last executing test programs:

27.852046922s ago: executing program 0 (id=118):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='errors=continue,iocharset=uso8859-6,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=euc-jp,errors=remount-ro,namecase=1,errors=remount-ro,dmask=00000000000000000000001,time_offset=0x0000000000000006,errors=remount-ro,\x00'], 0x1, 0x152b, &(0x7f0000000a00)="$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")
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0)

27.578523012s ago: executing program 0 (id=122):
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, &(0x7f0000000080))

27.398916988s ago: executing program 0 (id=125):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000080)="93ea", 0x2, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400000002000000ecff40"], 0x20, 0x4048800}, 0x0)

27.05586606s ago: executing program 0 (id=129):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
creat(&(0x7f0000000000)='./file0\x00', 0x80)
mount$bind(&(0x7f0000002cc0)='./file0\x00', &(0x7f0000002d00)='./file0\x00', 0x0, 0x81001, 0x0)
stat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0))

25.074214708s ago: executing program 0 (id=139):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000140), 0xfe, 0x1103, &(0x7f0000002240)="$eJzs2T+L1EAYBvBnkvUPNpFcHwQtLOS4Y/0CVyhsa6uNyFVedVsp+m38OHqV/XG9Fgv2kbibXZEVwV0V5PeDkDcPeWcy5UwCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg0nyqSQHVdKOWZWkJF13MbtK0o357fd1lZInp7P5o/Pp43mS+tvr5WlShq6hLe3x3ZvttJ22x+3Dg5N7H+avXr98fnZ2er4apqTL5WKvq7g1zl3vdVgAAAD4P/Q7a/7x/AAAAMCv7O0gAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA39c2mbseiSlKSrruYXSXptvRd+0vfBwAAAOyupMqzZlu+PAbYeJCPTVnnw/1LGeqjvNvSDwAAAPxUf2NVfP9/vVzf7MfvZ7Lelw/ZnUxyeLh8frvKP58kdZKjHwa/XLx5MV6lr//0WgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvrIDxwIAAAAAwvyt0+jYAAAAAAAAAAAAAAAAAAAAYK8AAAD//+0M1yg=")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

24.029979464s ago: executing program 0 (id=146):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0)

23.56197184s ago: executing program 32 (id=146):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)
move_pages(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000540)=[0x1, 0x1], &(0x7f0000001680), 0x0)

2.197378184s ago: executing program 3 (id=278):
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x403, 0x0, 0x0, 0x0, 0x80}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x7, 0xfffffffd, 0x0, 0x0, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8)

1.986624272s ago: executing program 1 (id=281):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents(r0, 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

1.716399881s ago: executing program 3 (id=283):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
socket$unix(0x1, 0x5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

1.710619001s ago: executing program 2 (id=291):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0xc0010002, 0x0, 0x9}]})

1.599254785s ago: executing program 4 (id=284):
mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00009ff000/0x2000)=nil, 0x2000}, 0x1})

1.503985738s ago: executing program 1 (id=285):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@file={0x1}, 0x6e)

1.404785102s ago: executing program 4 (id=286):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f00000003c0)={[{@check_relaxed}, {@map_off}, {@hide}, {@map_normal}, {@utf8}, {@hide}, {@dmode={'dmode', 0x3d, 0x800}}, {@session={'session', 0x3d, 0x54}}, {@cruft}]}, 0x1, 0x557, &(0x7f0000000580)="$eJzs3V9v09YbwPHH/SNKfhK/aUwIVQUOZZOKVIKTQFDEleecpAcSO7Id1F4hRFupIh0TZdLam4mbTZO29zBu9yKmvSG0l9DJ/0pKmqQr0LDu+4nAJ/bxOY/dyI9OGx8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQy63bdsmSlvG6q2o4tx747RHb8/ZuHlqM6FfEiv/J3JxcTldd/uLt5kvxf4uykL5bkLl4MSd7/7v02f2LM1P5/iMCOhU7u3vPnvR6Gy8mHciENLVnQt+0naZWJvRVrVq1b680QtUwLR2uhZFuKzfQTuQHasm9qUq1WkXp4prf9Zp1p6XzlfdulW27qh4UO9oJQt+7/aAYuium1TJeM6kTb47r3Is/iA9NpCLttJXa3OptVMYFGVcqHadSeVylsl0ul0rlcql6t3b3nm3PDKywc7MiYtu2DNSY/IcWk/WBr+DAyU1l+V9aYsSTrqxa+SZ16OVKXQLxpf3O+vyVyfP/V7f1yH7783+e5S+/3TwvSf6/mr67Oiz/D4nl9F47sit78kyeSE96siEvJh7R6b6aosUTI6H4YqQtTrJGZWuU1KQqVbHlsaxIQ0JR0hAjLdESypqEEolOPlGuBKLFkUh8CUTJkrhyU5SUpCY1qYgSLUVZE1+64klT6uIkrWzKVnLeKyNiPKhUOk6l8ohK/yD/Z8j/eNcHvX4D72M/z/8AAAAAAODMspLfvsfj/1m5kpQapqXtSYcFAAAAAAA+oOQv/wvxYjYuXRGL8T8AAAAAAGeNldxjZ4lIQa6lpfxOKH4JAAAAAADAGZH8/f+qWNNSiEvXxGL8DwAAAADAWbM8bI79P5O1liVh55z1x18SBLPWq87ql9a2E29wtqfT/abfbTFqzFsXskaSRXUme+fqBSub/fJgEsw32WJz3Fz/1kkDyOc2vH9xRn6R6yJyXuT6erpyPauXzUhcaJiWLrp+635JHOfCVKRXo+++2fpeksP/2WtfsGRzq7dRfPq8t57E8ipu5dV21snAPIpxLCtbR50MeZnMt5Dcc3HkEc8mN2Jk/RbSfu3+459Kd586/g9AfpTFtM5iIV0WDh//XNxnqTjs6NMozonI8Y58aBQ30jo3lm6ki74otkWSKSjKY6LYKPef/4Fz8f/3iyI/F5U0irms1UNR7O/v/7BRGRnF+HMBAJOyOSYLWYOJf/RVLk7HA1e5j5fdD1/Rl9I6S/PJhXVm/ogruj0ur9jHzetDovh94BlIw3Js3O+vB/2Wkn5fxzu8Htpv2Cpb8Smcfrn9rVza2d27tXU+21SuVO07tn23LLPJYWQLcg8A4Ajjn7EztoZ1JxlVy9BR9ecHXykoylN5Lj1Zl+XkboPkGwdHtlro+xrC8phRa6HvCS/LY0Z1hb4HvRy/buUUfhIAAJyexTQPW0kKPmH+Xx4z7j6cy0ePjvtzOQAA+Dh08MYqRD9ZQWA6j0u1WsmJVrQKfPehCky9qZXxIh24K47X1KoT+JHv+q248MjUdajCbqfjB5Fq+IHq+KFZTZ78rrJHv4e67XiRccNOSzuhVq7vRY4bqboJXdXpft0y4YoOkp3DjnZNw7hOZHxPhX43cHVRqVDrvoqmrr3INExc9FQnMG0nWFOP/Fa3rVVdh25gOpGfNpj3ZbyGH7STZouTPtkAAHwidnb3nj3p9TZefMTCpI8RAAAcRpYGAAAAAAAAAAAAAAAAAAAAAODTdxr3//37CudOvPuMTDz4T7KQz+P8nu3kk05P+nD+AwX5bWCGbwBnyt8BAAD//5y0SD0=")
socket$vsock_stream(0x28, 0x1, 0x0)

1.314140844s ago: executing program 2 (id=287):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x3d2, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}, 0x8})

1.258383986s ago: executing program 1 (id=288):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4)
r1 = epoll_create(0x1ff)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xfcd7a5f017feb7b})

1.056056024s ago: executing program 4 (id=289):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r1, &(0x7f0000000040)=0xfffffffffffffffc, r0, 0x0, 0x6, 0x0)

1.028240465s ago: executing program 1 (id=290):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="cb5c2fb201db", 'ip_vti0\x00'}}, 0x1e)

1.006448215s ago: executing program 2 (id=292):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
unshare(0x24020400)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)

890.759969ms ago: executing program 4 (id=293):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020)

667.905757ms ago: executing program 4 (id=294):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

589.97166ms ago: executing program 1 (id=295):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @pic={0xba, 0x6, 0x4, 0x7, 0x3, 0x9, 0x3, 0x8, 0x4, 0x0, 0x12, 0x80, 0x87, 0x7, 0x9, 0x4}})

589.88081ms ago: executing program 2 (id=296):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r0, 0x3)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4)

572.53971ms ago: executing program 3 (id=297):
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, &(0x7f0000000040))

444.991564ms ago: executing program 3 (id=298):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))

