last executing test programs:

1m1.312704562s ago: executing program 3 (id=72):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace$getsig(0x4202, r0, 0x2, 0x0)

1m0.274868576s ago: executing program 3 (id=81):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x40}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0)

57.964049436s ago: executing program 3 (id=96):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "880365cf0e06910cf91c17370935f8ff"}]}, 0x34}, 0x1, 0x0, 0x0, 0xc1}, 0x44)

57.813678334s ago: executing program 3 (id=98):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x402280a, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc3ff, 0x1)

57.168109037s ago: executing program 3 (id=101):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4)

56.391008278s ago: executing program 3 (id=107):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00')
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4)
sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000007a00)={0x14, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x4, 0xa9}]}, 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x0)

55.956731091s ago: executing program 32 (id=107):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00')
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000040)=0x15, 0x4)
sendmsg$netlink(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000007a00)={0x14, 0x26, 0x723, 0x0, 0x0, "", [@nested={0x4, 0xa9}]}, 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x0)

5.151518122s ago: executing program 2 (id=409):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000000))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48981, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=0x0, @ANYRES64=r0], 0x0)

4.369439003s ago: executing program 1 (id=414):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="200d1c"], 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x34, &(0x7f0000000540)={0x20, 0x30, 0xf, "00abb7277f00070700000080d8897b"}, 0x0, 0x0, 0x0, 0x0, 0x0})

3.660958289s ago: executing program 4 (id=417):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050)

3.594110103s ago: executing program 2 (id=419):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000003040)={0x8, {"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", 0x1000}}, 0xd31)
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200041, &(0x7f0000000a40)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c008a9eae08db9f98c870d95995a40a456c2fa862551bfec12de4c74560fc"], 0x1, 0x9e26, &(0x7f0000013e80)="$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")
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', 0x0, 0x400008, 0x0)

3.115167428s ago: executing program 2 (id=422):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
setuid(0xee01)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x428fb191040cdbe)

2.959262466s ago: executing program 2 (id=423):
syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5515, &(0x7f0000001300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x8da6)
read(r0, &(0x7f0000002400)=""/4096, 0x1000)

2.856489341s ago: executing program 4 (id=424):
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74"], 0x44}}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x32b, @tick=0x14, 0xff, {}, 0x0, 0x0, 0xfb})

2.68442528s ago: executing program 0 (id=425):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000003c0)=""/92}, {&(0x7f0000002000)=""/4096}, {&(0x7f0000000300)=""/9}, {&(0x7f0000000840)=""/99}, {&(0x7f00000008c0)=""/201}, {&(0x7f0000000d00)=""/194}, {&(0x7f0000000c00)=""/166}, {&(0x7f0000000600)=""/23}, {&(0x7f0000001000)=""/180}, {&(0x7f00000010c0)=""/201}], 0x0, &(0x7f0000001400)=""/249}, 0xffffffff}], 0x400000000000100, 0x60010000, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

2.571629936s ago: executing program 4 (id=426):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
unlink(&(0x7f0000000000)='./file0/file0\x00')

2.357649997s ago: executing program 0 (id=427):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)

2.272025472s ago: executing program 4 (id=428):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})

2.216711784s ago: executing program 1 (id=429):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x28, 0x19, 0x7, 0xd1, 0x30, 0x10, 0xaa, 0x6, 0xfd, 0x6, 0x6, 0x40, 0x0, 0x2}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={r1, 0x7}, 0x8)

1.937346849s ago: executing program 1 (id=430):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/21, 0x15}, 0x8000}], 0x1, 0x8, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

1.890678292s ago: executing program 4 (id=431):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="89", 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1.843650304s ago: executing program 2 (id=432):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001540)='./file1\x00', 0x200138b0, &(0x7f0000000400)=ANY=[], 0x0, 0x150f, &(0x7f00000069c0)="$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")
fdatasync(r0)

1.713934711s ago: executing program 1 (id=433):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)='z', 0x1, 0x4000041, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140), &(0x7f00000000c0)=0x8)

1.508534142s ago: executing program 1 (id=434):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e5c, &(0x7f0000005d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148)

1.128403341s ago: executing program 0 (id=435):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0)

917.979002ms ago: executing program 4 (id=436):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
write$char_usb(r1, 0x0, 0x0)

822.632967ms ago: executing program 0 (id=437):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x7d, 0x2, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)

376.11932ms ago: executing program 2 (id=438):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x204080, &(0x7f0000000040), 0x3, 0x573, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
fchown(r0, r2, r3)

260.555006ms ago: executing program 0 (id=439):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014)

78.728156ms ago: executing program 0 (id=440):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040)={r2}, &(0x7f00000000c0)=0x8)

