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.126990][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.152523][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.172941][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.184376][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.284154][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.295483][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.306867][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.334640][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.431573][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.468977][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.476118][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.486841][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.511810][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.574076][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.590215][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   90.624687][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.632291][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.663002][ T5766] 8021q: adding VLAN 0 to HW filter on device team0
[   90.692343][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.699569][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.731645][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.738959][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.750191][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.757464][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.918866][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.985692][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.005393][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   91.052158][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.059377][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.087687][ T5773] Bluetooth: hci0: command tx timeout
[   91.099749][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.106964][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.141863][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   91.168292][ T5773] Bluetooth: hci1: command tx timeout
[   91.196922][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.204183][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.260876][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.268139][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.329241][ T5773] Bluetooth: hci3: command tx timeout
[   91.375689][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.393446][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   91.407519][ T5773] Bluetooth: hci2: command tx timeout
[   91.415820][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.575482][ T5766] veth0_vlan: entered promiscuous mode
[   91.643604][ T5766] veth1_vlan: entered promiscuous mode
[   91.661608][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.782815][ T5766] veth0_macvtap: entered promiscuous mode
[   91.803930][ T5766] veth1_macvtap: entered promiscuous mode
[   91.833683][ T5770] veth0_vlan: entered promiscuous mode
[   91.883183][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.913693][ T5770] veth1_vlan: entered promiscuous mode
[   91.936092][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.962396][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.000028][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.009202][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.019095][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.028494][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.062725][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.103135][ T5770] veth0_macvtap: entered promiscuous mode
[   92.115981][ T5770] veth1_macvtap: entered promiscuous mode
[   92.204623][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.219470][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.231565][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.246635][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.258308][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.270857][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.281229][ T5776] veth0_vlan: entered promiscuous mode
[   92.299155][   T27] cfg80211: failed to load regulatory.db
[   92.335771][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.344726][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.356881][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.366117][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.406914][ T5776] veth1_vlan: entered promiscuous mode
[   92.418335][ T5775] veth0_vlan: entered promiscuous mode
[   92.428333][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.436410][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.530784][ T5775] veth1_vlan: entered promiscuous mode
[   92.551573][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.559538][ T5776] veth0_macvtap: entered promiscuous mode
[   92.569756][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.604445][ T5776] veth1_macvtap: entered promiscuous mode
[   92.689866][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.701799][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.712937][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.724325][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.737067][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.747601][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.764816][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.800272][ T5775] veth0_macvtap: entered promiscuous mode
[   92.822915][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.848782][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.877376][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.895867][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.918936][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.946921][ T5775] veth1_macvtap: entered promiscuous mode
[   92.965830][  T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.976605][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.986437][  T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.995239][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.006390][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.023613][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.114199][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.130989][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.141373][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.152094][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.163484][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.173209][ T5773] Bluetooth: hci0: command tx timeout
[   93.181509][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.194552][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.247959][ T5773] Bluetooth: hci1: command tx timeout
[   93.248699][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.272688][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.282694][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.295356][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.305486][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.328796][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.348770][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.357773][ T5811] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   93.399804][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.409482][ T5773] Bluetooth: hci3: command tx timeout
[   93.416016][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.425608][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.434853][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.476847][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.487926][ T5773] Bluetooth: hci2: command tx timeout
[   93.500194][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.549871][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.567975][ T5811] usb 4-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[   93.580130][ T5811] usb 4-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[   93.602027][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.628453][ T5811] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67
[   93.646021][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.677646][ T5811] usb 4-1: Product: syz
[   93.682062][ T5811] usb 4-1: Manufacturer: syz
[   93.686728][ T5811] usb 4-1: SerialNumber: syz
[   93.861775][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.891796][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.963569][ T5811] usb 4-1: USB disconnect, device number 2
[   93.983420][  T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.019977][  T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.220917][ T5869] syz.1.2[5869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   94.374109][ T1145] Bluetooth: hci4: Frame reassembly failed (-84)
[   94.472512][ T5871] loop0: detected capacity change from 0 to 2048
[   94.550474][ T5871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.207254][    C1] sched: RT throttling activated
[   95.249072][ T5082] Bluetooth: hci0: command tx timeout
[   95.328433][ T5082] Bluetooth: hci1: command tx timeout
[   95.419175][ T5869] loop1: detected capacity change from 0 to 131072
[   95.432584][ T5869] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[   95.441011][ T5869] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   95.454410][ T5869] F2FS-fs (loop1): invalid crc value
[   95.491962][ T5082] Bluetooth: hci3: command tx timeout
[   95.506139][ T5869] F2FS-fs (loop1): Found nat_bits in checkpoint
[   95.568837][ T5082] Bluetooth: hci2: command tx timeout
[   95.592488][ T5869] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   95.599995][ T5869] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   96.067156][ T5878] loop0: detected capacity change from 0 to 32768
[   96.089713][ T5878] =======================================================
[   96.089713][ T5878] WARNING: The mand mount option has been deprecated and
[   96.089713][ T5878]          and is ignored by this kernel. Remove the mand
[   96.089713][ T5878]          option from the mount to silence this warning.
[   96.089713][ T5878] =======================================================
[   96.092566][ T5889] netlink: 'syz.3.14': attribute type 34 has an invalid length.
[   96.124794][    C1] vkms_vblank_simulate: vblank timer overrun
[   96.215964][ T5878] JBD2: Ignoring recovery information on journal
[   96.368290][ T5773] Bluetooth: hci4: Opcode 0x1003 failed: -110
[   96.439077][ T5878] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   96.618780][ T5895] loop2: detected capacity change from 0 to 1024
[   96.846797][   T28] audit: type=1800 audit(1768921417.011:2): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.16" name="file1" dev="loop2" ino=2 res=0 errno=0
[   96.982090][ T5895] hfsplus: b-tree write err: -5, ino 3
[   96.998305][ T5900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18'.
[   97.018585][ T5776] ocfs2: Unmounting device (7,0) on (node local)
[   97.787980][ T5920] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   98.086978][ T5928] loop2: detected capacity change from 0 to 512
[   98.776816][ T5938] mmap: syz.2.31 (5938) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   98.955158][ T5932] loop3: detected capacity change from 0 to 32768
[   99.176004][ T5932] syz.3.28: attempt to access beyond end of device
[   99.176004][ T5932] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[   99.229721][ T5932] metapage_write_end_io: I/O error
[   99.253860][  T113] blkno = 8ed2c, nblocks = 1
[   99.261614][ T5932] blkno = 8ed2c, nblocks = 1
[   99.266295][  T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[   99.266295][  T113] 
[   99.278849][  T113] ERROR: (device loop3): remounting filesystem as read-only
[   99.297355][ T5932] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[   99.297355][ T5932] 
[   99.328740][ T5932] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt
[   99.328740][ T5932] 
[   99.354632][ T5932] jfs_mkdir: dtSearch returned -5
[   99.410041][ T5932] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt
[   99.410041][ T5932] 
[   99.427416][ T5932] jfs_readdir: unexpected rc = -5 from dtReadNext
[   99.469222][ T5766] syz-executor: attempt to access beyond end of device
[   99.469222][ T5766] loop3: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[   99.501177][ T5766] metapage_write_end_io: I/O error
[   99.506701][ T5766] JFS: metapage_get_blocks failed
[   99.517858][ T5766] JFS: metapage_get_blocks failed
[   99.522999][ T5766] JFS: metapage_get_blocks failed
[   99.527804][ T5811] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   99.537385][ T5766] JFS: metapage_get_blocks failed
[   99.560374][ T5936] loop0: detected capacity change from 0 to 32768
[   99.611312][ T5936] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   99.720461][ T5936] XFS (loop0): Ending clean mount
[   99.753556][ T5811] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   99.763852][ T5811] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   99.782549][ T5811] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   99.795191][ T5936] XFS (loop0): Quotacheck needed: Please wait.
[   99.809188][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.933808][ T5936] XFS (loop0): Quotacheck: Done.
[   99.985638][ T5954] netlink: 'syz.2.35': attribute type 10 has an invalid length.
[  100.016591][ T5954] bond0: (slave bond_slave_0): Releasing backup interface
[  100.097716][ T5811] usb 2-1: usb_control_msg returned -32
[  100.103597][ T5811] usbtmc 2-1:16.0: can't read capabilities
[  100.167858][ T5936] XFS (loop0): User initiated shutdown received.
[  100.239828][ T5936] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  100.272785][ T5936] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  100.335934][ T5776] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  100.530134][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'.
[  100.554356][ T5962] netlink: 'syz.2.38': attribute type 30 has an invalid length.
[  100.571151][ T5962] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.580745][ T5962] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.589903][ T5962] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.599017][ T5962] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.624007][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'.
[  100.660320][ T5963] netlink: 'syz.2.38': attribute type 30 has an invalid length.
