last executing test programs:

59.307641656s ago: executing program 2 (id=59):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@my=0x1, 0x7}, 0x1, 0x1, 0x57})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000000c0)={0x0, 0x6, 0x0, 0xfffffff8})

59.168361488s ago: executing program 2 (id=60):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000340)="00214717a70700000000030600710a5eeb9d04710400", 0x16}], 0x1, 0xee, 0x4000004)

58.971164732s ago: executing program 2 (id=61):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000)
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800)

58.644158938s ago: executing program 2 (id=64):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1804011, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x4}}, {@nojournal_checksum}, {@sysvgroups}, {@nobarrier}, {@data_ordered}, {@test_dummy_encryption}, {@nogrpid}, {@debug}]}, 0xd, 0x607, &(0x7f0000000480)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

57.802023614s ago: executing program 2 (id=68):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040))
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a25d70e26103e294b7894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}], 0x1)
close(r0)

57.165668156s ago: executing program 2 (id=71):
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x13)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)

56.658941306s ago: executing program 32 (id=71):
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x6)
r1 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x13)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)

4.780564559s ago: executing program 4 (id=291):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
writev(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)="673f4a277ba463fae1ac10a1c104d57706e32673241e2633c20eeb272de0f72d5c8a298ef8238bad27fe1a9904cf86afa3ba77a10f233a7c5808c5fb6cff674ec23949ee5fedb504", 0x48}], 0x1)
r1 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r2 = dup(r1)
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000))

4.686876421s ago: executing program 4 (id=292):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, 0x0)

4.619131152s ago: executing program 4 (id=293):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}}, 0xc800)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff1100", @ANYBLOB], 0x30}}, 0x0)

4.554889673s ago: executing program 1 (id=294):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000380)="dc")
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080))

4.501392934s ago: executing program 4 (id=295):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)

4.240372729s ago: executing program 0 (id=296):
socket(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

4.2254803s ago: executing program 1 (id=297):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000300)='r', 0x1, 0xdecc)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r1, 0x8, 0x4000, 0x4000)

3.940366545s ago: executing program 1 (id=298):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0})

3.767549558s ago: executing program 0 (id=299):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000140)={[{@acl}, {@heartbeat_none}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0x6b2}}, {@acl}, {@localflocks}, {@coherency_full}, {@noacl}]}, 0x1, 0x4450, &(0x7f0000008900)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000000c0))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x60803)

3.500353633s ago: executing program 3 (id=300):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_nolock}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@noinit_itable}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000000640)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
r0 = open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x2f)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2.837273516s ago: executing program 1 (id=301):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, 0x0, 0x0}, 0x94)

2.497812392s ago: executing program 3 (id=302):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000008c0)="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", 0x287}], 0x1}}], 0x1, 0x60cd894)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000380)={0x21, 0x0, [{0x298, 0x0, 0x100}]})

2.0895728s ago: executing program 4 (id=303):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000000)={0xa3, 0x0, 0x0})
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000001280)={0xa, 0x0, [{0xa, 0xfe6c, 0x6, 0x9, 0x7, 0x80000001, 0x3f2}, {0x40000001, 0x5, 0x5, 0x5, 0xcb43, 0x81, 0x8}, {0x0, 0x101, 0x2, 0x1, 0x80, 0xfffffff8, 0x7}, {0x4, 0x1, 0x5, 0xd, 0x2, 0x6, 0x6}, {0xd, 0xcb, 0x0, 0x7, 0x55c, 0x1, 0x8}, {0xd, 0x7, 0x3, 0x2, 0xb50, 0x5}, {0x0, 0xdd, 0x5, 0xd, 0x1, 0x4, 0x6}, {0x80000008, 0x5, 0x0, 0x8, 0x8, 0x4, 0x80}, {0xb, 0xffffffff, 0x4, 0x804, 0x2, 0x4, 0x5}, {0xc000000d, 0xfe, 0x3, 0xc71, 0x1600, 0x3, 0x80}]})

1.895130424s ago: executing program 3 (id=304):
unshare(0x42000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x13ffffe, 0xffffbff8, 0x6, 0x3e, 0x5]}, &(0x7f0000000000)=0x54)

1.856720104s ago: executing program 0 (id=305):
syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=<r1=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=<r2=>0x0, &(0x7f00000005c0))
syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0)

1.779803076s ago: executing program 1 (id=306):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0)

1.615075569s ago: executing program 4 (id=307):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x6213, &(0x7f0000000240)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

1.006671621s ago: executing program 0 (id=308):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x8})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)={0x0, 0x0, 0x1f})

902.102323ms ago: executing program 0 (id=309):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))

689.744886ms ago: executing program 1 (id=310):
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x4)
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0xb8d, &(0x7f0000001b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x650ce4b086bd440f)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x11063, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

535.10304ms ago: executing program 3 (id=311):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000600)=ANY=[@ANYBLOB="01"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000f4ff400101c0"])

209.084396ms ago: executing program 0 (id=312):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
syz_clone(0x4043000, &(0x7f0000000640)="847ad3972dd5fd", 0x7, 0x0, &(0x7f00000000c0), 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05000500", 0x2c}, {&(0x7f00000019c0)="06bb", 0x2}], 0x2}, 0x0)

77.585788ms ago: executing program 3 (id=313):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r0}, &(0x7f0000000fc0), &(0x7f0000001000)}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

