last executing test programs:

2m2.43168363s ago: executing program 0 (id=276):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x3000012, &(0x7f0000000280)={[{@volume={'volume', 0x3d, 0x15}}, {@gid}, {@shortad}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@gid={'gid', 0x3d, 0xee01}}, {@lastblock={'lastblock', 0x3d, 0x3}}, {@uid_forget}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00')

2m1.298386296s ago: executing program 0 (id=285):
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x15, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

2m0.902813809s ago: executing program 0 (id=287):
unshare(0x28000600)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

2m0.183114961s ago: executing program 0 (id=291):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x402000784853bb, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)='F', 0x1)

1m59.602969325s ago: executing program 0 (id=294):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6282, &(0x7f000000f900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0xed1, 0x4fed0)

1m58.637407261s ago: executing program 0 (id=298):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x4, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0)

1m43.110337712s ago: executing program 32 (id=298):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x4, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0)

8.468970318s ago: executing program 1 (id=716):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/69, 0x45}, {0x0}], 0x2, 0x2, 0x6)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0)

7.716027432s ago: executing program 5 (id=717):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800)

7.509632724s ago: executing program 5 (id=719):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x10, 0x803, 0x2)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, 0x0)
sendmsg$nl_route(r2, 0x0, 0x440b0)

7.327937565s ago: executing program 4 (id=722):
unshare(0x400)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, 0x0, 0x0)

7.133698757s ago: executing program 4 (id=724):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

7.133460286s ago: executing program 5 (id=725):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x7, 0x0)
read$FUSE(r1, &(0x7f0000000e00)={0x2020}, 0x2020)

6.962630076s ago: executing program 2 (id=726):
syz_mount_image$squashfs(&(0x7f0000000140), &(0x7f0000002580)='./file0\x00', 0x801, &(0x7f00000003c0)=ANY=[], 0x0, 0x18c, &(0x7f0000000180)="$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")

6.822342314s ago: executing program 4 (id=727):
syz_io_uring_setup(0x82e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0)
writev(r0, &(0x7f00000000c0), 0x1000000000000195)

6.73611168s ago: executing program 2 (id=728):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084)

6.662621894s ago: executing program 1 (id=729):
pipe2(&(0x7f0000000040), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

6.422758887s ago: executing program 3 (id=730):
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000bc0), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800)

3.433268781s ago: executing program 1 (id=731):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000"], 0x164}}, 0x0)

3.361720235s ago: executing program 5 (id=732):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
dup2(r0, r3)
syz_usb_disconnect(0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

3.306437878s ago: executing program 4 (id=733):
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046})

3.233082383s ago: executing program 3 (id=734):
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7f3, &(0x7f0000001800)="$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")
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)

3.149193938s ago: executing program 2 (id=735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'syz_tun\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x5, 0x1, 'Y'}})

3.031754905s ago: executing program 1 (id=736):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="aefddad4e5205fd70206e9921493ab9e3a9d6f3b2b91ee3bb87242517b04ab00d1", 0x21}], 0x1}}], 0x1, 0x80)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a3000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40000)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000080190000000000000800", [0x0, 0x2000000000001]}})

3.028687265s ago: executing program 2 (id=737):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8040)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)

2.920342091s ago: executing program 3 (id=738):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1a8, 0x0, &(0x7f00000004c0)="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", 0x0, 0x10487, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200005}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

2.77440594s ago: executing program 1 (id=739):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/69, 0x45}, {0x0}], 0x2, 0x2, 0x6)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0)

2.75936858s ago: executing program 2 (id=740):
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0xcdf)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x15, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

2.705752794s ago: executing program 3 (id=741):
pipe2(&(0x7f0000000040), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

2.607632719s ago: executing program 2 (id=742):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r0, 0x0, r2, 0x0, 0x7, 0x0)
read$FUSE(r1, &(0x7f0000000e00)={0x2020}, 0x2020)

2.58446783s ago: executing program 4 (id=743):
socket$netlink(0x10, 0x3, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x34}}, 0x0)

2.577496631s ago: executing program 5 (id=744):
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000bc0), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x800)

1.769598758s ago: executing program 5 (id=745):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084)

1.581114889s ago: executing program 3 (id=746):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x4}]}}}]}, 0x54}}, 0x0)

1.523038682s ago: executing program 1 (id=747):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="64010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000"], 0x164}}, 0x0)

1.321642844s ago: executing program 4 (id=748):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, 0x0, 0x4048081)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000080)=[{0x0, 0x0, {0x1, 0xff, 0x4}, {0x0, 0x0, 0x2}, 0x0, 0xfd}, {0x3, 0x3, {0x2, 0x1}, {0x0, 0xf0, 0x3}, 0x2, 0x2}], 0x40)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)

0s ago: executing program 3 (id=749):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000200)={[], [{@flag='mand'}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

kernel console output (not intermixed with test programs):

