last executing test programs:

1m18.818250882s ago: executing program 3 (id=56):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0xcc0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0", @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES16], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x64842, 0xa93910d2ccc20cca)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0xc197, 0x0, 0xb)

1m18.114555652s ago: executing program 3 (id=59):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x0, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x5}})
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f00000000c0))

1m14.572202601s ago: executing program 3 (id=77):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0xfff1, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)

1m14.340098304s ago: executing program 3 (id=80):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4056, &(0x7f0000000200)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@minixdf}, {@noquota}, {@usrjquota}]}, 0x1, 0x451, &(0x7f0000000680)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000b00)={{0x0, 0x0, 0x80, {0x10000, 0xe6e68000, 0x2}}, "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", "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"})
write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000000, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x6f)

1m13.96852495s ago: executing program 3 (id=82):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
close_range(r0, 0xffffffffffffffff, 0x0)

1m13.482343888s ago: executing program 3 (id=85):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0001}]})
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0)
sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

1m13.335263573s ago: executing program 32 (id=85):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0001}]})
r1 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0)
sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

1m11.569005657s ago: executing program 2 (id=97):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, r3, 0x25, 0x4, @void}, 0x9)
write$tun(r0, &(0x7f0000000540)=ANY=[], 0x10d)

1m10.920277761s ago: executing program 2 (id=102):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0)

1m8.977965112s ago: executing program 2 (id=113):
creat(&(0x7f00000008c0)='./file0\x00', 0x1a2)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)

1m8.825454117s ago: executing program 2 (id=116):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000140), 0x1, 0x7d9, &(0x7f0000001a80)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0)
r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0)
write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000001, 0x2000000, 0x0, {0xffffffffff7ffffe, 0x1, 0xffffffffbfffffff, 0x10, 0xffffffffffff592c, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0xa6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

1m8.237315545s ago: executing program 2 (id=122):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000600)={0x1, 0x1, 0x0, 0x0, 0x0, 0xf000})

1m7.152886432s ago: executing program 2 (id=128):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
pwritev(r0, 0x0, 0x0, 0x68000000, 0x7)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x5, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="33325bb9629cd80063ae646d452716670528", @ANYBLOB="3cbed6e52efe7e5218c0f9829b50d40a4da4d0accda131734cbe6c66d4eb9ac85f5cb845dd4a8185d66e14c9511af49b481c0a86d034e702e2df26bc8d2020116977c6008d4a10ec2ff5b5a2c73d099f1d28", @ANYRESOCT], 0x9f, 0x19e, &(0x7f0000000840)="$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")
chdir(0x0)
mknod$loop(0x0, 0x0, 0x1)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x96, 0x10007e}, 0x20)
readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1)

1m6.724506844s ago: executing program 33 (id=128):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
pwritev(r0, 0x0, 0x0, 0x68000000, 0x7)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x5, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="33325bb9629cd80063ae646d452716670528", @ANYBLOB="3cbed6e52efe7e5218c0f9829b50d40a4da4d0accda131734cbe6c66d4eb9ac85f5cb845dd4a8185d66e14c9511af49b481c0a86d034e702e2df26bc8d2020116977c6008d4a10ec2ff5b5a2c73d099f1d28", @ANYRESOCT], 0x9f, 0x19e, &(0x7f0000000840)="$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")
chdir(0x0)
mknod$loop(0x0, 0x0, 0x1)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x96, 0x10007e}, 0x20)
readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1)

41.364935953s ago: executing program 5 (id=316):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xa}}]}}]}, 0x40}}, 0x2004c850)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

41.218331858s ago: executing program 5 (id=318):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x902)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)

41.143576905s ago: executing program 5 (id=319):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0xffffffffffffff8c})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

40.971865652s ago: executing program 5 (id=321):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES64=0x0], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x0, 0x2150, 0x2})

39.175130099s ago: executing program 5 (id=330):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x1, 0x0, 0x100020b}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x1a})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

38.567119099s ago: executing program 5 (id=336):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x3292e291)

38.339149962s ago: executing program 34 (id=336):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x3292e291)

24.836221062s ago: executing program 7 (id=426):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x10, 0x0, r0}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

24.835886762s ago: executing program 7 (id=427):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg$sock(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="114988120c8d32f1eb", 0x9}], 0x1}}], 0x1, 0x4000000)
recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x0, 0x0)

24.260602069s ago: executing program 7 (id=430):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000be7000/0x3000)=nil, 0x3000}})

23.211204172s ago: executing program 7 (id=440):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000017c0)="1feb4e96e4a71fdc2e89eb3d54dd74a1a7ff26a2bdf40714c099237178fe16ffe1065dc4321eda71b732165e369a97", 0x2f}], 0x1)
write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77)
r2 = accept$alg(r1, 0x0, 0x0)
sendfile(r2, r0, 0x0, 0xc)

22.448393388s ago: executing program 7 (id=447):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

21.165294124s ago: executing program 7 (id=458):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x90000, 0x4, 0x34}, 0x18)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44)

6.104015948s ago: executing program 35 (id=458):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x90000, 0x4, 0x34}, 0x18)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28)
setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44)

5.177992189s ago: executing program 1 (id=581):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x7, 0x0, 0x7, 0xd544, 0xffffffffffffffff, 0x400000, 0xd, 0x0, 0x2, 0xfffffffffffffffd, 0x48d8, 0x10000, 0x6, 0x1, 0x1], 0xffff1000, 0x8340})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x80, 0x4, 0x1, 0x0, 0x2009, 0x5, 0xfd, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x800000000000009})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.949251292s ago: executing program 1 (id=582):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x3, 0x1ff, {{0x5, 0x4, 0x2, 0x1a, 0x14, 0x64, 0x0, 0x8, 0x4, 0x0, @remote, @loopback}}}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)

4.184102007s ago: executing program 4 (id=586):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f00000001c0)='./file0\x00')
syz_open_dev$tty20(0xc, 0x4, 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x120020, 0x0)
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=""/155, 0x9b)

4.069670299s ago: executing program 4 (id=587):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000100)=0x5)

3.684149236s ago: executing program 1 (id=589):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
inotify_init1(0x800)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x7})

3.54496912s ago: executing program 1 (id=591):
lseek(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x0, 0x2})

2.556349818s ago: executing program 6 (id=595):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x16, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f0000000a40)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x48)
getdents64(r0, &(0x7f0000000200)=""/205, 0xcd)

2.391190674s ago: executing program 6 (id=597):
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000fe3000/0x2000)=nil, 0x2000}, 0x2})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2.22775264s ago: executing program 6 (id=598):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000005c0), 0x10)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000b00)=""/96, 0x60}], 0x2}, 0x7}], 0x2, 0x2, 0x0)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x80001, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0)

1.340223358s ago: executing program 6 (id=602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}]}}}]}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3bffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

1.246210967s ago: executing program 0 (id=603):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000005b000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a67, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.078604074s ago: executing program 0 (id=604):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

932.332388ms ago: executing program 4 (id=605):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

931.943118ms ago: executing program 0 (id=606):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

863.757475ms ago: executing program 0 (id=607):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x6ff)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0xc0086c43, &(0x7f0000000080)=0x700)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$FUSE_WRITE(r2, &(0x7f00000000c0)={0x18}, 0xfffffdef)

833.077328ms ago: executing program 4 (id=608):
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x430a83, 0x8, 0x14}, 0x18)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0xffff, 0x26, [0x2]}, 0x8397de475a1b5b02)

680.422983ms ago: executing program 4 (id=609):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82)
r1 = fanotify_init(0x81, 0x40000)
fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0)
syz_clone(0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)

494.946491ms ago: executing program 4 (id=610):
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1600008, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodecompose,umask=00000000000000000000002,force,nodecompose,nls=cp869,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x3, 0x632, &(0x7f0000000800)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7Ba1EtJUWRESbh7IQLpSHUA4rtFoOnKPWbay6aZW4KK0QCi9x4MKh4lwOuXFC6j1SOcMF9ZpjJVAvPaDcjGY8dpy386qd7e8Xjb/v8zfzzX/+9jzsyJoA3lrzE1HciCTmJz5bTdub6zO1zfWZoby7FhFpvRBRbBaRLEUkz5vdN9KHr6VP5vMnB63nSXXuixevN182W8XWwkkprQ0fvNxRmguu5VOMR8RAXu412O2oO8a7eeB4+/nvn/YPshlous1XW4mDXmvssXacxU+83wL9I2meN/cYjRjJztDN64DIjw6FNxvd2TvWUQ4AAAAuqHe2Ymut0Wj0Og4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4SPL7/yf5VGjVxyNp3f+/1DF7qYehnomNXgcAAAAAAAAAACfSGOhsfWMrtmI1LrV7k+x//h9njbHs8SvxMFaiEstxLVZjIepRj+WYiojRjoFKqwv1+vJUF0tO77vk9LluNAAAAAAAAAB82f025rf//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0giRhoFtk01qqPRqEYEcMRUUrnW4v4V6t+kW30OgAAAAB4A97Ziq1YjUutdiPJPvN/kH3uH46HsRT1qEY9alGJW9l3Ac1P/YXN9Zna5vrMvXTaO+5f/tfIdBlGNmI0v3vYf81XsjnKcTuq2TPX4mbcj1q5c5QrrXj2j+s3r9Kxf5DrMrJbeZlu+Z/zsj+MZhkZbGdkMo8tzeO7h2fih69OtaapKLS/+Rk7h5yP5GWyq+y93ZmYjkKW79QHh2ci4pvP/vaLxdrS3cXbKxP9s0kn1MxEo9HMxFDWamXiw7cqE5PZtl9ut+fjp/HzmIjx+DyWoxq/jIWoRyXG4ydZbSF/P6ePo7syVdg59I0drc+PiqSUvy7No+jxYvo4W/ZSVONncT9uRSU+zf6mYyq+G7MxG3Mdr/DlLvb6wvH2+qvfyivpIf2Pedkf0ry+25HXzmPuaNbX+cx2lt47+2Nj8et5JV3H7yLix2e4naezOxPpWeLZV5t97x+eib9m1wkrtaW7y4sLD7pc3yd5me5Hf+irs0T6fnkvfbGy1s53R9r3/r59U1nfWLuvsKfvcrvvqD21lF/D7R1pOuv7cN++mazvSkffnuut9vUQAH1s5NsjpfJ/yv8sPy3/vrxY/mz4R0PfG/qoFIP/GPx+cXLgk8JHyd/jafx6+/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwciuPHt9dqNUqy0dWkuzm/xFdzdxRad3O6fCZk/xGPscZWaVWqwxHX4RxrErt3xEdzyS9jqcfKkP99ubv7XEJOH/X6/ceXF959Pg71XsLdyp3KkuDs7Nzk3Ozn85cv12tDUT6WJnsdZTAedg+6fc6EgAAAAAAAAAAAKBbh/8MYDCf63Q/J+jxJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX3PxEFDciianJa5Npe3N9ppZOrfr2nMWIKERE8quI5HnEjWhOMdoxXHLQep5U57548Xrz5fZYxdb8hcOW685aPsV4RAzk5VmNd/PU4yXtLUwTdrV0uuDgzPw/AAD//4oVCL4=")
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_raw(r0, 0x0, 0x0)
syz_mount_image$reiserfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x1141, &(0x7f0000002380)="$eJzs2L1qFFEYBuD3zG5MNgojsR8sU0gILLb+FArb2ioWhlR2SaUEzI3Y2dh5IZLKPqSyUIu0IozszK7LBjGgMYU+TzPf+Zlv5pTvCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEwNk88luVElG/O5KklJmuZocpKkSfL6dpLr7wdZK3m0O9l/sDd+uD/bWqU8Tsq0THl7p+8x3hi3MysvXj7PWrLXLTy7WtLk+DR5emGHWP1RDX6xq+pOm2TUjydV9/sAAADwz2v/WJ0yb/Z1tNR7kcU/Ju+uLX+3vqjvAwAAAOf56xcMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOdo60W9uTsrqiQlaZqjyUmSJkl95r2V/rF+aT8KAAAA/LaSKk/Ohvs+/nfXAL1pdSsf6rKapfncrbKdN3VG3WiYpTdmRv3Kt7b9ySIAAAD8h9ouYOdmyuEiJpcr5XCexzczXMx3O4fZ2urHW7MA/uV+Pq0na9vLvUf30r5KDnaOTw92SjsYXNqpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDv7MCxAAAAAIAwf+s0OjYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqgAAAP//21bjfQ==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

