last executing test programs:

2m43.056393505s ago: executing program 4 (id=449):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0)

2m42.492764608s ago: executing program 4 (id=452):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x25dfdbff, {0x7a, 0x0, 0x0, r2, 0x14200, 0x64808}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040)

2m41.982403268s ago: executing program 4 (id=457):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

2m41.668140326s ago: executing program 4 (id=460):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000440)={[{@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@delalloc}]}, 0x2, 0xbe0, &(0x7f0000001f40)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x0)
getdents(r0, &(0x7f0000001280)=""/4075, 0xffb)

2m40.833379546s ago: executing program 4 (id=466):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'nq\x00', 0x21, 0x8, 0x4c}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x80000000, 0x12d5f, 0x3}}, 0x44)

2m39.733058869s ago: executing program 4 (id=475):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, 0x0)

2m39.219914885s ago: executing program 32 (id=475):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, 0x0)

2m24.629593685s ago: executing program 3 (id=581):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = epoll_create(0x100)
r1 = socket$nl_route(0x10, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x30000004})

2m24.290024984s ago: executing program 3 (id=584):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

2m24.043110617s ago: executing program 3 (id=587):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@errors_remount}]}, 0xfe, 0x264, &(0x7f0000000700)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)="a6", 0x1, 0x8000c61)
fallocate(r0, 0x3, 0x5000000, 0x8000c62)

2m23.18841784s ago: executing program 3 (id=594):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51f, &(0x7f0000000700)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00')

2m22.257033721s ago: executing program 3 (id=600):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

2m18.450458499s ago: executing program 3 (id=624):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x800400, &(0x7f0000000480)={[{@lastblock={'lastblock', 0x3d, 0x1}}, {@mode}, {@session}, {@noadinicb}, {@nostrict}, {@uid}, {@shortad}, {@uid_ignore}, {@shortad}, {@utf8}]}, 0x8, 0xc24, &(0x7f0000000d00)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)

2m17.609360953s ago: executing program 33 (id=624):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000c80)='./file0\x00', 0x800400, &(0x7f0000000480)={[{@lastblock={'lastblock', 0x3d, 0x1}}, {@mode}, {@session}, {@noadinicb}, {@nostrict}, {@uid}, {@shortad}, {@uid_ignore}, {@shortad}, {@utf8}]}, 0x8, 0xc24, &(0x7f0000000d00)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)

6.721087694s ago: executing program 6 (id=1446):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, r2, 0x0, 0x5, 0x0, 0x5, {0x80000001, 0x7fd, 0x0, 0x0, 0x8, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5, 0xff, 0x8, 0x0, "d20bddda92e75aec79ff0300d28001000b0000000000001000000900"}})

6.415702371s ago: executing program 6 (id=1450):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0xb919, &(0x7f000000c140)="$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")
creat(&(0x7f0000000500)='./file1\x00', 0x0)

5.229284483s ago: executing program 6 (id=1461):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xcc, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x9c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfd}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xcc}}, 0x0)

4.038371694s ago: executing program 1 (id=1472):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e27, 0xfffffffd, @loopback, 0x80000000}, r1}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48)

3.830596363s ago: executing program 1 (id=1474):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fsopen(&(0x7f0000000100)='bpf\x00', 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, &(0x7f0000000100))

3.538981574s ago: executing program 1 (id=1477):
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000380)="a74de99b620a6fb2b11d4d9b28cb4ebdbc0e3f585eea17ac562af10e46ba4e16ea6444273221703bb1e27b3527", 0x2d}], 0x1, 0x0, 0x0, 0x4008800}}], 0x1, 0x0)
r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109025f00030100000009040000000101"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00030400000004030b"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00032f0000003803"]}, 0x0)

3.359059607s ago: executing program 2 (id=1478):
unshare(0xa020480)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8)

3.109030829s ago: executing program 6 (id=1481):
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e08057b0c"], 0x3f)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

2.617664404s ago: executing program 7 (id=1483):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570646174650464656661756c7420757365723a6e"], 0x19, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

2.486138937s ago: executing program 2 (id=1486):
r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0)

2.418465438s ago: executing program 7 (id=1487):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780)={<r2=>0xffffffffffffffff}, 0x111, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r2, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x8, 0x5, {}, 0x1, 0x2, 0x4}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x80000005}}}, 0x118)

2.324082217s ago: executing program 6 (id=1489):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000001b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000001c40)="f6", 0x1)

2.206586219s ago: executing program 2 (id=1490):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2210052, 0x0, 0x1, 0x0, 0x0)
rename(&(0x7f0000001a40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0)='./bus\x00')

2.155303551s ago: executing program 5 (id=1491):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')

2.07059778s ago: executing program 7 (id=1492):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x10000, 0x2b}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

1.913855408s ago: executing program 7 (id=1493):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000200)=ANY=[], 0x5, 0x62c, &(0x7f0000000640)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000001e00)=ANY=[], 0x361, 0x1)
setresuid(0x0, 0xee01, 0x0)
listxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0xfffffffffffffdae)

1.891605404s ago: executing program 0 (id=1494):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x420, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}], [{@flag='dirsync'}]}})

1.722136915s ago: executing program 0 (id=1495):
syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00')
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40})
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')

1.611453816s ago: executing program 2 (id=1496):
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0xff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x2}]}, 0x3c}}, 0x14)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

1.483455751s ago: executing program 1 (id=1497):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x58, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x5, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x7, 0x9, 0xe1b2}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}]}]}]}}]}, 0x58}}, 0x20008050)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000001700)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.451315443s ago: executing program 7 (id=1498):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0xb5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0xfecc)

1.366423036s ago: executing program 0 (id=1499):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x1519, &(0x7f0000001b40)="$eJzs3AvYTdXWOPAx5pyLl6Sd5D7HHIudXKZLklwSEkmSJEluCUmSJCHxklsSkiT3JPeQ3EJyv99yT5IjSZKQkGT+H13+vvN1vq9zvtP3Oc95x+951rPneNceY835jvfZe6317Hd/3WFQlXpVK9VhZvin4C8PqQCQAgB9AeAqAIgAoGSWklkAh0IGjan/3EHEn+v+KZd7BuJykv6nbdL/tE36n7ZJ/9M26X/aJv1P26T/aZv0X4i0bMvUnFfLlna3/7v7/yD3///lyPv/v5FDRUZ9vq7ItR3/gRTpf9om/U+jzC8P0v+0Tfqftkn/0zbp/7+5CKDif7Nb+p+2Sf+FSMsu9/1n2S7vdrn//oQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpA1nwyUGAH4bX+55CSGEEEIIIYQQ4s8T0l/uGQghhBBCCCGEEOJ/H4ICDQYiSAfpIQUyQEa4AjLBlZAZroIEXA1Z4BrICtdCNsgOOSAn5ILckAcsEDhgiCEv5IMkXAf54XooAAWhEBQGD0WgKBSD4nADlIAboSTcBKXgZigNZaAslINboDzcChWgIlSC26Ay3A5VoCrcAdXgTqgOd0ENuBtqwj1QC+6F2nAf1IH7oS48APXgQagPD0EDaAiNoDE0+R/lPwdd4HnoCt0gFbpDD3gBekIv6A19oC+8CP3gJegPL8MAGAiD4BUYDK/CEHgNhsLrMAzegOEwAkbCKBgNY2AsvAnj4C0YD2/DBJgIk2AyTIGpMA3egekwA2bCuzAL3oPZMAfmwjyYD+/DAlgIi+ADWAwfwhJYCstgOayAlbAKVsMaWAvrYD1sgI2wCTbDFvgItsI22A47YCfsgt3wMeyBT2AvfAr74LN/MP/Mf8rviICAChUaNJgO02EKpmBGzIiZMBNmxsyYwARmwSyYFbNiNsyGOTAH5sJcmAfzICEhI2NezItJTGJ+zI8FsAAWwkLo0WNRLIrF8QYsgSWwJJbEUlgKS2MZLIPlsByWx/JYAStgJayElbEyVsEqeAfegXdidayONbAG1sSaWAtrYW2sjXWwDtbFulgP62F9rI8NsAE2wkbYBJtgU2yKzbAZtsAW2BJbYitsha2xNbbBNtgW22I7bIftsT12wA7YETthJ3wOn8Pn8XnshpVVd+yBPbAn9sTe2Af74IvYD1/Cl/BlHIADcRC+gq/gqzgET+NQfB2H4TAsr0bgSByFrMbgWByL43AcjsfxOAEn4kScjFNwKk7DaTgdZ+AMfBdn4Xv4Hs7BOTgP5+N8XIALcREuwsV4BpfgUlyGy3EFrsQVuBrX4Gpch+txHW7EjbgZN+NH+BFuw224A3fgLtyFH+PH+Al+ggNwH+7D/bgfD+ABPIgH8RAewsN4GI/gETyKR/EYHsPjeAJP4gk8hafwNJ7Bs3gWz+E5PI/P5Pqy7q6CaweAusgoo9KpdCpFpaiMKqPKpDKpzCqzSqiEyqKyqKwqq8qmsqkcKofKpXKpPCqPIkWKVazyqrwqqZIqv8qvCqgCqpAqpLzyqqgqqoqr4qqEKqFKqptUKXWzKq3KqOa+nCqnyqsWvoKqqCqpSqqyul1VUVVVVVVNVVPVVXVVQ9VQNVVNVUvdq2qr7tgb71cXO1NPDcT6ahA2UA1VI9VYvYoPq6ZqCDZTzU/89oLWSjX1rdUTqo0aiW3VU2oUPq3aqzHYQT2rOqpOqrN6TnVRzXzXdL9mqMnYU/VSvVUfNR1vVxc7VkW9rAaogWqQekXNw1fVEPWaGqpeV8PUG2q4GqFGqlFqtBqjxqo31Tj1lhqv3lYT1EQ1SU1WU9RUNU29o6arGWqmelfNUu+p2WqOmqvmqfnqfbVALVSL1AdqsfpQLVFL1TK1XK1QK9UqtVqtUWvVOrVebVAb1Sa1WW1RH6mtapvarnaonWqX2q0+VnvUJ2qv+lTtU5+p/eov6oD6XB1UX6hD6kt1WH2ljqiv1VH1jTqmvlXH1Ql1Un2nTqnv1Wl1Rp1VP6hz6kd1Xv2kLqigQKNWWmujI51Op9cpOoPOqK/QmfSVOrO+Sif01TqLvkZn1dfqbDq7zqFz6lw6t86jrSbtNOtY59X5dFJfp/Pr63UBXVAX0oW110V0UV1MF9c36BL6Rl1S36RL6Zt1aV1Gl9Xl9C26vL5VV9AVdSV9m66sb9dVdFV9h66m79TV9V26hr5b19T36Fr6Xl1b36fr6Pt1Xf2Arqcf1PX1Q7qBbqgb6ca6iX5YN9WP6Ga6uW6hH9Ut9WO6lX5ct9ZP6Db6Sd1WP6Xb6ad1e/2M7qCf1R11J91Z/6Qv6KC76m46VXfXPfQLuqfupXvrPrqvflH30y/p/vplPUAP1IP0K3qwflUP0a/pofp1PUy/oYfrEXqkHqVH6zF6rH5Tj9Nv6fH6bT1BT9ST9GQ9RU/VvX+tNPPvyH/rb+T3//nom/UW/ZHeqrfp7XqH3ql36d16t96j9+i9eq/ep/fp/Xq/PqAP6IP6oD6kD+nD+rA+oo/oo/qoPqaP6eP6hP5Bf6dP6e/1aX1Gn9E/6HP6nD7/6+8ADBpltDEmMulMepNiMpiM5gqTyVxpMpurTMJcbbKYa0xWc63JZrKbHCanyWVymzzGGjLOsIlNXpPPJM11Jr+53hQwBU0hU9h4U8QUNcX+6fw/ml8T08Q0NU1NM9PMtDAtTEvT0rQyrUxr09q0MW1MW9PWtDPtTHvT3nQwHUxH09F0Np1NF9PFdDVdTapJNT3MC6an6WV6mz6mr3nR9DP9TH/T3wwwA8wgM8gMNoPNEDPEDDVDzTAzzAw3w81IM9KMNqPNWDPWjDPjzHgz3kwwE8wkM8lMMVPMNDPNTDfTzUwz08wys8xsM9vMNXPNfDPfLDALzCKzyCw2i80Ss9QsNcvNcrPSrDSrzWqz1qw16816s9FsNEvMFrPFbDVbzXaz3ew0O81us9vsMXvMXrPX7DP7zH6z3xwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycNCfNKXPKnDanzVlz1pwz58x5c95cMBcunvZFKlKRiUyULkoXpUQpUcYoY5QpyhRljjJHiSgRZYmyRFmja6NsUfYoR5QzyhXljlLBRhS5iKM4yhvli5LRdVH+6PqoQFQwKhQVjnxUJCoaFYuKRzdEJaIbo5LRTVGp6OaodFQmKhuVi26Jyke3RhWiilGl6LaocnR7VCWqGt0RVYvujKpHd0U1orujmtE9Ua3o3qh2dF9UJ7o/qhs9ENWLHozqRw9FDaKGUaOocdTkT60fwunsj/iutptNtd1tD/uC7Wl72d62j+1rX7T97Eu2v33ZDrAD7SD7ih1sX7VD7Gt2qH3dDrNv2OF2hB1pR9nRdowda9+04+xbdrx9206wE+0kO9lOsVPtNPuOnW5n2Jn2XTvLvmdn2zl2rp1n59v37QK70C6yH9jF9kO7xC61y+xyu8KutKvsarvGrrXr7Hq7wW60m+xmu8V+ZLfabXa73WF32l12t/3Y7rGf2L32U7vPfmb327/YA/Zze9B+YQ/ZL+1h+5U9Yr+2R+039pj91h63J+xJ+509Zb+3p+0Ze9b+YM/ZH+15+5O9YMPFk/uLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUhbJQVspK2Sgb5aAclItyUR7KQxcxMeWlvJSkJOWn/FSAClAhKkSePBWlolScilMJKkElqSSVolJUmkpTWSpLt9AtdCvdShWpIt1Gt9HtdDtVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ+l1GkZv0HAaQSNpFI2mMTSWxtI4GkfjaTxNoAk0iSbRFJpC02gaTafpNJNm0iyaRbNpNs2luTSf5tMCWkCLaBEtpsW0hJbQMlpGK2gFraJVtIbW0DpaRxtoA22iTbSFttBW2krbaTvtpJ20m3bTHtpDe2kv7aN9tJ/20wE6QAfpIB2iQ3SYDtMROkJH6Sgdo2N0nI7TSTpJp+gUnabTdJbO0jn6kc7TT3SBAqU4BRndFS6Tu9Jldle5FJfBXYwjALgY53A5XS6X2+Vx1mVz2f8qJudcAVfQFUr59fzKFfsldoWdd0VcUVfMlXZlXFlXzt3iyrtbXYXfxdXcna66u8vVcHe7qu6Ov4pruntcLfegq+0ecnVcQ1fXNXb13IOuvnvINXANXSPX2LV0j7lW7nHX2j3h2rgnfxcvcAvdGrfWrXPr3R73iTvrfnBH3NfunPvRdXXdXF/3ouvnXnL93ctugBv4u3iYe8MNdyPcSDfKjXZjfhdPcpPdFDfVTXPvuOluxu/i+e59N8stcrPdHDfXzfs5vjinRe4Dt9h96Ja4pW6ZW+5WuJVulVv9/+e63G10m9xmt9t97La6bW672+F2ul0/xxfXsdd96va5z9xh95U74D53B91Rd8h9+XN8cX1H3TfumPvWHXcn3En3nTvlvnen3Zmf139x7d+5n9wFFxwwsmLNhiNOx+k5hTNwRr6CM/GVnJmv4gRfzVn4Gs7K13I2zs45OCfn4tychy0TO2aOOS/n4yRfx/n5ei7ABbkQF2bPRbgoF+PifAOX4Bu5JN/EpfhmLs1luCyX41u4PN/KFbgiV+LbuHIIXIWr8h1cje/k6nwX1+C7uSbfw7X4Xq7N93Edvp/r8gNcjx/k+vwQN+CG3IgbcxN+mJvyI9yMm3MLfpRb8mPcih/n1vwEt+EnuS0/xe34aW7Pz3AHfpY7cifuzM9xF36eu3I3TuXu3INf4J7ci3tzH+7LL3I/fon788s8gAfyIH6FB/OrPIRf46H8Og/jN3g4j+CRPIpH8xgey2/yOH6Lx/PbPIEn8iSezFN4Kk/jd3g6z+CZ/C7P4vd4Ns/huTyP5/P7vIAX8iL+gBfzh7yEl/IyXs4reCWv4tW8htfyOl7PG3gjb+LNvIU/4q28jbfzDt7Ju3g3f8x7+BPey5/yPv6M9/Nf+AB/zgf5Cz7EX/Jh/oqP8Nd8lL/hY/wtH+cTfJK/41P8PZ/mM3yWf+Bz/COf55/4AgeGGGMV69jEUZwuTh+nxBnijPEVcab4yjhzfFWciK+Os8TXxFnja+NscfY4R5wzzhXnjvPENqbYxRzHcd44X5yMr4vzx9fHBeKCcaG4cOzjInHRuFhcPL4hLhHfGJeMb4pLxTfHpeMy8YN3l4tvicvHt8YV4opxpfi2uHJ8e1wlrhrfEVeL74yrx3fFNeK74xLxPXGt+N64dnxfXCe+P64bPxDXix+M68cPxQ3ihnGjuHHcJH44bho/EjeLm8ct4kfjlvFjcav48bh1/ETcJn7yD/enxt3jHvEL8QtxCHfpucl5yfnJ95MLkguTi5IfJBcnP0wuSS5NLksuT65IrkyuSq5OrkmuTa5Lrk9uSG5MbkpuToZQNT149Mprb3zk0/n0PsVn8Bn9FT6Tv9Jn9lf5hL/aZ/HX+Kz+Wp/NZ/c5fE6fy+f2ebz15J1nH/u8Pp9P+ut8fn+9L+AL+kK+sPe+iC/qG/smvolv6h/xzXxz38I/6h/1j/nH/OP+cf+Eb+Of9G39U76df9q398/4Z/yzvqPv5Dv753wX/7zv6rv5VJ/qe/gevqfv6Xv73r6v7+v7+X6+v+/vB/gBfpAf5Af7wX6IH+KH+qF+mB/mh/vhfqQf6Uf70X6sH+vH+XF+vB/vJ/gJfpKf5Kf4KX6an+an++l+pp/pZxWY5Wf72X6un+vn+/l+gV/gF/lFfrFf7Jf4JX6ZX+ZX+BV+lV/l1/g1fp1f5zf4DX6T3+S3+C1+q9/qt/vtfqff6Xf73X6P3+P3+r1+n9/n9/v9/oA/4A/6L/wh/6U/7L/yR/zX/qj/xh/z3/rj/oQ/6b/zp/z3/rQ/48/6H/w5/6M/73/yF3zwYxNvJsYl3kqMT7ydmJCYmJiUmJyYkpiamJZ4JzE9MSMxM/FuYlbivcTsxJzE3MS8xPzE+4kFiYWJRYkPEosTHyaWJJYmliWWJ1YkViZCyL01DnlDvpAM14X84fpQIBQMhULh4EORUDQUC8XDDaFEuDGUDDeFUuHmUDqUCWXDQ6FBaBgahcahSXg4NA2PhGaheWgRHg0tw2OhVXg8tA5PhDbhydA2PBXahadD+/BM6BCeDR1Dp9A5PBe6hOdD19AtpIbuoUd4IfQMvULv0Cf0DS+GfuGl0D+8HAaEgWFQeCUMDq+GIeG1MDS8HoaFN8LwMCKMDKPC6DAmjA1vhnHhrTA+vB0mhIlhUpgcpoSpYVp4J0wPM8LM8G6YFd4Ls8OcMDfMC/PD+2FBWBgWhQ/C4vBhWBKWhmVheVgRVoZVYXVYE9aGdWF92BA2hk1hc9gSPgpbw7awPewIO8OusDt8HPaET8Le8GnYFz4L+8NfwoHweTgYvgiHwpfhcPgqHAlfh6Phm3AsfBuOhxPhZPgunArfh9PhTDgbfgjnwo/hfPgpXJD/WRNCCCGE+LvoP9jf/W/8LB0AqF/HPQDgym05D/3nmhuy/TLupXK1TADAE9063P/bVrlyamrqr89doiHKNwcAEn9d/7d4KbSAx6A1NIfif3N+vVSnc/wH9ZM3AWT8DzkpcCm+VP+G/6L+w48OW1AqPpvlv6k/B6BAvks5GeBSfKl+if+ifvamfzD/DJ+PBWj2H3IywaX4Uv2i8Ag8Ca3/6plCCCGEEEIIIcQveqmy7f7o+vni9XkucyknPVyK/+j6XAghhBBCCCGEEJff0506P/5w69bN2/19A/z1vsA/lvU3Byn/+NFlIIN/ocFvn535V5nP051++1TOn1Hwcr0iCSGEEEIIIf63XDrpv9wzEUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQggh0q7/i68lu9xrFEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIS63/xcAAP//VE0uvg==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0)