.364083][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.370022][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.432645][ T4399] loop8: detected capacity change from 0 to 7
[   85.442110][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.452663][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.463255][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.473261][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.484319][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.494274][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.506009][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.510808][ T4399] Dev loop8: unable to read RDB block 7
[   85.521444][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.530438][ T4399]  loop8: AHDI p1 p2
[   85.534469][ T4399] loop8: partition table partially beyond EOD, truncated
[   85.557937][ T4399] loop8: p1 start 1853095936 is beyond EOD, truncated
[   85.580598][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.622268][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.631071][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.639336][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.648405][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.663463][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.675289][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.686593][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.697829][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.707969][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.719018][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.730167][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.742762][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.757013][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.774085][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.786834][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.796525][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.805156][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.838556][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   85.853702][ T4266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.864035][ T4266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.880212][ T4266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.902668][ T4266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.009680][ T4407] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[   86.178550][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.198510][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.223482][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.256642][ T4412] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2'.
[   86.279183][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.287254][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.348904][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.406140][ T4414] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   86.768010][ T4418] loop2: detected capacity change from 0 to 32768
[   86.775611][ T4418] XFS: attr2 mount option is deprecated.
[   86.783029][  T126] cfg80211: failed to load regulatory.db
[   86.904195][ T4418] XFS (loop2): Mounting V5 Filesystem
[   86.971666][ T4418] XFS (loop2): Ending clean mount
[   86.979061][  T126] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   87.003713][ T4418] XFS (loop2): Quotacheck needed: Please wait.
[   87.157574][ T4418] XFS (loop2): Quotacheck: Done.
[   87.198862][  T126] usb 4-1: Using ep0 maxpacket: 16
[   87.213533][ T4440] loop8: detected capacity change from 0 to 7
[   87.248885][  T126] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[   87.248965][ T4440] Dev loop8: unable to read RDB block 7
[   87.248991][ T4440]  loop8: AHDI p1 p2
[   87.298808][  T126] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[   87.328981][ T4440] loop8: partition table partially beyond EOD, truncated
[   87.336160][  T126] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.352037][ T4440] loop8: p1 start 1853095936 is beyond EOD, truncated
[   87.383847][  T126] usb 4-1: config 1 interface 0 has no altsetting 0
[   87.440557][  T126] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   87.476723][  T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.498441][  T126] usb 4-1: Product: syz
[   87.518068][  T126] usb 4-1: Manufacturer: syz
[   87.532337][  T126] usb 4-1: SerialNumber: syz
[   87.565077][ T4444] loop0: detected capacity change from 0 to 512
[   87.628245][ T4268] XFS (loop2): Unmounting Filesystem
[   87.689647][ T4444] =======================================================
[   87.689647][ T4444] WARNING: The mand mount option has been deprecated and
[   87.689647][ T4444]          and is ignored by this kernel. Remove the mand
[   87.689647][ T4444]          option from the mount to silence this warning.
[   87.689647][ T4444] =======================================================
[   87.788939][  T126] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[   87.988484][ T4444] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   88.485059][ T4438] loop1: detected capacity change from 0 to 32768
[   88.552545][ T4438] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.17 (4438)
[   88.584048][ T4461] loop2: detected capacity change from 0 to 512
[   88.665020][ T4438] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.687706][ T4461] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   88.731912][ T4438] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   88.765527][ T4461] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[   88.778603][ T4438] BTRFS info (device loop1): turning on sync discard
[   88.786435][ T4438] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   88.796640][ T4438] BTRFS info (device loop1): use zstd compression, level 3
[   88.804221][ T4438] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   88.815279][ T4438] BTRFS info (device loop1): trying to use backup root at mount time
[   88.823695][ T4438] BTRFS info (device loop1): enabling auto defrag
[   88.830560][ T4438] BTRFS info (device loop1): using free space tree
[   88.839715][ T4461] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.19: Corrupt directory, running e2fsck is recommended
[   88.905333][ T4461] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[   88.953049][ T4461] EXT4-fs error (device loop2): ext4_iget_extra_inode:4756: inode #15: comm syz.2.19: corrupted in-inode xattr
[   89.028908][ T4461] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.19: couldn't read orphan inode 15 (err -117)
[   89.088488][ T4461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   89.238891][ T4461] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.305634][ T4461] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[   89.346366][ T4461] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.19: Corrupt directory, running e2fsck is recommended
[   89.366076][ T4465] loop4: detected capacity change from 0 to 65536
[   89.393157][ T4481] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.407557][ T4481] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[   89.426491][ T4481] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.19: Corrupt directory, running e2fsck is recommended
[   89.456387][   T46] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   89.456782][ T4461] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.484338][ T4461] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it