[  100.713593][    T9] usb 2-1: USB disconnect, device number 2
[  100.745615][ T5963] Zero length message leads to an empty skb
[  100.963680][ T5967] loop2: detected capacity change from 0 to 512
[  101.066150][ T5969] input: syz0 as /devices/virtual/input/input5
[  101.228617][ T5957] loop3: detected capacity change from 0 to 40427
[  101.242157][ T5957] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  101.292358][ T5957] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  101.354046][ T5957] F2FS-fs (loop3): invalid crc value
[  101.409613][ T5957] F2FS-fs (loop3): Found nat_bits in checkpoint
[  101.591527][ T5957] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  101.617913][ T5957] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  101.698949][ T5980] warning: `syz.1.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  101.945197][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'.
[  102.025520][ T5985] bond_slave_0: entered promiscuous mode
[  102.031584][ T5985] bond_slave_1: entered promiscuous mode
[  102.086186][ T5985] macvlan2: entered promiscuous mode
[  102.106719][ T5982] loop2: detected capacity change from 0 to 8192
[  102.129556][ T5985] bond0: entered promiscuous mode
[  102.140788][ T5985] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  102.315655][ T5766] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  102.343126][ T5766] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  102.370849][ T5766] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  102.389000][ T5766] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  102.409441][ T5766] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  102.423071][ T5766] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  102.442338][ T5766] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  102.503221][ T5994] loop1: detected capacity change from 0 to 256
[  102.530403][ T5994] exfat: Deprecated parameter 'utf8'
[  102.538367][ T5994] exfat: Deprecated parameter 'namecase'
[  102.544432][ T5994] exfat: Deprecated parameter 'namecase'
[  102.575819][ T5994] exfat: Deprecated parameter 'utf8'
[  102.652336][ T5994] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xceb7fc1e, utbl_chksum : 0xe619d30d)
[  102.891042][ T5991] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  102.904823][ T5991] FAT-fs (loop2): Filesystem has been set read-only
[  102.958885][ T5992] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  103.697628][ T5854] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  103.716774][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  103.766420][ T5996] loop1: detected capacity change from 0 to 32768
[  103.794599][ T5996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.50 (5996)
[  103.841787][ T5996] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.866648][ T5996] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  103.896104][ T5996] BTRFS info (device loop1): force clearing of disk cache
[  103.898102][ T5854] usb 4-1: Using ep0 maxpacket: 32
[  103.918098][ T5996] BTRFS info (device loop1): enabling auto defrag
[  103.924626][ T5996] BTRFS info (device loop1): enabling ssd optimizations
[  103.933734][ T5854] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.958117][ T5996] BTRFS info (device loop1): max_inline at 0
[  103.963367][ T5854] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.974928][ T5996] BTRFS info (device loop1): enabling disk space caching
[  104.000228][ T5854] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  104.007519][ T5996] BTRFS info (device loop1): disk space caching is enabled
[  104.022396][ T5854] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  104.037878][ T5854] usb 4-1: Product: syz
[  104.042927][ T5854] usb 4-1: Manufacturer: syz
[  104.075097][ T5854] hub 4-1:4.0: USB hub found
[  104.143109][ T5996] BTRFS info (device loop1): rebuilding free space tree
[  104.255992][ T5996] BTRFS info (device loop1): disabling free space tree
[  104.303029][ T5996] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  104.341941][ T5854] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  104.364151][ T5996] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  104.440007][ T5854] usb 4-1: USB disconnect, device number 3
[  104.458462][ T6031] syz.2.57 uses obsolete (PF_INET,SOCK_PACKET)
[  104.577644][ T5153] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  104.641671][ T6034] input: syz0 as /devices/virtual/input/input6
[  104.798625][ T5153] usb 1-1: Using ep0 maxpacket: 8
[  104.809617][ T5153] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  104.831512][ T1115] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  104.844106][ T5153] usb 1-1: config 179 has no interface number 0
[  104.856756][ T5153] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  104.884798][ T5153] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  104.900882][ T6037] loop2: detected capacity change from 0 to 64
[  104.906962][ T5153] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  104.946576][ T5153] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  104.997014][ T5153] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  105.058146][ T5153] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  105.080418][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.118620][ T6028] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  105.180026][ T5775] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.655443][ T6045] loop2: detected capacity change from 0 to 512
[  105.689480][ T5153] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7
[  105.715771][ T6044] loop3: detected capacity change from 0 to 2048
[  105.844935][ T6044] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.877370][ T6045] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  106.187507][ T5811] usb 1-1: USB disconnect, device number 2
[  106.187796][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  106.202210][    C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending?
[  106.218598][ T5811] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  106.434046][ T6051] syzkaller1: entered promiscuous mode
[  106.447582][ T6051] syzkaller1: entered allmulticast mode
[  106.959553][ T6055] loop1: detected capacity change from 0 to 32768
[  106.975636][ T6055] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.67 (6055)
[  107.028017][ T6055] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.038673][ T6055] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  107.049396][ T6055] BTRFS info (device loop1): using free space tree
[  107.056129][ T6067] loop0: detected capacity change from 0 to 136
[  107.168186][ T6055] BTRFS info (device loop1): enabling ssd optimizations
[  107.175235][ T6055] BTRFS info (device loop1): auto enabling async discard
[  107.233698][ T6055] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.535912][ T6087] input: syz0 as /devices/virtual/input/input8
[  107.737394][   T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  107.904214][ T6091] loop3: detected capacity change from 0 to 4096
[  107.930324][   T23] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  107.959239][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.988112][ T6091] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  108.003735][   T23] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  108.028380][ T6091] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing.
[  108.038643][   T23] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  108.064538][ T6091] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  108.068353][   T23] usb 1-1: Manufacturer: syz
[  108.094866][ T6096] loop5: detected capacity change from 0 to 2271
[  108.102751][ T6091] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  108.122555][   T23] usb 1-1: config 0 descriptor??
[  108.159921][ T6099] loop5: detected capacity change from 2271 to 3335
[  108.261672][ T6091] ntfs: volume version 3.1.
[  108.277955][   T23] rc_core: IR keymap rc-hauppauge not found
[  108.295795][   T23] Registered IR keymap rc-empty
[  108.330006][   T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  108.394416][   T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9
[  108.451044][    C1] igorplugusb 1-1:0.0: Error: urb status = -32
[  108.478918][   T23] usb 1-1: USB disconnect, device number 3
[  109.013899][ T6098] loop1: detected capacity change from 0 to 32768
[  109.715689][ T6119] loop0: detected capacity change from 0 to 64
[  110.032695][ T6111] loop2: detected capacity change from 0 to 32768
[  110.093746][ T6111] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  110.127747][ T6125] loop3: detected capacity change from 0 to 2048
[  110.163065][ T6125] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  110.198473][ T6137] loop1: detected capacity change from 0 to 16
[  110.215998][ T6137] erofs: (device loop1): mounted with root inode @ nid 36.
[  110.234550][ T6125] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.271052][ T6111] XFS (loop2): Ending clean mount
[  110.326492][ T6111] XFS (loop2): Quotacheck needed: Please wait.
[  110.457708][ T6111] XFS (loop2): Quotacheck: Done.