0s ago: executing program 1 (id=441):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000000000000003000000ff"], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts.
[   77.093212][ T5752] cgroup: Unknown subsys name 'net'
[   77.232692][ T5752] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   78.632120][ T5752] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   80.060910][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   80.072036][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.083224][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   80.093019][ T5769] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   80.109058][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.115188][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   80.125403][ T5769] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   80.134272][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   80.135034][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.152111][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.161952][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   80.162507][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   80.176697][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.185063][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   80.193711][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.193794][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   80.194482][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   80.217545][ T5081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.225240][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   80.235218][ T5081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.266729][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.302210][ T5081] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.318354][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   80.326056][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   80.729306][ T5763] chnl_net:caif_netlink_parms(): no params data found
[   80.766734][ T5765] chnl_net:caif_netlink_parms(): no params data found
[   80.782053][ T5764] chnl_net:caif_netlink_parms(): no params data found
[   80.924090][ T5766] chnl_net:caif_netlink_parms(): no params data found
[   80.942436][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.950647][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.959100][ T5763] bridge_slave_0: entered allmulticast mode
[   80.966363][ T5763] bridge_slave_0: entered promiscuous mode
[   80.976896][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.984310][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.991738][ T5763] bridge_slave_1: entered allmulticast mode
[   80.998775][ T5763] bridge_slave_1: entered promiscuous mode
[   81.088203][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.095930][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.103298][ T5765] bridge_slave_0: entered allmulticast mode
[   81.110518][ T5765] bridge_slave_0: entered promiscuous mode
[   81.125427][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.137566][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.147011][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.154173][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.162831][ T5764] bridge_slave_0: entered allmulticast mode
[   81.169819][ T5764] bridge_slave_0: entered promiscuous mode
[   81.177213][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.184422][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.193009][ T5765] bridge_slave_1: entered allmulticast mode
[   81.200058][ T5765] bridge_slave_1: entered promiscuous mode
[   81.230790][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.238268][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.246866][ T5764] bridge_slave_1: entered allmulticast mode
[   81.253725][ T5764] bridge_slave_1: entered promiscuous mode
[   81.289738][ T5763] team0: Port device team_slave_0 added
[   81.299132][ T5763] team0: Port device team_slave_1 added
[   81.368720][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.381425][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.394027][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.404942][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.412367][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.420283][ T5766] bridge_slave_0: entered allmulticast mode
[   81.427361][ T5766] bridge_slave_0: entered promiscuous mode
[   81.438479][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.445729][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.472186][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.493749][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.504384][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.512653][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.520190][ T5766] bridge_slave_1: entered allmulticast mode
[   81.527489][ T5766] bridge_slave_1: entered promiscuous mode
[   81.535083][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.542240][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.569039][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.627246][ T5764] team0: Port device team_slave_0 added
[   81.639514][ T5764] team0: Port device team_slave_1 added
[   81.647757][ T5765] team0: Port device team_slave_0 added
[   81.680731][ T5765] team0: Port device team_slave_1 added
[   81.700882][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.713082][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.768498][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.776125][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.804388][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.818679][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.826159][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.852613][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.873303][ T5763] hsr_slave_0: entered promiscuous mode
[   81.881862][ T5763] hsr_slave_1: entered promiscuous mode
[   81.890258][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.897894][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.929200][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.958317][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.966558][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.993848][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.014327][ T5766] team0: Port device team_slave_0 added
[   82.022821][ T5766] team0: Port device team_slave_1 added
[   82.111854][ T5764] hsr_slave_0: entered promiscuous mode
[   82.119367][ T5764] hsr_slave_1: entered promiscuous mode
[   82.126414][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.134317][ T5764] Cannot create hsr debugfs directory
[   82.156053][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.165106][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.196050][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   82.228458][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1
[   82.237435][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   82.265322][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.280579][ T5770] Bluetooth: hci3: command tx timeout
[   82.302778][ T5765] hsr_slave_0: entered promiscuous mode
[   82.309348][ T5765] hsr_slave_1: entered promiscuous mode
[   82.316284][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.324915][ T5765] Cannot create hsr debugfs directory
[   82.354843][ T5770] Bluetooth: hci1: command tx timeout
[   82.360786][ T5770] Bluetooth: hci2: command tx timeout
[   82.387195][ T5766] hsr_slave_0: entered promiscuous mode
[   82.394085][ T5766] hsr_slave_1: entered promiscuous mode
[   82.400864][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   82.409496][ T5766] Cannot create hsr debugfs directory
[   82.434837][ T5770] Bluetooth: hci0: command tx timeout
[   82.751374][ T5763] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   82.765522][ T5763] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   82.775630][ T5763] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   82.789555][ T5763] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.856330][ T5764] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.869370][ T5764] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.881656][ T5764] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.892763][ T5764] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.006900][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.038906][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.051185][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.061923][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.122445][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.133278][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.146222][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.165619][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.184914][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.208043][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.241845][ T5763] 8021q: adding VLAN 0 to HW filter on device team0
[   83.269450][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.277755][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.307354][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.314788][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.357952][ T5764] 8021q: adding VLAN 0 to HW filter on device team0
[   83.391626][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.399022][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.460555][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.468070][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.514106][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.603642][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.626311][ T5765] 8021q: adding VLAN 0 to HW filter on device team0
[   83.669081][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.676635][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.695312][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.702450][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.731687][ T5766] 8021q: adding VLAN 0 to HW filter on device team0
[   83.770884][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.778659][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.860191][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.867514][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.911059][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.978730][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.139007][ T5763] veth0_vlan: entered promiscuous mode
[   84.170310][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.181518][ T5763] veth1_vlan: entered promiscuous mode
[   84.269930][ T5763] veth0_macvtap: entered promiscuous mode
[   84.299882][ T5763] veth1_macvtap: entered promiscuous mode
[   84.317488][ T5764] veth0_vlan: entered promiscuous mode
[   84.356476][ T5770] Bluetooth: hci3: command tx timeout
[   84.373062][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.387194][ T5764] veth1_vlan: entered promiscuous mode
[   84.402165][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.431222][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.436176][ T5770] Bluetooth: hci2: command tx timeout
[   84.444607][ T5770] Bluetooth: hci1: command tx timeout
[   84.480415][ T5764] veth0_macvtap: entered promiscuous mode
[   84.513273][ T5763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.516336][ T5770] Bluetooth: hci0: command tx timeout
[   84.523664][ T5763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.538051][ T5763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.549906][ T5763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.567823][ T5764] veth1_macvtap: entered promiscuous mode
[   84.660957][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.674357][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.687418][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.699406][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.714062][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.726392][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.738080][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.770230][ T5764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.780573][ T5764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.790466][ T5764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.799741][ T5764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.810462][ T5765] veth0_vlan: entered promiscuous mode
[   84.851769][ T5765] veth1_vlan: entered promiscuous mode
[   84.871287][ T4710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.892803][ T4710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.978343][ T5765] veth0_macvtap: entered promiscuous mode
[   85.002035][ T5765] veth1_macvtap: entered promiscuous mode
[   85.009975][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.020059][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.068601][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.080963][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.091533][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.106705][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.136222][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.152280][ T5766] veth0_vlan: entered promiscuous mode
[   85.172997][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.188583][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.202209][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.213722][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.229255][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.246823][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.257903][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.272049][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.275601][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.291150][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.303892][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.342500][ T5766] veth1_vlan: entered promiscuous mode