422.992915ms ago: executing program 2 (id=299):
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$eJzsmbFrFEEUxr+Z3ds7gwRtLGwsDBjR7O3uqaSJEMFSEKKo5WHWEN3k5LJC7kDwsLHRzkKwtbG0sLCy8C+w1UIFwcIrBQthZGZnd4e93fMOTwXzfpDJN/PezLz3YF6xB4Ig9iyfPn778PDc8qWTAPZjAXW9/sXKfbjh//7JnROPV84/ffHu2Zvt+buviucxAEJUXve9aHIAvF61EIPZyYoQmM/tC0YIWuMyOI5rfQUMbiJ/CEUyCcFwTfvcNHRnnxZR6F7vROs3NqPQk4Mvh0AOLTM+GdRwwLAOoKGiE4IZ9p1e/1Y7isJuUdREes+IaVrBK8up41vlWEFaPSGk/9UH9wdyrmsDDzyrnw8OX+sWGNa0XkYdruvmJTHyP2zn51uT5D9jcVbd9WjSXc+VOLj05wNLRPpGptkly/g3SvcfidpMzmHFFfmgs5VDw7QHmj6f/1nu+LVPY/xjhLaPmN7ORdGF34jQKSlUJvL+JDv7MaM/2bCz/tGMt243d3r9pc2t9ka4EW4HQeuMd8rzTgdN1YiScUz/a6j+NGecX6vwdZiD3XYcd/1dIO762TxIxjwBrL3sfJVbDkD1P47Fo+oI1VNV2vXyO5j+4+q/VItWuee9ypwIgiAIgiAIgiAIgiAIgiDKOQKG5JcwwfQH0TKCi+oL5c8AAAD//40vYXw=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fadvise64(r0, 0xe0ffff, 0x19, 0x3)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x400, 0x0)

321.178209ms ago: executing program 1 (id=300):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x2}, {0x6, 0xfd}]})
write$ppp(r0, &(0x7f0000000880)="0104", 0x2)

281.38593ms ago: executing program 3 (id=301):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x5)

96.006057ms ago: executing program 3 (id=302):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000340)='./file0\x00', 0x300081a, &(0x7f00000001c0)=ANY=[], 0xe, 0x2a9, &(0x7f0000006540)="$eJzs3U9rY1UUAPDzkjdp1EWCuFEEH+jCVZm6ddMoI4hdKRHUhQbtgCRB6EDACmZczSdw6ffwI7hx42dwK7hzFpUn71+SkrRT2phC5/dbHe59596Te0u6ynlfvT5NotbtJtE6jMN4mkQ/Ws1wPI40AIC742mex9/5dTLT1varAQB2ofr/X7ntWgCA3fjks88/GhwdPfg4y7rxau/JbJhExPTJbFjNDx7GtzGJ47gfvTiLyBeq+IMPjx5EmhX68dZ0PhsWmdMvf6/XH/wVUeYfRC/6m/MPsspK/nw2vBcvRhaDh/eaUnvxyub8dzbkx7ATb7+5Uv9+9OKPr+O7mMQ3UeQu8388yLL385//+eGLYpsiP2nFcK98bilv7/JeAAAAAAAAAAAAAAAAAAAAAAC42/azLKna95T9e4qhuv9O+6yc388a/fP9ear8xcsDqv5AedQteuZ5/NL017mfZVleP7jMT+O11IsFAAAAAAAAAAAAAAAAAAAAoPDo+9PxaDI5PtlK0HQDaH7Wf911DldG3ojT8ah98YJ7V99rtdtAUeulD0eaxpaO5VnBC0U9N1inOPb1qb3l5X4aVdBczFY/xcvvVYuejkdZPdUc8niUPGuvbnNxv65OdeKmheXln8RZfv5Ou4tSz2d1tnQanZc2Tv2bJxGPr3Ly7/5Z3VE9kpQtNq62e1oHGz9gEXTXd//t4gUv/Mpob+N7BwAAAAAAAAAAAAAAAAAAWLf80e+GyZ8uTW39b0UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI6V7//PkzqYTI5PuhFRBouRtWBeJ1/2TB104uTRLX9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngP/BQAA//8g8UYJ")
mount$nfs(&(0x7f0000000100)=')_.', 0x0, 0x0, 0x40, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

94.557757ms ago: executing program 4 (id=310):
syz_mount_image$f2fs(&(0x7f0000001240), &(0x7f00000001c0)='./file0\x00', 0x210408, &(0x7f00000057c0)=ANY=[], 0x1, 0x550f, &(0x7f000000cf00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x143082, 0x80)
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000140)={0x0, 0x100000000})

