last executing test programs:

16.588242253s ago: executing program 1 (id=532):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1}, 0x3}], 0x1, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

15.939657433s ago: executing program 3 (id=544):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x17, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100)=@udp=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r0, 0x0, &(0x7f0000000000)=@udp}, 0x20)

15.86595295s ago: executing program 3 (id=545):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r1 = syz_io_uring_setup(0x7d7d, &(0x7f0000000240), &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x1c, 0x0, @fd=r0, 0x0, 0x0})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)

15.746693051s ago: executing program 3 (id=547):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.746213501s ago: executing program 3 (id=548):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x800)

15.616606993s ago: executing program 1 (id=552):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0)

15.5375369s ago: executing program 3 (id=553):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)

15.500290823s ago: executing program 3 (id=554):
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000040)={[{@gquota}, {@uquota}]}, 0x1, 0x980a, &(0x7f00000130c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400405})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f0000000100)='./file0\x00', 0x0)

15.443281108s ago: executing program 1 (id=555):
r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
close(r0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

14.574366938s ago: executing program 1 (id=557):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1f00)
connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e)

13.635384535s ago: executing program 1 (id=565):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', 0x0, 0x834421, 0x0)
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280))

13.219300693s ago: executing program 1 (id=570):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000180)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@acl}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100)
read$FUSE(r0, 0x0, 0x0)

1.560749756s ago: executing program 2 (id=661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x4}, @NL80211_TXRATE_HE={0x14}]}]}]}, 0x40}}, 0x0)

1.529104349s ago: executing program 4 (id=662):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000003000000000300000002000000000000000000000000000001051a2b266b000000000000000000000300"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6)

1.449940416s ago: executing program 4 (id=664):
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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")
r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r0, 0x20, 0x0, 0x10000)

1.371662643s ago: executing program 4 (id=666):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020)
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000180)=""/217, 0xd9}], 0x1, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000063c0)={0x2020}, 0x2020)

1.371103623s ago: executing program 2 (id=667):
syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000080)='./bus\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x1, 0x1ff, &(0x7f00000003c0)="$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")
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x101, 0x4000086e, r1, 0x0)

1.29740691s ago: executing program 4 (id=668):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e5, &(0x7f00000008c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x17, 0x11, r0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000040))

1.203227068s ago: executing program 4 (id=669):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086200, &(0x7f00000001c0)='\x03\x00\x00\x00\x00\x00\x00\x00-control\x00')

1.202725528s ago: executing program 4 (id=670):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0x3f, 0x6e, 0x40, 0x813, 0x1, 0x3a08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x26, 0x9b}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x40, 0xd, 0x3, "017d00"}, 0x0, 0x0, 0x0, 0x0})

1.077499151s ago: executing program 2 (id=671):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

948.191192ms ago: executing program 0 (id=673):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x759, &(0x7f00000007c0)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_async_commit}, {@errors_remount}, {@init_itable, 0x0}, {@usrjquota}, {@noload}, {@jqfmt_vfsv1}, {@errors_continue}, {@debug}, {@noauto_da_alloc}, {@user_xattr}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001"], 0x24}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000069000305000000000000000000000000000000000800010002"], 0x20}}, 0x0)

939.587763ms ago: executing program 2 (id=674):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

643.26832ms ago: executing program 2 (id=675):
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0xd5c2, 0x1002, 0x0, 0x3, 0x1004, 0x4e41, 0x5}, 0x0)
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_setup(0x9, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000000)="03", 0x1}])

514.474242ms ago: executing program 0 (id=676):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000f0ffb2000040"])

495.484164ms ago: executing program 2 (id=677):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0800be00"}, @main=@item_4={0x3, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)

436.886939ms ago: executing program 0 (id=678):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000000000012000000fffffff207"])

245.603287ms ago: executing program 0 (id=679):
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0)

92.579461ms ago: executing program 0 (id=680):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40002101})
io_uring_enter(r0, 0x1c3c, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=681):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b)
fstat(r1, &(0x7f0000001600))

kernel console output (not intermixed with test programs):

