last executing test programs:

3.389554405s ago: executing program 3 (id=991):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084149, &(0x7f0000000080))

3.327976041s ago: executing program 3 (id=993):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x80000000004)
write(r1, &(0x7f0000000000)="29000000140005b7ff000000040860eb0101cd42182f575923cc79b6ff00159f02c26ed638eeb73825", 0x29)

3.203897362s ago: executing program 3 (id=996):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0xe4, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x0, "c6"}, {0x5}, {0xd}, [@acm={0x4}, @mbim={0xc}, @mbim_extended={0x8}, @obex={0x5}, @acm={0x4}, @mdlm_detail={0x75, 0x24, 0x13, 0x0, "287d3c123aeac60053ad4e4102427a612f936b4ea2a0e23548bc0312c6915e9af7d8d43b7ac0ff735159d7d3b56e01866918ee059015e2540e92b262d27aec6ed0825a5339ad2379f84194f43f7cab1087bcfdfe94a96e015813e5689aaffd148dadf256c93cf46cf8e29ca178c8d53f67"}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.531575735s ago: executing program 4 (id=1004):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000700)={0x0, 0x8ac, 0x0, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

2.308444106s ago: executing program 0 (id=1006):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0x184, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3d, 0xe, {{{}, {}, @broadcast, @device_a, @random="8e742f592bf6"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0xeb, 0x3a, 0xb0}}, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x8, 0x9, 0x11, 0x5}}}}, @NL80211_ATTR_BEACON_TAIL={0x10e, 0xf, [@perr={0x84, 0x108, {0x1, 0x10, [{{}, @device_b, 0x7c, @void, 0x7b}, {{}, @device_a, 0x90, @void, 0x41}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x30}, {{0x0, 0x1}, @device_a, 0x4, @value=@device_b, 0x15}, {{}, @device_a, 0x6, @void, 0x3e}, {{}, @broadcast, 0x38000000, @void, 0x1d}, {{0x0, 0x1}, @broadcast, 0x7, @value, 0x3c}, {{}, @device_a, 0x0, @void, 0x26}, {{0x0, 0x1}, @device_b, 0x8ec, @value, 0xb}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x40}, {{0x0, 0x1}, @device_a, 0x400, @value=@device_b, 0x1e}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x33}, {{}, @device_a, 0xdfb421f, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@device_b, 0xa}, {{}, @device_a, 0x8, @void, 0x30}]}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x184}}, 0xc094)

2.231103493s ago: executing program 0 (id=1009):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xf, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee81")

2.15476915s ago: executing program 1 (id=1011):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040))

2.099663425s ago: executing program 0 (id=1012):
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x8, 0xfc00, 0xfffb, 0x1a, "8979d1fe061eb365"})
write$UHID_INPUT(r1, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006)

2.052397449s ago: executing program 1 (id=1013):
r0 = creat(0x0, 0x0)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x70}], 0x1, 0x0, 0x0)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x1d, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @jmp={0x5, 0x0, 0x7, 0x7, 0x3, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfa}}, @call={0x85, 0x0, 0x0, 0xbb}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x6}], &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x44, &(0x7f00000007c0)=""/68, 0x40f00, 0x40, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x4, 0x5, 0x8, 0xa}, {0x0, 0x3, 0x5, 0xb}], 0x10, 0x10000, @void, @value}, 0x90)

1.944428029s ago: executing program 1 (id=1014):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010f80)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0)

1.911071473s ago: executing program 1 (id=1015):
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0xc}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {{@in=@private, 0x4d6, 0x33}, 0x0, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffff9}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.72442773s ago: executing program 2 (id=1017):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180100001700000000000000a54b0000850000007500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='signal_generate\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1.671383815s ago: executing program 4 (id=1018):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.61814314s ago: executing program 2 (id=1019):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001002d0c10000000000000000000", 0x58}], 0x1)

1.536459107s ago: executing program 0 (id=1020):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x30, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]]}, 0x30}}, 0x0)

1.482446453s ago: executing program 2 (id=1021):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000018000280140003800c0001800800010000000000040001820c00018008000100", @ANYRES32=r3], 0x38}}, 0x0)

1.460180515s ago: executing program 0 (id=1022):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="fe08675d180002"], 0x1c}}, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd)

1.328437597s ago: executing program 1 (id=1023):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x2, 0x5528, &(0x7f0000005a40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r1, 0x2000009)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xfffff, 0x7})

1.328192657s ago: executing program 2 (id=1024):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f00000000c0)=0xfffffffd)
ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040))

1.328054227s ago: executing program 0 (id=1025):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x1, 0x91, 0x47, 0xf1, 0x40, 0x1d50, 0x60a1, 0x263d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb7, 0x0, 0x0, 0x83, 0xa7, 0xf7}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)={0x40, 0x7}, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f00000007c0)={0x0, 0x35}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000480)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.298060109s ago: executing program 2 (id=1026):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='=', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080), &(0x7f0000000240)=0x8)

1.205685868s ago: executing program 2 (id=1027):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0xc038480a, &(0x7f0000000080)=0x1)

1.032436574s ago: executing program 3 (id=1028):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0)
close(0x3)

974.39178ms ago: executing program 3 (id=1029):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000400)='\'', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='=', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x17, &(0x7f0000000240), 0x14)

901.631256ms ago: executing program 4 (id=1030):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000100))
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
symlinkat(&(0x7f00000004c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00')
renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1)

788.400267ms ago: executing program 4 (id=1031):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x54, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT={0x4}]}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x54}}, 0x0)

788.032567ms ago: executing program 3 (id=1032):
syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800400, &(0x7f00000008c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x446c, &(0x7f0000004780)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
pwrite64(r1, &(0x7f0000000280)='+', 0x1, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000, 0x0, 0x0, 0x2})

761.70067ms ago: executing program 4 (id=1033):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2010880, &(0x7f00000001c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard=0x0000000000000009,gid=', @ANYRESHEX=0x0, @ANYBLOB=',integrity,errors=continue,discard,noquota\x00iocharset=iso8859-1,grpquota,resize=0x0000000000009c5c,uid=', @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c6e6f71756f74612c6572726f72733d72656d06000000000000006572726f72733d636f6e74696e75652c6e6f71756f74612c7375626a5f747970653d2b2d5d7b2e26512e2c7375626a5f726f6c653d6769642c7375626a5f747970653d676b64d8db59889794042463bdc37f04946fe8824a7bf833c974d344bec12ea1f6c47d3da69398f9092b5d04669018a79d0d91d46ff21748c58f23cddc6dfcc0a1d56d376a8228ae91637768b79e28fd6f5e313993b1054cae1bfc7946f3d662fb622cb21edce6c8c03fd7f6494cf4cafd862c00"], 0x5, 0x60ea, &(0x7f000000c4c0)="$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")
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0)
ftruncate(r0, 0x4000000)

371.472236ms ago: executing program 1 (id=1034):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00008be000/0x1000)=nil)
munmap(&(0x7f000061d000/0x3000)=nil, 0x3000)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4095, 0xfff}], 0x1, 0x0, 0x0)

0s ago: executing program 4 (id=1035):
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20)

kernel console output (not intermixed with test programs):