0s ago: executing program 2 (id=303):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @random="cb5c2fb201db", 'ip_vti0\x00'}}, 0x1e)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts.
syzkaller login: [   63.525474][ T5749] cgroup: Unknown subsys name 'net'
[   63.655127][ T5749] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.004986][ T5749] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.416447][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.425686][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.433913][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.442478][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.479284][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.482484][ T5770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.487740][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.494021][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.502158][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.516660][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.522526][ T5770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.524945][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.532425][ T5770] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.540585][ T5769] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.545815][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.553480][ T5769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.566921][ T5769] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   66.572295][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.574354][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.584203][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.596208][ T5082] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   66.604553][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   66.612333][ T5766] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.625304][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   67.025413][ T5761] chnl_net:caif_netlink_parms(): no params data found
[   67.035051][ T5767] chnl_net:caif_netlink_parms(): no params data found
[   67.045036][ T5764] chnl_net:caif_netlink_parms(): no params data found
[   67.131730][ T5772] chnl_net:caif_netlink_parms(): no params data found
[   67.257751][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.265063][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.272823][ T5764] bridge_slave_0: entered allmulticast mode
[   67.279774][ T5764] bridge_slave_0: entered promiscuous mode
[   67.287619][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.297163][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.304662][ T5761] bridge_slave_0: entered allmulticast mode
[   67.312412][ T5761] bridge_slave_0: entered promiscuous mode
[   67.331614][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.338924][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.346167][ T5767] bridge_slave_0: entered allmulticast mode
[   67.353059][ T5767] bridge_slave_0: entered promiscuous mode
[   67.361867][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.369874][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.377108][ T5764] bridge_slave_1: entered allmulticast mode
[   67.385180][ T5764] bridge_slave_1: entered promiscuous mode
[   67.399667][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.406770][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.414134][ T5761] bridge_slave_1: entered allmulticast mode
[   67.420976][ T5761] bridge_slave_1: entered promiscuous mode
[   67.442001][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.449369][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.456501][ T5767] bridge_slave_1: entered allmulticast mode
[   67.463791][ T5767] bridge_slave_1: entered promiscuous mode
[   67.520381][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.532417][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.543928][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.555550][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.562796][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.570557][ T5772] bridge_slave_0: entered allmulticast mode
[   67.577289][ T5772] bridge_slave_0: entered promiscuous mode
[   67.586513][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.606511][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.626018][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.635853][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.643164][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.650725][ T5772] bridge_slave_1: entered allmulticast mode
[   67.657408][ T5772] bridge_slave_1: entered promiscuous mode
[   67.701485][ T5761] team0: Port device team_slave_0 added
[   67.720241][ T5767] team0: Port device team_slave_0 added
[   67.736739][ T5761] team0: Port device team_slave_1 added
[   67.745163][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.756478][ T5767] team0: Port device team_slave_1 added
[   67.773722][ T5764] team0: Port device team_slave_0 added
[   67.791857][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.823130][ T5764] team0: Port device team_slave_1 added
[   67.846785][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.854405][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.880678][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.893235][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.900731][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.927756][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.949401][ T5772] team0: Port device team_slave_0 added
[   67.956057][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.963356][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.991830][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.011932][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.019000][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.045340][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.072655][ T5772] team0: Port device team_slave_1 added
[   68.093640][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.101417][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.127816][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.141031][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.147993][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.174513][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.231277][ T5761] hsr_slave_0: entered promiscuous mode
[   68.238983][ T5761] hsr_slave_1: entered promiscuous mode
[   68.246511][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.255231][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.281696][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.294085][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.301105][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.327106][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.352751][ T5767] hsr_slave_0: entered promiscuous mode
[   68.361857][ T5767] hsr_slave_1: entered promiscuous mode
[   68.367962][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.375961][ T5767] Cannot create hsr debugfs directory
[   68.467030][ T5764] hsr_slave_0: entered promiscuous mode
[   68.473756][ T5764] hsr_slave_1: entered promiscuous mode
[   68.480466][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.488039][ T5764] Cannot create hsr debugfs directory
[   68.517263][ T5772] hsr_slave_0: entered promiscuous mode
[   68.523743][ T5772] hsr_slave_1: entered promiscuous mode
[   68.530977][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.538620][ T5772] Cannot create hsr debugfs directory
[   68.570144][   T51] Bluetooth: hci0: command tx timeout
[   68.648677][   T51] Bluetooth: hci1: command tx timeout
[   68.648692][ T5763] Bluetooth: hci2: command tx timeout
[   68.728656][   T51] Bluetooth: hci3: command tx timeout
[   68.873400][ T5761] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.885635][ T5761] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.897557][ T5761] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.911658][ T5761] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.979605][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.995671][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.005082][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.017217][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.124058][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.161996][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.172068][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.185912][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.223105][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.257761][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.272853][ T5761] 8021q: adding VLAN 0 to HW filter on device team0
[   69.284309][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.301889][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.321632][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.329036][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.345913][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.361430][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.368608][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.417224][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.460748][ T5761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.486072][ T5772] 8021q: adding VLAN 0 to HW filter on device team0
[   69.512295][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.519464][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.534919][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.542139][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.694676][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.722906][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.741746][ T5767] 8021q: adding VLAN 0 to HW filter on device team0
[   69.782504][ T5764] 8021q: adding VLAN 0 to HW filter on device team0
[   69.806222][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.813450][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.838343][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.845537][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.855983][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.863114][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.890196][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.897356][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.007714][ T5764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   70.022774][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   70.046141][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.092535][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.167227][ T5761] veth0_vlan: entered promiscuous mode
[   70.218077][ T5772] veth0_vlan: entered promiscuous mode
[   70.227889][ T5761] veth1_vlan: entered promiscuous mode
[   70.278307][ T5772] veth1_vlan: entered promiscuous mode
[   70.305626][ T5761] veth0_macvtap: entered promiscuous mode
[   70.322369][ T5761] veth1_macvtap: entered promiscuous mode
[   70.364186][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.404425][ T5772] veth0_macvtap: entered promiscuous mode
[   70.421457][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.462601][ T5761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.472879][ T5761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.483891][ T5761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.493846][ T5761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.506602][ T5772] veth1_macvtap: entered promiscuous mode
[   70.517776][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.542851][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.559350][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.572760][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.584831][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.620452][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.631771][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.643566][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.651051][   T51] Bluetooth: hci0: command tx timeout
[   70.668322][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.682423][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.694276][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.706040][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.728849][   T51] Bluetooth: hci1: command tx timeout