0s ago: executing program 3 (id=314):
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100))
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts.
[   79.867611][ T5781] cgroup: Unknown subsys name 'net'
[   80.002263][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   81.671431][ T5781] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   83.905547][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   83.914953][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   83.915944][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   83.923206][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   83.937167][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   83.945160][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   83.946057][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   83.960836][ T5804] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   83.973459][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   83.982807][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   83.990805][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   83.991565][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   84.006908][ T5804] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   84.014436][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   84.014963][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   84.023048][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   84.030340][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   84.038177][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   84.046124][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.051061][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   84.067329][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.083971][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.104065][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   84.111886][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.515175][ T5795] chnl_net:caif_netlink_parms(): no params data found
[   84.685617][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.692883][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.701104][ T5795] bridge_slave_0: entered allmulticast mode
[   84.709557][ T5795] bridge_slave_0: entered promiscuous mode
[   84.765138][ T5792] chnl_net:caif_netlink_parms(): no params data found
[   84.781843][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.790515][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.797934][ T5795] bridge_slave_1: entered allmulticast mode
[   84.805508][ T5795] bridge_slave_1: entered promiscuous mode
[   84.865506][ T5793] chnl_net:caif_netlink_parms(): no params data found
[   84.880532][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.896779][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.962638][ T5794] chnl_net:caif_netlink_parms(): no params data found
[   84.983553][ T5795] team0: Port device team_slave_0 added
[   85.020704][ T5795] team0: Port device team_slave_1 added
[   85.130248][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.137529][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.164681][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.181795][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.189177][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.196664][ T5793] bridge_slave_0: entered allmulticast mode
[   85.204019][ T5793] bridge_slave_0: entered promiscuous mode
[   85.211203][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.218501][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.225843][ T5792] bridge_slave_0: entered allmulticast mode
[   85.232777][ T5792] bridge_slave_0: entered promiscuous mode
[   85.240825][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.248091][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.274950][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.298224][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.305632][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.312950][ T5793] bridge_slave_1: entered allmulticast mode
[   85.320299][ T5793] bridge_slave_1: entered promiscuous mode
[   85.327173][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.334535][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.341749][ T5792] bridge_slave_1: entered allmulticast mode
[   85.349297][ T5792] bridge_slave_1: entered promiscuous mode
[   85.439818][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.451635][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.461414][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.468750][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.476858][ T5794] bridge_slave_0: entered allmulticast mode
[   85.484259][ T5794] bridge_slave_0: entered promiscuous mode
[   85.512351][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.525890][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.559608][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.566950][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.574775][ T5794] bridge_slave_1: entered allmulticast mode
[   85.581837][ T5794] bridge_slave_1: entered promiscuous mode
[   85.630247][ T5792] team0: Port device team_slave_0 added
[   85.654799][ T5795] hsr_slave_0: entered promiscuous mode
[   85.661278][ T5795] hsr_slave_1: entered promiscuous mode
[   85.671842][ T5793] team0: Port device team_slave_0 added
[   85.686106][ T5793] team0: Port device team_slave_1 added
[   85.693536][ T5792] team0: Port device team_slave_1 added
[   85.727874][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.740984][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.776575][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.783699][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.810238][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.849264][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.856694][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.882824][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.937873][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.945580][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.972372][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.986396][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.993714][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.019868][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.049514][ T5794] team0: Port device team_slave_0 added
[   86.058810][ T5794] team0: Port device team_slave_1 added
[   86.074170][ T5801] Bluetooth: hci0: command tx timeout
[   86.074357][ T5796] Bluetooth: hci1: command tx timeout
[   86.079950][ T5108] Bluetooth: hci3: command tx timeout
[   86.153991][ T5801] Bluetooth: hci2: command tx timeout
[   86.183760][ T5792] hsr_slave_0: entered promiscuous mode
[   86.190520][ T5792] hsr_slave_1: entered promiscuous mode
[   86.197419][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.205891][ T5792] Cannot create hsr debugfs directory
[   86.230243][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[   86.237352][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.264506][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   86.277840][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[   86.284930][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.311499][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.327883][ T5793] hsr_slave_0: entered promiscuous mode
[   86.334551][ T5793] hsr_slave_1: entered promiscuous mode
[   86.340792][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.348677][ T5793] Cannot create hsr debugfs directory
[   86.484792][ T5794] hsr_slave_0: entered promiscuous mode
[   86.491495][ T5794] hsr_slave_1: entered promiscuous mode
[   86.498138][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.505992][ T5794] Cannot create hsr debugfs directory
[   86.811055][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.835759][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.846127][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.859322][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.928203][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.947712][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.969961][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.986399][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   87.072421][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.088238][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.102007][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.121996][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.229423][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   87.240910][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   87.269010][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   87.280376][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   87.334395][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.367484][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.417222][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[   87.430560][ T5795] 8021q: adding VLAN 0 to HW filter on device team0
[   87.447051][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.454631][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.484098][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.491228][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.524706][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.531871][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.547675][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.569127][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.576319][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.640894][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[   87.706781][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.714013][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.729895][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.737119][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.820650][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.919184][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[   87.963471][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.970676][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.046377][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.053598][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.155571][ T5801] Bluetooth: hci0: command tx timeout
[   88.161047][ T5801] Bluetooth: hci3: command tx timeout
[   88.167516][ T5108] Bluetooth: hci1: command tx timeout
[   88.234583][ T5801] Bluetooth: hci2: command tx timeout
[   88.237848][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.352132][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.398523][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.463114][ T5793] veth0_vlan: entered promiscuous mode
[   88.482763][ T5795] veth0_vlan: entered promiscuous mode
[   88.514571][ T5795] veth1_vlan: entered promiscuous mode
[   88.532535][ T5793] veth1_vlan: entered promiscuous mode
[   88.567266][ T5792] veth0_vlan: entered promiscuous mode
[   88.615660][ T5795] veth0_macvtap: entered promiscuous mode
[   88.642543][ T5793] veth0_macvtap: entered promiscuous mode
[   88.651693][ T5795] veth1_macvtap: entered promiscuous mode
[   88.671719][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.683022][ T5793] veth1_macvtap: entered promiscuous mode
[   88.691360][ T5792] veth1_vlan: entered promiscuous mode
[   88.755822][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.765233][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.776657][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.788514][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.824235][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.833368][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.844418][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.856918][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.866015][ T5792] veth0_macvtap: entered promiscuous mode
[   88.879955][ T5792] veth1_macvtap: entered promiscuous mode
[   88.894450][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.903329][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.912962][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.921964][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.942060][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.951014][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.960507][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.969532][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.000702][ T5794] veth0_vlan: entered promiscuous mode