[  110.505228][ T5775] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 46
[  110.550458][ T5775] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  110.588928][ T5775] erofs: (device loop1): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  110.786304][ T5770] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  111.071485][   T28] audit: type=1326 audit(1768921431.241:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd119acb9 code=0x7ffc0000
[  111.146209][   T28] audit: type=1326 audit(1768921431.241:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd119acb9 code=0x7ffc0000
[  111.200430][   T28] audit: type=1326 audit(1768921431.241:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd119acb9 code=0x7ffc0000
[  111.257353][   T28] audit: type=1326 audit(1768921431.241:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd119acb9 code=0x7ffc0000
[  111.317355][   T28] audit: type=1326 audit(1768921431.251:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbfd119acb9 code=0x7ffc0000
[  111.373769][   T28] audit: type=1326 audit(1768921431.251:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6145 comm="syz.3.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfd119acb9 code=0x7ffc0000
[  111.523099][ T6132] loop0: detected capacity change from 0 to 40427
[  111.546579][ T6153] loop1: detected capacity change from 0 to 1024
[  111.568340][ T6153] EXT4-fs: Ignoring removed nobh option
[  111.586996][ T6132] F2FS-fs (loop0): invalid crc value
[  111.587767][ T6153] EXT4-fs: inline encryption not supported
[  111.648862][ T6132] F2FS-fs (loop0): Found nat_bits in checkpoint
[  111.659474][ T6153] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  111.761741][ T6153] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.806426][ T6132] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  111.994848][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.294540][ T5776] syz-executor: attempt to access beyond end of device
[  112.294540][ T5776] loop0: rw=2051, sector=77824, nr_sectors = 4096 limit=40427
[  112.328793][ T5776] F2FS-fs (loop0): Issue discard(9728, 9728, 512) failed, ret: -5
[  112.397405][ T5778] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  112.620895][ T5778] usb 4-1: unable to get BOS descriptor or descriptor too short
[  112.629782][ T5778] usb 4-1: not running at top speed; connect to a high speed hub
[  112.648764][ T5778] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.667874][ T5778] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  112.690987][ T5778] usb 4-1: string descriptor 0 read error: -22
[  112.698001][ T5778] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  112.717727][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.777986][ T5778] usb 4-1: 0:2 : does not exist
[  113.698411][ T6192] loop2: detected capacity change from 0 to 32768
[  113.718852][ T6192] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.113 (6192)
[  113.772139][ T6192] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  113.785774][ T6192] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  113.807711][ T6192] BTRFS info (device loop2): using free space tree
[  113.833754][ T5778] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  113.846706][ T5778] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  113.913500][ T5778] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  113.943487][ T5778] usb 4-1: USB disconnect, device number 4
[  113.983273][ T6192] BTRFS info (device loop2): enabling ssd optimizations
[  114.010720][ T6192] BTRFS info (device loop2): auto enabling async discard
[  114.270130][ T6198] loop0: detected capacity change from 0 to 32768
[  114.339097][ T5770] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  114.357034][ T6198] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.456222][ T6029] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop2 scanned by udevd (6029)
[  114.642123][ T6198] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  114.762693][ T6198] XFS (loop0): Starting recovery (logdev: internal)
[  114.829722][ T6198] XFS (loop0): Ending recovery (logdev: internal)
[  115.070401][   T28] kauditd_printk_skb: 214 callbacks suppressed
[  115.070417][   T28] audit: type=1800 audit(1768921435.241:223): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.116" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  115.206618][ T6238] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x44b/0x650, xfs_bnobt block 0x8
[  115.234318][ T6238] XFS (loop0): Unmount and run xfs_repair
[  115.246232][ T6240] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid'
[  115.246232][ T6240] 
[  115.289353][ T6198] XFS (loop0): Internal error i != 1 at line 527 of file fs/xfs/libxfs/xfs_alloc.c.  Caller xfs_alloc_fixup_trees+0x5e7/0x820
[  115.333566][ T6198] CPU: 0 PID: 6198 Comm: syz.0.116 Not tainted syzkaller #0
[  115.340959][ T6198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  115.351095][ T6198] Call Trace:
[  115.354436][ T6198]  <TASK>
[  115.357408][ T6198]  dump_stack_lvl+0x18c/0x250
[  115.362139][ T6198]  ? __xfs_printk+0x90/0x90
[  115.366800][ T6198]  ? show_regs_print_info+0x20/0x20
[  115.372173][ T6198]  xfs_corruption_error+0x122/0x170
[  115.377451][ T6198]  ? xfs_alloc_fixup_trees+0x5e7/0x820
[  115.382997][ T6198]  xfs_alloc_fixup_trees+0x64e/0x820
[  115.388374][ T6198]  ? xfs_alloc_fixup_trees+0x5e7/0x820
[  115.393994][ T6198]  ? xfs_alloc_fix_len+0x280/0x280
[  115.399159][ T6198]  ? xfs_alloc_ag_vextent_lastblock+0x3ed/0x6a0
[  115.405472][ T6198]  xfs_alloc_cur_finish+0xd5/0x470
[  115.410644][ T6198]  ? xfs_allocbt_init_cursor+0x70/0x110
[  115.416246][ T6198]  xfs_alloc_ag_vextent_near+0xd52/0x1210
[  115.422020][ T6198]  ? __xfs_free_extent_later+0x6d0/0x6d0
[  115.427730][ T6198]  ? xfs_alloc_vextent_near_bno+0x550/0x550
[  115.433675][ T6198]  ? xfs_perag_grab+0x25/0x400
[  115.438507][ T6198]  ? xfs_alloc_vextent_prepare_ag+0x1a1/0x5c0
[  115.444615][ T6198]  xfs_alloc_vextent_iterate_ags+0x605/0x8e0
[  115.450728][ T6198]  xfs_alloc_vextent_start_ag+0x375/0x820
[  115.456489][ T6198]  xfs_bmapi_allocate+0x1470/0x2b80
[  115.461747][ T6198]  ? xfs_bmapi_write+0x11a0/0x11a0
[  115.466901][ T6198]  ? get_random_u32+0x538/0x910
[  115.471810][ T6198]  ? xfs_iext_find_level+0x445/0x490
[  115.477139][ T6198]  ? xfs_iext_lookup_extent+0x415/0x7d0
[  115.482841][ T6198]  ? xfs_iext_prev+0x358/0x370
[  115.487642][ T6198]  ? xfs_iext_get_extent+0x1b9/0x370
[  115.492982][ T6198]  xfs_bmapi_write+0x7af/0x11a0
[  115.497885][ T6198]  ? xfs_bmapi_minleft+0x200/0x200
[  115.503054][ T6198]  ? xfs_trans_alloc_inode+0x19a/0x340
[  115.508553][ T6198]  xfs_iomap_write_direct+0x3d1/0x6a0
[  115.514048][ T6198]  ? xfs_eof_alignment+0x2c0/0x2c0
[  115.519192][ T6198]  ? down_read_nested+0x1ae/0x2e0
[  115.524250][ T6198]  ? xfs_direct_write_iomap_begin+0xc5d/0x1060
[  115.530450][ T6198]  ? xfs_direct_write_iomap_begin+0xc5d/0x1060
[  115.537066][ T6198]  ? xfs_iunlock+0x1c0/0x300
[  115.541694][ T6198]  xfs_direct_write_iomap_begin+0xc8b/0x1060
[  115.547837][ T6198]  ? kasan_set_track+0x4e/0x70
[  115.552640][ T6198]  ? __kasan_kmalloc+0x8f/0xa0
[  115.557458][ T6198]  ? xfs_iomap_write_unwritten+0xa90/0xa90
[  115.563320][ T6198]  ? xfs_iomap_write_unwritten+0xa90/0xa90
[  115.569157][ T6198]  iomap_iter+0x6b1/0xec0
[  115.573747][ T6198]  ? blk_start_plug+0x6e/0x1a0
[  115.578582][ T6198]  __iomap_dio_rw+0xc3d/0x1cc0
[  115.583448][ T6198]  ? iomap_dio_bio_end_io+0x630/0x630
[  115.588982][ T6198]  ? xfs_file_buffered_write+0x960/0x960
[  115.594652][ T6198]  iomap_dio_rw+0x45/0xa0
[  115.599113][ T6198]  xfs_file_dio_write_aligned+0x148/0x1d0
[  115.604866][ T6198]  ? direct_splice_actor+0xe8/0x130
[  115.610103][ T6198]  ? splice_direct_to_actor+0x304/0x8c0
[  115.615702][ T6198]  ? do_splice_direct+0x1d5/0x2f0
[  115.620775][ T6198]  ? xfs_file_dio_write_unaligned+0x670/0x670
[  115.626881][ T6198]  ? end_current_label_crit_section+0x149/0x170
[  115.633159][ T6198]  xfs_file_write_iter+0x4fb/0x610
[  115.638320][ T6198]  do_iter_write+0x738/0xc30
[  115.642965][ T6198]  ? vfs_iter_write+0xa0/0xa0
[  115.647687][ T6198]  ? __asan_memset+0x22/0x40
[  115.652325][ T6198]  ? iov_iter_bvec+0xd4/0x1b0
[  115.657034][ T6198]  ? vfs_iter_write+0x6e/0xa0
[  115.661783][ T6198]  iter_file_splice_write+0x6a3/0xcb0
[  115.667205][ T6198]  ? filemap_splice_read+0x8ae/0xa30
[  115.672535][ T6198]  ? splice_from_pipe+0x180/0x180
[  115.677667][ T6198]  ? splice_folio_into_pipe+0xb10/0xb10
[  115.683267][ T6198]  ? splice_from_pipe+0x180/0x180
[  115.688337][ T6198]  direct_splice_actor+0xe8/0x130
[  115.693410][ T6198]  splice_direct_to_actor+0x304/0x8c0
[  115.698831][ T6198]  ? direct_file_splice_eof+0xb0/0xb0
[  115.704247][ T6198]  ? warn_unsupported+0xc0/0xc0
[  115.709233][ T6198]  ? fsnotify_perm+0x5d/0x5e0
[  115.713969][ T6198]  ? security_file_permission+0x79/0xa0
[  115.719555][ T6198]  do_splice_direct+0x1d5/0x2f0
[  115.724529][ T6198]  ? splice_direct_to_actor+0x8c0/0x8c0
[  115.730153][ T6198]  ? rcu_read_lock_any_held+0xb4/0x140
[  115.735642][ T6198]  ? do_splice_direct+0x2f0/0x2f0
[  115.740717][ T6198]  do_sendfile+0x5f2/0xef0
[  115.745201][ T6198]  ? do_pwritev+0x3a0/0x3a0
[  115.749778][ T6198]  __se_sys_sendfile64+0x145/0x1a0
[  115.754950][ T6198]  ? lock_chain_count+0x20/0x20
[  115.759877][ T6198]  ? __x64_sys_sendfile64+0xb0/0xb0
[  115.765207][ T6198]  ? lockdep_hardirqs_on+0x98/0x150
[  115.770443][ T6198]  do_syscall_64+0x55/0xa0
[  115.774889][ T6198]  ? clear_bhb_loop+0x40/0x90
[  115.779603][ T6198]  ? clear_bhb_loop+0x40/0x90
[  115.784311][ T6198]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  115.790271][ T6198] RIP: 0033:0x7f395219acb9
[  115.794733][ T6198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.814456][ T6198] RSP: 002b:00007f395313d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  115.822903][ T6198] RAX: ffffffffffffffda RBX: 00007f3952415fa0 RCX: 00007f395219acb9
[  115.830906][ T6198] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  115.838909][ T6198] RBP: 00007f3952208bf7 R08: 0000000000000000 R09: 0000000000000000
[  115.846997][ T6198] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
[  115.854995][ T6198] R13: 00007f3952416038 R14: 00007f3952415fa0 R15: 00007ffd54ad3538
[  115.863013][ T6198]  </TASK>
[  115.898120][ T6198] XFS (loop0): Corruption detected. Unmount and run xfs_repair
[  115.985458][ T6198] syz.0.116 (6198) used greatest stack depth: 20688 bytes left
[  116.083594][ T5776] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  116.483692][ T6237] loop3: detected capacity change from 0 to 32768
[  116.516033][ T6237] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  116.676924][ T6237] XFS (loop3): Ending clean mount
[  116.703647][ T6237] XFS (loop3): Quotacheck needed: Please wait.