466.046404ms ago: executing program 6 (id=611):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48)
close(r1)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24)

392.408491ms ago: executing program 0 (id=612):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000080), 0xfffffe13)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0)

272.570153ms ago: executing program 1 (id=613):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)

255.610634ms ago: executing program 6 (id=614):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff}, 0x800)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340))
write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}]}})

223.36µs ago: executing program 1 (id=615):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable,uni_xlate=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1b1, &(0x7f0000000280)="$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")
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000a00)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@abort}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x31, 0x63, 0x30, 0x34, 0x63, 0x30, 0x35], 0x2d, [0x66, 0x36, 0x38, 0x65], 0x2d, [0x37, 0x6, 0x0, 0x38], 0x2d, [0x64, 0x38, 0x39], 0x2d, [0x31, 0x0, 0x33, 0x66, 0x36, 0x32, 0x30, 0x31]}}}, {@smackfshat={'smackfshat', 0x3d, ')%\xa2'}}, {@audit}, {@appraise}, {@permit_directio}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@audit}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

0s ago: executing program 0 (id=616):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x324)

kernel console output (not intermixed with test programs):

0 00 00 00 00 00 00 00 00 00 00 00  ................
[   94.585229][ T4279] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 4 error 74
[   94.632710][ T4279] XFS (loop0): page discard on page ffffea000179f1c0, inode 0x2446, offset 134219776.
[   94.685550][ T4244] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   94.754565][ T4244] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   94.776929][ T4862] kvm: emulating exchange as write
[   94.787666][ T4244] XFS (loop0): Unmount and run xfs_repair
[   94.793476][ T4244] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   94.808223][ T4244] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   94.821252][ T4244] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   94.833990][ T4244] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   94.846242][ T4244] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   94.855159][ T4244] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   94.864273][ T4244] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   94.873300][ T4244] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   94.882323][ T4244] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   94.891334][ T4279] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 4 error 74
[   94.912910][ T4279] XFS (loop0): page discard on page ffffea00019fa6c0, inode 0x2446, offset 134221824.
[   94.923532][ T4244] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   94.930304][ T4790] device hsr_slave_0 entered promiscuous mode
[   94.940341][ T4244] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   94.975629][ T4244] XFS (loop0): Unmount and run xfs_repair
[   94.994941][ T4244] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   95.003923][ T4790] device hsr_slave_1 entered promiscuous mode
[   95.011280][ T4244] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   95.030900][ T4244] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   95.045802][ T4790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.051212][ T4244] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   95.053436][ T4790] Cannot create hsr debugfs directory
[   95.094067][ T4244] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   95.112829][ T4244] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   95.132190][ T4244] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.171895][ T4244] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.192570][ T4244] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.212274][ T4279] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 4 error 74
[   95.260851][ T4229] Bluetooth: hci3: command 0x041b tx timeout
[   95.274406][ T4279] XFS (loop0): page discard on page ffffea0001a0ff00, inode 0x2446, offset 134225920.
[   95.294845][ T1325] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   95.319604][ T1325] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   95.334489][ T1325] XFS (loop0): Unmount and run xfs_repair
[   95.345312][ T1325] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   95.361382][ T1325] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   95.371969][ T1325] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   95.388220][ T1325] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   95.400754][ T1325] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   95.413504][ T1325] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   95.429872][ T1325] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.455637][ T1325] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.474803][ T1325] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.485620][ T4279] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 4 error 74
[   95.519491][ T4790] netdevsim netdevsim6 netdevsim0: renamed from eth0
[   95.524224][ T4279] XFS (loop0): page discard on page ffffea000179c3c0, inode 0x2446, offset 134230016.
[   95.573485][ T4790] netdevsim netdevsim6 netdevsim1: renamed from eth1
[   95.585851][ T4438] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   95.625520][ T4438] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   95.625569][ T4438] XFS (loop0): Unmount and run xfs_repair
[   95.625582][ T4438] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   95.625599][ T4438] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   95.625614][ T4438] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   95.625629][ T4438] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   95.655508][   T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   95.678853][ T4438] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   95.712010][ T4438] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   95.740046][ T4438] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.768859][ T4438] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.781640][ T4438] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   95.796647][ T4279] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 4 error 74
[   95.815005][ T4279] XFS (loop0): page discard on page ffffea000179d8c0, inode 0x2446, offset 134234112.
[   95.844431][ T4790] netdevsim netdevsim6 netdevsim2: renamed from eth2
[   95.854615][ T1325] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   95.885516][ T1325] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   95.915517][ T1325] XFS (loop0): Unmount and run xfs_repair
[   95.921873][ T1325] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   95.935585][ T1325] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   95.950852][ T4873] loop5: detected capacity change from 0 to 128
[   95.953888][ T1325] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   95.974073][ T1325] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   95.990714][ T1325] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   96.005815][ T1325] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   96.024015][ T1325] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.043345][ T1325] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.066333][ T1325] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.076614][ T4279] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 4 error 74
[   96.089852][   T13] usb 5-1: config 0 has an invalid interface number: 222 but max is 0
[   96.111833][   T13] usb 5-1: config 0 has no interface number 0
[   96.144390][ T4279] XFS (loop0): page discard on page ffffea00016989c0, inode 0x2446, offset 134238208.
[   96.148897][ T4790] netdevsim netdevsim6 netdevsim3: renamed from eth3
[   96.226797][ T4437] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   96.273284][ T4437] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   96.285772][   T13] usb 5-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=f7.aa
[   96.291594][ T4437] XFS (loop0): Unmount and run xfs_repair
[   96.297340][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.309303][   T13] usb 5-1: Product: syz
[   96.313511][   T13] usb 5-1: Manufacturer: syz
[   96.318252][   T13] usb 5-1: SerialNumber: syz
[   96.322951][ T4437] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   96.341490][   T13] usb 5-1: config 0 descriptor??
[   96.341672][ T4437] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   96.362604][ T4437] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   96.371985][ T4437] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   96.387715][   T13] gspca_main: sn9c2028-2.14.0 probing 0458:7005
[   96.394134][ T4437] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   96.403483][ T4437] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   96.419851][ T4437] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.431508][ T4437] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.445801][ T4437] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.455009][ T4279] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x8 len 4 error 74
[   96.484037][ T4279] XFS (loop0): page discard on page ffffea000179e700, inode 0x2446, offset 134242304.
[   96.510357][ T4441] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   96.542713][ T4441] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   96.554559][ T4441] XFS (loop0): Unmount and run xfs_repair
[   96.561070][ T4441] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   96.575662][ T4441] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   96.591552][ T4441] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   96.605596][   T13] gspca_sn9c2028: read1 error -71
[   96.620077][ T4441] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   96.625128][ T4889] loop1: detected capacity change from 0 to 164
[   96.635472][ T4441] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   96.639380][   T13] gspca_sn9c2028: read1 error -71
[   96.654824][ T4441] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   96.664170][ T4441] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.665745][   T13] gspca_sn9c2028: read1 error -71
[   96.673774][ T4441] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.690401][ T4441] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.696337][   T13] sn9c2028: probe of 5-1:0.222 failed with error -71
[   96.706322][ T4279] XFS (loop0): page discard on page ffffea000179c300, inode 0x2446, offset 134246400.
[   96.747843][ T4441] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   96.756672][   T13] usb 5-1: USB disconnect, device number 5
[   96.772842][ T4441] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   96.821657][ T4441] XFS (loop0): Unmount and run xfs_repair
[   96.863353][ T4441] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   96.887152][ T4441] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   96.895807][ T4891] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61)
[   96.898841][ T4441] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   96.937432][ T4441] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   96.955810][ T4441] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   96.964916][ T4441] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   96.981662][ T4441] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   96.991955][ T4441] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.001325][ T4441] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.011274][ T4229] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   97.071381][ T4229] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   97.083073][ T4229] XFS (loop0): Unmount and run xfs_repair
[   97.088963][ T4229] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   97.097373][ T4229] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   97.106374][ T4229] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   97.115382][ T4229] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   97.124541][ T4229] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   97.133531][ T4229] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   97.142524][ T4229] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.151603][ T4229] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.176005][ T4229] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.194670][ T1108] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   97.295817][ T1108] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   97.316662][ T1108] XFS (loop0): Unmount and run xfs_repair
[   97.322557][ T1108] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   97.336369][ T4244] Bluetooth: hci3: command 0x040f tx timeout
[   97.337744][ T1108] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   97.358281][ T1108] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   97.378305][ T1108] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   97.394065][ T1108] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   97.424646][ T1108] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   97.439669][ T1108] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.454664][ T1108] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.472000][ T1108] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.491912][ T4297] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   97.525635][ T4297] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   97.552695][ T4297] XFS (loop0): Unmount and run xfs_repair
[   97.565662][ T4297] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   97.585598][ T4297] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   97.605500][ T4297] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   97.614417][ T4297] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   97.635517][ T4297] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   97.644417][ T4297] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   97.675454][ T4297] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.695442][ T4297] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.715451][ T4297] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.735813][ T4437] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   97.755662][ T4441] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   97.791599][ T4437] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   97.836376][ T4437] XFS (loop0): Unmount and run xfs_repair
[   97.842174][ T4437] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   97.845177][ T4790] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.859648][ T4437] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   97.872069][ T4437] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   97.889033][ T4437] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   97.898591][ T4437] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   97.912969][ T4437] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   97.913599][ T4790] 8021q: adding VLAN 0 to HW filter on device team0
[   97.933132][ T4437] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.942707][ T4437] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.952062][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.960791][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.972109][ T4437] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   97.989813][ T4295] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   98.014789][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   98.034882][ T4295] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   98.048516][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   98.058494][ T4295] XFS (loop0): Unmount and run xfs_repair