[   70.730396][ T5763] Bluetooth: hci2: command tx timeout
[   70.780040][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.788046][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.797767][ T5767] veth0_vlan: entered promiscuous mode
[   70.813519][ T5763] Bluetooth: hci3: command tx timeout
[   70.862575][  T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.872611][  T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.901903][ T5767] veth1_vlan: entered promiscuous mode
[   70.928269][ T5764] veth0_vlan: entered promiscuous mode
[   71.000964][ T5764] veth1_vlan: entered promiscuous mode
[   71.012062][  T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.051028][  T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.086644][ T5825] syz.1.2[5825]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   71.116415][ T5767] veth0_macvtap: entered promiscuous mode
[   71.133705][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.147761][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.156684][ T5764] veth0_macvtap: entered promiscuous mode
[   71.167012][ T5825] loop1: detected capacity change from 0 to 4096
[   71.182214][ T5767] veth1_macvtap: entered promiscuous mode
[   71.219055][ T5764] veth1_macvtap: entered promiscuous mode
[   71.249335][ T5826] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.267458][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.283784][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.322546][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.333426][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.353138][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.370301][   T28] audit: type=1800 audit(1775132811.863:2): pid=5825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0
[   71.388481][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.432998][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.443848][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.456783][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.473060][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.497506][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.507407][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.518578][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.529682][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.603305][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.626197][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[   71.633010][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[   71.644620][ T5830] loop3: detected capacity change from 0 to 2048
[   71.646587][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.661511][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.673538][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.695949][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.707927][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.733766][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.741364][ T5830] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.829136][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.867424][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.882178][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.895205][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.906021][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.917084][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.932808][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.965784][ T5764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.978029][ T5764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.987227][ T5764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.998438][ T5764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.100239][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.108098][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.147791][ T5834] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[   72.188746][ T5834] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[   72.232075][ T5837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'.
[   72.246393][ T5837] bridge_slave_0: left allmulticast mode
[   72.256790][ T5837] bridge_slave_0: left promiscuous mode
[   72.266477][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.291187][  T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.313431][ T5839] capability: warning: `syz.3.8' uses 32-bit capabilities (legacy support in use)
[   72.319287][  T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.325619][ T5839] program syz.3.8 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.419630][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.427569][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.517278][  T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.550432][  T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.555376][ T5842] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.731209][ T5763] Bluetooth: hci0: command tx timeout
[   72.811942][ T5763] Bluetooth: hci1: command tx timeout
[   72.811955][   T51] Bluetooth: hci2: command tx timeout
[   72.890985][ T5763] Bluetooth: hci3: command tx timeout
[   73.701355][ T5865] loop3: detected capacity change from 0 to 8192
[   73.747196][ T5865] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   73.812975][ T5865] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[   73.823819][ T5865] REISERFS (device loop3): using ordered data mode
[   73.831002][ T5865] reiserfs: using flush barriers
[   73.839205][ T5865] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   73.857080][ T5865] REISERFS (device loop3): checking transaction log (loop3)
[   74.068231][ T5865] REISERFS (device loop3): Using tea hash to sort names
[   74.098245][ T5865] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   74.808783][ T5763] Bluetooth: hci0: command tx timeout
[   74.889269][ T5763] Bluetooth: hci1: command tx timeout
[   74.890429][   T51] Bluetooth: hci2: command tx timeout
[   74.971948][   T51] Bluetooth: hci3: command tx timeout
[   75.465046][ T5897] loop1: detected capacity change from 0 to 128
[   75.499794][ T5897] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   75.564041][ T5899] loop2: detected capacity change from 0 to 1024
[   75.609871][ T5899] =======================================================
[   75.609871][ T5899] WARNING: The mand mount option has been deprecated and
[   75.609871][ T5899]          and is ignored by this kernel. Remove the mand
[   75.609871][ T5899]          option from the mount to silence this warning.
[   75.609871][ T5899] =======================================================
[   75.747467][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.767235][ T5904] netlink: 'syz.0.33': attribute type 4 has an invalid length.
[   75.788157][   T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   76.007421][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.100355][ T5798] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.158137][ T5914] loop1: detected capacity change from 0 to 1024
[   76.186658][ T5914] EXT4-fs: Ignoring removed orlov option
[   76.217221][ T5914] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled
[   76.295191][ T5914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.309617][ T5798] usb 1-1: Using ep0 maxpacket: 32
[   76.324320][ T5798] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[   76.344626][ T5798] usb 1-1: config 0 has no interface number 0
[   76.354783][ T5798] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   76.368498][ T5798] usb 1-1: config 0 interface 85 has no altsetting 0
[   76.382951][ T5798] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   76.393485][ T5914] EXT4-fs (loop1): Online resizing not supported with bigalloc
[   76.401248][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.411575][ T5798] usb 1-1: Product: syz
[   76.415765][ T5798] usb 1-1: Manufacturer: syz
[   76.421172][ T5798] usb 1-1: SerialNumber: syz
[   76.432646][ T5798] usb 1-1: config 0 descriptor??
[   76.501420][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.088762][ T5798] appletouch 1-1:0.85: Geyser mode initialized.
[   77.118990][ T5798] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5
[   77.151193][ T5916] loop2: detected capacity change from 0 to 32768
[   77.253657][ T5916] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   77.583770][ T1189] usb 1-1: USB disconnect, device number 2
[   77.583772][    C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19
[   77.629681][ T5916] XFS (loop2): Ending clean mount
[   77.669518][ T1189] appletouch 1-1:0.85: input: appletouch disconnected
[   77.714683][ T5916] XFS (loop2): Quotacheck needed: Please wait.
[   77.780199][ T5916] XFS (loop2): Quotacheck: Done.
[   78.034757][ T5764] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.272972][ T5950] loop3: detected capacity change from 0 to 128
[   78.297672][ T5950] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   78.328479][ T5950] hpfs: filesystem error: improperly stopped
[   78.344753][ T5950] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   78.363105][ T5950] hpfs: You really don't want any checks? You are crazy...
[   78.386421][ T5950] hpfs: Code page index out of array
[   78.398458][ T5950] hpfs: code page support is disabled
[   78.406596][ T5946] loop1: detected capacity change from 0 to 32768
[   78.426340][ T5950] hpfs: hpfs_map_4sectors(): unaligned read
[   78.451082][ T5950] hpfs: hpfs_map_4sectors(): unaligned read
[   78.492648][ T5950] hpfs: filesystem error: unable to find root dir
[   78.510895][ T5946] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   78.580551][ T5950] hpfs: hpfs_map_sector(): read error
[   78.586168][ T5950] hpfs: hpfs_map_sector(): read error
[   78.641480][ T5946] XFS (loop1): Ending clean mount
[   78.861220][ T5761] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   78.876897][ T5968] input: syz0 as /devices/virtual/input/input6
[   79.601945][ T5982] loop1: detected capacity change from 0 to 1024
[   79.818516][   T28] audit: type=1800 audit(1775132820.323:3): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.59" name="file1" dev="loop1" ino=20 res=0 errno=0
[   79.890749][ T5986] loop0: detected capacity change from 0 to 8192
[   79.939805][ T5986] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   79.958745][ T1189] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.013928][ T5986] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   80.064807][ T5986] REISERFS (device loop0): using ordered data mode
[   80.089105][ T5986] reiserfs: using flush barriers
[   80.095739][ T5986] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   80.120453][ T5986] REISERFS (device loop0): checking transaction log (loop0)
[   80.188758][ T1189] usb 4-1: Using ep0 maxpacket: 32
[   80.207049][ T1189] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[   80.229716][ T1189] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   80.267401][ T1189] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   80.296893][ T1189] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   80.331975][ T5986] REISERFS (device loop0): Using tea hash to sort names
[   80.336691][ T1189] usb 4-1: config 0 interface 0 has no altsetting 0
[   80.359956][ T5986] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   80.386471][ T1189] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   80.401394][ T1189] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   80.429297][ T1189] usb 4-1: Product: syz
[   80.433787][ T1189] usb 4-1: Manufacturer: syz
[   80.444026][ T1189] usb 4-1: SerialNumber: syz
[   80.456673][ T1189] usb 4-1: config 0 descriptor??
[   80.467547][ T1189] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   80.486300][ T1189] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   80.794599][   T27] usb 4-1: USB disconnect, device number 2
[   80.834506][   T27] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[   80.847873][ T5990] loop1: detected capacity change from 0 to 64
[   80.948053][ T5990] syz.1.62: attempt to access beyond end of device
[   80.948053][ T5990] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64
[   80.976393][ T5990] Buffer I/O error on dev loop1, logical block 134217734, async page read