[   85.428885][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.457250][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.507791][ T5766] veth0_macvtap: entered promiscuous mode
[   85.521544][ T5766] veth1_macvtap: entered promiscuous mode
[   85.543788][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.583051][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.596204][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.610464][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.621070][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.632569][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.644785][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.657253][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.670247][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.768063][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.772710][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.801503][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.823919][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'.
[   85.825642][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.843819][ T5840] syz.3.4[5840]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   85.850931][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'.
[   85.864732][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.890339][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.917534][ T5840] loop3: detected capacity change from 0 to 2048
[   85.935366][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.960822][ T5840] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[   85.980897][ T5840] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.984682][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.013367][ T5842] loop2: detected capacity change from 0 to 16
[   86.050555][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.076636][ T5842] erofs: (device loop2): mounted with root inode @ nid 36.
[   86.148192][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.195012][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.210331][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.222621][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.436058][ T5770] Bluetooth: hci3: command tx timeout
[   86.516741][ T5770] Bluetooth: hci1: command tx timeout
[   86.516774][ T5772] Bluetooth: hci2: command tx timeout
[   86.595292][ T5772] Bluetooth: hci0: command tx timeout
[   86.641866][ T5852] loop3: detected capacity change from 0 to 128
[   86.677036][ T4710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.720787][ T4710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.736055][ T5852] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.790694][ T5852] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   86.866909][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.894904][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.914313][ T5858] loop2: detected capacity change from 0 to 1024
[   86.971189][ T5858] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   87.019530][ T5858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.062738][ T5764] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   87.192474][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.255002][ T5864] loop1: detected capacity change from 0 to 512
[   87.328842][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'.
[   87.354803][ T5864] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2: iget: bad i_size value: 38620345925642
[   87.436423][ T5864] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2: couldn't read orphan inode 15 (err -117)
[   87.457972][ T5864] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.617193][ T5864] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.2: bg 0: block 5: invalid block bitmap
[   87.655381][ T5864] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28
[   87.671530][ T5879] loop3: detected capacity change from 0 to 64
[   87.701609][ T5864] EXT4-fs (loop1): This should not happen!! Data will be lost
[   87.701609][ T5864] 
[   87.713579][ T5864] EXT4-fs (loop1): Total free blocks count 0
[   87.747056][ T5864] EXT4-fs (loop1): Free/Dirty block details
[   87.792758][ T5864] EXT4-fs (loop1): free_blocks=0
[   87.851896][ T5864] EXT4-fs (loop1): dirty_blocks=5
[   87.882873][ T5864] EXT4-fs (loop1): Block reservation details
[   87.906123][ T5864] EXT4-fs (loop1): i_reserved_data_blocks=5
[   88.011546][ T5882] loop0: detected capacity change from 0 to 256
[   88.149321][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[   88.225836][ T5884] syz.3.23 (5884) used greatest stack depth: 20240 bytes left
[   88.283081][ T5882] syz.0.22: attempt to access beyond end of device
[   88.283081][ T5882] loop0: rw=2049, sector=256, nr_sectors = 4 limit=256
[   88.515724][ T5772] Bluetooth: hci3: command tx timeout
[   88.594775][ T5772] Bluetooth: hci1: command tx timeout
[   88.605786][ T5772] Bluetooth: hci2: command tx timeout
[   88.685895][ T5772] Bluetooth: hci0: command tx timeout
[   88.716959][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   88.804213][    T9] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   88.982561][ T5899] block nbd3: shutting down sockets
[   89.307899][ T5910] Bluetooth: MGMT ver 1.22
[   89.425831][  T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   89.629605][  T787] usb 4-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config
[   89.652152][  T787] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[   89.679178][  T787] usb 4-1: New USB device found, idVendor=249c, idProduct=9001, bcdDevice= 0.40
[   89.699483][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.720571][  T787] usb 4-1: Product: syz
[   89.731467][  T787] usb 4-1: Manufacturer: syz
[   89.743350][  T787] usb 4-1: SerialNumber: syz
[   90.189394][  T787] usb 4-1: Can't get UAC3 power state for id 10
[   90.214292][ T5930] 9pnet: p9_errstr2errno: server reported unknown error L҉
[   90.230565][  T787] usb 4-1: 0:3 : does not exist
[   90.237770][  T787] usb 4-1: 0:4 : does not exist
[   90.480267][  T787] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[   90.502077][  T787] usb 4-1: can't set first interface for hiFace device.
[   90.514582][  T787] snd-usb-hiface: probe of 4-1:1.0 failed with error -5
[   90.533986][ T5943] warning: `syz.0.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   90.557229][  T787] usb 4-1: USB disconnect, device number 2
[   90.663552][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   90.920477][ T5951] Invalid ELF header magic: != ELF
[   91.088599][ T5956] loop1: detected capacity change from 0 to 64
[   91.914903][ T5958] loop0: detected capacity change from 0 to 32768
[   92.096679][ T5958] overlayfs: upper fs needs to support d_type.
[   92.103478][ T5958] overlayfs: upper fs does not support tmpfile.
[   92.134258][ T5958] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   92.159719][ T5958] ERROR: (device loop0): dbAlloc: the hint is outside the map
[   92.159719][ T5958] 
[   92.186885][ T5958] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[   92.214900][ T5958] ERROR: (device loop0): dbAlloc: the hint is outside the map
[   92.214900][ T5958] 
[   92.236397][ T5958] overlayfs: failed to verify origin (/, ino=2, err=-5)
[   92.243462][ T5958] overlayfs: failed to verify upper root origin
[   92.309169][  T143] read_mapping_page failed!
[   92.314155][  T143] ERROR: (device loop0): txCommit: 
[   92.314155][  T143] 
[   92.334761][  T143] jfs_write_inode: jfs_commit_inode failed!
[   92.393589][ T5973] loop1: detected capacity change from 0 to 32768
[   92.414579][ T5973] =======================================================
[   92.414579][ T5973] WARNING: The mand mount option has been deprecated and
[   92.414579][ T5973]          and is ignored by this kernel. Remove the mand
[   92.414579][ T5973]          option from the mount to silence this warning.
[   92.414579][ T5973] =======================================================
[   92.514042][ T5973] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   92.543590][ T5984] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.644832][ T5973] XFS (loop1): Ending clean mount
[   92.658678][ T5973] XFS (loop1): Quotacheck needed: Please wait.
[   92.709654][ T5973] XFS (loop1): Quotacheck: Done.
[   92.780655][ T5991] loop3: detected capacity change from 0 to 512
[   92.840771][  T967] cfg80211: failed to load regulatory.db
[   92.850344][ T5991] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   92.944436][ T5991] EXT4-fs (loop3): 1 truncate cleaned up
[   92.953705][ T5991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.014953][ T5766] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   93.199804][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.201750][ T5999] netlink: 20 bytes leftover after parsing attributes in process `syz.2.67'.
[   93.469878][ T5758] block nbd64: NBD_DISCONNECT
[   93.559573][ T6002] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[   93.834174][ T6012] loop2: detected capacity change from 0 to 512
[   94.016024][   T28] audit: type=1326 audit(1776861833.638:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6017 comm="syz.3.72" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f690699c819 code=0x0
[   94.151451][ T6026] sctp: [Deprecated]: syz.2.74 (pid 6026) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.151451][ T6026] Use struct sctp_sack_info instead
[   94.174776][  T967] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   94.365116][ T6032] syz.1.78 uses obsolete (PF_INET,SOCK_PACKET)
[   94.375174][  T967] usb 1-1: Using ep0 maxpacket: 32
[   94.389556][  T967] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[   94.400489][  T967] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   94.409581][  T967] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[   94.420461][  T967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   94.448191][  T967] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   94.472201][  T967] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   94.489654][  T967] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   94.499250][  T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.512592][  T967] usb 1-1: config 0 descriptor??
[   94.642657][ T6030] loop2: detected capacity change from 0 to 32768
[   94.669836][ T6030] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.77 (6030)
[   94.729427][ T6030] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   94.795810][ T6030] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   94.803906][  T967] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   94.833170][ T6030] BTRFS info (device loop2): enabling disk space caching
[   94.865155][ T6030] BTRFS info (device loop2): force clearing of disk cache
[   94.887550][ T6030] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   94.911323][ T6030] BTRFS info (device loop2): use zstd compression, level 3
[   94.939138][ T6030] BTRFS info (device loop2): disk space caching is enabled
[   95.070798][ T5807] usb 1-1: USB disconnect, device number 2
[   95.084346][ T6030] BTRFS info (device loop2): enabling ssd optimizations
[   95.099350][ T5807] usblp0: removed
[   95.106141][ T6030] BTRFS info (device loop2): auto enabling async discard
[   95.126848][ T6030] BTRFS info (device loop2): rebuilding free space tree
[   95.196654][  T967] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   95.244492][ T6030] BTRFS info (device loop2): disabling free space tree
[   95.270024][ T6030] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   95.292742][ T6030] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   95.416880][  T967] usb 4-1: Using ep0 maxpacket: 8
[   95.456193][  T967] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   95.481802][  T967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   95.502243][  T967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   95.525868][  T967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   95.538760][  T967] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   95.552840][  T967] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   95.562822][  T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.676025][ T6058] loop1: detected capacity change from 0 to 32768
[   95.800447][   T28] audit: type=1800 audit(1776861835.418:3): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.83" name="file1" dev="loop1" ino=7 res=0 errno=0
[   95.846439][  T967] usb 4-1: usb_control_msg returned -32
[   95.867265][  T967] usbtmc 4-1:16.0: can't read capabilities
[   96.003867][ T5763] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   96.353717][ T6064] usbtmc 4-1:16.0: control status returned 0
[   96.488083][ T6070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.89'.
[   96.577802][ T5828] usb 4-1: USB disconnect, device number 3
[   97.138224][ T6086] loop0: detected capacity change from 0 to 4096
[   97.210349][ T6086] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[   97.240656][ T6086] ntfs3: loop0: It is recommened to use chkdsk.
[   97.389398][ T6093] loop3: detected capacity change from 0 to 1024
[   97.399136][ T6093] EXT4-fs: Ignoring removed bh option
[   97.456773][ T6093] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[   97.511796][ T6093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.567917][ T6079] loop2: detected capacity change from 0 to 40427
[   97.633970][ T6079] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   97.664392][ T6079] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   97.703983][ T6079] F2FS-fs (loop2): invalid crc value