[   98.064256][ T4295] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   98.072971][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.080408][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.096017][ T4295] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   98.115868][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   98.125460][ T4295] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   98.135135][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   98.143877][ T4441] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   98.155546][ T4441] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   98.175458][ T4295] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   98.185002][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.192162][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.200300][ T4441] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[   98.209653][ T4295] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   98.220302][ T1403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   98.227796][ T4441] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   98.239240][ T4295] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   98.259898][ T4295] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   98.270991][ T4441] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   98.285248][ T4295] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   98.314769][ T4295] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   98.320283][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   98.337597][ T4437] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   98.364219][ T4437] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   98.365933][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   98.399158][ T4902] loop5: detected capacity change from 0 to 8192
[   98.401061][ T4437] XFS (loop0): Unmount and run xfs_repair
[   98.413251][ T4437] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   98.437251][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   98.445724][ T4441] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   98.455215][ T4441] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   98.462740][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   98.486932][ T4902] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[   98.502805][ T4437] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   98.512227][ T4902] REISERFS (device loop5): using ordered data mode
[   98.526256][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   98.537058][ T4902] reiserfs: using flush barriers
[   98.563522][ T4441] usb 5-1: Product: syz
[   98.568026][ T4437] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   98.586744][ T4441] usb 5-1: Manufacturer: syz
[   98.591548][ T4902] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   98.610169][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.651642][ T4902] REISERFS (device loop5): checking transaction log (loop5)
[   98.658883][ T4790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   98.689488][ T4437] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   98.718618][ T4790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.729062][ T4437] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   98.729088][ T4437] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   98.729104][ T4437] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   98.729119][ T4437] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   98.729133][ T4437] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   98.738675][ T4295] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   98.791360][ T4441] cdc_wdm 5-1:1.0: skipping garbage
[   98.797263][ T4441] cdc_wdm 5-1:1.0: skipping garbage
[   98.804943][ T4441] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[   98.811207][ T4441] cdc_wdm 5-1:1.0: Unknown control protocol
[   98.821141][ T4295] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   98.839648][ T4295] XFS (loop0): Unmount and run xfs_repair
[   98.850375][ T4295] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   98.861391][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   98.865732][ T4295] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   98.880156][ T4295] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   98.888003][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   98.895782][ T4295] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   98.914776][ T4295] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   98.955059][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   98.963078][ T4295] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   98.973071][ T4902] REISERFS (device loop5): Using tea hash to sort names
[   98.973499][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   98.988012][ T4902] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[   99.006147][ T4295] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.015062][ T4295] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.054037][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   99.055815][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[   99.067551][ T4295] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.096419][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   99.109270][ T4279] xfs_discard_page: 7 callbacks suppressed
[   99.109286][ T4279] XFS (loop0): page discard on page ffffea000156c900, inode 0x2446, offset 134279168.
[   99.168919][ T4438] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   99.222625][ T4438] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   99.298921][ T4297] usb 5-1: USB disconnect, device number 6
[   99.308719][ T4438] XFS (loop0): Unmount and run xfs_repair
[   99.342703][ T4438] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   99.372737][ T4438] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   99.394885][ T4438] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   99.433793][ T4438] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   99.439204][ T4258] Bluetooth: hci3: command 0x0419 tx timeout
[   99.463266][ T4438] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   99.494706][ T4438] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   99.517621][ T4438] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.531376][ T4438] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.549557][ T4438] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.560636][ T4279] XFS (loop0): page discard on page ffffea000156c940, inode 0x2446, offset 134283264.
[   99.581211][  T154] device hsr_slave_0 left promiscuous mode
[   99.594344][  T154] device hsr_slave_1 left promiscuous mode
[   99.611346][ T4441] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   99.631876][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.647696][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.675358][ T4441] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   99.701138][ T4441] XFS (loop0): Unmount and run xfs_repair
[   99.715844][ T4441] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   99.723413][ T4441] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   99.739310][ T4441] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[   99.749655][ T4441] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[   99.766951][ T4441] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[   99.780740][ T4441] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[   99.793027][ T4441] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.806888][ T4441] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.820727][ T4441] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   99.833971][ T4279] XFS (loop0): page discard on page ffffea000156c980, inode 0x2446, offset 134287360.
[   99.844851][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.860562][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.871646][  T154] device bridge_slave_1 left promiscuous mode
[   99.884469][ T4441] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   99.921830][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.929878][ T4441] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[   99.948078][ T4441] XFS (loop0): Unmount and run xfs_repair
[   99.953874][ T4441] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   99.979892][ T4441] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   99.994419][ T4441] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[  100.050579][ T4441] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[  100.095558][ T4441] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[  100.113989][ T4441] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  100.126643][ T4441] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  100.137364][ T4441] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  100.147225][ T4441] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  100.163063][ T4915] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  100.171995][ T4279] XFS (loop0): page discard on page ffffea000156c9c0, inode 0x2446, offset 134291456.
[  100.185289][ T4297] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  100.203845][ T4297] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[  100.205104][  T154] device bridge_slave_0 left promiscuous mode
[  100.238620][ T4297] XFS (loop0): Unmount and run xfs_repair
[  100.244939][ T4297] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  100.268736][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.272240][ T4917] loop4: detected capacity change from 0 to 16
[  100.285565][ T4297] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  100.303450][ T4297] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[  100.313973][ T4297] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[  100.330269][ T4297] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[  100.340307][  T154] device veth1_macvtap left promiscuous mode
[  100.353063][ T4917] erofs: (device loop4): mounted with root inode @ nid 36.
[  100.369782][ T4920] loop5: detected capacity change from 0 to 256
[  100.376563][  T154] device veth0_macvtap left promiscuous mode
[  100.384318][ T4297] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  100.385671][  T154] device veth1_vlan left promiscuous mode
[  100.411501][ T4917] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  100.437046][  T154] device veth0_vlan left promiscuous mode
[  100.443394][ T4297] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  100.455317][ T4920] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.466642][ T4297] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  100.495142][ T4297] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  100.510022][ T4920] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  100.552593][ T4279] XFS (loop0): page discard on page ffffea000156ca00, inode 0x2446, offset 134295552.
[  100.585177][ T4920] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  100.607370][ T4297] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  100.640224][ T4297] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[  100.694346][ T4924] loop1: detected capacity change from 0 to 16
[  100.703570][ T4297] XFS (loop0): Unmount and run xfs_repair
[  100.719268][ T4297] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  100.730711][ T4297] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  100.779579][ T4297] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[  100.795954][ T4297] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[  100.815154][ T4297] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[  100.837023][ T4297] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  100.916198][ T4924] erofs: (device loop1): mounted with root inode @ nid 36.
[  100.941077][ T4297] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  100.997049][ T4297] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  101.030232][ T4926] loop4: detected capacity change from 0 to 32768
[  101.048700][ T4297] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  101.070880][ T4279] XFS (loop0): page discard on page ffffea000156ca40, inode 0x2446, offset 134299648.
[  101.081408][ T4926] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.177 (4926)
[  101.130150][ T4926] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  101.141384][ T4926] BTRFS info (device loop4): using free space tree
[  101.148107][ T4926] BTRFS info (device loop4): has skinny extents
[  101.156740][ T4295] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  101.173285][ T4295] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[  101.185652][ T4295] XFS (loop0): Unmount and run xfs_repair
[  101.191626][ T4295] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  101.199294][ T4295] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  101.208257][ T4295] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[  101.217324][ T4295] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[  101.226334][ T4295] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[  101.235373][ T4295] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  101.244362][ T4295] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  101.253433][ T4295] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  101.262520][ T4295] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  101.272979][ T4279] XFS (loop0): page discard on page ffffea000156ca80, inode 0x2446, offset 134303744.
[  101.318389][    T7] XFS (loop0): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:768). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  101.366767][    T7] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 
[  101.405848][    T7] XFS (loop0): Unmount and run xfs_repair
[  101.411643][    T7] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  101.435783][    T7] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  101.445169][    T7] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f  ................
[  101.524049][ T4926] BTRFS info (device loop4): enabling ssd optimizations
[  101.525899][    T7] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91  ......N..b..1...
[  101.571200][    T7] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13  ................
[  101.605521][    T7] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00  ...H............
[  101.614578][    T7] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  101.646293][    T7] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  101.655297][    T7] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  101.696139][ T4279] XFS (loop0): page discard on page ffffea000156cac0, inode 0x2446, offset 134307840.
[  101.785886][ T4184] XFS (loop0): Unmounting Filesystem
[  102.055820][ T4297] Bluetooth: hci4: command 0x0406 tx timeout
[  102.214892][ T4962] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  102.336868][  T154] team0 (unregistering): Port device team_slave_1 removed
[  102.389231][  T154] team0 (unregistering): Port device team_slave_0 removed
[  102.444834][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.467636][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.701894][  T154] bond0 (unregistering): Released all slaves
[  103.073615][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.083953][ T4992] loop4: detected capacity change from 0 to 512
[  103.107576][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.159207][ T4790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.180279][ T4992] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  103.223670][ T4992] EXT4-fs (loop4): 1 truncate cleaned up
[  103.255743][ T4992] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  103.338697][ T4992] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.191: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  103.591070][ T5014] loop4: detected capacity change from 0 to 2048
[  103.658107][ T5014] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  103.675523][ T4244] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  103.688771][ T5014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.917532][ T4244] usb 6-1: Using ep0 maxpacket: 32
[  104.035744][ T4244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.093983][ T4244] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.137079][ T4244] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  104.210400][ T4244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.254176][ T4244] usb 6-1: config 0 descriptor??