[   81.023777][ T5990] Trying to free block not in datazone
[   81.362863][ T5998] loop2: detected capacity change from 0 to 4096
[   81.853723][    T8] cfg80211: failed to load regulatory.db
[   82.247077][ T6012] loop3: detected capacity change from 0 to 2048
[   82.296246][ T6012] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   82.340185][ T6012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   82.346808][ T6018] loop2: detected capacity change from 0 to 1024
[   82.421541][ T6018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.538459][   T28] audit: type=1800 audit(1775132823.033:4): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.74" name="file1" dev="loop2" ino=15 res=0 errno=0
[   82.661153][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.717619][ T6016] loop0: detected capacity change from 0 to 32768
[   82.781140][ T6016] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   82.851560][ T6029] loop3: detected capacity change from 0 to 512
[   82.939253][ T6016] XFS (loop0): Ending clean mount
[   83.002050][ T6016] XFS (loop0): Quotacheck needed: Please wait.
[   83.061558][ T6038] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.109977][ T6029] EXT4-fs (loop3): Test dummy encryption mode enabled
[   83.112431][ T6016] XFS (loop0): Quotacheck: Done.
[   83.116803][ T6029] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   83.148579][ T6029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   83.211087][ T6029] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #17: comm syz.3.77: corrupted in-inode xattr: invalid ea_ino
[   83.303469][ T6029] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.77: couldn't read orphan inode 17 (err -117)
[   83.337175][ T5767] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   83.352515][ T6029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.387694][ T6042] loop2: detected capacity change from 0 to 1024
[   83.444119][ T6042] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   83.444774][ T6029] EXT4-fs (loop3): shut down requested (1)
[   83.463705][ T6042] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   83.477277][ T6042] EXT4-fs (loop2): orphan cleanup on readonly fs
[   83.498331][ T6042] Quota error (device loop2): v2_read_file_info: Can't read info structure
[   83.508774][ T6042] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[   83.523916][ T6044] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #2: comm syz.3.77: directory missing '..'
[   83.535612][ T6042] EXT4-fs (loop2): Cannot turn on quotas: error -5
[   83.563182][ T6042] EXT4-fs (loop2): 1 truncate cleaned up
[   83.570253][ T6042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   83.662147][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.785915][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.029517][ T6056] netlink: 48 bytes leftover after parsing attributes in process `syz.2.85'.
[   84.786235][ T6060] loop0: detected capacity change from 0 to 32768
[   84.838955][ T6060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.86 (6060)
[   84.932282][ T6060] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.953803][ T6060] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   84.975820][ T6060] BTRFS info (device loop0): using free space tree
[   85.088682][ T6060] BTRFS info (device loop0): enabling ssd optimizations
[   85.113009][ T6060] BTRFS info (device loop0): auto enabling async discard
[   85.310732][ T6099] loop1: detected capacity change from 0 to 8192
[   85.348283][ T5767] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   85.366136][ T6099] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   85.433421][ T6099] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   85.488990][ T6099] REISERFS (device loop1): using ordered data mode
[   85.496383][ T6099] reiserfs: using flush barriers
[   85.561606][ T6099] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   85.593210][ T6099] REISERFS (device loop1): checking transaction log (loop1)
[   85.768201][ T6081] loop2: detected capacity change from 0 to 40427
[   85.783411][ T6099] REISERFS (device loop1): Using tea hash to sort names
[   85.819138][ T6081] F2FS-fs (loop2): Small segment_count (9 < 1 * 24)
[   85.820492][ T6099] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   85.859073][ T6081] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   85.978697][ T6081] F2FS-fs (loop2): Found nat_bits in checkpoint
[   86.152215][ T6107] loop0: detected capacity change from 0 to 128
[   86.162431][ T6081] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   86.173682][ T6081] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   86.188038][ T6107] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   86.217623][ T6107] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   86.241275][   T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   86.277266][   T28] audit: type=1800 audit(1775132826.763:5): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.96" name="bus" dev="loop2" ino=10 res=0 errno=0
[   86.358093][ T6107] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes
[   86.445444][ T5764] syz-executor: attempt to access beyond end of device
[   86.445444][ T5764] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   86.467943][ T5767] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.483738][ T5764] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   86.508678][   T27] usb 4-1: Using ep0 maxpacket: 16
[   86.522044][   T27] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[   86.537010][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.557692][   T27] usb 4-1: Product: syz
[   86.579870][   T27] usb 4-1: Manufacturer: syz
[   86.584510][   T27] usb 4-1: SerialNumber: syz
[   86.834375][   T27] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[   86.862126][   T27] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   86.888109][   T27] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[   86.902993][   T27] usb 4-1: media controller created
[   86.959509][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.148506][ T5821] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   87.168631][ T6118] loop2: detected capacity change from 0 to 256
[   87.230740][   T27] zl10353_read_register: readreg error (reg=127, ret==-110)
[   87.350781][ T5821] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[   87.351904][   T27] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5
[   87.371267][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.393497][ T5821] usb 2-1: config 0 descriptor??
[   87.404829][   T27] usb 4-1: USB disconnect, device number 3
[   87.413083][ T6120] loop2: detected capacity change from 0 to 512
[   87.439370][ T5821] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[   87.456498][ T6114] loop0: detected capacity change from 0 to 40427
[   87.460321][ T6120] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   87.468126][ T6114] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[   87.489732][ T6114] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   87.511794][ T6114] F2FS-fs (loop0): invalid crc value
[   87.526726][ T6120] EXT4-fs (loop2): orphan cleanup on readonly fs
[   87.548196][ T6120] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.105: Block bitmap for bg 0 marked uninitialized
[   87.563921][ T6114] F2FS-fs (loop0): Found nat_bits in checkpoint
[   87.608793][ T6120] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[   87.640401][ T5821] gp8psk: usb in 128 operation failed.
[   87.642695][ T6120] EXT4-fs (loop2): 1 orphan inode deleted
[   87.665502][ T6120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   87.702308][ T6114] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   87.718999][ T6114] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   87.736782][ T6120] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[   87.793172][ T6120] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   87.812796][ T6120] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.105: Block bitmap for bg 0 marked uninitialized
[   87.831469][ T6120] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.105: Block bitmap for bg 0 marked uninitialized
[   87.852357][ T6120] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.105: Block bitmap for bg 0 marked uninitialized
[   87.869493][ T6120] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.105: Block bitmap for bg 0 marked uninitialized
[   87.870992][ T5767] syz-executor: attempt to access beyond end of device
[   87.870992][ T5767] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.897562][ T5821] gp8psk: FW Version = 161.137.19 (0xa18913)  Build 2124/73/37
[   87.906134][ T5767] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   87.937859][ T5764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.063908][ T6127] loop2: detected capacity change from 0 to 128
[   88.101161][ T5821] gp8psk: usb in 149 operation failed.
[   88.106670][ T5821] gp8psk: failed to get FPGA version
[   88.125571][ T5821] gp8psk: usb in 138 operation failed.
[   88.138525][ T5821] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   88.155105][ T5821] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[   88.167076][ T5821] usb 2-1: USB disconnect, device number 2
[   88.190459][ T5756] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   88.391235][ T6133] loop2: detected capacity change from 0 to 1024
[   88.542446][ T6135] "syz.3.119" (6135) uses obsolete ecb(arc4) skcipher
[   88.761244][ T6137] loop2: detected capacity change from 0 to 8192
[   88.787469][ T6137] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   88.801057][ T6137] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   88.810538][ T6137] REISERFS (device loop2): using ordered data mode
[   88.817123][ T6137] reiserfs: using flush barriers
[   88.828519][ T6137] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   88.852615][ T6137] REISERFS (device loop2): checking transaction log (loop2)
[   88.923639][ T6147] loop3: detected capacity change from 0 to 512
[   88.965360][ T6137] REISERFS (device loop2): Using tea hash to sort names
[   88.975279][ T6147] EXT4-fs: Ignoring removed oldalloc option
[   88.982266][ T6137] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   89.013701][ T6147] EXT4-fs (loop3): 1 truncate cleaned up
[   89.031870][ T6147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.348267][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.373042][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'.
[   89.452274][ T6156] loop0: detected capacity change from 0 to 256
[   89.460020][ T6156] exfat: Deprecated parameter 'namecase'
[   89.562618][ T6156] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   90.536172][ T6173] loop3: detected capacity change from 0 to 32768
[   90.585522][ T6173] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   90.618046][ T6178] loop2: detected capacity change from 0 to 32768
[   90.630117][ T6178] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.128 (6178)
[   90.670262][ T6178] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   90.688553][ T6178] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   90.707856][ T6178] BTRFS info (device loop2): using free space tree
[   90.876546][ T6200] loop1: detected capacity change from 0 to 8192
[   90.878795][ T6173] XFS (loop3): Ending clean mount
[   90.902971][ T6200] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   90.908542][ T6178] BTRFS info (device loop2): enabling ssd optimizations
[   90.931933][ T6200] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[   90.948938][ T6200] REISERFS (device loop1): using ordered data mode
[   90.958503][ T6178] BTRFS info (device loop2): auto enabling async discard
[   90.988576][ T6200] reiserfs: using flush barriers
[   91.009340][ T6200] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   91.057423][ T6200] REISERFS (device loop1): checking transaction log (loop1)
[   91.216022][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   91.261067][ T5764] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   91.281418][ T6200] REISERFS (device loop1): Using tea hash to sort names
[   91.300644][ T6200] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   91.427671][ T6180] F2FS-fs (loop0): Invalid SB checksum offset: 0