(1000)
[  100.301436][ T4690] EXT4-fs error (device loop4): __ext4_iget:4872: inode #11: block 1: comm syz.4.318: invalid block
[  100.317254][ T4694] netlink: 'syz.3.323': attribute type 10 has an invalid length.
[  100.344188][ T4690] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.318: couldn't read orphan inode 11 (err -117)
[  100.405843][ T4694] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  100.490871][ T4690] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x000000000000e072,inode_readahead_blks=0x0000000000010000,noquota,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,bsdgroups,,errors=continue. Quota mode: none.
[  100.541911][ T4693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.561277][ T4155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.608823][ T4690] EXT4-fs (loop4): shut down requested (2)
[  100.937448][ T4708] loop4: detected capacity change from 0 to 64
[  101.081872][ T4155] tipc: Disabling bearer <udp:syz1>
[  101.095992][ T4155] tipc: Left network mode
[  101.148044][ T4698] loop1: detected capacity change from 0 to 32768
[  101.243397][ T4722] loop4: detected capacity change from 0 to 128
[  101.281187][ T4701] chnl_net:caif_netlink_parms(): no params data found
[  101.354707][ T4698] XFS (loop1): Mounting V5 Filesystem
[  101.491276][ T4722] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  101.554550][ T4722] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038 (0x7fffffff)
[  101.568589][ T4698] XFS (loop1): Ending clean mount
[  101.586232][ T4698] XFS (loop1): Quotacheck needed: Please wait.
[  101.711268][ T4698] XFS (loop1): Quotacheck: Done.
[  101.773814][ T4701] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.809191][ T4701] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.825229][ T4701] device bridge_slave_0 entered promiscuous mode
[  101.886018][ T4701] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.904891][ T3799] XFS (loop1): Unmounting Filesystem
[  101.915109][ T4701] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.963674][ T4701] device bridge_slave_1 entered promiscuous mode
[  102.082433][ T4701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.102148][ T4723] loop3: detected capacity change from 0 to 32768
[  102.181572][ T4701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.232392][ T4723] XFS (loop3): Mounting V5 Filesystem
[  102.273991][ T4701] team0: Port device team_slave_0 added
[  102.304127][ T4734] loop0: detected capacity change from 0 to 32768
[  102.314297][ T4701] team0: Port device team_slave_1 added
[  102.511722][ T4723] XFS (loop3): Ending clean mount
[  102.535268][ T4734] XFS (loop0): Mounting V5 Filesystem
[  102.548164][ T4723] XFS (loop3): Quotacheck needed: Please wait.
[  102.620812][ T4701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  102.624857][ T4745] loop4: detected capacity change from 0 to 40427
[  102.651923][ T3653] Bluetooth: hci0: command 0x0409 tx timeout
[  102.669937][ T4701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.696900][ T4723] XFS (loop3): Quotacheck: Done.
[  102.699452][ T4734] XFS (loop0): Ending clean mount
[  102.708499][ T4767] loop1: detected capacity change from 0 to 512
[  102.740860][ T4745] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  102.769425][ T4745] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  102.832726][ T4767] EXT4-fs (loop1): Test dummy encryption mode enabled
[  102.848469][ T4767] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  102.861798][ T4701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  102.886180][ T4745] F2FS-fs (loop4): Found nat_bits in checkpoint
[  102.903540][ T4767] EXT4-fs (loop1): 1 truncate cleaned up
[  102.924940][ T4247] XFS (loop0): Unmounting Filesystem
[  102.929739][ T4767] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  102.953531][ T3584] XFS (loop3): Unmounting Filesystem
[  103.004413][ T4745] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  103.031325][ T4745] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  103.096005][ T4701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.109996][ T4701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.198246][ T4701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.208941][   T26] audit: type=1800 audit(1727195129.524:9): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.331" name="bus" dev="loop4" ino=10 res=0 errno=0
[  103.241206][   T26] audit: type=1800 audit(1727195129.554:10): pid=4745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.331" name="bus" dev="loop4" ino=10 res=0 errno=0
[  103.318216][ T4745] attempt to access beyond end of device
[  103.318216][ T4745] loop4: rw=2049, want=53256, limit=40427
[  103.348685][ T4745] attempt to access beyond end of device
[  103.348685][ T4745] loop4: rw=2049, want=78784, limit=40427
[  103.449907][ T4785] attempt to access beyond end of device
[  103.449907][ T4785] loop4: rw=0, want=78776, limit=40427
[  103.492830][ T4701] device hsr_slave_0 entered promiscuous mode
[  103.520180][ T4701] device hsr_slave_1 entered promiscuous mode
[  103.629769][ T4785] attempt to access beyond end of device
[  103.629769][ T4785] loop4: rw=2049, want=78800, limit=40427
[  103.719764][ T4785] attempt to access beyond end of device
[  103.719764][ T4785] loop4: rw=2049, want=78768, limit=40427
[  103.878050][ T3586] attempt to access beyond end of device
[  103.878050][ T3586] loop4: rw=2049, want=45104, limit=40427
[  103.926525][ T4793] netlink: 830 bytes leftover after parsing attributes in process `syz.3.334'.
[  104.005124][ T4155] device hsr_slave_0 left promiscuous mode
[  104.057704][ T4155] device hsr_slave_1 left promiscuous mode
[  104.079684][ T4155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.128909][ T4155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.152610][ T4155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.160052][ T4155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.232528][ T4155] device bridge_slave_1 left promiscuous mode
[  104.246548][ T4155] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.273478][ T4155] device bridge_slave_0 left promiscuous mode
[  104.279697][ T4155] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.325055][ T4787] loop1: detected capacity change from 0 to 32768
[  104.333318][ T4155] device veth1_macvtap left promiscuous mode
[  104.339447][ T4155] device veth0_macvtap left promiscuous mode
[  104.346011][ T4155] device veth1_vlan left promiscuous mode
[  104.351888][ T4155] device veth0_vlan left promiscuous mode
[  104.454596][ T4787] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.336 (4787)
[  104.512168][ T4787] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  104.521606][ T4787] BTRFS info (device loop1): using free space tree
[  104.555518][ T4787] BTRFS info (device loop1): has skinny extents
[  104.677592][ T4805] loop3: detected capacity change from 0 to 32768
[  104.717518][ T4805] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.339 (4805)
[  104.741925][ T3951] Bluetooth: hci0: command 0x041b tx timeout
[  104.757305][ T4805] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  104.775181][ T4805] BTRFS info (device loop3): setting nodatacow, compression disabled
[  104.784032][ T4805] BTRFS info (device loop3): force clearing of disk cache
[  104.791242][ T4805] BTRFS info (device loop3): setting datacow
[  104.807860][ T4805] BTRFS info (device loop3): doing ref verification
[  104.817650][ T4805] BTRFS info (device loop3): turning off barriers
[  104.835242][ T4787] BTRFS info (device loop1): enabling ssd optimizations
[  104.842086][ T4805] BTRFS info (device loop3): turning on async discard
[  104.861958][ T4805] BTRFS info (device loop3): enabling ssd optimizations
[  104.890133][ T4805] BTRFS info (device loop3): using spread ssd allocation scheme
[  104.893787][ T4830] loop4: detected capacity change from 0 to 4096
[  104.898453][ T4805] BTRFS info (device loop3): not using ssd optimizations
[  104.916211][ T4805] BTRFS info (device loop3): not using spread ssd allocation scheme
[  104.924362][ T4805] BTRFS info (device loop3): using free space tree
[  104.930878][ T4805] BTRFS info (device loop3): has skinny extents
[  104.976481][ T4830] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  105.078562][ T4830] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  105.129539][ T4830] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.337: corrupted inode contents
[  105.243723][ T4805] BTRFS info (device loop3): clearing free space tree
[  105.251043][ T4805] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  105.271910][ T4805] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  105.280117][ T4830] EXT4-fs error (device loop4): ext4_dirty_inode:6007: inode #15: comm syz.4.337: mark_inode_dirty error
[  105.301194][ T4830] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.337: corrupted inode contents
[  105.315619][ T4830] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.337: mark_inode_dirty error
[  105.342618][ T4830] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.337: corrupted inode contents
[  105.384373][ T4805] BTRFS info (device loop3): creating free space tree
[  105.398993][ T4830] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #15: comm syz.4.337: mark_inode_dirty error
[  105.420142][ T4805] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  105.421338][ T4830] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.337: corrupted inode contents
[  105.432584][ T4805] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  105.455691][ T4155] team0 (unregistering): Port device team_slave_1 removed
[  105.456095][ T4830] EXT4-fs error (device loop4): ext4_truncate:4272: inode #15: comm syz.4.337: mark_inode_dirty error
[  105.480625][ T4155] team0 (unregistering): Port device team_slave_0 removed
[  105.499371][ T4830] EXT4-fs error (device loop4) in ext4_setattr:5575: Corrupt filesystem
[  105.544534][   T26] audit: type=1800 audit(1727195131.874:11): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.339" name="bus" dev="loop3" ino=263 res=0 errno=0
[  105.567346][ T4853] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #15: comm syz.4.337: corrupted inode contents
[  105.602393][ T4155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.640286][ T4155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.964682][ T4155] bond0 (unregistering): Released all slaves
[  106.179264][ T4859] loop0: detected capacity change from 0 to 512
[  106.400951][ T4859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  106.568805][ T4859] EXT4-fs (loop0): 1 truncate cleaned up
[  106.622764][ T4859] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback.
[  106.758690][ T4883] loop3: detected capacity change from 0 to 256
[  106.816418][ T3953] Bluetooth: hci0: command 0x040f tx timeout
[  107.409579][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  107.509754][ T4701] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  107.561011][ T4701] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  107.593330][ T4701] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  107.637869][ T4701] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  107.776121][ T4881] loop4: detected capacity change from 0 to 32768
[  107.876948][ T4701] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.898041][ T4881] (syz.4.343,4881,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "heabtbeat=none" or missing value
[  107.936949][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  107.951986][ T4881] (syz.4.343,4881,0):ocfs2_fill_super:1177 ERROR: status = -22
[  107.982444][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  108.033029][ T4701] 8021q: adding VLAN 0 to HW filter on device team0
[  108.091038][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  108.128531][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  108.169247][ T4160] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.176466][ T4160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.231296][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  108.261854][ T1075] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  108.262507][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  108.308558][ T4160] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.315692][ T4160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.356384][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  108.402680][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  108.442875][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  108.485548][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  108.533511][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  108.542874][ T4907] loop3: detected capacity change from 0 to 40427
[  108.573523][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  108.613478][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  108.614104][ T4911] loop1: detected capacity change from 0 to 32768
[  108.642176][ T1075] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04
[  108.651326][ T1075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.662127][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  108.699191][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  108.721551][ T1075] usb 1-1: config 0 descriptor??
[  108.737899][ T4907] F2FS-fs (loop3): Found nat_bits in checkpoint
[  108.752692][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  108.771200][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  108.794081][ T1075] go7007: probe of 1-1:0.0 failed with error -12
[  108.806881][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  108.873620][ T4701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  108.892197][ T3953] Bluetooth: hci0: command 0x0419 tx timeout
[  108.920817][ T4911] XFS (loop1): Mounting V5 Filesystem
[  108.939824][ T4907] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  109.061108][ T3584] attempt to access beyond end of device
[  109.061108][ T3584] loop3: rw=2049, want=45104, limit=40427
[  109.095354][ T3042] usb 1-1: USB disconnect, device number 3
[  109.115655][ T4911] XFS (loop1): Ending clean mount
[  109.149886][ T4911] XFS (loop1): Quotacheck needed: Please wait.
[  109.255725][ T4911] XFS (loop1): Quotacheck: Done.
[  109.466364][ T3799] XFS (loop1): Unmounting Filesystem
[  109.612669][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  109.620148][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  109.685278][ T4701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.798849][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  109.807844][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  109.930945][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  109.962714][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  110.023571][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  110.031375][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  110.113243][ T4701] device veth0_vlan entered promiscuous mode
[  110.166897][ T4701] device veth1_vlan entered promiscuous mode
[  110.262203][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  110.293146][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  110.328611][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  110.370018][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  110.444016][ T4701] device veth0_macvtap entered promiscuous mode
[  110.489268][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  110.513913][ T4701] device veth1_macvtap entered promiscuous mode
[  110.631798][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.665903][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.694705][ T5000] loop3: detected capacity change from 0 to 4096
[  110.696371][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.745740][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.760605][ T5000] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  110.808903][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.880889][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.918334][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.924870][ T4980] loop0: detected capacity change from 0 to 32768
[  110.951844][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.980514][ T3584] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22.
[  110.991099][ T4701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.002533][ T3584] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  111.015693][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.022049][ T3584] ntfs3: loop3: ntfs_set_state r=3 failed, -22.