1.366232865s ago: executing program 5 (id=1500):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x1, 0x151b, &(0x7f0000002280)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x2)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

1.204526683s ago: executing program 2 (id=1501):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x80, 0x3, 0x4, 0x2}, 0x5dc}, 0x1, 0x0, 0x0, 0xc4}, 0x0)

1.162525218s ago: executing program 1 (id=1502):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f000000bf00)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f000000c000)={0x0, 0x0, &(0x7f000000bfc0)={&(0x7f0000000040)={0x30, r0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000)

1.033159177s ago: executing program 0 (id=1503):
r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0)

834.940879ms ago: executing program 2 (id=1504):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
mkdir(&(0x7f0000000080)='./bus\x00', 0x3)
pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="b0", 0x1}], 0x1, 0xe7b, 0x0, 0x1)

799.275096ms ago: executing program 1 (id=1505):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000080)={[{@utf8no}, {@shortname_winnt}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@numtail}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@utf8}, {@utf8no}, {@numtail}]}, 0x1, 0x363, &(0x7f0000000c80)="$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")
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0xff13)

785.931411ms ago: executing program 5 (id=1506):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0x20)

581.237608ms ago: executing program 7 (id=1507):
r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT, @ANYBLOB="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", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRES8=r0], 0x5, 0x0, &(0x7f0000000000))
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)

580.389707ms ago: executing program 0 (id=1508):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
close(r0)

386.678226ms ago: executing program 5 (id=1509):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r1=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@mcast1, r1}, 0x14)

358.466872ms ago: executing program 0 (id=1510):
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000080)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@ref_verify}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x5, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x9]}})
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000300)={0x1, 0x6})
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4040, &(0x7f0000000b00)={[{@force}, {}, {@nls={'nls', 0x3d, 'macromanian'}}, {@uid={'uid', 0x3d, 0xee01}}, {@nobarrier}, {@part={'part', 0x3d, 0x4}}]}, 0x20, 0x6f5, &(0x7f0000002480)="$eJzs3U1sHGcZAOB3Ztdrbyq529K0ASHFakQEDSS2l5IgIREQQj5UEIlLryZxGitrN7Jd5ESIuECBG5xQDj0UIXPoCXFAKuKAKDckJCTuuUfiwC3iwKKZnbF3/bPeTby2Cc8jzc43M9/P+707O7s7TrQB/N+aezPGNiKJuQtvrGfbDzebrYebzaWyHBHjEZFGVDurSJYjko8jrkZniU9mO4vukv3Gef3RR++ff/Bhs7NVLZa8ftqv3bZ2nxE2iiWmIqJSrIdU3a+/63v0d3+orpOtuLOEnSsTB8etvcvGMM0HeN0CJ939iMrYHvsbEaciYqL4HBDF1SE94vAO3VBXOQAAADiZKgdVeP5xPI71mDyacAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODZkHR+MzAplrQsT0VS/P7/t4tquVrteMM9wOcPOP7ezSMKBAAAAAAAAAAO39h28ezjeBzrMVlut5P8b/6v5hsv5Y/PxTuxGguxEhdjPeZjLdZiJWYixia7+qytz6+trczsbvnLyFq22+37RcvZiGjsajk74jkDAAAAAAAAwLPthzEXk8cdBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdEsiKp1VvrxUlhuRViNiIiJqWb2NiD+W5ZOg8YTt/nTIcQAAAMAJVC/Wk8l/OoV2kn/nfzn/3j8R78RyrMVirEUrFuJGfi+g860//ftGs/Vws7mULbs7/to/h4oj7zEiKvHuPiNP5zVOb7WYi2/Gd+JCTMW1WInF+F7Mx1osxFTUs0nEfCTRqHfuXjTKOHvjrRRdXe0J5drO2M7u2D6TR1KPm7GYx3YxrtfK3tK8RhJnukb7fS1iR4bezbKTfLUwYI5udD1fvyjuyxTazw/Yx2g08pmPbWVkOst9kY0X9s59acjzZOdIM5Fu3YN6aXuUbHPnSGXOvztMzk8V6yzXP+nN+WEb8lbazkzMRlqcfREv9+b8zmcevNjb+HP/+PO1W+ny7Vs3Vy+McEojNVYWdmai2ZWJV/qffUUmWlkmNgbPxNjOHRNPMY9DVCuy0bmwDXa1/EZemo9Xu07Bt+NGLMTlmI6ZuBLT8eWYjWbPGXa6J6/V5lJvTvLXWrr7+lbvE/y5z3ZV+ukBlUdh//GyvLzQldfuK10jP1bsufrzmO7K0ov9z74neReofqooZGP8aOsd5yToyURxbS6jK9+g9snEr9rZ42pr+fbKrfk7A453vlhnL9v3eq/Nv37qyTyV7HzJrrjVfCvPSb08X7Jjn9iKtjdfteIvLp126a5jp7eONWIyFuNb+75Sa8VnuN09dY69suexZn7sTNexnk858Xa08k8hO0wdTVYBGNip107V6o/qf6t/UP9x/Vb9jYmvj18Z/3Qtxv5S/UPlt+lv0q8kr8UH8YOYPO5IAQAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWbB6997t+VZrYWWEhdoTjhXpgXU2nxusw2hE9B8rKQq1UWdj6MLPit8rPLye/zXRNxv1GNF0ftd/FrWnHiIZ/fmcPROH0mH5w2n5nnblwFZ/vRTR2VMtW+1duRqrE/s9g+Pbz3s0bs+3/t3uqVOPrpcM8Iy7tLZ059Lq3XtfWFyaf2vhrYXl2SuXr1xufmnmi5duLrYWpjuPxx0lMAqrd+9VjjsGAAAAAAAAAAAAYDjFv/5fW0mzQjL8/9KpHlCntrK698hnj3qqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP+ouTdjbCOSmJm+OJ1tP9xstrKlLG/XrEZEGhHJ9yOSjyOuRmeJRld3yX7jvP7oo/fPP/iwud1Xtayf9ms3mI1iiamIqBTrg43v0c3u/q539bfxROElWzPMEnauTBwct/8GAAD//3Kx7+A=")

252.377387ms ago: executing program 5 (id=1511):
r0 = io_uring_setup(0x1ec1, &(0x7f0000000140)={0x0, 0x441a, 0x8, 0x2, 0x2c0})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000003300)=[{0xf00, 0x0, 0x2000000, 0x0, 0x0}], 0x1)

133.689391ms ago: executing program 6 (id=1512):
r0 = timerfd_create(0x0, 0x800)
timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0)

0s ago: executing program 5 (id=1513):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

kernel console output (not intermixed with test programs):

ooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  188.083146][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  188.157397][ T7830] loop5: detected capacity change from 0 to 2048
[  188.226110][ T7830] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  188.233925][ T5942] usb 7-1: Using ep0 maxpacket: 16
[  188.263248][ T5942] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.274083][ T7830] NILFS (loop5): mounting unchecked fs
[  188.288465][   T36] bridge_slave_0: left allmulticast mode
[  188.314528][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  188.331876][ T7830] NILFS (loop5): recovery complete
[  188.341632][   T36] bridge_slave_0: left promiscuous mode
[  188.367533][ T7843] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.368761][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.390754][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  188.422863][ T5942] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  188.442926][ T5942] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  188.535023][ T5942] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  188.583762][ T5942] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  188.610711][ T5942] usb 7-1: Manufacturer: syz
[  188.631177][ T5942] usb 7-1: config 0 descriptor??
[  188.675915][ T7848] vxcan1: tx address claim with dest, not broadcast
[  189.083818][ T5942] rc_core: IR keymap rc-hauppauge not found
[  189.103815][ T5942] Registered IR keymap rc-empty
[  189.109245][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.163895][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.177909][ T7856] loop2: detected capacity change from 0 to 4096
[  189.200835][ T7856] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  189.215813][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  189.289241][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input8
[  189.383870][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.427427][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.466022][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.503971][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.544883][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.589650][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.623925][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.660511][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.694054][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.735585][ T5942] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  189.784834][ T5942] mceusb 7-1:0.0: Registered  with mce emulator interface version 1
[  189.803281][ T5942] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  189.840459][ T5942] usb 7-1: USB disconnect, device number 2
[  190.164117][   T51] Bluetooth: hci1: command tx timeout
[  190.206656][ T7858] loop5: detected capacity change from 0 to 32768
[  190.280911][ T7858] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  190.340910][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.370609][ T7858] (syz.5.642,7858,1):ocfs2_remove_inode_range:1794 ERROR: status = -22
[  190.392623][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.412769][ T7858] (syz.5.642,7858,1):__ocfs2_change_file_space:2045 ERROR: status = -22
[  190.415639][   T36] bond0 (unregistering): Released all slaves
[  190.601134][ T5844] ocfs2: Unmounting device (7,5) on (node local)
[  190.651760][   T36] tipc: Disabling bearer <udp:syz2>
[  190.716634][   T36] tipc: Left network mode
[  190.863012][ T7886] loop2: detected capacity change from 0 to 8
[  191.470814][ T7897] loop1: detected capacity change from 0 to 512
[  191.555872][ T7897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  191.618988][ T7897] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.924976][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  192.030427][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'.
[  192.101783][ T7878] loop6: detected capacity change from 0 to 32768
[  192.131790][ T7878] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.650 (7878)
[  192.223703][ T7878] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  192.247802][ T5846] Bluetooth: hci1: command tx timeout
[  192.264933][ T7878] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  192.297808][   T51] block nbd0: Receive control failed (result -32)
[  192.323719][ T7878] BTRFS info (device loop6): using free-space-tree
[  192.654282][   T36] hsr_slave_0: left promiscuous mode
[  192.709168][   T36] hsr_slave_1: left promiscuous mode
[  192.746789][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.757373][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.792080][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.836919][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.990794][   T36] veth1_macvtap: left promiscuous mode
[  193.022281][   T36] veth0_macvtap: left promiscuous mode
[  193.047016][   T36] veth1_vlan: left promiscuous mode
[  193.067086][   T36] veth0_vlan: left promiscuous mode
[  193.204204][  T115] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  193.232593][ T7372] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  193.443859][  T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.459094][  T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.530529][  T115] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  193.561914][ T7956] loop2: detected capacity change from 0 to 128
[  193.577141][  T115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.641792][  T115] usb 6-1: config 0 descriptor??
[  193.698748][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.092623][  T115] sony 0003:054C:024B.0005: unexpected long global item
[  194.143466][  T115] sony 0003:054C:024B.0005: parse failed
[  194.160303][  T115] sony 0003:054C:024B.0005: probe with driver sony failed with error -22
[  194.323288][   T24] usb 6-1: USB disconnect, device number 4
[  194.341221][   T51] Bluetooth: hci1: command tx timeout
[  194.912924][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'.
[  194.996536][   T36] team0 (unregistering): Port device team_slave_1 removed
[  195.077926][   T36] team0 (unregistering): Port device team_slave_0 removed
[  195.518889][ T7832] chnl_net:caif_netlink_parms(): no params data found
[  195.952917][ T7991] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  196.063707][ T7991] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  196.168515][ T7995] loop6: detected capacity change from 0 to 512
[  196.197267][ T7991] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  196.211367][ T7995] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.227831][ T7991] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  196.327763][ T7995] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  196.356053][ T7995] EXT4-fs (loop6): 1 truncate cleaned up
[  196.373859][ T7997] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  196.386713][ T7995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.404608][   T51] Bluetooth: hci1: command tx timeout
[  196.423371][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.432738][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.462678][   T30] audit: type=1800 audit(1750145398.830:13): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.684" name="file1" dev="loop6" ino=15 res=0 errno=0
[  196.489033][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.514961][ T7832] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.522302][ T7832] bridge_slave_0: entered allmulticast mode
[  196.571801][ T7832] bridge_slave_0: entered promiscuous mode
[  196.716659][ T7372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.754255][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.761472][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.823961][ T7832] bridge_slave_1: entered allmulticast mode
[  196.872703][ T7832] bridge_slave_1: entered promiscuous mode
[  197.338357][ T8020] loop1: detected capacity change from 0 to 1024
[  197.395804][ T8013] loop5: detected capacity change from 0 to 4096
[  197.404620][ T8020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.453689][    C1] hrtimer: interrupt took 136560 ns
[  197.690999][ T8013] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  197.751060][ T8013] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  197.898405][ T8013] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  198.000026][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.528868][ T8037] loop1: detected capacity change from 0 to 4096
[  198.698945][ T8045] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.796043][ T7832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.885980][ T5942] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  199.005935][ T7832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.125644][ T5942] usb 6-1: Using ep0 maxpacket: 8
[  199.154051][ T5942] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  199.179776][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.233866][ T5942] usb 6-1: Product: syz
[  199.241208][ T5942] usb 6-1: Manufacturer: syz
[  199.271944][ T5942] usb 6-1: SerialNumber: syz
[  199.311670][ T7832] team0: Port device team_slave_0 added
[  199.312376][ T5942] usb 6-1: config 0 descriptor??
[  199.386827][ T5942] gspca_main: se401-2.14.0 probing 047d:5003
[  199.395685][ T7832] team0: Port device team_slave_1 added
[  199.519840][ T5929] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  199.632758][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.681162][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.753745][ T5929] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[  199.767573][ T7832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.782474][ T5942] gspca_se401: ExtraFeatures: 48
[  199.782524][ T5929] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  199.818300][ T7832] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.844141][ T7832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.846982][ T5929] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  199.983046][ T5929] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  199.986453][ T7832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.007905][ T5942] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9
[  200.053527][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  200.096721][ T5942] usb 6-1: USB disconnect, device number 5
[  200.103631][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  200.151037][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  200.283058][ T5929] usb 3-1: string descriptor 0 read error: -22
[  200.295039][ T5929] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  200.330712][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.422416][ T5929] usb 3-1: config 0 descriptor??
[  200.511793][ T5929] hub 3-1:0.0: bad descriptor, ignoring hub
[  200.536845][ T5929] hub 3-1:0.0: probe with driver hub failed with error -5
[  200.614051][ T5929] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10
[  200.723158][ T7832] hsr_slave_0: entered promiscuous mode
[  200.764920][ T7832] hsr_slave_1: entered promiscuous mode
[  200.777915][ T5929] usb 3-1: USB disconnect, device number 7
[  200.802861][ T7832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  200.873849][ T7832] Cannot create hsr debugfs directory
[  201.020166][ T8053] loop6: detected capacity change from 0 to 32768
[  201.103126][ T8053] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.702 (8053)
[  201.167174][ T8053] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  201.219679][ T8053] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  201.506523][ T8053] BTRFS info (device loop6): rebuilding free space tree
[  201.566957][ T8053] BTRFS info (device loop6): disabling free space tree
[  201.615799][ T8053] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  201.684035][ T8053] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  201.972660][ T8106] loop2: detected capacity change from 0 to 2048
[  202.224024][ T8106] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.452381][ T7372] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  202.671727][ T7832] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  202.847871][ T7832] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  202.934371][ T8113] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[  202.973429][ T7832] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  203.005392][ T8113] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  203.058227][ T7832] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  203.095100][ T8116] netlink: 'syz.2.715': attribute type 10 has an invalid length.
[  203.169069][ T8115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.519359][ T8102] loop1: detected capacity change from 0 to 32768
[  203.569272][ T8102] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.710 (8102)
[  203.708264][ T7832] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.721587][ T8102] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.770159][ T8102] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm
[  203.804787][ T8102] BTRFS info (device loop1): using free-space-tree
[  203.972290][ T7832] 8021q: adding VLAN 0 to HW filter on device team0
[  204.191241][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.198527][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.338078][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.345299][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.762462][ T5836] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.160736][ T7832] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.880608][ T8208] loop5: detected capacity change from 0 to 64
[  207.750983][ T8222] overlayfs: failed to resolve './file0': -2
[  207.869455][ T8187] loop1: detected capacity change from 0 to 32768
[  208.041927][ T8187] non-latin1 character 0xffff found in JFS file name
[  208.148768][ T8187] mount with iocharset=utf8 to access
[  208.260519][ T7832] veth0_vlan: entered promiscuous mode
[  208.389992][ T7832] veth1_vlan: entered promiscuous mode
[  209.008423][ T7832] veth0_macvtap: entered promiscuous mode
[  209.030842][ T7832] veth1_macvtap: entered promiscuous mode
[  209.202855][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.204904][ T8221] loop2: detected capacity change from 0 to 32768
[  209.219705][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  209.286381][ T7832] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.337032][ T8221] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.740 (8221)
[  209.354359][ T7832] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.401322][ T7832] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.432349][   T10] usb 2-1: Using ep0 maxpacket: 32
[  209.451573][ T7832] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.464674][   T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  209.516462][   T10] usb 2-1: config 0 has no interface number 0
[  209.525971][ T8221] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  209.528410][ T7832] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.560006][   T10] usb 2-1: config 0 interface 184 has no altsetting 0
[  209.604075][ T8221] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  209.640191][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  209.675338][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.702819][ T8221] BTRFS info (device loop2): using free-space-tree
[  209.710523][ T5928] hid-generic 0005:0B57:0005.0006: item fetching failed at offset 0/1
[  209.720360][   T10] usb 2-1: Product: syz
[  209.735168][   T10] usb 2-1: Manufacturer: syz
[  209.739802][   T10] usb 2-1: SerialNumber: syz
[  209.777553][   T10] usb 2-1: config 0 descriptor??
[  209.814439][   T10] smsc75xx v1.0.0
[  209.854862][ T5928] hid-generic 0005:0B57:0005.0006: probe with driver hid-generic failed with error -22
[  210.267355][   T30] audit: type=1800 audit(1750145412.247:14): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.740" name="file1" dev="loop2" ino=260 res=0 errno=0
[  210.475906][   T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  210.525531][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.539815][   T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  210.584599][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.621330][   T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  210.693947][   T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  210.763748][ T5835] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  210.768279][   T10] usb 2-1: USB disconnect, device number 4
[  210.819141][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.899322][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.063757][ T8249] loop6: detected capacity change from 0 to 32768
[  211.071843][   T36] bond0: (slave bond_slave_0): interface is now down
[  211.107264][   T36] bond0: (slave bond_slave_1): interface is now down
[  211.154200][ T8249] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.748 (8249)
[  211.192572][   T36] bond0: now running without any active interface!
[  211.329465][ T8249] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  211.422433][ T8249] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm
[  211.490448][ T8249] BTRFS info (device loop6): using free-space-tree
[  211.812989][ T8249] BTRFS info (device loop6): rebuilding free space tree
[  212.377211][ T7372] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.407471][ T8328] loop5: detected capacity change from 0 to 64
[  213.924303][ T8359] loop5: detected capacity change from 0 to 1024
[  214.407574][ T8324] loop1: detected capacity change from 0 to 32768
[  214.488485][ T8369] loop6: detected capacity change from 0 to 64
[  214.561261][ T8371] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.777'.
[  214.687349][ T8324] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  214.876630][   T12] hfsplus: b-tree write err: -5, ino 4
[  215.295682][ T5836] ocfs2: Unmounting device (7,1) on (node local)
[  215.318968][ T8350] loop2: detected capacity change from 0 to 32768
[  215.712915][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.779'.
[  215.804557][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.779'.
[  215.875328][ T8350] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  215.875357][ T8350]   allowing incompatible features above 0.0: (unknown version)
[  215.875393][ T8350]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  216.272491][ T8350] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  216.349746][ T8350] bcachefs (loop2): initializing new filesystem
[  216.460369][ T8350] bcachefs (loop2): going read-write
[  216.788314][ T8350] bcachefs (loop2): marking superblocks
[  216.904228][ T8350] bcachefs (loop2): initializing freespace
[  216.974064][ T8350] bcachefs (loop2): done initializing freespace
[  217.049521][ T8350] bcachefs (loop2): reading snapshots table
[  217.084297][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  217.090451][ T5151] Bluetooth: hci3: command 0x0406 tx timeout
[  217.096482][ T5151] Bluetooth: hci4: command 0x0406 tx timeout
[  217.109960][ T8350] bcachefs (loop2): reading snapshots done
[  217.391938][ T8350] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[  217.417831][ T8350] bcachefs (loop2): done starting filesystem
[  217.551184][ T8440] input: syz1 as /devices/virtual/input/input11
[  217.710374][ T5835] bcachefs (loop2): shutting down
[  217.719877][ T5835] bcachefs (loop2): going read-only
[  217.725125][ T5835] bcachefs (loop2): finished waiting for writes to stop
[  217.823547][ T5835] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  218.010068][ T8396] loop6: detected capacity change from 0 to 32768
[  218.109224][ T5835] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  218.109743][ T8396] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.217020][ T5835] bcachefs (loop2): clean shutdown complete, journal seq 4