[   91.439727][ T6180] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[   91.492258][ T6180] F2FS-fs (loop0): invalid crc value
[   91.568988][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'.
[   91.890255][ T6180] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[   91.917336][ T6180] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   92.206669][ T5767] syz-executor: attempt to access beyond end of device
[   92.206669][ T5767] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   92.237069][ T5767] syz-executor: attempt to access beyond end of device
[   92.237069][ T5767] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   92.283864][ T5767] syz-executor: attempt to access beyond end of device
[   92.283864][ T5767] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   92.300054][ T5767] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   92.308125][ T6226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.346153][   T28] audit: type=1800 audit(1775132832.853:6): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.138" name="file2" dev="loop3" ino=16 res=0 errno=0
[   92.383040][ T6226] EXT4-fs warning (device loop3): ext4_group_add:1742: No reserved GDT blocks, can't resize
[   92.492551][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.051647][ T6234] set_capacity_and_notify: 2 callbacks suppressed
[   93.051662][ T6234] loop1: detected capacity change from 0 to 32768
[   93.072393][  T994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.328671][  T994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.512639][  T994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.647111][  T994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.881994][ T6243] loop3: detected capacity change from 0 to 32768
[   94.017547][ T6243] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   94.024063][ T6255] loop1: detected capacity change from 0 to 256
[   94.364219][ T6243] XFS (loop3): Ending clean mount
[   94.408772][ T6243] XFS (loop3): Quotacheck needed: Please wait.
[   94.523129][ T6243] XFS (loop3): Quotacheck: Done.
[   94.809797][ T5763] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.820896][ T5763] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.827082][ T6274] loop2: detected capacity change from 0 to 128
[   94.834573][ T5763] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.843837][ T5763] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.858593][ T5763] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   94.870222][ T5763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.899421][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   94.908528][ T1189] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   95.118588][ T1189] usb 2-1: Using ep0 maxpacket: 32
[   95.160284][ T1189] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[   95.188086][ T1189] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   95.215835][ T1189] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   95.257131][ T1189] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   95.313878][ T1189] usb 2-1: config 0 interface 0 has no altsetting 0
[   95.345042][ T1189] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   95.359799][ T1189] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   95.377152][ T1189] usb 2-1: Product: syz
[   95.381716][ T1189] usb 2-1: Manufacturer: syz
[   95.386373][ T1189] usb 2-1: SerialNumber: syz
[   95.398742][ T1189] usb 2-1: config 0 descriptor??
[   95.414177][ T1189] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   95.427872][ T1189] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   95.491364][ T6291] loop3: detected capacity change from 0 to 512
[   95.502076][ T6291] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   95.516519][ T6291] EXT4-fs (loop3): orphan cleanup on readonly fs
[   95.529940][ T6291] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.157: Block bitmap for bg 0 marked uninitialized
[   95.552631][ T6291] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem
[   95.602697][ T6291] EXT4-fs (loop3): 1 orphan inode deleted
[   95.652998][ T6291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   95.687444][   T27] usb 2-1: USB disconnect, device number 3
[   95.700330][   T27] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[   95.770799][ T6291] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   95.812676][ T6291] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   95.839489][ T6291] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.157: Block bitmap for bg 0 marked uninitialized
[   95.888900][ T6291] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.157: Block bitmap for bg 0 marked uninitialized
[   95.941257][ T6291] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.157: Block bitmap for bg 0 marked uninitialized
[   96.016199][ T6291] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.157: Block bitmap for bg 0 marked uninitialized
[   96.042476][ T6294] loop2: detected capacity change from 0 to 32768
[   96.192743][ T6305] find_entry called with index = 0
[   96.198126][ T6305] find_entry called with index = 0
[   96.227365][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.255358][ T6271] chnl_net:caif_netlink_parms(): no params data found
[   96.884829][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.950376][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.960788][ T6271] bridge_slave_0: entered allmulticast mode
[   96.970105][   T51] Bluetooth: hci2: command tx timeout
[   96.979944][ T6271] bridge_slave_0: entered promiscuous mode
[   97.005941][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.016486][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.030705][ T6271] bridge_slave_1: entered allmulticast mode
[   97.037395][ T6271] bridge_slave_1: entered promiscuous mode
[   97.051126][  T994] hsr_slave_0: left promiscuous mode
[   97.057582][  T994] hsr_slave_1: left promiscuous mode
[   97.064841][  T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.073169][  T994] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.081882][  T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.089894][  T994] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.097586][  T994] bridge_slave_1: left allmulticast mode
[   97.103478][  T994] bridge_slave_1: left promiscuous mode
[   97.110059][  T994] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.121940][  T994] bridge_slave_0: left allmulticast mode
[   97.127610][  T994] bridge_slave_0: left promiscuous mode
[   97.133831][  T994] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.160767][  T994] veth1_macvtap: left promiscuous mode
[   97.167087][  T994] veth0_macvtap: left promiscuous mode
[   97.172897][  T994] veth1_vlan: left promiscuous mode
[   97.178499][  T994] veth0_vlan: left promiscuous mode
[   97.723991][  T994] team0 (unregistering): Port device team_slave_1 removed
[   97.763140][  T994] team0 (unregistering): Port device team_slave_0 removed
[   97.801553][  T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   97.844518][  T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.162275][  T994] bond0 (unregistering): Released all slaves
[   98.285872][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.298846][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.350695][ T6271] team0: Port device team_slave_0 added
[   98.360283][ T6271] team0: Port device team_slave_1 added
[   98.394244][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.401347][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.437312][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.455567][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.462727][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.508183][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.584528][ T6271] hsr_slave_0: entered promiscuous mode
[   98.591319][ T6271] hsr_slave_1: entered promiscuous mode
[   98.598986][ T6271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.606674][ T6271] Cannot create hsr debugfs directory
[   98.906152][ T6271] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   98.916435][ T6271] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   98.929178][ T6271] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   98.947527][ T6271] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   99.049136][   T51] Bluetooth: hci2: command tx timeout
[   99.065458][ T6271] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.091992][ T6271] 8021q: adding VLAN 0 to HW filter on device team0
[   99.110678][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.117826][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.140530][  T994] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.147646][  T994] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.447182][ T6271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.775042][ T6271] veth0_vlan: entered promiscuous mode
[   99.790227][ T6271] veth1_vlan: entered promiscuous mode
[   99.819952][ T6271] veth0_macvtap: entered promiscuous mode
[   99.842560][ T6271] veth1_macvtap: entered promiscuous mode
[   99.877244][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.893994][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.904486][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.919801][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.931271][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.949751][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.961516][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.973778][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   99.985641][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.996489][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.010234][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.020113][ T6271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.031842][ T6271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.043358][ T6271] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.069370][ T6271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.078294][ T6271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.088447][ T6271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.101110][ T6271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.211257][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.228868][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.267686][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.283336][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.128782][   T51] Bluetooth: hci2: command tx timeout
[  101.226648][ T6412] loop1: detected capacity change from 0 to 512
[  101.299854][ T6412] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  101.367869][ T6412] EXT4-fs (loop1): orphan cleanup on readonly fs
[  101.427412][ T6412] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.167: Block bitmap for bg 0 marked uninitialized
[  101.518969][ T6412] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  101.573585][ T6412] EXT4-fs (loop1): 1 orphan inode deleted
[  101.604954][ T6412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  101.788735][ T6412] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  101.876652][ T6412] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  101.949007][ T6412] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.167: Block bitmap for bg 0 marked uninitialized
[  101.993849][ T6412] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.167: Block bitmap for bg 0 marked uninitialized
[  102.038380][    C0] sched: RT throttling activated
[  102.043992][ T6412] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.167: Block bitmap for bg 0 marked uninitialized
[  102.063889][ T6412] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:512: comm syz.1.167: Block bitmap for bg 0 marked uninitialized
[  102.089628][ T6410] loop2: detected capacity change from 0 to 131072
[  102.104340][ T6410] F2FS-fs (loop2): Wrong CP boundary, start(512) end(198144) blocks(1024)
[  102.112991][ T6410] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  102.134660][ T6410] F2FS-fs (loop2): invalid crc value
[  102.172121][ T6410] F2FS-fs (loop2): Found nat_bits in checkpoint