[  116.795041][ T6237] XFS (loop3): Quotacheck: Done.
[  116.906628][ T6237] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  117.041945][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  117.283716][ T6262] loop1: detected capacity change from 0 to 32768
[  117.298287][ T6262] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.131 (6262)
[  117.332653][ T6262] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  117.344052][ T6262] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  117.363283][ T6262] BTRFS info (device loop1): force zlib compression, level 3
[  117.371253][ T6262] BTRFS info (device loop1): turning on flush-on-commit
[  117.379224][ T6262] BTRFS info (device loop1): max_inline at 4096
[  117.385530][ T6262] BTRFS info (device loop1): using free space tree
[  117.506207][ T6262] BTRFS info (device loop1): enabling ssd optimizations
[  117.533579][ T6262] BTRFS info (device loop1): auto enabling async discard
[  117.668373][ T6280] loop0: detected capacity change from 0 to 16
[  117.705551][ T6280] erofs: (device loop0): mounted with root inode @ nid 36.
[  117.760875][ T6262] BTRFS info (device loop1): balance: start -d -m
[  117.775061][ T6262] BTRFS info (device loop1): balance: paused
[  117.886642][ T6282] BTRFS info (device loop1): balance: canceled
[  117.992735][   T28] audit: type=1326 audit(1768921438.151:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6284 comm="syz.0.133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f395219acb9 code=0x0
[  118.041916][ T5775] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  118.127689][ T5773] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  118.867771][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  119.050576][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.077355][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.127684][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  119.137032][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  119.155902][    T9] usb 1-1: SerialNumber: syz
[  119.296371][ T6296] loop1: detected capacity change from 0 to 32768
[  119.366927][ T6296] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  119.410269][    T9] usb 1-1: 0:2 : does not exist
[  119.440937][ T6296] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  119.539489][    T9] usb 1-1: USB disconnect, device number 4
[  119.645514][ T6296] (syz.1.134,6296,1):ocfs2_read_blocks:239 ERROR: status = -12
[  119.669891][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.711611][ T6305] loop2: detected capacity change from 0 to 32768
[  119.720913][ T6296] (syz.1.134,6296,1):ocfs2_search_chain:1761 ERROR: status = -12
[  119.749429][ T6305] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.141 (6305)
[  119.797227][ T6296] (syz.1.134,6296,1):ocfs2_search_chain:1871 ERROR: status = -12
[  119.819637][ T6305] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.839070][ T6305] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  119.859596][ T6305] BTRFS info (device loop2): enabling disk space caching
[  119.866854][ T6296] (syz.1.134,6296,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -12
[  119.886448][ T6305] BTRFS info (device loop2): allowing degraded mounts
[  119.918110][ T6296] (syz.1.134,6296,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -12
[  119.926678][ T6305] BTRFS info (device loop2): force zlib compression, level 3
[  119.936879][ T6305] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  119.967730][ T6296] (syz.1.134,6296,0):__ocfs2_claim_clusters:2365 ERROR: status = -12
[  119.981497][ T6305] BTRFS info (device loop2): use zstd compression, level 3
[  119.993653][ T6305] BTRFS info (device loop2): force clearing of disk cache
[  120.007530][ T6305] BTRFS info (device loop2): max_inline at 0
[  120.013582][ T6305] BTRFS info (device loop2): disk space caching is enabled
[  120.020973][ T6296] (syz.1.134,6296,1):__ocfs2_claim_clusters:2373 ERROR: status = -12
[  120.062824][ T6296] (syz.1.134,6296,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -12
[  120.071875][ T6296] (syz.1.134,6296,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -12
[  120.101336][ T6296] (syz.1.134,6296,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12
[  120.197451][ T6296] (syz.1.134,6296,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12
[  120.256078][ T6305] BTRFS info (device loop2): enabling ssd optimizations
[  120.295042][ T6338] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  120.310992][ T6296] (syz.1.134,6296,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12
[  120.330480][ T6305] BTRFS info (device loop2): rebuilding free space tree
[  120.345986][ T6296] (syz.1.134,6296,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12
[  120.410777][ T6305] BTRFS info (device loop2): disabling free space tree
[  120.446800][ T6296] (syz.1.134,6296,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12
[  120.459865][ T6305] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  120.472823][ T6296] (syz.1.134,6296,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12
[  120.482680][ T6296] (syz.1.134,6296,1):ocfs2_mknod:357 ERROR: status = -12
[  120.490463][ T6305] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  120.506525][ T6296] (syz.1.134,6296,1):ocfs2_mknod:502 ERROR: status = -12
[  120.524658][ T6296] (syz.1.134,6296,1):ocfs2_mkdir:659 ERROR: status = -12
[  120.564596][ T6314] (syz.1.134,6314,1):ocfs2_read_blocks:239 ERROR: status = -12
[  120.583550][ T6314] (syz.1.134,6314,1):ocfs2_search_chain:1761 ERROR: status = -12
[  120.609628][ T6314] (syz.1.134,6314,1):ocfs2_search_chain:1871 ERROR: status = -12
[  120.631735][ T6314] (syz.1.134,6314,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -12
[  120.668003][ T6314] (syz.1.134,6314,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -12
[  120.676526][ T6314] (syz.1.134,6314,0):__ocfs2_claim_clusters:2365 ERROR: status = -12
[  120.742704][ T6314] (syz.1.134,6314,0):__ocfs2_claim_clusters:2373 ERROR: status = -12
[  120.787334][ T6314] (syz.1.134,6314,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -12
[  120.817372][ T6314] (syz.1.134,6314,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -12
[  120.842476][ T6314] (syz.1.134,6314,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -12
[  120.872804][ T6314] (syz.1.134,6314,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -12
[  120.901886][ T6314] (syz.1.134,6314,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -12
[  120.920758][ T6314] (syz.1.134,6314,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -12
[  120.957391][ T6314] (syz.1.134,6314,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -12
[  120.987178][ T6314] (syz.1.134,6314,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -12
[  120.996466][ T6314] (syz.1.134,6314,0):ocfs2_expand_inline_dir:2858 ERROR: status = -12
[  121.037398][ T6314] (syz.1.134,6314,0):ocfs2_extend_dir:3205 ERROR: status = -12
[  121.065431][ T6314] (syz.1.134,6314,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -12
[  121.092122][ T6314] (syz.1.134,6314,0):ocfs2_mknod:298 ERROR: status = -12
[  121.107658][ T5770] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.128666][ T6314] (syz.1.134,6314,0):ocfs2_mknod:502 ERROR: status = -12
[  121.161390][ T6314] (syz.1.134,6314,0):ocfs2_mkdir:659 ERROR: status = -12
[  121.378398][ T6314] syz.1.134 (6314) used greatest stack depth: 20048 bytes left
[  121.546522][ T6343] loop3: detected capacity change from 0 to 32768
[  121.598205][ T6343] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.149 (6343)
[  121.618729][ T5775] ocfs2: Unmounting device (7,1) on (node local)
[  121.654216][ T6343] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  121.713065][ T6343] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  121.741190][ T6343] BTRFS info (device loop3): enabling auto defrag
[  121.768303][ T6346] loop0: detected capacity change from 0 to 32768
[  121.805510][ T6343] BTRFS info (device loop3): use no compression
[  121.814357][ T6346] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.150 (6346)
[  121.842044][ T6343] BTRFS info (device loop3): force clearing of disk cache
[  121.857641][ T6343] BTRFS info (device loop3): max_inline at 4096
[  121.863993][ T6343] BTRFS info (device loop3): disabling free space tree
[  121.894670][ T6346] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.929280][ T6346] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  121.957348][ T6346] BTRFS info (device loop0): using free space tree
[  122.093269][ T6343] BTRFS info (device loop3): enabling ssd optimizations
[  122.152670][ T6343] BTRFS info (device loop3): auto enabling async discard
[  122.193113][ T6343] BTRFS info (device loop3): rebuilding free space tree
[  122.239505][ T6346] BTRFS info (device loop0): enabling ssd optimizations
[  122.246555][ T6346] BTRFS info (device loop0): auto enabling async discard
[  122.270758][ T6343] BTRFS info (device loop3): disabling free space tree
[  122.306883][ T6343] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  122.373026][ T6343] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  122.431460][ T6391] netlink: 64 bytes leftover after parsing attributes in process `syz.2.154'.