[  111.028446][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.052255][ T3042] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  111.064184][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.095739][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.106649][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.117549][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.128926][ T4701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.142001][ T4701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.153927][ T4701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.163437][ T4980] XFS (loop0): Mounting V5 Filesystem
[  111.171613][ T4701] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.191824][ T4701] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.200534][ T4701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.282672][ T4701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.301380][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  111.311417][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  111.320374][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.329144][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.410006][ T4980] XFS (loop0): Ending clean mount
[  111.427252][ T4980] XFS (loop0): Quotacheck needed: Please wait.
[  111.431995][ T3042] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  111.473408][ T3042] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.511710][ T3042] usb 5-1: config 0 descriptor??
[  111.552480][ T4980] XFS (loop0): Quotacheck: Done.
[  111.572113][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.580348][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.589757][ T3042] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  111.664825][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  111.687161][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.730101][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.775096][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  111.822284][ T3042] gp8psk: usb in 128 operation failed.
[  111.896893][ T4247] XFS (loop0): Unmounting Filesystem
[  111.910039][ T5013] loop1: detected capacity change from 0 to 32768
[  111.964879][ T5039] capability: warning: `syz.3.374' uses deprecated v2 capabilities in a way that may be insecure
[  112.044519][ T5013] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.371 (5013)
[  112.082069][ T3042] gp8psk: usb in 146 operation failed.
[  112.087575][ T3042] gp8psk: failed to get FW version
[  112.152397][ T3042] gp8psk: FPGA Version = 130
[  112.194438][ T5013] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  112.229734][ T5013] BTRFS info (device loop1): using free space tree
[  112.257852][ T5013] BTRFS info (device loop1): has skinny extents
[  112.362063][ T3042] gp8psk: usb in 138 operation failed.
[  112.367687][ T3042] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  112.439251][ T3042] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  112.498117][ T5054] loop2: detected capacity change from 0 to 1024
[  112.516533][ T5063] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  112.552936][ T3042] usb 5-1: USB disconnect, device number 6
[  112.671940][ T5013] BTRFS info (device loop1): enabling ssd optimizations
[  112.698546][ T4155] hfsplus: b-tree write err: -5, ino 4
[  113.165946][ T5046] loop3: detected capacity change from 0 to 32768
[  113.212476][ T3042] kernel write not supported for file /audio1 (pid: 3042 comm: kworker/0:3)
[  113.243059][ T5102] loop2: detected capacity change from 0 to 1024
[  113.301830][ T5046] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.376 (5046)
[  113.391463][ T5102] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  113.440329][ T5099] loop0: detected capacity change from 0 to 8192
[  113.492636][ T5108] syz.4.389 sent an empty control message without MSG_MORE.
[  113.572552][ T5099] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  113.577996][ T5110] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #2: comm syz.2.387: corrupted in-inode xattr
[  113.594238][ T5099] REISERFS (device loop0): using ordered data mode
[  113.601044][ T5099] reiserfs: using flush barriers
[  113.622022][ T5099] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  113.650808][ T5114] loop4: detected capacity change from 0 to 256
[  113.670538][ T5099] REISERFS (device loop0): checking transaction log (loop0)
[  113.761512][ T5046] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  113.814741][ T5046] BTRFS info (device loop3): using free space tree
[  113.814980][ T5122] loop1: detected capacity change from 0 to 128
[  113.850607][ T5046] BTRFS info (device loop3): has skinny extents
[  114.054954][ T5099] REISERFS (device loop0): Using tea hash to sort names
[  114.097236][ T5099] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  114.232185][ T5046] BTRFS info (device loop3): enabling ssd optimizations
[  114.330644][ T5156] loop2: detected capacity change from 0 to 64
[  114.557399][ T5156] minix_free_block (loop2:2): bit already cleared
[  114.577336][ T5156] minix_free_block (loop2:3): bit already cleared
[  114.619169][ T5156] minix_free_block (loop2:4): bit already cleared
[  115.088351][ T5167] device syz_tun entered promiscuous mode
[  115.119559][ T5167] device batadv_slave_0 entered promiscuous mode
[  115.248975][ T5175] loop0: detected capacity change from 0 to 128
[  115.357692][ T5173] loop3: detected capacity change from 0 to 4096
[  115.440957][ T5173] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  115.505696][ T5160] loop4: detected capacity change from 0 to 32768
[  115.557360][ T5173] ntfs3: loop3: Failed to load $Extend.
[  115.583812][ T5160] XFS: attr2 mount option is deprecated.
[  115.589675][ T5160] XFS: ikeep mount option is deprecated.
[  115.620098][ T5160] XFS: noikeep mount option is deprecated.
[  115.703436][ T5190] loop0: detected capacity change from 0 to 128
[  115.799160][ T5160] XFS (loop4): Mounting V5 Filesystem
[  115.905664][ T5190] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  115.927157][ T5190] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038 (0x7fffffff)
[  115.968188][ T5160] XFS (loop4): Ending clean mount
[  115.981474][ T5160] XFS (loop4): Quotacheck needed: Please wait.
[  116.021418][ T5181] loop2: detected capacity change from 0 to 32768
[  116.081137][ T5160] XFS (loop4): Quotacheck: Done.
[  116.131489][ T5181] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.410 (5181)
[  116.154392][ T5183] loop1: detected capacity change from 0 to 32768
[  116.226855][ T5181] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  116.304803][ T5181] BTRFS info (device loop2): using free space tree
[  116.311406][ T5181] BTRFS info (device loop2): has skinny extents
[  116.325546][ T5211] loop0: detected capacity change from 0 to 256
[  116.378241][ T5211] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  116.416508][ T5183] XFS (loop1): Mounting V5 Filesystem
[  116.416650][ T3586] XFS (loop4): Unmounting Filesystem
[  116.477625][ T5183] XFS (loop1): Ending clean mount
[  116.520232][ T5183] XFS (loop1): Quotacheck needed: Please wait.
[  116.669102][ T5183] XFS (loop1): Quotacheck: Done.
[  116.857661][ T5181] BTRFS info (device loop2): enabling ssd optimizations
[  116.875149][ T3799] XFS (loop1): Unmounting Filesystem
[  116.955805][ T5222] loop3: detected capacity change from 0 to 40427
[  117.006600][ T5222] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  117.021774][ T5222] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  117.054259][ T5222] F2FS-fs (loop3): invalid crc value
[  117.153792][ T5222] F2FS-fs (loop3): Found nat_bits in checkpoint
[  117.430274][ T5222] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  117.437553][ T5222] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  117.799200][    T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  117.832379][    T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  117.845621][ T5259] loop1: detected capacity change from 0 to 256
[  117.862003][ T4023] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  117.897862][ T5259] exfat: Deprecated parameter 'namecase'
[  117.911771][ T5259] exfat: Deprecated parameter 'utf8'
[  117.963501][ T5259] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  118.080615][   T26] audit: type=1804 audit(1727195144.404:12): pid=5259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.428" name="/newroot/75/file0/file1" dev="loop1" ino=1048613 res=1 errno=0
[  118.131247][ T5247] loop0: detected capacity change from 0 to 40427
[  118.194369][ T5269] loop2: detected capacity change from 0 to 1024
[  118.237788][ T5247] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  118.251880][ T5269] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  118.275585][ T5247] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  118.292106][ T4023] usb 5-1: unable to get BOS descriptor or descriptor too short
[  118.316244][ T5247] F2FS-fs (loop0): invalid crc_offset: 33558524
[  118.327147][ T5269] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  118.353550][ T5247] F2FS-fs (loop0): Found nat_bits in checkpoint
[  118.391996][ T4023] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.409850][ T4023] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  118.462265][ T4023] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  118.476426][ T5279] device syz_tun entered promiscuous mode
[  118.508755][ T4023] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  118.519818][ T5279] device batadv_slave_0 entered promiscuous mode
[  118.527414][ T5279] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  118.535439][ T5279] Cannot create hsr debugfs directory
[  118.553221][ T5247] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  118.569866][ T5247] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  118.679808][ T5283] loop1: detected capacity change from 0 to 512
[  118.692143][ T4023] usb 5-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  118.715957][ T5283] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  118.742456][ T4023] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.760020][ T4023] usb 5-1: Product: syz
[  118.764331][ T4023] usb 5-1: Manufacturer: syz
[  118.771949][ T4023] usb 5-1: SerialNumber: syz
[  118.788229][ T4023] usb 5-1: config 0 descriptor??
[  118.797888][ T5283] EXT4-fs (loop1): 1 truncate cleaned up
[  118.812070][ T5250] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  118.829587][ T5283] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none.
[  118.851708][    C0] usb 5-1: NFC: Urb failure (status -71)
[  118.858694][ T4023] usb 5-1: NFC: Unable to get FW version
[  118.865614][ T4023] pn533_usb: probe of 5-1:0.0 failed with error -90
[  119.020678][ T5290] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  119.073315][ T4021] usb 5-1: USB disconnect, device number 7
[  119.179021][ T5284] loop3: detected capacity change from 0 to 32768
[  119.252297][ T5284] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.434 (5284)
[  119.351969][ T5284] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  119.383646][ T5284] BTRFS info (device loop3): using free space tree
[  119.394304][ T5284] BTRFS info (device loop3): has skinny extents
[  119.504786][ T5305] loop0: detected capacity change from 0 to 256
[  119.540750][ T5287] loop2: detected capacity change from 0 to 32768
[  119.580886][ T5316] loop1: detected capacity change from 0 to 1024
[  119.610577][ T5284] BTRFS info (device loop3): enabling ssd optimizations
[  119.645890][ T5316] EXT4-fs (loop1): Test dummy encryption mode enabled
[  119.657100][ T5316] EXT4-fs (loop1): Ignoring removed orlov option
[  119.678721][   T26] audit: type=1800 audit(1727195146.004:13): pid=5284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.434" name="file1" dev="loop3" ino=260 res=0 errno=0
[  119.730965][ T5316] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  119.749764][ T5287] XFS (loop2): Mounting V5 Filesystem
[  119.888868][ T5330] loop4: detected capacity change from 0 to 1024
[  119.978026][ T5287] XFS (loop2): Ending clean mount
[  119.985849][ T5330] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  120.026844][ T5330] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  120.160101][ T5287] XFS (loop2): Quotacheck needed: Please wait.
[  120.197758][ T5316] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  120.399181][ T5287] XFS (loop2): Quotacheck: Done.
[  120.573977][ T5338] loop0: detected capacity change from 0 to 32768
[  120.580531][ T4701] XFS (loop2): Unmounting Filesystem
[  120.615889][ T5344] loop4: detected capacity change from 0 to 4096
[  120.697113][ T5344] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  120.697239][ T5338] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.445 (5338)
[  120.763106][ T5344] ntfs3: loop4: Failed to load $Extend.
[  120.787780][ T5338] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  120.810377][ T5338] BTRFS info (device loop0): using free space tree
[  120.833592][ T5338] BTRFS info (device loop0): has skinny extents
[  121.020169][ T5362] loop1: detected capacity change from 0 to 64
[  121.037337][   T26] audit: type=1326 audit(1727195147.364:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5357 comm="syz.3.450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe1a088ef9 code=0x0
[  121.163986][ T5362] minix_free_block (loop1:2): bit already cleared
[  121.170546][ T5362] minix_free_block (loop1:3): bit already cleared
[  121.177724][ T5362] minix_free_block (loop1:4): bit already cleared
[  121.193460][ T5338] BTRFS info (device loop0): enabling ssd optimizations
[  121.520005][ T5389] loop4: detected capacity change from 0 to 256
[  121.976360][ T5395] loop3: detected capacity change from 0 to 1024
[  121.998754][ T5397] loop4: detected capacity change from 0 to 1024
[  122.017225][ T5391] loop2: detected capacity change from 0 to 4096
[  122.036408][ T5399] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  122.066513][ T5395] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  122.078872][ T5391] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  122.091039][ T5397] EXT4-fs (loop4): Test dummy encryption mode enabled
[  122.122604][ T5397] EXT4-fs (loop4): Ignoring removed orlov option
[  122.136306][ T5395] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  122.200760][ T5397] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  122.240531][ T5391] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  122.352401][ T5391] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #15: comm syz.2.467: corrupted inode contents
[  122.353085][ T5383] loop1: detected capacity change from 0 to 32768
[  122.428018][ T5383] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.453 (5383)
[  122.450973][ T5391] EXT4-fs error (device loop2): ext4_dirty_inode:6007: inode #15: comm syz.2.467: mark_inode_dirty error
[  122.489194][ T5391] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #15: comm syz.2.467: corrupted inode contents
[  122.518283][ T5383] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  122.551496][ T5383] BTRFS info (device loop1): using free space tree
[  122.562568][ T5391] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.467: mark_inode_dirty error
[  122.571897][ T5383] BTRFS info (device loop1): has skinny extents
[  122.608398][ T5391] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #15: comm syz.2.467: corrupted inode contents
[  122.681960][ T5391] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #15: comm syz.2.467: mark_inode_dirty error
[  122.719855][ T5391] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #15: comm syz.2.467: corrupted inode contents
[  122.738351][ T5420] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  122.809052][ T5391] EXT4-fs error (device loop2): ext4_truncate:4272: inode #15: comm syz.2.467: mark_inode_dirty error
[  122.869857][ T5383] BTRFS info (device loop1): enabling ssd optimizations
[  122.898486][ T5391] EXT4-fs error (device loop2) in ext4_setattr:5575: Corrupt filesystem
[  122.962901][ T5406] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #15: comm syz.2.467: corrupted inode contents
[  123.004669][   T26] audit: type=1800 audit(1727195149.334:15): pid=5383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.453" name="file1" dev="loop1" ino=260 res=0 errno=0
[  123.373650][ T5405] loop0: detected capacity change from 0 to 32768
[  123.418724][ T5405] XFS: attr2 mount option is deprecated.
[  123.460005][ T5405] XFS: ikeep mount option is deprecated.
[  123.476146][ T5405] XFS: noikeep mount option is deprecated.
[  123.587156][ T5405] XFS (loop0): Mounting V5 Filesystem
[  123.642017][ T5121] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  123.680149][ T5456] loop1: detected capacity change from 0 to 1764
[  123.779817][ T5461] loop2: detected capacity change from 0 to 512
[  123.811412][ T5405] XFS (loop0): Ending clean mount
[  123.819023][ T5405] XFS (loop0): Quotacheck needed: Please wait.