[   89.011169][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.022361][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.035930][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.046729][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.058531][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.097336][ T5794] veth1_vlan: entered promiscuous mode
[   89.107566][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.118514][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.129413][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.139971][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.151803][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.191540][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.202420][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.215768][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.225205][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.345436][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.347059][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.359806][ T5794] veth0_macvtap: entered promiscuous mode
[   89.374307][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.376147][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.396456][ T5794] veth1_macvtap: entered promiscuous mode
[   89.459612][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.468710][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.478678][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.487597][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.527867][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.538902][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.549188][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.560473][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.570865][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.584854][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.602446][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.620240][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.635686][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.646006][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.656535][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.666595][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.677481][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.689933][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.734957][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.742843][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.762997][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.785091][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.803593][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.812346][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.831484][ T5886] syz.2.3[5886]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   89.856852][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.885750][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.989544][ T5886] loop2: detected capacity change from 0 to 4096
[   90.015491][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.063990][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.102238][ T5889] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.193639][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.202546][ T5890] loop0: detected capacity change from 0 to 1024
[   90.234341][ T5801] Bluetooth: hci0: command tx timeout
[   90.239825][ T5801] Bluetooth: hci3: command tx timeout
[   90.239854][ T5108] Bluetooth: hci1: command tx timeout
[   90.251903][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.274581][   T27] audit: type=1800 audit(1759326445.432:2): pid=5886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=15 res=0 errno=0
[   90.316167][ T5108] Bluetooth: hci2: command tx timeout
[   90.356356][ T5892] loop3: detected capacity change from 0 to 4096
[   90.392731][ T5892] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[   90.615458][ T5892] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[   90.656431][ T5890] hfsplus: xattr searching failed
[   90.702429][ T5890] hfsplus: xattr searching failed
[   90.913191][ T5795] hfsplus: node 4:3 still has 1 user(s)!
[   91.064940][   T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   91.182161][ T5902] loop3: detected capacity change from 0 to 1024
[   91.191770][ T5902] =======================================================
[   91.191770][ T5902] WARNING: The mand mount option has been deprecated and
[   91.191770][ T5902]          and is ignored by this kernel. Remove the mand
[   91.191770][ T5902]          option from the mount to silence this warning.
[   91.191770][ T5902] =======================================================
[   91.236248][ T5868] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   91.267224][ T5902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.281020][ T5902] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.293858][   T23] usb 2-1: Using ep0 maxpacket: 8
[   91.305358][   T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   91.315685][   T23] usb 2-1: config 0 has no interface number 0
[   91.322754][   T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   91.342461][   T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   91.361438][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.377201][ T5902] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 3: comm syz.3.7: lblock 3 mapped to illegal pblock 3 (length 13)
[   91.396983][ T5902] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   91.409563][   T23] usb 2-1: config 0 descriptor??
[   91.415219][ T5902] EXT4-fs (loop3): This should not happen!! Data will be lost
[   91.415219][ T5902] 
[   91.426166][ T5868] usb 3-1: Using ep0 maxpacket: 8
[   91.435208][ T5868] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   91.445110][ T5868] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   91.459938][ T5868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   91.474217][ T5868] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   91.480506][   T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   91.497477][ T5898] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.501263][ T5868] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   91.545611][ T5868] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   91.555272][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.567598][   T11] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[   91.585214][   T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28
[   91.609834][   T11] EXT4-fs (loop3): This should not happen!! Data will be lost
[   91.609834][   T11] 
[   91.624559][   T11] EXT4-fs (loop3): Total free blocks count 0
[   91.630686][   T11] EXT4-fs (loop3): Free/Dirty block details
[   91.637196][   T11] EXT4-fs (loop3): free_blocks=4293918720
[   91.643022][   T11] EXT4-fs (loop3): dirty_blocks=16
[   91.653436][   T11] EXT4-fs (loop3): Block reservation details
[   91.703597][ T5898] usb 1-1: Using ep0 maxpacket: 8
[   91.720735][ T5898] usb 1-1: unable to get BOS descriptor or descriptor too short
[   91.742431][ T5898] usb 1-1: config 59 has an invalid interface number: 140 but max is 0
[   91.761130][ T5898] usb 1-1: config 59 has no interface number 0
[   91.773442][ T5898] usb 1-1: config 59 interface 140 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023
[   91.790767][ T5898] usb 1-1: config 59 interface 140 altsetting 7 endpoint 0x7 has an invalid bInterval 181, changing to 11
[   91.802938][ T5898] usb 1-1: config 59 interface 140 altsetting 7 endpoint 0x7 has invalid maxpacket 1624, setting to 1024
[   91.844617][ T5898] usb 1-1: config 59 interface 140 has no altsetting 0
[   91.858207][ T5898] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.09
[   91.867579][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.879298][ T5898] usb 1-1: Product: syz
[   91.885444][ T5898] usb 1-1: Manufacturer: syz
[   91.890222][ T5898] usb 1-1: SerialNumber: syz
[   91.906579][ T5904] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   91.928511][ T5904] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[   92.005386][ T1189] cfg80211: failed to load regulatory.db
[   92.188774][ T5898] usb-storage 1-1:59.140: USB Mass Storage device detected
[   92.199611][ T5911] loop3: detected capacity change from 0 to 32768
[   92.216007][ T5898] usb-storage 1-1:59.140: Quirks match for vid 05ab pid 0060: 2
[   92.226559][ T5911] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.9 (5911)
[   92.267487][ T5911] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.278362][ T5911] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   92.303144][ T5911] BTRFS info (device loop3): turning on sync discard
[   92.314158][ T5108] Bluetooth: hci3: command tx timeout
[   92.316564][ T5801] Bluetooth: hci0: command tx timeout
[   92.325207][ T5108] Bluetooth: hci1: command tx timeout
[   92.328499][ T5898] usb 1-1: USB disconnect, device number 2
[   92.336896][ T5911] BTRFS info (device loop3): setting nodatacow, compression disabled
[   92.363090][ T5911] BTRFS info (device loop3): turning off barriers
[   92.393980][ T5108] Bluetooth: hci2: command tx timeout
[   92.401310][ T5911] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   92.421510][ T5911] BTRFS info (device loop3): trying to use backup root at mount time
[   92.442297][ T5911] BTRFS info (device loop3): metadata ratio 32769
[   92.467805][ T5911] BTRFS info (device loop3): max_inline at 0
[   92.487230][ T5911] BTRFS info (device loop3): using free space tree
[   92.542322][ T3517] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   92.571582][ T5911] BTRFS error (device loop3): failed to load root extent
[   92.582555][ T5911] BTRFS warning (device loop3): try to load backup roots slot 1
[   92.599610][ T3517] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   92.643145][ T5911] BTRFS warning (device loop3): couldn't read tree root
[   92.652375][ T5911] BTRFS warning (device loop3): try to load backup roots slot 2
[   92.662119][ T3551] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   92.673745][ T5911] BTRFS warning (device loop3): couldn't read tree root
[   92.684502][ T5911] BTRFS warning (device loop3): try to load backup roots slot 3
[   92.717583][ T5911] BTRFS info (device loop3): enabling ssd optimizations
[   92.727297][ T5898] usb 2-1: USB disconnect, device number 2
[   92.738082][ T5911] BTRFS info (device loop3): rebuilding free space tree
[   92.832624][ T5911] BTRFS info (device loop3): checking UUID tree
[   93.097902][ T5792] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   93.193406][ T5937] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.407836][ T5939] loop0: detected capacity change from 0 to 512
[   93.432124][ T5939] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002]
[   93.441412][ T5939] System zones: 1-12
[   93.449993][ T5939] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.13: invalid indirect mapped block 8 (level 2)
[   93.480372][ T5939] EXT4-fs (loop0): Remounting filesystem read-only
[   93.514530][ T5939] EXT4-fs (loop0): 1 truncate cleaned up
[   93.547774][ T5939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.555670][ T5945] netlink: 188 bytes leftover after parsing attributes in process `syz.3.11'.
[   93.646644][    T9] kernel write not supported for file /12/projid_map (pid: 9 comm: kworker/0:1)
[   93.765317][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.934546][   T28] usb 3-1: USB disconnect, device number 2
[   94.502222][ T5951] loop0: detected capacity change from 0 to 40427
[   94.522964][ T5951] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   94.546495][ T5951] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   94.599090][ T5951] F2FS-fs (loop0): invalid crc value
[   94.655086][ T5951] F2FS-fs (loop0): Found nat_bits in checkpoint
[   94.795798][ T5951] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   94.813282][ T5957] loop2: detected capacity change from 0 to 32768
[   94.813693][ T5951] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   94.920946][ T5957] JBD2: Ignoring recovery information on journal
[   94.987978][ T5957] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   95.062966][   T27] audit: type=1800 audit(1759326450.222:3): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=10 res=0 errno=0
[   95.158955][ T5968] syz.0.17: attempt to access beyond end of device
[   95.158955][ T5968] loop0: rw=34817, sector=77824, nr_sectors = 2048 limit=40427
[   95.192699][ T5957] syz.2.19 (5957) used greatest stack depth: 20272 bytes left