[  218.277964][ T5835] bcachefs (loop2): marking filesystem clean
[  218.289184][ T8407] loop7: detected capacity change from 0 to 32768
[  218.499142][ T8407] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.601948][ T5835] bcachefs (loop2): shutdown complete
[  218.683218][ T8396] XFS (loop6): Ending clean mount
[  218.813374][ T8407] XFS (loop7): Ending clean mount
[  218.826976][ T8407] XFS (loop7): Quotacheck needed: Please wait.
[  219.006184][ T8407] XFS (loop7): Quotacheck: Done.
[  219.206199][ T1084] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  219.268286][ T1084] XFS (loop6): Unmount and run xfs_repair
[  219.274061][ T1084] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  219.311607][ T1084] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  219.324539][ T7832] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  219.381670][ T1084] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  219.392957][ T8433] loop1: detected capacity change from 0 to 40427
[  219.405780][ T8433] F2FS-fs (loop1): build fault injection rate: 690
[  219.415364][ T8433] F2FS-fs (loop1): build fault injection type: 0x2
[  219.434019][ T1084] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  219.468365][ T1084] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  219.487554][ T1084] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  219.498720][ T8433] F2FS-fs (loop1): Image doesn't support compression
[  219.525053][ T8433] F2FS-fs (loop1): Image doesn't support compression
[  219.536848][ T1084] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  219.545736][ T1084] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  219.569656][ T8433] F2FS-fs (loop1): invalid crc value
[  219.657303][ T1084] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  219.718237][ T1084] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74
[  219.823577][ T1084] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  219.908378][ T1084] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  220.008600][ T7372] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.258717][ T8433] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  221.099830][    C1] vkms_vblank_simulate: vblank timer overrun
[  221.820229][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.7.820'.
[  221.873801][ T8520] vlan2: entered allmulticast mode
[  222.197747][ T8522] loop6: detected capacity change from 0 to 4096
[  222.345098][ T8531] loop7: detected capacity change from 0 to 2048
[  222.374438][ T8522] ntfs3(loop6): ino=1a, mi_enum_attr
[  222.417678][ T8522] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  222.475457][ T8531] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  222.593366][ T8531] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.741723][ T8531] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag 0
[  222.882395][ T8546] UDF-fs: error (device loop7): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag 0
[  223.456046][ T8560] loop6: detected capacity change from 0 to 64
[  224.091519][ T8566] loop2: detected capacity change from 0 to 512
[  224.196741][ T5921] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  224.207184][ T8566] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.241503][ T8566] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  224.401421][ T8566] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  224.459389][ T5921] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  224.515113][ T5921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.652575][ T5921] usb 8-1: config 0 descriptor??
[  224.664536][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.681620][ T5921] cp210x 8-1:0.0: cp210x converter detected
[  224.730393][ T8579] loop6: detected capacity change from 0 to 64
[  224.839355][   T30] audit: type=1800 audit(1750145425.876:15): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.836" name="file1" dev="loop6" ino=21 res=0 errno=0
[  224.874974][ T8579] syz.6.836: attempt to access beyond end of device
[  224.874974][ T8579] loop6: rw=34817, sector=39, nr_sectors = 125 limit=64
[  225.000002][ T8579] syz.6.836: attempt to access beyond end of device
[  225.000002][ T8579] loop6: rw=34817, sector=167, nr_sectors = 1 limit=64
[  225.100050][ T8579] syz.6.836: attempt to access beyond end of device
[  225.100050][ T8579] loop6: rw=34817, sector=169, nr_sectors = 1 limit=64
[  225.163683][ T8579] syz.6.836: attempt to access beyond end of device
[  225.163683][ T8579] loop6: rw=34817, sector=171, nr_sectors = 7 limit=64
[  225.297277][ T8579] syz.6.836: attempt to access beyond end of device
[  225.297277][ T8579] loop6: rw=34817, sector=179, nr_sectors = 700 limit=64
[  225.358422][ T8538] loop5: detected capacity change from 0 to 32768
[  225.370054][ T5921] cp210x 8-1:0.0: failed to get vendor val 0x000e size 678: -71
[  225.392279][ T5921] cp210x 8-1:0.0: GPIO initialisation failed: -71
[  225.411610][ T8538] 
[  225.411610][ T8538]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  225.411610][ T8538] 
[  225.500530][ T5921] usb 8-1: cp210x converter now attached to ttyUSB0
[  225.605389][ T5921] usb 8-1: USB disconnect, device number 2
[  225.622227][ T8593] syz.2.840 (8593) used obsolete PPPIOCDETACH ioctl
[  225.733265][   T36] read_mapping_page failed!
[  225.779046][ T5921] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  225.788197][ T5921] cp210x 8-1:0.0: device disconnected
[  225.819865][   T36] ERROR: (device loop5): txCommit: 
[  225.819865][   T36] 
[  225.870262][   T36] jfs_write_inode: jfs_commit_inode failed!
[  225.928802][ T5844] 
[  225.928802][ T5844]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  225.928802][ T5844] 
[  225.987239][ T8594] loop1: detected capacity change from 0 to 4096
[  226.008881][ T5844] 
[  226.008881][ T5844]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  226.008881][ T5844] 
[  226.925704][ T8617] loop1: detected capacity change from 0 to 128
[  226.970750][ T8617] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  227.054773][ T8617] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  228.529657][ T8614] loop2: detected capacity change from 0 to 32768
[  228.619834][ T8614] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  228.742148][ T8649] loop7: detected capacity change from 0 to 4096
[  228.765469][ T8614] XFS (loop2): Ending clean mount
[  228.780986][ T8614] XFS (loop2): Quotacheck needed: Please wait.
[  228.799019][ T8649] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  228.800813][ T8628] loop6: detected capacity change from 0 to 32768
[  228.946808][ T8628] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.966206][ T8614] XFS (loop2): Quotacheck: Done.
[  229.018557][ T8649] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  229.096344][ T8614] overlayfs: failed to clone lowerpath
[  229.138701][   T30] audit: type=1800 audit(1750145429.898:16): pid=8649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.860" name="file1" dev="loop7" ino=30 res=0 errno=0
[  229.331194][ T8628] XFS (loop6): Ending clean mount
[  229.538840][ T5835] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  229.707397][ T8686] loop5: detected capacity change from 0 to 512
[  229.826581][ T7372] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.948981][ T8686] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.991621][ T5201] udevd[5201]: worker [7829] terminated by signal 33 (Unknown signal 33)
[  230.001170][ T5201] udevd[5201]: worker [7829] failed while handling '/devices/virtual/block/loop5'
[  230.084027][ T8686] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  230.511662][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.194032][ T8718] loop6: detected capacity change from 0 to 128
[  231.342955][ T8718] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  231.481219][ T8718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.726850][ T8713] loop2: detected capacity change from 0 to 32768
[  232.757623][ T8745] loop6: detected capacity change from 0 to 47
[  232.816399][ T8712] loop5: detected capacity change from 0 to 32768
[  232.888271][ T8712] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.874 (8712)
[  232.967249][ T8713] syz.2.865: attempt to access beyond end of device
[  232.967249][ T8713] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  233.046427][ T8712] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  233.065820][ T8713] lbmIODone: I/O error in JFS log
[  233.090275][ T8713] *** Log Format Error ! ***
[  233.095137][ T8712] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm
[  233.116080][ T8713] lmLogInit: exit(-22)
[  233.151902][ T8713] lmLogOpen: exit(-22)
[  233.160460][ T8712] BTRFS info (device loop5): using free-space-tree
[  233.212418][ T8713] jfs_dirty_inode called on read-only volume
[  233.218586][ T8713] Is remount racy?
[  233.286951][ T8713] jfs_dirty_inode called on read-only volume
[  233.355531][ T8713] Is remount racy?
[  234.145952][ T8780] loop6: detected capacity change from 0 to 16
[  234.297504][ T8780] erofs (device loop6): mounted with root inode @ nid 36.
[  234.324529][ T5844] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  234.431935][ T8780] erofs (device loop6): readahead error at folio 23 @ nid 36
[  234.502677][ T8780] erofs (device loop6): readahead error at folio 22 @ nid 36
[  234.557182][ T8780] erofs (device loop6): readahead error at folio 19 @ nid 36
[  234.605443][ T8780] erofs (device loop6): readahead error at folio 18 @ nid 36
[  234.669950][ T8780] syz.6.890: attempt to access beyond end of device
[  234.669950][ T8780] loop6: rw=524288, sector=67108872, nr_sectors = 8 limit=16
[  235.962901][ T8815] loop6: detected capacity change from 0 to 1024
[  236.019407][ T8815] EXT4-fs: inline encryption not supported
[  236.151535][ T8815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.177331][ T8821] netlink: 16 bytes leftover after parsing attributes in process `syz.2.906'.
[  236.223992][  T115] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  236.472995][  T115] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  236.500269][  T115] usb 2-1: config 0 has no interface number 0
[  236.533776][  T115] usb 2-1: config 0 interface 98 has no altsetting 0
[  236.597023][  T115] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  236.629233][ T7372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.649214][  T115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.682702][  T115] usb 2-1: Product: syz
[  236.713518][  T115] usb 2-1: Manufacturer: syz
[  236.756796][  T115] usb 2-1: SerialNumber: syz
[  236.808704][  T115] usb 2-1: config 0 descriptor??
[  237.058233][ T8851] netlink: 452 bytes leftover after parsing attributes in process `syz.7.915'.
[  237.101724][  T115] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  237.678752][  T115] usb 2-1: reset high-speed USB device number 5 using dummy_hcd
[  237.814641][ T8871] netlink: 'syz.5.923': attribute type 39 has an invalid length.
[  238.138852][  T115] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware
[  238.172058][  T115] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  238.184872][ T5946] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  238.210691][ T5946] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  238.376970][  T115] usb 2-1: USB disconnect, device number 5
[  238.917216][ T8862] loop7: detected capacity change from 0 to 32768
[  238.917261][ T8857] loop6: detected capacity change from 0 to 32768
[  238.934649][ T8862] btrfs: Deprecated parameter 'usebackuproot'
[  238.985798][ T8862] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  239.064464][ T8862] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.920 (8862)
[  239.088795][ T8857] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.265863][ T8862] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  239.381553][ T8862] BTRFS info (device loop7): using crc32c (crc32c-x86_64) checksum algorithm
[  239.384359][ T8857] XFS (loop6): Ending clean mount
[  239.410356][ T8862] BTRFS info (device loop7): using free-space-tree
[  239.466760][ T8857] XFS (loop6): Quotacheck needed: Please wait.
[  239.778047][ T8857] XFS (loop6): Quotacheck: Done.
[  239.851361][ T8862] BTRFS info (device loop7): rebuilding free space tree
[  240.114410][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.7.920'.
[  240.293055][ T7372] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  240.413865][ T7832] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.748386][   T10] kernel write not supported for file /sequencer (pid: 10 comm: kworker/0:1)
[  241.976075][ T8920] loop1: detected capacity change from 0 to 40427
[  242.035505][ T8920] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  242.104195][ T8920] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  242.139421][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.953'.
[  242.544852][ T8920] F2FS-fs (loop1): invalid crc value
[  242.839665][ T8981] macvtap1: entered promiscuous mode
[  242.965098][ T8981] vlan0: entered promiscuous mode
[  243.041218][ T8981] macvtap1: entered allmulticast mode
[  243.057402][ T8981] vlan0: entered allmulticast mode
[  243.120636][ T8981] veth0_vlan: entered allmulticast mode
[  243.570216][ T9008] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  243.579386][ T9008] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  243.588132][ T9008] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  243.598401][ T9008] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.816749][ T8958] loop5: detected capacity change from 0 to 40427
[  243.867349][ T8958] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  243.912650][ T8958] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  243.924259][ T9017] loop2: detected capacity change from 0 to 256
[  244.841765][ T9034] netlink: 'syz.1.959': attribute type 1 has an invalid length.
[  244.849497][ T9034] netlink: 144 bytes leftover after parsing attributes in process `syz.1.959'.
[  244.910733][ T9034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.959'.
[  245.408903][ T9049] loop7: detected capacity change from 0 to 1024
[  245.491710][ T9049] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.580566][ T9056] loop1: detected capacity change from 0 to 8
[  245.728671][ T9056] SQUASHFS error: Failed to read block 0x260685: -5
[  245.755850][ T9056] SQUASHFS error: Unable to read metadata cache entry [260685]
[  245.819609][ T9056] SQUASHFS error: Unable to read directory block [260685:0]
[  246.054813][ T9061] loop2: detected capacity change from 0 to 4096
[  246.112348][ T9061] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  246.206690][ T9061] ntfs3(loop2): Failed to load $Extend (-22).
[  246.243357][ T9061] ntfs3(loop2): Failed to initialize $Extend.
[  246.721373][ T9076] 
: renamed from bond0 (while UP)
[  246.942689][ T9081] Bluetooth: MGMT ver 1.23
[  247.050872][ T9083] loop5: detected capacity change from 0 to 512
[  247.154210][ T9083] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  247.343753][ T9089] loop7: detected capacity change from 0 to 128
[  247.385706][ T9092] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.990'.
[  247.395817][ T9083] EXT4-fs (loop5): 1 truncate cleaned up
[  247.404358][ T9083] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.474821][ T9092] netlink: zone id is out of range
[  247.545084][ T9092] netlink: get zone limit has 8 unknown bytes
[  247.590718][ T9064] loop6: detected capacity change from 0 to 32768
[  247.651125][ T9064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.980 (9064)
[  247.843632][ T9064] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.868173][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.937163][ T9064] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  247.992716][ T9064] BTRFS info (device loop6): using free-space-tree
[  248.239890][ T5921] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  248.254337][ T9122] loop5: detected capacity change from 0 to 256
[  248.303949][ T9064] BTRFS info (device loop6): rebuilding free space tree
[  248.442885][ T5921] usb 8-1: Using ep0 maxpacket: 16
[  248.474139][ T5921] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  248.540103][ T9122] exFAT-fs (loop5): start_clu is invalid cluster(0x400)
[  248.553297][ T5921] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.621689][ T5921] usb 8-1: config 0 has no interface number 0
[  248.673197][ T5921] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  248.732807][ T5921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.772952][ T5921] usb 8-1: Product: syz
[  248.787383][ T5921] usb 8-1: Manufacturer: syz
[  248.821631][ T5921] usb 8-1: SerialNumber: syz
[  248.846537][ T3001] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  248.923274][ T5921] usb 8-1: config 0 descriptor??
[  249.202140][ T5921] usb 8-1: Found UVC 0.00 device syz (046d:08f3)
[  249.209019][ T5921] usb 8-1: No valid video chain found.
[  249.220366][ T7372] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.282796][ T5921] usb 8-1: USB disconnect, device number 3
[  249.988105][ T9101] loop1: detected capacity change from 0 to 32768
[  250.209073][ T9101] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.303392][ T9162] loop5: detected capacity change from 0 to 2048
[  250.476274][ T9162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.571732][ T9101] XFS (loop1): Ending clean mount
[  250.578110][ T9162] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.639736][ T9101] XFS (loop1): Quotacheck needed: Please wait.
[  250.722979][ T9177] hsr0: entered promiscuous mode
[  250.772961][ T9177] macvtap2: entered promiscuous mode
[  250.800127][ T9101] XFS (loop1): Quotacheck: Done.
[  250.842139][ T9177] macvtap2: entered allmulticast mode
[  250.879981][ T9177] hsr0: entered allmulticast mode
[  250.886105][ T9088] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  250.939943][ T9177] hsr_slave_0: entered allmulticast mode
[  250.949680][ T9177] hsr_slave_1: entered allmulticast mode
[  251.003646][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.023969][ T9177] hsr0: left allmulticast mode
[  251.028777][ T9177] hsr_slave_0: left allmulticast mode
[  251.064079][ T9177] hsr_slave_1: left allmulticast mode
[  251.220639][ T5836] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  251.484424][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'.
[  251.983891][ T9198] loop7: detected capacity change from 0 to 2048
[  252.117854][ T9198] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  252.540072][ T9211] netlink: 'syz.2.1022': attribute type 3 has an invalid length.
[  252.585594][ T9213] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  252.594534][ T9213] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  252.603313][ T9213] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  252.612024][ T9213] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  252.620867][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'.
[  252.915624][   T30] audit: type=1326 audit(1750145452.123:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef49b8e929 code=0x7ffc0000
[  253.037071][   T30] audit: type=1326 audit(1750145452.123:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef49b8e929 code=0x7ffc0000
[  253.153045][ T9227] loop7: detected capacity change from 0 to 512
[  253.176809][   T30] audit: type=1326 audit(1750145452.133:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fef49b8e929 code=0x7ffc0000
[  253.298546][   T30] audit: type=1326 audit(1750145452.133:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef49b8e929 code=0x7ffc0000
[  253.320878][    C1] vkms_vblank_simulate: vblank timer overrun