[  123.828339][ T5461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  123.901260][ T5461] EXT4-fs (loop2): 1 truncate cleaned up
[  123.918911][ T5461] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none.
[  123.926450][ T5405] XFS (loop0): Quotacheck: Done.
[  123.973644][ T5461] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  124.042677][ T5121] usb 5-1: config 0 has an invalid interface number: 138 but max is 0
[  124.061993][ T5121] usb 5-1: config 0 has no interface number 0
[  124.087395][ T4247] XFS (loop0): Unmounting Filesystem
[  124.088938][ T5121] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  124.126186][ T5121] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  124.137673][ T5121] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  124.169790][ T5121] usb 5-1: config 0 interface 138 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  124.278443][ T5468] loop2: detected capacity change from 0 to 256
[  124.303901][ T5468] exfat: Deprecated parameter 'namecase'
[  124.310520][ T5468] exfat: Deprecated parameter 'utf8'
[  124.362291][ T5121] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01f0, bcdDevice=6d.75
[  124.371359][ T5121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.398417][ T5468] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  124.432699][ T5121] usb 5-1: Product: syz
[  124.436975][ T5121] usb 5-1: Manufacturer: syz
[  124.449980][ T5121] usb 5-1: SerialNumber: syz
[  124.474512][ T5121] usb 5-1: config 0 descriptor??
[  124.524752][ T5121] ftdi_sio 5-1:0.138: FTDI USB Serial Device converter detected
[  124.534989][ T5121] usb 5-1: Detected FT-X
[  124.539267][ T5121] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 3
[  124.542804][   T26] audit: type=1804 audit(1727195150.874:16): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.473" name="/newroot/23/file0/file1" dev="loop2" ino=1048616 res=1 errno=0
[  124.570662][ T5121] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 10
[  124.752119][ T5121] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  124.792184][ T5121] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  124.812007][ T5121] ftdi_sio 5-1:0.138: GPIO initialisation failed: -71
[  124.828104][ T5121] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  124.847630][ T5466] loop1: detected capacity change from 0 to 40427
[  124.856795][ T5121] usb 5-1: USB disconnect, device number 8
[  124.895939][ T5121] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  124.913998][ T5121] ftdi_sio 5-1:0.138: device disconnected
[  124.928277][ T5466] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  124.946452][ T5466] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  124.991005][ T5466] F2FS-fs (loop1): invalid crc_offset: 33558524
[  125.028523][ T5466] F2FS-fs (loop1): Found nat_bits in checkpoint
[  125.042036][ T5118] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  125.133162][ T5466] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  125.141768][ T5466] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  125.322215][ T5118] usb 3-1: Using ep0 maxpacket: 32
[  125.384614][ T5479] loop3: detected capacity change from 0 to 32768
[  125.413241][ T5481] loop0: detected capacity change from 0 to 32768
[  125.445744][ T5118] usb 3-1: config 107 has an invalid interface number: 29 but max is 0
[  125.461552][ T5118] usb 3-1: config 107 has no interface number 0
[  125.470486][ T5479] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.479 (5479)
[  125.478295][ T5118] usb 3-1: config 107 interface 29 altsetting 3 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  125.511904][ T5118] usb 3-1: config 107 interface 29 has no altsetting 0
[  125.584636][ T5481] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.478 (5481)
[  125.584743][ T5479] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  125.660040][ T5481] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  125.674004][ T5118] usb 3-1: New USB device found, idVendor=07ca, idProduct=a807, bcdDevice=87.10
[  125.687052][ T5479] BTRFS info (device loop3): use zlib compression, level 3
[  125.694091][ T5118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.695671][ T5481] BTRFS info (device loop0): using free space tree
[  125.715145][ T5479] BTRFS info (device loop3): using free space tree
[  125.724484][ T5118] usb 3-1: Product: syz
[  125.728942][ T5118] usb 3-1: Manufacturer: syz
[  125.743383][ T5479] BTRFS info (device loop3): has skinny extents
[  125.764981][ T5118] usb 3-1: SerialNumber: syz
[  125.767782][ T5481] BTRFS info (device loop0): has skinny extents
[  126.012599][ T5479] BTRFS info (device loop3): enabling ssd optimizations
[  126.028344][ T5487] loop4: detected capacity change from 0 to 40427
[  126.039123][ T5481] BTRFS info (device loop0): enabling ssd optimizations
[  126.098390][   T26] audit: type=1800 audit(1727195152.424:17): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.478" name="file1" dev="loop0" ino=260 res=0 errno=0
[  126.144151][ T5487] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  126.165213][ T5487] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  126.232384][ T5487] F2FS-fs (loop4): invalid crc value
[  126.304656][ T5487] F2FS-fs (loop4): Found nat_bits in checkpoint
[  126.482060][ T5118] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in warm state.
[  126.542515][ T5118] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  126.573381][ T5118] dvbdev: DVB: registering new adapter (AVerMedia AVerTV DVB-T Volar)
[  126.578023][ T5487] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  126.591763][ T5118] usb 3-1: media controller created
[  126.596440][ T5487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  126.627818][ T5118] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  126.773397][ T5118] DVB: Unable to find symbol dib7000p_attach()
[  126.779605][ T5118] dvb-usb: no frontend was attached by 'AVerMedia AVerTV DVB-T Volar'
[  126.806364][   T26] audit: type=1800 audit(1727195153.134:18): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.481" name="bus" dev="loop4" ino=10 res=0 errno=0
[  126.911770][ T5118] rc_core: IR keymap rc-dib0700-rc5 not found
[  126.917895][ T5118] Registered IR keymap rc-empty
[  126.948014][ T5118] dvb-usb: could not initialize remote control.
[  126.961703][ T5118] dvb-usb: AVerMedia AVerTV DVB-T Volar successfully initialized and connected.
[  127.007915][ T5118] dib0700: There's no endpoint for remote controller
[  127.092516][ T3586] attempt to access beyond end of device
[  127.092516][ T3586] loop4: rw=2049, want=40968, limit=40427
[  127.108060][ T5538] loop1: detected capacity change from 0 to 32768
[  127.221040][ T5118] usb 3-1: USB disconnect, device number 7
[  127.308071][ T5118] dvb-usb: AVerMedia AVerTV DVB-T Volar successfully deinitialized and disconnected.
[  127.394971][ T5546] loop3: detected capacity change from 0 to 512
[  127.455491][ T5543] IPVS: You probably need to specify IP address on multicast interface.
[  127.468818][ T5543] IPVS: Error connecting to the multicast addr
[  127.498823][ T5546] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  127.592771][ T5546] EXT4-fs (loop3): 1 truncate cleaned up
[  127.598454][ T5546] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,nombcache,noload,,errors=continue. Quota mode: none.
[  127.858962][ T5564] loop2: detected capacity change from 0 to 2048
[  127.886138][ T5562] syz.1.492 (5562) used greatest stack depth: 18496 bytes left
[  127.901408][ T5546] EXT4-fs error (device loop3): mb_free_blocks:1865: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[  128.041983][ T4120] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  128.051269][ T5564] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  128.219377][ T5576] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.240390][ T5564] attempt to access beyond end of device
[  128.240390][ T5564] loop2: rw=524288, want=33554432, limit=2048
[  128.441927][ T4120] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  128.460372][ T4120] usb 1-1: config 0 has no interface number 0
[  128.467133][ T4120] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  128.488375][ T4120] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  128.508161][ T4120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.563143][ T4120] usb 1-1: config 0 descriptor??
[  128.628384][ T4120] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  128.666757][ T5571] loop4: detected capacity change from 0 to 32768
[  128.708040][ T5571] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.497 (5571)
[  128.779733][ T5571] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  128.794973][ T5571] BTRFS info (device loop4): setting nodatacow, compression disabled
[  128.813559][ T5571] BTRFS info (device loop4): enabling auto defrag
[  128.842893][ T4120] usb 1-1: USB disconnect, device number 4
[  128.854205][ T5569] loop1: detected capacity change from 0 to 40427
[  128.855453][ T5571] BTRFS info (device loop4): max_inline at 0
[  128.869569][ T4120] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected
[  128.891065][ T5571] BTRFS info (device loop4): using free space tree
[  128.919684][ T5569] F2FS-fs (loop1): invalid crc value
[  128.935306][ T5571] BTRFS info (device loop4): has skinny extents
[  128.969589][ T5569] F2FS-fs (loop1): Found nat_bits in checkpoint
[  129.058108][ T5595] loop3: detected capacity change from 0 to 256
[  129.075452][ T5595] exfat: Deprecated parameter 'utf8'
[  129.099854][ T5595] exfat: Deprecated parameter 'utf8'
[  129.107172][ T5595] exfat: Deprecated parameter 'utf8'
[  129.163948][ T5569] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  129.164388][ T5595] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  129.190861][ T5569] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  129.232528][ T5569] F2FS-fs (loop1): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix.
[  129.307525][ T3799] attempt to access beyond end of device
[  129.307525][ T3799] loop1: rw=2049, want=45112, limit=40427
[  129.475799][ T5615] loop0: detected capacity change from 0 to 64
[  129.614138][ T5615] hfs: request for non-existent node 1573 in B*Tree
[  129.641886][ T5615] hfs: request for non-existent node 1573 in B*Tree
[  129.922276][ T4153] hfs: request for non-existent node 1573 in B*Tree
[  129.929401][ T4153] hfs: request for non-existent node 1573 in B*Tree
[  130.324779][   T26] audit: type=1326 audit(1727195156.654:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeeb450ef9 code=0x7ffc0000
[  130.468246][   T26] audit: type=1326 audit(1727195156.684:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7feeeb450ef9 code=0x7ffc0000
[  130.567206][   T26] audit: type=1326 audit(1727195156.684:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.2.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeeb450ef9 code=0x7ffc0000
[  130.829994][ T5658] netlink: 'syz.4.523': attribute type 1 has an invalid length.
[  130.850630][ T5658] netlink: 'syz.4.523': attribute type 2 has an invalid length.
[  131.141148][ T5668] loop2: detected capacity change from 0 to 1024
[  131.384555][ T5668] hfsplus: request for non-existent node 3 in B*Tree
[  131.409105][ T5668] hfsplus: request for non-existent node 3 in B*Tree
[  131.568652][ T5679] loop0: detected capacity change from 0 to 128
[  131.679446][ T5683] IPVS: Error connecting to the multicast addr
[  131.717609][ T5679] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  131.728737][ T5679] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  132.173642][ T5660] loop1: detected capacity change from 0 to 40427
[  132.214615][ T5703] loop2: detected capacity change from 0 to 64
[  132.250618][ T5660] F2FS-fs (loop1): invalid crc value
[  132.317797][ T5705] loop0: detected capacity change from 0 to 2048
[  132.321340][ T5709] input: syz1 as /devices/virtual/input/input8
[  132.351430][ T5660] F2FS-fs (loop1): Found nat_bits in checkpoint
[  132.498032][ T5705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.562701][ T5660] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  132.576430][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  132.582795][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  132.730348][ T5729] attempt to access beyond end of device
[  132.730348][ T5729] loop1: rw=10241, want=53256, limit=40427
[  132.947246][ T3799] attempt to access beyond end of device
[  132.947246][ T3799] loop1: rw=2049, want=45104, limit=40427
[  133.015874][ T5746] loop2: detected capacity change from 0 to 256
[  133.133111][ T5746] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  133.218706][ T5746] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  133.284897][ T5757] loop0: detected capacity change from 0 to 2048
[  133.462730][ T5757] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none.
[  133.509870][ T5757] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038 (0x7fffffff)
[  133.580482][ T5771] process 'syz.4.575' launched '/dev/fd/-1/./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  133.601080][ T5757] fs-verity: sha512 using implementation "sha512-avx2"
[  133.900515][ T5776] loop2: detected capacity change from 0 to 2048
[  134.014810][ T5776] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.028475][ T5780] loop3: detected capacity change from 0 to 8
[  134.078156][ T5780] cramfs: Unknown parameter '00000000000000000000'
[  134.197182][   T26] audit: type=1326 audit(1727195160.524:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.3.579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe1a088ef9 code=0x0
[  134.262125][ T5787] loop1: detected capacity change from 0 to 512
[  134.283691][   T26] audit: type=1326 audit(1727195160.564:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.3.579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7efe1a088ef9 code=0x0
[  134.358678][ T5791] loop0: detected capacity change from 0 to 512
[  134.369457][ T5787] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  134.402902][ T5787] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002]
[  134.422603][ T5787] EXT4-fs (loop1): orphan cleanup on readonly fs
[  134.429862][ T5787] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.581: bg 0: block 361: padding at end of block bitmap is not set
[  134.479234][ T5787] EXT4-fs (loop1): Remounting filesystem read-only
[  134.495574][ T5787] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem
[  134.510586][ T5787] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.581: attempt to clear invalid blocks 33619980 len 1
[  134.566947][ T5791] EXT4-fs (loop0): 1 orphan inode deleted
[  134.586076][ T5791] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  134.601249][ T5791] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038 (0x7fffffff)
[  134.665937][ T5787] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.581: invalid indirect mapped block 1811939328 (level 0)
[  134.682387][ T5787] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.581: invalid indirect mapped block 2185560079 (level 1)
[  134.707062][ T5782] loop4: detected capacity change from 0 to 40427
[  134.732163][ T5787] EXT4-fs (loop1): 1 truncate cleaned up
[  134.738336][ T5787] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none.
[  134.769207][ T5782] F2FS-fs (loop4): invalid crc value
[  134.794116][ T5782] F2FS-fs (loop4): Found nat_bits in checkpoint
[  134.856973][ T5810] loop2: detected capacity change from 0 to 64
[  134.963069][ T5782] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  134.988459][ T5782] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  134.989729][ T5815] loop1: detected capacity change from 0 to 16
[  135.073774][ T5815] erofs: (device loop1): mounted with root inode @ nid 36.
[  135.173285][ T3586] attempt to access beyond end of device
[  135.173285][ T3586] loop4: rw=2049, want=45104, limit=40427
[  135.421159][ T5808] loop0: detected capacity change from 0 to 32768
[  135.441783][ T5111] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  135.532197][ T5808] jfs_readdir: bad index table
[  135.862142][ T5111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  135.879611][ T5111] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  135.899998][ T5111] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  135.922881][ T5111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.941838][ T5111] usb 3-1: config 0 descriptor??
[  136.013457][ T5836] loop4: detected capacity change from 0 to 128
[  136.106791][   T26] audit: type=1800 audit(1727195162.434:24): pid=5836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.602" name="GPL" dev="loop4" ino=1048619 res=0 errno=0
[  136.242423][ T3621] usb 3-1: USB disconnect, device number 8
[  136.359432][ T5843] loop4: detected capacity change from 0 to 8192
[  136.435278][ T5843] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  136.447017][ T5843] REISERFS (device loop4): using ordered data mode