[   95.286067][ T5793] ocfs2: Unmounting device (7,2) on (node local)
[   96.225143][ T5970] loop2: detected capacity change from 0 to 32768
[   96.261867][  T786] kernel write not supported for file /uinput (pid: 786 comm: kworker/1:2)
[   96.320678][ T5970] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   96.525296][ T5970] XFS (loop2): Ending clean mount
[   96.570099][ T5970] XFS (loop2): Quotacheck needed: Please wait.
[   96.662113][ T5970] XFS (loop2): Quotacheck: Done.
[   96.789390][ T5985] loop0: detected capacity change from 0 to 40427
[   96.839936][ T5985] F2FS-fs (loop0): invalid crc value
[   96.886034][ T5985] F2FS-fs (loop0): Found nat_bits in checkpoint
[   97.037020][ T5993] tipc: Started in network mode
[   97.042619][ T5993] tipc: Node identity ac14142f, cluster identity 4711
[   97.062467][ T5993] tipc: New replicast peer: 0.0.0.0
[   97.063232][ T5793] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   97.070120][ T5985] F2FS-fs (loop0): Start checkpoint disabled!
[   97.086912][ T5993] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.097637][ T5993] tipc: New replicast peer: 255.255.255.255
[   97.108139][ T5985] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   97.568752][ T1084] kworker/u4:6: attempt to access beyond end of device
[   97.568752][ T1084] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[   97.598406][ T1084] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   97.616147][ T1084] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   97.623277][ T1084] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   98.085267][ T5108] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   98.095528][    T9] tipc: Node number set to 2886997039
[   98.102320][ T5108] Bluetooth: hci1: Injecting HCI hardware error event
[   98.110914][ T5108] Bluetooth: hci1: hardware error 0x00
[   98.273056][ T6002] loop2: detected capacity change from 0 to 40427
[   98.299824][ T6002] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[   98.325997][ T6002] F2FS-fs (loop2): invalid crc value
[   98.348751][ T6006] loop1: detected capacity change from 0 to 4096
[   98.357692][ T6002] F2FS-fs (loop2): Found nat_bits in checkpoint
[   98.474095][ T6012] syzkaller1: entered promiscuous mode
[   98.490006][ T6012] syzkaller1: entered allmulticast mode
[   98.598032][ T6002] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   98.895527][ T5793] syz-executor: attempt to access beyond end of device
[   98.895527][ T5793] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   98.949317][ T5793] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   98.994455][ T6022] syz.3.39 uses obsolete (PF_INET,SOCK_PACKET)
[   99.002926][ T6021] loop0: detected capacity change from 0 to 1024
[   99.138949][ T6021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.159973][ T6021] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.308591][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.393826][   T28] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   99.613492][   T28] usb 2-1: Using ep0 maxpacket: 32
[   99.622460][   T28] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[   99.653236][   T28] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   99.688030][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.707790][   T28] usb 2-1: Product: syz
[   99.712019][   T28] usb 2-1: Manufacturer: syz
[   99.733460][   T28] usb 2-1: SerialNumber: syz
[   99.758089][   T28] usb 2-1: config 0 descriptor??
[   99.775133][   T28] usb 2-1: bad CDC descriptors
[   99.781377][   T28] usb 2-1: unsupported MDLM descriptors
[  100.003662][    T9] usb 2-1: USB disconnect, device number 3
[  100.113425][ T5868] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  100.158796][ T6035] loop0: detected capacity change from 0 to 32768
[  100.194334][ T6035] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.46 (6035)
[  100.222780][ T6035] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  100.233691][ T5108] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  100.273849][ T6035] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  100.283792][ T6035] BTRFS info (device loop0): use no compression
[  100.290097][ T6035] BTRFS info (device loop0): force zlib compression, level 3
[  100.319443][ T5868] usb 3-1: Using ep0 maxpacket: 16
[  100.323814][ T6035] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  100.327116][ T5868] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  100.357977][ T6035] BTRFS info (device loop0): use lzo compression, level 0
[  100.362536][ T5868] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  100.379192][ T6035] BTRFS info (device loop0): turning on flush-on-commit
[  100.385348][ T5868] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  100.388715][ T6035] BTRFS info (device loop0): enabling auto defrag
[  100.408587][ T6035] BTRFS info (device loop0): using free space tree
[  100.413458][ T5868] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  100.433400][ T5868] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  100.450997][ T5868] usb 3-1: config 0 has no interface number 0
[  100.469344][ T5868] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  100.495239][ T5868] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  100.513463][ T5868] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  100.529001][ T5868] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  100.550008][ T5868] usb 3-1: config 0 interface 125 has no altsetting 0
[  100.555516][ T6035] BTRFS info (device loop0): enabling ssd optimizations
[  100.589314][ T5868] usb 3-1: config 0 interface 125 has no altsetting 2
[  100.601860][ T5868] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  100.611323][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.619560][ T5868] usb 3-1: Product: syz
[  100.624240][ T5868] usb 3-1: Manufacturer: syz
[  100.628946][ T5868] usb 3-1: SerialNumber: syz
[  100.637554][ T5868] usb 3-1: config 0 descriptor??
[  100.648681][ T5868] usb 3-1: selecting invalid altsetting 2
[  101.209604][ T5795] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  101.518018][ T5868] parport0: fix this legacy no-device port driver!
[  101.661761][ T6063] loop3: detected capacity change from 0 to 40427
[  101.676453][ T6063] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  101.687963][ T6063] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  101.702842][ T6063] F2FS-fs (loop3): invalid crc value
[  101.735564][ T6063] F2FS-fs (loop3): Found nat_bits in checkpoint
[  101.792812][    T9] usb 3-1: USB disconnect, device number 3
[  101.860744][ T6063] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  101.871704][ T6063] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  101.935157][ T6063] syz.3.50: attempt to access beyond end of device
[  101.935157][ T6063] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  101.988346][ T6063] syz.3.50: attempt to access beyond end of device
[  101.988346][ T6063] loop3: rw=2049, sector=77824, nr_sectors = 2064 limit=40427
[  102.008805][ T6063] syz.3.50: attempt to access beyond end of device
[  102.008805][ T6063] loop3: rw=2049, sector=79888, nr_sectors = 504 limit=40427
[  102.073514][ T5898] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  102.076920][ T5792] syz-executor: attempt to access beyond end of device
[  102.076920][ T5792] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  102.096626][ T5792] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  102.274663][ T5898] usb 1-1: Using ep0 maxpacket: 16
[  102.291074][ T5898] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  102.310763][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.320731][ T5898] usb 1-1: Product: syz
[  102.329125][ T5898] usb 1-1: Manufacturer: syz
[  102.337109][ T5898] usb 1-1: SerialNumber: syz
[  102.385148][ T5898] usb 1-1: config 0 descriptor??
[  102.418865][ T5898] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  102.452298][ T5898] usb 1-1: Detected FT232H
[  102.464342][ T6077] loop2: detected capacity change from 0 to 128
[  102.520416][ T6077] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  102.588724][ T6077] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  102.659467][   T27] audit: type=1326 audit(1759326457.822:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.3.53" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcee538eec9 code=0x0
[  102.703875][ T5898] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  102.978480][ T5793] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  103.137243][ T5898] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  103.320154][ T6087] loop3: detected capacity change from 0 to 32768
[  103.385643][    T9] usb 1-1: USB disconnect, device number 3
[  103.415189][ T6087] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  103.466969][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  103.482288][    T9] ftdi_sio 1-1:0.0: device disconnected
[  103.581560][ T5792] ocfs2: Unmounting device (7,3) on (node local)
[  103.729553][ T6100] block nbd2: not configured, cannot reconfigure
[  104.032553][ T6107] loop2: detected capacity change from 0 to 1024
[  104.073480][ T6107] EXT4-fs (loop2): Test dummy encryption mode enabled
[  104.114262][ T6107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002]
[  104.159575][ T6107] System zones: 0-1, 3-36
[  104.169822][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  104.379441][ T6107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002]
[  104.465601][ T6104] loop1: detected capacity change from 0 to 32768
[  104.488251][ T6107] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  104.498086][ T6104] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.63 (6104)
[  104.630104][ T6104] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.671307][ T6104] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  104.699747][ T5793] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  104.700857][ T6104] BTRFS info (device loop1): force clearing of disk cache
[  104.765825][ T5793] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  104.766088][ T6104] BTRFS info (device loop1): turning on sync discard
[  104.801383][ T6104] BTRFS info (device loop1): enabling auto defrag
[  104.820646][ T6104] BTRFS info (device loop1): max_inline at 0
[  104.830755][ T6104] BTRFS info (device loop1): enabling disk space caching
[  104.851019][ T6104] BTRFS info (device loop1): disk space caching is enabled
[  105.006467][ T6104] BTRFS info (device loop1): enabling ssd optimizations
[  105.076083][ T6104] BTRFS info (device loop1): rebuilding free space tree
[  105.144093][ T6104] BTRFS info (device loop1): disabling free space tree
[  105.151145][ T6104] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  105.181805][ T6104] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  105.455062][ T6141] loop0: detected capacity change from 0 to 2048
[  105.515238][ T6141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.672753][ T3551] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  105.784309][ T5794] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  106.012134][ T6147] trusted_key: syz.0.73 sent an empty control message without MSG_MORE.
[  106.342774][ T6150] loop0: detected capacity change from 0 to 1024
[  106.565139][ T6150] hfsplus: xattr searching failed
[  106.616948][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.719629][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  106.742382][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  106.751380][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  106.760424][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  106.768356][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  106.775881][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  106.866768][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.089029][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.202750][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.640891][ T6156] chnl_net:caif_netlink_parms(): no params data found
[  108.114113][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.121458][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.181106][ T6156] bridge_slave_0: entered allmulticast mode
[  108.192912][ T6156] bridge_slave_0: entered promiscuous mode
[  108.403165][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.434108][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.441396][ T6156] bridge_slave_1: entered allmulticast mode
[  108.516215][ T6156] bridge_slave_1: entered promiscuous mode
[  108.867759][ T6156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.878378][ T6210] loop1: detected capacity change from 0 to 256