[  104.328494][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.342024][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.352191][ T4244] hub 6-1:0.0: USB hub found
[  104.390001][ T4790] device veth0_vlan entered promiscuous mode
[  104.397231][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.427856][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.452596][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.497270][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.541610][ T4790] device veth1_vlan entered promiscuous mode
[  104.565736][ T4244] hub 6-1:0.0: 1 port detected
[  104.582096][ T5074] tipc: Started in network mode
[  104.595054][ T5074] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[  104.619200][ T5074] tipc: Enabled bearer <udp:syz1>, priority 10
[  104.673036][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  104.689721][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  104.733718][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  104.760040][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  104.787550][ T4790] device veth0_macvtap entered promiscuous mode
[  104.834727][ T4790] device veth1_macvtap entered promiscuous mode
[  104.882409][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.904255][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.926394][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.948132][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.968028][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.991634][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.011581][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.047747][    T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  105.067854][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.087117][ T4790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.105614][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.121028][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.152707][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  105.176924][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.198527][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.223862][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.225637][ T4297] hub 6-1:0.0: activate --> -90
[  105.260995][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.272541][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.283727][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.294750][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.305007][ T4790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.308031][    T7] usb 5-1: Using ep0 maxpacket: 16
[  105.317967][ T4790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.334181][ T4790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.348329][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  105.365356][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  105.387137][ T4790] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.402284][ T4790] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.412023][ T4790] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.429087][ T4790] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.447241][    T7] usb 5-1: config 17 has an invalid interface number: 153 but max is 0
[  105.475578][    T7] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[  105.502940][    T7] usb 5-1: config 17 has no interface number 0
[  105.525658][    T7] usb 5-1: config 17 interface 153 has no altsetting 0
[  105.603449][ T5048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.642176][ T5048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.651628][ T4244] usb 6-1: USB disconnect, device number 2
[  105.685993][    T7] usb 5-1: New USB device found, idVendor=0421, idProduct=00e9, bcdDevice=57.44
[  105.731776][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.747064][    T7] usb 5-1: Product: syz
[  105.748985][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  105.751329][    T7] usb 5-1: Manufacturer: syz
[  105.774538][    T7] usb 5-1: SerialNumber: syz
[  105.775231][ T5048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.786681][ T1325] tipc: Node number set to 4269801494
[  105.805563][ T5048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.831065][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  105.861235][    T7] rndis_wlan 5-1:17.153: More than one union descriptor, skipping ...
[  105.910709][    T7] usb 5-1: bad CDC descriptors
[  105.924129][    T7] rndis_host 5-1:17.153: More than one union descriptor, skipping ...
[  105.942412][    T7] usb 5-1: bad CDC descriptors
[  105.966076][    T7] cdc_acm 5-1:17.153: More than one union descriptor, skipping ...
[  106.097631][    T7] usb 5-1: USB disconnect, device number 7
[  106.371406][ T5106] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  106.840713][ T5100] loop6: detected capacity change from 0 to 32768
[  107.034760][ T5100] XFS (loop6): Mounting V5 Filesystem
[  107.163018][ T5135] loop0: detected capacity change from 0 to 1024
[  107.238455][ T5100] XFS (loop6): Ending clean mount
[  107.432541][ T5135] hfsplus: xattr searching failed
[  107.453170][ T4790] XFS (loop6): Unmounting Filesystem
[  107.468469][ T5135] hfsplus: xattr searching failed
[  107.528155][ T1108] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  107.665367][  T154] hfsplus: b-tree write err: -5, ino 3
[  107.815800][ T1108] usb 6-1: Using ep0 maxpacket: 16
[  107.855482][ T4244] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  107.975589][    T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  107.975977][ T1108] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  107.998105][ T1108] usb 6-1: config 1 has no interface number 1
[  108.004477][ T1108] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  108.018709][ T1108] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  108.039668][ T1108] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  108.153869][ T5156] loop6: detected capacity change from 0 to 1024
[  108.190853][ T5156] EXT4-fs (loop6): Unrecognized mount option "context=unconfined_u" or missing value
[  108.215616][ T1108] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  108.225809][ T4244] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  108.234110][ T4244] usb 2-1: config 179 has no interface number 0
[  108.238893][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.254857][ T1108] usb 6-1: Product: syz
[  108.255843][ T4244] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  108.259899][ T1108] usb 6-1: Manufacturer: syz
[  108.275304][ T1108] usb 6-1: SerialNumber: syz
[  108.300636][ T4244] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64
[  108.319785][ T4244] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  108.334985][ T4244] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  108.347869][ T5150] ODEBUG: Out of memory. ODEBUG disabled
[  108.385667][    T7] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  108.395925][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.406765][    T7] usb 5-1: config 0 descriptor??
[  108.435610][ T4244] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  108.445250][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  108.456340][    T7] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  108.463947][ T4244] usb 2-1: Product: syz
[  108.515817][ T5144] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  108.817089][ T4244] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7
[  108.835784][ T1108] usb 6-1: 2:1 : format type 0 is detected, processed as PCM
[  109.013837][ T4438] usb 2-1: USB disconnect, device number 3
[  109.015469][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  109.028453][ T4438] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  109.270675][ T5178] fuse: root generation should be zero
[  109.386136][ T5184] syz.0.237 sent an empty control message without MSG_MORE.
[  109.452392][ T5185] Disabled LAPIC found during irq injection
[  109.559479][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.239'.
[  109.589144][ T5191] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.598806][ T5191] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.607645][ T5191] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.616407][ T5191] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.634209][ T5195] loop1: detected capacity change from 0 to 256
[  109.679364][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.239'.
[  109.746122][ T1108] usb 6-1: 2:1: cannot get freq at ep 0x82
[  109.827252][    T7] usb 5-1: USB disconnect, device number 8
[  109.897257][ T1108] usb 6-1: USB disconnect, device number 3
[  110.119171][ T5203] loop1: detected capacity change from 0 to 128
[  110.185899][ T5203] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  110.205625][ T5203] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  110.657329][ T5225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.252'.
[  110.885519][ T1325] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  111.065355][ T5233] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  111.083964][ T5233] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  111.195570][ T1108] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  111.245733][ T1325] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  111.256034][ T1325] usb 6-1: config 0 has no interface number 0
[  111.262187][ T1325] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  111.274577][ T1325] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  111.289739][ T1325] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  111.300136][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.313757][ T1325] usb 6-1: config 0 descriptor??
[  111.335887][ T5222] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  111.383077][ T1325] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  111.475539][ T1108] usb 2-1: Using ep0 maxpacket: 16
[  111.606076][ T1108] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  111.609109][ T1325] usb 6-1: USB disconnect, device number 4
[  111.624432][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.678454][ T1108] usb 2-1: config 0 descriptor??
[  111.739159][ T1108] gspca_main: sonixj-2.14.0 probing 0471:0327
[  111.761726][ T5249] loop6: detected capacity change from 0 to 32768
[  111.830912][   T26] audit: type=1800 audit(1761032121.333:6): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.262" name="file1" dev="loop6" ino=7 res=0 errno=0
[  111.909176][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[  112.392533][ T5272] loop5: detected capacity change from 0 to 256
[  112.466233][ T5272] exfat: Deprecated parameter 'namecase'
[  112.472098][ T5272] exfat: Deprecated parameter 'utf8'
[  112.517466][ T5275] loop0: detected capacity change from 0 to 1024
[  112.561599][ T5272] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  112.634057][ T5275] EXT4-fs (loop0): Ignoring removed nobh option
[  112.651743][ T5275] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  112.697669][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'.
[  112.725539][ T5275] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,data_err=abort,init_itable,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b0,i_version,bsdgroups,nobh,user_xattr,inode_readahead_blks=0x0000000000000004,dioread_nolock,,errors=continue. Quota mode: none.
[  112.806748][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'.
[  112.818644][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'.
[  112.834767][ T5282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'.
[  112.940543][ T5056] EXT4-fs error (device loop0): mb_free_blocks:1860: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt.
[  112.996810][ T1108] gspca_sonixj: reg_w1 err -71
[  113.045830][ T1108] sonixj: probe of 2-1:0.0 failed with error -71
[  113.068147][ T1108] usb 2-1: USB disconnect, device number 4
[  113.251192][ T5302] loop0: detected capacity change from 0 to 512
[  113.297343][ T5305] input: syz0 as /devices/virtual/input/input8
[  113.304472][ T5305] input: failed to attach handler leds to device input8, error: -6
[  113.373614][ T5302] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  113.626721][ T5312] loop6: detected capacity change from 0 to 32768
[  113.666100][ T5312] XFS: noikeep mount option is deprecated.
[  113.713440][ T5316] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967280. macoff=96
[  113.737753][ T5312] XFS (loop6): Mounting V5 Filesystem
[  113.828286][ T5312] XFS (loop6): Ending clean mount
[  113.835753][ T5312] XFS (loop6): Quotacheck needed: Please wait.
[  113.925553][ T1325] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  113.959322][ T5312] XFS (loop6): Quotacheck: Done.
[  114.031696][ T5335] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  114.203149][ T4790] XFS (loop6): Unmounting Filesystem
[  114.225720][ T5341] kvm: apic: phys broadcast and lowest prio
[  114.232290][ T5341] kvm: apic: phys broadcast and lowest prio
[  114.329133][ T1325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.340773][ T1325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.368276][ T1325] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  114.409339][ T1325] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  114.419116][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.459215][ T1325] usb 6-1: config 0 descriptor??
[  114.480423][ T5353] fuse: Bad value for 'fd'
[  114.950820][ T1325] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd
[  114.982734][ T1325] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  115.066058][ T1325] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  115.403331][ T5385] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  115.675522][ T1325] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  115.686803][ T5391] loop6: detected capacity change from 0 to 16
[  115.723041][ T5365] loop4: detected capacity change from 0 to 40427
[  115.762525][ T5391] erofs: (device loop6): mounted with root inode @ nid 36.
[  115.788339][ T5365] F2FS-fs (loop4): build fault injection attr: rate: 694, type: 0x1ffff
[  115.820016][    T7] usb 6-1: USB disconnect, device number 5
[  115.844112][ T5365] F2FS-fs (loop4): invalid crc value
[  115.905146][ T5365] F2FS-fs (loop4): Found nat_bits in checkpoint
[  115.974096][ T4790] erofs: (device loop6): erofs_fill_dentries: bogus dirent @ nid 46
[  115.990960][ T4790] erofs: (device loop6): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  116.003397][ T4790] erofs: (device loop6): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  116.055834][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.080353][ T1325] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  116.089668][ T5365] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  116.133443][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.180701][ T1325] usb 1-1: config 0 descriptor??
[  116.363959][ T5365] F2FS-fs (loop4) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x136/0x8f0
[  116.456717][ T5412] loop6: detected capacity change from 0 to 256
[  116.492723][ T4187] attempt to access beyond end of device
[  116.492723][ T4187] loop4: rw=2049, want=45112, limit=40427
[  116.683238][ T1325] kye 0003:0458:5011.0002: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0
[  116.742100][ T1325] kye 0003:0458:5011.0002: tablet-enabling feature report not found
[  116.776494][ T1325] kye 0003:0458:5011.0002: tablet enabling failed
[  116.919086][ T4244] usb 1-1: USB disconnect, device number 4
[  116.991808][ T5417] fido_id[5417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  117.120335][ T5404] loop1: detected capacity change from 0 to 40427
[  117.209589][ T5404] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  117.235599][ T5404] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  117.350573][ T5404] F2FS-fs (loop1): Found nat_bits in checkpoint
[  117.380979][ T5414] loop5: detected capacity change from 0 to 40427
[  117.460734][ T5414] F2FS-fs (loop5): invalid crc value
[  117.543955][ T5414] F2FS-fs (loop5): Found nat_bits in checkpoint
[  117.579029][ T5404] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  117.590738][ T5404] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  117.757973][ T5414] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  117.968774][ T5414] loop5: detected capacity change from 40427 to 0