[   89.494876][ T4461] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.19: Corrupt directory, running e2fsck is recommended
[   89.514577][ T4465] XFS (loop4): Mounting V5 Filesystem
[   89.556241][ T4465] XFS (loop4): Ending clean mount
[   89.566785][ T4438] BTRFS error (device loop1): failed to load root extent
[   89.580682][ T4481] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[   89.610810][ T4438] BTRFS warning (device loop1): try to load backup roots slot 1
[   89.662209][   T46] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   89.686263][ T4438] BTRFS warning (device loop1): couldn't read tree root
[   89.703563][ T4438] BTRFS warning (device loop1): try to load backup roots slot 2
[   89.753088][    T7] usb 4-1: USB disconnect, device number 2
[   89.772794][ T4438] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[   89.800557][    T7] usblp0: removed
[   89.829898][ T4438] BTRFS warning (device loop1): couldn't read tree root
[   89.836942][ T4438] BTRFS warning (device loop1): try to load backup roots slot 3
[   89.856539][ T4266] XFS (loop4): Unmounting Filesystem
[   89.893090][ T4268] EXT4-fs (loop2): unmounting filesystem.
[   89.975470][ T4438] BTRFS info (device loop1): enabling ssd optimizations
[   89.999717][ T4438] BTRFS info (device loop1): rebuilding free space tree
[   90.158259][ T4438] BTRFS info (device loop1): checking UUID tree
[   90.198513][ T4438] BTRFS warning (device loop1): failed to start uuid_rescan task
[   90.210800][ T4438] BTRFS warning (device loop1): failed to check the UUID tree: -4
[   90.367152][ T4438] BTRFS error (device loop1): open_ctree failed: -4
[   90.375766][ T4508] netlink: 204 bytes leftover after parsing attributes in process `syz.4.28'.
[   90.878929][ T4368] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   90.909945][ T4528] input: syz0 as /devices/virtual/input/input5
[   90.945813][ T4531] loop1: detected capacity change from 0 to 64
[   91.083848][ T4368] usb 3-1: Using ep0 maxpacket: 8
[   91.095261][ T4368] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[   91.115141][ T4368] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.131536][ T4368] usb 3-1: config 0 has no interface number 0
[   91.148553][ T4368] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[   91.171011][ T4368] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7
[   91.191754][ T4368] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[   91.212573][ T4368] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   91.242466][ T4368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.274982][ T4368] usb 3-1: config 0 descriptor??
[   91.314062][ T4368] ldusb 3-1:0.55: Interrupt in endpoint not found
[   91.496502][ T4539] tmpfs: Unknown parameter 'usrquota'
[   91.513071][ T4346] usb 3-1: USB disconnect, device number 2
[   91.610697][ T4538] loop0: detected capacity change from 0 to 512
[   91.657857][ T4538] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   91.697672][ T4538] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   91.736008][ T4538] EXT4-fs (loop0): 1 truncate cleaned up
[   91.765450][ T4538] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   91.787953][ T4538] syz.0.41 (pid 4538) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   91.833129][ T4542] loop1: detected capacity change from 0 to 2048
[   91.913637][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   91.959420][ T4542] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   91.986969][ T4267] EXT4-fs (loop0): unmounting filesystem.
[   92.016893][ T4542] UDF-fs: Scanning with blocksize 512 failed
[   92.094621][ T4543] loop4: detected capacity change from 0 to 4096
[   92.115383][ T4542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.211580][   T27] audit: type=1800 audit(1769354368.075:2): pid=4542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.44" name="file1" dev="loop1" ino=818 res=0 errno=0
[   92.609591][ T4554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.47'.
[   93.038481][ T4551] loop0: detected capacity change from 0 to 4096
[   93.171363][ T4551] ntfs3: Unknown parameter 'windows_names'
[   93.398935][ T4492] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   93.671344][ T4543] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[   93.896071][   T27] audit: type=1804 audit(1769354369.755:3): pid=4543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.43" name="/newroot/11/file1/file1" dev="loop4" ino=33 res=1 errno=0
[   93.930682][   T27] audit: type=1804 audit(1769354369.785:4): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.43" name="/newroot/11/file1/file1" dev="loop4" ino=33 res=1 errno=0
[   94.029810][ T4548] loop3: detected capacity change from 0 to 32768
[   94.093167][ T4548] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.45 (4548)
[   94.148396][ T4548] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   94.183455][ T4548] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   94.216727][ T4548] BTRFS info (device loop3): turning on sync discard
[   94.238158][ T4548] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   94.270714][ T4548] BTRFS info (device loop3): use zstd compression, level 3
[   94.313020][ T4548] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   94.350735][ T4548] BTRFS info (device loop3): trying to use backup root at mount time
[   94.375533][ T4548] BTRFS info (device loop3): enabling auto defrag
[   94.399403][ T4548] BTRFS info (device loop3): using free space tree
[   94.550624][ T4351] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   94.564960][ T4548] BTRFS error (device loop3): failed to load root extent
[   94.573276][ T4548] BTRFS warning (device loop3): try to load backup roots slot 1
[   94.582170][ T4351] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   94.596777][ T4548] BTRFS warning (device loop3): couldn't read tree root
[   94.604216][ T4548] BTRFS warning (device loop3): try to load backup roots slot 2
[   94.617369][ T4548] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[   94.629403][ T4548] BTRFS warning (device loop3): couldn't read tree root
[   94.636510][ T4548] BTRFS warning (device loop3): try to load backup roots slot 3
[   94.674905][ T4548] BTRFS info (device loop3): enabling ssd optimizations
[   94.699473][ T4548] BTRFS info (device loop3): rebuilding free space tree
[   94.737709][ T4548] BTRFS info (device loop3): checking UUID tree
[   95.130990][ T4278] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.703067][ T4610] netlink: 16 bytes leftover after parsing attributes in process `syz.0.60'.
[   96.124079][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   96.132754][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   96.226145][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   96.426320][ T4436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4436)
[   96.936894][ T4644] loop4: detected capacity change from 0 to 128
[   97.774070][ T4645] loop3: detected capacity change from 0 to 32768
[   97.807810][ T4645] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.828398][ T4645] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   97.888486][ T4645] BTRFS info (device loop3): turning on sync discard
[   97.918379][ T4645] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   97.963952][ T4645] BTRFS info (device loop3): use zstd compression, level 3
[   98.010508][ T4645] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   98.046232][ T4645] BTRFS info (device loop3): trying to use backup root at mount time