DF', timestamp 2022/11/22 14:59 (1000)
[   51.287914][ T3786] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   51.330971][ T3786] BTRFS info (device loop3): using free space tree
[   51.353589][ T3786] BTRFS info (device loop3): has skinny extents
[   51.393417][ T3841] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[   51.502252][   T25] audit: type=1800 audit(1727704644.331:5): pid=3803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.42" name="file2" dev="loop0" ino=66 res=0 errno=0
[   51.757470][ T3786] BTRFS info (device loop3): enabling ssd optimizations
[   51.826219][ T3867] loop4: detected capacity change from 0 to 4096
[   51.859648][ T3852] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   51.908185][ T3867] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[   51.976014][ T3867] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   52.028805][ T3867] ntfs3: loop4: Failed to load $Extend.
[   52.221861][ T3852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   52.234842][ T3852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.248694][ T3852] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[   52.259557][ T3852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.277621][ T3852] usb 3-1: config 0 descriptor??
[   52.405784][ T3890] loop1: detected capacity change from 0 to 16
[   52.427959][ T3892] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   52.502123][ T3890] erofs: (device loop1): mounted with root inode @ nid 36.
[   52.562061][ T3890] attempt to access beyond end of device
[   52.562061][ T3890] loop1: rw=524288, want=312, limit=16
[   52.592613][ T3890] attempt to access beyond end of device
[   52.592613][ T3890] loop1: rw=524288, want=320, limit=16
[   52.713743][ T3898] loop4: detected capacity change from 0 to 8192
[   52.816099][ T3888] loop0: detected capacity change from 0 to 32768
[   52.833850][ T3898] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[   52.850381][ T3898] REISERFS (device loop4): using ordered data mode
[   52.872574][ T3888] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.60 (3888)
[   52.889570][ T3898] reiserfs: using flush barriers
[   52.921297][ T3750] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   52.941292][ T3898] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   52.958203][ T3898] REISERFS (device loop4): checking transaction log (loop4)
[   52.995968][ T3888] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   53.009607][ T3888] BTRFS info (device loop0): setting nodatacow, compression disabled
[   53.035757][ T3888] BTRFS info (device loop0): setting datacow
[   53.068737][ T3888] BTRFS info (device loop0): doing ref verification
[   53.079086][ T3888] BTRFS info (device loop0): force clearing of disk cache
[   53.094476][ T3888] BTRFS info (device loop0): turning off barriers
[   53.105711][ T3888] BTRFS info (device loop0): enabling ssd optimizations
[   53.115869][ T3852] corsair-psu 0003:1B1C:1C0D.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0
[   53.122178][ T3888] BTRFS info (device loop0): using spread ssd allocation scheme
[   53.148693][ T3888] BTRFS info (device loop0): not using ssd optimizations
[   53.154307][ T3904] loop1: detected capacity change from 0 to 32768
[   53.157909][ T3888] BTRFS info (device loop0): not using spread ssd allocation scheme
[   53.178744][ T3888] BTRFS info (device loop0): using free space tree
[   53.186352][ T3888] BTRFS info (device loop0): has skinny extents
[   53.203116][ T3898] REISERFS (device loop4): Using tea hash to sort names
[   53.209441][ T3750] usb 4-1: Using ep0 maxpacket: 8
[   53.212957][ T3904] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.68 (3904)
[   53.234893][ T3898] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[   53.259812][ T3904] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   53.275513][ T3904] BTRFS info (device loop1): using free space tree
[   53.284266][ T3898] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   53.308645][ T3904] BTRFS info (device loop1): has skinny extents
[   53.329752][ T3750] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   53.339825][ T3750] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   53.350286][ T3750] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   53.360582][ T3750] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   53.375025][ T3750] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   53.395001][ T3750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.475732][ T3904] BTRFS info (device loop1): enabling ssd optimizations
[   53.501464][ T3888] BTRFS info (device loop0): clearing free space tree
[   53.509462][ T3852] corsair-psu 0003:1B1C:1C0D.0002: unable to initialize device (-110)
[   53.525254][ T3888] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   53.565788][ T3888] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   53.589245][ T3852] corsair-psu: probe of 0003:1B1C:1C0D.0002 failed with error -110
[   53.669523][ T3750] usb 4-1: GET_CAPABILITIES returned 0
[   53.675315][ T3750] usbtmc 4-1:16.0: can't read capabilities
[   53.677172][ T3852] usb 3-1: USB disconnect, device number 3
[   53.711353][ T3888] BTRFS info (device loop0): creating free space tree
[   53.722541][ T3888] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   53.732844][ T3888] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   53.802006][ T3952] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   53.965093][ T3621] usb 4-1: USB disconnect, device number 3
[   54.124131][ T3963] loop2: detected capacity change from 0 to 512
[   54.213670][ T3963] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   54.285783][ T3963] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[   54.465344][ T3974] device bridge_slave_1 left promiscuous mode
[   54.498467][ T3974] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.597194][ T3974] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   54.948720][ T3991] loop2: detected capacity change from 0 to 512
[   55.055029][ T3991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   55.137887][ T3991] EXT4-fs (loop2): 1 truncate cleaned up
[   55.144362][ T3991] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,nombcache,inode_readahead_blks=0x0000000000000002,stripe=0x0000000002004000,max_batch_time=0x0000000000000002,max_batch_time=0x0000000000000004,,errors=continue. Quota mode: none.
[   55.292138][ T4003] netlink: 260 bytes leftover after parsing attributes in process `syz.1.90'.
[   55.418828][ T4007] device bridge_slave_1 left promiscuous mode
[   55.479637][ T4007] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.511241][ T4007] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[   55.607153][ T3972] loop0: detected capacity change from 0 to 40427
[   55.684082][ T3995] loop3: detected capacity change from 0 to 32768
[   55.696192][ T4013] loop1: detected capacity change from 0 to 1024
[   55.720649][ T3972] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[   55.728466][ T3972] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   55.757218][ T3972] F2FS-fs (loop0): invalid crc value
[   55.791426][ T3995] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.88 (3995)
[   55.834580][ T4017] syz.2.96 (4017): drop_caches: 4
[   55.866528][ T3972] F2FS-fs (loop0): Found nat_bits in checkpoint
[   56.000838][ T3995] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   56.030192][ T3995] BTRFS info (device loop3): enabling auto defrag
[   56.046957][ T3995] BTRFS info (device loop3): doing ref verification
[   56.059942][ T4013] attempt to access beyond end of device
[   56.059942][ T4013] loop1: rw=0, want=5780, limit=1024
[   56.091662][ T3995] BTRFS info (device loop3): max_inline at 0
[   56.097686][ T3995] BTRFS info (device loop3): force clearing of disk cache
[   56.112219][ T3972] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   56.130495][ T4013] Buffer I/O error on dev loop1, logical block 2889, async page read
[   56.132169][ T3995] BTRFS info (device loop3): turning on sync discard
[   56.150246][ T3972] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   56.219932][ T3995] BTRFS info (device loop3): disabling free space tree
[   56.223189][ T4024] attempt to access beyond end of device
[   56.223189][ T4024] loop1: rw=0, want=5780, limit=1024
[   56.226819][ T3995] BTRFS info (device loop3): has skinny extents
[   56.275054][ T4013] attempt to access beyond end of device
[   56.275054][ T4013] loop1: rw=0, want=5780, limit=1024
[   56.308696][ T3575] attempt to access beyond end of device
[   56.308696][ T3575] loop0: rw=2049, want=45104, limit=40427
[   56.364690][ T4013] Buffer I/O error on dev loop1, logical block 2889, async page read
[   56.530509][ T3995] BTRFS info (device loop3): enabling ssd optimizations
[   56.552580][ T3995] BTRFS info (device loop3): clearing free space tree
[   56.565919][ T3995] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   56.619608][ T3995] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   56.739287][ T3995] BTRFS error (device loop3): unrecognized mount option 'ÿÿÿÿÿÿÿÿÿÿ¤	Z*¬ð¿Ë m˜.Dc�8�'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá'
[   56.788334][   T25] audit: type=1326 audit(1727704649.611:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19b9bcfff9 code=0x7ffc0000
[   56.828508][ T4057] loop1: detected capacity change from 0 to 1024
[   56.830317][ T3994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   56.913339][   T25] audit: type=1326 audit(1727704649.621:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f19b9bcfff9 code=0x7ffc0000
[   56.937005][ T4061] loop2: detected capacity change from 0 to 16
[   56.962902][ T4005] loop4: detected capacity change from 0 to 32768
[   57.032402][ T4057] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.105: Invalid block bitmap block 0 in block_group 0
[   57.062604][   T25] audit: type=1326 audit(1727704649.621:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f19b9bd0033 code=0x7ffc0000
[   57.085444][   T25] audit: type=1326 audit(1727704649.621:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f19b9bceadf code=0x7ffc0000
[   57.108867][   T25] audit: type=1326 audit(1727704649.651:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f19b9bd0087 code=0x7ffc0000
[   57.134027][   T25] audit: type=1326 audit(1727704649.651:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19b9bce990 code=0x7ffc0000
[   57.163349][   T25] audit: type=1326 audit(1727704649.651:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19b9bcfbfb code=0x7ffc0000
[   57.187582][ T4057] Quota error (device loop1): write_blk: dquota write failed
[   57.199414][ T4005] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   57.208741][   T25] audit: type=1326 audit(1727704649.721:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4056 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f19b9bcec8a code=0x7ffc0000
[   57.212768][ T4061] erofs: (device loop2): mounted with root inode @ nid 36.
[   57.238243][ T4057] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   57.253257][ T4005] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   57.280542][ T4061] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   57.289526][ T4057] EXT4-fs error (device loop1): ext4_acquire_dquot:6196: comm syz.1.105: Failed to acquire dquot type 0
[   57.309142][ T4061] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -3 in[47, 4049] out[1851]
[   57.341132][ T4061] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[   57.356780][ T4061] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   57.372547][ T4057] EXT4-fs error (device loop1): ext4_free_blocks:6225: comm syz.1.105: Freeing blocks not in datazone - block = 0, count = 4096
[   57.374043][ T4064] loop0: detected capacity change from 0 to 512
[   57.403538][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36
[   57.416338][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36
[   57.418018][ T4057] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.105: Invalid inode bitmap blk 0 in block_group 0
[   57.425702][ T4061] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   57.466179][    T9] EXT4-fs error (device loop1): ext4_release_dquot:6219: comm kworker/u4:0: Failed to release dquot type 0
[   57.487759][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36
[   57.487933][ T4057] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[   57.497575][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36
[   57.543211][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36
[   57.562760][ T4005] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   57.573739][ T4061] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   57.614528][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36
[   57.670480][ T3765] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   57.673912][ T4057] EXT4-fs (loop1): 1 orphan inode deleted
[   57.677501][ T3765] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   57.683928][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36
[   57.734512][ T4064] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.100: inode #1: comm syz.0.100: iget: illegal inode #
[   57.738143][ T4057] EXT4-fs (loop1): mounted filesystem without journal. Opts: €�; ,errors=continue. Quota mode: writeback.
[   57.761526][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36
[   57.775104][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36
[   57.785860][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36
[   57.795507][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[   57.804820][ T4061] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36
[   57.814299][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36
[   57.824678][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36
[   57.834753][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36
[   57.845173][ T3765] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 167ms
[   57.853644][ T4064] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.100: error while reading EA inode 1 err=-117
[   57.857989][ T3765] gfs2: fsid=syz:syz.0: jid=0: Done
[   57.869655][ T4057] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback.
[   57.871946][ T4061] attempt to access beyond end of device
[   57.871946][ T4061] loop2: rw=524288, want=848, limit=16
[   57.891491][ T4005] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   57.907801][ T4061] attempt to access beyond end of device
[   57.907801][ T4061] loop2: rw=524288, want=13478624104, limit=16
[   57.914929][ T4064] EXT4-fs (loop0): 1 orphan inode deleted
[   57.921371][ T4061] attempt to access beyond end of device
[   57.921371][ T4061] loop2: rw=524288, want=13478624080, limit=16
[   57.955466][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36
[   57.962101][ T4064] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   57.966222][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36
[   58.005783][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36
[   58.027518][ T4061] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36
[   58.080153][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 85 @ nid 36
[   58.130315][ T4073] process 'syz.1.109' launched './file1' with NULL argv: empty string added
[   58.143883][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36
[   58.177855][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36
[   58.212732][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36
[   58.228223][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36
[   58.280769][ T4061] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   58.301768][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36
[   58.312114][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 81 @ nid 36
[   58.322500][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 80 @ nid 36
[   58.339898][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36
[   58.348950][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36
[   58.386991][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 77 @ nid 36
[   58.396494][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36
[   58.406987][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36
[   58.423012][ T4061] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   58.434431][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36
[   58.439447][ T3961] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   58.443629][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36
[   58.462027][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36
[   58.472772][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 73 @ nid 36
[   58.485401][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36
[   58.505755][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36