[  108.884591][ T5801] Bluetooth: hci1: command tx timeout
[  108.975723][ T6210] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  109.038853][ T6156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.568175][ T6156] team0: Port device team_slave_0 added
[  109.643073][ T6156] team0: Port device team_slave_1 added
[  110.403352][    C1] sched: RT throttling activated
[  110.608892][ T6216] loop1: detected capacity change from 0 to 131072
[  110.626460][ T6216] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  110.634772][ T6216] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  110.667604][ T6216] F2FS-fs (loop1): invalid crc value
[  110.745096][ T6216] F2FS-fs (loop1): Found nat_bits in checkpoint
[  110.803915][ T6216] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  110.811148][ T6216] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  110.954854][ T5801] Bluetooth: hci1: command tx timeout
[  111.500389][ T6220] loop3: detected capacity change from 0 to 131072
[  111.509551][ T6220] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  111.518777][ T6220] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  111.556958][ T6220] F2FS-fs (loop3): invalid crc value
[  111.574540][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.584397][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.610311][    C0] vkms_vblank_simulate: vblank timer overrun
[  111.623119][ T6220] F2FS-fs (loop3): Found nat_bits in checkpoint
[  111.704186][ T6220] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  111.711372][ T6220] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  111.729334][ T6156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.767853][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.783493][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.809411][    C0] vkms_vblank_simulate: vblank timer overrun
[  111.879789][ T6156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.244736][ T6156] hsr_slave_0: entered promiscuous mode
[  112.266896][ T6156] hsr_slave_1: entered promiscuous mode
[  112.285933][ T6156] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.300027][ T6156] Cannot create hsr debugfs directory
[  112.353972][   T11] hsr_slave_0: left promiscuous mode
[  112.370821][   T11] hsr_slave_1: left promiscuous mode
[  112.403844][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.424551][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.459300][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.494885][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.521364][   T11] bridge_slave_1: left allmulticast mode
[  112.539312][   T11] bridge_slave_1: left promiscuous mode
[  112.556508][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.622718][   T11] bridge_slave_0: left allmulticast mode
[  112.643772][   T11] bridge_slave_0: left promiscuous mode
[  112.649608][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.934361][   T11] veth1_macvtap: left promiscuous mode
[  112.940544][   T11] veth0_macvtap: left promiscuous mode
[  112.969501][   T11] veth1_vlan: left promiscuous mode
[  112.985117][   T11] veth0_vlan: left promiscuous mode
[  113.043623][ T5801] Bluetooth: hci1: command tx timeout
[  114.393084][   T11] team0 (unregistering): Port device team_slave_1 removed
[  114.414212][ T5868] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  114.448562][   T11] team0 (unregistering): Port device team_slave_0 removed
[  114.489039][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.533955][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.603530][ T5868] usb 1-1: Using ep0 maxpacket: 32
[  114.624874][ T5868] usb 1-1: config 0 has an invalid interface number: 38 but max is 0
[  114.633015][ T5868] usb 1-1: config 0 has no interface number 0
[  114.640980][ T5868] usb 1-1: config 0 interface 38 has no altsetting 0
[  114.666362][ T5868] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3
[  114.675525][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.683650][ T5868] usb 1-1: Product: syz
[  114.688005][ T5868] usb 1-1: Manufacturer: syz
[  114.692632][ T5868] usb 1-1: SerialNumber: syz
[  114.702037][ T5868] usb 1-1: config 0 descriptor??
[  114.716819][ T5868] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  115.115110][ T5801] Bluetooth: hci1: command tx timeout
[  115.294462][   T11] bond0 (unregistering): Released all slaves
[  115.558190][ T5868] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5
[  115.697481][ T6264] netlink: 104 bytes leftover after parsing attributes in process `syz.3.106'.
[  115.816559][ T6261] loop1: detected capacity change from 0 to 40427
[  115.854660][   T28] usb 1-1: USB disconnect, device number 4
[  115.872674][ T6261] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12
[  115.890055][ T6261] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  115.960871][ T6261] F2FS-fs (loop1): invalid crc value
[  116.268141][ T6261] F2FS-fs (loop1): Start checkpoint disabled!
[  116.318934][ T6156] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  116.348660][ T6156] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  116.363789][ T6261] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  116.396808][ T6156] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  116.427713][ T6261] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  116.461725][ T6156] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  116.730556][   T11] kworker/u4:0: attempt to access beyond end of device
[  116.730556][   T11] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  116.760961][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  116.818777][   T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  116.838882][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.900646][ T6156] 8021q: adding VLAN 0 to HW filter on device team0
[  116.964405][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.972520][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.056695][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.063939][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.200030][ T6156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  117.340592][ T6303] loop0: detected capacity change from 0 to 512
[  117.400341][ T6303] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  117.450222][ T6303] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters
[  117.496716][ T6303] Quota error (device loop0): write_blk: dquota write failed
[  117.523654][ T6303] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  117.553840][ T6303] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.115: Failed to acquire dquot type 0
[  117.597390][ T6303] EXT4-fs (loop0): 1 truncate cleaned up
[  117.605263][ T6303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.619368][   T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  117.691038][ T6303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.825856][   T23] usb 4-1: unable to get BOS descriptor or descriptor too short
[  117.862102][   T23] usb 4-1: config 6 has an invalid interface number: 200 but max is 0
[  117.888182][ T6156] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.896190][   T23] usb 4-1: config 6 has no interface number 0
[  117.902402][   T23] usb 4-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  117.963686][   T23] usb 4-1: config 6 interface 200 has no altsetting 0
[  117.987353][   T23] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  118.010801][   T23] usb 4-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[  118.033811][   T23] usb 4-1: Product: syz
[  118.038091][   T23] usb 4-1: Manufacturer: syz
[  118.059647][   T23] usb 4-1: SerialNumber: syz
[  118.417830][   T23] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  118.447242][ T5898] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  118.466405][   T23] dvb-usb: bulk message failed: -71 (3/0)
[  118.506720][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  118.521269][   T23] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  118.543196][   T23] usb 4-1: media controller created
[  118.621006][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  118.639600][ T6156] veth0_vlan: entered promiscuous mode
[  118.654345][ T6335] loop1: detected capacity change from 0 to 512
[  118.668592][ T6156] veth1_vlan: entered promiscuous mode
[  118.680133][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.706944][   T23] dvb-usb: bulk message failed: -71 (6/0)
[  118.725305][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.757787][   T23] dvb-usb: bulk message failed: -71 (6/0)
[  118.769501][ T5898] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  118.785773][ T6335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  118.798960][   T23] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  118.804562][ T6156] veth0_macvtap: entered promiscuous mode
[  118.806909][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  118.837407][   T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6
[  118.851181][ T6156] veth1_macvtap: entered promiscuous mode
[  118.851516][ T6335] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.869779][ T5898] usb 1-1: SerialNumber: syz
[  118.890883][   T23] dvb-usb: schedule remote query interval to 150 msecs.
[  118.923713][   T23] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  118.936896][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.957821][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.983933][   T23] usb 4-1: USB disconnect, device number 2
[  118.990936][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.009910][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.021870][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.063423][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.085585][   T27] audit: type=1800 audit(1759326474.242:5): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.119" name="file1" dev="loop1" ino=18 res=0 errno=0
[  119.130859][ T5898] usb 1-1: 0:2 : does not exist
[  119.142024][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.209897][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.255700][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.277202][   T23] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  119.290064][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.302046][ T5898] usb 1-1: USB disconnect, device number 5
[  119.322510][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.360504][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  119.401040][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.449844][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.463210][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  119.533489][ T6156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.546031][ T6156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.559438][ T6156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.571016][ T6156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.733819][   T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  119.835101][ T1300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.872076][ T1300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.950904][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.959098][   T23] usb 4-1: Using ep0 maxpacket: 16
[  119.966592][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.975439][   T23] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  120.011255][   T23] usb 4-1: config 0 has no interface number 0
[  120.056367][   T23] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  120.097966][   T23] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  120.125505][   T23] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  120.153457][   T23] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  120.161607][   T23] usb 4-1: Product: syz
[  120.216686][   T23] usb 4-1: SerialNumber: syz
[  120.233273][   T23] usb 4-1: config 0 descriptor??
[  120.270789][   T23] cm109 4-1:0.8: invalid payload size 0, expected 4
[  120.306249][   T23] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input7
[  121.069722][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  121.109019][   T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  121.333619][   T23] usb 2-1: Using ep0 maxpacket: 8
[  121.389017][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  121.422357][   T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  121.459018][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.499877][   T23] usb 2-1: config 0 descriptor??
[  121.529183][  T786] usb 4-1: USB disconnect, device number 3