[  117.993466][    C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[  118.023378][    C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[  118.038261][    C1] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[  118.065609][    C1] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[  118.082608][    C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[  118.094710][    C1] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[  118.115556][    C1] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[  118.158791][    C1] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[  118.173981][    C0] blk_update_request: I/O error, dev loop5, sector 28736 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0
[  118.217693][    C0] blk_update_request: I/O error, dev loop5, sector 45064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  118.367362][ T5435] loop0: detected capacity change from 0 to 32768
[  118.410151][   T26] audit: type=1800 audit(1761032127.913:7): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.328" name="file1" dev="loop0" ino=4 res=0 errno=0
[  118.575656][    T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  118.815040][ T5048] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.945715][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  118.986136][    T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  118.995288][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.015073][ T5455] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  119.024531][ T5455] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  119.071595][ T5048] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.092668][    T7] usb 2-1: config 0 descriptor??
[  119.147992][    T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  119.202431][ T5048] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.312630][ T5048] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.496723][ T4966] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  119.673283][ T4436] usb 2-1: USB disconnect, device number 5
[  119.870966][ T5466] chnl_net:caif_netlink_parms(): no params data found
[  119.939331][ T4966] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  119.953884][ T4966] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  119.969674][ T4966] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  120.000868][ T4966] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  120.006868][ T5466] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.019265][ T5466] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.021663][ T4966] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  120.028715][ T5466] device bridge_slave_0 entered promiscuous mode
[  120.055100][ T5466] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.063671][ T5466] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.072230][ T5466] device bridge_slave_1 entered promiscuous mode
[  120.121592][ T5494] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  120.122622][ T5466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.134567][ T5494] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  120.145483][ T5466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.168389][ T4966] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  120.187880][ T4966] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  120.216315][ T4966] usb 7-1: Product: syz
[  120.235606][ T4966] usb 7-1: Manufacturer: syz
[  120.270672][ T5466] team0: Port device team_slave_0 added
[  120.273092][ T5498] loop4: detected capacity change from 0 to 512
[  120.283893][ T5060] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting
[  120.336741][ T4966] cdc_wdm 7-1:1.0: skipping garbage
[  120.344837][ T4966] cdc_wdm 7-1:1.0: skipping garbage
[  120.359516][ T4966] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  120.368792][ T4966] cdc_wdm 7-1:1.0: Unknown control protocol
[  120.377002][ T5060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.385054][ T5060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.397819][ T5498] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  120.424964][ T5466] team0: Port device team_slave_1 added
[  120.429087][ T5498] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  120.504132][ T5498] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  120.534626][ T5498] System zones: 0-2, 18-18, 34-34
[  120.565494][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  120.579272][ T5498] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.344: inode #15: comm syz.4.344: iget: illegal inode #
[  120.606720][ T5506] loop0: detected capacity change from 0 to 2048
[  120.623763][ T5466] batman_adv: batadv0: Adding interface: batadv_slave_0
[  120.630974][ T5466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.634522][ T5498] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.344: couldn't read orphan inode 15 (err -117)
[  120.658744][ T5466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  120.682302][ T5466] batman_adv: batadv0: Adding interface: batadv_slave_1
[  120.689436][ T5466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  120.698342][ T5506] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.717324][ T5466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  120.777682][ T5466] device hsr_slave_0 entered promiscuous mode
[  120.784931][ T5466] device hsr_slave_1 entered promiscuous mode
[  120.785047][ T5498] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  120.812228][ T5466] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  120.821088][ T4966] usb 7-1: USB disconnect, device number 2
[  120.827378][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  120.827410][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  120.827429][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  120.852297][ T5466] Cannot create hsr debugfs directory
[  121.234046][ T5518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'.
[  121.248155][ T5518] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  121.455500][ T4966] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  121.492618][ T5520] process 'syz.1.352' launched '/dev/fd/6' with NULL argv: empty string added
[  121.495596][ T4297] Bluetooth: hci4: command 0x0409 tx timeout
[  121.510385][ T5048] device hsr_slave_0 left promiscuous mode
[  121.533164][ T5048] device hsr_slave_1 left promiscuous mode
[  121.546581][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.564095][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.598245][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.606736][ T5514] loop0: detected capacity change from 0 to 32768
[  121.615261][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.624623][ T5048] device bridge_slave_1 left promiscuous mode
[  121.634370][ T5524] loop1: detected capacity change from 0 to 1024
[  121.638030][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.667968][ T5048] device bridge_slave_0 left promiscuous mode
[  121.680885][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.710448][ T5514] XFS (loop0): Mounting V5 Filesystem
[  121.735615][ T4966] usb 5-1: Using ep0 maxpacket: 8
[  121.759617][ T5524] hfsplus: xattr searching failed
[  121.772635][ T5048] device veth1_macvtap left promiscuous mode
[  121.783490][ T5524] hfsplus: xattr searching failed
[  121.791570][ T5514] XFS (loop0): Ending clean mount
[  121.822663][ T5514] XFS (loop0): Quotacheck needed: Please wait.
[  121.826425][ T5048] device veth0_macvtap left promiscuous mode
[  121.848014][ T5524] hfsplus: xattr searching failed
[  121.862538][ T5048] device veth1_vlan left promiscuous mode
[  121.874266][ T5048] device veth0_vlan left promiscuous mode
[  121.890608][ T5514] XFS (loop0): Quotacheck: Done.
[  121.992609][ T4184] XFS (loop0): Unmounting Filesystem
[  122.063907][ T4966] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  122.073316][ T4966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.082319][ T4966] usb 5-1: Product: syz
[  122.087036][ T4966] usb 5-1: Manufacturer: syz
[  122.091684][ T4966] usb 5-1: SerialNumber: syz
[  122.106350][ T4966] usb 5-1: config 0 descriptor??
[  122.327961][ T5048] team0 (unregistering): Port device team_slave_1 removed
[  122.347987][ T5048] team0 (unregistering): Port device team_slave_0 removed
[  122.377865][ T4966] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  122.399445][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.433062][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.463998][ T5534] kvm [5533]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010002 data 0xffff00
[  122.649008][ T5048] bond0 (unregistering): Released all slaves
[  122.750971][ T5466] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  122.764818][ T5466] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  122.768367][ T5466] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  122.781494][ T5466] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  122.904759][ T5548] loop6: detected capacity change from 0 to 2048
[  123.002542][ T5548] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  123.018633][ T5555] loop1: detected capacity change from 0 to 512
[  123.087087][ T5466] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.104090][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.123756][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.139420][ T5466] 8021q: adding VLAN 0 to HW filter on device team0
[  123.151775][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  123.198417][ T5555] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.361: casefold flag without casefold feature
[  123.221296][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  123.226263][ T5555] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.361: couldn't read orphan inode 15 (err -117)
[  123.230583][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.248402][ T5040] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.257469][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  123.266635][ T5555] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  123.284504][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.298913][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  123.309132][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.316304][ T5040] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.326508][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  123.346938][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.362514][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  123.386077][   T26] audit: type=1800 audit(1761032132.893:8): pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.361" name="file1" dev="loop1" ino=18 res=0 errno=0
[  123.403543][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  123.431234][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  123.453000][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  123.459011][ T5548] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.360: bg 0: block 234: padding at end of block bitmap is not set
[  123.477953][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  123.487624][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  123.492133][ T5548] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  123.496955][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  123.519996][ T5548] EXT4-fs (loop6): This should not happen!! Data will be lost
[  123.519996][ T5548] 
[  123.530352][ T5548] EXT4-fs (loop6): Total free blocks count 0
[  123.537498][ T5548] EXT4-fs (loop6): Free/Dirty block details
[  123.544333][ T5548] EXT4-fs (loop6): free_blocks=0
[  123.547580][ T5466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.549590][ T5548] EXT4-fs (loop6): dirty_blocks=16
[  123.565047][ T5466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.568707][ T5548] EXT4-fs (loop6): Block reservation details
[  123.577216][ T4244] Bluetooth: hci4: command 0x041b tx timeout
[  123.598068][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.606365][ T5548] EXT4-fs (loop6): i_reserved_data_blocks=1
[  123.608286][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.805745][ T4966] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  123.838367][ T4966] usb 5-1: USB disconnect, device number 9
[  123.886489][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.894069][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.970921][ T5466] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.015652][ T4259] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  124.206976][ T4436] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  124.306469][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  124.316628][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.342094][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  124.354755][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.367700][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.384077][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.395887][ T4259] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  124.396104][ T5466] device veth0_vlan entered promiscuous mode
[  124.408053][ T4259] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  124.426769][ T4259] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  124.441320][ T4259] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  124.455156][ T4259] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  124.460856][ T5466] device veth1_vlan entered promiscuous mode
[  124.514182][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  124.523459][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  124.532088][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  124.542743][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.554529][ T5466] device veth0_macvtap entered promiscuous mode
[  124.571954][ T5466] device veth1_macvtap entered promiscuous mode
[  124.592519][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.606347][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.617217][ T4259] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  124.626608][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.639012][ T4259] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  124.648209][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.658877][ T4259] usb 2-1: Product: syz
[  124.663245][ T4259] usb 2-1: Manufacturer: syz
[  124.669536][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.682248][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.692649][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.704423][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.717929][ T5466] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.727610][ T4259] cdc_wdm 2-1:1.0: skipping garbage
[  124.732872][ T4259] cdc_wdm 2-1:1.0: skipping garbage
[  124.741669][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.754810][ T4259] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  124.761555][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.769356][ T4259] cdc_wdm 2-1:1.0: Unknown control protocol
[  124.776841][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.789384][ T5056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.798299][ T4436] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  124.812851][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.824128][ T4436] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.835194][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.849795][ T4436] usb 1-1: Product: syz
[  124.854204][ T4436] usb 1-1: Manufacturer: syz
[  124.866713][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.879718][ T4436] usb 1-1: SerialNumber: syz
[  124.893782][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.894273][ T4436] usb 1-1: config 0 descriptor??
[  124.917455][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.939160][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.972168][ T5466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.985452][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  124.995026][ T5466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.018300][ T5466] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.049596][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.071329][ T5586] loop6: detected capacity change from 0 to 512