[   98.073936][ T4645] BTRFS info (device loop3): enabling auto defrag
[   98.095435][ T4645] BTRFS info (device loop3): using free space tree
[   98.286006][ T4667] loop4: detected capacity change from 0 to 2048
[   98.387953][   T11] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   98.423587][ T4645] BTRFS error (device loop3): failed to load root extent
[   98.432953][ T4645] BTRFS warning (device loop3): try to load backup roots slot 1
[   98.477530][   T11] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   98.504740][ T4667] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[   98.512450][ T4645] BTRFS warning (device loop3): couldn't read tree root
[   98.512501][ T4645] BTRFS warning (device loop3): try to load backup roots slot 2
[   98.513034][ T4645] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[   98.551183][ T4682] device syzkaller0 entered promiscuous mode
[   98.615954][ T4645] BTRFS warning (device loop3): couldn't read tree root
[   98.654499][ T4645] BTRFS warning (device loop3): try to load backup roots slot 3
[   98.695447][ T4667] UDF-fs: Scanning with blocksize 512 failed
[   98.751079][ T4645] BTRFS info (device loop3): enabling ssd optimizations
[   98.770360][ T4645] BTRFS info (device loop3): rebuilding free space tree
[   98.824743][ T4667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.838373][ T4645] BTRFS info (device loop3): checking UUID tree
[   98.946325][   T27] audit: type=1800 audit(1769354374.805:5): pid=4667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.74" name="file1" dev="loop4" ino=818 res=0 errno=0
[   99.309107][ T4694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.77'.
[   99.657680][ T4693] Zero length message leads to an empty skb
[   99.988261][ T4278] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  100.060489][ T4270] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  100.508147][ T4707] loop1: detected capacity change from 0 to 32768
[  102.046923][ T4730] netlink: 204 bytes leftover after parsing attributes in process `syz.2.90'.
[  102.276378][ T4737] loop0: detected capacity change from 0 to 1024
[  102.383465][ T4735] loop3: detected capacity change from 0 to 2048
[  102.532685][ T4735] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  102.564232][ T4735] UDF-fs: Scanning with blocksize 512 failed
[  102.607791][ T4735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.685004][   T27] audit: type=1800 audit(1769354378.545:6): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="file1" dev="loop3" ino=818 res=0 errno=0
[  102.721428][ T4630] hfsplus: b-tree write err: -5, ino 4
[  103.049873][ T4743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.93'.
[  104.938690][    C1] sched: RT throttling activated
[  105.396931][ T4766] loop8: detected capacity change from 0 to 7
[  105.408653][ T4766] Dev loop8: unable to read RDB block 7
[  105.436637][ T4766]  loop8: AHDI p1 p2
[  105.522354][ T4766] loop8: partition table partially beyond EOD, truncated
[  105.566692][ T4766] loop8: p1 start 1853095936 is beyond EOD, truncated
[  106.727726][ T4779] loop3: detected capacity change from 0 to 2048
[  106.795162][ T4779] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  106.818494][ T4784] netlink: 204 bytes leftover after parsing attributes in process `syz.1.105'.
[  106.836641][ T4779] UDF-fs: Scanning with blocksize 512 failed
[  106.881486][ T4779] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.910341][ T4785] loop4: detected capacity change from 0 to 1024
[  106.995137][ T4785] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  107.177013][ T4785] hfsplus: bad catalog entry type
[  107.234310][ T4789] loop3: detected capacity change from 0 to 512
[  107.315124][ T4789] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  107.428786][ T4789] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  107.484564][ T4789] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.110: Corrupt directory, running e2fsck is recommended
[  108.208857][ T4789] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  108.217285][ T4789] EXT4-fs error (device loop3): ext4_iget_extra_inode:4756: inode #15: comm syz.3.110: corrupted in-inode xattr
[  108.374254][ T4789] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.110: couldn't read orphan inode 15 (err -117)
[  108.460811][ T4789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  108.501494][ T4789] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  108.558337][ T4789] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  108.598794][ T4789] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.110: Corrupt directory, running e2fsck is recommended
[  108.655500][ T4803] device macvtap1 entered promiscuous mode
[  108.662621][ T4804] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  108.690227][ T4803] device dummy0 entered promiscuous mode
[  108.730607][ T4803] team0: Device macvtap1 failed to register rx_handler
[  108.751304][ T4803] device dummy0 left promiscuous mode
[  108.794353][ T4804] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  108.876712][ T4804] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.110: Corrupt directory, running e2fsck is recommended
[  108.941285][ T4789] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  108.994274][ T4789] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it
[  109.056650][ T4789] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.110: Corrupt directory, running e2fsck is recommended
[  109.096027][ T4805] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  109.396317][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  109.487951][ T4814] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  110.750165][ T4825] loop8: detected capacity change from 0 to 7
[  110.783308][ T4826] netlink: 204 bytes leftover after parsing attributes in process `syz.0.121'.
[  110.803373][ T4825] Dev loop8: unable to read RDB block 7
[  110.820240][ T4825]  loop8: AHDI p1 p2
[  110.855537][ T4828] loop2: detected capacity change from 0 to 2048
[  110.876250][ T4825] loop8: partition table partially beyond EOD, truncated
[  110.902714][ T4825] loop8: p1 start 1853095936 is beyond EOD, truncated
[  110.973214][ T4828] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  111.016279][ T4828] UDF-fs: Scanning with blocksize 512 failed
[  111.085767][ T4828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.434270][ T4843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.123'.
[  113.496258][ T4857] loop1: detected capacity change from 0 to 512
[  113.536122][ T4857] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  113.802783][ T4857] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  114.059677][ T4857] EXT4-fs (loop1): 1 truncate cleaned up
[  114.231278][ T4857] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  114.829432][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.838574][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  114.848703][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  114.858694][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  114.868701][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  114.877697][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[  115.014434][ T4869] netlink: 204 bytes leftover after parsing attributes in process `syz.4.135'.
[  115.103173][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  116.260389][ T4882] loop1: detected capacity change from 0 to 2048
[  116.290436][ T4882] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  116.360717][ T4882] UDF-fs: Scanning with blocksize 512 failed