[   58.518088][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36
[   58.530779][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36
[   58.549590][ T4061] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36
[   58.565647][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 65 @ nid 36
[   58.589023][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36
[   58.605584][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 64 @ nid 36
[   58.623256][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36
[   58.672133][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36
[   58.685883][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36
[   58.702446][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 60 @ nid 36
[   58.709495][ T3961] usb 4-1: Using ep0 maxpacket: 16
[   58.711937][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36
[   58.727415][ T4061] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   58.737782][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36
[   58.785788][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36
[   58.798600][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36
[   58.816420][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 55 @ nid 36
[   58.834059][ T4084] loop0: detected capacity change from 0 to 128
[   58.849474][ T3961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   58.855696][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36
[   58.869357][ T3961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   58.909451][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36
[   58.918669][ T3961] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   58.947052][ T4061] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36
[   58.949052][ T3961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   58.989589][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36
[   58.999893][ T3961] usb 4-1: config 0 descriptor??
[   59.001483][ T4084] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   59.047762][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36
[   59.061480][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36
[   59.100238][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 49 @ nid 36
[   59.119699][ T4084] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff)
[   59.156646][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36
[   59.207656][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 48 @ nid 36
[   59.254128][ T4061] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36
[   59.269946][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36
[   59.279000][ T4061] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[   59.298729][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36
[   59.307996][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36
[   59.317109][ T4061] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36
[   59.378036][ T4061] attempt to access beyond end of device
[   59.378036][ T4061] loop2: rw=524288, want=56, limit=16
[   59.390440][ T4061] attempt to access beyond end of device
[   59.390440][ T4061] loop2: rw=524288, want=40, limit=16
[   59.422260][ T4061] attempt to access beyond end of device
[   59.422260][ T4061] loop2: rw=524288, want=96, limit=16
[   59.450951][ T4061] attempt to access beyond end of device
[   59.450951][ T4061] loop2: rw=524288, want=32, limit=16
[   59.482122][ T3961] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x2
[   59.513196][ T3961] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[   59.524444][ T4099] loop1: detected capacity change from 0 to 1024
[   59.656134][ T4104] loop2: detected capacity change from 0 to 256
[   59.668352][ T4106] loop0: detected capacity change from 0 to 512
[   59.668510][ T4099] hfsplus: catalog name length corrupted
[   59.697113][ T3961] usb 4-1: USB disconnect, device number 4
[   59.741267][ T4104] exfat: Deprecated parameter 'namecase'
[   59.808256][ T4106] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   59.821329][ T4104] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[   59.873814][ T4089] loop4: detected capacity change from 0 to 40427
[   59.901996][ T4106] EXT4-fs (loop0): 1 truncate cleaned up
[   59.907901][ T4106] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[   59.944114][ T4106] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.123: Logical block already allocated
[   59.970927][ T4106] EXT4-fs (loop0): Remounting filesystem read-only
[   59.974196][ T4089] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[   59.990252][ T4106] EXT4-fs error (device loop0): ext4_remount:5854: comm syz.0.123: Abort forced by user
[   60.030582][ T4089] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   60.033322][ T4106] EXT4-fs (loop0): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback.
[   60.058704][ T4089] F2FS-fs (loop4): invalid crc value
[   60.111627][ T4089] F2FS-fs (loop4): Found nat_bits in checkpoint
[   60.245802][ T4089] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   60.258349][ T4089] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   60.339884][ T4130] nbd: must specify at least one socket
[   60.484016][ T3583] attempt to access beyond end of device
[   60.484016][ T3583] loop4: rw=2049, want=45104, limit=40427
[   60.563576][ T4138] loop0: detected capacity change from 0 to 512
[   60.672193][ T4138] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.135: corrupted inode contents
[   60.692043][ T4138] EXT4-fs error (device loop0): ext4_dirty_inode:6007: inode #16: comm syz.0.135: mark_inode_dirty error
[   60.728847][ T4138] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.135: corrupted inode contents
[   60.758619][ T4138] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.135: mark_inode_dirty error
[   60.776383][ T4138] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.135: corrupted inode contents
[   60.793168][ T4138] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[   60.808761][ T4138] EXT4-fs error (device loop0): ext4_do_update_inode:5174: inode #16: comm syz.0.135: corrupted inode contents
[   60.865215][ T4138] EXT4-fs error (device loop0): ext4_truncate:4272: inode #16: comm syz.0.135: mark_inode_dirty error
[   60.873361][ T4126] loop3: detected capacity change from 0 to 32768
[   60.919669][ T4138] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[   60.946167][ T4138] EXT4-fs (loop0): 1 truncate cleaned up
[   60.960465][ T4126] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   60.968649][ T4126] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   60.969474][ T4138] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   61.010088][ T4126] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   61.045998][ T3961] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   61.061527][ T4138] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038 (0x7fffffff)
[   61.065060][ T3961] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   61.224708][ T3961] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 159ms
[   61.270297][ T3961] gfs2: fsid=syz:syz.0: jid=0: Done
[   61.275560][ T4126] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   61.645019][ T4171] capability: warning: `syz.4.150' uses 32-bit capabilities (legacy support in use)
[   61.664742][ T4168] loop0: detected capacity change from 0 to 4096
[   61.723132][ T4173] loop4: detected capacity change from 0 to 256
[   61.748006][ T4151] loop1: detected capacity change from 0 to 32768
[   61.779272][ T4168] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   61.814505][ T4173] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d)
[   61.843656][   T25] kauditd_printk_skb: 17 callbacks suppressed
[   61.843670][   T25] audit: type=1800 audit(1727704654.671:30): pid=4173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.151" name="file2" dev="loop4" ino=1048599 res=0 errno=0
[   61.891526][ T4168] ntfs3: loop0: failed to convert "c46c" to cp869
[   61.917996][ T4173] exFAT-fs (loop4): hint_cluster is invalid (17)
[   61.919302][ T4151] XFS (loop1): Mounting V5 Filesystem
[   61.939245][ T4164] loop2: detected capacity change from 0 to 32768
[   61.948088][ T4173] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[   61.956686][ T4173] exFAT-fs (loop4): Filesystem has been set read-only
[   61.977721][   T25] audit: type=1804 audit(1727704654.801:31): pid=4179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.151" name="/newroot/18/file0/file2" dev="loop4" ino=1048599 res=1 errno=0
[   62.005524][ T4164] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.147 (4164)
[   62.033337][ T4151] XFS (loop1): Ending clean mount
[   62.107580][ T4164] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   62.124709][ T4164] BTRFS info (device loop2): using free space tree
[   62.171201][ T4164] BTRFS info (device loop2): has skinny extents
[   62.200702][ T3572] XFS (loop1): Unmounting Filesystem
[   62.499101][ T4164] BTRFS info (device loop2): enabling ssd optimizations
[   62.692115][ T4187] loop4: detected capacity change from 0 to 32768
[   62.948308][ T4187] JBD2: Ignoring recovery information on journal
[   63.066181][ T1075] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   63.111709][ T4202] loop0: detected capacity change from 0 to 40427
[   63.118840][ T4187] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   63.204346][ T4224] loop2: detected capacity change from 0 to 64
[   63.228816][ T4202] F2FS-fs (loop0): Found nat_bits in checkpoint
[   63.314092][ T3583] ocfs2: Unmounting device (7,4) on (node local)
[   63.341989][ T4202] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   63.446001][ T3575] attempt to access beyond end of device
[   63.446001][ T3575] loop0: rw=2049, want=45104, limit=40427
[   63.480314][ T4234] netlink: 108 bytes leftover after parsing attributes in process `syz.2.166'.
[   63.664304][ T1075] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   63.688106][ T1075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.719618][ T1075] usb 2-1: Product: syz
[   63.723821][ T1075] usb 2-1: Manufacturer: syz
[   63.728425][ T1075] usb 2-1: SerialNumber: syz
[   63.757443][ T1075] usb 2-1: config 0 descriptor??
[   63.831697][ T1075] ch341 2-1:0.0: ch341-uart converter detected
[   64.201916][ T4269] loop2: detected capacity change from 0 to 256
[   64.240086][ T4269] exfat: Deprecated parameter 'utf8'
[   64.245406][ T4269] exfat: Deprecated parameter 'namecase'
[   64.255511][ T4269] exfat: Deprecated parameter 'namecase'
[   64.261209][ T4269] exfat: Deprecated parameter 'utf8'
[   64.289781][ T4269] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d)
[   64.426427][ T4273] loop2: detected capacity change from 0 to 1024
[   64.528915][   T25] audit: type=1800 audit(1727704657.351:32): pid=4273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.181" name="file1" dev="loop2" ino=20 res=0 errno=0
[   64.713769][ T1075] usb 2-1: failed to send control message: -71
[   64.725517][ T1075] ch341-uart: probe of ttyUSB0 failed with error -71
[   64.760471][ T1075] usb 2-1: USB disconnect, device number 2
[   64.782068][ T1075] ch341 2-1:0.0: device disconnected
[   64.877752][ T4288] loop2: detected capacity change from 0 to 2048
[   64.987320][ T4278] loop4: detected capacity change from 0 to 40427
[   64.999421][ T4289] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   65.016229][ T4278] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   65.050020][ T4278] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   65.075415][ T4278] F2FS-fs (loop4): invalid crc value
[   65.097361][ T4278] F2FS-fs (loop4): Found nat_bits in checkpoint
[   65.101463][ T4291] SET target dimension over the limit!
[   65.116374][ T4296] netlink: 'syz.0.199': attribute type 1 has an invalid length.
[   65.166693][ T4278] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   65.173895][ T4278] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   65.880414][ T4298] loop2: detected capacity change from 0 to 40427
[   65.903307][ T4301] loop0: detected capacity change from 0 to 32768
[   65.920595][ T4298] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   65.928356][ T4298] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   65.971234][ T4320] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   65.996202][ T4298] F2FS-fs (loop2): invalid crc value
[   66.023770][ T4298] F2FS-fs (loop2): Found nat_bits in checkpoint
[   66.085857][ T4301] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   66.094930][ T4329] loop1: detected capacity change from 0 to 17
[   66.118577][ T4298] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   66.131920][ T4298] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   66.212738][ T4334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'.
[   66.285163][ T4329] loop1: detected capacity change from 0 to 1024
[   66.299258][ T4336] loop4: detected capacity change from 0 to 2048
[   66.351880][ T4336] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   66.378449][ T3575] ocfs2: Unmounting device (7,0) on (node local)
[   67.468415][ T4363] bond0: (slave bond_slave_0): Slave does not support ipsec offload
[   67.771813][ T4358] loop1: detected capacity change from 0 to 131072
[   67.838261][ T4358] F2FS-fs (loop1): invalid crc value
[   67.844879][ T4356] loop0: detected capacity change from 0 to 32768
[   67.886486][ T4358] F2FS-fs (loop1): Found nat_bits in checkpoint
[   67.949584][ T4358] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   68.038618][   T25] audit: type=1800 audit(1727704660.861:33): pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.215" name="file1" dev="loop0" ino=4 res=0 errno=0
[   68.071132][ T4386] program syz.2.223 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   68.289178][ T4392] loop2: detected capacity change from 0 to 2048
[   68.376960][ T4392] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   68.498487][ T4392] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,errors=remount-ro,jqfmt=vfsv0,stripe=0x000000000004ffff,usrjquota=,sb=0x0000000000000401,norecovery,. Quota mode: none.
[   68.701982][ T4373] loop4: detected capacity change from 0 to 40427
[   68.736107][ T4373] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   68.756997][ T4373] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   68.804869][ T4373] F2FS-fs (loop4): invalid crc value
[   68.845850][ T4373] F2FS-fs (loop4): Found nat_bits in checkpoint
[   68.961346][ T4373] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   68.975257][ T4373] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   69.068921][ T4390] loop0: detected capacity change from 0 to 32768
[   69.165938][ T4390] jfs_readdir called with invalid offset!
[   69.214460][ T4413] loop1: detected capacity change from 0 to 512
[   69.381104][ T4413] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[   69.394398][ T4397] loop2: detected capacity change from 0 to 32768
[   69.416430][ T4413] EXT4-fs (loop1): 1 truncate cleaned up
[   69.422582][ T4413] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[   69.467816][ T4397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.228 (4397)
[   69.483633][ T4413] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.235: Logical block already allocated
[   69.500889][ T4413] EXT4-fs (loop1): Remounting filesystem read-only
[   69.590265][ T4413] EXT4-fs error (device loop1): ext4_remount:5854: comm syz.1.235: Abort forced by user
[   69.602055][ T4413] EXT4-fs (loop1): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback.
[   69.609680][ T4397] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   69.658045][ T4397] BTRFS info (device loop2): use zlib compression, level 3
[   69.681958][ T4397] BTRFS info (device loop2): using free space tree
[   69.705678][ T4397] BTRFS info (device loop2): has skinny extents
[   69.813812][   T25] audit: type=1326 audit(1727704662.641:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18b93cff9 code=0x7ffc0000
[   69.835910][    C0] vkms_vblank_simulate: vblank timer overrun
[   69.872875][   T25] audit: type=1326 audit(1727704662.701:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff18b93cff9 code=0x7ffc0000
[   69.893833][ T4430] loop4: detected capacity change from 0 to 256
[   69.905752][ T4428] loop0: detected capacity change from 0 to 1024
[   69.923172][   T25] audit: type=1326 audit(1727704662.711:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff18b93cff9 code=0x7ffc0000
[   69.954776][   T25] audit: type=1326 audit(1727704662.711:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff18b93d033 code=0x7ffc0000
[   69.984860][ T4430] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   69.986530][   T25] audit: type=1326 audit(1727704662.721:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff18b93badf code=0x7ffc0000