[  122.544702][ T5776] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.976282][ T6397] loop1: detected capacity change from 0 to 4096
[  123.130802][ T6397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.317965][   T28] audit: type=1400 audit(1768921443.481:225): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=6396 comm="syz.1.157"
[  123.442884][ T5766] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  123.525347][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.566086][ T6407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'.
[  124.047379][ T6420] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  124.583457][ T6417] loop1: detected capacity change from 0 to 32768
[  124.614775][ T6417] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  124.640906][ T6417] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  124.883813][ T5775] ocfs2: Unmounting device (7,1) on (node local)
[  124.947732][ T5854] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  125.137361][ T5854] usb 1-1: Using ep0 maxpacket: 16
[  125.156610][ T5854] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  125.184310][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.212105][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  125.262506][ T5854] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  125.289667][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.331060][ T5854] usb 1-1: config 0 descriptor??
[  125.533555][ T6448] loop1: detected capacity change from 0 to 512
[  125.563950][ T5854] usb 1-1: string descriptor 0 read error: -71
[  125.581283][   T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  125.613671][ T5854] usbhid 1-1:0.0: can't add hid device: -71
[  125.621633][ T5854] usbhid: probe of 1-1:0.0 failed with error -71
[  125.657795][ T5854] usb 1-1: USB disconnect, device number 5
[  125.797447][   T23] usb 4-1: Using ep0 maxpacket: 32
[  125.810608][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.836522][   T23] usb 4-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00
[  125.852672][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.865607][   T23] usb 4-1: config 0 descriptor??
[  125.886834][ T6452] loop1: detected capacity change from 0 to 512
[  125.904036][ T6452] EXT4-fs: Ignoring removed i_version option
[  125.933843][ T6452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.035846][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.103402][    T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  126.296341][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  126.321042][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  126.357358][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  126.378098][   T23] wacom 0003:056A:4004.0001: hidraw0: USB HID vb.27 Device [HID 056a:4004] on usb-dummy_hcd.3-1/input0
[  126.386968][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.573564][   T23] usb 4-1: USB disconnect, device number 5
[  126.605268][ T6459] fido_id[6459]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  126.667549][    T9] usb 3-1: usb_control_msg returned -32
[  126.684001][    T9] usbtmc 3-1:16.0: can't read capabilities
[  126.967390][ T5836] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  126.995890][ T6455] loop1: detected capacity change from 0 to 65536
[  127.035390][ T6455] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  127.077056][ T6455] XFS (loop1): Ending clean mount
[  127.174256][ T5836] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  127.190466][ T5836] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  127.216506][ T5836] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  127.252021][ T5836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  127.264725][ T5775] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  127.277975][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  127.303906][ T5836] usb 1-1: Product: syz
[  127.321563][ T5836] usb 1-1: Manufacturer: syz
[  127.332395][ T5836] usb 1-1: SerialNumber: syz
[  127.584057][ T5836] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  127.798520][    T9] usb 1-1: USB disconnect, device number 6
[  127.813425][    T9] usblp1: removed
[  127.827389][ T5854] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  128.017364][ T5854] usb 4-1: Using ep0 maxpacket: 8
[  128.029080][ T5854] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  128.038351][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.046491][ T5854] usb 4-1: Product: syz
[  128.051700][ T5854] usb 4-1: Manufacturer: syz
[  128.056339][ T5854] usb 4-1: SerialNumber: syz
[  128.064770][ T5854] usb 4-1: config 0 descriptor??
[  128.075765][ T5854] gspca_main: sq905-2.14.0 probing 2770:9120
[  128.718444][   T23] usb 3-1: USB disconnect, device number 2
[  128.881037][ T6487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'.
[  128.966069][ T6489] loop1: detected capacity change from 0 to 1024
[  129.111663][ T5854] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[  129.135564][ T5854] sq905: probe of 4-1:0.0 failed with error -71
[  129.163237][ T5854] usb 4-1: USB disconnect, device number 6
[  129.934922][ T6511] loop2: detected capacity change from 0 to 512
[  129.966203][ T6511] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  130.019696][ T6511] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  130.085096][ T6511] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  130.178112][ T6511] EXT4-fs (loop2): 1 truncate cleaned up
[  130.185124][ T6511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.200164][ T6499] loop0: detected capacity change from 0 to 32768
[  130.282230][ T5153] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  130.334951][ T6499] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  130.442873][ T6499] XFS (loop0): Ending clean mount
[  130.509089][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.531564][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.207'.
[  130.541693][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.207'.
[  130.552728][ T5153] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  130.555759][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.207'.
[  130.573579][ T5153] usb 2-1: config 0 interface 0 has no altsetting 0
[  130.576721][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.207'.
[  130.615191][ T5153] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  130.647373][ T5153] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  130.655638][ T5153] usb 2-1: Product: syz
[  130.669274][ T5153] usb 2-1: Manufacturer: syz
[  130.674009][ T5153] usb 2-1: SerialNumber: syz
[  130.695325][ T5153] usb 2-1: config 0 descriptor??
[  130.706551][ T5776] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  130.722048][ T5153] usb 2-1: selecting invalid altsetting 0
[  131.075786][ T5153] usb 2-1: USB disconnect, device number 3
[  131.558272][ T6539] loop0: detected capacity change from 0 to 32768
[  131.578783][ T6539] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.209 (6539)
[  131.621967][ T6539] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  131.656588][ T6539] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  131.670576][ T6539] BTRFS info (device loop0): setting nodatacow, compression disabled
[  131.680965][ T6539] BTRFS info (device loop0): force clearing of disk cache
[  131.688521][ T6539] BTRFS info (device loop0): enabling ssd optimizations
[  131.698997][ T6539] BTRFS info (device loop0): using spread ssd allocation scheme
[  131.711168][ T6539] BTRFS info (device loop0): turning off barriers
[  131.737679][ T6539] BTRFS info (device loop0): disabling free space tree
[  131.744670][ T6539] BTRFS info (device loop0): not using ssd optimizations
[  131.791660][ T6539] BTRFS info (device loop0): not using spread ssd allocation scheme
[  132.013561][ T6539] BTRFS info (device loop0): rebuilding free space tree
[  132.053226][ T6539] BTRFS info (device loop0): disabling free space tree
[  132.073490][ T6539] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  132.083768][ T6539] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  132.208085][ T5776] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.310174][ T5153] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  132.381717][ T6029] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (6029)
[  132.550299][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.567328][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.598037][ T5153] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  132.627591][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.662047][ T5153] usb 2-1: config 0 descriptor??
[  132.723493][ T6571] 9pnet: p9_errstr2errno: server reported unknown error 
[  132.759642][ T6555] loop3: detected capacity change from 0 to 32768
[  133.134939][ T5153] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  133.157009][ T5153] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  133.199076][ T5153] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0002/input/input13
[  133.268114][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  133.274895][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  133.338630][ T5153] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  133.413240][ T5153] usb 2-1: USB disconnect, device number 4
[  133.528017][ T6577] fido_id[6577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  133.774058][ T6573] loop0: detected capacity change from 0 to 32768
[  133.860134][ T6573] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  133.956591][ T6573] XFS (loop0): Ending clean mount
[  134.018691][ T6573] XFS (loop0): Quotacheck needed: Please wait.
[  134.102796][ T6573] XFS (loop0): Quotacheck: Done.
[  134.247353][ T5776] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  134.655898][ T6590] loop3: detected capacity change from 0 to 40427
[  134.688036][ T6590] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  134.696574][ T6598] loop2: detected capacity change from 0 to 128
[  134.699318][ T6590] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  134.712881][ T6590] F2FS-fs (loop3): Image doesn't support compression
[  134.746882][ T6598] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  134.769133][ T6590] F2FS-fs (loop3): invalid crc value
[  134.785808][ T6598] hpfs: filesystem error: improperly stopped
[  134.794218][ T6598] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  134.803923][ T6598] hpfs: You really don't want any checks? You are crazy...
[  134.816125][ T6590] F2FS-fs (loop3): Found nat_bits in checkpoint
[  134.841030][ T6598] hpfs: hpfs_map_sector(): read error
[  134.860953][ T6598] hpfs: code page support is disabled
[  134.879288][ T6598] hpfs: hpfs_map_4sectors(): unaligned read
[  134.895797][ T6598] hpfs: hpfs_map_4sectors(): unaligned read
[  134.916433][ T6598] hpfs: filesystem error: unable to find root dir
[  134.924762][ T6600] process 'syz.0.225' launched './file1' with NULL argv: empty string added
[  134.957024][ T6590] F2FS-fs (loop3): Start checkpoint disabled!