[   97.718571][ T6098] vcan0: tx drop: invalid da for name 0x0000000000000002
[   97.809010][ T6093] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 7: comm syz.3.98: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[   97.860366][ T6093] EXT4-fs (loop3): Remounting filesystem read-only
[   97.953860][ T6079] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   97.968322][ T6079] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   98.063142][ T6106] loop0: detected capacity change from 0 to 256
[   98.069805][   T28] audit: type=1800 audit(1776861837.678:4): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.92" name="file1" dev="loop2" ino=10 res=0 errno=0
[   98.140926][   T42] kworker/u4:2: attempt to access beyond end of device
[   98.140926][   T42] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   98.162220][   T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   98.210724][ T6079] VFS:Filesystem freeze failed
[   98.514438][ T6113] loop0: detected capacity change from 0 to 64
[   98.582485][ T6022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.630072][ T6113] hfs: request for non-existent node 131072 in B*Tree
[   98.644051][ T6113] hfs: request for non-existent node 131072 in B*Tree
[   98.758551][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.913958][ T6116] loop2: detected capacity change from 0 to 64
[   98.964369][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.092484][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.263026][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.361370][ T6120] loop0: detected capacity change from 0 to 4096
[   99.385873][ T6120] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[   99.536283][ T6120] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   99.580780][ T6120] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[   99.788116][   T28] audit: type=1800 audit(1776861839.398:5): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.109" name="file1" dev="loop0" ino=30 res=0 errno=0
[   99.925862][ T6129] loop1: detected capacity change from 0 to 128
[  100.055196][ T6129] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  100.073691][ T5770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  100.092910][ T5770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  100.105405][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  100.116700][ T5770] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  100.131960][ T5770] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  100.139825][ T5770] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  100.151424][ T6129] hpfs: filesystem error: improperly stopped
[  100.186088][ T6129] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  100.240883][ T6129] hpfs: You really don't want any checks? You are crazy...
[  100.295738][ T6129] hpfs: hpfs_map_sector(): read error
[  100.301313][ T6129] hpfs: code page support is disabled
[  100.340545][ T6129] hpfs: hpfs_map_4sectors(): unaligned read
[  100.368381][ T6129] hpfs: hpfs_map_4sectors(): unaligned read
[  100.374362][ T6129] hpfs: filesystem error: unable to find root dir
[  100.782483][ T6152] loop2: detected capacity change from 0 to 512
[  100.813934][ T6152] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.118: inode has both inline data and extents flags
[  100.902514][ T6152] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.118: couldn't read orphan inode 15 (err -117)
[  100.992334][ T6152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.153659][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.461713][ T6131] chnl_net:caif_netlink_parms(): no params data found
[  101.625350][ T5828] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  101.634835][ T5807] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  101.739837][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.756001][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.763568][ T6131] bridge_slave_0: entered allmulticast mode
[  101.771465][ T6131] bridge_slave_0: entered promiscuous mode
[  101.796709][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.803992][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.821580][ T6131] bridge_slave_1: entered allmulticast mode
[  101.827724][ T5807] usb 1-1: Using ep0 maxpacket: 32
[  101.835713][ T5807] usb 1-1: config 139 has an invalid interface number: 49 but max is 0
[  101.844402][ T5807] usb 1-1: config 139 has no interface number 0
[  101.851526][ T5807] usb 1-1: config 139 interface 49 has no altsetting 0
[  101.855019][ T5828] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  101.861318][ T6131] bridge_slave_1: entered promiscuous mode
[  101.877775][ T5807] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75
[  101.898275][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.907117][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.929544][ T5807] usb 1-1: Product: syz
[  101.933785][ T5807] usb 1-1: Manufacturer: syz
[  101.938726][ T5828] usb 3-1: config 0 descriptor??
[  101.950878][ T5807] usb 1-1: SerialNumber: syz
[  101.969760][ T5828] cp210x 3-1:0.0: cp210x converter detected
[  102.053332][ T6131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.103152][ T6131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.205156][ T5772] Bluetooth: hci3: command tx timeout
[  102.221716][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'.
[  102.241034][ T6195] Zero length message leads to an empty skb
[  102.297407][   T11] hsr_slave_0: left promiscuous mode
[  102.333846][   T11] hsr_slave_1: left promiscuous mode
[  102.348599][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.374824][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.382290][ T5828] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  102.396423][ T5807] radio-usb-si4713 1-1:139.49: Si4713 development board discovered: (10C4:8244)
[  102.407656][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.415946][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.426672][   T11] bridge_slave_1: left allmulticast mode
[  102.432598][   T11] bridge_slave_1: left promiscuous mode
[  102.441807][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.469470][   T11] bridge_slave_0: left allmulticast mode
[  102.475588][   T11] bridge_slave_0: left promiscuous mode
[  102.481560][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.526575][   T11] veth1_macvtap: left promiscuous mode
[  102.533039][   T11] veth0_macvtap: left promiscuous mode
[  102.541699][   T11] veth1_vlan: left promiscuous mode
[  102.548299][   T11] veth0_vlan: left promiscuous mode
[  102.632437][ T5828] usb 3-1: cp210x converter now attached to ttyUSB0
[  102.866531][ T5754] usb 3-1: USB disconnect, device number 2
[  102.902683][ T5754] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  102.929756][ T5754] cp210x 3-1:0.0: device disconnected
[  103.022354][ T5807] radio-usb-si4713: probe of 1-1:139.49 failed with error -71
[  103.043238][ T5807] usbhid 1-1:139.49: couldn't find an input interrupt endpoint
[  103.055701][ T5807] usb 1-1: USB disconnect, device number 3
[  103.581702][   T11] team0 (unregistering): Port device team_slave_1 removed
[  103.732474][   T11] team0 (unregistering): Port device team_slave_0 removed
[  103.856057][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.987586][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.286947][ T5772] Bluetooth: hci3: command tx timeout
[  104.289974][ T6210] loop2: detected capacity change from 0 to 32768
[  104.427388][   T28] audit: type=1800 audit(1776861844.048:6): pid=6210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.133" name="file1" dev="loop2" ino=7 res=0 errno=0
[  104.752280][   T11] bond0 (unregistering): Released all slaves
[  104.777194][ T6214] loop0: detected capacity change from 0 to 256
[  104.990268][ T6131] team0: Port device team_slave_0 added
[  105.013870][ T6131] team0: Port device team_slave_1 added
[  105.168830][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.222547][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.279627][ T6131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.299485][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.312373][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.368897][ T6131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.535875][ T6131] hsr_slave_0: entered promiscuous mode
[  105.545786][ T6131] hsr_slave_1: entered promiscuous mode
[  105.574753][  T967] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  105.588290][ T6131] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  105.609247][ T6131] Cannot create hsr debugfs directory
[  105.775072][  T967] usb 3-1: Using ep0 maxpacket: 32
[  105.799313][  T967] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  105.824842][  T967] usb 3-1: config 0 has no interface number 0
[  105.848535][  T967] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  105.876276][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.901942][  T967] usb 3-1: Product: syz
[  105.909658][  T967] usb 3-1: Manufacturer: syz
[  105.933311][  T967] usb 3-1: SerialNumber: syz
[  105.936568][ T6216] loop1: detected capacity change from 0 to 32768
[  105.959230][  T967] usb 3-1: config 0 descriptor??
[  105.970545][ T6216] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.136 (6216)
[  106.001375][  T967] smsc95xx v2.0.0
[  106.067915][ T6216] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  106.114962][ T6216] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  106.150462][ T6216] BTRFS info (device loop1): enabling auto defrag
[  106.175765][ T6216] BTRFS info (device loop1): use no compression
[  106.185417][ T6216] BTRFS info (device loop1): max_inline at 4096
[  106.202641][ T6216] BTRFS info (device loop1): using free space tree
[  106.294170][ T6131] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  106.338687][ T6131] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  106.366472][ T5772] Bluetooth: hci3: command tx timeout
[  106.379330][ T6251] loop0: detected capacity change from 0 to 256
[  106.386512][ T6131] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  106.404251][ T6216] BTRFS info (device loop1): enabling ssd optimizations
[  106.410939][ T6131] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  106.436291][ T6216] BTRFS info (device loop1): auto enabling async discard
[  106.453664][ T6251] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  106.752079][ T6131] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.857421][ T6131] 8021q: adding VLAN 0 to HW filter on device team0
[  106.878571][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.885902][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.938027][ T6260] TCP: MD5 Hash mismatch for [fe88::101]:20004->[fe80::aa]:20004 L3 index 0
[  106.981862][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.989236][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.003264][ T5766] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  107.042118][  T967] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  107.074720][  T967] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  107.125927][  T967] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  107.137791][  T967] smsc95xx: probe of 3-1:0.67 failed with error -71
[  107.152984][  T967] usb 3-1: USB disconnect, device number 3
[  107.212937][ T6131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  107.498446][ T6270] loop0: detected capacity change from 0 to 4096
[  107.768561][ T6277] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.975922][ T6270] NILFS error (device loop0): nilfs_readdir: zero-length directory entry
[  108.016924][ T6270] Remounting filesystem read-only
[  108.020597][ T6131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.054097][ T6270] syz.0.146 (6270) used greatest stack depth: 19344 bytes left
[  108.435807][ T5772] Bluetooth: hci3: command tx timeout
[  108.896757][ T6131] veth0_vlan: entered promiscuous mode
[  108.940296][ T6131] veth1_vlan: entered promiscuous mode
[  109.056530][ T6131] veth0_macvtap: entered promiscuous mode
[  109.083691][ T6131] veth1_macvtap: entered promiscuous mode
[  109.127495][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.169267][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.198869][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.241565][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.268143][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.300655][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.336198][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.373945][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.397450][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.424704][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.452543][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.475838][ T6131] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.504690][ T6131] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.526256][ T6131] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.547700][ T6131] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.564709][ T6131] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.574044][ T6131] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.604476][ T6131] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.865247][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.890243][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.980471][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.019958][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.091194][ T6321] loop0: detected capacity change from 0 to 40427
[  110.145578][ T6321] F2FS-fs (loop0): heap/no_heap options were deprecated
[  110.152647][ T6321] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x7ffff
[  110.173343][ T6321] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x77e8c