[   70.029284][   T25] audit: type=1326 audit(1727704662.731:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff18b93d087 code=0x7ffc0000
[   70.041225][ T4430] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[   70.053507][   T25] audit: type=1326 audit(1727704662.731:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff18b93b990 code=0x7ffc0000
[   70.083591][   T25] audit: type=1326 audit(1727704662.731:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff18b93cbfb code=0x7ffc0000
[   70.086945][ T4428] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.240: Invalid block bitmap block 0 in block_group 0
[   70.106866][   T25] audit: type=1326 audit(1727704662.781:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4427 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff18b93bc8a code=0x7ffc0000
[   70.150682][ T4430] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[   70.158341][ T4430] UDF-fs: Scanning with blocksize 512 failed
[   70.168726][ T4428] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.240: Failed to acquire dquot type 0
[   70.185592][ T4428] EXT4-fs error (device loop0): ext4_free_blocks:6225: comm syz.0.240: Freeing blocks not in datazone - block = 0, count = 4096
[   70.204830][ T4430] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   70.211440][ T4443] loop1: detected capacity change from 0 to 8192
[   70.218737][ T4428] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.240: Invalid inode bitmap blk 0 in block_group 0
[   70.220967][ T4397] BTRFS info (device loop2): enabling ssd optimizations
[   70.239094][    T9] EXT4-fs error (device loop0): ext4_release_dquot:6219: comm kworker/u4:0: Failed to release dquot type 0
[   70.253525][ T4430] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   70.261269][ T4428] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem
[   70.274631][ T4428] EXT4-fs (loop0): 1 orphan inode deleted
[   70.286421][ T4428] EXT4-fs (loop0): mounted filesystem without journal. Opts: €�; ,errors=continue. Quota mode: writeback.
[   70.319700][ T4443] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[   70.341602][ T4443] REISERFS (device loop1): using ordered data mode
[   70.343071][ T4428] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback.
[   70.348352][ T4443] reiserfs: using flush barriers
[   70.422766][ T4443] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   70.511888][ T4443] REISERFS (device loop1): checking transaction log (loop1)
[   70.563899][ T4443] REISERFS (device loop1): Using rupasov hash to sort names
[   70.575529][ T4443] REISERFS (device loop1): using 3.5.x disk format
[   70.602299][ T4443] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[   70.678416][ T4443] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[   70.717402][ T4443] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[   70.775424][ T4443] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   70.813276][ T4464] loop0: detected capacity change from 0 to 256
[   71.086531][ T4469] loop2: detected capacity change from 0 to 512
[   71.152595][ T4459] chnl_net:caif_netlink_parms(): no params data found
[   71.216700][   T21] cfg80211: failed to load regulatory.db
[   71.226700][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[   71.233359][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[   71.244387][ T4469] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   71.270042][ T4469] EXT4-fs (loop2): 1 truncate cleaned up
[   71.275711][ T4469] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback.
[   71.334974][ T4469] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.249: Logical block already allocated
[   71.348595][ T4469] EXT4-fs (loop2): Remounting filesystem read-only
[   71.405553][ T4469] EXT4-fs error (device loop2): ext4_remount:5854: comm syz.2.249: Abort forced by user
[   71.467496][ T4469] EXT4-fs (loop2): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback.
[   71.512201][ T4483] loop1: detected capacity change from 0 to 512
[   71.582177][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.589250][ T4459] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.607917][ T4459] device bridge_slave_0 entered promiscuous mode
[   71.646495][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.660033][ T4483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.252: inode #1: comm syz.1.252: iget: illegal inode #
[   71.697480][ T4483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.252: error while reading EA inode 1 err=-117
[   71.718133][ T4459] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.792549][ T4459] device bridge_slave_1 entered promiscuous mode
[   71.810315][ T4483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.252: inode #1: comm syz.1.252: iget: illegal inode #
[   71.859842][ T4483] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.252: error while reading EA inode 1 err=-117
[   71.893584][ T4483] EXT4-fs (loop1): 1 orphan inode deleted
[   71.903754][ T4483] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsv1,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue. Quota mode: writeback.
[   71.936106][ T4493] loop2: detected capacity change from 0 to 256
[   71.947443][ T4459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.953239][ T4483] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.252: invalid indirect mapped block 234881024 (level 0)
[   71.990159][ T4459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.112424][ T4459] team0: Port device team_slave_0 added
[   72.158487][ T4459] team0: Port device team_slave_1 added
[   72.245283][ T4459] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.268179][ T4459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.353911][ T4459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.369228][ T4459] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.378498][ T4459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.430895][ T4459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.527040][ T4459] device hsr_slave_0 entered promiscuous mode
[   72.544277][ T4459] device hsr_slave_1 entered promiscuous mode
[   72.563037][ T4459] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.579035][ T4459] Cannot create hsr debugfs directory
[   72.775932][ T4459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.884017][ T4459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.894485][ T3962] Bluetooth: hci5: command 0x0409 tx timeout
[   72.931700][ T4496] loop0: detected capacity change from 0 to 65536
[   72.965675][ T4459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.005843][ T4496] XFS (loop0): Mounting V5 Filesystem
[   73.034434][ T4459] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.066833][ T4496] XFS (loop0): Ending clean mount
[   73.119277][ T4496] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x1df/0x2a0, xfs_agf block 0x8001 
[   73.151701][ T4496] XFS (loop0): Unmount and run xfs_repair
[   73.157701][ T4496] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   73.167288][ T4459] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.171541][ T4496] 00000000: 58 41 47 46 00 00 00 01 00 00 00 01 00 00 40 00  XAGF..........@.
[   73.185207][ T4496] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[   73.189188][ T4459] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.194298][ T4496] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[   73.194316][ T4496] 00000030: 00 00 00 04 00 00 3b 5f 00 00 3b 5c 00 00 00 00  ......;_..;\....
[   73.194329][ T4496] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   73.194342][ T4496] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   73.240602][ T4459] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.249657][ T4459] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.281361][ T4496] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   73.298973][ T4496] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   73.318089][ T4496] XFS (loop0): metadata I/O error in "xfs_read_agf+0x263/0x510" at daddr 0x8001 len 1 error 74
[   73.328516][ T4459] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.345392][ T4459] 8021q: adding VLAN 0 to HW filter on device team0
[   73.353922][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   73.367216][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.396717][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.415289][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.417714][ T3575] XFS (loop0): Unmounting Filesystem
[   73.424777][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.435961][ T4067] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.446756][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.463588][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.472583][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.479693][ T4067] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.487801][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.516971][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.560685][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.611951][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.627200][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.640240][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.651557][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.660549][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.670564][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.682077][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.705781][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.730266][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.791492][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.961674][ T4544] ptrace attach of "./syz-executor exec"[3572] was attempted by "./syz-executor exec"[4544]
[   74.064998][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.074016][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.083405][ T4549] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   74.085295][ T4459] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.149458][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.166731][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.214558][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.228926][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.247931][ T4459] device veth0_vlan entered promiscuous mode
[   74.260535][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.275884][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.295636][ T4555] loop1: detected capacity change from 0 to 512
[   74.317341][ T4553] mkiss: ax0: crc mode is auto.
[   74.326833][ T4459] device veth1_vlan entered promiscuous mode
[   74.339809][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.375047][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.388425][ T4555] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   74.395390][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.440605][ T4459] device veth0_macvtap entered promiscuous mode
[   74.454059][ T4459] device veth1_macvtap entered promiscuous mode
[   74.472167][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.483182][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.524381][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.543195][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.555418][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.570726][ T4558] netlink: 'syz.0.278': attribute type 2 has an invalid length.
[   74.597409][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.607647][ T4558] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.278'.
[   74.612186][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.627568][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.638757][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.657913][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.672459][ T4459] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.685745][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.696591][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.725898][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.741414][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.757905][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.771021][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.782383][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.793001][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.803121][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.813866][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.824404][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.841490][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.881460][ T4459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.902596][ T4459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.924871][ T4459] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.940470][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.949129][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.981248][ T4459] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.990404][ T3849] Bluetooth: hci5: command 0x041b tx timeout
[   75.006532][ T4459] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.015344][ T4459] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.031019][ T4459] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.156023][  T303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.180406][  T303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.231564][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.261168][ T4067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.270255][ T4563] loop0: detected capacity change from 0 to 32768
[   75.277538][ T4067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.294332][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.371393][ T4563] JBD2: Ignoring recovery information on journal
[   75.629086][ T4563] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   75.851301][ T4599] loop1: detected capacity change from 0 to 64
[   75.910967][ T3575] ocfs2: Unmounting device (7,0) on (node local)
[   75.912218][ T4599] hfs: request for non-existent node 1280 in B*Tree
[   75.925281][ T4599] hfs: request for non-existent node 1280 in B*Tree
[   75.936806][ T4602] block nbd3: shutting down sockets
[   75.948944][ T4599] hfs: request for non-existent node 1280 in B*Tree
[   75.957276][ T4599] hfs: request for non-existent node 1280 in B*Tree
[   76.189511][ T3962] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   76.201341][ T4611] usb usb8: usbfs: process 4611 (syz.1.299) did not claim interface 0 before use
[   76.219971][ T4613] vivid-008: disconnect
[   76.227739][ T4611] loop1: detected capacity change from 0 to 8
[   76.235281][ T4612] vivid-008: reconnect
[   76.290716][ T4611] SQUASHFS error: lzo decompression failed, data probably corrupt
[   76.299212][ T4611] SQUASHFS error: Failed to read block 0x91: -5
[   76.318114][ T4611] SQUASHFS error: Unable to read metadata cache entry [8f]
[   76.327334][ T4611] SQUASHFS error: Unable to read inode 0x11f
[   76.335707][ T4615] loop0: detected capacity change from 0 to 512
[   76.439412][ T3962] usb 3-1: Using ep0 maxpacket: 8
[   76.485737][ T4615] EXT4-fs (loop0): error: could not find journal device path: error -2
[   76.563805][ T3962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.602382][ T3962] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.630577][   T25] kauditd_printk_skb: 19 callbacks suppressed
[   76.630590][   T25] audit: type=1326 audit(1727704669.461:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4618 comm="syz.0.303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff18b93cff9 code=0x0
[   76.659807][ T3962] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   76.673333][ T3962] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[   76.682803][ T3962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.695081][ T3962] usb 3-1: config 0 descriptor??
[   77.049608][ T3856] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   77.058106][ T4069] Bluetooth: hci5: command 0x040f tx timeout
[   77.183904][ T3962] ortek 0003:1223:3F07.0004: item fetching failed at offset 5/7
[   77.192243][ T3962] ortek: probe of 0003:1223:3F07.0004 failed with error -22
[   77.387843][ T3760] usb 3-1: USB disconnect, device number 4
[   77.471467][ T4630] loop0: detected capacity change from 0 to 64
[   77.556032][ T4630] hfs: request for non-existent node 1280 in B*Tree
[   77.569659][ T3856] usb 4-1: New USB device found, idVendor=1f71, idProduct=3301, bcdDevice=ce.1a
[   77.573315][ T4630] hfs: request for non-existent node 1280 in B*Tree
[   77.586542][ T3856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.604990][ T3856] usb 4-1: Product: syz