[  125.079148][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.097242][ T5466] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.107074][ T5466] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.116145][ T5466] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.135803][ T5466] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.204424][ T5586] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  125.218551][ T4258] usb 2-1: USB disconnect, device number 6
[  125.253755][ T5586] FAT-fs (loop6): Filesystem has been set read-only
[  125.385862][ T4436] airspy 1-1:0.0: Board ID: 00
[  125.401287][ T4436] airspy 1-1:0.0: Firmware version: 
[  125.418505][ T5058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.442804][ T5058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.475027][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  125.504691][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.519140][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.619237][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  125.655481][ T4258] Bluetooth: hci4: command 0x040f tx timeout
[  125.985813][ T5597] syz.4.383 (5597) used greatest stack depth: 18632 bytes left
[  125.993467][ T5600] syz.4.383 (5600) used greatest stack depth: 18560 bytes left
[  126.163510][ T5595] loop6: detected capacity change from 0 to 32768
[  126.293489][ T5595] XFS (loop6): Mounting V5 Filesystem
[  126.377781][ T5595] XFS (loop6): Ending clean mount
[  126.388686][ T5595] XFS (loop6): Quotacheck needed: Please wait.
[  126.466935][ T4436] airspy 1-1:0.0: usb_control_msg() failed -71 request 10
[  126.498632][ T4436] airspy 1-1:0.0: Registered as swradio24
[  126.505342][ T4436] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  126.522537][ T4436] usb 1-1: USB disconnect, device number 5
[  126.528996][ T5595] XFS (loop6): Quotacheck: Done.
[  126.671295][ T5624] loop4: detected capacity change from 0 to 256
[  126.764316][ T4790] XFS (loop6): Unmounting Filesystem
[  126.797957][ T5624] FAT-fs (loop4): Unrecognized mount option "uni_xlate=
" or missing value
[  127.125675][ T5635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'.
[  127.140392][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'.
[  127.168250][ T5635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'.
[  127.179757][ T5635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.386'.
[  127.348530][ T5639] loop0: detected capacity change from 0 to 1024
[  127.429756][ T5624] loop4: detected capacity change from 0 to 32768
[  127.588683][ T5624] XFS (loop4): Mounting V5 Filesystem
[  127.741295][ T4184] hfsplus: node 4:3 still has 1 user(s)!
[  127.745688][ T4258] Bluetooth: hci4: command 0x0419 tx timeout
[  127.776447][ T5624] XFS (loop4): Ending clean mount
[  127.862173][   T26] audit: type=1800 audit(1761032137.363:9): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.380" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  128.108324][ T4187] XFS (loop4): Unmounting Filesystem
[  128.185977][ T5657] loop7: detected capacity change from 0 to 32768
[  128.257729][ T5657] XFS (loop7): Mounting V5 Filesystem
[  128.396822][ T5657] XFS (loop7): Ending clean mount
[  128.404697][ T5657] XFS (loop7): Quotacheck needed: Please wait.
[  128.464605][ T5657] XFS (loop7): Quotacheck: Done.
[  128.573139][ T5466] XFS (loop7): Unmounting Filesystem
[  129.275549][   T13] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  129.435475][ T4436] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  129.525619][ T4259] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  129.568353][ T5705] netlink: 24 bytes leftover after parsing attributes in process `syz.6.407'.
[  129.637852][ T5708] loop0: detected capacity change from 0 to 128
[  129.661757][   T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.685934][   T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.720384][ T5708] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  129.731440][ T5708] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  129.845854][   T13] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  129.854958][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.867020][ T4436] usb 8-1: config 0 has no interfaces?
[  129.872570][ T4436] usb 8-1: New USB device found, idVendor=0403, idProduct=da73, bcdDevice=dc.8d
[  129.873719][   T13] usb 5-1: Product: syz
[  129.889037][ T4436] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.896015][   T13] usb 5-1: Manufacturer: syz
[  129.901770][   T13] usb 5-1: SerialNumber: syz
[  129.910720][ T4436] usb 8-1: config 0 descriptor??
[  129.966583][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.004177][ T4259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.016122][ T4259] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  130.032903][ T4259] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  130.043656][ T4259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.065708][ T4259] usb 2-1: config 0 descriptor??
[  130.151542][ T5709] loop6: detected capacity change from 0 to 32768
[  130.221621][ T5709] XFS (loop6): Mounting V5 Filesystem
[  130.245664][   T13] usb 5-1: 0:2 : does not exist
[  130.264211][ T5709] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  130.306058][   T13] usb 5-1: USB disconnect, device number 10
[  130.403189][ T5709] XFS (loop6): Ending clean mount
[  130.445700][ T4966] usb 8-1: USB disconnect, device number 2
[  130.458047][ T5709] XFS (loop6): Metadata corruption detected at xfs_dinode_verify+0x293/0xcf0, inode 0x1803 dinode
[  130.470595][ T5709] XFS (loop6): Unmount and run xfs_repair
[  130.477372][ T5709] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  130.490047][ T5709] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  130.504136][ T5709] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.514830][ T5709] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  130.529191][ T5709] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  130.542064][ T5709] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  130.551926][ T4189] udevd[4189]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.577545][ T4259] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  130.594166][ T5709] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  130.608133][ T4259] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  130.630474][ T5709] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  130.644312][ T5709] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  130.700954][ T4790] XFS (loop6): Unmounting Filesystem
[  130.771582][ T5734] loop4: detected capacity change from 0 to 512
[  130.832744][ T5734] EXT4-fs (loop4): Ignoring removed nobh option
[  130.844199][ T5734] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  130.902678][ T5734] EXT4-fs (loop4): 1 truncate cleaned up
[  130.933668][ T5734] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  131.542819][ T5751] loop6: detected capacity change from 0 to 2048
[  131.653794][ T5751] hpfs: filesystem error: improperly stopped; already mounted read-only
[  131.690223][ T5751] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  131.832034][ T5751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.416'.
[  131.897004][    C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1
[  131.919669][ T4966] usb 2-1: USB disconnect, device number 7
[  132.511511][ T5762] loop7: detected capacity change from 0 to 512
[  132.585498][ T5762] EXT4-fs (loop7): Ignoring removed oldalloc option
[  132.606027][ T5764] loop1: detected capacity change from 0 to 1024
[  132.688052][ T5762] EXT4-fs (loop7): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,oldalloc,,errors=continue. Quota mode: writeback.
[  132.753219][ T5762] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.862107][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[  132.868473][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
[  133.122620][ T5749] loop4: detected capacity change from 0 to 262144
[  133.138949][ T5048] hfsplus: b-tree write err: -5, ino 4
[  133.212708][ T5770] loop6: detected capacity change from 0 to 1024
[  133.257330][ T5749] F2FS-fs (loop4): invalid crc value
[  133.291804][ T5749] F2FS-fs (loop4): Found nat_bits in checkpoint
[  133.333481][ T5770] EXT4-fs (loop6): can't mount with commit=1, fs mounted w/o journal
[  133.343397][ T5749] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  133.822770][ T5789] loop0: detected capacity change from 0 to 2048
[  133.834598][ T5784] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  133.881843][ T5784] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  134.018174][ T5789] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none.
[  134.762272][ T5817] loop6: detected capacity change from 0 to 1024
[  135.034856][  T154] hfsplus: b-tree write err: -5, ino 3
[  135.134693][ T5824] loop1: detected capacity change from 0 to 256
[  135.183560][ T5826] loop6: detected capacity change from 0 to 1024
[  135.195748][ T4436] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  135.243428][ T5824] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d)
[  135.372901][ T5828] loop7: detected capacity change from 0 to 512
[  135.455564][ T4436] usb 1-1: Using ep0 maxpacket: 32
[  135.479318][ T5828] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.447: casefold flag without casefold feature
[  135.565620][ T5828] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.447: couldn't read orphan inode 15 (err -117)
[  135.595870][ T4436] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  135.635460][ T4436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.647732][ T5828] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.664822][ T4436] usb 1-1: config 0 descriptor??
[  135.745255][ T4436] gspca_main: nw80x-2.14.0 probing 055f:d001
[  136.335626][ T4966] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  136.579037][ T5860] APIC base relocation is unsupported by KVM
[  136.767155][ T4966] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  136.802885][ T5870] loop4: detected capacity change from 0 to 1024
[  136.807085][ T4966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.846404][ T4966] usb 2-1: config 0 descriptor??
[  137.155580][ T4258] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  137.238366][ T4436] usb 1-1: USB disconnect, device number 6
[  137.395615][ T4258] usb 5-1: Using ep0 maxpacket: 16
[  137.436356][ T4258] usb 5-1: too many configurations: 123, using maximum allowed: 8
[  137.515614][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.605859][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.696210][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.785536][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.045628][ T4436] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  138.415785][ T4966] usb 2-1: Cannot set autoneg
[  138.420658][ T4966] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71
[  138.429196][ T4436] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.445532][ T4436] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  138.465223][ T4966] usb 2-1: USB disconnect, device number 8
[  138.472403][ T4436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.502386][ T4436] usb 1-1: config 0 descriptor??
[  138.559014][ T4436] pwc: Askey VC010 type 2 USB webcam detected.
[  138.566892][ T5883] loop6: detected capacity change from 0 to 131072
[  138.582489][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.665663][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.677058][ T5883] F2FS-fs (loop6): invalid crc value
[  138.687375][ T5883] F2FS-fs (loop6): Found nat_bits in checkpoint
[  138.729881][ T5883] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2
[  138.742489][ T5883] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  138.795872][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.896672][ T4258] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.985683][ T4258] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  138.994774][ T4258] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  139.003145][ T4258] usb 5-1: SerialNumber: syz
[  139.008303][ T4436] pwc: recv_control_msg error -32 req 02 val 2b00
[  139.016251][ T4258] usb 5-1: config 0 descriptor??
[  139.059136][ T4258] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10
[  139.076247][ T4436] pwc: recv_control_msg error -32 req 02 val 2700
[  139.125613][ T4436] pwc: recv_control_msg error -32 req 02 val 2c00
[  139.186337][ T4436] pwc: recv_control_msg error -32 req 04 val 1000
[  139.296504][ T3547] bcm5974 5-1:0.0: could not read from device
[  139.317770][ T4258] usb 5-1: USB disconnect, device number 11
[  139.337545][ T3547] bcm5974 5-1:0.0: could not read from device
[  139.354830][ T3547] bcm5974 5-1:0.0: could not read from device
[  139.375631][ T1108] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  139.431402][ T5895] loop6: detected capacity change from 0 to 8192
[  139.475677][ T4436] pwc: recv_control_msg error -71 req 04 val 1400
[  139.493758][ T5895] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  139.505800][ T5895] REISERFS (device loop6): using ordered data mode
[  139.509068][ T4436] pwc: recv_control_msg error -71 req 02 val 2000
[  139.517173][ T5895] reiserfs: using flush barriers
[  139.525178][ T5895] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  139.542063][ T5895] REISERFS (device loop6): checking transaction log (loop6)
[  139.553155][ T4436] pwc: recv_control_msg error -71 req 02 val 2100
[  139.595622][ T4436] pwc: recv_control_msg error -71 req 04 val 1500
[  139.626402][ T4436] pwc: recv_control_msg error -71 req 02 val 2500
[  139.666718][ T4436] pwc: recv_control_msg error -71 req 02 val 2400
[  139.685950][ T1108] usb 2-1: Using ep0 maxpacket: 32
[  139.696744][ T5895] REISERFS (device loop6): Using tea hash to sort names
[  139.704072][ T5895] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  139.706249][ T4436] pwc: recv_control_msg error -71 req 02 val 2600
[  139.750038][ T4436] pwc: recv_control_msg error -71 req 02 val 2900
[  139.776459][ T4436] pwc: recv_control_msg error -71 req 02 val 2800
[  139.805959][ T4436] pwc: recv_control_msg error -71 req 04 val 1100
[  139.830093][ T4436] pwc: recv_control_msg error -71 req 04 val 1200
[  139.850991][ T4436] pwc: Registered as video103.
[  139.863828][ T4436] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  139.899416][ T4436] usb 1-1: USB disconnect, device number 7
[  139.919455][ T5898] loop4: detected capacity change from 0 to 1024
[  140.015966][ T1108] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf
[  140.037343][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.061871][ T1108] usb 2-1: Product: syz
[  140.082818][ T1108] usb 2-1: Manufacturer: syz
[  140.093741][ T1108] usb 2-1: SerialNumber: syz
[  140.101601][ T1108] usb 2-1: config 0 descriptor??
[  140.216758][ T5907] netlink: 104 bytes leftover after parsing attributes in process `syz.4.479'.
[  140.267580][ T5912] loop0: detected capacity change from 0 to 16
[  140.346692][ T5912] erofs: (device loop0): mounted with root inode @ nid 36.
[  140.395687][ T1108] snd-usb-audio: probe of 2-1:0.0 failed with error -71
[  140.412254][ T1108] usb 2-1: USB disconnect, device number 9
[  140.442554][ T5912] netlink: 'syz.0.481': attribute type 1 has an invalid length.
[  140.455932][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'.
[  140.571017][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'.
[  140.808963][ T5911] loop6: detected capacity change from 0 to 32768
[  140.830109][ T5911] XFS: ikeep mount option is deprecated.
[  140.849075][ T5911] XFS: attr2 mount option is deprecated.
[  140.923366][ T5911] XFS (loop6): Mounting V5 Filesystem
[  141.045164][ T5911] XFS (loop6): Ending clean mount
[  141.058556][ T5911] XFS (loop6): Quotacheck needed: Please wait.
[  141.173194][ T5911] XFS (loop6): Quotacheck: Done.
[  141.350195][ T5956] loop4: detected capacity change from 0 to 1024
[  141.457241][ T5956] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  141.522940][ T5944] loop1: detected capacity change from 0 to 32768
[  141.610516][ T4790] XFS (loop6): Unmounting Filesystem