[  135.002900][ T6590] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  135.182238][ T6590] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_create+0x452/0x550
[  135.198025][ T6590] F2FS-fs (loop3): Stopped filesystem due to reason: 1
[  135.216713][ T6590] syz.3.222: attempt to access beyond end of device
[  135.216713][ T6590] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  135.247994][ T6590] syz.3.222: attempt to access beyond end of device
[  135.247994][ T6590] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  136.039757][ T6607] loop0: detected capacity change from 0 to 40427
[  136.079317][ T6607] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  136.099047][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  136.122038][ T6607] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  136.133109][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  136.167126][ T6607] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7
[  136.203055][ T6607] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  136.242393][ T6607] F2FS-fs (loop0): Image doesn't support compression
[  136.282438][ T6607] F2FS-fs (loop0): invalid crc value
[  136.326646][ T6607] F2FS-fs (loop0): Found nat_bits in checkpoint
[  136.558947][ T6607] F2FS-fs (loop0): Start checkpoint disabled!
[  136.683021][ T6607] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  136.712692][ T6607] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  137.412984][   T12] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of __write_node_page+0xeb6/0x1810
[  137.429885][   T12] kworker/u4:1: attempt to access beyond end of device
[  137.429885][   T12] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  137.451376][   T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  137.466456][   T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  137.481327][   T12] F2FS-fs (loop0): Stopped filesystem due to reason: 1
[  137.603920][ T6618] loop2: detected capacity change from 0 to 131072
[  137.612560][ T6618] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  137.620785][ T6618] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  137.633252][ T6618] F2FS-fs (loop2): invalid crc value
[  137.664924][ T6618] F2FS-fs (loop2): Found nat_bits in checkpoint
[  137.723015][ T6618] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  137.730223][ T6618] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  138.820910][ T6654] syzkaller1: entered promiscuous mode
[  138.842447][ T6654] syzkaller1: entered allmulticast mode
[  139.371564][ T6652] loop0: detected capacity change from 0 to 32768
[  139.447648][ T5836] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  139.637891][ T5836] usb 2-1: Using ep0 maxpacket: 16
[  139.688021][ T5836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.709568][ T5836] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.737348][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0
[  139.744516][ T5836] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  139.770778][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.798119][ T5836] usb 2-1: config 0 descriptor??
[  140.130451][ T6674] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  140.240916][ T5836] hid (null): global environment stack underflow
[  140.259168][ T5836] hid (null): report_id 0 is invalid
[  140.269827][ T5836] hid (null): global environment stack underflow
[  140.286479][ T5836] hid (null): report_id 0 is invalid
[  140.301071][ T5836] hid (null): report_id 0 is invalid
[  140.306534][ T5836] hid (null): global environment stack underflow
[  140.320035][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  140.459204][ T5811] usb 2-1: USB disconnect, device number 5
[  140.552418][    T9] usb 4-1: Using ep0 maxpacket: 16
[  140.575299][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.607460][    T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  140.628486][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.655819][    T9] usb 4-1: config 0 descriptor??
[  140.952029][ T6693] loop0: detected capacity change from 0 to 8192
[  141.108807][    T9] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  141.147397][   T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  141.376022][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  141.402586][   T23] usb 3-1: config 0 has no interfaces?
[  141.426072][   T23] usb 3-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72
[  141.446213][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.463889][   T23] usb 3-1: Product: syz
[  141.471085][   T23] usb 3-1: Manufacturer: syz
[  141.475785][   T23] usb 3-1: SerialNumber: syz
[  141.497088][   T23] usb 3-1: config 0 descriptor??
[  141.505222][ T6672] i2c i2c-1: unsupported multi-msg i2c transaction
[  141.541941][    T9] usb 4-1: USB disconnect, device number 7
[  141.896602][   T23] usb 3-1: USB disconnect, device number 3
[  142.127380][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout
[  142.371485][ T6717] loop0: detected capacity change from 0 to 32768
[  142.432319][ T6717] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  142.487945][   T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  142.585921][ T5776] ocfs2: Unmounting device (7,0) on (node local)
[  142.727475][   T23] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  142.756632][   T23] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  142.780061][   T23] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  142.804665][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  142.822513][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  142.849891][   T23] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  142.865443][   T23] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  142.875156][   T23] usb 2-1: Product: syz
[  142.884448][   T23] usb 2-1: Manufacturer: syz
[  142.917639][   T23] cdc_wdm 2-1:1.0: skipping garbage
[  142.922922][   T23] cdc_wdm 2-1:1.0: skipping garbage
[  142.946490][   T23] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  142.977934][   T23] cdc_wdm 2-1:1.0: Unknown control protocol
[  143.855028][ T5153] usb 2-1: USB disconnect, device number 6
[  144.056676][ T6729] loop2: detected capacity change from 0 to 131072
[  144.065483][ T6729] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  144.072305][ T6729] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  144.082254][ T6729] F2FS-fs (loop2): invalid crc value
[  144.099131][ T6729] F2FS-fs (loop2): Found nat_bits in checkpoint
[  144.159968][ T6729] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  144.167128][ T6729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  144.261626][ T6729] F2FS-fs (loop2): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix
[  144.570067][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'.
[  144.579547][ T6753] chnl_net:caif_netlink_parms(): no params data found
[  144.802161][ T6755] loop0: detected capacity change from 0 to 4096
[  146.044290][ T6767] loop3: detected capacity change from 0 to 32768
[  146.119239][ T6767] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  146.480248][ T5766] (syz-executor,5766,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  146.495743][ T6793] loop2: detected capacity change from 0 to 1024
[  146.566743][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  146.620655][ T6793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.193536][    C0] hrtimer: interrupt took 27756 ns
[  147.976621][ T6835] loop0: detected capacity change from 0 to 2048
[  148.027543][ T5836] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  148.040600][ T6837] loop3: detected capacity change from 0 to 4096
[  148.243316][ T5836] usb 3-1: config 0 has an invalid interface number: 74 but max is 0
[  148.275238][ T5836] usb 3-1: config 0 has no interface number 0
[  148.281451][ T6837] EXT4-fs (loop3): Test dummy encryption mode enabled
[  148.291426][ T6837] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  148.304836][ T6837] System zones: 0-5
[  148.318943][ T6837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.333587][ T5836] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  148.356806][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.397192][ T5836] usb 3-1: config 0 descriptor??
[  148.408271][ T6837] fs-verity: sha512 using implementation "sha512-avx2"
[  148.435442][ T5836] cp210x 3-1:0.74: cp210x converter detected
[  148.572822][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.838265][ T6849] pim6reg1: entered promiscuous mode
[  148.847290][ T6849] pim6reg1: entered allmulticast mode
[  148.854117][ T5836] cp210x 3-1:0.74: failed to get vendor val 0x000e size 3: -32
[  149.065773][ T6841] loop0: detected capacity change from 0 to 40427
[  149.075362][ T5836] cp210x 3-1:0.74: GPIO initialisation failed: -19
[  149.104231][ T6841] F2FS-fs (loop0): invalid crc value
[  149.131263][ T6841] F2FS-fs (loop0): Found nat_bits in checkpoint
[  149.148726][ T5836] usb 3-1: cp210x converter now attached to ttyUSB0
[  149.293914][ T6841] F2FS-fs (loop0): Start checkpoint disabled!
[  149.310701][ T6841] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  149.358921][ T5778] usb 3-1: USB disconnect, device number 4
[  149.394052][ T5778] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  149.435677][ T5778] cp210x 3-1:0.74: device disconnected
[  149.757684][ T1145] kworker/u4:8: attempt to access beyond end of device
[  149.757684][ T1145] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  149.795836][ T1145] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  149.806103][ T1145] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  149.813722][ T1145] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  150.271215][ T6861] loop2: detected capacity change from 0 to 128
[  150.477158][ T6862] syz.2.330: attempt to access beyond end of device
[  150.477158][ T6862] loop2: rw=2049, sector=145, nr_sectors = 760 limit=128
[  150.505778][ T6855] loop1: detected capacity change from 0 to 32768
[  150.522844][ T6855] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.328 (6855)
[  150.597500][ T6855] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.639089][ T6855] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  150.678165][ T6855] BTRFS info (device loop1): using free space tree
[  150.776984][ T5836] libceph: connect (1)[c::]:6789 error -101
[  150.794137][ T5836] libceph: mon0 (1)[c::]:6789 connect error
[  150.824534][ T1145] kworker/u4:8: attempt to access beyond end of device
[  150.824534][ T1145] loop2: rw=1, sector=905, nr_sectors = 136 limit=128
[  150.876440][ T6873] ceph: No mds server is up or the cluster is laggy
[  150.884586][ T6855] BTRFS info (device loop1): enabling ssd optimizations
[  150.924977][ T6855] BTRFS info (device loop1): auto enabling async discard
[  151.162279][ T6892] loop2: detected capacity change from 0 to 256
[  151.250615][ T5775] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.350805][ T6894] loop0: detected capacity change from 0 to 16
[  151.475157][ T6894] erofs: (device loop0): mounted with root inode @ nid 36.