[  121.560124][  T786] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  121.822451][   T23] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  122.118171][  T786] usb 2-1: USB disconnect, device number 4
[  122.844303][ T6368] loop0: detected capacity change from 0 to 262144
[  122.884271][ T6368] F2FS-fs (loop0): invalid crc value
[  122.922476][ T6368] F2FS-fs (loop0): Found nat_bits in checkpoint
[  122.972469][ T6368] F2FS-fs (loop0): Start checkpoint disabled!
[  122.982344][ T6368] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  123.072199][   T27] audit: type=1800 audit(1759326478.232:6): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.125" name="file1" dev="loop0" ino=7 res=0 errno=0
[  123.510950][ T6405] loop4: detected capacity change from 0 to 256
[  123.544178][ T6405] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  123.571558][ T6405] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  123.611308][ T6405] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[  123.942622][ T6417] loop3: detected capacity change from 0 to 64
[  124.425587][ T6426] netlink: 'syz.4.140': attribute type 21 has an invalid length.
[  124.463760][ T6426] netlink: 'syz.4.140': attribute type 1 has an invalid length.
[  124.471461][ T6426] netlink: 144 bytes leftover after parsing attributes in process `syz.4.140'.
[  124.984954][ T6437] loop3: detected capacity change from 0 to 8
[  125.784792][ T6458] loop1: detected capacity change from 0 to 1024
[  125.902171][   T27] audit: type=1800 audit(1759326481.062:7): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.148" name=3A1B dev="loop1" ino=26 res=0 errno=0
[  125.973152][   T11] hfsplus: b-tree write err: -5, ino 4
[  126.536285][  T786] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  126.743501][  T786] usb 5-1: Using ep0 maxpacket: 8
[  126.771996][  T786] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  126.800724][  T786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  126.827339][  T786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  126.867990][  T786] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  126.908330][  T786] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  126.944040][  T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.247773][  T786] usb 5-1: GET_CAPABILITIES returned 0
[  127.265039][  T786] usbtmc 5-1:16.0: can't read capabilities
[  127.509246][  T786] usb 5-1: USB disconnect, device number 2
[  127.553767][ T5898] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  127.762244][ T5898] usb 2-1: Using ep0 maxpacket: 8
[  127.782353][ T5898] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  127.813573][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.821633][ T5898] usb 2-1: Product: syz
[  127.837734][ T5898] usb 2-1: Manufacturer: syz
[  127.849282][ T5898] usb 2-1: SerialNumber: syz
[  127.857060][ T5898] usb 2-1: config 0 descriptor??
[  128.014305][ T5783] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  128.061023][ T6505] loop3: detected capacity change from 0 to 32768
[  128.110038][ T5898] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  128.193583][ T5783] usb 1-1: Using ep0 maxpacket: 16
[  128.201929][ T6505] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  128.235185][ T5783] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  128.287566][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.340757][ T5783] usb 1-1: Product: syz
[  128.369230][ T5783] usb 1-1: Manufacturer: syz
[  128.389312][ T5783] usb 1-1: SerialNumber: syz
[  128.415225][ T5783] usb 1-1: config 0 descriptor??
[  128.449228][ T5783] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  128.485407][ T5783] usb 1-1: Detected FT232H
[  128.611767][ T5792] (syz-executor,5792,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76
[  128.618136][ T6524] loop4: detected capacity change from 0 to 4096
[  128.676373][ T5783] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  128.701434][ T5792] ocfs2: Unmounting device (7,3) on (node local)
[  128.751498][ T6524] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  128.923996][ T5898] gspca_sunplus: reg_w_riv err -71
[  128.939510][ T5898] sunplus: probe of 2-1:0.0 failed with error -71
[  128.965746][ T5898] usb 2-1: USB disconnect, device number 5
[  129.147248][ T5783] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  129.370210][ T5898] usb 1-1: USB disconnect, device number 6
[  129.395244][ T5898] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  129.436687][ T5898] ftdi_sio 1-1:0.0: device disconnected
[  129.531160][ T6538] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  130.457005][ T6592] loop4: detected capacity change from 0 to 512
[  130.571047][ T6592] EXT4-fs: Ignoring removed bh option
[  130.656998][ T6592] EXT4-fs (loop4): Test dummy encryption mode enabled
[  130.700815][ T6592] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0
[  130.773568][ T6592] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  130.849396][ T6592] EXT4-fs (loop4): The Hurd can't support 64-bit file systems
[  131.650056][ T6616] loop1: detected capacity change from 0 to 128
[  131.805197][ T6616] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  131.849063][ T6616] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.041696][   T27] audit: type=1800 audit(1759326487.202:8): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.176" name="file1" dev="loop1" ino=12 res=0 errno=0
[  132.233042][ T5794] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.461824][ T6608] loop4: detected capacity change from 0 to 32768
[  132.501270][   T27] audit: type=1326 audit(1759326487.662:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6622 comm="syz.3.178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcee538eec9 code=0x0
[  132.539217][ T6608] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.699174][ T6608] XFS (loop4): Ending clean mount
[  132.754345][ T6608] XFS (loop4): Quotacheck needed: Please wait.
[  132.778608][ T6641] netlink: 128 bytes leftover after parsing attributes in process `syz.1.179'.
[  132.792695][ T6641] netlink: 128 bytes leftover after parsing attributes in process `syz.1.179'.
[  132.871738][ T6608] XFS (loop4): Quotacheck: Done.
[  132.961632][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  132.969174][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  133.294496][ T6156] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.563593][ T5868] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  133.839538][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.852073][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.871073][ T5868] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  133.891666][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.917423][ T5868] usb 4-1: config 0 descriptor??
[  134.215408][   T27] audit: type=1326 audit(1759326489.382:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6656 comm="syz.4.181" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf32f8eec9 code=0x0
[  134.779495][ T5868] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0
[  134.814014][ T5868] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized
[  135.105032][ T5868] usb 4-1: USB disconnect, device number 4
[  135.377893][ T6680] loop4: detected capacity change from 0 to 1024
[  135.396498][ T6680] EXT4-fs: Ignoring removed nomblk_io_submit option
[  135.467663][ T6680] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  135.502060][ T6680] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  135.512077][ T6680] System zones: 0-1, 3-36
[  135.533927][ T6680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.676920][ T6587] Set syz1 is full, maxelem 65536 reached
[  135.834960][ T6156] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.136500][ T6699] input: syz0 as /devices/virtual/input/input8
[  136.180565][ T5898] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  136.387309][ T5898] usb 4-1: Using ep0 maxpacket: 32
[  136.407920][ T5898] usb 4-1: config 0 interface 0 has no altsetting 0
[  136.417743][ T5898] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  136.434401][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.452948][ T5898] usb 4-1: Product: syz
[  136.463218][ T5898] usb 4-1: Manufacturer: syz
[  136.478345][ T5898] usb 4-1: SerialNumber: syz
[  136.496427][ T5898] usb 4-1: config 0 descriptor??
[  136.535779][ T6709] ALSA: mixer_oss: invalid OSS volume ' 1000000) max_states_per_insn 0'
[  136.693580][   T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  136.927816][   T23] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  136.953595][ T5898] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  136.972255][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.999334][   T23] usb 1-1: Product: syz
[  137.013391][   T23] usb 1-1: Manufacturer: syz
[  137.018204][   T23] usb 1-1: SerialNumber: syz
[  137.029719][   T23] usb 1-1: config 0 descriptor??
[  137.363913][  T786] usb 1-1: USB disconnect, device number 7
[  137.614802][ T6713] loop4: detected capacity change from 0 to 40427
[  137.647437][ T5868] usb 4-1: USB disconnect, device number 5
[  137.658044][ T6713] F2FS-fs (loop4): invalid crc value
[  137.681536][ T6713] F2FS-fs (loop4): Found nat_bits in checkpoint
[  137.852318][ T6713] F2FS-fs (loop4): Start checkpoint disabled!
[  137.888929][ T6713] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  138.255359][ T1300] kworker/u4:9: attempt to access beyond end of device
[  138.255359][ T1300] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  138.285671][ T1300] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  138.293225][ T1300] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  139.085864][ T6758] loop0: detected capacity change from 0 to 64
[  139.936189][  T786] kernel read not supported for file /sequencer (pid: 786 comm: kworker/1:2)
[  140.485648][ T6792] loop1: detected capacity change from 0 to 8
[  140.498467][ T6762] loop3: detected capacity change from 0 to 40427
[  140.526563][ T6762] F2FS-fs (loop3): invalid crc value
[  140.550015][ T6762] F2FS-fs (loop3): Found nat_bits in checkpoint
[  140.699852][ T6762] F2FS-fs (loop3): Start checkpoint disabled!
[  140.737376][ T6762] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  140.778664][ T6802] loop4: detected capacity change from 0 to 256
[  140.824524][ T6802] exfat: Deprecated parameter 'utf8'
[  140.829951][ T6802] exfat: Deprecated parameter 'utf8'
[  140.925162][ T6802] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  141.314023][ T1300] kworker/u4:9: attempt to access beyond end of device
[  141.314023][ T1300] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  141.328483][ T1300] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  141.367373][ T1300] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  141.408418][ T1300] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  141.771684][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'.
[  141.847544][ T6795] geneve0: entered promiscuous mode
[  141.853301][ T6795] geneve0: entered allmulticast mode
[  142.137695][ T6828] loop1: detected capacity change from 0 to 256
[  142.430119][ T6832] warning: `syz.3.223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  142.457602][ T6834] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.227'.
[  142.485033][ T6834] netlink: del zone limit has 8 unknown bytes
[  144.118713][   T27] audit: type=1326 audit(1759326499.282:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0e5d8eec9 code=0x0
[  144.481917][ T6863] loop3: detected capacity change from 0 to 32768
[  144.515815][ T6863] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.235 (6863)
[  144.545465][ T6864] loop0: detected capacity change from 0 to 32768
[  144.592696][ T6864] (syz.0.236,6864,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  144.618945][ T6863] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  144.670440][ T6863] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  144.673157][ T6864] (syz.0.236,6864,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  144.726242][ T6863] BTRFS info (device loop3): force zlib compression, level 3
[  144.763714][ T6863] BTRFS info (device loop3): force clearing of disk cache
[  144.786219][ T6864] JBD2: Ignoring recovery information on journal
[  144.792813][ T6863] BTRFS info (device loop3): turning off barriers
[  144.826220][ T6886] loop4: detected capacity change from 0 to 764
[  144.833468][ T6863] BTRFS info (device loop3): doing ref verification
[  144.885928][ T6863] BTRFS info (device loop3): enabling disk space caching