[   77.608424][ T4630] hfs: request for non-existent node 1280 in B*Tree
[   77.609166][ T3856] usb 4-1: Manufacturer: syz
[   77.616238][ T4630] hfs: request for non-existent node 1280 in B*Tree
[   77.639518][ T3856] usb 4-1: SerialNumber: syz
[   77.661509][ T3856] usb 4-1: config 0 descriptor??
[   77.849492][ T4632] loop1: detected capacity change from 0 to 32768
[   77.871505][ T4632] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.309 (4632)
[   77.903427][ T4632] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   77.907667][ T4638] loop0: detected capacity change from 0 to 8192
[   77.929873][ T4632] BTRFS info (device loop1): using free space tree
[   77.936514][ T4632] BTRFS info (device loop1): has skinny extents
[   77.963704][ T3856] usb 4-1: USB disconnect, device number 5
[   77.978904][ T4638] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   78.004258][ T4638] REISERFS (device loop0): using ordered data mode
[   78.019962][ T4638] reiserfs: using flush barriers
[   78.040924][ T4638] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   78.085652][ T4638] REISERFS (device loop0): checking transaction log (loop0)
[   78.105077][ T4638] REISERFS (device loop0): Using r5 hash to sort names
[   78.120341][ T4638] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   78.227631][ T4632] BTRFS info (device loop1): enabling ssd optimizations
[   78.607717][ T4649] loop2: detected capacity change from 0 to 32768
[   78.658890][ T4667] loop0: detected capacity change from 0 to 8192
[   78.687232][ T4649] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.314 (4649)
[   78.727578][ T4667] REISERFS warning (device loop0): super-6515 reiserfs_parse_options: journaled quota format not specified.
[   78.780759][ T4649] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   78.789562][ T4649] BTRFS info (device loop2): enabling auto defrag
[   78.796014][ T4649] BTRFS info (device loop2): max_inline at 0
[   78.806067][ T4649] BTRFS info (device loop2): enabling ssd optimizations
[   78.823587][ T4649] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[   78.848223][ T4649] BTRFS info (device loop2): use lzo compression, level 0
[   78.872432][ T4649] BTRFS info (device loop2): using free space tree
[   78.929182][ T4649] BTRFS info (device loop2): has skinny extents
[   79.129710][ T3962] Bluetooth: hci5: command 0x0419 tx timeout
[   79.169852][ T4696] nbd: socks must be embedded in a SOCK_ITEM attr
[   79.299105][ T4695] loop0: detected capacity change from 0 to 4096
[   79.424226][ T4695] ntfs: volume version 3.1.
[   79.605970][ T4169] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop2 scanned by udevd (4169)
[   79.677657][ T4695] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[   79.866358][ T4724] netlink: 'syz.2.332': attribute type 4 has an invalid length.
[   79.929636][ T4724] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.332'.
[   80.041902][ T4728] loop0: detected capacity change from 0 to 256
[   80.106730][ T4735] Zero length message leads to an empty skb
[   80.194584][ T4735] team0: Port device team_slave_0 removed
[   80.222837][ T4735] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   80.486940][ T4749] loop0: detected capacity change from 0 to 512
[   80.615480][ T4749] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   80.632230][ T4730] chnl_net:caif_netlink_parms(): no params data found
[   80.640181][ T4749] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038 (0x7fffffff)
[   80.696699][ T4749] Quota error (device loop0): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[   80.710121][ T4749] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   80.720445][ T4749] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.344: Failed to acquire dquot type 0
[   80.753419][   T25] audit: type=1326 audit(1727704673.581:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4764 comm="syz.2.349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25e0b3fff9 code=0x0
[   80.840284][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.847425][ T4730] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.890493][ T4730] device bridge_slave_0 entered promiscuous mode
[   80.908484][ T4730] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.942087][ T4730] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.956981][ T4730] device bridge_slave_1 entered promiscuous mode
[   81.016344][ T4730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   81.053237][ T4730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.101516][ T4778] sctp: [Deprecated]: syz.0.353 (pid 4778) Use of struct sctp_assoc_value in delayed_ack socket option.
[   81.101516][ T4778] Use struct sctp_sack_info instead
[   81.135766][ T4730] team0: Port device team_slave_0 added
[   81.156345][ T4730] team0: Port device team_slave_1 added
[   81.231031][ T4730] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.238123][ T4730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.267623][ T4730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.283776][ T4730] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.313845][ T4730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.351964][ T4730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.408896][ T4730] device hsr_slave_0 entered promiscuous mode
[   81.416441][ T4730] device hsr_slave_1 entered promiscuous mode
[   81.427855][ T4730] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   81.438990][ T4730] Cannot create hsr debugfs directory
[   81.694029][ T4730] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.786424][ T4808] loop0: detected capacity change from 0 to 4096
[   81.796418][ T4730] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.869502][ T4808] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[   81.904576][ T4730] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.934052][ T4808] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   82.005969][ T4730] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.087009][  T303] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22.
[   82.099737][   T21] Bluetooth: hci6: command 0x0409 tx timeout
[   82.124117][ T3575] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[   82.207666][ T4730] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   82.259253][ T4820] loop1: detected capacity change from 0 to 256
[   82.280281][ T4730] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   82.324227][ T4730] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   82.343800][ T4730] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   82.634137][ T4730] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.697316][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.724533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.742975][ T4730] 8021q: adding VLAN 0 to HW filter on device team0
[   82.789767][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.805012][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.826127][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.833274][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.852768][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.866218][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.884386][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.891538][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.934717][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.947325][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.971271][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.980412][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.012687][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.033847][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   83.054882][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   83.079156][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.097740][ T4842] loop0: detected capacity change from 0 to 512
[   83.128457][ T4730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   83.157356][ T4730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.232517][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   83.260037][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   83.277334][ T4842] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal
[   83.287931][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.305781][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.317283][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   83.496747][ T4818] loop2: detected capacity change from 0 to 32768
[   83.636748][ T4818] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[   83.643274][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.669923][ T4818] CPU: 1 PID: 4818 Comm: syz.2.372 Not tainted 5.15.167-syzkaller #0
[   83.673326][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.678014][ T4818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   83.678065][ T4818] Call Trace:
[   83.678074][ T4818]  <TASK>
[   83.701602][ T4818]  dump_stack_lvl+0x1e3/0x2d0
[   83.706297][ T4818]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[   83.711944][ T4818]  ? panic+0x860/0x860
[   83.716030][ T4818]  ? sysfs_create_dir_ns+0x282/0x390
[   83.721314][ T4818]  sysfs_create_dir_ns+0x2c6/0x390
[   83.726440][ T4818]  ? sysfs_warn_dup+0xa0/0xa0
[   83.731121][ T4818]  ? do_raw_spin_unlock+0x137/0x8b0
[   83.736300][ T4818]  ? kobject_set_name_vargs+0xca/0x110
[   83.741748][ T4818]  kobject_add_internal+0x6e0/0xe00
[   83.746967][ T4818]  kobject_init_and_add+0x120/0x190
[   83.752176][ T4818]  ? lockdep_softirqs_off+0x420/0x420
[   83.757550][ T4818]  ? widen_string+0x3a/0x310
[   83.762143][ T4818]  ? kobject_add+0x210/0x210
[   83.766740][ T4818]  ? __init_swait_queue_head+0xaa/0x140
[   83.772295][ T4818]  gfs2_sys_fs_add+0x237/0x4a0
[   83.777073][ T4818]  ? gfs2_recover_set+0x240/0x240
[   83.782114][ T4818]  ? snprintf+0xd6/0x120
[   83.786371][ T4818]  ? vscnprintf+0x80/0x80
[   83.790709][ T4818]  ? read_word_at_a_time+0xe/0x20
[   83.795734][ T4818]  ? strscpy+0x89/0x220
[   83.799894][ T4818]  gfs2_fill_super+0x1299/0x2750
[   83.804848][ T4818]  ? gfs2_reconfigure+0xcf0/0xcf0
[   83.809870][ T4818]  ? ptr_to_hashval+0x60/0x60
[   83.814549][ T4818]  ? up_write+0x19d/0x580
[   83.818895][ T4818]  ? set_blocksize+0x1ec/0x370
[   83.823662][ T4818]  get_tree_bdev+0x3fe/0x620
[   83.828254][ T4818]  ? gfs2_reconfigure+0xcf0/0xcf0
[   83.833280][ T4818]  gfs2_get_tree+0x50/0x210
[   83.837781][ T4818]  ? bpf_lsm_capable+0x5/0x10
[   83.842463][ T4818]  vfs_get_tree+0x88/0x270
[   83.846884][ T4818]  do_new_mount+0x2ba/0xb40
[   83.851395][ T4818]  ? do_move_mount_old+0x160/0x160
[   83.856512][ T4818]  ? user_path_at_empty+0x12b/0x180
[   83.861714][ T4818]  __se_sys_mount+0x2d5/0x3c0
[   83.866394][ T4818]  ? __x64_sys_mount+0xc0/0xc0
[   83.871155][ T4818]  ? syscall_enter_from_user_mode+0x2e/0x240
[   83.877244][ T4818]  ? lockdep_hardirqs_on+0x94/0x130
[   83.882462][ T4818]  ? __x64_sys_mount+0x1c/0xc0
[   83.887238][ T4818]  do_syscall_64+0x3b/0xb0
[   83.891659][ T4818]  ? clear_bhb_loop+0x15/0x70
[   83.896334][ T4818]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   83.902226][ T4818] RIP: 0033:0x7f25e0b4179a
[   83.906641][ T4818] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   83.926245][ T4818] RSP: 002b:00007f25defb7e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   83.934670][ T4818] RAX: ffffffffffffffda RBX: 00007f25defb7ef0 RCX: 00007f25e0b4179a
[   83.942648][ T4818] RDX: 00000000200002c0 RSI: 0000000020000100 RDI: 00007f25defb7eb0
[   83.950625][ T4818] RBP: 00000000200002c0 R08: 00007f25defb7ef0 R09: 0000000000008c9b
[   83.958599][ T4818] R10: 0000000000008c9b R11: 0000000000000246 R12: 0000000020000100
[   83.961789][ T4858] loop1: detected capacity change from 0 to 32768
[   83.966571][ T4818] R13: 00007f25defb7eb0 R14: 0000000000012760 R15: 0000000020000400
[   83.966600][ T4818]  </TASK>
[   83.989571][ T4730] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.019454][ T4818] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[   84.077486][ T4818] gfs2: fsid=syz:syz: error -17 adding sysfs files
[   84.084882][ T4863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.389'.
[   84.180922][   T26] Bluetooth: hci6: command 0x041b tx timeout
[   84.500239][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.526293][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.597896][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.630061][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.638761][ T4730] device veth0_vlan entered promiscuous mode
[   84.735293][ T4880] loop2: detected capacity change from 0 to 512
[   84.746094][ T4730] device veth1_vlan entered promiscuous mode
[   84.771792][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.789958][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.818998][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.893384][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.915125][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.947329][ T4880] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a802c028, mo2=0000]
[   84.957192][ T4730] device veth0_macvtap entered promiscuous mode
[   84.972265][ T4880] System zones: 0-2, 18-18, 34-34
[   84.988244][ T4730] device veth1_macvtap entered promiscuous mode
[   85.024187][ T4880] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.395: couldn't read orphan inode 16 (err -116)
[   85.041523][ T4880] EXT4-fs (loop2): Remounting filesystem read-only
[   85.048156][ T4880] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,debug,max_batch_time=0x0000000000000006,resuid=0x0000000000000000,barrier,resuid=0x0000000000000000,nogrpid,. Quota mode: writeback.
[   85.070747][    C0] vkms_vblank_simulate: vblank timer overrun
[   85.077877][ T4880] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038 (0x7fffffff)
[   85.109120][ T4880] EXT4-fs error (device loop2): ext4_get_first_dir_block:3603: inode #12: block 13: comm syz.2.395: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=12, rec_len=63, size=4096 fake=1
[   85.131168][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.166825][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.199141][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.218780][ T4880] EXT4-fs (loop2): Remounting filesystem read-only
[   85.236037][ T4880] EXT4-fs error (device loop2): ext4_get_first_dir_block:3606: inode #12: comm syz.2.395: directory missing '.'
[   85.239851][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.250608][ T4869] loop0: detected capacity change from 0 to 40427
[   85.264992][ T3762] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   85.305848][ T4869] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   85.318474][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.328782][ T4869] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   85.339379][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.349222][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.352667][ T4869] F2FS-fs (loop0): invalid crc value
[   85.379698][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.390404][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.402995][ T4869] F2FS-fs (loop0): Found nat_bits in checkpoint
[   85.410409][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.430387][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.453256][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.504297][ T4730] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.523139][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.535332][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.546299][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.556927][ T4869] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   85.564860][ T4869] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   85.603567][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.629674][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.649347][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.659160][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.670557][ T3762] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   85.689655][ T3762] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   85.710541][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.727631][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.746232][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.756368][ T4730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.777333][ T4730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.799473][ T3575] attempt to access beyond end of device
[   85.799473][ T3575] loop0: rw=2049, want=45104, limit=40427