[  116.398947][ T4703] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  116.478314][ T4882] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.378867][ T4703] usb 3-1: Using ep0 maxpacket: 16
[  117.389609][ T4703] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  117.397893][ T4703] usb 3-1: config 0 has no interface number 0
[  117.418382][ T4703] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  117.634040][ T4703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.642946][ T4703] usb 3-1: Product: syz
[  117.647184][ T4703] usb 3-1: Manufacturer: syz
[  117.652202][ T4703] usb 3-1: SerialNumber: syz
[  117.663016][ T4703] usb 3-1: config 0 descriptor??
[  117.670325][ T4703] hub 3-1:0.132: bad descriptor, ignoring hub
[  117.676513][ T4703] hub: probe of 3-1:0.132 failed with error -5
[  117.686637][ T4703] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input6
[  117.786652][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'.
[  118.518299][ T4901] loop4: detected capacity change from 0 to 64
[  118.724291][ T4903] loop0: detected capacity change from 0 to 1024
[  118.745375][ T4906] device syzkaller0 entered promiscuous mode
[  118.814941][ T4903] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  119.393183][ T4912] loop8: detected capacity change from 0 to 7
[  119.464816][ T4912] Dev loop8: unable to read RDB block 7
[  119.474920][ T4912]  loop8: unable to read partition table
[  119.545065][ T4912] loop8: partition table beyond EOD, truncated
[  119.615118][ T4912] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  119.862450][ T4914] loop3: detected capacity change from 0 to 8192
[  119.946427][   T27] audit: type=1800 audit(1769354395.805:7): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.146" name="file2" dev="loop3" ino=1048596 res=0 errno=0
[  120.213193][ T4914] syz.3.146: attempt to access beyond end of device
[  120.213193][ T4914] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  120.245382][ T4918] loop1: detected capacity change from 0 to 4096
[  120.250329][ T4914] Buffer I/O error on dev loop3, logical block 57847, async page read
[  120.278569][ T4925] loop0: detected capacity change from 0 to 2048
[  120.318269][ T4918] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  120.397523][ T4925] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  120.446445][ T4925] UDF-fs: Scanning with blocksize 512 failed
[  120.494187][ T4914] syz.3.146: attempt to access beyond end of device
[  120.494187][ T4914] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  120.619080][ T4925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.749081][ T4914] Buffer I/O error on dev loop3, logical block 57847, async page read
[  120.757421][ T4914] syz.3.146: attempt to access beyond end of device
[  120.757421][ T4914] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  122.242508][ T4914] Buffer I/O error on dev loop3, logical block 57847, async page read
[  123.761682][ T4944] loop2: detected capacity change from 0 to 1024
[  123.843580][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'.
[  124.394610][ T4944] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  124.629222][ T4948] netlink: 204 bytes leftover after parsing attributes in process `syz.1.157'.
[  125.038862][ T4612] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  125.098185][ T4960] loop8: detected capacity change from 0 to 7
[  125.150030][ T4960] Dev loop8: unable to read RDB block 7
[  125.188966][ T4960]  loop8: unable to read partition table
[  125.233104][ T4960] loop8: partition table beyond EOD, truncated
[  125.248841][ T4612] usb 1-1: Using ep0 maxpacket: 16
[  125.256880][ T4612] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  125.288897][ T4960] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  125.298954][ T4612] usb 1-1: config 0 has no interface number 0
[  125.328587][ T4612] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  125.368540][ T4612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.415789][ T4612] usb 1-1: Product: syz
[  125.434137][ T4612] usb 1-1: Manufacturer: syz
[  125.446615][ T4612] usb 1-1: SerialNumber: syz
[  125.457961][ T4612] usb 1-1: config 0 descriptor??
[  125.481365][ T4612] hub 1-1:0.132: bad descriptor, ignoring hub
[  125.499009][ T4612] hub: probe of 1-1:0.132 failed with error -5
[  125.523630][ T4612] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input7
[  126.190326][ T4703] usb 3-1: USB disconnect, device number 3
[  128.409320][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'.
[  128.536296][ T4998] loop8: detected capacity change from 0 to 7
[  128.548057][ T4436] Dev loop8: unable to read RDB block 7
[  128.559711][ T4436]  loop8: unable to read partition table
[  128.567885][ T4436] loop8: partition table beyond EOD, truncated
[  128.591112][ T4998] Dev loop8: unable to read RDB block 7
[  128.616195][ T4998]  loop8: unable to read partition table
[  128.633464][ T4998] loop8: partition table beyond EOD, truncated
[  128.665408][ T4998] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  130.619001][ T4512] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  130.814741][ T4512] usb 5-1: Using ep0 maxpacket: 16
[  130.836511][ T4512] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  130.869062][ T4512] usb 5-1: config 0 has no interface number 0
[  130.904498][ T4512] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  130.929528][ T4512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.957961][ T4512] usb 5-1: Product: syz
[  130.965716][ T5031] netlink: 204 bytes leftover after parsing attributes in process `syz.0.190'.
[  130.969048][ T4512] usb 5-1: Manufacturer: syz
[  130.985444][ T5029] loop1: detected capacity change from 0 to 1024
[  130.998818][ T4512] usb 5-1: SerialNumber: syz
[  131.029921][ T4512] usb 5-1: config 0 descriptor??
[  131.041380][ T4512] hub 5-1:0.132: bad descriptor, ignoring hub
[  131.074517][ T4512] hub: probe of 5-1:0.132 failed with error -5
[  131.119628][ T4512] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input8
[  131.180835][ T5029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  131.461794][ T4510] usb 1-1: USB disconnect, device number 2
[  132.861807][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  132.868613][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  133.020423][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  134.252087][ T5086] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  137.084542][ T5103] device syzkaller0 entered promiscuous mode
[  137.168591][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.214'.
[  137.557878][ T5122] netlink: 204 bytes leftover after parsing attributes in process `syz.0.217'.
[  138.483601][   T26] usb 5-1: USB disconnect, device number 2
[  138.785185][ T5143] loop4: detected capacity change from 0 to 1024
[  138.826710][ T5143] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  140.350839][ T5163] netlink: 204 bytes leftover after parsing attributes in process `syz.1.233'.
[  141.280227][ T5180] loop4: detected capacity change from 0 to 1024
[  141.386695][ T5180] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  141.402836][ T5182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  141.414961][ T5187] loop8: detected capacity change from 0 to 7
[  141.438925][ T5187] Dev loop8: unable to read RDB block 7
[  141.444572][ T5187]  loop8: unable to read partition table
[  141.515290][ T5187] loop8: partition table beyond EOD, truncated