[  144.917303][ T6863] BTRFS info (device loop3): disk space caching is enabled
[  144.974635][ T6864] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  144.992280][ T6886] Symlink component flag not implemented
[  145.093435][ T6886] Symlink component flag not implemented
[  145.099718][ T6886] Symlink component flag not implemented (129)
[  145.159252][ T6886] Symlink component flag not implemented (6)
[  145.248292][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'.
[  145.273517][ T6863] BTRFS info (device loop3): enabling ssd optimizations
[  145.280614][ T6863] BTRFS info (device loop3): auto enabling async discard
[  145.316336][ T6863] BTRFS info (device loop3): rebuilding free space tree
[  145.392898][ T6863] BTRFS info (device loop3): disabling free space tree
[  145.423516][ T6863] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  145.433241][ T6863] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  145.801451][ T6863] BTRFS info (device loop3): balance: start 
[  145.835655][ T5795] ocfs2: Unmounting device (7,0) on (node local)
[  145.852540][ T6863] BTRFS info (device loop3): balance: ended with status: 0
[  146.182366][ T5792] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  146.671269][ T6933] loop4: detected capacity change from 0 to 256
[  146.850544][ T6930] loop3: detected capacity change from 0 to 4096
[  146.900356][ T6930] EXT4-fs: Ignoring removed nomblk_io_submit option
[  147.020842][ T6930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.631190][ T6948] loop0: detected capacity change from 0 to 8192
[  147.731044][ T6948] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  147.834846][ T6948] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  147.852292][ T6948] REISERFS (device loop0): using ordered data mode
[  147.873466][ T6948] reiserfs: using flush barriers
[  147.905432][ T6948] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  147.974449][ T6948] REISERFS (device loop0): checking transaction log (loop0)
[  148.042809][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.371422][ T6948] REISERFS (device loop0): Using tea hash to sort names
[  148.408389][ T6948] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  148.440873][ T6924] loop1: detected capacity change from 0 to 32768
[  148.469919][ T6924] XFS: attr2 mount option is deprecated.
[  148.560831][   T27] audit: type=1800 audit(1759326503.722:12): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.250" name="file1" dev="loop0" ino=4 res=0 errno=0
[  148.715965][ T6924] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.903088][ T6945] loop4: detected capacity change from 0 to 32768
[  148.957918][ T6945] XFS: ikeep mount option is deprecated.
[  148.983577][ T6945] XFS: ikeep mount option is deprecated.
[  148.989307][ T6945] XFS: noikeep mount option is deprecated.
[  149.133008][ T6945] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.323889][ T6945] XFS (loop4): Ending clean mount
[  149.367603][ T6924] XFS (loop1): Ending clean mount
[  149.524206][ T6924] XFS (loop1): Quotacheck needed: Please wait.
[  149.754308][ T6924] XFS (loop1): Quotacheck: Done.
[  149.801117][ T6998] Bluetooth: MGMT ver 1.22
[  149.932685][ T6156] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.976055][ T5794] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  151.273822][ T7011] loop0: detected capacity change from 0 to 32768
[  151.296301][ T7011] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.259 (7011)
[  151.334724][ T7011] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  151.355716][ T7011] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  151.369416][ T7011] BTRFS info (device loop0): enabling disk space caching
[  151.381465][ T7011] BTRFS info (device loop0): force clearing of disk cache
[  151.391318][ T7011] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  151.409302][ T7011] BTRFS info (device loop0): use lzo compression, level 0
[  151.416725][ T1189] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  151.449505][ T7011] BTRFS info (device loop0): disk space caching is enabled
[  151.543482][ T7011] BTRFS info (device loop0): enabling ssd optimizations
[  151.553718][ T7011] BTRFS info (device loop0): auto enabling async discard
[  151.572483][ T7011] BTRFS info (device loop0): rebuilding free space tree
[  151.623432][ T1189] usb 4-1: Using ep0 maxpacket: 32
[  151.627638][ T7011] BTRFS info (device loop0): disabling free space tree
[  151.656282][ T1189] usb 4-1: config 0 has no interfaces?
[  151.661958][ T7011] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  151.677001][ T1189] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  151.703434][ T1189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.711652][ T7011] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  151.733227][ T1189] usb 4-1: config 0 descriptor??
[  151.996427][ T1189] usb 4-1: USB disconnect, device number 6
[  152.098776][ T5795] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  153.033888][   T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  153.216505][ T7056] Illegal XDP return value 18 on prog  (id 26) dev syz_tun, expect packet loss!
[  153.243568][   T23] usb 4-1: Using ep0 maxpacket: 32
[  153.277165][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.309391][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.337723][   T23] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  153.354977][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.367956][ T1189] IPVS: starting estimator thread 0...
[  153.384581][   T23] usb 4-1: config 0 descriptor??
[  153.391548][ T7058] tipc: Started in network mode
[  153.404332][ T7058] tipc: Node identity ac1414aa, cluster identity 4711
[  153.421654][ T7058] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  153.429850][ T7058] tipc: Enabled bearer <udp:s>, priority 10
[  153.474231][ T7059] IPVS: using max 17 ests per chain, 40800 per kthread
[  153.553779][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  153.693504][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  153.733681][ T7066] loop1: detected capacity change from 0 to 1764
[  153.833577][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  153.844832][   T23] ft260 0003:0403:6030.0002: unknown main item tag 0x7
[  153.973512][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  154.027044][   T23] ft260 0003:0403:6030.0002: chip code: 6424 8183
[  154.113503][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  154.233833][   T23] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[  154.253523][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  154.393478][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  154.453578][   T23] ft260 0003:0403:6030.0002: failed to retrieve status: -71, no wakeup
[  154.478228][   T23] ft260 0003:0403:6030.0002: failed to retrieve status: -71
[  154.493970][   T23] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71
[  154.533561][ T5868] tipc: Node number set to 2886997162
[  154.557115][   T23] usb 4-1: USB disconnect, device number 7
[  154.673548][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  154.943521][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  155.278545][ T7078] netlink: 104 bytes leftover after parsing attributes in process `syz.3.277'.
[  155.367054][ T7076] loop0: detected capacity change from 0 to 32768
[  155.455742][ T7076] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  155.611957][ T7076] (syz.0.276,7076,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  155.691720][ T7085] loop3: detected capacity change from 0 to 256
[  155.790709][ T7085] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  155.879622][ T5795] ocfs2: Unmounting device (7,0) on (node local)
[  156.079740][ T5108] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  156.090570][ T5108] Bluetooth: hci0: Injecting HCI hardware error event
[  156.099498][ T5796] Bluetooth: hci0: hardware error 0x00
[  156.153983][ T5108] Bluetooth: hci4: command 0x1003 tx timeout
[  156.161678][ T5801] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  157.163473][ T7091] loop3: detected capacity change from 0 to 32768
[  157.216705][ T7091] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  157.237767][ T7113] loop1: detected capacity change from 0 to 128
[  157.307103][ T7113] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.350287][ T7091] XFS (loop3): Ending clean mount
[  157.366896][ T7113] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  157.437288][ T7091] XFS (loop3): Quotacheck needed: Please wait.
[  157.544951][ T7091] XFS (loop3): Quotacheck: Done.
[  157.615258][ T7095] loop0: detected capacity change from 0 to 32768
[  157.687084][ T7095] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.897126][ T7136] netlink: 28 bytes leftover after parsing attributes in process `syz.4.293'.
[  157.948057][ T5794] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  157.948868][ T7095] XFS (loop0): Ending clean mount
[  157.985594][ T7095] XFS (loop0): Quotacheck needed: Please wait.
[  158.071256][ T7095] XFS (loop0): Quotacheck: Done.
[  158.158044][ T5796] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  158.241572][ T5795] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.315252][ T7142] loop1: detected capacity change from 0 to 1024
[  158.330314][ T7142] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  158.429191][ T7142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.443951][   T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  158.545798][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.633529][    C0] net_ratelimit: 3 callbacks suppressed
[  158.633546][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  158.656783][   T23] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  158.675996][   T23] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  158.691774][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  158.703172][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  158.754144][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  158.772056][   T23] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  158.783803][   T23] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  158.791849][   T23] usb 5-1: Product: syz
[  158.818379][   T23] usb 5-1: Manufacturer: syz
[  158.838206][   T23] cdc_wdm 5-1:1.0: skipping garbage
[  158.853544][   T23] cdc_wdm 5-1:1.0: skipping garbage
[  158.862092][   T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  158.873569][   T23] cdc_wdm 5-1:1.0: Unknown control protocol
[  158.984809][ T5792] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  159.461538][ T7150] loop0: detected capacity change from 0 to 32768
[  159.521383][ T7150] JBD2: Ignoring recovery information on journal
[  159.541704][ T7157] loop3: detected capacity change from 0 to 1024
[  159.550666][ T7157] EXT4-fs: Ignoring removed orlov option
[  159.624966][ T7157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.673578][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  159.691317][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  159.692694][ T1189] usb 5-1: USB disconnect, device number 3
[  159.698337][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  159.698359][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  159.734912][ T7150] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  160.005548][ T5792] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  160.092962][ T7150] (syz.0.299,7150,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount
[  160.158003][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.170978][ T7150] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #64 has an invalid fs_generation of #3923116032
[  160.197366][ T7150] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  160.265900][ T7150] OCFS2: File system is now read-only.
[  160.271487][ T7150] (syz.0.299,7150,0):ocfs2_test_suballoc_bit:2782 ERROR: read group 64 failed -30
[  160.347386][ T7150] (syz.0.299,7150,1):ocfs2_test_suballoc_bit:2793 ERROR: status = -30
[  160.424174][ T7150] (syz.0.299,7150,0):ocfs2_test_inode_bit:2855 ERROR: test suballoc bit failed -30
[  160.463454][ T7150] (syz.0.299,7150,0):ocfs2_test_inode_bit:2864 ERROR: status = -30
[  160.472197][ T7150] (syz.0.299,7150,0):ocfs2_get_parent:166 ERROR: test inode bit failed -30
[  160.694178][ T5795] ocfs2: Unmounting device (7,0) on (node local)
[  160.713507][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  161.662123][ T7185] loop0: detected capacity change from 0 to 512