[  110.215225][ T6321] F2FS-fs (loop0): invalid crc value
[  110.241519][ T6321] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0
[  110.264467][ T6321] F2FS-fs (loop0): Found nat_bits in checkpoint
[  110.372867][ T6321] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650
[  110.449523][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40
[  110.539014][ T6321] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  110.697856][ T6321] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[  110.834284][   T28] audit: type=1800 audit(1776861850.448:7): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.156" name="file1" dev="loop0" ino=12 res=0 errno=0
[  110.922589][ T6321] F2FS-fs (loop0): inject truncate fail in f2fs_truncate of f2fs_setattr+0xcbe/0x1360
[  111.000580][ T6367] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  111.096558][ T5765] syz-executor: attempt to access beyond end of device
[  111.096558][ T5765] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  111.147876][ T5765] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  111.233233][ T6348] loop4: detected capacity change from 0 to 32768
[  111.276702][ T6348] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.108 (6348)
[  111.353597][ T6348] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.423617][ T6348] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  111.464840][ T6348] BTRFS info (device loop4): turning on async discard
[  111.471711][ T6348] BTRFS info (device loop4): metadata ratio 0
[  111.517886][ T6348] BTRFS info (device loop4): setting nodatasum
[  111.524438][ T6348] BTRFS info (device loop4): using free space tree
[  111.803503][ T6348] BTRFS info (device loop4): enabling ssd optimizations
[  111.814919][  T967] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  111.970089][   T28] audit: type=1800 audit(1776861851.588:8): pid=6348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.108" name="file1" dev="loop4" ino=260 res=0 errno=0
[  112.041890][  T967] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  112.056792][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.077191][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.118023][  T967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  112.178152][  T967] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  112.214745][  T967] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  112.244850][ T6131] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.262204][  T967] usb 3-1: Manufacturer: syz
[  112.269851][  T967] usb 3-1: config 0 descriptor??
[  112.301422][ T6401] loop0: detected capacity change from 0 to 4096
[  112.633067][   T28] audit: type=1326 audit(1776861852.248:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.4.171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff47699c819 code=0x0
[  112.789629][  T967] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  112.818799][  T967] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[  112.977777][  T967] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  112.982056][ T6394] loop1: detected capacity change from 0 to 40427
[  113.105183][ T6394] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  113.124788][ T6394] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  113.255060][ T6394] F2FS-fs (loop1): Found nat_bits in checkpoint
[  113.263488][  T967] usb 3-1: USB disconnect, device number 4
[  113.418548][ T6418] fido_id[6418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  113.423852][ T6415] loop0: detected capacity change from 0 to 8192
[  113.517974][ T6394] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  113.564196][ T6394] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  113.589953][ T6427] loop4: detected capacity change from 0 to 256
[  113.667408][ T6427] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  113.984880][ T6394] syz.1.170: attempt to access beyond end of device
[  113.984880][ T6394] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  114.038671][ T6394] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  114.070147][   T28] audit: type=1800 audit(1776861853.688:10): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.170" name="bus" dev="loop1" ino=24 res=0 errno=0
[  114.280868][ T6439] loop0: detected capacity change from 0 to 512
[  114.344861][ T6439] EXT4-fs (loop0): 1 truncate cleaned up
[  114.351713][ T6439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.540588][ T6444] loop4: detected capacity change from 0 to 4096
[  114.558897][ T6439] EXT4-fs (loop0): shut down requested (2)
[  114.697169][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.843543][ T6444] EXT4-fs (loop4): Test dummy encryption mode enabled
[  114.913126][ T6444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.354236][ T6444] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  115.371246][ T6464] GUP no longer grows the stack in syz.1.177 (6464): 200000002000-200000005000 (200000001000)
[  115.422921][ T6464] CPU: 1 PID: 6464 Comm: syz.1.177 Not tainted syzkaller #0
[  115.430286][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  115.440654][ T6464] Call Trace:
[  115.444148][ T6464]  <TASK>
[  115.447130][ T6464]  dump_stack_lvl+0x18c/0x250
[  115.451982][ T6464]  ? show_regs_print_info+0x20/0x20
[  115.457229][ T6464]  ? load_image+0x420/0x420
[  115.461951][ T6464]  ? find_vma+0x134/0x1b0
[  115.466371][ T6464]  __get_user_pages+0xf0e/0x1380
[  115.471466][ T6464]  ? mark_lock+0x94/0x320
[  115.475836][ T6464]  ? populate_vma_page_range+0x380/0x380
[  115.481515][ T6464]  ? __gup_longterm_locked+0x38c/0x2b80
[  115.487233][ T6464]  ? down_read_killable+0x1d0/0x340
[  115.492562][ T6464]  __gup_longterm_locked+0x4de/0x2b80
[  115.498000][ T6464]  ? pin_user_pages_remote+0x220/0x220
[  115.503505][ T6464]  ? mark_lock+0x94/0x320
[  115.507902][ T6464]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  115.514221][ T6464]  ? sanity_check_pinned_pages+0x1341/0x14d0
[  115.520351][ T6464]  internal_get_user_pages_fast+0x21bf/0x2760
[  115.526586][ T6464]  ? get_user_pages_fast_only+0xa0/0xa0
[  115.532177][ T6464]  ? kvmalloc_node+0x70/0x180
[  115.536989][ T6464]  ? rcu_is_watching+0x15/0xb0
[  115.541804][ T6464]  ? kvmalloc_node+0x70/0x180
[  115.546632][ T6464]  ? __kmalloc_node+0xe2/0x230
[  115.551456][ T6464]  ? pin_user_pages_fast+0x89/0xe0
[  115.556792][ T6464]  get_vaddr_frames+0x86/0x210
[  115.561613][ T6464]  vb2_create_framevec+0x56/0xc0
[  115.566683][ T6464]  vb2_vmalloc_get_userptr+0x108/0x440
[  115.572193][ T6464]  ? vb2_vmalloc_get_dmabuf+0x200/0x200
[  115.578408][ T6464]  __buf_prepare+0xf9f/0x4400
[  115.583148][ T6464]  ? vb2_core_prepare_buf+0x320/0x320
[  115.583489][ T6456] loop0: detected capacity change from 0 to 32768
[  115.588705][ T6464]  ? verify_lock_unused+0x140/0x140
[  115.588832][ T6464]  ? stack_trace_save+0xaa/0x100
[  115.606102][ T6464]  ? stack_trace_snprint+0xf0/0xf0
[  115.611440][ T6464]  ? mark_lock+0x94/0x320
[  115.616228][ T6464]  ? vb2_queue_or_prepare_buf+0x5c3/0xe80
[  115.622139][ T6464]  vb2_core_prepare_buf+0xed/0x320
[  115.627299][ T6464]  v4l2_m2m_ioctl_prepare_buf+0x1a4/0x4b0
[  115.633151][ T6464]  ? v4l_prepare_buf+0x75/0xd0
[  115.638326][ T6464]  __video_do_ioctl+0xc5e/0xd70
[  115.643220][ T6464]  ? video_ioctl2+0x30/0x30
[  115.647826][ T6464]  ? __might_fault+0xc6/0x120
[  115.652630][ T6464]  ? __might_fault+0xaa/0x120
[  115.657365][ T6464]  video_usercopy+0x89f/0x1380
[  115.662263][ T6464]  ? video_ioctl2+0x30/0x30
[  115.666975][ T6464]  ? v4l_printk_ioctl+0x160/0x160
[  115.672233][ T6464]  v4l2_ioctl+0x18a/0x1e0
[  115.676715][ T6464]  ? v4l2_poll+0x2b0/0x2b0
[  115.681186][ T6464]  __se_sys_ioctl+0xfd/0x170
[  115.685825][ T6464]  do_syscall_64+0x55/0xa0
[  115.690370][ T6464]  ? clear_bhb_loop+0x40/0x90
[  115.695183][ T6464]  ? clear_bhb_loop+0x40/0x90
[  115.699908][ T6464]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  115.705930][ T6464] RIP: 0033:0x7f216ad9c819
[  115.710598][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.715944][ T6475] loop2: detected capacity change from 0 to 256
[  115.730305][ T6464] RSP: 002b:00007f216bcdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  115.730344][ T6464] RAX: ffffffffffffffda RBX: 00007f216b015fa0 RCX: 00007f216ad9c819
[  115.730356][ T6464] RDX: 0000200000002dc0 RSI: 00000000c058565d RDI: 0000000000000003
[  115.730367][ T6464] RBP: 00007f216ae32c91 R08: 0000000000000000 R09: 0000000000000000
[  115.730378][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.730387][ T6464] R13: 00007f216b016038 R14: 00007f216b015fa0 R15: 00007fffcfe3c818
[  115.730413][ T6464]  </TASK>
[  115.809640][ T6131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.851885][ T6456] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  115.870685][ T6475] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  115.970166][ T6456] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.986220][ T6475] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.241539][ T6456] XFS (loop0): Ending clean mount
[  116.258454][ T6491] loop1: detected capacity change from 0 to 164
[  116.287169][ T6456] XFS (loop0): Quotacheck needed: Please wait.
[  116.352701][ T6491] rock: corrupted directory entry. extent=32, offset=0, size=65773
[  116.374898][  T967] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  116.415424][  T967] XFS (loop0): Unmount and run xfs_repair
[  116.436574][  T967] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  116.462619][  T967] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  116.475393][  T967] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  116.503375][  T967] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  116.536911][  T967] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  116.574303][  T967] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  116.604712][  T967] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  116.635723][   T28] audit: type=1326 audit(1776861856.258:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47699c819 code=0x7ffc0000
[  116.661221][  T967] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  116.679792][  T967] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  116.699194][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  116.702167][   T49] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74
[  116.717357][   T28] audit: type=1326 audit(1776861856.258:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47699c819 code=0x7ffc0000
[  116.758921][ T6456] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  116.825050][   T28] audit: type=1326 audit(1776861856.288:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff47699c819 code=0x7ffc0000
[  116.883846][ T6500] IPVS: Scheduler module ip_vs_ not found
[  116.920760][   T28] audit: type=1326 audit(1776861856.288:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47699c819 code=0x7ffc0000
[  116.984959][    T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  116.994111][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.998487][ T6511] capability: warning: `syz.1.188' uses 32-bit capabilities (legacy support in use)
[  117.020709][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.059208][   T28] audit: type=1326 audit(1776861856.298:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff47699c819 code=0x7ffc0000
[  117.102498][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  117.143885][   T28] audit: type=1326 audit(1776861856.528:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47699c819 code=0x7ffc0000
[  117.174527][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  117.203484][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.212045][ T5828] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  117.227927][ T5828] XFS (loop0): Unmount and run xfs_repair
[  117.237411][    T9] usb 3-1: config 0 descriptor??
[  117.237932][   T28] audit: type=1326 audit(1776861856.538:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6499 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47699c819 code=0x7ffc0000
[  117.242729][ T5828] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  117.274126][ T5828] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  117.283455][ T5828] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  117.296198][ T5828] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  117.306793][ T5828] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  117.330661][ T5828] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  117.340211][ T5828] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  117.350236][ T5828] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  117.359385][ T5828] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  117.368707][  T143] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74
[  117.381712][  T143] XFS (loop0): page discard on page ffffea0001549300, inode 0x114c, pos 0.
[  117.404262][ T5765] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.699602][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  117.715224][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  117.745082][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  117.763047][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  117.783393][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  117.790413][ T6522] loop1: detected capacity change from 0 to 4096
[  117.831892][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  117.856853][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  117.886684][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  117.938741][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  117.962019][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  117.989343][    T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  118.004914][    T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  118.053566][    T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  118.081517][ T6531] loop4: detected capacity change from 0 to 512