[  141.549050][ T5187] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  141.831550][ T5195] capability: warning: `syz.0.245' uses 32-bit capabilities (legacy support in use)
[  141.866793][ T5195] program syz.0.245 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  142.251934][ T5200] device syzkaller0 entered promiscuous mode
[  143.645150][ T5228] loop1: detected capacity change from 0 to 1024
[  143.660235][ T5226] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  143.761940][ T5228] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  144.628246][ T5232] loop8: detected capacity change from 0 to 7
[  144.654418][ T4436] Dev loop8: unable to read RDB block 7
[  144.660763][ T4436]  loop8: unable to read partition table
[  144.667306][ T4436] loop8: partition table beyond EOD, truncated
[  144.865485][ T5238] loop3: detected capacity change from 0 to 32768
[  144.887268][ T5238] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.258 (5238)
[  144.905362][ T5238] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.915693][ T5238] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  144.924516][ T5238] BTRFS info (device loop3): turning on sync discard
[  144.931311][ T5238] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  144.940846][ T5238] BTRFS info (device loop3): use zstd compression, level 3
[  144.948131][ T5238] BTRFS info (device loop3): turning off barriers
[  144.954780][ T5238] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  144.965499][ T5238] BTRFS info (device loop3): trying to use backup root at mount time
[  144.974359][ T5238] BTRFS info (device loop3): enabling auto defrag
[  144.981008][ T5238] BTRFS info (device loop3): using free space tree
[  144.996859][ T5232] Dev loop8: unable to read RDB block 7
[  145.008094][   T75] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  145.024457][ T5238] BTRFS error (device loop3): failed to load root extent
[  145.031668][ T5238] BTRFS warning (device loop3): try to load backup roots slot 1
[  145.039730][   T75] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  145.052987][ T5238] BTRFS warning (device loop3): couldn't read tree root
[  145.060043][ T5238] BTRFS warning (device loop3): try to load backup roots slot 2
[  145.062331][ T5232]  loop8: unable to read partition table
[  145.068898][ T5238] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  145.085535][ T5238] BTRFS warning (device loop3): couldn't read tree root
[  145.092602][ T5238] BTRFS warning (device loop3): try to load backup roots slot 3
[  145.109627][ T5238] BTRFS info (device loop3): enabling ssd optimizations
[  145.119219][ T5238] BTRFS info (device loop3): rebuilding free space tree
[  145.137796][ T5238] BTRFS info (device loop3): checking UUID tree
[  145.265706][ T5232] loop8: partition table beyond EOD, truncated
[  145.336850][ T5232] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  145.418467][ T4278] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  145.815080][ T5265] netlink: 204 bytes leftover after parsing attributes in process `syz.1.263'.
[  146.106422][ T5269] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  146.483569][ T5287] loop3: detected capacity change from 0 to 64
[  146.718264][   T27] audit: type=1800 audit(1769354422.575:8): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.269" name="file1" dev="loop3" ino=22 res=0 errno=0
[  146.738485][    C0] vkms_vblank_simulate: vblank timer overrun
[  146.900952][ T5290] MPTCP: addr_signal error, rm_addr=4
[  147.228337][ T5297] loop8: detected capacity change from 0 to 7
[  147.301223][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.273'.
[  147.320312][ T4436] Dev loop8: unable to read RDB block 7
[  147.350762][ T4436]  loop8: unable to read partition table
[  147.398886][ T4436] loop8: partition table beyond EOD, truncated
[  147.441623][ T5297] Dev loop8: unable to read RDB block 7
[  147.451927][ T5297]  loop8: unable to read partition table
[  147.474360][ T5297] loop8: partition table beyond EOD, truncated
[  147.502200][ T5297] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  147.780573][ T5304] loop0: detected capacity change from 0 to 2048
[  147.879117][ T5304] UDF-fs: bad mount option "gid=00000000000000060929" or missing value
[  148.442095][ T5319] loop3: detected capacity change from 0 to 1024
[  148.471753][ T5319] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  149.274604][ T5337] netlink: 'syz.1.288': attribute type 10 has an invalid length.
[  149.603939][ T5337] team0: Port device dummy0 added
[  149.665587][ T5340] netlink: 'syz.1.288': attribute type 10 has an invalid length.
[  149.844978][ T5340] team0: Port device dummy0 removed
[  149.916742][ T5340] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  150.266114][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'.
[  150.515876][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880557d8800: rx timeout, send abort
[  150.573036][ T5361] loop0: detected capacity change from 0 to 32768
[  150.599076][ T5361] 
[  150.599076][ T5361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.599076][ T5361] 
[  150.994104][ T5173] 
[  150.994104][ T5173]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.994104][ T5173] 
[  151.051784][ T5173] 
[  151.051784][ T5173]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.051784][ T5173] 
[  151.129079][ T5173] 
[  151.129079][ T5173]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.129079][ T5173] 
[  151.212827][  T108] 
[  151.212827][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.212827][  T108] 
[  151.269361][ T4267] 
[  151.269361][ T4267]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.269361][ T4267] 
[  151.271065][ T5363] loop3: detected capacity change from 0 to 1024
[  151.368771][ T4267] 
[  151.368771][ T4267]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  151.368771][ T4267] 
[  151.559027][ T5363] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  153.109240][ T5372] loop0: detected capacity change from 0 to 8192
[  153.267287][   T27] audit: type=1800 audit(1769354429.125:9): pid=5372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.298" name="file2" dev="loop0" ino=1048597 res=0 errno=0
[  153.293474][ T5372] syz.0.298: attempt to access beyond end of device
[  153.293474][ T5372] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  153.764628][ T5372] Buffer I/O error on dev loop0, logical block 57847, async page read
[  156.897044][ T5409] fuse: Bad value for 'rootmode'
[  157.382101][ T5414] netlink: 'syz.3.313': attribute type 10 has an invalid length.
[  157.717882][ T5414] team0: Port device dummy0 added
[  157.776101][ T5418] netlink: 'syz.3.313': attribute type 10 has an invalid length.
[  158.030170][ T5418] team0: Port device dummy0 removed
[  158.048417][ T5418] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  158.082727][ T5424] device syzkaller0 entered promiscuous mode
[  159.583801][ T5437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.321'.
[  160.207628][ T5448] loop3: detected capacity change from 0 to 2048
[  160.283286][ T5447] loop4: detected capacity change from 0 to 2048
[  160.294675][ T5453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'.
[  160.311465][ T5448] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.324141][ T5447] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  160.332762][ T5447] UDF-fs: Scanning with blocksize 512 failed
[  160.346548][ T5447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.780397][ T5458] device syzkaller0 entered promiscuous mode