[  141.638890][ T5944] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.491 (5944)
[  141.679201][ T5944] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  141.735669][ T5944] BTRFS info (device loop1): metadata ratio 4
[  141.786803][ T5944] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  141.832319][ T5944] BTRFS info (device loop1): force lzo compression, level 0
[  141.846048][ T5944] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  141.868208][ T5944] BTRFS info (device loop1): trying to use backup root at mount time
[  141.880283][ T5944] BTRFS info (device loop1): doing ref verification
[  141.887219][ T5956] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[  141.912771][ T5944] BTRFS info (device loop1): disabling tree log
[  141.922066][ T5944] BTRFS info (device loop1): using free space tree
[  141.945623][ T5944] BTRFS info (device loop1): has skinny extents
[  142.126397][  T154] BTRFS warning (device loop1): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  142.162355][ T5981] loop4: detected capacity change from 0 to 128
[  142.170448][ T5944] BTRFS warning (device loop1): couldn't read tree root
[  142.182852][  T154] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x78ca8373 level 0
[  142.254554][ T5944] BTRFS warning (device loop1): couldn't read tree root
[  142.263172][ T5944] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7
[  142.285920][ T5944] BTRFS warning (device loop1): couldn't read tree root
[  142.323062][ T5944] BTRFS info (device loop1): enabling ssd optimizations
[  142.334648][ T5944] BTRFS info (device loop1): clearing free space tree
[  142.342376][ T5944] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  142.367955][ T5944] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  142.426311][ T5944] BTRFS info (device loop1): creating free space tree
[  142.464589][ T5944] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  142.495981][ T5944] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  142.531752][ T5990] loop4: detected capacity change from 0 to 128
[  142.578399][ T5990] zonefs (loop4) ERROR: Not a zoned block device
[  142.639356][ T5990] IPv4: Oversized IP packet from 172.20.20.24
[  142.646862][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  142.653804][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  142.800892][ T4357] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4357)
[  143.201259][ T6011] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  143.506044][ T6019] loop0: detected capacity change from 0 to 1024
[  143.590104][ T6019] EXT4-fs (loop0): Ignoring removed orlov option
[  143.605488][ T6021] loop4: detected capacity change from 0 to 256
[  143.695263][ T6019] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,bsddf,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,discard,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback.
[  143.720142][   T23] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  143.781177][ T6007] loop1: detected capacity change from 0 to 40427
[  143.809269][ T6007] F2FS-fs (loop1): invalid crc value
[  143.857494][ T6007] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  144.011794][ T6007] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  144.021973][   T23] usb 7-1: Using ep0 maxpacket: 32
[  144.129715][ T4183] attempt to access beyond end of device
[  144.129715][ T4183] loop1: rw=2049, want=45104, limit=40427
[  144.185750][   T23] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.214189][   T23] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.345757][   T23] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  144.355133][   T23] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  144.363781][   T23] usb 7-1: Product: syz
[  144.368149][   T23] usb 7-1: Manufacturer: syz
[  144.441098][   T23] hub 7-1:4.0: USB hub found
[  144.725972][   T23] hub 7-1:4.0: 5 ports detected
[  144.745666][   T23] hub 7-1:4.0: insufficient power available to use all downstream ports
[  144.798416][ T6043] loop0: detected capacity change from 0 to 40427
[  144.869327][ T6043] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  144.877618][ T6043] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  144.892181][ T6043] F2FS-fs (loop0): invalid crc value
[  144.936231][   T23] hub 7-1:4.0: hub_hub_status failed (err = -71)
[  144.943573][   T23] hub 7-1:4.0: config failed, can't get hub status (err -71)
[  144.956884][ T6043] F2FS-fs (loop0): Found nat_bits in checkpoint
[  145.010084][ T6043] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  145.018558][ T6043] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  145.053814][ T6043] attempt to access beyond end of device
[  145.053814][ T6043] loop0: rw=2049, want=45104, limit=40427
[  145.119588][ T6045] loop1: detected capacity change from 0 to 32768
[  145.179952][   T23] usb 7-1: USB disconnect, device number 3
[  145.199374][ T6045] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  145.208265][ T6045] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  145.287018][ T6045] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  145.365231][ T6045] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  145.698455][ T6054] loop4: detected capacity change from 0 to 4096
[  145.741340][ T6059] loop6: detected capacity change from 0 to 2048
[  145.760690][ T6054] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  145.806309][ T6059] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  145.906479][ T6059] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none.
[  146.125259][ T6069] EXT4-fs error (device loop6): ext4_ind_map_blocks:604: inode #15: comm syz.6.523: Can't allocate blocks for non-extent mapped inodes with bigalloc
[  146.170442][ T6065] loop0: detected capacity change from 0 to 40427
[  146.236332][ T6069] EXT4-fs (loop6): Remounting filesystem read-only
[  146.288829][ T6065] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  146.296977][ T6065] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  146.314901][ T6065] F2FS-fs (loop0): invalid crc value
[  146.400236][ T6065] F2FS-fs (loop0): Found nat_bits in checkpoint
[  146.475096][ T6065] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  146.482528][ T6065] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  147.151160][ T6100] loop6: detected capacity change from 0 to 512
[  147.213377][ T6100] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.535: casefold flag without casefold feature
[  147.266940][ T6100] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.535: couldn't read orphan inode 15 (err -117)
[  147.347204][ T6100] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback.
[  147.374953][ T6091] loop1: detected capacity change from 0 to 32768
[  147.856784][ T6116] loop2: detected capacity change from 0 to 7
[  147.915918][ T6116] Dev loop2: unable to read RDB block 7
[  147.925673][ T6116]  loop2: unable to read partition table
[  147.931560][ T6116] loop2: partition table beyond EOD, truncated
[  147.975517][ T6116] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  148.124756][ T6124] netlink: 104 bytes leftover after parsing attributes in process `syz.6.544'.
[  148.217034][ T6129] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  148.462653][ T4251] libceph: connect (1)[c::]:6789 error -101
[  148.473549][ T4251] libceph: mon0 (1)[c::]:6789 connect error
[  148.484129][ T4251] libceph: connect (1)[c::]:6789 error -101
[  148.490463][ T4251] libceph: mon0 (1)[c::]:6789 connect error
[  148.495919][ T6144] loop0: detected capacity change from 0 to 1024
[  148.524758][ T6138] ceph: No mds server is up or the cluster is laggy
[  148.710262][ T6144] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  148.735177][ T6114] loop1: detected capacity change from 0 to 32768
[  148.842489][ T6155] 9pnet: p9_errstr2errno: server reported unknown error ªª
[  148.846820][ T6144] overlayfs: conflicting lowerdir path
[  148.885252][ T6114] XFS (loop1): Mounting V5 Filesystem
[  149.013077][ T6114] XFS (loop1): Ending clean mount
[  149.044803][ T6114] XFS (loop1): Quotacheck needed: Please wait.
[  149.206236][ T6114] XFS (loop1): Quotacheck: Done.
[  149.221130][ T6162] loop6: detected capacity change from 0 to 4096
[  149.269012][ T6170] xt_hashlimit: max too large, truncated to 1048576
[  149.284616][ T6114] XFS (loop1): User initiated shutdown received.
[  149.320118][ T6114] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:485).  Shutting down filesystem.
[  149.345766][ T6114] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  149.483915][ T4183] XFS (loop1): Unmounting Filesystem
[  149.529795][ T6176] loop4: detected capacity change from 0 to 256
[  149.696815][ T6176] FAT-fs (loop4): Directory bread(block 64) failed
[  149.706658][ T6176] FAT-fs (loop4): Directory bread(block 65) failed
[  149.718387][ T6176] FAT-fs (loop4): Directory bread(block 66) failed
[  149.755743][ T6176] FAT-fs (loop4): Directory bread(block 67) failed
[  149.762382][ T6176] FAT-fs (loop4): Directory bread(block 68) failed
[  149.771776][ T6176] FAT-fs (loop4): Directory bread(block 69) failed
[  149.778547][ T6176] FAT-fs (loop4): Directory bread(block 70) failed
[  149.785707][ T6176] FAT-fs (loop4): Directory bread(block 71) failed
[  149.820963][ T6176] FAT-fs (loop4): Directory bread(block 72) failed
[  149.853629][ T6176] FAT-fs (loop4): Directory bread(block 73) failed
[  149.915477][ T4258] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  150.031190][ T6183] loop1: detected capacity change from 0 to 2048
[  150.043336][ T6183] UDF-fs: bad mount option "umask=0G0A0000000000000000003" or missing value
[  150.155501][ T4258] usb 1-1: Using ep0 maxpacket: 8
[  150.199611][ T6190] loop1: detected capacity change from 0 to 64
[  150.224450][ T6191] netlink: 172 bytes leftover after parsing attributes in process `syz.4.563'.
[  150.420464][ T6193] loop1: detected capacity change from 0 to 2048
[  150.435704][ T4258] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  150.450332][ T4258] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.459082][ T4258] usb 1-1: Product: syz
[  150.470689][ T4258] usb 1-1: Manufacturer: syz
[  150.475352][ T4258] usb 1-1: SerialNumber: syz
[  150.491946][ T4258] usb 1-1: config 0 descriptor??
[  150.519468][ T6193] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  150.703891][ T6198] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  150.715800][ T6198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  150.723452][ T6198] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.733746][ T6198] device bridge_slave_0 left promiscuous mode
[  150.744502][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.767201][ T4258] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  150.799605][ T6198] device bridge_slave_1 left promiscuous mode
[  150.811385][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.823837][ T6198] bond0: (slave bond_slave_0): Releasing backup interface
[  150.844536][ T6198] bond0: (slave bond_slave_1): Releasing backup interface
[  150.900065][ T6198] team0: Port device team_slave_0 removed
[  150.916930][ T6198] team0: Port device team_slave_1 removed
[  150.923425][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  150.938281][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_0
[  150.947470][ T6198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  150.957697][ T6198] batman_adv: batadv0: Removing interface: batadv_slave_1
[  150.972283][ T6201] netlink: 'syz.6.567': attribute type 12 has an invalid length.
[  150.981476][ T6201] netlink: 'syz.6.567': attribute type 29 has an invalid length.
[  151.015572][ T6201] netlink: 148 bytes leftover after parsing attributes in process `syz.6.567'.
[  151.052388][ T6201] netlink: 'syz.6.567': attribute type 1 has an invalid length.
[  151.096171][ T4258] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  151.117387][ T6206] netlink: 32 bytes leftover after parsing attributes in process `syz.1.569'.
[  151.129951][ T4258] usb 1-1: USB disconnect, device number 8
[  151.290849][ T6213] loop1: detected capacity change from 0 to 1024
[  151.356153][ T6213] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  151.363352][ T6216] loop4: detected capacity change from 0 to 1024
[  151.373247][ T6213] EXT4-fs (loop1): orphan cleanup on readonly fs
[  151.382012][ T6213] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.572: Freeing blocks not in datazone - block = 0, count = 4096
[  151.408687][ T6213] EXT4-fs (loop1): 1 orphan inode deleted
[  151.432162][ T6216] EXT4-fs (loop4): Ignoring removed bh option
[  151.504192][ T6213] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  151.534503][ T6216] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none.
[  151.594236][ T6216] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  151.740307][ T6224] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none.
[  151.949531][ T5048] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.066766][ T5048] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.169406][ T5048] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.252637][ T6220] chnl_net:caif_netlink_parms(): no params data found
[  152.321227][ T5048] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.399233][ T6237] loop6: detected capacity change from 0 to 32768
[  152.526434][ T6237] XFS (loop6): Mounting V5 Filesystem
[  152.599251][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.617064][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.625590][ T6220] device bridge_slave_0 entered promiscuous mode
[  152.638244][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.680325][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.688727][ T6237] XFS (loop6): Ending clean mount
[  152.704085][ T6220] device bridge_slave_1 entered promiscuous mode
[  152.810461][ T6237] XFS (loop6): Unmounting Filesystem
[  152.928030][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.973865][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.159152][ T6220] team0: Port device team_slave_0 added
[  153.210685][ T6220] team0: Port device team_slave_1 added
[  153.308875][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.325534][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.410140][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  153.472554][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.481824][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.554161][ T6257] loop0: detected capacity change from 0 to 32768
[  153.571003][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.581854][   T13] Bluetooth: hci5: command 0x0409 tx timeout
[  153.692213][ T6220] device hsr_slave_0 entered promiscuous mode
[  153.705017][ T6257] XFS (loop0): Mounting V5 Filesystem
[  153.710069][ T6220] device hsr_slave_1 entered promiscuous mode
[  153.737799][ T6220] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  153.747474][ T6220] Cannot create hsr debugfs directory
[  153.828959][ T6257] XFS (loop0): Ending clean mount
[  153.837668][ T6257] XFS (loop0): Quotacheck needed: Please wait.
[  153.943459][ T6286] loop6: detected capacity change from 0 to 1024
[  153.988792][ T6257] XFS (loop0): Quotacheck: Done.
[  154.033742][ T6257] XFS (loop0): User initiated shutdown received.
[  154.051765][ T6257] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  154.071988][ T6257] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  154.083018][ T6286] EXT4-fs (loop6): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none.
[  154.113260][ T4184] XFS (loop0): Unmounting Filesystem
[  154.124492][ T6220] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  154.191298][ T6220] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  154.215657][ T4295] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  154.235808][ T6220] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  154.258107][ T6220] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  154.423939][ T6298] loop6: detected capacity change from 0 to 128
[  154.487296][ T6298] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  154.514024][ T6298] hpfs: filesystem error: improperly stopped
[  154.549284][ T6298] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  154.573576][ T6298] hpfs: You really don't want any checks? You are crazy...