[  136.454490][ T5843] reiserfs: using flush barriers
[  136.461585][ T5843] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  136.515807][ T5843] REISERFS (device loop4): checking transaction log (loop4)
[  136.546909][ T5843] REISERFS (device loop4): Using tea hash to sort names
[  136.569312][ T5843] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  136.679384][ T5843] REISERFS warning (device loop4): jdm-20007 reiserfs_chown_xattrs: Couldn't chown all xattrs (-22)
[  136.679384][ T5843] 
[  136.856178][ T5844] chnl_net:caif_netlink_parms(): no params data found
[  137.236751][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.259546][ T5864] loop0: detected capacity change from 0 to 2048
[  137.271739][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.275466][ T5868] loop4: detected capacity change from 0 to 256
[  137.311132][ T5844] device bridge_slave_0 entered promiscuous mode
[  137.379255][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.408318][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.412281][ T5864] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.426953][ T5844] device bridge_slave_1 entered promiscuous mode
[  137.498659][ T5864] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038 (0x7fffffff)
[  137.579142][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.610775][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.836020][ T5844] team0: Port device team_slave_0 added
[  137.869258][ T5844] team0: Port device team_slave_1 added
[  137.889977][ T5879] loop3: detected capacity change from 0 to 4096
[  138.079947][ T5890] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.225096][   T26] audit: type=1800 audit(1727195164.554:25): pid=5897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.617" name="file1" dev="loop3" ino=15 res=0 errno=0
[  138.296433][   T26] audit: type=1800 audit(1727195164.594:26): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.617" name="file1" dev="loop3" ino=15 res=0 errno=0
[  138.336139][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.364819][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.463367][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.490250][ T5899] loop0: detected capacity change from 0 to 4096
[  138.501923][ T5111] Bluetooth: hci1: command 0x0409 tx timeout
[  138.513036][ T5895] device syzkaller1 entered promiscuous mode
[  138.535091][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.551724][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.604536][ T5899] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  138.691695][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.175076][ T5844] device hsr_slave_0 entered promiscuous mode
[  139.193647][ T5925] loop4: detected capacity change from 0 to 256
[  139.222136][ T5844] device hsr_slave_1 entered promiscuous mode
[  139.241805][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.259628][ T5844] Cannot create hsr debugfs directory
[  139.331716][ T5921] device bond1 entered promiscuous mode
[  139.337813][ T5921] 8021q: adding VLAN 0 to HW filter on device bond1
[  139.354865][ T5931] loop3: detected capacity change from 0 to 1024
[  139.393038][ T5925] FAT-fs (loop4): Directory bread(block 64) failed
[  139.400018][ T5925] FAT-fs (loop4): Directory bread(block 65) failed
[  139.441925][ T5925] FAT-fs (loop4): Directory bread(block 66) failed
[  139.449315][ T5925] FAT-fs (loop4): Directory bread(block 67) failed
[  139.476948][ T5925] FAT-fs (loop4): Directory bread(block 68) failed
[  139.562524][ T5925] FAT-fs (loop4): Directory bread(block 69) failed
[  139.604363][ T5925] FAT-fs (loop4): Directory bread(block 70) failed
[  139.610955][ T5925] FAT-fs (loop4): Directory bread(block 71) failed
[  139.647802][ T5925] FAT-fs (loop4): Directory bread(block 72) failed
[  139.691924][ T5925] FAT-fs (loop4): Directory bread(block 73) failed
[  139.860418][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'.
[  139.900529][ T5943] device bond_slave_0 entered promiscuous mode
[  139.907321][ T5943] device bond_slave_1 entered promiscuous mode
[  139.922565][ T5943] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  140.034459][ T5844] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.169675][ T5844] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.311917][ T5844] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.440612][ T5844] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.518246][ T5937] loop0: detected capacity change from 0 to 32768
[  140.565169][ T5937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.638 (5937)
[  140.582527][ T5111] Bluetooth: hci1: command 0x041b tx timeout
[  140.628435][ T5937] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  140.661334][ T5937] BTRFS info (device loop0): using free space tree
[  140.695816][ T5937] BTRFS info (device loop0): has skinny extents
[  140.715663][ T5972] netlink: 104 bytes leftover after parsing attributes in process `syz.2.654'.
[  140.801375][ T5983] loop2: detected capacity change from 0 to 64
[  140.919604][ T5993] loop4: detected capacity change from 0 to 512
[  140.946774][ T5937] BTRFS info (device loop0): enabling ssd optimizations
[  140.970351][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  140.980985][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  141.023299][ T5993] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  141.042908][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  141.088286][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  141.099963][ T5993] EXT4-fs (loop4): 1 truncate cleaned up
[  141.107181][ T5993] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback.
[  141.539476][ T6003] loop2: detected capacity change from 0 to 1024
[  141.857720][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.925142][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  141.936290][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.987234][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[  142.028460][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  142.060628][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  142.092561][ T4155] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.099730][ T4155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.148176][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  142.251316][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  142.273144][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  142.303321][ T4155] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.310493][ T4155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.381575][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  142.424492][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  142.502004][ T6022] loop2: detected capacity change from 0 to 2048
[  142.510791][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  142.534486][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  142.562930][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  142.598709][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  142.614850][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  142.645637][ T6022] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  142.656131][ T3952] Bluetooth: hci1: command 0x040f tx timeout
[  142.675984][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  142.691154][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.703519][ T6022] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  142.743648][ T6005] loop0: detected capacity change from 0 to 32768
[  142.755554][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  142.765087][ T6022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.775202][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  142.798246][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  142.851957][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  142.919586][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  142.936917][ T6005] XFS (loop0): Mounting V5 Filesystem
[  143.038887][ T6019] loop4: detected capacity change from 0 to 32768
[  143.040734][ T6005] XFS (loop0): changing quota state required on read-only device.
[  143.081366][ T6005] XFS (loop0): write access unavailable, cannot proceed.
[  143.089295][ T6005] XFS (loop0): please mount without quota.
[  143.247169][ T6019] (syz.4.666,6019,0):ocfs2_check_set_options:1214 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled.
[  143.327667][ T6019] (syz.4.666,6019,0):ocfs2_fill_super:1177 ERROR: status = -22
[  143.388040][ T3656] device hsr_slave_0 left promiscuous mode
[  143.395444][ T3656] device hsr_slave_1 left promiscuous mode
[  143.405154][ T3656] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.426390][ T3656] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.434354][ T6047] loop2: detected capacity change from 0 to 128
[  143.443591][ T3656] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.451215][ T3656] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.468804][ T3656] device bridge_slave_1 left promiscuous mode
[  143.483248][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.496307][ T3656] device bridge_slave_0 left promiscuous mode
[  143.507961][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.541600][ T6047] EXT4-fs (loop2): Test dummy encryption mode enabled
[  143.584029][ T3656] device veth1_macvtap left promiscuous mode
[  143.590161][ T3656] device veth0_macvtap left promiscuous mode
[  143.614400][ T6047] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  143.662491][ T6047] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038 (0x7fffffff)
[  143.690769][ T3656] device veth1_vlan left promiscuous mode
[  143.697052][ T3656] device veth0_vlan left promiscuous mode
[  143.781872][ T6019] loop4: detected capacity change from 0 to 164
[  143.940611][ T6019] iso9660: Corrupted directory entry in block 4 of inode 1792
[  144.025158][ T6056] loop3: detected capacity change from 0 to 2048
[  144.093539][ T6047] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  144.146618][ T6056] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  144.210276][ T6056] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038 (0x7fffffff)
[  144.494143][ T6072] loop4: detected capacity change from 0 to 2048
[  144.578100][ T6072] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000001,,errors=continue. Quota mode: none.
[  144.654300][ T6072] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  144.717136][ T6072] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28
[  144.732632][ T3952] Bluetooth: hci1: command 0x0419 tx timeout
[  144.752271][ T3656] team0 (unregistering): Port device team_slave_1 removed
[  144.753222][ T6072] EXT4-fs (loop4): This should not happen!! Data will be lost
[  144.753222][ T6072] 
[  144.779022][ T6072] EXT4-fs (loop4): Total free blocks count 0
[  144.779364][ T3656] team0 (unregistering): Port device team_slave_0 removed
[  144.787140][ T6072] EXT4-fs (loop4): Free/Dirty block details
[  144.799590][ T6072] EXT4-fs (loop4): free_blocks=2415919104
[  144.805552][ T5111] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  144.809372][ T6072] EXT4-fs (loop4): dirty_blocks=16
[  144.821942][ T6072] EXT4-fs (loop4): Block reservation details
[  144.826316][ T3656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.828268][ T6072] EXT4-fs (loop4): i_reserved_data_blocks=1
[  144.854873][ T3656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.979803][ T3656] bond0 (unregistering): Released all slaves
[  145.085400][ T6064] netlink: 'syz.0.677': attribute type 5 has an invalid length.
[  145.107911][ T5111] usb 4-1: Using ep0 maxpacket: 16
[  145.116897][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.135247][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  145.211039][ T4155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  145.256260][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  145.271992][ T5111] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  145.274415][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  145.295930][ T5111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.334657][ T5111] usb 4-1: config 0 descriptor??
[  145.352075][ T6100] loop0: detected capacity change from 0 to 4096
[  145.364450][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  145.374984][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  145.387308][ T5111] gspca_main: sonixj-2.14.0 probing 0471:0327
[  145.399026][ T5844] device veth0_vlan entered promiscuous mode
[  145.412970][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  145.438176][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  145.441936][ T6100] /dev/loop0: Can't open blockdev
[  145.476211][ T5844] device veth1_vlan entered promiscuous mode
[  145.528550][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  145.541004][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  145.583767][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  145.600338][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  145.630222][ T5844] device veth0_macvtap entered promiscuous mode
[  145.664645][ T5844] device veth1_macvtap entered promiscuous mode
[  145.770321][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.795024][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.829274][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.860187][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.898988][ T6096] loop4: detected capacity change from 0 to 32768
[  145.905659][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.916589][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.949032][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.961151][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.974127][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.984429][ T6096] XFS: ikeep mount option is deprecated.
[  145.990019][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  146.020808][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  146.070608][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  146.091618][ T6096] XFS (loop4): Mounting V5 Filesystem
[  146.112596][ T4151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  146.154877][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.165722][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.196827][ T6096] XFS (loop4): Ending clean mount
[  146.202129][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.215686][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.227292][ T6096] XFS (loop4): Quotacheck needed: Please wait.
[  146.276238][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.298653][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.322118][ T6096] XFS (loop4): Quotacheck: Done.
[  146.337327][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.375766][ T6139] loop0: detected capacity change from 0 to 1024
[  146.385563][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.399870][ T3586] XFS (loop4): Unmounting Filesystem
[  146.403168][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.442990][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  146.452631][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  146.462256][ T6130] device syzkaller1 entered promiscuous mode
[  146.482785][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.493320][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.505451][ T1291] usb 4-1: USB disconnect, device number 2
[  146.513259][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.526120][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.863679][ T4160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.882031][ T4160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.909452][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  146.946973][ T3885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.972298][ T3885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.001807][ T4153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  147.120517][ T6146] loop0: detected capacity change from 0 to 256
[  147.222555][ T6146] exfat: Deprecated parameter 'namecase'
[  147.228753][ T6146] exfat: Deprecated parameter 'utf8'
[  147.310171][ T6146] /dev/loop0: Can't open blockdev
[  147.412426][ T6164] loop2: detected capacity change from 0 to 512
[  147.585146][ T6164] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.709: inode #1: comm syz.2.709: iget: illegal inode #
[  147.619377][ T6164] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.709: error while reading EA inode 1 err=-117
[  147.658445][ T6164] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.709: inode #1: comm syz.2.709: iget: illegal inode #
[  147.672606][ T6164] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.709: error while reading EA inode 1 err=-117