[  253.340718][   T30] audit: type=1326 audit(1750145452.133:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9220 comm="syz.1.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef49b8e929 code=0x7ffc0000
[  253.395550][ T9227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.526298][ T9192] loop5: detected capacity change from 0 to 32768
[  253.533157][ T9227] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  253.691859][ T9227] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.1029: path /48/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  253.862227][ T9227] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 4: comm syz.7.1029: path /48/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1
[  253.951500][ T9227] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 12: comm syz.7.1029: path /48/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  254.028397][ T9192] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  254.028442][ T9192]   allowing incompatible features above 0.0: (unknown version)
[  254.028457][ T9192]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  254.086214][ T9227] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 13: comm syz.7.1029: path /48/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  254.091961][ T9227] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 14: comm syz.7.1029: path /48/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  254.093770][ T9227] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 15: comm syz.7.1029: path /48/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  254.094230][ T9227] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz.7.1029: path /48/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  254.094773][ T9227] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 17: comm syz.7.1029: path /48/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  254.095321][ T9227] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #2: block 18: comm syz.7.1029: lblock 23 mapped to illegal pblock 18 (length 1)
[  254.095924][ T9227] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 19: comm syz.7.1029: path /48/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  254.353916][    C1] vkms_vblank_simulate: vblank timer overrun
[  254.378263][ T9259] loop1: detected capacity change from 0 to 512
[  254.388714][ T7832] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.389391][ T9259] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  254.492702][ T9259] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  254.492812][ T9259] System zones: 0-2, 18-18, 34-34
[  254.550738][ T9259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.550871][ T9259] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.846920][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.851246][ T9249] loop6: detected capacity change from 0 to 32768
[  254.989588][ T9249] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  255.281625][ T7372] ocfs2: Unmounting device (7,6) on (node local)
[  255.348199][ T9246] loop2: detected capacity change from 0 to 32768
[  255.407941][ T9192] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  255.447702][ T9192] bcachefs (loop5): initializing new filesystem
[  255.472061][ T9246] XFS: ikeep mount option is deprecated.
[  255.518138][ T9192] syz.5.1013: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  255.617733][ T9192] CPU: 1 UID: 0 PID: 9192 Comm: syz.5.1013 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) 
[  255.617772][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  255.617787][ T9192] Call Trace:
[  255.617796][ T9192]  <TASK>
[  255.617807][ T9192]  dump_stack_lvl+0x189/0x250
[  255.617855][ T9192]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.617897][ T9192]  ? __pfx__printk+0x10/0x10
[  255.617925][ T9192]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  255.617954][ T9192]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  255.617984][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.618013][ T9192]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  255.618044][ T9192]  warn_alloc+0x214/0x310
[  255.618081][ T9192]  ? __pfx_warn_alloc+0x10/0x10
[  255.618119][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.618148][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.618176][ T9192]  ? __get_vm_area_node+0x28f/0x300
[  255.618203][ T9192]  ? bch2_fs_journal_start+0x480/0x1510
[  255.618241][ T9192]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  255.618313][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.618343][ T9192]  ? six_unlock_ip+0x302/0x430
[  255.618369][ T9192]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  255.618403][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.618437][ T9192]  ? rcu_is_watching+0x15/0xb0
[  255.618482][ T9192]  ? bch2_fs_journal_start+0x480/0x1510
[  255.618514][ T9192]  ? bch2_fs_journal_start+0x480/0x1510
[  255.618545][ T9192]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  255.618573][ T9192]  ? bch2_fs_journal_start+0x480/0x1510
[  255.618614][ T9192]  bch2_fs_journal_start+0x480/0x1510
[  255.618673][ T9192]  ? __pfx_bch2_fs_journal_start+0x10/0x10
[  255.618708][ T9192]  ? bch2_fs_journal_alloc+0x69/0x4e0
[  255.618744][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.618772][ T9192]  ? bch2_fs_journal_alloc+0x4ac/0x4e0
[  255.618804][ T9192]  ? bch2_fs_journal_alloc+0x69/0x4e0
[  255.618841][ T9192]  bch2_fs_initialize+0xac2/0x1550
[  255.618893][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.618921][ T9192]  ? _prb_read_valid+0xa07/0xa90
[  255.618961][ T9192]  ? __pfx_bch2_fs_initialize+0x10/0x10
[  255.619027][ T9192]  ? __pfx___console_unlock+0x10/0x10
[  255.619135][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.619168][ T9192]  ? bch2_fs_start+0x9fe/0xd90
[  255.619198][ T9192]  ? up_write+0x1c4/0x420
[  255.619221][ T9192]  ? bch2_fs_start+0x5c4/0xd90
[  255.619251][ T9192]  bch2_fs_start+0xa88/0xd90
[  255.619277][ T9192]  ? bch2_fs_start+0x5c4/0xd90
[  255.619324][ T9192]  ? __pfx_bch2_fs_start+0x10/0x10
[  255.619374][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.619403][ T9192]  ? sget+0x267/0x620
[  255.619454][ T9192]  bch2_fs_get_tree+0xb02/0x14f0
[  255.619529][ T9192]  ? __pfx_bch2_fs_get_tree+0x10/0x10
[  255.619590][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.619617][ T9192]  ? aa_get_newest_label+0xf7/0x5d0
[  255.619649][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.619677][ T9192]  ? vfs_parse_monolithic_sep+0x2df/0x310
[  255.619721][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.619748][ T9192]  ? apparmor_capable+0x137/0x1b0
[  255.619773][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.619806][ T9192]  vfs_get_tree+0x92/0x2b0
[  255.619833][ T9192]  do_new_mount+0x24a/0xa40
[  255.619870][ T9192]  __se_sys_mount+0x317/0x410
[  255.619905][ T9192]  ? __pfx___se_sys_mount+0x10/0x10
[  255.619930][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.619966][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.619994][ T9192]  ? __x64_sys_mount+0x20/0xc0
[  255.620024][ T9192]  do_syscall_64+0xfa/0x3b0
[  255.620047][ T9192]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.620084][ T9192]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.620106][ T9192]  ? srso_alias_return_thunk+0x5/0xfbef5
[  255.620134][ T9192]  ? exc_page_fault+0x9f/0xf0
[  255.620172][ T9192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.620196][ T9192] RIP: 0033:0x7f8b745900ca
[  255.620217][ T9192] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.620238][ T9192] RSP: 002b:00007f8b754dae68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  255.620263][ T9192] RAX: ffffffffffffffda RBX: 00007f8b754daef0 RCX: 00007f8b745900ca
[  255.620298][ T9192] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00007f8b754daeb0
[  255.620316][ T9192] RBP: 0000200000000140 R08: 00007f8b754daef0 R09: 0000000000000014
[  255.620333][ T9192] R10: 0000000000000014 R11: 0000000000000246 R12: 0000200000000100
[  255.620349][ T9192] R13: 00007f8b754daeb0 R14: 0000000000005a8c R15: 0000200000000280
[  255.620386][ T9192]  </TASK>
[  255.620583][ T9192] Mem-Info:
[  255.628517][ T9246] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  255.636898][ T9192] active_anon:43042 inactive_anon:0 isolated_anon:0
[  255.636898][ T9192]  active_file:11541 inactive_file:40390 isolated_file:0
[  255.636898][ T9192]  unevictable:768 dirty:382 writeback:0
[  255.636898][ T9192]  slab_reclaimable:10917 slab_unreclaimable:104029
[  255.636898][ T9192]  mapped:35438 shmem:36653 pagetables:1632
[  255.636898][ T9192]  sec_pagetables:0 bounce:0
[  255.636898][ T9192]  kernel_misc_reclaimable:0
[  255.636898][ T9192]  free:1266349 free_pcp:11439 free_cma:0
[  256.171304][    C1] vkms_vblank_simulate: vblank timer overrun
[  256.392805][ T9192] Node 0 active_anon:165348kB inactive_anon:0kB active_file:46164kB inactive_file:161260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141740kB dirty:1580kB writeback:0kB shmem:138052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13508kB pagetables:6388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  256.442386][ T9246] XFS (loop2): Ending clean mount
[  256.468833][ T9192] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  256.500523][    C1] vkms_vblank_simulate: vblank timer overrun
[  256.526648][ T9246] XFS (loop2): Quotacheck needed: Please wait.
[  256.537539][ T9192] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  256.566905][    C1] vkms_vblank_simulate: vblank timer overrun
[  256.629520][ T9268] loop7: detected capacity change from 0 to 32768
[  256.709499][ T9268] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1040 (9268)
[  256.746280][ T9246] XFS (loop2): Quotacheck: Done.
[  256.747047][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'.
[  256.771080][ T9192] lowmem_reserve[]: 0 2501 2502 2502 2502
[  256.777325][ T9192] Node 0 DMA32 free:1142332kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:165588kB inactive_anon:0kB active_file:46164kB inactive_file:159596kB unevictable:1536kB writepending:1600kB present:3129332kB managed:2561024kB mlocked:0kB bounce:0kB free_pcp:43948kB local_pcp:21856kB free_cma:0kB
[  256.810738][    C1] vkms_vblank_simulate: vblank timer overrun
[  256.906213][ T9268] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.914095][ T9307] loop1: detected capacity change from 0 to 512
[  256.925858][ T9305] loop6: detected capacity change from 0 to 2048
[  256.954291][ T9192] lowmem_reserve[]: 0 0 1 1 1
[  256.959530][ T9307] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  256.970637][ T9268] BTRFS info (device loop7): using sha256 (sha256-x86_64) checksum algorithm
[  257.010748][ T9268] BTRFS info (device loop7): using free-space-tree
[  257.039155][ T9305] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.041261][ T9192] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  257.078837][ T5835] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  257.106858][ T9307] EXT4-fs (loop1): 1 truncate cleaned up
[  257.125543][ T9192] lowmem_reserve[]: 0 0 0 0 0
[  257.130703][ T9192] Node 1 Normal free:3903860kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16160kB local_pcp:9120kB free_cma:0kB
[  257.161901][    C1] vkms_vblank_simulate: vblank timer overrun
[  257.233840][ T9307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.330329][ T9192] lowmem_reserve[]: 0 0 0 0 0
[  257.335133][ T9192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  257.357062][ T9307] fscrypt (loop1, inode 18): Unsupported encryption flags (0x2e)
[  257.377171][ T9268] BTRFS info (device loop7): rebuilding free space tree
[  257.423091][ T9192] Node 0 DMA32: 16*4kB (M) 319*8kB (UM) 42*16kB (UM) 42*32kB (UM) 25*64kB (UM) 84*128kB (UE) 72*256kB (UM) 42*512kB (UE) 31*1024kB (UE) 2*2048kB (ME) 256*4096kB (M) = 1141336kB
[  257.556569][ T9192] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB
[  257.632762][ T9192] Node 1 Normal: 193*4kB (UE) 64*8kB (UME) 43*16kB (UME) 108*32kB (UME) 31*64kB (UME) 9*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 949*4096kB (M) = 3903860kB
[  257.725405][ T9192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  257.756221][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.807953][ T9192] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  257.861723][ T9192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  257.947159][ T9192] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  258.053453][ T9192] 84651 total pagecache pages
[  258.072290][   T36] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared)
[  258.137213][ T9192] 0 pages in swap cache
[  258.144666][ T9192] Free swap  = 124996kB
[  258.148844][ T9192] Total swap = 124996kB
[  258.220037][ T9192] 2097051 pages RAM
[  258.223888][ T9192] 0 pages HighMem/MovableOnly
[  258.267570][ T9192] 424689 pages reserved
[  258.294181][ T9192] 0 pages cma reserved
[  258.329876][ T9192] bcachefs (loop5): error reallocating journal fifo (32768 open entries)
[  258.392925][ T9192] bcachefs (loop5): bch2_fs_initialize(): error ENOMEM_journal_pin_fifo
[  258.421647][ T9192] bcachefs (loop5): bch2_fs_start(): error starting filesystem ENOMEM_journal_pin_fifo
[  258.459057][ T9192] bcachefs (loop5): shutting down
[  258.503511][ T7832] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  258.519560][ T9342] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.647690][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  258.694506][ T9192] bcachefs (loop5): shutdown complete
[  259.041519][ T9342] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.438537][ T9342] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.702069][ T9364] loop7: detected capacity change from 0 to 2048
[  259.744656][ T9364] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=3932051, location=3932051
[  259.832664][ T9364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.848999][ T9342] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.381070][ T9342] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  260.430287][ T9356] loop6: detected capacity change from 0 to 32768
[  260.463758][ T9356] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1060 (9356)
[  260.494836][ T9342] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  260.548438][ T9356] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.601724][ T9342] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.632584][ T9356] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm
[  260.681760][ T9356] BTRFS info (device loop6): using free-space-tree
[  260.699031][ T9342] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.117734][ T9192] bcachefs: bch2_fs_get_tree() error: ENOMEM_journal_pin_fifo
[  261.166635][ T7372] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  261.284937][ T9368] loop2: detected capacity change from 0 to 32768
[  261.774856][ T9368] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  261.774903][ T9368]   allowing incompatible features above 0.0: (unknown version)
[  261.774918][ T9368]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  261.976036][ T9423] loop1: detected capacity change from 0 to 64
[  262.050955][   T30] audit: type=1800 audit(1750145460.673:22): pid=9423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1071" name="file1" dev="loop1" ino=21 res=0 errno=0
[  262.330352][ T9368] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  262.393671][ T9368] bcachefs (loop2): initializing new filesystem
[  262.472032][ T9368] bcachefs (loop2): going read-write
[  262.987342][ T9368] bcachefs (loop2): marking superblocks
[  263.278554][ T9368] bcachefs (loop2): initializing freespace
[  263.374083][ T9368] bcachefs (loop2): done initializing freespace
[  263.447782][ T9368] bcachefs (loop2): reading snapshots table
[  263.466542][ T9368] bcachefs (loop2): reading snapshots done
[  263.612532][ T9368] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[  263.693907][ T9368] bcachefs (loop2): done starting filesystem
[  263.856472][ T5835] bcachefs (loop2): shutting down
[  263.888195][ T5835] bcachefs (loop2): going read-only
[  263.902844][ T5835] bcachefs (loop2): finished waiting for writes to stop
[  263.912900][ T9467] vxcan3: entered allmulticast mode
[  263.920014][ T9465] loop5: detected capacity change from 0 to 2048
[  263.957350][ T5835] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  264.039967][ T9465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.109349][ T9434] loop7: detected capacity change from 0 to 40427
[  264.111988][ T5835] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  264.135981][ T9434] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  264.144950][ T9434] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  264.180850][ T5835] bcachefs (loop2): clean shutdown complete, journal seq 4
[  264.244846][ T5835] bcachefs (loop2): marking filesystem clean
[  264.363162][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.475021][ T5835] bcachefs (loop2): shutdown complete
[  264.589743][ T9443] loop1: detected capacity change from 0 to 32768
[  264.662337][ T9443] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1076 (9443)
[  264.722846][ T9434] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  264.771123][ T9434] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  264.773311][ T9443] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  264.831774][ T9443] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  264.841180][ T9443] BTRFS info (device loop1): using free-space-tree
[  264.851175][ T9480] loop6: detected capacity change from 0 to 4096
[  265.148673][ T9480] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.284340][ T9443] BTRFS info (device loop1): rebuilding free space tree
[  265.325102][   T30] audit: type=1800 audit(1750145463.750:23): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1085" name="bus" dev="loop6" ino=18 res=0 errno=0
[  265.334472][ T9443] BTRFS info (device loop1): checking UUID tree
[  265.621515][ T7372] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.880103][ T5836] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  266.543393][ T9506] loop5: detected capacity change from 0 to 32768
[  266.654067][ T9506] (syz.5.1088,9506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  266.754889][ T9506] (syz.5.1088,9506,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  267.013073][ T9506] (syz.5.1088,9506,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  267.085110][ T9506] JBD2: Ignoring recovery information on journal
[  267.229724][ T9506] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  267.520788][ T9552] (syz.5.1088,9552,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  267.622909][ T9552] (syz.5.1088,9552,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  267.716160][ T9552] (syz.5.1088,9552,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  267.738899][ T9555] loop1: detected capacity change from 0 to 2048
[  267.812573][ T9552] (syz.5.1088,9552,0):ocfs2_quota_read:201 ERROR: status = -5
[  267.846781][ T9555] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  267.918321][ T9552] Quota error (device loop5): find_next_id: Can't read quota tree block 5
[  267.948153][ T9564] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.028251][ T9552] (syz.5.1088,9552,0):ocfs2_get_next_id:921 ERROR: status = -5
[  268.067992][ T9555] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952
[  268.082441][ T9506] (syz.5.1088,9506,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  268.166168][ T9555] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15)
[  268.206158][ T9506] (syz.5.1088,9506,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  268.281603][ T9555] Remounting filesystem read-only
[  268.299541][ T9506] (syz.5.1088,9506,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  268.323224][ T9555] NILFS (loop1): error -5 truncating bmap (ino=15)
[  268.388860][ T9506] (syz.5.1088,9506,0):ocfs2_quota_read:201 ERROR: status = -5