[  102.233099][ T6410] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  102.240306][ T6410] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  102.365206][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.596543][ T6431] loop3: detected capacity change from 0 to 2048
[  102.697289][ T6431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.791019][ T6434] loop1: detected capacity change from 0 to 4096
[  103.208937][   T51] Bluetooth: hci2: command tx timeout
[  103.459060][ T6453] mmap: syz.1.179 (6453) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  103.553278][ T6458] loop7: detected capacity change from 0 to 7
[  103.644573][ T6458] Dev loop7: unable to read RDB block 7
[  103.672281][ T3499] loop: Write error at byte offset 2, length 3584.
[  103.708677][    C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  103.718279][    C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  103.728791][ T6458]  loop7: unable to read partition table
[  103.734674][ T6458] loop7: partition table beyond EOD, truncated
[  103.769370][ T6458] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  104.297908][ T6482] loop4: detected capacity change from 0 to 64
[  104.360833][ T6482] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  104.930663][ T6466] loop1: detected capacity change from 0 to 40427
[  104.980336][ T6466] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff
[  105.039872][ T6466] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4
[  105.094446][ T6466] F2FS-fs (loop1): invalid crc value
[  105.165825][ T6466] F2FS-fs (loop1): Found nat_bits in checkpoint
[  105.204705][ T6503] warning: `syz.4.193' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  105.304633][ T6466] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[  105.335999][ T6505] loop2: detected capacity change from 0 to 1024
[  105.434739][ T6466] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  105.697904][ T6466] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70
[  105.853230][ T6505] hfsplus: b-tree write err: -5, ino 3
[  105.908839][ T6466] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x108/0x1030
[  106.146584][ T5761] syz-executor: attempt to access beyond end of device
[  106.146584][ T5761] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  106.193974][   T11] hfsplus: bad catalog file entry
[  106.219958][ T5761] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  106.408516][ T6508] loop4: detected capacity change from 0 to 131072
[  106.447931][ T6508] F2FS-fs (loop4): invalid crc value
[  106.486889][ T6508] F2FS-fs (loop4): Found nat_bits in checkpoint
[  106.533950][ T6508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  106.564429][ T6508] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 6, max: 36
[  106.586697][ T6517] loop2: detected capacity change from 0 to 2048
[  106.693659][ T6517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.483424][ T6546] program syz.1.205 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  107.957555][ T6567] Bluetooth: MGMT ver 1.22
[  108.272744][ T6575] program syz.4.217 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.512495][ T6566] loop2: detected capacity change from 0 to 40427
[  108.538433][ T6566] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  108.578534][ T6566] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  108.628770][ T6566] F2FS-fs (loop2): invalid crc value
[  108.652508][ T6566] F2FS-fs (loop2): Found nat_bits in checkpoint
[  108.813851][ T6566] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  108.829560][ T6566] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  108.954163][ T6589] loop1: detected capacity change from 0 to 512
[  109.005214][ T6589] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.222: invalid indirect mapped block 10 (level 1)
[  109.045770][ T6589] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.222: invalid indirect mapped block 8 (level 1)
[  109.132464][ T6589] EXT4-fs (loop1): 1 truncate cleaned up
[  109.171953][ T6589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.176419][ T6578] loop3: detected capacity change from 0 to 32768
[  109.221486][ T6578] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  109.304021][ T5764] syz-executor: attempt to access beyond end of device
[  109.304021][ T5764] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  109.377602][ T5764] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  109.435659][ T6578] XFS (loop3): Ending clean mount
[  109.476425][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.494402][ T6578] XFS (loop3): Quotacheck needed: Please wait.
[  109.620817][ T6578] XFS (loop3): Quotacheck: Done.
[  109.671490][ T6609] loop1: detected capacity change from 0 to 128
[  109.703253][ T6609] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  109.751072][ T6609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.822144][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  110.078968][ T6617] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  110.308534][   T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  110.498453][   T27] usb 3-1: Using ep0 maxpacket: 32
[  110.511993][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.532444][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.560620][   T27] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  110.584862][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.604356][   T27] usb 3-1: config 0 descriptor??
[  110.643306][   T27] hub 3-1:0.0: USB hub found
[  110.789681][ T6619] loop4: detected capacity change from 0 to 40427
[  110.802878][ T6619] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  110.824610][ T6619] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  110.843578][ T6619] F2FS-fs (loop4): Image doesn't support compression
[  110.864179][ T6619] F2FS-fs (loop4): invalid crc value
[  110.898277][   T27] hub 3-1:0.0: 1 port detected
[  110.909695][ T6619] F2FS-fs (loop4): Found nat_bits in checkpoint
[  111.034748][ T6619] F2FS-fs (loop4): Start checkpoint disabled!
[  111.060559][ T6619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  111.163283][ T6619] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[  111.313345][   T27] usb 3-1: USB disconnect, device number 2
[  111.330745][   T11] kworker/u4:0: attempt to access beyond end of device
[  111.330745][   T11] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  111.383415][   T11] F2FS-fs (loop4): Remounting filesystem read-only
[  111.397390][   T11] F2FS-fs (loop4): Remounting filesystem read-only
[  111.428554][   T11] F2FS-fs (loop4): Remounting filesystem read-only
[  111.637002][ T6631] loop3: detected capacity change from 0 to 32768
[  111.716528][ T6631] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  111.796958][ T6641] loop4: detected capacity change from 0 to 512
[  111.878140][ T6641] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  111.908783][ T6631] XFS (loop3): Ending clean mount
[  111.971291][ T6641] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  112.025896][ T6641] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  112.088620][ T6641] System zones: 0-2, 18-18, 34-35
[  112.111062][ T6641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.208826][ T6631] syz.3.234 (6631) used greatest stack depth: 20712 bytes left
[  112.256289][ T6641] fscrypt (loop4, inode 12): Error -61 getting encryption context
[  112.297089][ T5772] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  112.343864][ T6271] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.729652][ T6668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.245'.
[  113.937311][ T6729] loop3: detected capacity change from 0 to 256
[  114.202568][ T6735] program syz.2.267 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.410926][ T6742] program syz.2.270 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.411626][    T8] IPVS: starting estimator thread 0...
[  114.529540][ T6743] IPVS: using max 24 ests per chain, 57600 per kthread
[  114.722727][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv1
[  114.757031][ T6753] team0: Port device batadv1 added
[  115.358002][ T6784] loop1: detected capacity change from 0 to 128
[  115.472752][ T6784] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  115.497938][ T6784] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  115.798830][ T5761] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.981712][ T6803] loop4: detected capacity change from 0 to 164
[  116.066797][ T6803] rock: directory entry would overflow storage
[  116.080186][ T6803] rock: sig=0x5252, size=5, remaining=3
[  116.441394][ T6814] sit0: entered promiscuous mode
[  116.468264][ T6814] netlink: 'syz.2.292': attribute type 1 has an invalid length.
[  116.528424][ T6814] netlink: 1 bytes leftover after parsing attributes in process `syz.2.292'.
[  116.902933][ T6833] loop2: detected capacity change from 0 to 16
[  116.957354][ T6833] erofs: (device loop2): mounted with root inode @ nid 36.
[  117.026060][ T6833] syz.2.299: attempt to access beyond end of device
[  117.026060][ T6833] loop2: rw=524288, sector=16, nr_sectors = 32 limit=16
[  117.062001][ T6833] syz.2.299: attempt to access beyond end of device
[  117.062001][ T6833] loop2: rw=524288, sector=8, nr_sectors = 32 limit=16
[  117.130006][ T6833] syz.2.299: attempt to access beyond end of device
[  117.130006][ T6833] loop2: rw=0, sector=8, nr_sectors = 32 limit=16
[  117.228114][ T6843] loop3: detected capacity change from 0 to 256
[  117.237475][ T5764] BUG: Bad page state in process syz-executor  pfn:60430
[  117.245427][ T5764] page:ffffea0001810c00 refcount:0 mapcount:0 mapping:ffff88805ce207c8 index:0x2 pfn:0x60430
[  117.255895][ T5764] aops:z_erofs_cache_aops ino:0
[  117.260897][ T5764] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  117.268723][ T5764] page_type: 0xffffffff()
[  117.273087][ T5764] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805ce207c8
[  117.282073][ T5764] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000
[  117.290985][ T5764] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  117.298587][ T5764] page_owner tracks the page as allocated
[  117.304715][ T5764] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6833, tgid 6830 (syz.2.299), ts 117025534159, free_ts 116977685946
[  117.326875][ T5764]  post_alloc_hook+0x1c1/0x200
[  117.332161][ T5764]  get_page_from_freelist+0x1951/0x19e0
[  117.338849][ T5764]  __alloc_pages+0x1f0/0x460
[  117.343490][ T5764]  z_erofs_do_read_page+0x2181/0x36b0
[  117.349157][ T5764]  z_erofs_readahead+0x88b/0xda0
[  117.354148][ T5764]  read_pages+0x189/0x850
[  117.358730][ T5764]  page_cache_ra_unbounded+0x68a/0x770
[  117.364222][ T5764]  force_page_cache_ra+0x2c1/0x320
[  117.369691][ T5764]  generic_fadvise+0x47e/0x780
[  117.374475][ T5764]  __x64_sys_fadvise64+0x140/0x180
[  117.379659][ T5764]  do_syscall_64+0x55/0xa0
[  117.384273][ T5764]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  117.390265][ T5764] page last free stack trace:
[  117.394950][ T5764]  free_unref_page_prepare+0x7b2/0x8c0
[  117.400514][ T5764]  free_unref_page_list+0xbe/0x860
[  117.405749][ T5764]  release_pages+0x1f7a/0x2200
[  117.410796][ T5764]  tlb_flush_mmu+0x379/0x510
[  117.415419][ T5764]  tlb_finish_mmu+0xf9/0x220
[  117.420092][ T5764]  exit_mmap+0x428/0xb90
[  117.424392][ T5764]  __mmput+0x118/0x3c0
[  117.428745][ T5764]  exit_mm+0x1f2/0x2c0
[  117.433206][ T5764]  do_exit+0x8dd/0x2460
[  117.437400][ T5764]  do_group_exit+0x21b/0x2d0
[  117.442892][ T5764]  get_signal+0x12fc/0x13f0
[  117.447561][ T5764]  arch_do_signal_or_restart+0xc2/0x800
[  117.453406][ T5764]  exit_to_user_mode_loop+0x70/0x110
[  117.458770][ T5764]  exit_to_user_mode_prepare+0xee/0x180
[  117.464364][ T5764]  syscall_exit_to_user_mode+0x1a/0x50
[  117.469925][ T5764]  do_syscall_64+0x61/0xa0
[  117.474387][ T5764] Modules linked in:
[  117.478320][ T5764] CPU: 0 PID: 5764 Comm: syz-executor Not tainted syzkaller #0
[  117.485889][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  117.496239][ T5764] Call Trace:
[  117.499547][ T5764]  <TASK>
[  117.502505][ T5764]  dump_stack_lvl+0x18c/0x250
[  117.507222][ T5764]  ? show_regs_print_info+0x20/0x20
[  117.512432][ T5764]  ? swiotlb_print_info+0x70/0x70
[  117.517492][ T5764]  bad_page+0x14b/0x170
[  117.522250][ T5764]  free_unref_page_prepare+0x85f/0x8c0