[  161.753715][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  161.773714][ T7185] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.309: bad orphan inode 11862016
[  161.871806][ T7185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  161.962917][ T7185] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.026540][ T7177] loop4: detected capacity change from 0 to 32768
[  162.112663][ T7177] 
[  162.112663][ T7177]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  162.112663][ T7177] 
[  162.182403][ T7191] loop1: detected capacity change from 0 to 4096
[  162.213586][ T7191] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  162.296121][ T7191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.347584][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  162.363171][ T7177] read_mapping_page failed!
[  162.414066][ T7177] ERROR: (device loop4): txCommit: 
[  162.414066][ T7177] 
[  162.534058][ T7199] read_mapping_page failed!
[  162.543677][ T7199] ERROR: (device loop4): txCommit: 
[  162.543677][ T7199] 
[  162.631802][ T7198] ==================================================================
[  162.639948][ T7198] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xe8b/0x13e0
[  162.647629][ T7198] Read of size 4 at addr ffff88805a22404c by task syz.4.307/7198
[  162.655379][ T7198] 
[  162.657732][ T7198] CPU: 1 PID: 7198 Comm: syz.4.307 Not tainted syzkaller #0
[  162.665024][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  162.675141][ T7198] Call Trace:
[  162.678430][ T7198]  <TASK>
[  162.681376][ T7198]  dump_stack_lvl+0x16c/0x230
[  162.686079][ T7198]  ? read_lock_is_recursive+0x20/0x20
[  162.691473][ T7198]  ? show_regs_print_info+0x20/0x20
[  162.696692][ T7198]  ? load_image+0x3b0/0x3b0
[  162.701248][ T7198]  ? _raw_spin_lock_irqsave+0xb4/0xf0
[  162.706638][ T7198]  ? __virt_addr_valid+0x18c/0x540
[  162.711764][ T7198]  ? __virt_addr_valid+0x469/0x540
[  162.716894][ T7198]  print_report+0xac/0x220
[  162.721321][ T7198]  ? dtInsertEntry+0xe8b/0x13e0
[  162.726198][ T7198]  kasan_report+0x117/0x150
[  162.730725][ T7198]  ? dtInsertEntry+0xe8b/0x13e0
[  162.735614][ T7198]  dtInsertEntry+0xe8b/0x13e0
[  162.740315][ T7198]  ? release_metapage+0x703/0x870
[  162.745351][ T7198]  dtSplitPage+0x2a66/0x3b10
[  162.749992][ T7198]  dtInsert+0x108f/0x5f40
[  162.754350][ T7198]  ? txLock+0x2b1/0x2090
[  162.758602][ T7198]  ? __lock_acquire+0x7c80/0x7c80
[  162.763643][ T7198]  ? UniStrupr+0x2e0/0x2e0
[  162.768079][ T7198]  ? txLock+0x1125/0x2090
[  162.772420][ T7198]  ? txEnd+0x520/0x520
[  162.776508][ T7198]  jfs_create+0x6a1/0xa40
[  162.780854][ T7198]  ? jfs_lookup+0x380/0x380
[  162.785374][ T7198]  ? jfs_get_parent+0xb0/0xb0
[  162.790072][ T7198]  ? make_vfsuid+0x51/0xb0
[  162.793527][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  162.794503][ T7198]  ? inode_permission+0xf3/0x480
[  162.806421][ T7198]  ? bpf_lsm_inode_create+0x9/0x10
[  162.811548][ T7198]  ? security_inode_create+0xb7/0x100
[  162.816938][ T7198]  ? jfs_lookup+0x380/0x380
[  162.821460][ T7198]  path_openat+0x1277/0x3190
[  162.826083][ T7198]  ? do_filp_open+0x3d0/0x3d0
[  162.830787][ T7198]  do_filp_open+0x1c5/0x3d0
[  162.835308][ T7198]  ? vfs_tmpfile+0x490/0x490
[  162.839927][ T7198]  ? _raw_spin_unlock+0x28/0x40
[  162.844796][ T7198]  ? alloc_fd+0x58f/0x630
[  162.849141][ T7198]  do_sys_openat2+0x12c/0x1c0
[  162.853831][ T7198]  ? _raw_spin_unlock+0x40/0x40
[  162.858691][ T7198]  ? do_sys_open+0xe0/0xe0
[  162.863120][ T7198]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  162.869115][ T7198]  ? lock_chain_count+0x20/0x20
[  162.874010][ T7198]  ? lock_chain_count+0x20/0x20
[  162.878878][ T7198]  __x64_sys_openat+0x139/0x160
[  162.883751][ T7198]  do_syscall_64+0x55/0xb0
[  162.888178][ T7198]  ? clear_bhb_loop+0x40/0x90
[  162.892860][ T7198]  ? clear_bhb_loop+0x40/0x90
[  162.897564][ T7198]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  162.903505][ T7198] RIP: 0033:0x7faf32f8eec9
[  162.907969][ T7198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.927644][ T7198] RSP: 002b:00007faf33e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  162.936105][ T7198] RAX: ffffffffffffffda RBX: 00007faf331e6090 RCX: 00007faf32f8eec9
[  162.944098][ T7198] RDX: 0000000000000042 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  162.952084][ T7198] RBP: 00007faf33011f91 R08: 0000000000000000 R09: 0000000000000000
[  162.960070][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.968052][ T7198] R13: 00007faf331e6128 R14: 00007faf331e6090 R15: 00007ffcaf63b618
[  162.976077][ T7198]  </TASK>
[  162.979107][ T7198] 
[  162.981452][ T7198] Allocated by task 7177:
[  162.985788][ T7198]  kasan_set_track+0x4e/0x70
[  162.990392][ T7198]  __kasan_slab_alloc+0x6c/0x80
[  162.995257][ T7198]  slab_post_alloc_hook+0x6e/0x4d0
[  163.000383][ T7198]  kmem_cache_alloc_lru+0x115/0x2e0
[  163.005604][ T7198]  jfs_alloc_inode+0x28/0x60
[  163.010204][ T7198]  iget_locked+0x1ad/0x840
[  163.014627][ T7198]  jfs_iget+0x24/0x3c0
[  163.018712][ T7198]  jfs_lookup+0x1c6/0x380
[  163.023048][ T7198]  __lookup_slow+0x281/0x3b0
[  163.027657][ T7198]  lookup_slow+0x53/0x70
[  163.032007][ T7198]  walk_component+0x2be/0x3f0
[  163.036820][ T7198]  path_lookupat+0x169/0x440
[  163.041472][ T7198]  filename_lookup+0x1f4/0x510
[  163.046289][ T7198]  user_path_at_empty+0x42/0x60
[  163.051169][ T7198]  __se_sys_chdir+0x95/0x290
[  163.055789][ T7198]  do_syscall_64+0x55/0xb0
[  163.060260][ T7198]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.066178][ T7198] 
[  163.068512][ T7198] The buggy address belongs to the object at ffff88805a223780
[  163.068512][ T7198]  which belongs to the cache jfs_ip of size 2240
[  163.082316][ T7198] The buggy address is located 12 bytes to the right of
[  163.082316][ T7198]  allocated 2240-byte region [ffff88805a223780, ffff88805a224040)
[  163.097015][ T7198] 
[  163.099354][ T7198] The buggy address belongs to the physical page:
[  163.105789][ T7198] page:ffffea0001688800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a220
[  163.115957][ T7198] head:ffffea0001688800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  163.124919][ T7198] memcg:ffff88805b494101
[  163.129177][ T7198] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  163.137253][ T7198] page_type: 0xffffffff()
[  163.141626][ T7198] raw: 00fff00000000840 ffff8881436d8280 dead000000000122 0000000000000000
[  163.150228][ T7198] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88805b494101
[  163.158816][ T7198] page dumped because: kasan: bad access detected
[  163.165247][ T7198] page_owner tracks the page as allocated
[  163.171019][ T7198] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 7177, tgid 7176 (syz.4.307), ts 162081460494, free_ts 25806250478
[  163.194585][ T7198]  post_alloc_hook+0x1cd/0x210
[  163.199476][ T7198]  get_page_from_freelist+0x195c/0x19f0
[  163.205044][ T7198]  __alloc_pages+0x1e3/0x460
[  163.209661][ T7198]  alloc_slab_page+0x5d/0x170
[  163.214446][ T7198]  new_slab+0x87/0x2e0
[  163.218639][ T7198]  ___slab_alloc+0xc6d/0x1300
[  163.223346][ T7198]  kmem_cache_alloc_lru+0x1ae/0x2e0
[  163.228576][ T7198]  jfs_alloc_inode+0x28/0x60
[  163.233194][ T7198]  new_inode_pseudo+0x63/0x1d0
[  163.237983][ T7198]  new_inode+0x22/0x1b0
[  163.242159][ T7198]  jfs_fill_super+0x396/0xac0
[  163.246861][ T7198]  mount_bdev+0x22b/0x2d0
[  163.251203][ T7198]  legacy_get_tree+0xea/0x180
[  163.255896][ T7198]  vfs_get_tree+0x8c/0x280
[  163.260323][ T7198]  do_new_mount+0x24b/0xa40
[  163.264870][ T7198]  __se_sys_mount+0x2da/0x3c0
[  163.269554][ T7198] page last free stack trace:
[  163.274244][ T7198]  free_unref_page_prepare+0x7ce/0x8e0
[  163.279806][ T7198]  free_unref_page+0x32/0x2e0
[  163.284491][ T7198]  free_contig_range+0xa1/0x160
[  163.289345][ T7198]  destroy_args+0x80/0x850
[  163.293770][ T7198]  debug_vm_pgtable+0x3cc/0x410
[  163.298622][ T7198]  do_one_initcall+0x1fd/0x750
[  163.303498][ T7198]  do_initcall_level+0x137/0x1f0
[  163.308459][ T7198]  do_initcalls+0x69/0xd0
[  163.312797][ T7198]  kernel_init_freeable+0x3d2/0x570
[  163.318016][ T7198]  kernel_init+0x1d/0x1c0
[  163.322383][ T7198]  ret_from_fork+0x48/0x80
[  163.326819][ T7198]  ret_from_fork_asm+0x11/0x20
[  163.331614][ T7198] 
[  163.333947][ T7198] Memory state around the buggy address:
[  163.339584][ T7198]  ffff88805a223f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  163.347651][ T7198]  ffff88805a223f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  163.355723][ T7198] >ffff88805a224000: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  163.363874][ T7198]                                               ^
[  163.370292][ T7198]  ffff88805a224080: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  163.378362][ T7198]  ffff88805a224100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  163.386424][ T7198] ==================================================================
[  163.421003][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.433910][ T7198] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  163.441157][ T7198] CPU: 1 PID: 7198 Comm: syz.4.307 Not tainted syzkaller #0
[  163.448477][ T7198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  163.458571][ T7198] Call Trace:
[  163.459545][ T7203] netlink: 'syz.0.312': attribute type 10 has an invalid length.
[  163.469623][ T7198]  <TASK>
[  163.472591][ T7198]  dump_stack_lvl+0x16c/0x230
[  163.477310][ T7198]  ? show_regs_print_info+0x20/0x20
[  163.482550][ T7198]  ? load_image+0x3b0/0x3b0
[  163.487093][ T7198]  panic+0x2c0/0x710
[  163.491034][ T7198]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  163.497217][ T7198]  ? bpf_jit_dump+0xd0/0xd0
[  163.501768][ T7198]  ? _raw_spin_unlock_irqrestore+0xfa/0x110
[  163.507677][ T7198]  ? _raw_spin_unlock+0x40/0x40
[  163.512548][ T7198]  ? dtInsertEntry+0xe8b/0x13e0
[  163.517435][ T7198]  check_panic_on_warn+0x84/0xa0
[  163.522392][ T7198]  ? dtInsertEntry+0xe8b/0x13e0
[  163.527266][ T7198]  end_report+0x6f/0x140
[  163.531521][ T7198]  kasan_report+0x128/0x150
[  163.536040][ T7198]  ? dtInsertEntry+0xe8b/0x13e0
[  163.540909][ T7198]  dtInsertEntry+0xe8b/0x13e0
[  163.545610][ T7198]  ? release_metapage+0x703/0x870
[  163.550670][ T7198]  dtSplitPage+0x2a66/0x3b10
[  163.555303][ T7198]  dtInsert+0x108f/0x5f40
[  163.559664][ T7198]  ? txLock+0x2b1/0x2090
[  163.563932][ T7198]  ? __lock_acquire+0x7c80/0x7c80
[  163.568990][ T7198]  ? UniStrupr+0x2e0/0x2e0
[  163.573425][ T7198]  ? txLock+0x1125/0x2090
[  163.577766][ T7198]  ? txEnd+0x520/0x520
[  163.581846][ T7198]  jfs_create+0x6a1/0xa40
[  163.586197][ T7198]  ? jfs_lookup+0x380/0x380
[  163.590719][ T7198]  ? jfs_get_parent+0xb0/0xb0
[  163.595423][ T7198]  ? make_vfsuid+0x51/0xb0
[  163.599856][ T7198]  ? inode_permission+0xf3/0x480
[  163.604814][ T7198]  ? bpf_lsm_inode_create+0x9/0x10
[  163.609950][ T7198]  ? security_inode_create+0xb7/0x100
[  163.615353][ T7198]  ? jfs_lookup+0x380/0x380
[  163.620043][ T7198]  path_openat+0x1277/0x3190
[  163.624668][ T7198]  ? do_filp_open+0x3d0/0x3d0
[  163.629406][ T7198]  do_filp_open+0x1c5/0x3d0
[  163.633930][ T7198]  ? vfs_tmpfile+0x490/0x490
[  163.638545][ T7198]  ? _raw_spin_unlock+0x28/0x40
[  163.643407][ T7198]  ? alloc_fd+0x58f/0x630
[  163.647758][ T7198]  do_sys_openat2+0x12c/0x1c0
[  163.652454][ T7198]  ? _raw_spin_unlock+0x40/0x40
[  163.657326][ T7198]  ? do_sys_open+0xe0/0xe0
[  163.661748][ T7198]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  163.667756][ T7198]  ? lock_chain_count+0x20/0x20
[  163.672634][ T7198]  ? lock_chain_count+0x20/0x20
[  163.677498][ T7198]  __x64_sys_openat+0x139/0x160
[  163.682366][ T7198]  do_syscall_64+0x55/0xb0
[  163.686795][ T7198]  ? clear_bhb_loop+0x40/0x90
[  163.691480][ T7198]  ? clear_bhb_loop+0x40/0x90
[  163.696170][ T7198]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.702177][ T7198] RIP: 0033:0x7faf32f8eec9
[  163.706609][ T7198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  163.726229][ T7198] RSP: 002b:00007faf33e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  163.734666][ T7198] RAX: ffffffffffffffda RBX: 00007faf331e6090 RCX: 00007faf32f8eec9
[  163.742647][ T7198] RDX: 0000000000000042 RSI: 0000200000000140 RDI: ffffffffffffff9c
[  163.750710][ T7198] RBP: 00007faf33011f91 R08: 0000000000000000 R09: 0000000000000000
[  163.758690][ T7198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.766674][ T7198] R13: 00007faf331e6128 R14: 00007faf331e6090 R15: 00007ffcaf63b618
[  163.774661][ T7198]  </TASK>
[  163.777983][ T7198] Kernel Offset: disabled
[  163.782309][ T7198] Rebooting in 86400 seconds..