[   85.800253][ T4730] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.827877][ T4730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.838006][ T4730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.890037][ T4730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.909098][ T4730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.919794][ T3762] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   85.936312][ T3762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.945081][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.984949][ T3762] usb 2-1: Product: syz
[   85.993622][ T3762] usb 2-1: Manufacturer: syz
[   85.999184][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.003987][ T3762] usb 2-1: SerialNumber: syz
[   86.030809][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.037243][ T3762] usb 2-1: config 0 descriptor??
[   86.056282][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.070621][ T4887] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   86.077728][ T4887] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   86.087109][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.124936][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.260690][   T26] Bluetooth: hci6: command 0x040f tx timeout
[   86.351533][ T3762] dm9601: probe of 2-1:0.0 failed with error -71
[   86.362607][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.405'.
[   86.403544][ T3762] usb 2-1: USB disconnect, device number 3
[   86.449773][ T3668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.457858][ T3668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.526346][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.562247][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.582062][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.632494][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.849450][ T4069] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   87.179740][ T3962] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   87.219556][ T4069] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[   87.227581][ T4069] usb 1-1: config 0 has no interface number 0
[   87.244034][ T4069] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[   87.262103][ T4069] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.300492][ T4069] usb 1-1: config 0 descriptor??
[   87.309437][ T3849] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   87.350726][ T4069] ums-realtek 1-1:0.6: USB Mass Storage device detected
[   87.429411][ T3962] usb 2-1: Using ep0 maxpacket: 16
[   87.559859][ T3962] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.563143][ T3762] usb 1-1: USB disconnect, device number 3
[   87.570914][ T3849] usb 4-1: Using ep0 maxpacket: 8
[   87.597804][ T4934] loop2: detected capacity change from 0 to 32768
[   87.609545][ T3962] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   87.633498][ T3962] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   87.646133][ T3962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.661222][ T3962] usb 2-1: config 0 descriptor??
[   87.729626][ T3849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   87.759635][ T3849] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   87.793573][ T3849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.805100][ T3849] usb 4-1: config 0 descriptor??
[   88.074428][ T3849] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   88.146267][ T3962] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input5
[   88.288977][ T3962] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   88.330021][ T3762] Bluetooth: hci6: command 0x0419 tx timeout
[   88.549473][   T26] usb 2-1: USB disconnect, device number 4
[   88.737870][ T4971] loop2: detected capacity change from 0 to 32768
[   88.841429][ T4069] usb 4-1: USB disconnect, device number 6
[   88.854969][ T4069] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected
[   88.865080][ T4971] XFS (loop2): Mounting V5 Filesystem
[   88.934665][ T4971] XFS (loop2): Ending clean mount
[   88.986510][ T4971] XFS (loop2): Quotacheck needed: Please wait.
[   89.080317][ T4971] XFS (loop2): Quotacheck: Done.
[   89.258350][ T3582] XFS (loop2): Unmounting Filesystem
[   89.352864][ T5005] loop1: detected capacity change from 0 to 128
[   89.443676][ T5005] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   89.464485][ T5005] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038 (0x7fffffff)
[   89.579459][ T5005] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes
[   89.853161][ T5019] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.892742][ T5019] team0: Port device bond0 added
[   89.995281][ T5019] syz.1.445 (5019) used greatest stack depth: 18424 bytes left
[   90.344355][   T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   90.639764][   T26] usb 3-1: Using ep0 maxpacket: 8
[   90.705753][ T5021] loop0: detected capacity change from 0 to 32768
[   90.779716][   T26] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   90.820730][   T26] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   90.855495][   T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.887124][   T26] usb 3-1: config 0 descriptor??
[   90.951005][ T5066] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   91.099607][ T3962] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   91.138374][ T5075] loop0: detected capacity change from 0 to 1024
[   91.180839][   T26] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   91.356174][    T9] hfsplus: b-tree write err: -5, ino 4
[   91.369753][ T3962] usb 5-1: Using ep0 maxpacket: 16
[   91.466184][ T3656] usb 3-1: USB disconnect, device number 5
[   91.475947][ T3656] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected
[   91.489683][ T3962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.519497][ T3962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.529276][ T3962] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   91.569672][ T3962] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   91.578738][ T3962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.625363][ T3962] usb 5-1: config 0 descriptor??
[   92.009148][ T5090] loop0: detected capacity change from 0 to 32768
[   92.048714][ T5094] device ip6tnl0 entered promiscuous mode
[   92.055177][ T5093] device ip6tnl0 left promiscuous mode
[   92.128012][ T3962] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input6
[   92.167706][ T5090] XFS (loop0): Mounting V5 Filesystem
[   92.275013][ T5090] XFS (loop0): Ending clean mount
[   92.304300][ T3962] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[   92.330636][ T3962] usb 5-1: USB disconnect, device number 2
[   92.449012][ T3575] XFS (loop0): Unmounting Filesystem
[   92.628973][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.671815][ T5112] team0: Port device bond0 added
[   92.809449][ T5121] loop1: detected capacity change from 0 to 2048
[   92.872799][ T5121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.069477][ T3762] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   93.125370][ T5128] loop0: detected capacity change from 0 to 2048
[   93.127410][ T5099] loop2: detected capacity change from 0 to 32768
[   93.212033][ T5128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.239464][   T26] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   93.308448][ T5099] XFS (loop2): Mounting V5 Filesystem
[   93.446193][ T5130] loop1: detected capacity change from 0 to 32768
[   93.454320][ T5099] XFS (loop2): Ending clean mount
[   93.481996][ T5099] XFS (loop2): Quotacheck needed: Please wait.
[   93.489790][ T3762] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[   93.501955][ T3762] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895
[   93.513784][ T3762] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x32, skipping
[   93.526034][   T26] usb 5-1: Using ep0 maxpacket: 8
[   93.546517][ T5099] XFS (loop2): Quotacheck: Done.
[   93.563725][ T5130] XFS (loop1): Mounting V5 Filesystem
[   93.624648][ T3582] XFS (loop2): Unmounting Filesystem
[   93.636555][ T3762] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00
[   93.646202][ T3762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   93.662442][ T3762] usb 4-1: SerialNumber: syz
[   93.675030][ T3762] usb 4-1: config 0 descriptor??
[   93.680409][   T26] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[   93.688792][   T26] usb 5-1: config 0 has no interface number 0
[   93.694954][   T26] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   93.706689][   T26] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   93.716539][ T5122] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   93.723670][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.731936][ T5122] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   93.743369][   T26] usb 5-1: config 0 descriptor??
[   93.750550][ T3762] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[   93.753143][ T5130] XFS (loop1): Ending clean mount
[   93.796134][   T26] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   93.800199][ T5130] XFS (loop1): Quotacheck needed: Please wait.
[   93.918975][ T5130] XFS (loop1): Quotacheck: Done.
[   93.953883][   T26] usb 4-1: USB disconnect, device number 7
[   93.996823][ T3762] usb 5-1: USB disconnect, device number 3
[   94.044850][ T3572] XFS (loop1): Unmounting Filesystem
[   94.059200][ T3762] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected
[   94.176822][ T5151] loop0: detected capacity change from 0 to 32768
[   94.303161][ T5151] XFS (loop0): Mounting V5 Filesystem
[   94.397905][ T5151] XFS (loop0): Ending clean mount
[   94.402879][ T5153] loop2: detected capacity change from 0 to 8192
[   94.419015][ T5151] XFS (loop0): Quotacheck needed: Please wait.
[   94.461481][ T5153] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[   94.519597][ T5153] REISERFS (device loop2): using ordered data mode
[   94.526132][ T5153] reiserfs: using flush barriers
[   94.533471][ T5153] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   94.551394][ T5153] REISERFS (device loop2): checking transaction log (loop2)
[   94.572549][ T5153] REISERFS (device loop2): Using r5 hash to sort names
[   94.601725][ T5151] XFS (loop0): Quotacheck: Done.
[   94.623871][ T5153] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   94.634745][ T5151] XFS (loop0): User initiated shutdown received.
[   94.643819][ T5151] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[   94.677991][ T5151] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   94.708603][ T3575] XFS (loop0): Unmounting Filesystem
[   94.859725][   T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   95.074643][ T5179] option changes via remount are deprecated (pid=5177 comm=syz.2.500)
[   95.179631][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   95.215149][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'.
[   95.239659][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.262000][   T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.291965][   T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[   95.324149][   T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.364701][   T26] usb 2-1: config 0 descriptor??
[   95.700925][ T5197] loop2: detected capacity change from 0 to 4096
[   95.766563][ T5197] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[   95.789650][ T5197] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[   95.808904][ T5197] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[   95.828792][ T5197] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00
[   95.846425][ T5197] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00
[   95.875240][   T26] logitech-djreceiver 0003:046D:C534.0007: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.1-1/input0
[   95.897865][ T5197] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00
[   95.906313][ T5197] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00
[   95.934932][ T5197] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00
[   95.953150][ T5197] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00
[   95.989576][ T5197] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00
[   96.068403][   T13] usb 2-1: USB disconnect, device number 5
[   96.253911][ T5192] loop0: detected capacity change from 0 to 40427
[   96.338597][ T5192] F2FS-fs (loop0): Found nat_bits in checkpoint
[   96.448024][ T5192] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   96.511127][ T3575] attempt to access beyond end of device
[   96.511127][ T3575] loop0: rw=2049, want=45112, limit=40427
[   96.805262][ T5229] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[   96.859589][ T5229] XFS (loop2): SB validate failed with error -5.
[   97.234069][ T5250] device gretap0 entered promiscuous mode
[   97.273842][ T5250] device erspan0 entered promiscuous mode
[   97.310737][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[   97.587478][ T5264] netlink: 76 bytes leftover after parsing attributes in process `syz.2.537'.
[   97.669543][ T3762] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   97.735303][ T5268] loop2: detected capacity change from 0 to 1024
[   97.827473][ T5268] hfsplus: bad catalog entry type
[   97.899811][ T3623] hfsplus: b-tree write err: -5, ino 4
[   97.960547][ T3762] usb 1-1: Using ep0 maxpacket: 32
[   98.025219][ T5282] device ip6tnl0 entered promiscuous mode
[   98.074700][ T5278] device ip6tnl0 left promiscuous mode
[   98.118162][ T3762] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   98.127636][ T5287] fuse: Invalid user_id
[   98.140429][ T3762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.170554][ T3762] usb 1-1: config 0 descriptor??
[   98.439524][ T3762] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   98.473429][ T3762] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   98.501038][ T3618] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   98.510147][ T3762] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   98.517710][ T3762] usb 1-1: media controller created
[   98.559182][ T3762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   98.751781][ T5292] loop2: detected capacity change from 0 to 40427
[   98.770697][ T3618] usb 5-1: Using ep0 maxpacket: 8
[   98.786961][ T5292] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   98.795409][ T5292] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   98.817464][ T5292] F2FS-fs (loop2): invalid crc value
[   98.832938][ T5292] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[   98.903910][ T5292] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   98.912870][ T3618] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   98.929625][ T5292] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   98.930861][ T3618] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   98.974501][ T3618] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   98.986107][ T3618] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   98.999701][ T3618] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   99.008914][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.099658][ T3762] az6027: usb out operation failed. (-71)
[   99.105927][ T3762] stb0899_attach: Driver disabled by Kconfig
[   99.112615][ T3762] az6027: no front-end attached
[   99.112615][ T3762] 
[   99.155041][ T3762] az6027: usb out operation failed. (-71)
[   99.163429][ T3762] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   99.193180][ T3762] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[   99.226786][ T3762] dvb-usb: schedule remote query interval to 400 msecs.
[   99.251211][ T3762] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   99.262453][ T3762] usb 1-1: USB disconnect, device number 4
[   99.299913][ T3618] usb 5-1: GET_CAPABILITIES returned 0
[   99.305426][ T3618] usbtmc 5-1:16.0: can't read capabilities
[   99.401913][ T3762] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   99.550934][ T5293] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71
[   99.567955][ T4069] usb 5-1: USB disconnect, device number 4
[   99.614276][ T5308] loop2: detected capacity change from 0 to 32768
[   99.652873][ T5308] XFS (loop2): Mounting V5 Filesystem
[   99.686968][ T5308] XFS (loop2): Ending clean mount
[   99.707024][ T5308] XFS (loop2): Quotacheck needed: Please wait.
[   99.788069][ T5308] XFS (loop2): Quotacheck: Done.
[   99.843626][ T5326] netlink: 'syz.0.560': attribute type 29 has an invalid length.
[   99.851947][ T5326] netlink: 'syz.0.560': attribute type 29 has an invalid length.
[   99.901360][ T3582] XFS (loop2): Unmounting Filesystem
[  100.272952][ T5337] loop1: detected capacity change from 0 to 512
[  100.382374][ T5337] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  100.425361][ T5337] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038 (0x7fffffff)