[  117.527719][ T5764]  free_unref_page+0x32/0x2e0
[  117.532489][ T5764]  ? __folio_put+0xef/0x210
[  117.537023][ T5764]  erofs_try_to_free_all_cached_pages+0x295/0x5f0
[  117.543482][ T5764]  erofs_shrink_workstation+0x11f/0x290
[  117.549054][ T5764]  ? erofs_shrinker_unregister+0x170/0x170
[  117.554900][ T5764]  ? io_schedule+0xd0/0xd0
[  117.559326][ T5764]  ? kobject_put+0x428/0x460
[  117.563937][ T5764]  erofs_shrinker_unregister+0x5d/0x170
[  117.569498][ T5764]  erofs_put_super+0x4e/0x150
[  117.574174][ T5764]  ? erofs_free_inode+0xb0/0xb0
[  117.579018][ T5764]  generic_shutdown_super+0x134/0x2b0
[  117.584379][ T5764]  kill_block_super+0x44/0x90
[  117.589044][ T5764]  erofs_kill_sb+0x4c/0x140
[  117.593537][ T5764]  deactivate_locked_super+0x97/0x100
[  117.598900][ T5764]  cleanup_mnt+0x43b/0x4d0
[  117.603308][ T5764]  task_work_run+0x1d4/0x260
[  117.607899][ T5764]  ? task_work_cancel+0x220/0x220
[  117.613012][ T5764]  ? exit_to_user_mode_loop+0x3b/0x110
[  117.618494][ T5764]  exit_to_user_mode_loop+0xe6/0x110
[  117.624068][ T5764]  exit_to_user_mode_prepare+0xee/0x180
[  117.630138][ T5764]  syscall_exit_to_user_mode+0x1a/0x50
[  117.635820][ T5764]  do_syscall_64+0x61/0xa0
[  117.640677][ T5764]  ? clear_bhb_loop+0x40/0x90
[  117.645354][ T5764]  ? clear_bhb_loop+0x40/0x90
[  117.650121][ T5764]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  117.656099][ T5764] RIP: 0033:0x7f1f72b9da57
[  117.660785][ T5764] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  117.681210][ T5764] RSP: 002b:00007ffdac464498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  117.689745][ T5764] RAX: 0000000000000000 RBX: 00007f1f72c32048 RCX: 00007f1f72b9da57
[  117.697745][ T5764] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdac464550
[  117.705728][ T5764] RBP: 00007ffdac464550 R08: 00007ffdac465550 R09: 00000000ffffffff
[  117.713695][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdac4655e0
[  117.721743][ T5764] R13: 00007f1f72c32048 R14: 000000000001c9a3 R15: 00007ffdac465620
[  117.729728][ T5764]  </TASK>
[  117.734138][ T5764] Disabling lock debugging due to kernel taint
[  117.740482][ T5764] BUG: Bad page state in process syz-executor  pfn:2cd24
[  117.748188][ T5764] page:ffffea0000b34900 refcount:0 mapcount:0 mapping:ffff88805ce207c8 index:0x3 pfn:0x2cd24
[  117.758521][ T5764] aops:z_erofs_cache_aops ino:0
[  117.763382][ T5764] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  117.771168][ T5764] page_type: 0xffffffff()
[  117.775501][ T5764] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805ce207c8
[  117.784220][ T5764] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000
[  117.792829][ T5764] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  117.800149][ T5764] page_owner tracks the page as allocated
[  117.806148][ T5764] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6833, tgid 6830 (syz.2.299), ts 117025549456, free_ts 116977673408
[  117.828233][ T5764]  post_alloc_hook+0x1c1/0x200
[  117.833165][ T5764]  get_page_from_freelist+0x1951/0x19e0
[  117.838754][ T5764]  __alloc_pages+0x1f0/0x460
[  117.843378][ T5764]  z_erofs_do_read_page+0x2181/0x36b0
[  117.849569][ T5764]  z_erofs_readahead+0x88b/0xda0
[  117.854533][ T5764]  read_pages+0x189/0x850
[  117.859034][ T5764]  page_cache_ra_unbounded+0x68a/0x770
[  117.864526][ T5764]  force_page_cache_ra+0x2c1/0x320
[  117.869748][ T5764]  generic_fadvise+0x47e/0x780
[  117.874537][ T5764]  __x64_sys_fadvise64+0x140/0x180
[  117.879923][ T5764]  do_syscall_64+0x55/0xa0
[  117.884364][ T5764]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  117.890364][ T5764] page last free stack trace:
[  117.895041][ T5764]  free_unref_page_prepare+0x7b2/0x8c0
[  117.900570][ T5764]  free_unref_page_list+0xbe/0x860
[  117.905710][ T5764]  release_pages+0x1f7a/0x2200
[  117.910640][ T5764]  tlb_flush_mmu+0x379/0x510
[  117.915258][ T5764]  tlb_finish_mmu+0xf9/0x220
[  117.919911][ T5764]  exit_mmap+0x428/0xb90
[  117.924169][ T5764]  __mmput+0x118/0x3c0
[  117.928245][ T5764]  exit_mm+0x1f2/0x2c0
[  117.932385][ T5764]  do_exit+0x8dd/0x2460
[  117.936561][ T5764]  do_group_exit+0x21b/0x2d0
[  117.941237][ T5764]  get_signal+0x12fc/0x13f0
[  117.945847][ T5764]  arch_do_signal_or_restart+0xc2/0x800
[  117.952483][ T5764]  exit_to_user_mode_loop+0x70/0x110
[  117.957819][ T5764]  exit_to_user_mode_prepare+0xee/0x180
[  117.963524][ T5764]  syscall_exit_to_user_mode+0x1a/0x50
[  117.969116][ T5764]  do_syscall_64+0x61/0xa0
[  117.973635][ T5764] Modules linked in:
[  117.977537][ T5764] CPU: 0 PID: 5764 Comm: syz-executor Tainted: G    B              syzkaller #0
[  117.986583][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  117.996659][ T5764] Call Trace:
[  117.999950][ T5764]  <TASK>
[  118.002886][ T5764]  dump_stack_lvl+0x18c/0x250
[  118.007586][ T5764]  ? show_regs_print_info+0x20/0x20
[  118.012803][ T5764]  ? swiotlb_print_info+0x70/0x70
[  118.017852][ T5764]  bad_page+0x14b/0x170
[  118.022041][ T5764]  free_unref_page_prepare+0x85f/0x8c0
[  118.027523][ T5764]  free_unref_page+0x32/0x2e0
[  118.032367][ T5764]  ? __folio_put+0xef/0x210
[  118.036891][ T5764]  erofs_try_to_free_all_cached_pages+0x295/0x5f0
[  118.043340][ T5764]  erofs_shrink_workstation+0x11f/0x290
[  118.048907][ T5764]  ? erofs_shrinker_unregister+0x170/0x170
[  118.049938][ T6845] loop4: detected capacity change from 0 to 40427
[  118.054708][ T5764]  ? io_schedule+0xd0/0xd0
[  118.054732][ T5764]  ? kobject_put+0x428/0x460
[  118.054749][ T5764]  erofs_shrinker_unregister+0x5d/0x170
[  118.054767][ T5764]  erofs_put_super+0x4e/0x150
[  118.054787][ T5764]  ? erofs_free_inode+0xb0/0xb0
[  118.054807][ T5764]  generic_shutdown_super+0x134/0x2b0
[  118.054824][ T5764]  kill_block_super+0x44/0x90
[  118.054838][ T5764]  erofs_kill_sb+0x4c/0x140
[  118.054852][ T5764]  deactivate_locked_super+0x97/0x100
[  118.054868][ T5764]  cleanup_mnt+0x43b/0x4d0
[  118.054886][ T5764]  task_work_run+0x1d4/0x260
[  118.054908][ T5764]  ? task_work_cancel+0x220/0x220
[  118.054929][ T5764]  ? exit_to_user_mode_loop+0x3b/0x110
[  118.054951][ T5764]  exit_to_user_mode_loop+0xe6/0x110
[  118.054970][ T5764]  exit_to_user_mode_prepare+0xee/0x180
[  118.054990][ T5764]  syscall_exit_to_user_mode+0x1a/0x50
[  118.055008][ T5764]  do_syscall_64+0x61/0xa0
[  118.055028][ T5764]  ? clear_bhb_loop+0x40/0x90
[  118.055045][ T5764]  ? clear_bhb_loop+0x40/0x90
[  118.055062][ T5764]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  118.055079][ T5764] RIP: 0033:0x7f1f72b9da57
[  118.055091][ T5764] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  118.055101][ T5764] RSP: 002b:00007ffdac464498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  118.055116][ T5764] RAX: 0000000000000000 RBX: 00007f1f72c32048 RCX: 00007f1f72b9da57
[  118.055125][ T5764] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdac464550
[  118.055132][ T5764] RBP: 00007ffdac464550 R08: 00007ffdac465550 R09: 00000000ffffffff
[  118.055141][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdac4655e0
[  118.055150][ T5764] R13: 00007f1f72c32048 R14: 000000000001c9a3 R15: 00007ffdac465620
[  118.055165][ T5764]  </TASK>
[  118.055855][ T5764] BUG: Bad page state in process syz-executor  pfn:2f427
[  118.111417][ T6845] F2FS-fs (loop4): invalid crc value
[  118.115024][ T5764] page:ffffea0000bd09c0 refcount:0 mapcount:0 mapping:ffff88805ce207c8 index:0x4 pfn:0x2f427
[  118.115047][ T5764] aops:z_erofs_cache_aops ino:0
[  118.115066][ T5764] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  118.275199][ T5764] page_type: 0xffffffff()
[  118.279621][ T5764] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805ce207c8
[  118.288314][ T5764] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000
[  118.296967][ T5764] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  118.304494][ T5764] page_owner tracks the page as allocated
[  118.310549][ T5764] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6833, tgid 6830 (syz.2.299), ts 117025564488, free_ts 116977660948
[  118.332914][ T5764]  post_alloc_hook+0x1c1/0x200
[  118.337712][ T5764]  get_page_from_freelist+0x1951/0x19e0
[  118.343430][ T5764]  __alloc_pages+0x1f0/0x460
[  118.348783][ T5764]  z_erofs_do_read_page+0x2181/0x36b0
[  118.354353][ T5764]  z_erofs_readahead+0x88b/0xda0
[  118.359793][ T5764]  read_pages+0x189/0x850
[  118.363444][ T6845] F2FS-fs (loop4): Found nat_bits in checkpoint
[  118.364130][ T5764]  page_cache_ra_unbounded+0x68a/0x770
[  118.364153][ T5764]  force_page_cache_ra+0x2c1/0x320
[  118.381535][ T5764]  generic_fadvise+0x47e/0x780
[  118.386321][ T5764]  __x64_sys_fadvise64+0x140/0x180
[  118.391502][ T5764]  do_syscall_64+0x55/0xa0
[  118.396117][ T5764]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  118.402164][ T5764] page last free stack trace:
[  118.406836][ T5764]  free_unref_page_prepare+0x7b2/0x8c0
[  118.412410][ T5764]  free_unref_page_list+0xbe/0x860
[  118.417729][ T5764]  release_pages+0x1f7a/0x2200
[  118.422590][ T5764]  tlb_flush_mmu+0x379/0x510
[  118.427380][ T5764]  tlb_finish_mmu+0xf9/0x220
[  118.432499][ T5764]  exit_mmap+0x428/0xb90
[  118.437122][ T5764]  __mmput+0x118/0x3c0
[  118.441627][ T5764]  exit_mm+0x1f2/0x2c0
[  118.445749][ T5764]  do_exit+0x8dd/0x2460
[  118.450366][ T5764]  do_group_exit+0x21b/0x2d0
[  118.455133][ T5764]  get_signal+0x12fc/0x13f0
[  118.460071][ T5764]  arch_do_signal_or_restart+0xc2/0x800
[  118.464526][ T6845] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  118.467301][ T5764]  exit_to_user_mode_loop+0x70/0x110
[  118.479592][ T5764]  exit_to_user_mode_prepare+0xee/0x180
[  118.485283][ T5764]  syscall_exit_to_user_mode+0x1a/0x50
[  118.490828][ T5764]  do_syscall_64+0x61/0xa0
[  118.495365][ T5764] Modules linked in:
[  118.499344][ T5764] CPU: 0 PID: 5764 Comm: syz-executor Tainted: G    B              syzkaller #0
[  118.508544][ T5764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  118.518627][ T5764] Call Trace:
[  118.521896][ T5764]  <TASK>
[  118.524814][ T5764]  dump_stack_lvl+0x18c/0x250
[  118.529487][ T5764]  ? show_regs_print_info+0x20/0x20
[  118.534852][ T5764]  ? swiotlb_print_info+0x70/0x70
[  118.539870][ T5764]  bad_page+0x14b/0x170
[  118.544013][ T5764]  free_unref_page_prepare+0x85f/0x8c0
[  118.549485][ T5764]  free_unref_page+0x32/0x2e0
[  118.554148][ T5764]  ? __folio_put+0xef/0x210
[  118.558651][ T5764]  erofs_try_to_free_all_cached_pages+0x295/0x5f0
[  118.565067][ T5764]  erofs_shrink_workstation+0x11f/0x290
[  118.570609][ T5764]  ? erofs_shrinker_unregister+0x170/0x170
[  118.576406][ T5764]  ? io_schedule+0xd0/0xd0
[  118.580820][ T5764]  ? kobject_put+0x428/0x460
[  118.585395][ T5764]  erofs_shrinker_unregister+0x5d/0x170
[  118.590938][ T5764]  erofs_put_super+0x4e/0x150
[  118.595620][ T5764]  ? erofs_free_inode+0xb0/0xb0
[  118.600475][ T5764]  generic_shutdown_super+0x134/0x2b0
[  118.605860][ T5764]  kill_block_super+0x44/0x90
[  118.610537][ T5764]  erofs_kill_sb+0x4c/0x140
[  118.615037][ T5764]  deactivate_locked_super+0x97/0x100
[  118.620395][ T5764]  cleanup_mnt+0x43b/0x4d0
[  118.624805][ T5764]  task_work_run+0x1d4/0x260
[  118.629390][ T5764]  ? task_work_cancel+0x220/0x220
[  118.634401][ T5764]  ? exit_to_user_mode_loop+0x3b/0x110
[  118.639944][ T5764]  exit_to_user_mode_loop+0xe6/0x110
[  118.645214][ T5764]  exit_to_user_mode_prepare+0xee/0x180
[  118.650746][ T5764]  syscall_exit_to_user_mode+0x1a/0x50
[  118.656206][ T5764]  do_syscall_64+0x61/0xa0
[  118.660612][ T5764]  ? clear_bhb_loop+0x40/0x90
[  118.665405][ T5764]  ? clear_bhb_loop+0x40/0x90
[  118.670170][ T5764]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  118.676138][ T5764] RIP: 0033:0x7f1f72b9da57
[  118.680549][ T5764] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  118.700229][ T5764] RSP: 002b:00007ffdac464498 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  118.708651][ T5764] RAX: 0000000000000000 RBX: 00007f1f72c32048 RCX: 00007f1f72b9da57
[  118.716603][ T5764] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdac464550
[  118.724554][ T5764] RBP: 00007ffdac464550 R08: 00007ffdac465550 R09: 00000000ffffffff
[  118.732515][ T5764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdac4655e0
[  118.740516][ T5764] R13: 00007f1f72c32048 R14: 000000000001c9a3 R15: 00007ffdac465620
[  118.748560][ T5764]  </TASK>