[  118.155297][    T9] usb 3-1: USB disconnect, device number 5
[  118.180539][ T6531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.200005][ T6532] fido_id[6532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  118.347039][ T6131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.555491][ T5754] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  118.641185][ T6545] loop2: detected capacity change from 0 to 164
[  118.764871][ T5754] usb 1-1: Using ep0 maxpacket: 32
[  118.776027][ T5754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  118.788790][ T5754] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58409, setting to 1024
[  118.800660][ T5754] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  118.810199][ T5754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.814877][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  118.827600][ T5754] usb 1-1: config 0 descriptor??
[  118.833467][ T6535] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  118.858039][ T5754] hub 1-1:0.0: USB hub found
[  118.996390][ T5833] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  119.028201][    T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  119.065266][    T9] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  119.077261][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.077856][ T5754] hub 1-1:0.0: 1 port detected
[  119.085563][    T9] usb 5-1: Product: syz
[  119.085585][    T9] usb 5-1: Manufacturer: syz
[  119.085599][    T9] usb 5-1: SerialNumber: syz
[  119.091414][    T9] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  119.313251][ T5833] usb 2-1: unable to read config index 0 descriptor/start: -71
[  119.321594][ T5833] usb 2-1: can't read configurations, error -71
[  119.410832][ T6554] loop2: detected capacity change from 0 to 32768
[  119.443779][ T6554] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  119.502307][ T6554] XFS (loop2): Ending clean mount
[  119.536431][ T6543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.545869][ T6543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.571235][    T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  119.588115][    T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  119.603051][    T9] usb 5-1: media controller created
[  119.642500][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  119.758039][ T5763] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  119.945157][    T9] usb 5-1: USB disconnect, device number 2
[  120.036423][ T6565] loop1: detected capacity change from 0 to 1024
[  120.077597][ T6565] EXT4-fs: Ignoring removed nobh option
[  120.094915][ T5754] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  120.104962][ T5828] usb 1-1: USB disconnect, device number 4
[  120.130848][ T6565] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  120.203019][ T6565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2842c01c, mo2=0003]
[  120.229041][ T6565] System zones: 0-1, 3-8
[  120.235868][ T6565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  120.252594][ T6565] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.399011][ T6565] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.205: lblock 3 mapped to illegal pblock 3 (length 1)
[  120.434332][ T6565] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  120.460618][ T6565] EXT4-fs (loop1): This should not happen!! Data will be lost
[  120.460618][ T6565] 
[  120.477304][ T6573] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 3: comm syz.1.205: lblock 3 mapped to illegal pblock 3 (length 1)
[  120.498575][ T6573] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  120.518084][ T6573] EXT4-fs (loop1): This should not happen!! Data will be lost
[  120.518084][ T6573] 
[  120.584837][   T11] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8)
[  120.608266][   T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  120.624267][   T11] EXT4-fs (loop1): This should not happen!! Data will be lost
[  120.624267][   T11] 
[  120.646886][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  120.669350][ T5807] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  120.731964][ T6575] loop1: detected capacity change from 0 to 512
[  120.759465][ T6575] ext4: Unknown parameter 'smackfstransmute'
[  120.761107][ T6570] loop2: detected capacity change from 0 to 32768
[  120.790509][ T6570] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.826216][ T5946] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  120.854745][ T5807] usb 5-1: Using ep0 maxpacket: 8
[  120.862252][ T5807] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  120.874086][ T5807] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  120.887126][ T5807] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  120.897657][ T5807] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  120.922144][ T6570] XFS (loop2): Ending clean mount
[  120.945453][ T5807] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  120.996746][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.200216][ T5763] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.282815][ T5807] usb 5-1: GET_CAPABILITIES returned 0
[  121.325237][ T5807] usbtmc 5-1:16.0: can't read capabilities
[  121.527057][ T5807] usb 5-1: USB disconnect, device number 3
[  121.671310][ T6595] netlink: 'syz.2.211': attribute type 11 has an invalid length.
[  121.742209][ T6590] loop0: detected capacity change from 0 to 32768
[  121.980586][ T6590] JBD2: Ignoring recovery information on journal
[  122.137752][ T6592] loop1: detected capacity change from 0 to 32768
[  122.145628][ T6590] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  122.249072][ T6592] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  122.280457][ T6609] loop2: detected capacity change from 0 to 64
[  122.406467][ T6592] JBD2: Ignoring recovery information on journal
[  122.606459][ T6592] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  122.777757][ T6590] syz.0.209 (6590) used greatest stack depth: 18768 bytes left
[  122.964961][ T5765] ocfs2: Unmounting device (7,0) on (node local)
[  123.252646][ T5766] ocfs2: Unmounting device (7,1) on (node local)
[  123.317061][ T6627] loop0: detected capacity change from 0 to 256
[  123.893199][ T6642] loop0: detected capacity change from 0 to 256
[  124.572944][ T6663] loop1: detected capacity change from 0 to 512
[  124.603945][ T6663] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  124.643107][ T6663] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.237: Invalid inode bitmap blk 4 in block_group 0
[  124.662751][ T6663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.745730][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.784588][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  124.869545][ T6673] loop1: detected capacity change from 0 to 16
[  124.881997][ T6673] erofs: (device loop1): mounted with root inode @ nid 36.
[  124.913820][   T28] audit: type=1800 audit(1776861864.528:18): pid=6673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.240" name="file1" dev="loop1" ino=86 res=0 errno=0
[  125.002211][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.033572][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  125.066366][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  125.085133][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  125.099017][    T9] usb 1-1: SerialNumber: syz
[  125.170451][ T6678] loop4: detected capacity change from 0 to 2048
[  125.231529][ T6678] NILFS (loop4): invalid segment: Magic number mismatch
[  125.284697][ T6678] NILFS (loop4): trying rollback from an earlier position
[  125.345042][    T9] usb 1-1: 0:2 : does not exist
[  125.394346][ T6678] NILFS (loop4): recovery complete
[  125.402549][    T9] usb 1-1: USB disconnect, device number 5
[  125.439485][ T6683] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.576728][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  126.454768][ T5833] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  126.664858][ T6696] loop4: detected capacity change from 0 to 32768
[  126.670394][ T5833] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  126.711554][ T5833] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  126.743618][ T5833] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  126.761759][ T5833] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  126.773171][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.776666][ T6696] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  126.782493][ T5833] usb 2-1: Product: syz
[  126.807242][ T5833] usb 2-1: Manufacturer: syz
[  126.822490][ T5833] usb 2-1: SerialNumber: syz
[  126.841503][ T5833] usblp0: Disabling reads from problematic bidirectional printer
[  126.980434][ T6696] XFS (loop4): Ending clean mount
[  127.082648][ T5833] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004
[  127.228808][ T6131] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  127.392404][ T5833] usb 2-1: USB disconnect, device number 4
[  127.636787][ T6700] usblp0: removed
[  128.130738][ T6729] loop0: detected capacity change from 0 to 32768
[  128.236669][ T6729] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.450680][ T6729] XFS (loop0): Ending clean mount
[  128.813330][ T6774] loop4: detected capacity change from 0 to 256
[  128.832441][ T6774] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  128.853115][ T5765] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  128.911795][   T28] audit: type=1800 audit(1776861868.528:19): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.262" name="file1" dev="loop4" ino=1048608 res=0 errno=0
[  128.998824][ T6774] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048)
[  129.021203][   T28] audit: type=1800 audit(1776861868.568:20): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.262" name="file1" dev="loop4" ino=1048608 res=0 errno=0
[  129.058434][ T6774] FAT-fs (loop4): Filesystem has been set read-only
[  129.104874][ T6774] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200)
[  130.259260][ T6792] loop0: detected capacity change from 0 to 32768
[  130.355542][ T6818] netlink: 32 bytes leftover after parsing attributes in process `syz.1.274'.
[  130.839831][ T6823] loop1: detected capacity change from 0 to 4096
[  131.146950][ T6811] loop4: detected capacity change from 0 to 40427
[  131.220036][ T6811] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  131.232392][ T6811] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  131.293733][ T6811] F2FS-fs (loop4): invalid crc value
[  131.371401][ T6811] F2FS-fs (loop4): Found nat_bits in checkpoint
[  131.540281][ T6811] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  131.554883][ T6811] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  131.625136][ T5833] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  131.770661][ T6131] syz-executor: attempt to access beyond end of device
[  131.770661][ T6131] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  131.792687][ T6854] sock: sock_set_timeout: `syz.1.280' (pid 6854) tries to set negative timeout
[  131.817683][ T6131] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  131.837190][   T42] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  131.856484][ T5833] usb 3-1: Using ep0 maxpacket: 16
[  131.870086][ T5833] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  131.878861][ T5833] usb 3-1: config 0 has no interface number 0
[  131.886034][ T5833] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  131.898297][ T5833] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  131.925488][   T42] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  131.941584][ T5833] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  131.964924][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.973129][ T5833] usb 3-1: Product: syz
[  132.004767][ T5833] usb 3-1: Manufacturer: syz
[  132.014934][ T5833] usb 3-1: SerialNumber: syz
[  132.036759][ T5833] usb 3-1: config 0 descriptor??
[  132.075142][ T6843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  132.084907][ T6843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  132.367351][ T6843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  132.402606][ T6843] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  132.686354][ T6876] sctp: [Deprecated]: syz.4.281 (pid 6876) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.686354][ T6876] Use struct sctp_sack_info instead
[  133.041814][ T5833] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  133.065003][ T5833] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  133.096877][ T5833] asix: probe of 3-1:0.251 failed with error -71
[  133.113991][ T5833] usb 3-1: USB disconnect, device number 6
[  133.129675][ T6885] loop4: detected capacity change from 0 to 4096
[  133.315162][ T5772] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  133.315455][ T5770] Bluetooth: hci4: command 0xfc11 tx timeout
[  133.354099][ T6872] loop1: detected capacity change from 0 to 32768
[  133.457299][ T6872] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.652922][ T6872] XFS (loop1): Ending clean mount
[  133.707986][ T6872] XFS (loop1): Quotacheck needed: Please wait.
[  133.812284][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  133.819775][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  133.859292][ T6872] XFS (loop1): Quotacheck: Done.
[  133.950080][ T6915] loop2: detected capacity change from 0 to 2048
[  134.034901][ T6915]  loop2: p4 < >
[  134.128036][ T6915] EXT4-fs (loop2p4): unable to read superblock
[  134.137006][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.402811][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  135.671813][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'.