[  147.695190][ T6164] EXT4-fs (loop2): 1 orphan inode deleted
[  147.700945][ T6164] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback.
[  147.736152][ T6178] loop0: detected capacity change from 0 to 256
[  147.959042][ T6186] loop2: detected capacity change from 0 to 128
[  148.590148][ T6202] loop3: detected capacity change from 0 to 4096
[  148.650400][ T6205] loop2: detected capacity change from 0 to 4096
[  148.702380][ T6202] ntfs3: Unknown parameter '1844674407370955161501777777777777777777777'
[  148.735884][ T6165] loop4: detected capacity change from 0 to 32768
[  148.799299][ T6205] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  148.894988][ T6205] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  148.900669][ T6170] loop1: detected capacity change from 0 to 40427
[  148.946146][ T6170] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  148.981235][ T6165] XFS (loop4): Mounting V5 Filesystem
[  148.985448][ T6170] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  149.054213][ T6170] F2FS-fs (loop1): invalid crc value
[  149.140847][ T4701] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  149.183816][ T6226] loop3: detected capacity change from 0 to 512
[  149.201941][ T6165] XFS (loop4): Ending clean mount
[  149.212378][ T6170] F2FS-fs (loop1): Found nat_bits in checkpoint
[  149.239651][ T6165] XFS (loop4): Quotacheck needed: Please wait.
[  149.285454][ T6226] EXT4-fs (loop3): invalid inodes per group: 0
[  149.285454][ T6226] 
[  149.369057][ T6233] IPv6: NLM_F_CREATE should be specified when creating new route
[  149.409326][ T6165] XFS (loop4): Quotacheck: Done.
[  149.432855][ T6233] IPv6: NLM_F_CREATE should be specified when creating new route
[  149.496507][ T3586] XFS (loop4): Unmounting Filesystem
[  149.530304][ T6170] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  149.567712][ T6170] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  149.644439][ T6239] netlink: 'syz.3.735': attribute type 10 has an invalid length.
[  149.681786][ T6239] netlink: 40 bytes leftover after parsing attributes in process `syz.3.735'.
[  149.770904][ T6244] loop2: detected capacity change from 0 to 512
[  149.807462][ T4153] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  149.831912][ T4153] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  150.042631][ T6244] EXT4-fs (loop2): 1 orphan inode deleted
[  150.048400][ T6244] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  150.172515][ T6244] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038 (0x7fffffff)
[  150.491016][ T6268] loop2: detected capacity change from 0 to 256
[  150.567581][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'.
[  150.570399][ T6268] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  151.361108][ T6302] loop2: detected capacity change from 0 to 128
[  151.388246][ T6302] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  151.388394][ T6302] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038 (0x7fffffff)
[  151.986365][ T3576] Bluetooth: hci5: sending frame failed (-49)
[  152.035085][ T6325] loop3: detected capacity change from 0 to 4096
[  152.088447][ T6325] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  152.110896][ T6332] loop1: detected capacity change from 0 to 256
[  152.569122][ T6343] loop3: detected capacity change from 0 to 2048
[  153.116366][ T6352] loop3: detected capacity change from 0 to 32768
[  153.226626][ T6352] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.784 (6352)
[  153.319285][ T6352] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  153.362348][ T6352] BTRFS info (device loop3): using free space tree
[  153.389426][ T6352] BTRFS info (device loop3): has skinny extents
[  153.481855][ T3952] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  153.598509][ T6352] BTRFS info (device loop3): enabling ssd optimizations
[  153.738248][ T6391] loop2: detected capacity change from 0 to 512
[  153.759662][ T6391] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  153.783143][ T6391] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.794: invalid block
[  153.801247][ T6391] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.794: invalid indirect mapped block 4294967295 (level 1)
[  153.818192][ T6391] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.794: invalid indirect mapped block 4294967295 (level 1)
[  153.840379][ T6391] EXT4-fs (loop2): 2 truncates cleaned up
[  153.846442][ T6391] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000000006,dioread_nolock,,errors=continue. Quota mode: writeback.
[  153.868802][ T6391] EXT4-fs (loop2): shut down requested (2)
[  153.934570][ T3952] usb 2-1: unable to get BOS descriptor or descriptor too short
[  154.022343][ T1291] Bluetooth: hci5: command 0x1003 tx timeout
[  154.028451][  T146] Bluetooth: hci5: sending frame failed (-49)
[  154.051821][ T3952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.072121][ T3952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  154.082207][ T3952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  154.100294][ T3952] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  154.302037][ T3952] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  154.315654][ T3952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.362577][ T3952] usb 2-1: Product: syz
[  154.366781][ T3952] usb 2-1: Manufacturer: syz
[  154.371422][ T3952] usb 2-1: SerialNumber: syz
[  154.402901][ T3952] usb 2-1: config 0 descriptor??
[  154.416210][ T4123] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  154.432132][ T6356] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  154.471809][    C1] usb 2-1: NFC: Urb failure (status -71)
[  154.477961][ T3952] usb 2-1: NFC: Unable to get FW version
[  154.484345][ T3952] pn533_usb: probe of 2-1:0.0 failed with error -90
[  154.606020][ T6402] netlink: 'syz.3.799': attribute type 11 has an invalid length.
[  154.624681][ T6404] loop2: detected capacity change from 0 to 512
[  154.682047][ T6404] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  154.733466][ T3952] usb 2-1: USB disconnect, device number 3
[  154.744938][ T6404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  154.755559][ T6407] loop3: detected capacity change from 0 to 256
[  154.762045][ T6404] System zones: 1-12
[  154.779282][ T6404] EXT4-fs (loop2): 1 truncate cleaned up
[  154.785500][ T6404] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,debug,,errors=continue. Quota mode: none.
[  154.821973][ T4123] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.839413][ T4123] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.858604][ T4123] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.861296][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'.
[  154.920656][ T4701] EXT4-fs error (device loop2): mb_free_blocks:1865: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  154.948756][ T6407] netlink: 104 bytes leftover after parsing attributes in process `syz.3.801'.
[  155.021889][ T4123] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.031394][ T4123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.051954][ T4123] usb 1-1: Product: syz
[  155.056238][ T4123] usb 1-1: Manufacturer: syz
[  155.060848][ T4123] usb 1-1: SerialNumber: syz
[  155.134791][ T4123] usb 1-1: selecting invalid altsetting 1
[  155.263072][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'.
[  155.293077][ T6415] IPVS: Error joining to the multicast group
[  155.327312][ T6387] loop0: detected capacity change from 0 to 256
[  155.417158][ T6417] loop2: detected capacity change from 0 to 8192
[  155.491965][ T6387] /dev/loop0: Can't open blockdev
[  155.509864][ T6417] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  155.511864][ T4123] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  155.530316][ T6417] REISERFS (device loop2): using ordered data mode
[  155.539346][ T6417] reiserfs: using flush barriers
[  155.566592][ T6417] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  155.595392][ T4123] cdc_ncm 1-1:1.0: bind() failure
[  155.620181][ T6417] REISERFS (device loop2): checking transaction log (loop2)
[  155.630058][ T4123] usb 1-1: USB disconnect, device number 5
[  155.714176][ T6417] REISERFS (device loop2): Using tea hash to sort names
[  155.723068][ T6417] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  155.759761][ T6417] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[  155.777072][ T6417] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3)
[  155.912516][ T6426] loop3: detected capacity change from 0 to 512
[  156.024284][ T6426] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  156.085792][ T6431] loop0: detected capacity change from 0 to 512
[  156.102609][ T2087] Bluetooth: hci5: command 0x1001 tx timeout
[  156.103382][ T6426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  156.108839][  T146] Bluetooth: hci5: sending frame failed (-49)
[  156.124722][ T3952] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  156.127062][ T6426] System zones: 1-12
[  156.163295][ T6426] EXT4-fs (loop3): 1 truncate cleaned up
[  156.171897][ T6426] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,,errors=continue. Quota mode: writeback.
[  156.401737][ T3952] usb 2-1: Using ep0 maxpacket: 16
[  156.468060][ T6428] loop2: detected capacity change from 0 to 32768
[  156.512130][ T6428] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.806 (6428)
[  156.542816][ T3952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.559751][ T3952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.581705][ T3952] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  156.600512][ T3952] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  156.610141][ T3952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.636578][ T3952] usb 2-1: config 0 descriptor??
[  156.652642][ T6428] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  156.661299][ T6428] BTRFS info (device loop2): using free space tree
[  156.711786][ T6428] BTRFS info (device loop2): has skinny extents
[  156.900235][ T6428] BTRFS info (device loop2): enabling ssd optimizations
[  156.947699][ T6433] loop0: detected capacity change from 0 to 32768
[  157.077396][ T6433] /dev/loop0: Can't open blockdev
[  157.134246][ T3952] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  157.145205][ T3952] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  157.157900][ T3952] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  157.170560][ T3952] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  157.180339][ T3952] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  157.217411][ T3952] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  157.232652][ T3952] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  157.299252][ T3952] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  157.308037][ T3952] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  157.330622][ T3952] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  157.359823][ T3952] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input9
[  157.432054][ T3952] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  157.487469][ T3952] usb 2-1: USB disconnect, device number 4
[  157.758668][ T6460] loop3: detected capacity change from 0 to 32768
[  157.866025][ T6460] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.814 (6460)
[  157.894699][ T6460] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  157.920344][ T6460] BTRFS info (device loop3): using free space tree
[  157.927316][ T6460] BTRFS info (device loop3): has skinny extents
[  158.010524][ T6460] BTRFS info (device loop3): enabling ssd optimizations
[  158.047971][   T26] audit: type=1800 audit(1727195184.374:27): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.814" name="bus" dev="loop3" ino=263 res=0 errno=0
[  158.095392][ T5161] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  158.173819][ T2087] Bluetooth: hci5: command 0x1009 tx timeout
[  158.383758][ T6501] device  entered promiscuous mode
[  158.396768][ T6502] device  left promiscuous mode
[  158.521798][ T5161] usb 1-1: unable to get BOS descriptor or descriptor too short
[  158.613833][ T5161] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.654565][ T6509] loop1: detected capacity change from 0 to 1024
[  158.655000][ T5161] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  158.679075][ T5161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  158.742369][ T5161] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  158.760404][ T6509] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nombcache,quota,usrjquota=,init_itable=0x0000000000008000,lazytime,init_itable=0x0000000000000005,nojournal_checksum,nobarrier,,errors=continue. Quota mode: writeback.
[  158.802498][   T26] audit: type=1800 audit(1727195185.134:28): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.829" name="bus" dev="loop1" ino=18 res=0 errno=0
[  158.857398][ T6512] loop3: detected capacity change from 0 to 4096
[  158.981944][ T5161] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  159.009684][ T5161] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.025729][ T5161] usb 1-1: Product: syz
[  159.031600][ T5161] usb 1-1: Manufacturer: syz
[  159.037234][ T5161] usb 1-1: SerialNumber: syz
[  159.071052][ T5161] usb 1-1: config 0 descriptor??
[  159.102042][ T6471] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  159.121969][ T2087] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  159.141711][    C0] usb 1-1: NFC: Urb failure (status -71)
[  159.147601][ T5161] usb 1-1: NFC: Unable to get FW version
[  159.153889][ T5161] pn533_usb: probe of 1-1:0.0 failed with error -90
[  159.354449][ T3623] usb 1-1: USB disconnect, device number 6
[  159.391767][ T2087] usb 3-1: Using ep0 maxpacket: 8
[  159.486736][ T6526] loop3: detected capacity change from 0 to 32768
[  159.722034][ T2087] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  159.734822][ T2087] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.744129][ T2087] usb 3-1: Product: syz
[  159.748390][ T2087] usb 3-1: Manufacturer: syz
[  159.754226][ T2087] usb 3-1: SerialNumber: syz
[  159.768669][ T2087] usb 3-1: config 0 descriptor??
[  159.852602][ T3952] Bluetooth: hci1: command 0x0405 tx timeout
[  159.944643][ T6533] loop0: detected capacity change from 0 to 1024
[  160.001409][ T6537] loop3: detected capacity change from 0 to 2048
[  160.041961][ T2087] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  160.054356][ T6537] EXT4-fs (loop3): Ignoring removed mblk_io_submit option
[  160.134851][ T6537] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,delalloc,,errors=continue. Quota mode: none.
[  160.166001][ T6541] dccp_invalid_packet: P.Data Offset(0) too small
[  160.412792][ T6550] loop0: detected capacity change from 0 to 65
[  160.577177][ T6543] loop1: detected capacity change from 0 to 32768
[  160.619054][ T6543] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.843 (6543)
[  160.681836][ T6543] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  160.700607][ T6543] BTRFS info (device loop1): setting nodatacow, compression disabled
[  160.709971][ T6543] BTRFS info (device loop1): max_inline at 0
[  160.716653][ T6543] BTRFS info (device loop1): enabling disk space caching
[  160.733052][ T6543] BTRFS info (device loop1): turning off barriers
[  160.753233][ T6543] BTRFS info (device loop1): turning on flush-on-commit
[  160.777830][ T6543] BTRFS info (device loop1): doing ref verification
[  160.785722][ T6543] BTRFS info (device loop1): force clearing of disk cache
[  160.794029][ T6543] BTRFS info (device loop1): enabling ssd optimizations
[  160.801606][ T6543] BTRFS info (device loop1): max_inline at 4096
[  160.821768][ T6543] BTRFS info (device loop1): disk space caching is enabled
[  160.821792][ T6543] BTRFS info (device loop1): has skinny extents
[  160.962656][ T6543] BTRFS info (device loop1): clearing free space tree
[  160.970648][ T6543] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  160.981137][ T2087] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  161.007622][ T2087] usb 3-1: USB disconnect, device number 9
[  161.020256][ T6543] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  161.265577][ T6585] loop0: detected capacity change from 0 to 32768
[  161.564519][ T6590] Zero length message leads to an empty skb
[  161.680946][ T6597] loop1: detected capacity change from 0 to 256
[  161.740265][ T6597] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  161.973651][ T6611] loop2: detected capacity change from 0 to 64
[  162.055117][ T6614] loop3: detected capacity change from 0 to 256
[  162.187233][ T6614] FAT-fs (loop3): Directory bread(block 64) failed
[  162.230376][ T6614] FAT-fs (loop3): Directory bread(block 65) failed
[  162.281906][ T6614] FAT-fs (loop3): Directory bread(block 66) failed
[  162.308068][ T6614] FAT-fs (loop3): Directory bread(block 67) failed