[  100.560434][ T5337] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback.
[  100.632675][ T3572] EXT4-fs error (device loop1): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /163/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  100.641645][ T5348] loop2: detected capacity change from 0 to 512
[  100.750417][ T5348] EXT4-fs (loop2): 1 orphan inode deleted
[  100.759608][ T5348] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock,. Quota mode: writeback.
[  100.782087][ T5348] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038 (0x7fffffff)
[  100.788920][ T5356] mmap: syz.0.573 (5356) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  101.144395][ T5366] loop0: detected capacity change from 0 to 4096
[  101.526744][ T5381] loop0: detected capacity change from 0 to 512
[  101.625051][ T5381] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  101.690082][ T5381] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.584: invalid indirect mapped block 512 (level 0)
[  101.708190][ T5381] EXT4-fs (loop0): Remounting filesystem read-only
[  101.716610][ T5381] EXT4-fs (loop0): 1 orphan inode deleted
[  101.722759][ T5381] EXT4-fs (loop0): 1 truncate cleaned up
[  101.728516][ T5381] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,jqfmt=vfsold,inode_readahead_blks=0x0000000000200000,block_validity,quota,. Quota mode: writeback.
[  101.821345][ T5381] EXT4-fs (loop0): can't change dax mount option while remounting
[  101.918097][ T3575] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  101.940812][ T3762] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  101.959484][ T3575] EXT4-fs (loop0): Remounting filesystem read-only
[  101.967447][ T3575] EXT4-fs error (device loop0): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 17
[  101.991411][ T3575] EXT4-fs error (device loop0): ext4_lookup:1860: inode #2: comm syz-executor: deleted inode referenced: 17
[  102.239657][ T3762] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  102.340200][ T3762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  102.349107][ T3762] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  102.353355][ T5387] loop2: detected capacity change from 0 to 32768
[  102.369408][ T3762] usb 5-1: config 0 interface 0 has no altsetting 0
[  102.402303][    T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.437307][ T5387] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.586 (5387)
[  102.476575][ T5387] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  102.488520][ T5387] BTRFS info (device loop2): using free space tree
[  102.489694][ T3762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  102.502488][ T5387] BTRFS info (device loop2): has skinny extents
[  102.519470][ T3762] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  102.560040][ T3762] usb 5-1: config 0 interface 0 has no altsetting 0
[  102.608378][    T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.648250][ T5387] BTRFS info (device loop2): enabling ssd optimizations
[  102.680706][    T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.699628][ T3762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  102.708502][ T3762] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  102.747218][ T3762] usb 5-1: config 0 interface 0 has no altsetting 0
[  102.769043][    T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.869638][ T3762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  102.892080][ T3762] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  102.903538][ T3762] usb 5-1: config 0 interface 0 has no altsetting 0
[  103.044819][ T3762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.062639][ T3762] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  103.114417][ T3762] usb 5-1: config 0 interface 0 has no altsetting 0
[  103.124416][ T5408] chnl_net:caif_netlink_parms(): no params data found
[  103.239766][ T3762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.248675][ T3762] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  103.279536][ T3762] usb 5-1: config 0 interface 0 has no altsetting 0
[  103.389711][ T3762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.398629][ T3762] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  103.475721][ T3762] usb 5-1: config 0 interface 0 has no altsetting 0
[  103.530259][ T5408] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.558615][ T5408] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.578403][ T5408] device bridge_slave_0 entered promiscuous mode
[  103.609803][ T3762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  103.618704][ T3762] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  103.644824][ T5408] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.659359][ T3762] usb 5-1: config 0 interface 0 has no altsetting 0
[  103.668193][ T5408] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.687089][ T5408] device bridge_slave_1 entered promiscuous mode
[  103.711012][    T9] tipc: Disabling bearer <udp:syz2>
[  103.733379][    T9] tipc: Left network mode
[  103.813660][ T5408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.839822][ T3762] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  103.848883][ T3762] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  103.889479][ T3762] usb 5-1: Product: syz
[  103.893712][ T3762] usb 5-1: Manufacturer: syz
[  103.904191][ T3762] usb 5-1: SerialNumber: syz
[  103.928547][ T3762] usb 5-1: config 0 descriptor??
[  103.943747][ T5408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.012508][ T3762] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  104.018590][ T5438] loop2: detected capacity change from 0 to 512
[  104.066734][ T5408] team0: Port device team_slave_0 added
[  104.105587][ T5408] team0: Port device team_slave_1 added
[  104.137865][ T5438] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback.
[  104.165930][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.173349][ T5438] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038 (0x7fffffff)
[  104.183278][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.183304][ T5408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.262061][ T5408] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.269033][ T5408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.345836][ T5408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.412000][ T3962] usb 5-1: USB disconnect, device number 5
[  104.419575][    C1] usb 5-1: yurex_control_callback - control failed: -71
[  104.429423][ T3962] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  104.542909][ T5408] device hsr_slave_0 entered promiscuous mode
[  104.589468][ T5408] device hsr_slave_1 entered promiscuous mode
[  104.604041][ T5408] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.616004][ T5408] Cannot create hsr debugfs directory
[  105.049699][ T3962] Bluetooth: hci2: command 0x0409 tx timeout
[  105.134158][    T9] device hsr_slave_0 left promiscuous mode
[  105.201245][    T9] device hsr_slave_1 left promiscuous mode
[  105.222664][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.259750][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.298772][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.319573][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.340184][    T9] device bridge_slave_1 left promiscuous mode
[  105.348740][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.375228][    T9] device bridge_slave_0 left promiscuous mode
[  105.389557][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.441267][    T9] device veth1_macvtap left promiscuous mode
[  105.447956][    T9] device veth0_macvtap left promiscuous mode
[  105.471203][    T9] device veth1_vlan left promiscuous mode
[  105.477546][    T9] device veth0_vlan left promiscuous mode
[  105.725203][ T5468] loop2: detected capacity change from 0 to 4096
[  106.240944][    T9] team0 (unregistering): Port device team_slave_1 removed
[  106.296343][    T9] team0 (unregistering): Port device team_slave_0 removed
[  106.333361][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.379118][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.595440][ T5479] loop2: detected capacity change from 0 to 4096
[  106.597713][    T9] bond0 (unregistering): Released all slaves
[  107.129700][ T4069] Bluetooth: hci2: command 0x041b tx timeout
[  107.243603][ T5489] loop2: detected capacity change from 0 to 2048
[  107.279791][ T5408] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  107.313464][ T5408] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  107.342804][ T5408] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  107.405309][ T5408] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  107.431655][ T5495] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.686907][ T5408] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.732423][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  107.755146][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  107.797498][ T5408] 8021q: adding VLAN 0 to HW filter on device team0
[  107.832212][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  107.847466][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  107.871705][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.878874][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.950804][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  107.963557][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  107.994324][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  108.023692][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.030901][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.072065][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  108.102204][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  108.162325][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  108.191720][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  108.231383][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  108.264240][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  108.297153][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  108.321354][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  108.367675][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  108.403662][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  108.427487][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  108.475937][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  108.852792][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  108.872165][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  108.927108][ T5408] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.062852][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  109.080370][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  109.092935][ T5551] loop2: detected capacity change from 0 to 2048
[  109.154549][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  109.173312][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  109.209620][ T3962] Bluetooth: hci2: command 0x040f tx timeout
[  109.222453][ T5408] device veth0_vlan entered promiscuous mode
[  109.250870][ T5551] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.266634][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  109.274829][ T5551] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh
[  109.275783][ T3623] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  109.293495][ T5551] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0
[  109.325435][ T5408] device veth1_vlan entered promiscuous mode
[  109.476463][ T5557] netlink: 40 bytes leftover after parsing attributes in process `syz.4.625'.
[  109.551072][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  109.562562][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  109.571053][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  109.580376][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  109.603021][ T5408] device veth0_macvtap entered promiscuous mode
[  109.664395][ T5534] chnl_net:caif_netlink_parms(): no params data found
[  109.691270][ T5408] device veth1_macvtap entered promiscuous mode
[  109.832435][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  109.870225][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  109.906443][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.917397][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.927702][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.939327][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.949527][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.961387][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.971454][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  109.983657][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.993741][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.004598][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.014968][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.025758][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.037680][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.061042][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  110.089528][ T5579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'.
[  110.090335][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  110.177147][ T5585] loop2: detected capacity change from 0 to 16
[  110.221725][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.232742][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.243219][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.258695][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.269550][ T5585] erofs: Unknown parameter 'ÿÿÿÿ'
[  110.274993][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.286051][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.296542][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.308711][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.320660][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.331773][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.351803][ T5408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.369382][ T5408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.389123][ T5408] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.423858][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  110.454233][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  110.475733][ T5408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.485787][ T5408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.501773][ T5408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.512472][ T5408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  110.595733][ T5534] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.606342][ T5534] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.617553][ T5534] device bridge_slave_0 entered promiscuous mode
[  110.646919][ T5534] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.668372][ T5534] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.686836][ T5534] device bridge_slave_1 entered promiscuous mode
[  110.809574][   T13] Bluetooth: hci7: command 0x0409 tx timeout
[  110.861490][ T5534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.951736][ T5534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.983385][ T4068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.040847][ T4068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.102532][ T5603] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  111.126563][ T5605] capability: warning: `syz.4.643' uses deprecated v2 capabilities in a way that may be insecure
[  111.171740][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  111.252556][ T5534] team0: Port device team_slave_0 added
[  111.261385][ T3623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.290603][ T3623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.299713][ T3617] Bluetooth: hci2: command 0x0419 tx timeout
[  111.332695][ T5534] team0: Port device team_slave_1 added
[  111.365947][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  111.580057][ T5534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.587047][ T5534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.668461][ T5534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.694265][ T5618] netlink: 'syz.2.650': attribute type 2 has an invalid length.
[  111.705767][ T5534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.713494][ T5534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.772790][ T5534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  111.861749][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.054312][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.126844][ T5534] device hsr_slave_0 entered promiscuous mode
[  112.150164][ T5534] device hsr_slave_1 entered promiscuous mode
[  112.158029][ T5639] netlink: 48 bytes leftover after parsing attributes in process `syz.2.659'.