[  136.240158][ T6968] Bluetooth: MGMT ver 1.22
[  136.254624][    C1] sched: RT throttling activated
[  136.276106][ T6968] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  136.350735][ T6954] loop4: detected capacity change from 0 to 131072
[  136.359154][ T6954] XFS: ikeep mount option is deprecated.
[  136.422636][ T6954] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  136.493240][ T6954] XFS (loop4): Starting recovery (logdev: internal)
[  136.563880][ T6954] XFS (loop4): Ending recovery (logdev: internal)
[  136.911858][ T6131] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  137.022096][ T6985] loop2: detected capacity change from 0 to 32768
[  137.142808][ T6985] JBD2: Ignoring recovery information on journal
[  137.346295][ T6985] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  137.724458][ T5763] ocfs2: Unmounting device (7,2) on (node local)
[  138.196125][ T5828] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  138.225851][ T5806] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  138.399136][ T5828] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  138.419401][ T5806] usb 5-1: Using ep0 maxpacket: 32
[  138.435317][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.454803][ T5806] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  138.477430][ T5806] usb 5-1: config 0 has no interface number 0
[  138.484091][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.500599][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  138.520788][ T5806] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  138.531120][ T5806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.540230][ T5806] usb 5-1: Product: syz
[  138.548142][ T5828] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  138.573573][ T5806] usb 5-1: Manufacturer: syz
[  138.580786][ T5828] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  138.594009][ T5806] usb 5-1: SerialNumber: syz
[  138.601290][ T5828] usb 1-1: Manufacturer: syz
[  138.618956][ T5806] usb 5-1: config 0 descriptor??
[  138.629401][ T5828] usb 1-1: config 0 descriptor??
[  138.635577][ T5806] smsc95xx v2.0.0
[  138.686301][ T7012] loop1: detected capacity change from 0 to 32768
[  138.965741][ T7016] loop2: detected capacity change from 0 to 1024
[  138.974441][ T7016] EXT4-fs: Ignoring removed bh option
[  139.045105][ T7016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.087285][ T7016] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  139.108318][ T5828] appleir 0003:05AC:8243.0004: unknown main item tag 0x0
[  139.149797][ T5828] appleir 0003:05AC:8243.0004: No inputs registered, leaving
[  139.180376][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.185750][ T5828] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  139.204988][  T967] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  139.406691][  T967] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  139.416350][  T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.432933][  T967] usb 2-1: config 0 descriptor??
[  139.450263][  T967] gspca_main: cpia1-2.14.0 probing 0813:0001
[  139.452484][  T787] usb 1-1: USB disconnect, device number 6
[  139.555321][ T5772] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  139.557329][ T5081] Bluetooth: hci0: command 0x1407 tx timeout
[  139.681356][ T5806] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  139.693028][ T5806] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  139.705361][ T5806] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  139.717435][ T5806] smsc95xx: probe of 5-1:0.67 failed with error -71
[  139.729288][ T5806] usb 5-1: USB disconnect, device number 4
[  139.862146][  T967] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  140.264413][  T967] gspca_cpia1: usb_control_msg 02, error -71
[  140.278615][  T967] gspca_cpia1: usb_control_msg 05, error -71
[  140.287982][  T967] cpia1 2-1:0.0: unexpected systemstate: 00
[  140.302126][  T967] usb 2-1: USB disconnect, device number 5
[  140.512446][ T7036] loop2: detected capacity change from 0 to 1024
[  140.525492][ T7036] EXT4-fs: Ignoring removed bh option
[  140.533221][ T7036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  140.577658][ T7036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.717326][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.924756][  T787] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  141.139343][  T787] usb 5-1: unable to get BOS descriptor or descriptor too short
[  141.180869][  T787] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[  141.190693][ T7053] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  141.215172][  T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.223332][  T787] usb 5-1: Product: syz
[  141.254720][  T787] usb 5-1: Manufacturer: syz
[  141.259545][  T787] usb 5-1: SerialNumber: syz
[  141.844530][ T7068] loop2: detected capacity change from 0 to 4096
[  141.918075][  T787] usb 5-1: unit 5 not found!
[  141.923077][  T787] usb 5-1: unit 3 not found!
[  142.326709][  T787] usb_set_interface error
[  142.338739][  T787] snd-usb-us122l: probe of 5-1:1.1 failed with error -22
[  142.362296][  T787] usb 5-1: USB disconnect, device number 5
[  142.469502][ T7082] loop2: detected capacity change from 0 to 1024
[  142.500291][ T7082] EXT4-fs: Ignoring removed bh option
[  142.532827][ T7082] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  142.573148][ T7082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.741748][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.881439][ T7095] loop2: detected capacity change from 0 to 2048
[  142.972699][ T7098] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.051805][   T28] audit: type=1800 audit(1776861882.668:21): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.347" name="file1" dev="loop2" ino=15 res=0 errno=0
[  143.574881][  T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  143.774205][ T7120] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  143.774205][ T7120] The task syz.0.358 (7120) triggered the difference, watch for misbehavior.
[  143.795054][  T787] usb 2-1: Using ep0 maxpacket: 8
[  143.809691][  T787] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  143.825043][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.833454][  T787] usb 2-1: Product: syz
[  143.838426][ T5828] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  143.850953][  T787] usb 2-1: Manufacturer: syz
[  143.856543][  T787] usb 2-1: SerialNumber: syz
[  143.867111][  T787] usb 2-1: config 0 descriptor??
[  143.884344][  T787] gspca_main: se401-2.14.0 probing 047d:5003
[  144.042744][ T5828] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  144.057199][ T5828] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  144.078274][ T5828] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  144.107274][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.321079][  T787] gspca_se401: ExtraFeatures: 48
[  144.328750][  T787] gspca_se401: Frame size: 0x0 1/16th janggu
[  144.338248][  T787] gspca_se401: Frame size: 0x0 1/16th janggu
[  144.345015][  T787] gspca_se401: Frame size: 0x0 1/16th janggu
[  144.352337][  T787] gspca_se401: Frame size: 0x0 1/16th janggu
[  144.364889][ T5828] usb 3-1: usb_control_msg returned -32
[  144.372975][  T787] gspca_se401: Frame size: 0x0 1/16th janggu
[  144.380871][ T5828] usbtmc 3-1:16.0: can't read capabilities
[  144.388403][  T787] gspca_se401: Frame size: 0x0 1/16th janggu
[  144.395815][  T787] gspca_se401: Frame size: 0x0 1/16th janggu
[  144.416836][  T787] gspca_se401: Frame size: 0x0 1/16th janggu
[  144.434837][  T787] gspca_se401: Frame size: 0x0 1/16th janggu
[  144.440893][  T787] gspca_se401: Frame size: 0x0 1/16th janggu
[  144.546234][  T787] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  144.835087][  T787] usb 2-1: USB disconnect, device number 6
[  145.076632][ T7130] loop4: detected capacity change from 0 to 32768
[  145.088868][ T7130] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.363 (7130)
[  145.114956][ T7130] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  145.129302][ T7130] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  145.133801][ T7132] loop0: detected capacity change from 0 to 32768
[  145.139578][ T7130] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  145.168110][ T7130] BTRFS info (device loop4): trying to use backup root at mount time
[  145.199803][ T7130] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  145.229783][ T7132] JBD2: Ignoring recovery information on journal
[  145.251739][ T7130] BTRFS info (device loop4): use lzo compression, level 0
[  145.269705][ T7130] BTRFS info (device loop4): turning on flush-on-commit
[  145.289023][ T7132] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  145.289725][ T7130] BTRFS info (device loop4): using free space tree
[  145.474736][ T7130] BTRFS info (device loop4): enabling ssd optimizations
[  145.484463][ T5765] ocfs2: Unmounting device (7,0) on (node local)
[  145.648001][ T7154] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  146.039486][ T6131] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.378616][ T7168] hsr0: entered promiscuous mode
[  146.398236][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'.
[  146.410280][ T7168] hsr_slave_0: left promiscuous mode
[  146.427213][ T7168] hsr_slave_1: left promiscuous mode
[  146.511284][ T7168] hsr0 (unregistering): left promiscuous mode
[  146.599407][  T967] usb 3-1: USB disconnect, device number 7
[  146.873880][ T7180] loop2: detected capacity change from 0 to 128
[  146.964905][ T5754] kernel write not supported for file bpf-prog (pid: 5754 comm: kworker/1:3)
[  146.977291][ T7180] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.065074][ T7180] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  147.065835][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.381'.
[  147.285426][ T5763] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.455012][ T7198] bridge0: port 3(syz_tun) entered blocking state
[  147.506128][ T7198] bridge0: port 3(syz_tun) entered disabled state
[  147.513133][ T7198] syz_tun: entered allmulticast mode
[  147.558320][ T7198] syz_tun: entered promiscuous mode
[  147.597660][ T7198] bridge0: port 3(syz_tun) entered blocking state
[  147.606831][ T7198] bridge0: port 3(syz_tun) entered forwarding state
[  147.821591][ T7213] pim6reg1: entered promiscuous mode
[  147.852683][ T7213] pim6reg1: entered allmulticast mode
[  148.144264][ T7219] loop1: detected capacity change from 0 to 4096
[  148.233567][ T7206] loop4: detected capacity change from 0 to 32768
[  148.296726][ T7219] ntfs3: loop1: ino=5, "/" directory corrupted
[  148.344147][ T7206] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  148.456525][ T7230] loop2: detected capacity change from 0 to 4096
[  148.493212][ T7206] XFS (loop4): Ending clean mount
[  148.602884][ T7235] loop1: detected capacity change from 0 to 256
[  148.731703][ T6131] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  148.817403][ T7235] FAT-fs (loop1): Directory bread(block 64) failed
[  148.824319][ T7235] FAT-fs (loop1): Directory bread(block 65) failed
[  148.846001][ T7235] FAT-fs (loop1): Directory bread(block 66) failed
[  148.854076][ T7235] FAT-fs (loop1): Directory bread(block 67) failed
[  148.878839][ T7235] FAT-fs (loop1): Directory bread(block 68) failed
[  148.900195][ T7235] FAT-fs (loop1): Directory bread(block 69) failed
[  148.915070][ T7230] ntfs3: loop2: ino=21, "file1" attr_insert_range
[  148.923239][ T7235] FAT-fs (loop1): Directory bread(block 70) failed
[  148.992046][ T7235] FAT-fs (loop1): Directory bread(block 71) failed
[  149.052816][ T7235] FAT-fs (loop1): Directory bread(block 72) failed
[  149.086751][ T7235] FAT-fs (loop1): Directory bread(block 73) failed
[  149.600393][ T7253] loop4: detected capacity change from 0 to 512
[  149.670492][ T7253] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.406: inode has both inline data and extents flags
[  149.780723][ T7253] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.406: couldn't read orphan inode 15 (err -117)
[  149.827309][ T7253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.124005][ T6131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.325181][  T787] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  150.402087][ T7270] loop0: detected capacity change from 0 to 64
[  150.540552][  T787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  150.565819][  T787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  150.609422][  T787] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  150.631131][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  150.641012][  T787] usb 3-1: SerialNumber: syz
[  150.833675][ T7268] loop4: detected capacity change from 0 to 32768
[  150.885734][  T787] usb 3-1: 0:2 : does not exist
[  150.893868][ T7268] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  150.924477][  T787] usb 3-1: USB disconnect, device number 8
[  150.989799][ T7268] XFS (loop4): Ending clean mount
[  150.992326][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  151.039269][ T7268] XFS (loop4): Quotacheck needed: Please wait.
[  151.105710][  T967] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  151.108796][ T7268] XFS (loop4): Quotacheck: Done.
[  151.152679][   T28] audit: type=1800 audit(1776861890.768:22): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.410" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  151.173131][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.268644][ T7288] Illegal XDP return value 900200252 on prog  (id 32) dev syz_tun, expect packet loss!
[  151.307671][  T967] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  151.321935][  T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.343940][  T967] usb 2-1: config 0 descriptor??