[  162.326916][ T6624] capability: warning: `syz.2.871' uses 32-bit capabilities (legacy support in use)
[  162.361827][ T6614] FAT-fs (loop3): Directory bread(block 68) failed
[  162.372048][ T6614] FAT-fs (loop3): Directory bread(block 69) failed
[  162.394633][ T6614] FAT-fs (loop3): Directory bread(block 70) failed
[  162.410063][ T6614] FAT-fs (loop3): Directory bread(block 71) failed
[  162.417530][ T6614] FAT-fs (loop3): Directory bread(block 72) failed
[  162.429135][ T6614] FAT-fs (loop3): Directory bread(block 73) failed
[  162.469658][ T6627] loop2: detected capacity change from 0 to 256
[  162.579125][ T6627] exfat: Deprecated parameter 'utf8'
[  162.623566][ T6627] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d)
[  162.850257][ T4155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.042326][ T6616] loop0: detected capacity change from 0 to 40427
[  163.073816][ T4155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.160783][ T4155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.209876][ T6631] loop1: detected capacity change from 0 to 32768
[  163.267663][ T6621] chnl_net:caif_netlink_parms(): no params data found
[  163.298932][ T6631] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.874 (6631)
[  163.377144][ T6647] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  163.401357][ T4155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.450292][ T6631] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  163.487964][ T6631] BTRFS info (device loop1): using free space tree
[  163.515464][ T6631] BTRFS info (device loop1): has skinny extents
[  163.569666][ T6657] loop2: detected capacity change from 0 to 1764
[  163.735613][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.791805][ T6631] BTRFS info (device loop1): enabling ssd optimizations
[  163.828807][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.871488][ T6621] device bridge_slave_0 entered promiscuous mode
[  164.144934][ T6691] blk_update_request: I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  164.169103][    C1] vkms_vblank_simulate: vblank timer overrun
[  164.217661][ T6691] qnx4: unable to read the superblock
[  164.387910][ T6684] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  164.397636][ T6684] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  164.406677][ T6684] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  164.411805][ T6694] Bluetooth: hci5: command 0x0409 tx timeout
[  164.415423][ T6684] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  164.458108][ T6698] loop1: detected capacity change from 0 to 256
[  164.461952][ T6684] device vxlan0 entered promiscuous mode
[  164.472341][ T6684] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready
[  164.485370][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.505983][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.523081][ T6621] device bridge_slave_1 entered promiscuous mode
[  164.539714][ T6698] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  164.697717][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.742884][ T6708] loop3: detected capacity change from 0 to 128
[  164.752784][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.902852][ T6714] bridge0: port 3(gretap0) entered blocking state
[  164.946232][ T6714] bridge0: port 3(gretap0) entered disabled state
[  165.026456][ T6714] device gretap0 entered promiscuous mode
[  165.059852][ T6714] bridge0: port 3(gretap0) entered blocking state
[  165.067007][ T6714] bridge0: port 3(gretap0) entered forwarding state
[  165.163277][ T4155] tipc: Disabling bearer <udp:syz1>
[  165.179312][ T4155] tipc: Left network mode
[  165.186640][ T6621] team0: Port device team_slave_0 added
[  165.222331][ T6621] team0: Port device team_slave_1 added
[  165.367012][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.378993][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.451775][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.493331][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.508216][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.562470][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.714789][ T6743] loop0: detected capacity change from 0 to 16
[  165.749704][ T6621] device hsr_slave_0 entered promiscuous mode
[  165.762703][ T6621] device hsr_slave_1 entered promiscuous mode
[  165.785487][ T6621] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.795735][ T6743] erofs: (device loop0): mounted with root inode @ nid 36.
[  165.818340][ T6726] loop3: detected capacity change from 0 to 32768
[  165.827980][ T6621] Cannot create hsr debugfs directory
[  165.846801][ T6743] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  165.863388][ T6743] attempt to access beyond end of device
[  165.863388][ T6743] loop0: rw=0, want=304, limit=16
[  165.874429][ T6743] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117]
[  165.886294][ T6743] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  165.917753][ T6746] attempt to access beyond end of device
[  165.917753][ T6746] loop0: rw=524288, want=312, limit=16
[  166.005333][ T6726] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0
[  166.005333][ T6726] 
[  166.019441][ T6746] attempt to access beyond end of device
[  166.019441][ T6746] loop0: rw=524288, want=1049272, limit=16
[  166.101400][ T6726] ERROR: (device loop3): remounting filesystem as read-only
[  166.206969][ T6756] loop0: detected capacity change from 0 to 64
[  166.389656][ T6756] 9pnet: Insufficient options for proto=fd
[  166.450215][ T6761] loop1: detected capacity change from 0 to 2048
[  166.492270][ T4025] Bluetooth: hci5: command 0x041b tx timeout
[  166.538813][ T6761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.857723][ T6788] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  166.975284][ T6621] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  167.107325][ T4155] device hsr_slave_0 left promiscuous mode
[  167.136235][ T6793] loop1: detected capacity change from 0 to 1764
[  167.146566][ T4155] device hsr_slave_1 left promiscuous mode
[  167.154628][ T6799] loop3: detected capacity change from 0 to 64
[  167.163798][ T4155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  167.171351][ T4155] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.179853][ T4155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.187514][ T4155] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.196990][ T4155] device bridge_slave_1 left promiscuous mode
[  167.207220][ T4155] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.216391][ T4155] device bridge_slave_0 left promiscuous mode
[  167.225921][ T4155] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.293651][ T4155] device veth1_macvtap left promiscuous mode
[  167.300241][ T4155] device veth0_macvtap left promiscuous mode
[  167.310272][ T4155] device veth1_vlan left promiscuous mode
[  167.348108][ T4155] device veth0_vlan left promiscuous mode
[  167.766539][ T3950] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  167.864862][ T6805] loop1: detected capacity change from 0 to 32768
[  167.900383][ T4155] team0 (unregistering): Port device team_slave_1 removed
[  167.918860][ T6805] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.928 (6805)
[  167.944658][ T4155] team0 (unregistering): Port device team_slave_0 removed
[  167.960252][ T6805] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  167.969479][ T6805] BTRFS info (device loop1): using free space tree
[  167.980462][ T4155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.984676][ T6805] BTRFS info (device loop1): has skinny extents
[  168.012363][ T4155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.146818][ T6805] BTRFS info (device loop1): enabling ssd optimizations
[  168.196665][ T4155] bond0 (unregistering): Released all slaves
[  168.384619][ T3950] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  168.401758][ T3950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.409809][ T3950] usb 1-1: Product: syz
[  168.431938][ T3950] usb 1-1: Manufacturer: syz
[  168.436591][ T3950] usb 1-1: SerialNumber: syz
[  168.452727][ T3950] r8152-cfgselector 1-1: config 0 descriptor??
[  168.572193][ T5161] Bluetooth: hci5: command 0x040f tx timeout
[  168.578392][ T6621] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  168.635398][ T6621] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  168.692148][ T6841] loop1: detected capacity change from 0 to 64
[  168.707220][ T6621] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  168.714378][ T3950] r8152-cfgselector 1-1: Unknown version 0x0000
[  168.795869][ T3950] usbip-host 1-1: 1-1 is not in match_busid table... skip!
[  168.803932][   T26] audit: type=1800 audit(1727195195.134:29): pid=6841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.936" name="file1" dev="loop1" ino=18 res=0 errno=0
[  168.935536][ T6847] loop2: detected capacity change from 0 to 1024
[  169.007730][ T4025] usb 1-1: USB disconnect, device number 7
[  169.113841][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.126776][ T6854] hfsplus: extend alloc file! (8192,512,16777719)
[  169.158354][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.172264][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.204289][ T6621] 8021q: adding VLAN 0 to HW filter on device team0
[  169.233652][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.254861][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.272218][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.279349][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.339224][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.370290][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.402181][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.431153][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.438297][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.538827][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.572839][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  169.612222][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.634472][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.709180][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  169.722400][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  169.758673][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  169.815790][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  169.843691][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.879029][ T6844] loop3: detected capacity change from 0 to 32768
[  169.882285][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  169.932539][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.980416][ T6621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  170.094285][ T6844] XFS (loop3): Mounting V5 Filesystem
[  170.268894][ T6844] XFS (loop3): Ending clean mount
[  170.286669][ T6844] XFS (loop3): Quotacheck needed: Please wait.
[  170.394578][ T6844] XFS (loop3): Quotacheck: Done.
[  170.401268][ T6851] loop1: detected capacity change from 0 to 40427
[  170.469296][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  170.483205][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  170.510214][ T6851] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  170.522068][ T6851] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  170.534368][ T6851] F2FS-fs (loop1): invalid crc value
[  170.547027][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.606965][ T6860] loop2: detected capacity change from 0 to 32768
[  170.617114][ T6851] F2FS-fs (loop1): Found nat_bits in checkpoint
[  170.651938][ T6694] Bluetooth: hci5: command 0x0419 tx timeout
[  170.771499][ T6851] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  170.781951][ T6851] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  170.831948][ T3584] XFS (loop3): Unmounting Filesystem
[  170.955012][ T6860] XFS (loop2): Mounting V5 Filesystem
[  171.008294][ T6865] loop0: detected capacity change from 0 to 40427
[  171.156592][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  171.199845][ T6860] XFS (loop2): Ending clean mount
[  171.212298][ T4148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  171.337126][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  171.360392][   T26] audit: type=1800 audit(1727195197.684:30): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.940" name="file1" dev="loop2" ino=7430 res=0 errno=0
[  171.382466][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  171.434079][   T26] audit: type=1800 audit(1727195197.724:31): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.940" name="file1" dev="loop2" ino=7430 res=0 errno=0
[  171.454895][    C1] vkms_vblank_simulate: vblank timer overrun
[  171.468395][ T6621] device veth0_vlan entered promiscuous mode
[  171.497882][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  171.515181][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  171.554149][ T4701] XFS (loop2): Unmounting Filesystem
[  171.568980][ T6621] device veth1_vlan entered promiscuous mode
[  171.696909][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  171.732403][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  171.780358][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  171.828727][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  171.894146][ T6621] device veth0_macvtap entered promiscuous mode
[  171.906423][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  171.935305][ T6621] device veth1_macvtap entered promiscuous mode
[  172.038147][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.112447][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.167919][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.217854][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.275129][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.316438][ T6951] loop3: detected capacity change from 0 to 256
[  172.327777][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.356057][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.371747][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.389184][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.400941][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.421700][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.453320][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.515820][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.572580][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.572772][ T6953] loop1: detected capacity change from 0 to 32768
[  172.593138][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.603044][ T6621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.613537][ T6621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.624908][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.636762][ T6621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.645800][ T6621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.655020][ T6621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.662449][ T6951] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  172.663922][ T6621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.723081][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  172.755797][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  172.804458][ T6953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.943 (6953)
[  172.807220][   T26] audit: type=1800 audit(1727195199.134:32): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.952" name="file0" dev="loop3" ino=1048656 res=0 errno=0
[  172.837385][    C1] vkms_vblank_simulate: vblank timer overrun
[  172.846147][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  172.876531][ T6951] exFAT-fs (loop3): error, invalid size(size(4096) > aligned(9223372036854777344)
[  172.876531][ T6951] 
[  172.898156][ T4160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  172.911858][ T6953] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  172.920692][ T6953] BTRFS info (device loop1): use zlib compression, level 3
[  172.928000][ T6953] BTRFS info (device loop1): using free space tree
[  172.934551][ T6953] BTRFS info (device loop1): has skinny extents
[  172.940331][ T6951] exFAT-fs (loop3): Filesystem has been set read-only
[  173.282570][ T6953] BTRFS info (device loop1): enabling ssd optimizations
[  173.317188][ T3885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.400823][ T4160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.404087][ T3885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.441780][ T6996] loop2: detected capacity change from 0 to 4096
[  173.460287][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  173.474293][ T4160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.488943][ T7000] device vlan1 entered promiscuous mode
[  173.510578][ T3885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  173.538142][ T6999] device vlan1 left promiscuous mode