[  161.360019][ T5464] loop1: detected capacity change from 0 to 32768
[  161.384837][ T5464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.330 (5464)
[  161.400886][ T5464] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  161.411310][ T5464] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  161.420074][ T5464] BTRFS info (device loop1): turning on sync discard
[  161.426824][ T5464] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  161.436381][ T5464] BTRFS info (device loop1): use zstd compression, level 3
[  161.443811][ T5464] BTRFS info (device loop1): turning off barriers
[  161.451951][ T5464] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  161.463603][ T5464] BTRFS info (device loop1): trying to use backup root at mount time
[  161.471880][ T5464] BTRFS info (device loop1): enabling auto defrag
[  161.478373][ T5464] BTRFS info (device loop1): using free space tree
[  161.966070][ T5477] device syzkaller0 entered promiscuous mode
[  162.025522][   T29] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  162.093465][ T5464] BTRFS error (device loop1): failed to load root extent
[  162.101482][ T5464] BTRFS warning (device loop1): try to load backup roots slot 1
[  162.118931][   T29] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  162.202210][ T5464] BTRFS warning (device loop1): couldn't read tree root
[  162.209357][ T5464] BTRFS warning (device loop1): try to load backup roots slot 2
[  162.217743][ T5464] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  162.229152][ T5464] BTRFS warning (device loop1): couldn't read tree root
[  162.236244][ T5464] BTRFS warning (device loop1): try to load backup roots slot 3
[  162.275517][ T5464] BTRFS info (device loop1): enabling ssd optimizations
[  162.283288][ T5464] BTRFS info (device loop1): rebuilding free space tree
[  162.301747][ T5464] BTRFS info (device loop1): checking UUID tree
[  162.601659][ T4279] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.715289][ T5495] loop3: detected capacity change from 0 to 256
[  164.161859][ T5495] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  164.689033][ T4618] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  164.728453][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'.
[  164.890600][ T4618] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.931866][ T4618] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  164.962503][ T4618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.993715][ T4618] usb 5-1: config 0 descriptor??
[  165.022099][ T4618] pwc: Askey VC010 type 2 USB webcam detected.
[  165.547466][ T4618] pwc: recv_control_msg error -32 req 02 val 2b00
[  165.583616][ T4618] pwc: recv_control_msg error -32 req 02 val 2700
[  165.652449][ T5529] Bluetooth: MGMT ver 1.22
[  166.366179][ T4618] pwc: recv_control_msg error -32 req 02 val 2c00
[  166.393839][ T4618] pwc: recv_control_msg error -32 req 04 val 1000
[  166.414774][ T4618] pwc: recv_control_msg error -32 req 04 val 1300
[  166.432784][ T4618] pwc: recv_control_msg error -32 req 04 val 1400
[  166.498867][ T4618] pwc: recv_control_msg error -32 req 02 val 2000
[  166.544509][ T4618] pwc: recv_control_msg error -32 req 02 val 2100
[  166.569690][ T4618] pwc: recv_control_msg error -32 req 04 val 1500
[  166.604367][ T5535] loop8: detected capacity change from 0 to 7
[  166.619253][ T4618] pwc: recv_control_msg error -32 req 02 val 2500
[  166.637302][ T4618] pwc: recv_control_msg error -32 req 02 val 2400
[  166.646515][ T4436] Dev loop8: unable to read RDB block 7
[  166.655453][ T4436]  loop8: unable to read partition table
[  166.662378][ T4618] pwc: recv_control_msg error -32 req 02 val 2600
[  166.680101][ T4436] loop8: partition table beyond EOD, truncated
[  166.690485][ T4618] pwc: recv_control_msg error -32 req 02 val 2900
[  166.720037][ T5535] Dev loop8: unable to read RDB block 7
[  166.727832][ T5535]  loop8: unable to read partition table
[  166.741073][ T4618] pwc: recv_control_msg error -32 req 02 val 2800
[  166.765220][ T5535] loop8: partition table beyond EOD, truncated
[  166.838958][ T5535] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  167.008324][ T4618] pwc: recv_control_msg error -71 req 04 val 1200
[  167.067879][ T4618] pwc: Registered as video103.
[  167.104015][ T4618] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  167.299410][ T4618] usb 5-1: USB disconnect, device number 3
[  168.700546][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  168.719022][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  168.737028][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  168.745001][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  168.753473][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  168.761510][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  168.853443][ T5556] loop1: detected capacity change from 0 to 512
[  168.904818][ T5556] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  169.051477][ T5556] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  169.073863][ T5556] EXT4-fs (loop1): 1 truncate cleaned up
[  169.080514][ T5556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  169.130678][ T5556] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1450: inode #12: block 7: comm syz.1.351: path /82/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=20, inode=2147483648, rec_len=0, size=60 fake=0
[  169.343452][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'.
[  169.382620][ T4279] EXT4-fs (loop1): unmounting filesystem.
[  170.567628][ T5571] loop1: detected capacity change from 0 to 65536
[  170.657091][ T5571] XFS (loop1): Mounting V5 Filesystem
[  170.778798][ T4270] Bluetooth: hci5: command 0x0409 tx timeout
[  170.886469][ T5571] XFS (loop1): Ending clean mount
[  170.923269][ T5550] chnl_net:caif_netlink_parms(): no params data found
[  171.120982][ T5586] loop4: detected capacity change from 0 to 256
[  171.148429][ T5588] loop8: detected capacity change from 0 to 7
[  171.181738][ T5588] Dev loop8: unable to read RDB block 7
[  171.204690][ T5586] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  171.221046][ T5588]  loop8: unable to read partition table
[  171.226922][ T5588] loop8: partition table beyond EOD, truncated
[  171.274764][ T5550] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.308867][ T5588] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  171.369776][ T5550] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.371243][ T4279] XFS (loop1): Unmounting Filesystem
[  171.440070][ T5550] device bridge_slave_0 entered promiscuous mode
[  171.860867][ T5550] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.932392][ T5550] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.991084][ T5550] device bridge_slave_1 entered promiscuous mode
[  172.442947][ T5550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.484181][ T5550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.748923][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.859916][ T4270] Bluetooth: hci5: command 0x041b tx timeout
[  172.914091][ T5550] team0: Port device team_slave_0 added
[  173.048115][ T5550] team0: Port device team_slave_1 added
[  173.191444][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.274330][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.709715][ T5550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.733771][ T5550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.785602][ T5622] loop4: detected capacity change from 0 to 8