[  268.476848][ T9506] Quota error (device loop5): find_tree_dqentry: Can't read quota tree block 5
[  268.511173][ T9506] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  268.584267][ T9506] (syz.5.1088,9506,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[  268.593454][ T9506] (syz.5.1088,9506,0):ocfs2_mknod:314 ERROR: status = -5
[  268.672454][ T5836] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  268.695251][ T9506] (syz.5.1088,9506,0):ocfs2_mknod:502 ERROR: status = -5
[  268.765614][ T9506] (syz.5.1088,9506,0):ocfs2_mkdir:658 ERROR: status = -5
[  269.071910][ T5844] ocfs2: Unmounting device (7,5) on (node local)
[  269.442221][ T9593] loop1: detected capacity change from 0 to 2048
[  269.552362][ T9593] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  269.632582][ T9593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.818370][ T9605] block nbd2: NBD_DISCONNECT
[  270.247621][ T9618] loop1: detected capacity change from 0 to 256
[  270.287124][ T9618] exfat: Deprecated parameter 'namecase'
[  270.442509][ T9618] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  270.443475][ T9625] loop7: detected capacity change from 0 to 256
[  270.689244][ T9625] exFAT-fs (loop7): failed to load upcase table (idx : 0x000120f0, chksum : 0x8120c2f8, utbl_chksum : 0xe619d30d)
[  270.984274][ T9635] xt_CT: No such helper "netbios-ns"
[  271.270537][ T9646] loop7: detected capacity change from 0 to 512
[  271.371565][ T9646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.385876][ T9646] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.446794][ T9646] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  271.777920][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1139'.
[  272.103455][ T7832] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.572756][ T9678] loop2: detected capacity change from 0 to 32768
[  273.656477][ T9678] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  274.014595][ T9678] XFS (loop2): Ending clean mount
[  274.080737][ T9678] XFS (loop2): Quotacheck needed: Please wait.
[  274.188680][ T5929] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  274.233971][ T9678] XFS (loop2): Quotacheck: Done.
[  274.392860][   T30] audit: type=1800 audit(1750145472.216:24): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1145" name="file2" dev="loop2" ino=9287 res=0 errno=0
[  274.459474][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  274.502059][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.524062][ T5929] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  274.539336][ T5835] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  274.543870][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.565490][ T5929] usb 2-1: config 0 descriptor??
[  274.851241][ T9735] loop5: detected capacity change from 0 to 64
[  274.864350][ T9735] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  275.026961][ T5929] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  275.050735][ T9741] loop6: detected capacity change from 0 to 256
[  275.091125][ T5929] steelseries 0003:1038:1410.0007: unknown main item tag 0x0
[  275.169710][ T5929] steelseries 0003:1038:1410.0007: item fetching failed at offset 2/7
[  275.178722][ T5929] steelseries 0003:1038:1410.0007: parse failed
[  275.198549][ T9741] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  275.248612][ T9741] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  275.285490][ T5929] steelseries 0003:1038:1410.0007: probe with driver steelseries failed with error -22
[  275.387127][ T5929] usb 2-1: USB disconnect, device number 6
[  275.406600][ T9741] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  275.567582][ T9747] netlink: 'syz.7.1163': attribute type 9 has an invalid length.
[  275.768647][ T9753] loop2: detected capacity change from 0 to 512
[  275.818834][ T9753] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  275.910984][ T9753] EXT4-fs (loop2): 1 truncate cleaned up
[  275.968315][ T9753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.151151][ T9764] vxcan1: tx address claim with dlc 0
[  276.358010][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.073360][ T9792] loop2: detected capacity change from 0 to 64
[  277.221272][   T30] audit: type=1800 audit(1750145474.872:25): pid=9792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1177" name="file2" dev="loop2" ino=18 res=0 errno=0
[  277.574661][ T9796] loop7: detected capacity change from 0 to 4096
[  277.648079][ T9796] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  277.667084][ T9801] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  277.827785][   T30] audit: type=1800 audit(1750145475.443:26): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1179" name="file1" dev="loop7" ino=30 res=0 errno=0
[  277.941517][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1182'.
[  278.315416][ T9760] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  278.322567][ T9776] loop1: detected capacity change from 0 to 32768
[  278.506884][ T9776] 
[  278.506884][ T9776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.506884][ T9776] 
[  278.692335][ T9776] 
[  278.692335][ T9776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.692335][ T9776] 
[  278.748407][ T9831] ialloc: diAlloc returned -5!
[  279.001952][ T9776] 
[  279.001952][ T9776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.001952][ T9776] 
[  279.018035][ T9776] 
[  279.018035][ T9776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.018035][ T9776] 
[  279.060785][ T9776] 
[  279.060785][ T9776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.060785][ T9776] 
[  279.150930][ T9776] 
[  279.150930][ T9776]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.150930][ T9776] 
[  279.347232][ T5836] 
[  279.347232][ T5836]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.347232][ T5836] 
[  279.414750][ T5836] 
[  279.414750][ T5836]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.414750][ T5836] 
[  280.340068][ T9819] loop6: detected capacity change from 0 to 32768
[  280.361621][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'.
[  280.461488][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'.
[  280.482352][ T9819] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.712985][ T9841] loop5: detected capacity change from 0 to 32768
[  280.757780][ T9841] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1193 (9841)
[  280.871994][ T9841] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  280.928309][ T9841] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm
[  280.971339][ T9841] BTRFS info (device loop5): using free-space-tree
[  280.982120][ T9819] XFS (loop6): Ending clean mount
[  281.019638][ T5929] kernel write not supported for file /416/clear_refs (pid: 5929 comm: kworker/0:3)
[  281.039766][ T9819] XFS (loop6): User initiated shutdown received.
[  281.050094][ T9819] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  281.064260][ T9819] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  281.167975][ T7372] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.326009][ T9841] BTRFS info (device loop5): rebuilding free space tree
[  281.390325][ T9867] loop7: detected capacity change from 0 to 4096
[  281.490182][ T9867] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  281.675006][ T9867] ntfs3(loop7): Failed to load $Extend (-22).
[  281.752665][ T9867] ntfs3(loop7): Failed to initialize $Extend.
[  281.953609][ T9891] loop1: detected capacity change from 0 to 128
[  281.973686][ T5844] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  282.051336][ T9891] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  282.180823][ T9891] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.309926][ T5836] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  283.385568][ T9924] tap0: tun_chr_ioctl cmd 1074025677
[  283.410307][ T9924] tap0: linktype set to 0
[  284.232767][ T5921] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  284.419097][ T5921] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  284.448966][ T5921] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  284.451106][ T9953] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1225'.
[  284.494609][ T5921] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  284.520220][ T5921] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  284.549532][ T5921] usb 6-1: Manufacturer: syz
[  284.554841][ T9953] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  284.589473][ T5921] usb 6-1: config 0 descriptor??
[  284.709516][ T9959] netlink: 146840 bytes leftover after parsing attributes in process `syz.6.1227'.
[  284.796180][ T9914] loop2: detected capacity change from 0 to 40427
[  284.871874][ T9914] F2FS-fs (loop2): build fault injection rate: 690
[  284.887360][ T5921] rc_core: IR keymap rc-hauppauge not found
[  284.897163][ T5921] Registered IR keymap rc-empty
[  284.948268][ T5921] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  285.006541][ T5921] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12
[  285.018178][ T9914] F2FS-fs (loop2): invalid crc value
[  285.109360][    C1] igorplugusb 6-1:0.0: Error: urb status = -32
[  285.161586][ T9930] loop1: detected capacity change from 0 to 32768
[  285.161784][  T115] usb 6-1: USB disconnect, device number 6
[  285.227222][ T9930] XFS: ikeep mount option is deprecated.
[  285.436020][ T9930] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  285.600745][ T9914] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  285.834160][ T9914] syz.2.1212: attempt to access beyond end of device
[  285.834160][ T9914] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  285.905483][ T9930] XFS (loop1): Ending clean mount
[  285.954064][ T9930] XFS (loop1): Quotacheck needed: Please wait.
[  286.160876][ T9930] XFS (loop1): Quotacheck: Done.
[  286.195480][ T5835] syz-executor: attempt to access beyond end of device
[  286.195480][ T5835] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  286.210018][ T9930] XFS (loop1): syz.1.1216 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  286.298665][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) 
[  286.298697][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  286.298711][ T5835] Call Trace:
[  286.298720][ T5835]  <TASK>
[  286.298731][ T5835]  dump_stack_lvl+0x189/0x250
[  286.298778][ T5835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  286.298814][ T5835]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  286.298850][ T5835]  ? __pfx_queue_work_on+0x10/0x10
[  286.298873][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.298902][ T5835]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  286.298936][ T5835]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  286.298972][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.298999][ T5835]  ? f2fs_hw_is_readonly+0x39b/0x470
[  286.299035][ T5835]  f2fs_handle_critical_error+0x37c/0x540
[  286.299072][ T5835]  f2fs_write_end_io+0x495/0x810
[  286.299105][ T5835]  ? blkg_put+0x22/0x240
[  286.299149][ T5835]  __submit_merged_bio+0x27a/0x6a0
[  286.299185][ T5835]  __submit_merged_write_cond+0x255/0x530
[  286.299222][ T5835]  f2fs_write_data_pages+0x261d/0x3000
[  286.299255][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.299331][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  286.299378][ T5835]  ? arch_stack_walk+0xfc/0x150
[  286.299438][ T5835]  ? __mod_zone_page_state+0xd7/0x140
[  286.299488][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.299519][ T5835]  ? folios_put_refs+0x560/0x640
[  286.299563][ T5835]  ? __pfx_folios_put_refs+0x10/0x10
[  286.299593][ T5835]  ? rcu_is_watching+0x15/0xb0
[  286.299642][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.299669][ T5835]  ? __lock_acquire+0xab9/0xd20
[  286.299723][ T5835]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  286.299758][ T5835]  do_writepages+0x32e/0x550
[  286.299802][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.299834][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.299862][ T5835]  ? do_raw_spin_unlock+0x122/0x240
[  286.299897][ T5835]  filemap_fdatawrite+0x191/0x230
[  286.299921][ T5835]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  286.299992][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.300027][ T5835]  ? do_raw_spin_unlock+0x122/0x240
[  286.300061][ T5835]  f2fs_sync_dirty_inodes+0x31f/0x830
[  286.300114][ T5835]  f2fs_write_checkpoint+0x94a/0x1de0
[  286.300177][ T5835]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  286.300260][ T5835]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  286.300305][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.300332][ T5835]  ? kfree+0x18e/0x440
[  286.300371][ T5835]  ? kill_f2fs_super+0x298/0x6c0
[  286.300413][ T5835]  kill_f2fs_super+0x2c3/0x6c0
[  286.300460][ T5835]  ? __pfx_kill_f2fs_super+0x10/0x10
[  286.300493][ T5835]  ? radix_tree_delete_item+0x2b6/0x400
[  286.300537][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.300565][ T5835]  ? shrinker_free+0x2ce/0x3e0
[  286.300599][ T5835]  deactivate_locked_super+0xbc/0x130
[  286.300638][ T5835]  cleanup_mnt+0x425/0x4c0
[  286.300670][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.300697][ T5835]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.300737][ T5835]  task_work_run+0x1d4/0x260
[  286.300772][ T5835]  ? __pfx_task_work_run+0x10/0x10
[  286.300799][ T5835]  ? __x64_sys_umount+0x122/0x160
[  286.300828][ T5835]  ? exit_to_user_mode_loop+0x40/0x110
[  286.300869][ T5835]  exit_to_user_mode_loop+0xec/0x110
[  286.300904][ T5835]  do_syscall_64+0x2bd/0x3b0
[  286.300925][ T5835]  ? lockdep_hardirqs_on+0x9c/0x150
[  286.300959][ T5835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.300983][ T5835]  ? srso_alias_return_thunk+0x5/0xfbef5
[  286.301010][ T5835]  ? exc_page_fault+0x9f/0xf0
[  286.301049][ T5835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  286.301071][ T5835] RIP: 0033:0x7f80aef8fc57
[  286.301092][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  286.301112][ T5835] RSP: 002b:00007ffe7c7d3ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  286.301136][ T5835] RAX: 0000000000000000 RBX: 00007f80af010925 RCX: 00007f80aef8fc57
[  286.301153][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7c7d3f90
[  286.301168][ T5835] RBP: 00007ffe7c7d3f90 R08: 0000000000000000 R09: 0000000000000000
[  286.301183][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7c7d5020
[  286.301200][ T5835] R13: 00007f80af010925 R14: 0000000000044832 R15: 00007ffe7c7d5060
[  286.301237][ T5835]  </TASK>
[  286.738974][ T5835] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  286.741330][T10000] loop7: detected capacity change from 0 to 32768
[  286.829991][T10000] XFS (loop7): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  286.831654][ T5836] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  287.122469][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  287.190678][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.230376][T10000] XFS (loop7): Ending clean mount
[  287.240342][T10000] XFS (loop7): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 
[  287.252391][T10000] XFS (loop7): Unmount and run xfs_repair
[  287.258544][T10000] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  287.266448][T10000] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  287.278795][T10000] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  287.288368][T10000] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  287.297912][T10000] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  287.307392][T10000] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  287.316969][T10000] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  287.326442][T10000] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.336333][T10000] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.345828][T10000] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x20 len 8 error 74
[  287.358176][T10000] XFS (loop7): Failed to initialize disk quotas, err -117.
[  287.483042][T10000] XFS (loop7): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x8 
[  287.498434][T10000] XFS (loop7): Unmount and run xfs_repair
[  287.504595][T10000] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  287.512542][T10000] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  287.522107][T10000] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40  ...............@
[  287.531635][T10000] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  287.541124][T10000] 00000030: 00 00 00 00 72 89 6f 7a 00 00 00 06 00 00 00 02  ....r.oz........
[  287.551535][T10000] 00000040: 00 00 05 9a 00 00 00 06 00 00 05 b0 00 00 0a 50  ...............P
[  287.561075][T10000] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.570594][T10000] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  287.580065][T10000] 00000070: 00 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00  ................
[  287.589594][T10000] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 74
[  287.607165][T10000] XFS (loop7): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  287.622934][T10000] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  287.827555][ T7832] XFS (loop7): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  287.922211][T10016] loop5: detected capacity change from 0 to 2048
[  287.970397][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.017232][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.044186][T10016] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  288.166092][T10016] syz.5.1243: attempt to access beyond end of device
[  288.166092][T10016] loop5: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  288.166686][T10021] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  288.415916][T10023] syz.1.1246: attempt to access beyond end of device
[  288.415916][T10023] loop1: rw=0, sector=2, nr_sectors = 2 limit=0
[  288.513799][T10023] syz.1.1246: attempt to access beyond end of device
[  288.513799][T10023] loop1: rw=0, sector=16, nr_sectors = 2 limit=0
[  288.577948][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.617882][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  288.638952][T10026] loop2: detected capacity change from 0 to 1024
[  288.926755][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  288.971202][   T49] hfsplus: b-tree write err: -5, ino 4
[  288.994852][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.003734][ T5928] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  289.157793][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1252'.
[  289.238774][ T5928] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  289.261890][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.296206][T10041] netlink: 'syz.0.1253': attribute type 8 has an invalid length.
[  289.303665][ T5928] usb 6-1: config 0 descriptor??
[  289.316899][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  289.326147][ T5928] cp210x 6-1:0.0: cp210x converter detected
[  289.332963][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  289.345455][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  289.354026][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'.
[  289.366340][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  289.387638][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  289.545424][T10041] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.553856][T10041] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.593851][T10041] bridge0: entered allmulticast mode
[  289.947031][   T13] bridge_slave_1: left allmulticast mode
[  289.964688][   T13] bridge_slave_1: left promiscuous mode
[  289.976061][ T5928] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[  289.984318][ T5928] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  290.002657][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.080993][ T5928] usb 6-1: cp210x converter now attached to ttyUSB0