[  154.591334][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.599396][ T6298] hpfs: hpfs_map_sector(): read error
[  154.613130][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.616524][ T6298] hpfs: code page support is disabled
[  154.627948][ T6298] hpfs: hpfs_map_4sectors(): unaligned read
[  154.634287][ T6298] hpfs: hpfs_map_4sectors(): unaligned read
[  154.639475][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.647688][ T6298] hpfs: filesystem error: unable to find root dir
[  154.675615][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.689762][ T6220] 8021q: adding VLAN 0 to HW filter on device team0
[  154.708995][ T4295] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.719766][ T4295] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  154.733172][ T4295] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  154.744555][ T4295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.780155][ T6300] loop0: detected capacity change from 0 to 256
[  154.793784][ T6300] exfat: Bad value for 'uid'
[  154.816990][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.836541][ T4295] usb 2-1: config 0 descriptor??
[  154.842325][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.860464][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.867652][ T5040] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.884796][ T5048] device hsr_slave_0 left promiscuous mode
[  154.891665][ T5048] device hsr_slave_1 left promiscuous mode
[  154.918083][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.929990][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.953665][ T5048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.972018][ T5048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.002460][ T5048] device bridge_slave_1 left promiscuous mode
[  155.010962][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.020220][ T5048] device bridge_slave_0 left promiscuous mode
[  155.029568][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.068562][ T5048] device veth1_macvtap left promiscuous mode
[  155.074752][ T5048] device veth0_macvtap left promiscuous mode
[  155.087977][ T5048] device veth1_vlan left promiscuous mode
[  155.094604][ T5048] device veth0_vlan left promiscuous mode
[  155.338212][ T4295] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  155.362110][ T4295] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  155.378064][ T5048] team0 (unregistering): Port device team_slave_1 removed
[  155.407943][ T5048] team0 (unregistering): Port device team_slave_0 removed
[  155.425888][ T5048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.443437][ T5048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.547137][ T5048] bond0 (unregistering): Released all slaves
[  155.603318][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.613033][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.624468][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.634145][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.641379][ T5040] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.650052][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.659779][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'.
[  155.659783][   T13] Bluetooth: hci5: command 0x041b tx timeout
[  155.659813][ T6304] netlink: 'syz.0.596': attribute type 14 has an invalid length.
[  155.689297][ T6304] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.698300][ T6304] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.707094][ T6304] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.715865][ T6304] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.729209][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.740774][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'.
[  155.749812][ T6304] netlink: 'syz.0.596': attribute type 14 has an invalid length.
[  155.773533][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.788787][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.806225][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.849082][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.877234][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.887051][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.896385][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.905080][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.916693][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  155.927803][ T6220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.244323][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.252332][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.279060][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.622603][ T6340] loop0: detected capacity change from 0 to 2048
[  156.671822][ T6340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.782864][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  156.804994][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  156.836621][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  156.853026][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  156.864375][ T6220] device veth0_vlan entered promiscuous mode
[  156.880307][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  156.894467][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  156.929894][ T6220] device veth1_vlan entered promiscuous mode
[  157.033261][ T6352] loop4: detected capacity change from 0 to 1024
[  157.047592][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  157.057238][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  157.071442][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  157.106645][ T5058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  157.197136][ T6220] device veth0_macvtap entered promiscuous mode
[  157.227080][ T6220] device veth1_macvtap entered promiscuous mode
[  157.291041][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.312754][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.326412][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.362160][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.391330][ T6361] loop1: detected capacity change from 0 to 128
[  157.409774][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  157.442211][ T6003] usb 2-1: USB disconnect, device number 10
[  157.451027][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.472908][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.500711][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  157.514949][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  157.549363][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  157.566133][ T6361] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  157.603795][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  157.685102][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.733771][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.757908][ T4258] Bluetooth: hci5: command 0x040f tx timeout
[  157.763224][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.782235][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.792682][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.803488][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.821562][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.823489][ T6348] 
[  157.831169][ T6348] ======================================================
[  157.838210][ T6348] WARNING: possible circular locking dependency detected
[  157.845263][ T6348] syzkaller #0 Not tainted
[  157.849701][ T6348] ------------------------------------------------------
[  157.856739][ T6348] syz.4.610/6348 is trying to acquire lock:
[  157.858354][ T6363] device syzkaller0 entered promiscuous mode
[  157.862648][ T6348] ffff88802509a0b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfsplus_find_init+0x150/0x1c0
[  157.878320][ T6348] 
[  157.878320][ T6348] but task is already holding lock:
[  157.885708][ T6348] ffff88803055a988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2a0/0xb40
[  157.896937][ T6348] 
[  157.896937][ T6348] which lock already depends on the new lock.
[  157.896937][ T6348] 
[  157.907603][ T6348] 
[  157.907603][ T6348] the existing dependency chain (in reverse order) is:
[  157.916647][ T6348] 
[  157.916647][ T6348] -> #1 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}:
[  157.925895][ T6348]        __mutex_lock_common+0x1eb/0x2390
[  157.931661][ T6348]        mutex_lock_nested+0x17/0x20
[  157.937001][ T6348]        hfsplus_file_extend+0x1b3/0x1950
[  157.942767][ T6348]        hfsplus_bmap_reserve+0x11e/0x4f0
[  157.948537][ T6348]        __hfsplus_ext_write_extent+0x28d/0x5b0
[  157.954819][ T6348]        __hfsplus_ext_cache_extent+0x89/0xe20
[  157.961012][ T6348]        hfsplus_file_truncate+0x467/0xb40
[  157.966854][ T6348]        hfsplus_setattr+0x1c0/0x280
[  157.972168][ T6348]        notify_change+0xbcd/0xee0
[  157.976014][ T4251] kernel write not supported for file /adsp1 (pid: 4251 comm: kworker/1:4)
[  157.977308][ T6348]        do_truncate+0x197/0x220
[  157.990847][ T6348]        vfs_truncate+0x262/0x2f0
[  157.995951][ T6348]        do_sys_truncate+0xdc/0x190
[  158.001185][ T6348]        do_syscall_64+0x4c/0xa0
[  158.006154][ T6348]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  158.012596][ T6348] 
[  158.012596][ T6348] -> #0 (&tree->tree_lock/1){+.+.}-{3:3}:
[  158.020626][ T6348]        __lock_acquire+0x2c33/0x7c60
[  158.026039][ T6348]        lock_acquire+0x197/0x3f0
[  158.031100][ T6348]        __mutex_lock_common+0x1eb/0x2390
[  158.036854][ T6348]        mutex_lock_nested+0x17/0x20
[  158.042171][ T6348]        hfsplus_find_init+0x150/0x1c0
[  158.047654][ T6348]        hfsplus_file_truncate+0x38c/0xb40
[  158.053499][ T6348]        hfsplus_file_release+0x2ff/0x3d0
[  158.059348][ T6348]        __fput+0x234/0x930
[  158.064068][ T6348]        task_work_run+0x125/0x1a0
[  158.069218][ T6348]        exit_to_user_mode_loop+0x10f/0x130
[  158.075300][ T6348]        exit_to_user_mode_prepare+0xee/0x180
[  158.081402][ T6348]        syscall_exit_to_user_mode+0x16/0x40
[  158.087416][ T6348]        do_syscall_64+0x58/0xa0
[  158.092391][ T6348]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  158.098935][ T6348] 
[  158.098935][ T6348] other info that might help us debug this:
[  158.098935][ T6348] 
[  158.109188][ T6348]  Possible unsafe locking scenario:
[  158.109188][ T6348] 
[  158.116838][ T6348]        CPU0                    CPU1
[  158.122282][ T6348]        ----                    ----
[  158.127675][ T6348]   lock(&HFSPLUS_I(inode)->extents_lock);
[  158.133505][ T6348]                                lock(&tree->tree_lock/1);
[  158.140733][ T6348]                                lock(&HFSPLUS_I(inode)->extents_lock);
[  158.149185][ T6348]   lock(&tree->tree_lock/1);
[  158.153895][ T6348] 
[  158.153895][ T6348]  *** DEADLOCK ***
[  158.153895][ T6348] 
[  158.162191][ T6348] 2 locks held by syz.4.610/6348:
[  158.167326][ T6348]  #0: ffff88803055ab80 (&sb->s_type->i_mutex_key#32){++++}-{3:3}, at: hfsplus_file_release+0xde/0x3d0
[  158.178440][ T6348]  #1: ffff88803055a988 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_truncate+0x2a0/0xb40
[  158.190847][ T6348] 
[  158.190847][ T6348] stack backtrace:
[  158.196750][ T6348] CPU: 0 PID: 6348 Comm: syz.4.610 Not tainted syzkaller #0
[  158.204145][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  158.214323][ T6348] Call Trace:
[  158.217739][ T6348]  <TASK>
[  158.220684][ T6348]  dump_stack_lvl+0x168/0x230
[  158.225390][ T6348]  ? load_image+0x3b0/0x3b0
[  158.229924][ T6348]  ? show_regs_print_info+0x20/0x20
[  158.235248][ T6348]  ? print_circular_bug+0x12b/0x1a0
[  158.240473][ T6348]  check_noncircular+0x274/0x310
[  158.245440][ T6348]  ? add_chain_block+0x940/0x940
[  158.250399][ T6348]  ? lockdep_lock+0xdc/0x1e0
[  158.255016][ T6348]  ? mark_lock+0x94/0x320
[  158.259460][ T6348]  __lock_acquire+0x2c33/0x7c60
[  158.264341][ T6348]  ? mark_lock+0x94/0x320
[  158.268694][ T6348]  ? verify_lock_unused+0x140/0x140
[  158.273918][ T6348]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  158.279945][ T6348]  ? lock_chain_count+0x20/0x20
[  158.284914][ T6348]  ? __rwlock_init+0x140/0x140
[  158.289698][ T6348]  ? _raw_spin_lock_irqsave+0x7f/0xf0
[  158.295087][ T6348]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  158.301001][ T6348]  ? lockdep_hardirqs_on+0x94/0x140
[  158.306291][ T6348]  lock_acquire+0x197/0x3f0
[  158.310822][ T6348]  ? hfsplus_find_init+0x150/0x1c0
[  158.316051][ T6348]  ? __might_sleep+0xf0/0xf0
[  158.320768][ T6348]  ? read_lock_is_recursive+0x10/0x10
[  158.326262][ T6348]  ? __kasan_kmalloc+0xcc/0xf0
[  158.331053][ T6348]  ? __kasan_kmalloc+0xb5/0xf0
[  158.335935][ T6348]  ? hfsplus_find_init+0x85/0x1c0
[  158.340982][ T6348]  ? hfsplus_file_release+0x2ff/0x3d0
[  158.346380][ T6348]  ? __fput+0x234/0x930
[  158.350557][ T6348]  ? task_work_run+0x125/0x1a0
[  158.355453][ T6348]  ? exit_to_user_mode_prepare+0xee/0x180
[  158.361198][ T6348]  ? syscall_exit_to_user_mode+0x16/0x40
[  158.366863][ T6348]  ? do_syscall_64+0x58/0xa0
[  158.371481][ T6348]  ? hfsplus_find_init+0x150/0x1c0
[  158.376618][ T6348]  __mutex_lock_common+0x1eb/0x2390
[  158.381847][ T6348]  ? hfsplus_find_init+0x150/0x1c0
[  158.387008][ T6348]  ? mutex_lock_io_nested+0x60/0x60
[  158.392257][ T6348]  mutex_lock_nested+0x17/0x20
[  158.397050][ T6348]  hfsplus_find_init+0x150/0x1c0
[  158.402211][ T6348]  hfsplus_file_truncate+0x38c/0xb40
[  158.407538][ T6348]  ? hfsplus_add_extent+0x890/0x890
[  158.412777][ T6348]  ? clear_nonspinnable+0x60/0x60
[  158.417830][ T6348]  ? do_raw_read_unlock+0x39/0x70
[  158.422888][ T6348]  hfsplus_file_release+0x2ff/0x3d0
[  158.428119][ T6348]  ? hfsplus_file_open+0x150/0x150
[  158.433268][ T6348]  __fput+0x234/0x930
[  158.437294][ T6348]  task_work_run+0x125/0x1a0
[  158.441907][ T6348]  exit_to_user_mode_loop+0x10f/0x130
[  158.447314][ T6348]  exit_to_user_mode_prepare+0xee/0x180
[  158.452896][ T6348]  syscall_exit_to_user_mode+0x16/0x40
[  158.458469][ T6348]  do_syscall_64+0x58/0xa0
[  158.462917][ T6348]  ? clear_bhb_loop+0x30/0x80
[  158.467618][ T6348]  ? clear_bhb_loop+0x30/0x80
[  158.472323][ T6348]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  158.478337][ T6348] RIP: 0033:0x7f676c0e3fc9
[  158.482872][ T6348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.502595][ T6348] RSP: 002b:00007ffdde5c8898 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  158.511143][ T6348] RAX: 0000000000000000 RBX: 00007f676c33cda0 RCX: 00007f676c0e3fc9
[  158.519151][ T6348] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  158.527154][ T6348] RBP: 00007f676c33cda0 R08: 0000000000000094 R09: 00000007de5c8b8f
[  158.535168][ T6348] R10: 00000000003ffd48 R11: 0000000000000246 R12: 000000000002683c
[  158.543273][ T6348] R13: 00007f676c33b090 R14: ffffffffffffffff R15: 00007ffdde5c89b0
[  158.551291][ T6348]  </TASK>
[  158.560204][ T6348] attempt to access beyond end of device
[  158.560204][ T6348] loop4: rw=0, want=201326594, limit=1024
[  158.571706][ T6348] Buffer I/O error on dev loop4, logical block 100663296, async page read
[  158.580711][ T6348] hfsplus: unable to mark blocks free: error -5
[  158.587019][ T6348] hfsplus: can't free extent
[  158.672100][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  158.686172][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  158.718642][ T6220] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.727949][ T6220] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.782624][ T6220] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.795486][ T6220] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.863378][ T6220] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  158.907303][ T5054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.912404][ T6220] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht'
[  158.921230][ T5054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.940781][ T5042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.942978][ T5054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  158.957196][ T5042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.976257][ T5042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  159.816166][ T4258] Bluetooth: hci5: command 0x0419 tx timeout