[  151.373501][  T967] cp210x 2-1:0.0: cp210x converter detected
[  151.456658][ T6131] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  151.644382][ T7295] loop2: detected capacity change from 0 to 128
[  151.702811][ T7295] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  151.759329][ T7295] hpfs: filesystem error: improperly stopped
[  151.765631][ T7295] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  151.773664][ T7295] hpfs: You really don't want any checks? You are crazy...
[  151.783227][ T7295] hpfs: hpfs_map_sector(): read error
[  151.788813][ T7295] hpfs: code page support is disabled
[  151.804127][  T967] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  151.807230][ T7295] hpfs: hpfs_map_4sectors(): unaligned read
[  151.823236][ T7295] hpfs: hpfs_map_4sectors(): unaligned read
[  151.875987][ T7295] hpfs: filesystem error: unable to find root dir
[  151.998080][ T7301] loop0: detected capacity change from 0 to 512
[  152.038991][ T7301] EXT4-fs (loop0): 1 truncate cleaned up
[  152.052413][ T7301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.055417][  T967] usb 2-1: cp210x converter now attached to ttyUSB0
[  152.268270][ T7301] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.421: invalid indirect mapped block 4294967295 (level 1)
[  152.327854][  T967] usb 2-1: USB disconnect, device number 7
[  152.335051][ T7301] EXT4-fs (loop0): Remounting filesystem read-only
[  152.366945][  T967] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  152.409003][  T967] cp210x 2-1:0.0: device disconnected
[  152.425881][ T5765] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.603898][ T7313] loop4: detected capacity change from 0 to 1024
[  152.615401][ T7313] EXT4-fs: Ignoring removed orlov option
[  152.657896][ T7313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.729103][ T7306] loop2: detected capacity change from 0 to 40427
[  152.740238][ T7306] F2FS-fs (loop2): invalid crc value
[  152.781459][ T7306] F2FS-fs (loop2): Found nat_bits in checkpoint
[  152.872951][ T6131] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.996898][ T7306] F2FS-fs (loop2): Start checkpoint disabled!
[  153.066152][ T7306] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  153.134819][   T28] audit: type=1800 audit(1776861892.738:23): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.423" name="file1" dev="loop2" ino=10 res=0 errno=0
[  153.357265][  T143] kworker/u4:5: attempt to access beyond end of device
[  153.357265][  T143] loop2: rw=1, sector=45096, nr_sectors = 16 limit=40427
[  153.415681][  T143] kworker/u4:5: attempt to access beyond end of device
[  153.415681][  T143] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  153.453367][  T143] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  153.463798][  T143] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  154.045612][ T7338] loop2: detected capacity change from 0 to 256
[  154.099815][ T7338] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  154.204928][   T28] audit: type=1800 audit(1776861893.818:24): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.432" name="file1" dev="loop2" ino=1048610 res=0 errno=0
[  154.412125][ T7346] dvmrp6: entered allmulticast mode
[  154.469790][ T7334] loop1: detected capacity change from 0 to 32768
[  154.482461][ T7346] pimreg: entered allmulticast mode
[  154.528689][   T28] audit: type=1800 audit(1776861894.148:25): pid=7334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.434" name="file1" dev="loop1" ino=7 res=0 errno=0
[  154.549811][ T7346] pimreg: left allmulticast mode
[  154.567770][ T7346] dvmrp6: left allmulticast mode
[  154.585089][ T5754] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  154.794820][ T5754] usb 5-1: Using ep0 maxpacket: 8
[  154.811825][ T5754] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  154.830738][ T5754] usb 5-1: config 0 has no interface number 0
[  154.854852][ T5754] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  154.886505][ T5754] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  154.911975][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.933818][ T5754] usb 5-1: config 0 descriptor??
[  154.950486][ T5754] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  154.974030][ T7350] loop2: detected capacity change from 0 to 512
[  155.051372][ T7350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.080340][ T7350] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.130881][ T7350] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.438: Allocating blocks 18-19 which overlap fs metadata
[  155.134734][  T111] ==================================================================
[  155.153012][  T111] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x751/0xa70
[  155.160933][  T111] Read of size 4 at addr ffff88802ed71694 by task jfsCommit/111
[  155.168846][  T111] 
[  155.171188][  T111] CPU: 1 PID: 111 Comm: jfsCommit Not tainted syzkaller #0
[  155.178396][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  155.188654][  T111] Call Trace:
[  155.190667][ T7350] Quota error (device loop2): write_blk: dquota write failed
[  155.192044][  T111]  <TASK>
[  155.192053][  T111]  dump_stack_lvl+0x18c/0x250
[  155.192082][  T111]  ? __lock_acquire+0x7d40/0x7d40
[  155.192102][  T111]  ? show_regs_print_info+0x20/0x20
[  155.192122][  T111]  ? load_image+0x420/0x420
[  155.192142][  T111]  ? __virt_addr_valid+0x469/0x540
[  155.192159][  T111]  print_report+0xa8/0x210
[  155.231777][  T111]  ? jfs_lazycommit+0x751/0xa70
[  155.236649][  T111]  kasan_report+0x117/0x150
[  155.241234][  T111]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  155.246693][  T111]  ? jfs_lazycommit+0x751/0xa70
[  155.251539][  T111]  jfs_lazycommit+0x751/0xa70
[  155.256297][  T111]  ? txFreelock+0x5a0/0x5a0
[  155.261088][  T111]  ? do_task_dead+0xd0/0xd0
[  155.265686][  T111]  ? __kthread_parkme+0x7a/0x1c0
[  155.270964][  T111]  kthread+0x2fa/0x390
[  155.275376][  T111]  ? txFreelock+0x5a0/0x5a0
[  155.279957][  T111]  ? kthread_blkcg+0xd0/0xd0
[  155.284541][  T111]  ret_from_fork+0x48/0x80
[  155.289059][  T111]  ? kthread_blkcg+0xd0/0xd0
[  155.293654][  T111]  ret_from_fork_asm+0x11/0x20
[  155.298775][  T111]  </TASK>
[  155.301871][  T111] 
[  155.304179][  T111] Allocated by task 7334:
[  155.308501][  T111]  kasan_set_track+0x4e/0x70
[  155.313079][  T111]  __kasan_kmalloc+0x8f/0xa0
[  155.317656][  T111]  jfs_fill_super+0xdc/0xad0
[  155.322244][  T111]  mount_bdev+0x221/0x2d0
[  155.326564][  T111]  legacy_get_tree+0xea/0x180
[  155.331243][  T111]  vfs_get_tree+0x8c/0x280
[  155.335643][  T111]  do_new_mount+0x24b/0xa40
[  155.340153][  T111]  __se_sys_mount+0x2e7/0x3d0
[  155.344855][  T111]  do_syscall_64+0x55/0xa0
[  155.349383][  T111]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.355383][  T111] 
[  155.357814][  T111] Freed by task 5766:
[  155.362042][  T111]  kasan_set_track+0x4e/0x70
[  155.366798][  T111]  kasan_save_free_info+0x2e/0x50
[  155.371999][  T111]  ____kasan_slab_free+0x126/0x1e0
[  155.377197][  T111]  slab_free_freelist_hook+0x130/0x1a0
[  155.382744][  T111]  __kmem_cache_free+0xba/0x1e0
[  155.387589][  T111]  generic_shutdown_super+0x134/0x2b0
[  155.393036][  T111]  kill_block_super+0x44/0x90
[  155.397716][  T111]  deactivate_locked_super+0x97/0x100
[  155.403111][  T111]  cleanup_mnt+0x43b/0x4d0
[  155.407533][  T111]  task_work_run+0x1d4/0x260
[  155.412127][  T111]  exit_to_user_mode_loop+0xe6/0x110
[  155.417423][  T111]  exit_to_user_mode_prepare+0xee/0x180
[  155.422966][  T111]  syscall_exit_to_user_mode+0x1a/0x50
[  155.428440][  T111]  do_syscall_64+0x61/0xa0
[  155.433821][  T111]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  155.439817][  T111] 
[  155.442250][  T111] Last potentially related work creation:
[  155.448087][  T111]  kasan_save_stack+0x3e/0x60
[  155.452867][  T111]  __kasan_record_aux_stack+0xaf/0xc0
[  155.458616][  T111]  kvfree_call_rcu+0xee/0x790
[  155.463297][  T111]  inetdev_event+0x2c8/0x1630
[  155.468161][  T111]  notifier_call_chain+0x197/0x380
[  155.473384][  T111]  dev_close_many+0x2a9/0x410
[  155.478160][  T111]  unregister_netdevice_many_notify+0x4c4/0x1900
[  155.484494][  T111]  sit_exit_batch_net+0x4a4/0x4f0
[  155.489742][  T111]  cleanup_net+0x795/0xbb0
[  155.494333][  T111]  process_scheduled_works+0xa5d/0x15d0
[  155.499883][  T111]  worker_thread+0xa55/0xfc0
[  155.504662][  T111]  kthread+0x2fa/0x390
[  155.508735][  T111]  ret_from_fork+0x48/0x80
[  155.513235][  T111]  ret_from_fork_asm+0x11/0x20
[  155.518058][  T111] 
[  155.520541][  T111] The buggy address belongs to the object at ffff88802ed71600
[  155.520541][  T111]  which belongs to the cache kmalloc-256 of size 256
[  155.534603][  T111] The buggy address is located 148 bytes inside of
[  155.534603][  T111]  freed 256-byte region [ffff88802ed71600, ffff88802ed71700)
[  155.548943][  T111] 
[  155.551282][  T111] The buggy address belongs to the physical page:
[  155.557777][  T111] page:ffffea0000bb5c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ed70
[  155.568081][  T111] head:ffffea0000bb5c00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  155.577191][  T111] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  155.585174][  T111] page_type: 0xffffffff()
[  155.589520][  T111] raw: 00fff00000000840 ffff888017c41b40 ffffea00018bf400 dead000000000004
[  155.598377][  T111] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  155.606949][  T111] page dumped because: kasan: bad access detected
[  155.613461][  T111] page_owner tracks the page as allocated
[  155.619367][  T111] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5764, tgid 5764 (syz-executor), ts 82935535352, free_ts 82851689250
[  155.640911][  T111]  post_alloc_hook+0x1c1/0x200
[  155.645952][  T111]  get_page_from_freelist+0x1951/0x19e0
[  155.651625][  T111]  __alloc_pages+0x1f0/0x460
[  155.656510][  T111]  alloc_slab_page+0x5d/0x160
[  155.661181][  T111]  new_slab+0x87/0x2d0
[  155.665268][  T111]  ___slab_alloc+0xc5d/0x12f0
[  155.669973][  T111]  __kmem_cache_alloc_node+0x19e/0x250
[  155.675448][  T111]  __kmalloc+0xa4/0x230
[  155.679622][  T111]  fib_create_info+0xa61/0x2460
[  155.684535][  T111]  fib_table_insert+0xc6/0x1b20
[  155.689388][  T111]  fib_magic+0x2e5/0x3c0
[  155.693629][  T111]  fib_add_ifaddr+0x144/0x5e0
[  155.698476][  T111]  fib_inetaddr_event+0x140/0x1d0
[  155.703772][  T111]  notifier_call_chain+0x197/0x380
[  155.708930][  T111]  blocking_notifier_call_chain+0x6a/0x90
[  155.714644][  T111]  __inet_insert_ifa+0x9bc/0xbd0
[  155.719580][  T111] page last free stack trace:
[  155.724325][  T111]  free_unref_page_prepare+0x7b2/0x8c0
[  155.729781][  T111]  free_unref_page+0x32/0x2e0
[  155.734461][  T111]  __unfreeze_partials+0x1cf/0x210
[  155.739563][  T111]  put_cpu_partial+0x17c/0x250
[  155.744318][  T111]  __slab_free+0x319/0x400
[  155.748722][  T111]  qlist_free_all+0x75/0xd0
[  155.753228][  T111]  kasan_quarantine_reduce+0x143/0x160
[  155.758681][  T111]  __kasan_slab_alloc+0x22/0x80
[  155.763528][  T111]  slab_post_alloc_hook+0x6e/0x4b0
[  155.768633][  T111]  __kmem_cache_alloc_node+0x13a/0x250
[  155.774255][  T111]  kmalloc_trace+0x2a/0xe0
[  155.778682][  T111]  devl_region_create+0x14f/0x370
[  155.783696][  T111]  nsim_drv_probe+0x626/0xbb0
[  155.788382][  T111]  really_probe+0x25b/0xb20
[  155.792896][  T111]  __driver_probe_device+0x18c/0x330
[  155.798353][  T111]  driver_probe_device+0x4f/0x420
[  155.803370][  T111] 
[  155.805698][  T111] Memory state around the buggy address:
[  155.811509][  T111]  ffff88802ed71580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  155.819749][  T111]  ffff88802ed71600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  155.827826][  T111] >ffff88802ed71680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  155.835967][  T111]                          ^
[  155.840557][  T111]  ffff88802ed71700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  155.848780][  T111]  ffff88802ed71780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  155.857001][  T111] ==================================================================
[  155.865152][  T111] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  155.872513][  T111] CPU: 1 PID: 111 Comm: jfsCommit Not tainted syzkaller #0
[  155.879721][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  155.889896][  T111] Call Trace:
[  155.893328][  T111]  <TASK>
[  155.896252][  T111]  dump_stack_lvl+0x18c/0x250
[  155.901037][  T111]  ? show_regs_print_info+0x20/0x20
[  155.906258][  T111]  ? load_image+0x420/0x420
[  155.910790][  T111]  panic+0x2dc/0x730
[  155.914772][  T111]  ? bpf_jit_dump+0xd0/0xd0
[  155.919274][  T111]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  155.925261][  T111]  ? _raw_spin_unlock+0x40/0x40
[  155.930567][  T111]  ? print_memory_metadata+0x314/0x400
[  155.936480][  T111]  ? jfs_lazycommit+0x751/0xa70
[  155.941552][  T111]  check_panic_on_warn+0x84/0xa0
[  155.946789][  T111]  ? jfs_lazycommit+0x751/0xa70
[  155.951734][  T111]  end_report+0x6f/0x130
[  155.955978][  T111]  kasan_report+0x128/0x150
[  155.960562][  T111]  ? _raw_spin_lock_irqsave+0xc0/0x100
[  155.966286][  T111]  ? jfs_lazycommit+0x751/0xa70
[  155.971225][  T111]  jfs_lazycommit+0x751/0xa70
[  155.975896][  T111]  ? txFreelock+0x5a0/0x5a0
[  155.980401][  T111]  ? do_task_dead+0xd0/0xd0
[  155.984979][  T111]  ? __kthread_parkme+0x7a/0x1c0
[  155.989907][  T111]  kthread+0x2fa/0x390
[  155.993961][  T111]  ? txFreelock+0x5a0/0x5a0
[  155.998490][  T111]  ? kthread_blkcg+0xd0/0xd0
[  156.003071][  T111]  ret_from_fork+0x48/0x80
[  156.007488][  T111]  ? kthread_blkcg+0xd0/0xd0
[  156.012063][  T111]  ret_from_fork_asm+0x11/0x20
[  156.017007][  T111]  </TASK>
[  156.020564][  T111] Kernel Offset: disabled
[  156.025005][  T111] Rebooting in 86400 seconds..