[  290.107180][   T13] bridge_slave_0: left allmulticast mode
[  290.113244][   T13] bridge_slave_0: left promiscuous mode
[  290.145109][ T5928] usb 6-1: USB disconnect, device number 7
[  290.204073][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.213536][ T5928] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  290.235819][ T5928] cp210x 6-1:0.0: device disconnected
[  290.334094][T10045] loop1: detected capacity change from 0 to 32768
[  290.352355][T10060] loop2: detected capacity change from 0 to 2048
[  290.381345][T10045] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1254 (10045)
[  290.421270][T10060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  290.439631][T10045] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  290.466607][T10045] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  290.505964][T10045] BTRFS info (device loop1): disk space caching is enabled
[  290.529875][T10045] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  290.795324][T10045] BTRFS info (device loop1): rebuilding free space tree
[  290.899928][T10045] BTRFS info (device loop1): disabling free space tree
[  290.920828][T10084] loop5: detected capacity change from 0 to 1024
[  290.921464][T10045] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  290.970054][T10045] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  290.997325][T10084] hfsplus: bad catalog entry type
[  291.088557][ T5928] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  291.129277][ T3001] hfsplus: b-tree write err: -5, ino 4
[  291.157774][T10045] BTRFS info (device loop1): balance: start -d -m
[  291.208101][T10045] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata
[  291.283818][ T5928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.310733][ T5928] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  291.353922][ T5928] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  291.374749][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  291.396525][ T5928] usb 3-1: SerialNumber: syz
[  291.587793][T10045] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata
[  291.596969][ T2969] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  291.662269][   T51] Bluetooth: hci0: command tx timeout
[  291.682682][ T5928] usb 3-1: 0:2 : does not exist
[  291.821905][T10093] loop5: detected capacity change from 0 to 4096
[  291.836859][ T5928] usb 3-1: USB disconnect, device number 8
[  291.865803][T10045] BTRFS info (device loop1): balance: canceled
[  291.943447][T10093] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  291.976937][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  292.125392][ T5836] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  292.303517][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.420706][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.474099][   T13] bond0 (unregistering): Released all slaves
[  292.712864][ T5929] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  292.956035][ T5929] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  293.023050][ T5929] usb 2-1: config 0 interface 0 has no altsetting 0
[  293.051003][ T5929] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  293.093885][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.159836][ T5929] usb 2-1: config 0 descriptor??
[  293.755455][ T5929] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v1.03 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[  293.770256][T10124] block device autoloading is deprecated and will be removed.
[  293.811850][ T5929] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints?
[  293.897584][   T51] Bluetooth: hci0: command tx timeout
[  293.936567][    C0] hid-thrustmaster 0003:044F:B65D.0008: Unknown packet type 0x0, unable to proceed further with wheel init
[  294.173570][   T13] hsr_slave_0: left promiscuous mode
[  294.241813][   T13] hsr_slave_1: left promiscuous mode
[  294.251087][ T5824] usb 2-1: USB disconnect, device number 7
[  294.285755][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.333387][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.407440][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  294.423029][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.544967][   T13] vlan0: left allmulticast mode
[  294.560765][   T13] veth0_vlan: left allmulticast mode
[  294.578159][   T13] vlan0: left promiscuous mode
[  294.593968][   T13] veth1_macvtap: left promiscuous mode
[  294.613202][   T13] veth0_macvtap: left promiscuous mode
[  294.619075][   T13] veth1_vlan: left promiscuous mode
[  294.634940][   T13] veth0_vlan: left promiscuous mode
[  295.059297][T10135] loop5: detected capacity change from 0 to 32768
[  295.076343][T10135] btrfs: Deprecated parameter 'usebackuproot'
[  295.095954][T10135] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  295.143397][T10135] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1281 (10135)
[  295.213226][T10135] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  295.243017][T10135] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm
[  295.261101][T10135] BTRFS info (device loop5): using free-space-tree
[  295.382746][ T1084] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  295.434058][T10135] BTRFS warning (device loop5): couldn't read tree root
[  295.449503][T10135] BTRFS warning (device loop5): try to load backup roots slot 1
[  295.471371][   T36] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  295.502441][T10135] BTRFS warning (device loop5): couldn't read tree root
[  295.521523][T10135] BTRFS warning (device loop5): try to load backup roots slot 2
[  295.541181][   T12] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  295.556864][T10135] BTRFS warning (device loop5): couldn't read tree root
[  295.564048][T10135] BTRFS warning (device loop5): try to load backup roots slot 3
[  295.644007][T10135] BTRFS info (device loop5): rebuilding free space tree
[  295.684414][T10135] BTRFS info (device loop5): checking UUID tree
[  296.005807][ T5844] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  296.110407][   T51] Bluetooth: hci0: command tx timeout
[  296.727236][   T13] team0 (unregistering): Port device team_slave_1 removed
[  296.749947][T10181] loop5: detected capacity change from 0 to 40427
[  296.758234][T10181] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  296.790316][T10181] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  296.816683][T10181] F2FS-fs (loop5): invalid crc value
[  296.816924][   T13] team0 (unregistering): Port device team_slave_0 removed
[  297.021440][T10181] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  297.028521][T10181] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  297.113471][T10181] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[  297.326025][T10158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1289'.
[  297.357639][T10158] netem: unknown loss type 13
[  297.371244][T10158] netem: change failed
[  297.808194][T10042] chnl_net:caif_netlink_parms(): no params data found
[  298.325828][   T51] Bluetooth: hci0: command tx timeout
[  298.633979][T10042] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.676485][T10042] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.696184][T10042] bridge_slave_0: entered allmulticast mode
[  298.735709][T10042] bridge_slave_0: entered promiscuous mode
[  298.773822][T10042] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.802299][T10042] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.830350][T10042] bridge_slave_1: entered allmulticast mode
[  298.880480][T10042] bridge_slave_1: entered promiscuous mode
[  299.002018][ T5824] kernel read not supported for file /dsp1 (pid: 5824 comm: kworker/1:3)
[  299.523927][T10266] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1317'.
[  299.862541][T10266] 0·: renamed from hsr_slave_1 (while UP)
[  299.907917][T10266] 0·: entered allmulticast mode
[  299.913584][T10266] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  299.999815][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'.
[  300.038731][T10042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.106009][T10042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.321009][T10282] loop5: detected capacity change from 0 to 1024
[  300.475690][T10282] hfsplus: bad catalog entry type
[  300.502047][T10042] team0: Port device team_slave_0 added
[  300.534609][T10268] loop2: detected capacity change from 0 to 32768
[  300.565894][T10042] team0: Port device team_slave_1 added
[  300.591071][T10268] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1318 (10268)
[  300.689306][T10268] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  300.763010][T10268] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  300.771826][T10268] BTRFS info (device loop2): using free-space-tree
[  300.913368][ T2969] hfsplus: b-tree write err: -5, ino 4
[  300.985102][T10042] batman_adv: batadv0: Adding interface: batadv_slave_0
[  300.998096][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.081131][T10042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.128576][T10042] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.135540][T10042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.318331][T10042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.496115][ T5835] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  301.530920][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1330'.
[  301.593747][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1330'.
[  301.758182][ T5824] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  301.828216][T10042] hsr_slave_0: entered promiscuous mode
[  301.851304][T10042] hsr_slave_1: entered promiscuous mode
[  301.882632][T10042] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  301.928076][T10042] Cannot create hsr debugfs directory
[  301.953272][ T5824] usb 2-1: Using ep0 maxpacket: 32
[  301.989865][ T5824] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  302.010035][ T5824] usb 2-1: config 0 has no interface number 0
[  302.069360][ T5824] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  302.085051][T10287] loop7: detected capacity change from 0 to 32768
[  302.102789][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.149269][ T5824] usb 2-1: Product: syz
[  302.159108][ T5824] usb 2-1: Manufacturer: syz
[  302.178974][ T5824] usb 2-1: SerialNumber: syz
[  302.207625][ T5824] usb 2-1: config 0 descriptor??
[  302.293883][ T5824] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  302.455094][ T5824] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  302.551781][ T5824] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  302.565145][T10287] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  302.565175][T10287]   allowing incompatible features above 0.0: (unknown version)
[  302.565190][T10287]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  302.711607][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 100
[  302.836818][T10287] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  302.845046][T10287] bcachefs (loop7): initializing new filesystem
[  302.929334][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  302.940731][ T5824] usb 2-1: USB disconnect, device number 8
[  302.962672][ T5824] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  302.998414][T10287] bcachefs (loop7): going read-write
[  303.104495][ T5824] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  303.162411][ T5824] quatech2 2-1:0.51: device disconnected
[  303.324721][T10287] bcachefs (loop7): marking superblocks
[  303.420908][T10287] bcachefs (loop7): initializing freespace
[  303.488375][T10367] syz.0.1345 uses obsolete (PF_INET,SOCK_PACKET)
[  303.499276][T10287] bcachefs (loop7): done initializing freespace
[  303.574871][T10287] bcachefs (loop7): reading snapshots table
[  303.619359][T10287] bcachefs (loop7): reading snapshots done
[  303.754711][T10287] bcachefs (loop7):  loop7: Superblock write was silently dropped! (seq 0 expected 42)
[  303.820609][T10287] bcachefs (loop7): done starting filesystem
[  303.843914][T10375] loop5: detected capacity change from 0 to 1024
[  304.022929][ T7832] bcachefs (loop7): shutting down
[  304.072074][ T7832] bcachefs (loop7): going read-only
[  304.109789][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1350'.
[  304.119617][ T7832] bcachefs (loop7): finished waiting for writes to stop
[  304.151447][ T7832] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3
[  304.280473][ T1084] hfsplus: bad catalog file entry
[  304.285614][ T1084] hfsplus: b-tree write err: -5, ino 3
[  304.359279][ T7832] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  304.418691][ T7832] bcachefs (loop7): clean shutdown complete, journal seq 4
[  304.470960][ T7832] bcachefs (loop7): marking filesystem clean
[  304.675288][ T7832] bcachefs (loop7): shutdown complete
[  305.246457][T10404] syzkaller1: tun_chr_ioctl cmd 1074025677
[  305.268969][T10404] syzkaller1: linktype set to 65535
[  305.402003][T10379] loop2: detected capacity change from 0 to 32768
[  305.795284][T10042] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  305.856275][T10042] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  305.947970][T10042] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  305.989752][T10042] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  306.402764][T10042] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.532650][T10042] 8021q: adding VLAN 0 to HW filter on device team0
[  306.629843][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.637057][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.690876][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.698058][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.899003][T10042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  307.541004][T10042] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.920271][ T5946] usb 2-1: [UEAGLE-ATM] firmware is not available
[  308.965889][T10042] veth0_vlan: entered promiscuous mode
[  309.021026][T10042] veth1_vlan: entered promiscuous mode
[  309.051616][T10503] binder: 10502:10503 ioctl c018620c 0 returned -14
[  309.169109][T10042] veth0_macvtap: entered promiscuous mode
[  309.217104][T10042] veth1_macvtap: entered promiscuous mode
[  309.329779][T10042] batman_adv: batadv0: Interface activated: batadv_slave_0
[  309.409244][T10042] batman_adv: batadv0: Interface activated: batadv_slave_1
[  309.462645][T10042] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  309.508525][T10042] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  309.517242][T10042] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  309.553846][T10042] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.750446][T10528] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1391'.
[  310.135176][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.152591][T10497] loop2: detected capacity change from 0 to 32768
[  310.176878][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.382939][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  310.385471][T10541] netlink: 232 bytes leftover after parsing attributes in process `syz.5.1399'.
[  310.409003][T10543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.448841][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  310.456791][T10541] NCSI netlink: No device for ifindex 0
[  310.997506][   T30] audit: type=1326 audit(1750145506.470:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10558 comm="syz.0.1406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc63738e929 code=0x0
[  311.132231][T10563] loop5: detected capacity change from 0 to 128
[  311.394831][T10525] loop1: detected capacity change from 0 to 32768
[  311.505501][T10525] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  311.740567][T10525] XFS (loop1): Ending clean mount
[  311.859786][   T30] audit: type=1800 audit(1750145507.275:28): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1392" name="file2" dev="loop1" ino=6151 res=0 errno=0
[  312.165983][T10595] loop2: detected capacity change from 0 to 2048
[  312.180850][ T5836] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  312.352375][T10599] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  312.629479][T10599] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  312.719734][T10599] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  312.796444][T10599] Remounting filesystem read-only
[  313.103006][T10609] loop5: detected capacity change from 0 to 32768
[  313.157244][T10609] JBD2: Ignoring recovery information on journal
[  313.166602][T10609] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75
[  313.175118][T10609] JBD2: bad block at offset 32
[  313.186058][T10609] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  313.426142][T10567] loop6: detected capacity change from 0 to 32768
[  313.484113][ T5844] ocfs2: Unmounting device (7,5) on (node local)
[  313.554859][T10622] input: syz1 as /devices/virtual/input/input13
[  313.666961][T10567] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  313.703987][T10567] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  313.810511][T10590] loop7: detected capacity change from 0 to 32768
[  313.838542][T10590] XFS: ikeep mount option is deprecated.
[  313.908164][T10590] XFS: ikeep mount option is deprecated.
[  313.956052][T10567] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  314.105601][   T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  314.107349][T10643] loop1: detected capacity change from 0 to 128
[  314.113431][T10590] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  314.184721][   T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  314.406682][T10590] XFS (loop7): Ending clean mount
[  314.468595][T10590] XFS (loop7): Quotacheck needed: Please wait.
[  314.556012][T10590] XFS (loop7): Quotacheck: Done.
[  314.742542][   T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 521ms
[  314.792492][   T10] gfs2: fsid=syz:syz.0: jid=0: Done
[  314.801003][T10567] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  314.872926][T10567] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  314.934690][ T7832] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  315.158513][T10627] loop2: detected capacity change from 0 to 32768
[  315.236144][T10627] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1422 (10627)
[  315.337204][T10627] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  315.408171][T10627] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  315.439839][T10667] loop5: detected capacity change from 0 to 4096
[  315.466714][T10627] BTRFS info (device loop2): disk space caching is enabled
[  315.533471][T10627] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  315.627608][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[  315.669747][T10667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.031636][T10627] BTRFS info (device loop2): rebuilding free space tree
[  316.099707][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.116539][T10627] BTRFS info (device loop2): disabling free space tree
[  316.167937][T10627] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  316.194470][T10627] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  316.780012][ T5835] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.796088][T10708] input: syz1 as /devices/virtual/input/input14
[  316.834109][T10704] sp0: Synchronizing with TNC
[  316.872571][T10662] loop1: detected capacity change from 0 to 32768
[  316.996129][T10662] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  317.017434][T10662] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  317.408609][T10662] XFS (loop1): Ending clean mount
[  317.584968][T10662] XFS (loop1): Quotacheck needed: Please wait.
[  317.710455][T10662] XFS (loop1): Quotacheck: Done.