[  151.565835][ T6894] syz.0.336: attempt to access beyond end of device
[  151.565835][ T6894] loop0: rw=0, sector=8, nr_sectors = 16 limit=16
[  151.605224][ T6897] syz.0.336: attempt to access beyond end of device
[  151.605224][ T6897] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16
[  151.658593][ T6897] syz.0.336: attempt to access beyond end of device
[  151.658593][ T6897] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16
[  151.673165][ T5854] kernel write not supported for file /208/coredump_filter (pid: 5854 comm: kworker/0:5)
[  151.825754][ T6029] page:ffffea00017c1a00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f068
[  151.836727][ T6029] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  151.844165][ T6029] page_type: 0xffffffff()
[  151.849008][ T6029] raw: 00fff00000000000 ffffea0000bf8448 ffffea0001d6b808 0000000000000000
[  151.858322][ T6029] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  151.866962][ T6029] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled())
[  151.876570][ T6029] page_owner tracks the page as freed
[  151.882870][ T6029] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6894, tgid 6893 (syz.0.336), ts 151564460362, free_ts 151763439954
[  151.905311][ T6029]  post_alloc_hook+0x1c1/0x200
[  151.910221][ T6029]  get_page_from_freelist+0x1951/0x19e0
[  151.915828][ T6029]  __alloc_pages+0x1f0/0x460
[  151.921039][ T6029]  z_erofs_do_read_page+0x2181/0x36b0
[  151.926651][ T6029]  z_erofs_pcluster_readmore+0x2cf/0x450
[  151.933725][ T6029]  z_erofs_read_folio+0x237/0x5c0
[  151.938987][ T6029]  filemap_read_folio+0x172/0x760
[  151.944069][ T6029]  do_read_cache_folio+0x468/0x7d0
[  151.949332][ T6029]  erofs_bread+0x16f/0x630
[  151.953810][ T6029]  erofs_namei+0x2ae/0xf50
[  151.958843][ T6029]  erofs_lookup+0x135/0x310
[  151.963789][ T6029]  lookup_one_qstr_excl+0x112/0x250
[  151.969247][ T6029]  filename_create+0x23e/0x480
[  151.974081][ T6029]  do_symlinkat+0xc5/0x400
[  151.978656][ T6029]  __x64_sys_symlinkat+0x99/0xb0
[  151.983643][ T6029]  do_syscall_64+0x55/0xa0
[  151.988178][ T6029] page last free stack trace:
[  151.992975][ T6029]  free_unref_page_prepare+0x7b2/0x8c0
[  151.998545][ T6029]  free_unref_page_list+0xbe/0x860
[  152.003734][ T6029]  release_pages+0x1f7a/0x2200
[  152.008725][ T6029]  __folio_batch_release+0x71/0xe0
[  152.013909][ T6029]  truncate_inode_pages_range+0x3b9/0xfb0
[  152.019730][ T6029]  evict+0x4dd/0x8d0
[  152.023679][ T6029]  erofs_put_super+0x7b/0x150
[  152.028656][ T6029]  generic_shutdown_super+0x134/0x2b0
[  152.034138][ T6029]  kill_block_super+0x44/0x90
[  152.038932][ T6029]  erofs_kill_sb+0x4c/0x140
[  152.043513][ T6029]  deactivate_locked_super+0x97/0x100
[  152.049362][ T6029]  cleanup_mnt+0x43b/0x4d0
[  152.053836][ T6029]  task_work_run+0x1d4/0x260
[  152.058793][ T6029]  exit_to_user_mode_loop+0xe6/0x110
[  152.064145][ T6029]  exit_to_user_mode_prepare+0xee/0x180
[  152.069937][ T6029]  syscall_exit_to_user_mode+0x1a/0x50
[  152.075673][ T6029] ------------[ cut here ]------------
[  152.081322][ T6029] WARNING: CPU: 1 PID: 6029 at include/linux/memcontrol.h:764 folio_lruvec_lock_irqsave+0x202/0x260
[  152.092401][ T6029] Modules linked in:
[  152.096443][ T6029] CPU: 1 PID: 6029 Comm: udevd Not tainted syzkaller #0
[  152.103535][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  152.113785][ T6029] RIP: 0010:folio_lruvec_lock_irqsave+0x202/0x260
[  152.120353][ T6029] Code: 4c 89 f7 e8 30 21 f9 ff 48 8b 04 24 49 89 06 e9 28 ff ff ff 48 89 df 48 c7 c6 20 b0 d6 8a e8 d5 58 e1 ff c6 05 96 09 8f 0c 01 <0f> 0b e9 2b fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c a9 fe
[  152.140385][ T6029] RSP: 0018:ffffc9000505f4d8 EFLAGS: 00010246
[  152.146543][ T6029] RAX: 193b04ed819f3c00 RBX: ffffea00017c1a00 RCX: 193b04ed819f3c00
[  152.154793][ T6029] RDX: 0000000000000003 RSI: ffffffff8acace80 RDI: ffffffff8b1c74a0
[  152.162975][ T6029] RBP: ffffc9000505f580 R08: ffffffff8e8a5f2f R09: 1ffffffff1d14be5
[  152.171075][ T6029] R10: dffffc0000000000 R11: fffffbfff1d14be6 R12: ffff8880b8f36c28
[  152.179179][ T6029] R13: dffffc0000000000 R14: ffff888140f58000 R15: 0000000000000000
[  152.187201][ T6029] FS:  00007f8399e31880(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  152.196288][ T6029] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.203262][ T6029] CR2: 00007fd47cbe0ad8 CR3: 0000000031256000 CR4: 00000000003506e0
[  152.211681][ T6029] Call Trace:
[  152.215013][ T6029]  <TASK>
[  152.218039][ T6029]  ? folio_memcg+0x127/0x480
[  152.222705][ T6029]  folio_batch_move_lru+0x2b4/0x660
[  152.228132][ T6029]  ? folio_add_lru+0xd30/0xd30
[  152.233123][ T6029]  ? lru_add_drain_cpu+0x8e0/0x8e0
[  152.238386][ T6029]  lru_add_drain_cpu+0x109/0x8e0
[  152.243375][ T6029]  ? filemap_remove_folio+0x1ae/0x2c0
[  152.248874][ T6029]  ? folio_add_lru_vma+0x1f0/0x1f0
[  152.254044][ T6029]  ? _raw_spin_lock_irq+0xbb/0xf0
[  152.259273][ T6029]  ? do_raw_spin_unlock+0x121/0x230
[  152.264525][ T6029]  ? lru_add_drain+0x79/0x3e0
[  152.269295][ T6029]  ? lru_add_drain+0x79/0x3e0
[  152.274030][ T6029]  lru_add_drain+0x121/0x3e0
[  152.278749][ T6029]  __folio_batch_release+0x48/0xe0
[  152.283918][ T6029]  shmem_undo_range+0x630/0x1b20
[  152.289038][ T6029]  ? shmem_truncate_range+0xa0/0xa0
[  152.294311][ T6029]  ? inode_wait_for_writeback+0x1e3/0x230
[  152.300142][ T6029]  ? __lock_acquire+0x7d40/0x7d40
[  152.305210][ T6029]  ? do_raw_spin_lock+0x11f/0x2c0
[  152.310347][ T6029]  shmem_evict_inode+0x245/0x9e0
[  152.315348][ T6029]  ? inode_wait_for_writeback+0x1e3/0x230
[  152.321279][ T6029]  ? shmem_free_in_core_inode+0xb0/0xb0
[  152.326913][ T6029]  ? sb_clear_inode_writeback+0x360/0x360
[  152.332748][ T6029]  ? do_raw_spin_lock+0x11f/0x2c0
[  152.338036][ T6029]  ? bit_waitqueue+0x30/0x30
[  152.342692][ T6029]  ? do_raw_spin_unlock+0x121/0x230
[  152.348099][ T6029]  ? shmem_free_in_core_inode+0xb0/0xb0
[  152.353565][ T6903] loop0: detected capacity change from 0 to 512
[  152.360037][ T6029]  evict+0x4ca/0x8d0
[  152.364008][ T6029]  ? proc_nr_inodes+0x230/0x230
[  152.369449][ T6029]  ? do_raw_spin_unlock+0x121/0x230
[  152.374716][ T6029]  ? _raw_spin_unlock+0x28/0x40
[  152.379721][ T6029]  ? iput+0x706/0x920
[  152.383868][ T6029]  __dentry_kill+0x431/0x650
[  152.388605][ T6029]  dentry_kill+0xb8/0x290
[  152.392996][ T6029]  ? dput+0x3b/0x1e0
[  152.396945][ T6029]  dput+0xfe/0x1e0
[  152.400789][ T6029]  do_renameat2+0x8f9/0xce0