[  173.586896][ T6996] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  174.209524][ T7014] loop2: detected capacity change from 0 to 2048
[  174.300193][ T7021] loop4: detected capacity change from 0 to 64
[  174.343533][ T7014] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  174.569196][ T7033] binder: 7031:7033 ioctl c0306201 0 returned -14
[  174.585409][ T7033] binder: 7031:7033 ioctl 401845e0 0 returned -22
[  174.893032][ T7051] IPVS: dh: SCTP 172.20.20.187:0 - no destination available
[  175.313948][ T7070] loop2: detected capacity change from 0 to 256
[  175.438736][ T7070] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  175.684691][ T7083] loop2: detected capacity change from 0 to 128
[  175.690453][ T7085] loop0: detected capacity change from 0 to 256
[  175.737812][ T7087] loop1: detected capacity change from 0 to 512
[  175.750409][ T7060] loop4: detected capacity change from 0 to 32768
[  175.778963][ T7083] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  175.781805][ T7085] /dev/loop0: Can't open blockdev
[  175.790498][ T7083] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038 (0x7fffffff)
[  175.817533][ T7087] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  175.849888][ T7060] XFS (loop4): Mounting V5 Filesystem
[  175.891770][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  175.893859][ T7087] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.998: invalid block
[  175.941178][ T7087] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.998: invalid indirect mapped block 10 (level 1)
[  175.967220][ T7087] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.998: invalid indirect mapped block 8 (level 1)
[  175.988807][ T7060] XFS (loop4): Starting recovery (logdev: internal)
[  176.015540][ T7087] EXT4-fs (loop1): 1 truncate cleaned up
[  176.028129][ T7087] EXT4-fs (loop1): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none.
[  176.085484][ T7087] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.998: Unrecognised inode hash code 4
[  176.110886][ T7087] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.998: Corrupt directory, running e2fsck is recommended
[  176.140938][ T7060] XFS (loop4): Ending recovery (logdev: internal)
[  176.269844][ T6621] XFS (loop4): Unmounting Filesystem
[  176.352277][   T23] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  176.372064][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.448922][   T23] usb 4-1: config 0 descriptor??
[  176.506691][   T23] cp210x 4-1:0.0: cp210x converter detected
[  176.662418][ T7124] bridge0: port 3(vlan2) entered blocking state
[  176.670484][ T7124] bridge0: port 3(vlan2) entered disabled state
[  176.718562][ T7124] device vlan2 entered promiscuous mode
[  176.727973][ T7124] device vlan1 entered promiscuous mode
[  176.760838][ T7124] bridge0: port 3(vlan2) entered blocking state
[  176.769760][ T7124] bridge0: port 3(vlan2) entered forwarding state
[  176.913850][ T7081] udc-core: couldn't find an available UDC or it's busy
[  176.913871][ T7081] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  176.928101][   T23] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  176.975648][   T23] usb 4-1: cp210x converter now attached to ttyUSB0
[  177.174614][ T3954] usb 4-1: USB disconnect, device number 3
[  177.188548][ T3954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  177.284786][ T3954] cp210x 4-1:0.0: device disconnected
[  177.772207][   T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  177.895183][ T6694] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  178.083500][ T7156] loop1: detected capacity change from 0 to 40427
[  178.150822][ T7156] F2FS-fs (loop1): Found nat_bits in checkpoint
[  178.174466][   T23] usb 1-1: config 0 has an invalid interface number: 183 but max is 0
[  178.183024][   T23] usb 1-1: config 0 has no interface number 0
[  178.199342][   T23] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=26.3d
[  178.218915][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.239238][   T23] usb 1-1: config 0 descriptor??
[  178.272096][ T6694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.287957][ T7156] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  178.304465][ T6694] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  178.357388][ T6694] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  178.367002][ T6694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.418071][ T6694] usb 3-1: config 0 descriptor??
[  178.424484][ T5844] attempt to access beyond end of device
[  178.424484][ T5844] loop1: rw=2049, want=45104, limit=40427
[  178.490796][ T7174] loop3: detected capacity change from 0 to 32768
[  178.583803][ T7174] JBD2: Ignoring recovery information on journal
[  178.596231][ T7176] loop4: detected capacity change from 0 to 32768
[  178.722996][ T7174] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  178.731916][   T23] airspy 1-1:0.183: Board ID: 00
[  178.737140][   T23] airspy 1-1:0.183: Firmware version: 
[  178.760558][   T26] audit: type=1800 audit(1727195205.084:33): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1032" name="bus" dev="loop3" ino=16946 res=0 errno=0
[  178.765220][ T7174] 
[  178.783303][ T7174] ======================================================
[  178.790316][ T7174] WARNING: possible circular locking dependency detected
[  178.797318][ T7174] 5.15.167-syzkaller #0 Not tainted
[  178.802508][ T7174] ------------------------------------------------------
[  178.809519][ T7174] syz.3.1032/7174 is trying to acquire lock:
[  178.815478][ T7174] ffff88805f8fb120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb2/0x330
[  178.827048][ T7174] 
[  178.827048][ T7174] but task is already holding lock:
[  178.834403][ T7174] ffff88805f8fb1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330
[  178.845013][ T7174] 
[  178.845013][ T7174] which lock already depends on the new lock.
[  178.845013][ T7174] 
[  178.855489][ T7174] 
[  178.855489][ T7174] the existing dependency chain (in reverse order) is:
[  178.864485][ T7174] 
[  178.864485][ T7174] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  178.872293][ T7174]        lock_acquire+0x1db/0x4f0
[  178.877326][ T7174]        down_read+0x45/0x2e0
[  178.881993][ T7174]        ocfs2_init_acl+0x398/0x930
[  178.887199][ T7174]        ocfs2_mknod+0x1e8f/0x2cd0
[  178.892303][ T7174]        ocfs2_create+0x194/0x430
[  178.897319][ T7174]        path_openat+0x130a/0x2f20
[  178.902420][ T7174]        do_filp_open+0x21c/0x460
[  178.907434][ T7174]        do_sys_openat2+0x13b/0x4f0
[  178.912619][ T7174]        __x64_sys_openat+0x243/0x290
[  178.918067][ T7174]        do_syscall_64+0x3b/0xb0
[  178.922997][ T7174]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  178.929441][ T7174] 
[  178.929441][ T7174] -> #3 (jbd2_handle){++++}-{0:0}:
[  178.936752][ T7174]        lock_acquire+0x1db/0x4f0
[  178.941770][ T7174]        start_this_handle+0x12e1/0x1570
[  178.947413][ T7174]        jbd2__journal_start+0x2d1/0x5c0
[  178.953036][ T7174]        jbd2_journal_start+0x25/0x30
[  178.958397][ T7174]        ocfs2_start_trans+0x3c2/0x6f0
[  178.963860][ T7174]        ocfs2_mknod+0x15bb/0x2cd0
[  178.968976][ T7174]        ocfs2_create+0x194/0x430
[  178.973997][ T7174]        path_openat+0x130a/0x2f20
[  178.979115][ T7174]        do_filp_open+0x21c/0x460
[  178.984133][ T7174]        do_sys_openat2+0x13b/0x4f0
[  178.989408][ T7174]        __x64_sys_openat+0x243/0x290
[  178.994798][ T7174]        do_syscall_64+0x3b/0xb0
[  178.999749][ T7174]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.006163][ T7174] 
[  179.006163][ T7174] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  179.014677][ T7174]        lock_acquire+0x1db/0x4f0
[  179.019711][ T7174]        down_read+0x45/0x2e0
[  179.024380][ T7174]        ocfs2_start_trans+0x3b7/0x6f0
[  179.029839][ T7174]        ocfs2_mknod+0x15bb/0x2cd0
[  179.034945][ T7174]        ocfs2_create+0x194/0x430
[  179.039962][ T7174]        path_openat+0x130a/0x2f20
[  179.045066][ T7174]        do_filp_open+0x21c/0x460
[  179.050082][ T7174]        do_sys_openat2+0x13b/0x4f0
[  179.055271][ T7174]        __x64_sys_openat+0x243/0x290
[  179.060632][ T7174]        do_syscall_64+0x3b/0xb0
[  179.065560][ T7174]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.071973][ T7174] 
[  179.071973][ T7174] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  179.079439][ T7174]        lock_acquire+0x1db/0x4f0
[  179.084469][ T7174]        ocfs2_start_trans+0x2b2/0x6f0
[  179.089919][ T7174]        ocfs2_truncate_file+0x661/0x14f0
[  179.095629][ T7174]        ocfs2_setattr+0x165e/0x1c70
[  179.100936][ T7174]        notify_change+0xc6d/0xf50
[  179.106043][ T7174]        do_truncate+0x21c/0x300
[  179.110972][ T7174]        path_openat+0x28a3/0x2f20
[  179.116098][ T7174]        do_filp_open+0x21c/0x460
[  179.121118][ T7174]        do_sys_openat2+0x13b/0x4f0
[  179.126312][ T7174]        __x64_sys_creat+0x11f/0x160
[  179.131601][ T7174]        do_syscall_64+0x3b/0xb0
[  179.136537][ T7174]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.143062][ T7174] 
[  179.143062][ T7174] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  179.151826][ T7174]        validate_chain+0x1649/0x5930
[  179.157190][ T7174]        __lock_acquire+0x1295/0x1ff0
[  179.162563][ T7174]        lock_acquire+0x1db/0x4f0
[  179.167667][ T7174]        down_write+0x38/0x60
[  179.172341][ T7174]        ocfs2_try_remove_refcount_tree+0xb2/0x330
[  179.178843][ T7174]        ocfs2_truncate_file+0xe3c/0x14f0
[  179.184559][ T7174]        ocfs2_setattr+0x165e/0x1c70
[  179.189843][ T7174]        notify_change+0xc6d/0xf50
[  179.194949][ T7174]        do_truncate+0x21c/0x300
[  179.199890][ T7174]        path_openat+0x28a3/0x2f20
[  179.205006][ T7174]        do_filp_open+0x21c/0x460
[  179.210024][ T7174]        do_sys_openat2+0x13b/0x4f0
[  179.215215][ T7174]        __x64_sys_creat+0x11f/0x160
[  179.220493][ T7174]        do_syscall_64+0x3b/0xb0
[  179.225425][ T7174]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.232096][ T7174] 
[  179.232096][ T7174] other info that might help us debug this:
[  179.232096][ T7174] 
[  179.242319][ T7174] Chain exists of:
[  179.242319][ T7174]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  179.242319][ T7174] 
[  179.256310][ T7174]  Possible unsafe locking scenario:
[  179.256310][ T7174] 
[  179.263923][ T7174]        CPU0                    CPU1
[  179.269276][ T7174]        ----                    ----
[  179.274720][ T7174]   lock(&oi->ip_xattr_sem);
[  179.279304][ T7174]                                lock(jbd2_handle);
[  179.285884][ T7174]                                lock(&oi->ip_xattr_sem);
[  179.292985][ T7174]   lock(&ocfs2_file_ip_alloc_sem_key);
[  179.298525][ T7174] 
[  179.298525][ T7174]  *** DEADLOCK ***
[  179.298525][ T7174] 
[  179.306667][ T7174] 3 locks held by syz.3.1032/7174:
[  179.311803][ T7174]  #0: ffff88805ce9a460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  179.321048][ T7174]  #1: ffff88805f8fb488 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: do_truncate+0x208/0x300
[  179.331482][ T7174]  #2: ffff88805f8fb1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330
[  179.342565][ T7174] 
[  179.342565][ T7174] stack backtrace:
[  179.348440][ T7174] CPU: 0 PID: 7174 Comm: syz.3.1032 Not tainted 5.15.167-syzkaller #0
[  179.356586][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  179.366638][ T7174] Call Trace:
[  179.369907][ T7174]  <TASK>
[  179.372839][ T7174]  dump_stack_lvl+0x1e3/0x2d0
[  179.377553][ T7174]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  179.383186][ T7174]  ? print_circular_bug+0x12b/0x1a0
[  179.388469][ T7174]  check_noncircular+0x2f8/0x3b0
[  179.393405][ T7174]  ? add_chain_block+0x850/0x850
[  179.398334][ T7174]  ? lockdep_lock+0x11f/0x2a0
[  179.403024][ T7174]  validate_chain+0x1649/0x5930
[  179.407918][ T7174]  ? stack_trace_save+0x113/0x1c0
[  179.412936][ T7174]  ? reacquire_held_locks+0x660/0x660
[  179.418322][ T7174]  ? stack_trace_snprint+0xe0/0xe0
[  179.423432][ T7174]  ? lockdep_unlock+0x166/0x300
[  179.428296][ T7174]  ? mark_lock+0x98/0x340
[  179.432619][ T7174]  __lock_acquire+0x1295/0x1ff0
[  179.437472][ T7174]  lock_acquire+0x1db/0x4f0
[  179.442001][ T7174]  ? ocfs2_try_remove_refcount_tree+0xb2/0x330
[  179.448243][ T7174]  ? read_lock_is_recursive+0x10/0x10
[  179.453609][ T7174]  ? __might_sleep+0xc0/0xc0
[  179.458200][ T7174]  ? rwsem_write_trylock+0x166/0x210
[  179.463568][ T7174]  ? clear_nonspinnable+0x60/0x60
[  179.468595][ T7174]  down_write+0x38/0x60
[  179.472745][ T7174]  ? ocfs2_try_remove_refcount_tree+0xb2/0x330
[  179.478902][ T7174]  ocfs2_try_remove_refcount_tree+0xb2/0x330
[  179.484877][ T7174]  ? ocfs2_remove_refcount_tree+0x1000/0x1000
[  179.490955][ T7174]  ? ocfs2_truncate_file+0xa07/0x14f0
[  179.496322][ T7174]  ocfs2_truncate_file+0xe3c/0x14f0
[  179.501541][ T7174]  ? ocfs2_inode_lock_tracker+0x455/0x750
[  179.507257][ T7174]  ? ocfs2_simple_size_update+0x4d0/0x4d0
[  179.512971][ T7174]  ? do_raw_spin_unlock+0x137/0x8b0
[  179.518161][ T7174]  ? memset+0x1f/0x40
[  179.522143][ T7174]  ? _raw_spin_unlock+0x24/0x40
[  179.526989][ T7174]  ? ocfs2_inode_lock_tracker+0x455/0x750
[  179.532765][ T7174]  ? ocfs2_inode_lock_atime+0x5a0/0x5a0
[  179.538306][ T7174]  ? ocfs2_rw_lock+0x13a/0x250
[  179.543067][ T7174]  ? ocfs2_create_new_inode_locks+0x6d0/0x6d0
[  179.549132][ T7174]  ? jbd2_journal_begin_ordered_truncate+0xbc/0x150
[  179.555716][ T7174]  ocfs2_setattr+0x165e/0x1c70
[  179.560487][ T7174]  ? ocfs2_extend_allocation+0x1ba0/0x1ba0
[  179.566290][ T7174]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  179.572531][ T7174]  ? ktime_get_coarse_real_ts64+0x107/0x120
[  179.578419][ T7174]  ? current_time+0x1ba/0x300
[  179.583091][ T7174]  ? atime_needs_update+0x7b0/0x7b0
[  179.588303][ T7174]  ? evm_inode_setattr+0xf7/0x5b0
[  179.593322][ T7174]  ? rwsem_write_trylock+0x166/0x210
[  179.598687][ T7174]  ? bpf_lsm_inode_setattr+0x5/0x10
[  179.603883][ T7174]  ? security_inode_setattr+0xce/0x120
[  179.609338][ T7174]  ? ocfs2_extend_allocation+0x1ba0/0x1ba0
[  179.615143][ T7174]  notify_change+0xc6d/0xf50
[  179.619764][ T7174]  do_truncate+0x21c/0x300
[  179.624175][ T7174]  ? rcu_lock_release+0x20/0x20
[  179.629021][ T7174]  ? ima_bprm_check+0x2b0/0x2b0
[  179.633870][ T7174]  ? bpf_lsm_path_truncate+0x5/0x10
[  179.639066][ T7174]  path_openat+0x28a3/0x2f20
[  179.643760][ T7174]  ? do_filp_open+0x460/0x460
[  179.648445][ T7174]  do_filp_open+0x21c/0x460
[  179.652951][ T7174]  ? vfs_tmpfile+0x2e0/0x2e0
[  179.657549][ T7174]  ? _raw_spin_unlock+0x24/0x40
[  179.662396][ T7174]  ? alloc_fd+0x598/0x630
[  179.666724][ T7174]  do_sys_openat2+0x13b/0x4f0
[  179.671403][ T7174]  ? read_lock_is_recursive+0x10/0x10
[  179.676855][ T7174]  ? do_sys_open+0x220/0x220
[  179.681442][ T7174]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  179.687425][ T7174]  __x64_sys_creat+0x11f/0x160
[  179.692273][ T7174]  ? __x64_compat_sys_openat+0x290/0x290
[  179.697901][ T7174]  ? syscall_enter_from_user_mode+0x2e/0x240
[  179.703881][ T7174]  ? lockdep_hardirqs_on+0x94/0x130
[  179.709166][ T7174]  ? syscall_enter_from_user_mode+0x2e/0x240
[  179.715151][ T7174]  do_syscall_64+0x3b/0xb0
[  179.719563][ T7174]  ? clear_bhb_loop+0x15/0x70
[  179.724235][ T7174]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.730134][ T7174] RIP: 0033:0x7efe1a088ef9
[  179.734551][ T7174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.754156][ T7174] RSP: 002b:00007efe18501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  179.762651][ T7174] RAX: ffffffffffffffda RBX: 00007efe1a240f80 RCX: 00007efe1a088ef9
[  179.770617][ T7174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000040
[  179.778603][ T7174] RBP: 00007efe1a0fbb76 R08: 0000000000000000 R09: 0000000000000000
[  179.786570][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.794535][ T7174] R13: 0000000000000000 R14: 00007efe1a240f80 R15: 00007ffcd4df1ec8
[  179.802526][ T7174]  </TASK>
[  179.809466][ T6694] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0
[  179.847298][ T6694] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  179.900295][ T3584] ocfs2: Unmounting device (7,3) on (node local)
[  179.918304][ T6694] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  180.009821][ T5117] usb 3-1: USB disconnect, device number 10
[  180.044394][   T23] airspy 1-1:0.183: usb_control_msg() failed -71 request 12
[  180.064547][   T23] airspy 1-1:0.183: Registered as swradio16
[  180.073968][   T23] airspy 1-1:0.183: SDR API is still slightly experimental and functionality changes may follow
[  180.104129][   T23] usb 1-1: USB disconnect, device number 8
[  180.732257][ T4025] Bluetooth: hci3: command 0x0406 tx timeout