[  317.888029][ T5836] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  318.061729][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1452'.
[  318.280125][T10721] loop5: detected capacity change from 0 to 32768
[  318.548474][T10738] loop6: detected capacity change from 0 to 65536
[  318.594137][T10738] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  318.755925][T10738] XFS (loop6): Ending clean mount
[  318.799149][T10738] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  318.812497][T10738] XFS (loop6): Unmount and run xfs_repair
[  318.818232][T10738] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  318.825676][T10738] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  318.834595][T10738] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  318.843615][T10738] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  318.853767][T10738] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  318.867372][T10738] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  318.878237][T10738] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  318.887769][T10738] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  318.899207][T10738] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  318.908122][T10738] XFS (loop6): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  318.932434][T10738] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  318.947779][T10738] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  319.066063][T10042] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  319.484640][T10772] netlink: 'syz.1.1451': attribute type 1 has an invalid length.
[  320.007941][T10784] loop5: detected capacity change from 0 to 256
[  320.080071][T10784] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  320.133215][T10784] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  320.170699][T10784] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[  320.248578][T10791] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  320.248578][T10791] The task syz.7.1471 (10791) triggered the difference, watch for misbehavior.
[  320.336110][T10765] loop2: detected capacity change from 0 to 32768
[  320.376645][T10765] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  320.621762][T10765] XFS (loop2): Ending clean mount
[  320.675874][T10809] loop5: detected capacity change from 0 to 2048
[  320.773075][T10809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.837380][T10809] EXT4-fs (loop5): Online defrag not supported with bigalloc
[  320.919224][ T5835] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  320.976510][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.095492][  T115] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  321.280147][ T5846] Bluetooth: hci0: unexpected cc 0x0c7b length: 57 > 5
[  321.302542][  T115] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.312822][  T115] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  321.327061][  T115] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  321.339644][  T115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.351699][  T115] usb 2-1: Product: syz
[  321.357082][  T115] usb 2-1: Manufacturer: syz
[  321.361793][  T115] usb 2-1: SerialNumber: syz
[  321.406755][T10820] loop5: detected capacity change from 0 to 4096
[  321.709151][T10830] trusted_key: encrypted_key: keyword 'updatedefault' not recognized
[  321.826568][  T115] usb 2-1: cannot find UAC_HEADER
[  321.957785][  T115] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  322.099661][ T5946] usb 2-1: USB disconnect, device number 9
[  322.133492][T10840] tipc: Started in network mode
[  322.138461][T10840] tipc: Node identity 0.......@:, cluster identity 4711
[  322.141592][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  322.257243][T10847] loop5: detected capacity change from 0 to 128
[  322.289550][T10847] EXT4-fs (loop5): Test dummy encryption mode enabled
[  322.313206][T10846] loop2: detected capacity change from 0 to 2048
[  322.326767][  T115] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  322.351768][T10847] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  322.419042][T10846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  322.440525][T10851] loop7: detected capacity change from 0 to 1024
[  322.452883][T10847] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  322.484626][T10853] fuse: Bad value for 'fd'
[  322.529168][  T115] usb 7-1: Using ep0 maxpacket: 8
[  322.541699][  T115] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  322.560911][  T115] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  322.608680][  T115] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  322.633705][T10855] @: renamed from vlan0 (while UP)
[  322.652498][  T115] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  322.707423][  T115] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  322.732390][  T115] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.821670][ T5844] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  322.835764][ T1084] hfsplus: b-tree write err: -5, ino 8
[  322.863920][T10859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.077601][T10866] loop5: detected capacity change from 0 to 256
[  323.084939][  T115] usb 7-1: GET_CAPABILITIES returned 0
[  323.085316][T10866] exfat: Deprecated parameter 'utf8'
[  323.090451][  T115] usbtmc 7-1:16.0: can't read capabilities
[  323.163178][T10866] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d)
[  323.177205][T10867] loop7: detected capacity change from 0 to 1024
[  323.372311][    C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  323.387403][T10867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.417255][T10842] usbtmc 7-1:16.0: Unable to send data, error -71
[  323.425066][T10867] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  323.441132][  T115] usb 7-1: USB disconnect, device number 3
[  323.666336][T10881] loop1: detected capacity change from 0 to 256
[  323.666850][ T3001] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  323.757168][ T3001] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28
[  323.761727][T10881] FAT-fs (loop1): Directory bread(block 64) failed
[  323.808375][ T3001] EXT4-fs (loop7): This should not happen!! Data will be lost
[  323.808375][ T3001] 
[  323.827754][T10881] FAT-fs (loop1): Directory bread(block 65) failed
[  323.851831][T10881] FAT-fs (loop1): Directory bread(block 66) failed
[  323.854494][ T3001] EXT4-fs (loop7): Total free blocks count 0
[  323.864339][ T3001] EXT4-fs (loop7): Free/Dirty block details
[  323.883188][T10881] FAT-fs (loop1): Directory bread(block 67) failed
[  323.897924][T10881] FAT-fs (loop1): Directory bread(block 68) failed
[  323.916746][T10881] FAT-fs (loop1): Directory bread(block 69) failed
[  323.929777][ T3001] EXT4-fs (loop7): free_blocks=4293918720
[  323.935551][ T3001] EXT4-fs (loop7): dirty_blocks=16
[  323.937239][T10881] FAT-fs (loop1): Directory bread(block 70) failed
[  323.957290][ T3001] EXT4-fs (loop7): Block reservation details
[  323.967738][T10881] FAT-fs (loop1): Directory bread(block 71) failed
[  323.978963][ T3001] EXT4-fs (loop7): i_reserved_data_blocks=1
[  323.983648][T10881] FAT-fs (loop1): Directory bread(block 72) failed
[  324.003554][T10881] FAT-fs (loop1): Directory bread(block 73) failed
[  324.012358][ T7832] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.252552][T10892] loop7: detected capacity change from 0 to 128
[  436.533431][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  436.540796][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5844/1:b..l
[  436.551103][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=37809, q=368 ncpus=2)
[  436.558867][    C1] task:syz-executor    state:R  running task     stack:21640 pid:5844  tgid:5844  ppid:5830   task_flags:0x400140 flags:0x00004000
[  436.578000][    C1] Call Trace:
[  436.581300][    C1]  <TASK>
[  436.584264][    C1]  __schedule+0x16f5/0x4d00
[  436.588828][    C1]  ? preempt_schedule_irq+0xb5/0x150
[  436.594136][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.599788][    C1]  ? __pfx___schedule+0x10/0x10
[  436.604656][    C1]  ? __lock_acquire+0xab9/0xd20
[  436.609565][    C1]  ? preempt_schedule_irq+0xaa/0x150
[  436.614909][    C1]  preempt_schedule_irq+0xb5/0x150
[  436.620046][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  436.625790][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.631444][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.637258][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  436.643089][    C1]  irqentry_exit+0x6f/0x90
[  436.647535][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  436.653527][    C1] RIP: 0010:is_bpf_text_address+0x125/0x2b0
[  436.659440][    C1] Code: 8b 3f 4d 85 ff 0f 84 c1 00 00 00 4c 89 24 24 c1 e3 03 8d 2c 5b 48 f7 dd 4d 8d 24 2f 49 81 c4 e0 fd ff ff 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 ec 93 54 00 4d 8b 24 24 4c 89 e7
[  436.679051][    C1] RSP: 0018:ffffc90003aaf350 EFLAGS: 00000212
[  436.685162][    C1] RAX: 1ffffffff1ea2713 RBX: 0000000000000000 RCX: ffff8880329b5a00
[  436.693290][    C1] RDX: 0000000000000000 RSI: ffffffff8be28b60 RDI: ffffffff8be28b20
[  436.701271][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81cf4566
[  436.709252][    C1] R10: dffffc0000000000 R11: ffffffff81acf690 R12: ffffffff8f513898
[  436.717272][    C1] R13: dffffc0000000000 R14: 00007f8b74585193 R15: ffffffff8f513ab8
[  436.725355][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  436.731533][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  436.736793][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  436.742106][    C1]  kernel_text_address+0xa5/0xe0
[  436.747072][    C1]  __kernel_text_address+0xd/0x40
[  436.752162][    C1]  unwind_get_return_address+0x4d/0x90
[  436.757650][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  436.763816][    C1]  arch_stack_walk+0xfc/0x150
[  436.768521][    C1]  stack_trace_save+0x9c/0xe0
[  436.773210][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  436.778689][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.784341][    C1]  kasan_save_track+0x3e/0x80
[  436.789037][    C1]  ? kasan_save_track+0x3e/0x80
[  436.793908][    C1]  ? __kasan_kmalloc+0x93/0xb0
[  436.798676][    C1]  ? __kmalloc_node_noprof+0x276/0x4e0
[  436.804136][    C1]  ? __vmalloc_node_range_noprof+0x5a9/0x12f0
[  436.810211][    C1]  ? __vmalloc_node_noprof+0xc2/0x110
[  436.815586][    C1]  ? dup_task_struct+0x3e7/0x860
[  436.820523][    C1]  ? copy_process+0x54b/0x3c00
[  436.825285][    C1]  ? kernel_clone+0x21e/0x870
[  436.829964][    C1]  ? __x64_sys_clone+0x18b/0x1e0
[  436.834905][    C1]  ? do_syscall_64+0xfa/0x3b0
[  436.839582][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.845706][    C1]  __kasan_kmalloc+0x93/0xb0
[  436.850396][    C1]  __kmalloc_node_noprof+0x276/0x4e0
[  436.855682][    C1]  ? __vmalloc_node_range_noprof+0x5a9/0x12f0
[  436.861834][    C1]  __vmalloc_node_range_noprof+0x5a9/0x12f0
[  436.867762][    C1]  ? percpu_ref_get_many+0x19/0x140
[  436.872986][    C1]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  436.879324][    C1]  ? memcpy_and_pad+0x48/0x80
[  436.884016][    C1]  __vmalloc_node_noprof+0xc2/0x110
[  436.889220][    C1]  ? copy_process+0x54b/0x3c00
[  436.893992][    C1]  ? copy_process+0x54b/0x3c00
[  436.898767][    C1]  dup_task_struct+0x3e7/0x860
[  436.903564][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.909240][    C1]  copy_process+0x54b/0x3c00
[  436.913878][    C1]  ? __pfx_do_wp_page+0x10/0x10
[  436.918753][    C1]  ? do_raw_spin_lock+0x121/0x290
[  436.923789][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.929451][    C1]  ? __pfx_copy_process+0x10/0x10
[  436.934499][    C1]  kernel_clone+0x21e/0x870
[  436.939021][    C1]  ? __pfx_kernel_clone+0x10/0x10
[  436.944080][    C1]  __x64_sys_clone+0x18b/0x1e0
[  436.948880][    C1]  ? count_memcg_event_mm+0x21/0x260
[  436.954188][    C1]  ? __pfx___x64_sys_clone+0x10/0x10
[  436.959503][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.965149][    C1]  ? do_user_addr_fault+0xc8a/0x1390
[  436.970471][    C1]  ? do_syscall_64+0xbe/0x3b0
[  436.975170][    C1]  do_syscall_64+0xfa/0x3b0
[  436.979688][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  436.984914][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  436.991075][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  436.996717][    C1]  ? exc_page_fault+0x9f/0xf0
[  437.001432][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  437.007331][    C1] RIP: 0033:0x7f8b74585193
[  437.011761][    C1] RSP: 002b:00007ffc5167eab8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  437.020192][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b74585193
[  437.028177][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  437.036156][    C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001
[  437.044131][    C1] R10: 000055558639e7d0 R11: 0000000000000246 R12: 0000000000000000
[  437.052112][    C1] R13: 00000000000927c0 R14: 000000000004d3ba R15: 00007ffc5167ec50
[  437.060116][    C1]  </TASK>
[  437.063136][    C1] rcu: rcu_preempt kthread starved for 10498 jiffies! g37809 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  437.074337][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  437.084308][    C1] rcu: RCU grace-period kthread stack dump:
[  437.090195][    C1] task:rcu_preempt     state:R  running task     stack:26824 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00004000
[  437.103727][    C1] Call Trace:
[  437.107013][    C1]  <TASK>
[  437.109952][    C1]  __schedule+0x16f5/0x4d00
[  437.114489][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  437.119710][    C1]  ? schedule+0x165/0x360
[  437.124069][    C1]  ? __lock_acquire+0xab9/0xd20
[  437.128942][    C1]  ? __pfx___schedule+0x10/0x10
[  437.133825][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.139473][    C1]  ? schedule+0x91/0x360
[  437.143742][    C1]  schedule+0x165/0x360
[  437.147922][    C1]  schedule_timeout+0x12b/0x270
[  437.152790][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  437.158266][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  437.164180][    C1]  ? __pfx_process_timeout+0x10/0x10
[  437.169482][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.175131][    C1]  ? prepare_to_swait_event+0x341/0x380
[  437.180701][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  437.185591][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  437.191765][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  437.197067][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  437.202287][    C1]  ? finish_swait+0xcd/0x1f0
[  437.206892][    C1]  rcu_gp_kthread+0x99/0x390
[  437.211680][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  437.216898][    C1]  ? __kthread_parkme+0x7b/0x200
[  437.221844][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.227489][    C1]  ? __kthread_parkme+0x1a1/0x200
[  437.232530][    C1]  kthread+0x711/0x8a0
[  437.236614][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  437.241832][    C1]  ? __pfx_kthread+0x10/0x10
[  437.246440][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.252100][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  437.257319][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.262961][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.268176][    C1]  ? __pfx_kthread+0x10/0x10
[  437.272778][    C1]  ret_from_fork+0x3fc/0x770
[  437.277399][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  437.282631][    C1]  ? __switch_to_asm+0x39/0x70
[  437.287407][    C1]  ? __switch_to_asm+0x33/0x70
[  437.292180][    C1]  ? __pfx_kthread+0x10/0x10
[  437.296789][    C1]  ret_from_fork_asm+0x1a/0x30
[  437.301580][    C1]  </TASK>
[  437.304602][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  437.310927][    C1] CPU: 1 UID: 0 PID: 3001 Comm: kworker/u8:10 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) 
[  437.323171][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  437.333233][    C1] Workqueue: events_unbound toggle_allocation_gate
[  437.339764][    C1] RIP: 0010:smp_call_function_many_cond+0xf6e/0x12d0
[  437.346471][    C1] Code: 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 43 0f b6 04 2c <84> c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b 00 eb e5 44 89
[  437.366119][    C1] RSP: 0018:ffffc9000c1776a0 EFLAGS: 00000293
[  437.372204][    C1] RAX: 0000000000000000 RBX: ffff8880b873cb40 RCX: ffff88802f868000
[  437.380183][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  437.388169][    C1] RBP: ffffc9000c177800 R08: ffffffff8fa10df7 R09: 1ffffffff1f421be
[  437.396150][    C1] R10: dffffc0000000000 R11: fffffbfff1f421bf R12: 1ffff110170c86b5
[  437.404143][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b86435a8
[  437.412218][    C1] FS:  0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000
[  437.421160][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  437.427756][    C1] CR2: 0000001b3041aff8 CR3: 000000000df38000 CR4: 0000000000350ef0
[  437.435746][    C1] Call Trace:
[  437.439027][    C1]  <TASK>
[  437.441979][    C1]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  437.448341][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  437.453752][    C1]  ? kmem_cache_alloc_bulk_noprof+0x148/0x790
[  437.459841][    C1]  ? __pfx___text_poke+0x10/0x10
[  437.464792][    C1]  ? rcu_is_watching+0x15/0xb0
[  437.469581][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.475225][    C1]  ? trace_contention_end+0x39/0x120
[  437.480523][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.486263][    C1]  ? __pfx_do_sync_core+0x10/0x10
[  437.491329][    C1]  on_each_cpu_cond_mask+0x3f/0x80
[  437.496468][    C1]  smp_text_poke_batch_finish+0x5e0/0x1100
[  437.502292][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  437.507322][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  437.513581][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.519244][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.524907][    C1]  ? arch_jump_label_transform_queue+0x97/0x110
[  437.531180][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.536841][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  437.543020][    C1]  static_key_enable_cpuslocked+0x128/0x250
[  437.548927][    C1]  static_key_enable+0x1a/0x20
[  437.553699][    C1]  toggle_allocation_gate+0xad/0x240
[  437.558997][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  437.564899][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.570600][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.576268][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  437.582009][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  437.587773][    C1]  process_scheduled_works+0xae1/0x17b0
[  437.593375][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  437.599383][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.605037][    C1]  worker_thread+0x8a0/0xda0
[  437.609663][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  437.616211][    C1]  ? __kthread_parkme+0x7b/0x200
[  437.621177][    C1]  kthread+0x711/0x8a0
[  437.625267][    C1]  ? __pfx_worker_thread+0x10/0x10
[  437.630402][    C1]  ? __pfx_kthread+0x10/0x10
[  437.635000][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.640657][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  437.645913][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  437.651579][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.656819][    C1]  ? __pfx_kthread+0x10/0x10
[  437.661432][    C1]  ret_from_fork+0x3fc/0x770
[  437.666067][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  437.671221][    C1]  ? __switch_to_asm+0x39/0x70
[  437.675997][    C1]  ? __switch_to_asm+0x33/0x70
[  437.680772][    C1]  ? __pfx_kthread+0x10/0x10
[  437.685386][    C1]  ret_from_fork_asm+0x1a/0x30
[  437.690182][    C1]  </TASK>