[  152.405360][ T6029]  ? __lock_acquire+0x7d40/0x7d40
[  152.410530][ T6029]  ? fsnotify_move+0x4e0/0x4e0
[  152.415346][ T6029]  ? __check_object_size+0x506/0xa20
[  152.420790][ T6029]  ? strncpy_from_user+0x197/0x2d0
[  152.425984][ T6029]  ? getname_flags+0x20a/0x500
[  152.430950][ T6029]  __x64_sys_rename+0x86/0x90
[  152.435682][ T6029]  do_syscall_64+0x55/0xa0
[  152.440400][ T6029]  ? clear_bhb_loop+0x40/0x90
[  152.445141][ T6029]  ? clear_bhb_loop+0x40/0x90
[  152.452204][ T6029]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  152.458889][ T6029] RIP: 0033:0x7f839967acc7
[  152.463364][ T6029] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8
[  152.483129][ T6029] RSP: 002b:00007ffe59b17cc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000052
[  152.491662][ T6029] RAX: ffffffffffffffda RBX: 0000562b9cb918a0 RCX: 00007f839967acc7
[  152.499807][ T6029] RDX: 0000562b9cb6a010 RSI: 00007ffe59b17ce0 RDI: 00007ffe59b180e0
[  152.507897][ T6029] RBP: 0000562b9cb87f10 R08: 00000000000001e0 R09: 0000000000000000
[  152.515924][ T6029] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe59b17ce0
[  152.524069][ T6029] R13: 00007ffe59b180e0 R14: 0000000000000000 R15: 0000562b7cb019dd
[  152.532255][ T6029]  </TASK>
[  152.535321][ T6029] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  152.542646][ T6029] CPU: 1 PID: 6029 Comm: udevd Not tainted syzkaller #0
[  152.549717][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  152.559994][ T6029] Call Trace:
[  152.563386][ T6029]  <TASK>
[  152.566340][ T6029]  dump_stack_lvl+0x18c/0x250
[  152.571053][ T6029]  ? show_regs_print_info+0x20/0x20
[  152.576273][ T6029]  ? load_image+0x400/0x400
[  152.580839][ T6029]  panic+0x2dc/0x730
[  152.584784][ T6029]  ? bpf_jit_dump+0xd0/0xd0
[  152.589345][ T6029]  __warn+0x2e0/0x470
[  152.593367][ T6029]  ? folio_lruvec_lock_irqsave+0x202/0x260
[  152.599202][ T6029]  ? folio_lruvec_lock_irqsave+0x202/0x260
[  152.605054][ T6029]  report_bug+0x2be/0x4f0
[  152.609422][ T6029]  ? folio_lruvec_lock_irqsave+0x202/0x260
[  152.615284][ T6029]  ? folio_lruvec_lock_irqsave+0x202/0x260
[  152.621141][ T6029]  ? folio_lruvec_lock_irqsave+0x204/0x260
[  152.627072][ T6029]  handle_bug+0xcf/0x120
[  152.631342][ T6029]  exc_invalid_op+0x1a/0x50
[  152.635890][ T6029]  asm_exc_invalid_op+0x1a/0x20
[  152.640789][ T6029] RIP: 0010:folio_lruvec_lock_irqsave+0x202/0x260
[  152.647250][ T6029] Code: 4c 89 f7 e8 30 21 f9 ff 48 8b 04 24 49 89 06 e9 28 ff ff ff 48 89 df 48 c7 c6 20 b0 d6 8a e8 d5 58 e1 ff c6 05 96 09 8f 0c 01 <0f> 0b e9 2b fe ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c a9 fe
[  152.666996][ T6029] RSP: 0018:ffffc9000505f4d8 EFLAGS: 00010246
[  152.673117][ T6029] RAX: 193b04ed819f3c00 RBX: ffffea00017c1a00 RCX: 193b04ed819f3c00
[  152.681123][ T6029] RDX: 0000000000000003 RSI: ffffffff8acace80 RDI: ffffffff8b1c74a0
[  152.689118][ T6029] RBP: ffffc9000505f580 R08: ffffffff8e8a5f2f R09: 1ffffffff1d14be5
[  152.697117][ T6029] R10: dffffc0000000000 R11: fffffbfff1d14be6 R12: ffff8880b8f36c28
[  152.705109][ T6029] R13: dffffc0000000000 R14: ffff888140f58000 R15: 0000000000000000
[  152.713118][ T6029]  ? folio_lruvec_lock_irqsave+0x1fb/0x260
[  152.719110][ T6029]  ? folio_memcg+0x127/0x480
[  152.723738][ T6029]  folio_batch_move_lru+0x2b4/0x660
[  152.728967][ T6029]  ? folio_add_lru+0xd30/0xd30
[  152.733772][ T6029]  ? lru_add_drain_cpu+0x8e0/0x8e0
[  152.738925][ T6029]  lru_add_drain_cpu+0x109/0x8e0
[  152.743899][ T6029]  ? filemap_remove_folio+0x1ae/0x2c0
[  152.749328][ T6029]  ? folio_add_lru_vma+0x1f0/0x1f0
[  152.754488][ T6029]  ? _raw_spin_lock_irq+0xbb/0xf0
[  152.759542][ T6029]  ? do_raw_spin_unlock+0x121/0x230
[  152.764762][ T6029]  ? lru_add_drain+0x79/0x3e0
[  152.769455][ T6029]  ? lru_add_drain+0x79/0x3e0
[  152.774155][ T6029]  lru_add_drain+0x121/0x3e0
[  152.778775][ T6029]  __folio_batch_release+0x48/0xe0
[  152.783912][ T6029]  shmem_undo_range+0x630/0x1b20
[  152.788892][ T6029]  ? shmem_truncate_range+0xa0/0xa0
[  152.794134][ T6029]  ? inode_wait_for_writeback+0x1e3/0x230
[  152.799889][ T6029]  ? __lock_acquire+0x7d40/0x7d40
[  152.804935][ T6029]  ? do_raw_spin_lock+0x11f/0x2c0
[  152.810080][ T6029]  shmem_evict_inode+0x245/0x9e0
[  152.815051][ T6029]  ? inode_wait_for_writeback+0x1e3/0x230
[  152.820796][ T6029]  ? shmem_free_in_core_inode+0xb0/0xb0
[  152.826373][ T6029]  ? sb_clear_inode_writeback+0x360/0x360
[  152.832115][ T6029]  ? do_raw_spin_lock+0x11f/0x2c0
[  152.837180][ T6029]  ? bit_waitqueue+0x30/0x30
[  152.841795][ T6029]  ? do_raw_spin_unlock+0x121/0x230
[  152.847045][ T6029]  ? shmem_free_in_core_inode+0xb0/0xb0
[  152.852620][ T6029]  evict+0x4ca/0x8d0
[  152.856547][ T6029]  ? proc_nr_inodes+0x230/0x230
[  152.861514][ T6029]  ? do_raw_spin_unlock+0x121/0x230
[  152.866740][ T6029]  ? _raw_spin_unlock+0x28/0x40
[  152.871613][ T6029]  ? iput+0x706/0x920
[  152.875617][ T6029]  __dentry_kill+0x431/0x650
[  152.880235][ T6029]  dentry_kill+0xb8/0x290
[  152.884591][ T6029]  ? dput+0x3b/0x1e0
[  152.888518][ T6029]  dput+0xfe/0x1e0
[  152.892270][ T6029]  do_renameat2+0x8f9/0xce0
[  152.896794][ T6029]  ? __lock_acquire+0x7d40/0x7d40
[  152.901875][ T6029]  ? fsnotify_move+0x4e0/0x4e0
[  152.906670][ T6029]  ? __check_object_size+0x506/0xa20
[  152.912028][ T6029]  ? strncpy_from_user+0x197/0x2d0
[  152.917171][ T6029]  ? getname_flags+0x20a/0x500
[  152.921968][ T6029]  __x64_sys_rename+0x86/0x90
[  152.926662][ T6029]  do_syscall_64+0x55/0xa0
[  152.931104][ T6029]  ? clear_bhb_loop+0x40/0x90
[  152.935825][ T6029]  ? clear_bhb_loop+0x40/0x90
[  152.940532][ T6029]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  152.946454][ T6029] RIP: 0033:0x7f839967acc7
[  152.950904][ T6029] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8
[  152.970625][ T6029] RSP: 002b:00007ffe59b17cc8 EFLAGS: 00000206 ORIG_RAX: 0000000000000052
[  152.979153][ T6029] RAX: ffffffffffffffda RBX: 0000562b9cb918a0 RCX: 00007f839967acc7
[  152.987148][ T6029] RDX: 0000562b9cb6a010 RSI: 00007ffe59b17ce0 RDI: 00007ffe59b180e0
[  152.995143][ T6029] RBP: 0000562b9cb87f10 R08: 00000000000001e0 R09: 0000000000000000
[  153.003164][ T6029] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe59b17ce0
[  153.011164][ T6029] R13: 00007ffe59b180e0 R14: 0000000000000000 R15: 0000562b7cb019dd
[  153.019191][ T6029]  </TASK>
[  153.022827][ T6029] Kernel Offset: disabled
[  153.027169][ T6029] Rebooting in 86400 seconds..