[  112.215915][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.350810][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.384282][ T5601] chnl_net:caif_netlink_parms(): no params data found
[  112.404878][ T5644] netlink: 'syz.2.661': attribute type 4 has an invalid length.
[  112.490869][ T5655] loop2: detected capacity change from 0 to 64
[  112.497862][ T5652] sp0: Synchronizing with TNC
[  112.528050][ T5651] [U] è
[  112.768259][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.785286][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.810955][ T5601] device bridge_slave_0 entered promiscuous mode
[  112.827594][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.885365][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.902093][ T3762] Bluetooth: hci7: command 0x041b tx timeout
[  112.903345][ T5601] device bridge_slave_1 entered promiscuous mode
[  112.915407][ T3849] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  112.972177][ T5672] loop0: detected capacity change from 0 to 512
[  113.019159][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.057471][ T5672] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  113.083442][ T5672] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  113.094444][ T5534] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.125030][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.230135][ T3617] Bluetooth: hci8: command 0x0409 tx timeout
[  113.237763][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'.
[  113.279623][ T3849] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  113.292790][ T3849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.307408][ T5534] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.330176][ T3849] usb 5-1: config 0 descriptor??
[  113.366939][ T5601] team0: Port device team_slave_0 added
[  113.371195][ T3849] gspca_main: cpia1-2.14.0 probing 0813:0001
[  113.426412][ T5601] team0: Port device team_slave_1 added
[  113.512071][ T5534] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.555604][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.583253][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.611830][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.649592][ T3764] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  113.661401][ T5534] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.684644][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.710965][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.777698][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.809680][ T3849] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  113.929498][ T3764] usb 3-1: Using ep0 maxpacket: 16
[  113.951506][ T5704] ==================================================================
[  113.960190][ T5704] BUG: KASAN: use-after-free in gfs2_qd_shrink_scan+0x63d/0x860
[  113.967837][ T5704] Write of size 4 at addr ffff888079fe8a70 by task syz.0.681/5704
[  113.975626][ T5704] 
[  113.977937][ T5704] CPU: 0 PID: 5704 Comm: syz.0.681 Not tainted 5.15.167-syzkaller #0
[  113.985992][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  113.996031][ T5704] Call Trace:
[  113.999296][ T5704]  <TASK>
[  114.002216][ T5704]  dump_stack_lvl+0x1e3/0x2d0
[  114.006887][ T5704]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  114.012509][ T5704]  ? _printk+0xd1/0x120
[  114.016663][ T5704]  ? __wake_up_klogd+0xcc/0x100
[  114.021502][ T5704]  ? panic+0x860/0x860
[  114.025554][ T5704]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  114.031011][ T5704]  print_address_description+0x63/0x3b0
[  114.036547][ T5704]  ? gfs2_qd_shrink_scan+0x63d/0x860
[  114.041821][ T5704]  kasan_report+0x16b/0x1c0
[  114.046311][ T5704]  ? gfs2_qd_shrink_scan+0x63d/0x860
[  114.051598][ T5704]  kasan_check_range+0x27e/0x290
[  114.056524][ T5704]  gfs2_qd_shrink_scan+0x63d/0x860
[  114.061631][ T5704]  ? gfs2_qd_shrink_count+0x100/0x100
[  114.067004][ T5704]  do_shrink_slab+0x542/0xda0
[  114.071681][ T5704]  shrink_slab+0x233/0x960
[  114.076096][ T5704]  ? __lock_acquire+0x1ff0/0x1ff0
[  114.081102][ T5704]  ? drop_slab_node+0x180/0x180
[  114.085951][ T5704]  ? mem_cgroup_iter+0x3b4/0x520
[  114.090879][ T5704]  drop_slab_node+0xed/0x180
[  114.095462][ T5704]  drop_slab+0x8b/0x120
[  114.099605][ T5704]  drop_caches_sysctl_handler+0xb3/0x160
[  114.105225][ T5704]  ? cn_vprintf+0x450/0x450
[  114.109717][ T5704]  proc_sys_call_handler+0x541/0x8a0
[  114.115005][ T5704]  ? proc_sys_open+0x270/0x270
[  114.119754][ T5704]  ? do_splice_direct+0x285/0x3d0
[  114.124766][ T5704]  ? aa_path_link+0xea0/0xea0
[  114.129431][ T5704]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  114.135498][ T5704]  do_iter_readv_writev+0x594/0x7a0
[  114.140693][ T5704]  ? generic_file_rw_checks+0x260/0x260
[  114.146233][ T5704]  ? common_file_perm+0x17d/0x1d0
[  114.151251][ T5704]  ? fsnotify_perm+0x64/0x590
[  114.155914][ T5704]  ? security_file_permission+0x75/0xa0
[  114.161453][ T5704]  do_iter_write+0x1e6/0x760
[  114.166040][ T5704]  ? vfs_iter_write+0x69/0xa0
[  114.170706][ T5704]  iter_file_splice_write+0x806/0xfa0
[  114.176090][ T5704]  ? splice_from_pipe+0x230/0x230
[  114.181100][ T5704]  ? generic_file_splice_read+0x54a/0x790
[  114.186811][ T5704]  ? splice_shrink_spd+0xb0/0xb0
[  114.191755][ T5704]  ? common_file_perm+0x17d/0x1d0
[  114.196763][ T5704]  ? splice_from_pipe+0x230/0x230
[  114.201785][ T5704]  direct_splice_actor+0xe3/0x1c0
[  114.206803][ T5704]  splice_direct_to_actor+0x500/0xc10
[  114.212171][ T5704]  ? do_splice_direct+0x3d0/0x3d0
[  114.217186][ T5704]  ? pipe_to_sendpage+0x350/0x350
[  114.222201][ T5704]  ? fsnotify_perm+0x64/0x590
[  114.226863][ T5704]  ? security_file_permission+0x75/0xa0
[  114.232398][ T5704]  do_splice_direct+0x285/0x3d0
[  114.237238][ T5704]  ? splice_direct_to_actor+0xc10/0xc10
[  114.242771][ T5704]  ? rcu_read_lock_any_held+0xb3/0x160
[  114.248230][ T5704]  do_sendfile+0x622/0x1000
[  114.252734][ T5704]  ? do_pwritev+0x360/0x360
[  114.257226][ T5704]  ? __might_fault+0xb4/0x110
[  114.261894][ T5704]  __se_sys_sendfile64+0xfc/0x1e0
[  114.266906][ T5704]  ? __x64_sys_sendfile64+0xa0/0xa0
[  114.272107][ T5704]  ? syscall_enter_from_user_mode+0x2e/0x240
[  114.278076][ T5704]  ? lockdep_hardirqs_on+0x94/0x130
[  114.283351][ T5704]  ? syscall_enter_from_user_mode+0x2e/0x240
[  114.289322][ T5704]  do_syscall_64+0x3b/0xb0
[  114.293727][ T5704]  ? clear_bhb_loop+0x15/0x70
[  114.298405][ T5704]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  114.304282][ T5704] RIP: 0033:0x7f4a4a0aaff9
[  114.308685][ T5704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.328277][ T5704] RSP: 002b:00007f4a48523038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  114.336679][ T5704] RAX: ffffffffffffffda RBX: 00007f4a4a262f80 RCX: 00007f4a4a0aaff9
[  114.344633][ T5704] RDX: 0000000020002080 RSI: 0000000000000003 RDI: 0000000000000004
[  114.352586][ T5704] RBP: 00007f4a4a11d296 R08: 0000000000000000 R09: 0000000000000000
[  114.360542][ T5704] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000000
[  114.368495][ T5704] R13: 0000000000000000 R14: 00007f4a4a262f80 R15: 00007ffdfb81c968
[  114.376472][ T5704]  </TASK>
[  114.379471][ T5704] 
[  114.381775][ T5704] Allocated by task 4126:
[  114.386080][ T5704]  ____kasan_kmalloc+0xba/0xf0
[  114.390829][ T5704]  kmem_cache_alloc_trace+0x143/0x290
[  114.396189][ T5704]  gfs2_fill_super+0x15a/0x2750
[  114.401021][ T5704]  get_tree_bdev+0x3fe/0x620
[  114.405626][ T5704]  gfs2_get_tree+0x50/0x210
[  114.410111][ T5704]  vfs_get_tree+0x88/0x270
[  114.414515][ T5704]  do_new_mount+0x2ba/0xb40
[  114.419002][ T5704]  __se_sys_mount+0x2d5/0x3c0
[  114.423659][ T5704]  do_syscall_64+0x3b/0xb0
[  114.428059][ T5704]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  114.433937][ T5704] 
[  114.436241][ T5704] Freed by task 4126:
[  114.440196][ T5704]  kasan_set_track+0x4b/0x80
[  114.444768][ T5704]  kasan_set_free_info+0x1f/0x40
[  114.449684][ T5704]  ____kasan_slab_free+0xd8/0x120
[  114.454696][ T5704]  slab_free_freelist_hook+0xdd/0x160
[  114.460140][ T5704]  kfree+0xf1/0x270
[  114.463929][ T5704]  generic_shutdown_super+0x136/0x2c0
[  114.469286][ T5704]  kill_block_super+0x7a/0xe0
[  114.473944][ T5704]  deactivate_locked_super+0xa0/0x110
[  114.479475][ T5704]  cleanup_mnt+0x44e/0x500
[  114.483874][ T5704]  task_work_run+0x129/0x1a0
[  114.488446][ T5704]  exit_to_user_mode_loop+0x106/0x130
[  114.493799][ T5704]  exit_to_user_mode_prepare+0xb1/0x140
[  114.499325][ T5704]  syscall_exit_to_user_mode+0x5d/0x240
[  114.504874][ T5704]  do_syscall_64+0x47/0xb0
[  114.509269][ T5704]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  114.515158][ T5704] 
[  114.517461][ T5704] The buggy address belongs to the object at ffff888079fe8000
[  114.517461][ T5704]  which belongs to the cache kmalloc-8k of size 8192
[  114.531492][ T5704] The buggy address is located 2672 bytes inside of
[  114.531492][ T5704]  8192-byte region [ffff888079fe8000, ffff888079fea000)
[  114.544918][ T5704] The buggy address belongs to the page:
[  114.550541][ T5704] page:ffffea0001e7fa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79fe8
[  114.560673][ T5704] head:ffffea0001e7fa00 order:3 compound_mapcount:0 compound_pincount:0
[  114.569035][ T5704] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  114.577000][ T5704] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017042280
[  114.585604][ T5704] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  114.594162][ T5704] page dumped because: kasan: bad access detected
[  114.600588][ T5704] page_owner tracks the page as allocated
[  114.606280][ T5704] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3690, ts 47946356620, free_ts 47692377697
[  114.626753][ T5704]  get_page_from_freelist+0x322a/0x33c0
[  114.632288][ T5704]  __alloc_pages+0x272/0x700
[  114.636856][ T5704]  new_slab+0xbb/0x4b0
[  114.640903][ T5704]  ___slab_alloc+0x6f6/0xe10
[  114.645473][ T5704]  kmem_cache_alloc_trace+0x1a0/0x290
[  114.650823][ T5704]  bpf_check+0x16a/0x12d00
[  114.655257][ T5704]  bpf_prog_load+0x12b3/0x1b60
[  114.660020][ T5704]  __sys_bpf+0x343/0x670
[  114.664281][ T5704]  __x64_sys_bpf+0x78/0x90
[  114.668701][ T5704]  do_syscall_64+0x3b/0xb0
[  114.673109][ T5704]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  114.678993][ T5704] page last free stack trace:
[  114.683643][ T5704]  free_unref_page_prepare+0xc34/0xcf0
[  114.689083][ T5704]  free_unref_page+0x95/0x2d0
[  114.693750][ T5704]  __unfreeze_partials+0x1b7/0x210
[  114.698853][ T5704]  put_cpu_partial+0x132/0x1a0
[  114.703597][ T5704]  ___cache_free+0xe3/0x100
[  114.708087][ T5704]  qlist_free_all+0x36/0x90
[  114.712567][ T5704]  kasan_quarantine_reduce+0x162/0x180
[  114.718008][ T5704]  __kasan_slab_alloc+0x2f/0xc0
[  114.722839][ T5704]  slab_post_alloc_hook+0x53/0x380
[  114.727943][ T5704]  kmem_cache_alloc_node+0x121/0x2c0
[  114.733229][ T5704]  __alloc_skb+0xdd/0x590
[  114.737552][ T5704]  alloc_skb_with_frags+0xa3/0x780
[  114.742664][ T5704]  sock_alloc_send_pskb+0x915/0xa50
[  114.747844][ T5704]  mld_newpack+0x1b4/0xa20
[  114.752239][ T5704]  add_grec+0x1328/0x1770
[  114.756550][ T5704]  mld_ifc_work+0x68f/0xc90
[  114.761033][ T5704] 
[  114.763335][ T5704] Memory state around the buggy address:
[  114.768940][ T5704]  ffff888079fe8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.776981][ T5704]  ffff888079fe8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.785020][ T5704] >ffff888079fe8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.793059][ T5704]                                                              ^
[  114.800749][ T5704]  ffff888079fe8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.808789][ T5704]  ffff888079fe8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.816827][ T5704] ==================================================================
[  114.824865][ T5704] Disabling lock debugging due to kernel taint
[  114.858263][ T5601] device hsr_slave_0 entered promiscuous mode
[  114.860770][ T5704] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  114.871513][ T5704] CPU: 1 PID: 5704 Comm: syz.0.681 Tainted: G    B             5.15.167-syzkaller #0
[  114.880974][ T5704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  114.891029][ T5704] Call Trace:
[  114.894307][ T5704]  <TASK>
[  114.897226][ T5704]  dump_stack_lvl+0x1e3/0x2d0
[  114.901899][ T5704]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  114.907556][ T5704]  ? panic+0x860/0x860
[  114.911627][ T5704]  ? preempt_schedule_common+0xa6/0xd0
[  114.917092][ T5704]  ? preempt_schedule+0xd9/0xe0
[  114.921947][ T5704]  panic+0x318/0x860
[  114.925847][ T5704]  ? check_panic_on_warn+0x1d/0xa0
[  114.930961][ T5704]  ? fb_is_primary_device+0xd0/0xd0
[  114.936162][ T5704]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  114.942142][ T5704]  ? _raw_spin_unlock+0x40/0x40
[  114.946995][ T5704]  ? print_memory_metadata+0xe2/0x140
[  114.952368][ T5704]  check_panic_on_warn+0x7e/0xa0
[  114.957307][ T5704]  ? gfs2_qd_shrink_scan+0x63d/0x860
[  114.962610][ T5704]  end_report+0x6d/0xf0
[  114.966766][ T5704]  kasan_report+0x18e/0x1c0
[  114.971265][ T5704]  ? gfs2_qd_shrink_scan+0x63d/0x860
[  114.976544][ T5704]  kasan_check_range+0x27e/0x290
[  114.981462][ T5704]  gfs2_qd_shrink_scan+0x63d/0x860
[  114.986560][ T5704]  ? gfs2_qd_shrink_count+0x100/0x100
[  114.991917][ T5704]  do_shrink_slab+0x542/0xda0
[  114.996578][ T5704]  shrink_slab+0x233/0x960
[  115.000983][ T5704]  ? __lock_acquire+0x1ff0/0x1ff0
[  115.005988][ T5704]  ? drop_slab_node+0x180/0x180
[  115.010826][ T5704]  ? mem_cgroup_iter+0x3b4/0x520
[  115.015751][ T5704]  drop_slab_node+0xed/0x180
[  115.020325][ T5704]  drop_slab+0x8b/0x120
[  115.024463][ T5704]  drop_caches_sysctl_handler+0xb3/0x160
[  115.030079][ T5704]  ? cn_vprintf+0x450/0x450
[  115.034563][ T5704]  proc_sys_call_handler+0x541/0x8a0
[  115.039838][ T5704]  ? proc_sys_open+0x270/0x270
[  115.044588][ T5704]  ? do_splice_direct+0x285/0x3d0
[  115.049603][ T5704]  ? aa_path_link+0xea0/0xea0
[  115.054268][ T5704]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  115.060324][ T5704]  do_iter_readv_writev+0x594/0x7a0
[  115.065510][ T5704]  ? generic_file_rw_checks+0x260/0x260
[  115.071050][ T5704]  ? common_file_perm+0x17d/0x1d0
[  115.076057][ T5704]  ? fsnotify_perm+0x64/0x590
[  115.080717][ T5704]  ? security_file_permission+0x75/0xa0
[  115.086246][ T5704]  do_iter_write+0x1e6/0x760
[  115.090821][ T5704]  ? vfs_iter_write+0x69/0xa0
[  115.095485][ T5704]  iter_file_splice_write+0x806/0xfa0
[  115.100853][ T5704]  ? splice_from_pipe+0x230/0x230
[  115.105858][ T5704]  ? generic_file_splice_read+0x54a/0x790
[  115.111561][ T5704]  ? splice_shrink_spd+0xb0/0xb0
[  115.116486][ T5704]  ? common_file_perm+0x17d/0x1d0
[  115.121494][ T5704]  ? splice_from_pipe+0x230/0x230
[  115.126501][ T5704]  direct_splice_actor+0xe3/0x1c0
[  115.131510][ T5704]  splice_direct_to_actor+0x500/0xc10
[  115.136872][ T5704]  ? do_splice_direct+0x3d0/0x3d0
[  115.141880][ T5704]  ? pipe_to_sendpage+0x350/0x350
[  115.146889][ T5704]  ? fsnotify_perm+0x64/0x590
[  115.151549][ T5704]  ? security_file_permission+0x75/0xa0
[  115.157078][ T5704]  do_splice_direct+0x285/0x3d0
[  115.161916][ T5704]  ? splice_direct_to_actor+0xc10/0xc10
[  115.167445][ T5704]  ? rcu_read_lock_any_held+0xb3/0x160
[  115.172895][ T5704]  do_sendfile+0x622/0x1000
[  115.177385][ T5704]  ? do_pwritev+0x360/0x360
[  115.181869][ T5704]  ? __might_fault+0xb4/0x110
[  115.186530][ T5704]  __se_sys_sendfile64+0xfc/0x1e0
[  115.191538][ T5704]  ? __x64_sys_sendfile64+0xa0/0xa0
[  115.196719][ T5704]  ? syscall_enter_from_user_mode+0x2e/0x240
[  115.202681][ T5704]  ? lockdep_hardirqs_on+0x94/0x130
[  115.207862][ T5704]  ? syscall_enter_from_user_mode+0x2e/0x240
[  115.213824][ T5704]  do_syscall_64+0x3b/0xb0
[  115.218226][ T5704]  ? clear_bhb_loop+0x15/0x70
[  115.222881][ T5704]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  115.228758][ T5704] RIP: 0033:0x7f4a4a0aaff9
[  115.233155][ T5704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.252742][ T5704] RSP: 002b:00007f4a48523038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  115.261137][ T5704] RAX: ffffffffffffffda RBX: 00007f4a4a262f80 RCX: 00007f4a4a0aaff9
[  115.269088][ T5704] RDX: 0000000020002080 RSI: 0000000000000003 RDI: 0000000000000004
[  115.277036][ T5704] RBP: 00007f4a4a11d296 R08: 0000000000000000 R09: 0000000000000000
[  115.284985][ T5704] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000000
[  115.292937][ T5704] R13: 0000000000000000 R14: 00007f4a4a262f80 R15: 00007ffdfb81c968
[  115.300895][ T5704]  </TASK>
[  115.304075][ T5704] Kernel Offset: disabled
[  115.308386][ T5704] Rebooting in 86400 seconds..