[  174.846249][ T5622] SQUASHFS error: lzo decompression failed, data probably corrupt
[  174.855044][ T5622] SQUASHFS error: Failed to read block 0x0: -5
[  174.863861][ T5622] SQUASHFS error: lzo decompression failed, data probably corrupt
[  174.872702][ T5622] SQUASHFS error: Failed to read block 0x0: -5
[  174.880009][   T27] audit: type=1800 audit(1769354450.745:10): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.365" name="file2" dev="loop4" ino=3 res=0 errno=0
[  174.935168][ T5550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.946624][ T4270] Bluetooth: hci5: command 0x040f tx timeout
[  175.203873][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.332465][ T5550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.345181][ T5550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.512631][ T5550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.708875][ T5262] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  175.752507][ T5550] device hsr_slave_0 entered promiscuous mode
[  175.778055][ T5550] device hsr_slave_1 entered promiscuous mode
[  175.795600][ T5550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.813157][ T5627] loop8: detected capacity change from 0 to 7
[  175.822086][ T5550] Cannot create hsr debugfs directory
[  175.864394][ T4436] Dev loop8: unable to read RDB block 7
[  175.872110][ T4436]  loop8: unable to read partition table
[  175.905400][ T4436] loop8: partition table beyond EOD, truncated
[  175.921949][ T5627] Dev loop8: unable to read RDB block 7
[  175.942042][ T5262] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  175.958837][ T5262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.976051][ T5627]  loop8: unable to read partition table
[  175.988552][ T5262] usb 4-1: config 0 descriptor??
[  176.006790][ T5262] gspca_main: cpia1-2.14.0 probing 0813:0001
[  176.023779][ T5627] loop8: partition table beyond EOD, truncated
[  176.151417][ T5627] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  176.910036][ T5262] gspca_cpia1: usb_control_msg 05, error -71
[  176.925591][ T5262] gspca_cpia1: usb_control_msg 01, error -71
[  176.939498][ T5262] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  176.967904][ T5262] usb 4-1: USB disconnect, device number 3
[  177.039493][ T4270] Bluetooth: hci5: command 0x0419 tx timeout
[  181.285225][ T5550] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  181.545078][ T5550] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  181.653171][ T5550] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  181.660263][    T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  181.678854][ T4512] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  181.705777][ T5550] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  181.869179][    T7] usb 5-1: Using ep0 maxpacket: 32
[  181.877524][    T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  181.890088][ T4512] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  181.926080][ T4512] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  181.952205][    T7] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  181.964754][ T4512] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  181.979350][    T7] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  182.000500][ T4512] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.015299][    T7] usb 5-1: Product: syz
[  182.028714][    T7] usb 5-1: Manufacturer: syz
[  182.046628][ T5656] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  182.055735][    T7] usb 5-1: SerialNumber: syz
[  182.077046][    T7] usb 5-1: config 0 descriptor??
[  182.111899][ T5653] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  182.144595][    T7] hub 5-1:0.0: bad descriptor, ignoring hub
[  182.167592][    T7] hub: probe of 5-1:0.0 failed with error -5
[  182.382811][   T27] audit: type=1326 audit(1769354458.245:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5655 comm="syz.1.375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f103d99acb9 code=0x0
[  182.654297][ T4512] usb 2-1: USB disconnect, device number 2
[  183.148022][ T5550] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.807417][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  183.859511][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  183.891368][ T5550] 8021q: adding VLAN 0 to HW filter on device team0
[  184.032274][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  184.057940][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  184.079947][ T4696] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.087138][ T4696] bridge0: port 1(bridge_slave_0) entered forwarding state
[  184.144295][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  184.185159][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  184.217143][ T4696] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.225682][ T4696] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.748982][ T4702] usb 5-1: USB disconnect, device number 4
[  184.865085][ T5708] loop8: detected capacity change from 0 to 7
[  184.915369][ T5708] Dev loop8: unable to read RDB block 7
[  184.922991][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  184.929345][ T5708]  loop8: unable to read partition table
[  184.949294][ T5708] loop8: partition table beyond EOD, truncated
[  184.956416][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  184.972096][ T5708] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  185.009988][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  185.118750][ T5262] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  185.349215][ T5262] usb 2-1: Using ep0 maxpacket: 32
[  185.364231][ T5262] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.383892][ T5262] usb 2-1: config 0 has no interfaces?
[  185.424143][ T5262] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  185.443391][ T5262] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  185.458476][ T5701] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.474641][ T5262] usb 2-1: Product: syz
[  185.484915][ T5262] usb 2-1: Manufacturer: syz
[  185.499647][ T5262] usb 2-1: config 0 descriptor??
[  185.622437][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  185.648605][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  185.671570][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  185.686248][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  185.696590][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  186.038474][ T5701] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.116094][ T5550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  186.132760][ T5550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  186.183292][   T11] device hsr_slave_0 left promiscuous mode
[  186.198352][   T11] device hsr_slave_1 left promiscuous mode
[  186.241195][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.265756][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.284223][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.296510][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.331636][   T11] device bridge_slave_1 left promiscuous mode
[  186.350277][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.394787][   T11] device bridge_slave_0 left promiscuous mode
[  186.408010][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.510431][   T11] device veth1_macvtap left promiscuous mode
[  186.519388][   T11] device veth0_macvtap left promiscuous mode
[  186.528059][   T11] device veth1_vlan left promiscuous mode
[  186.545709][   T11] device veth0_vlan left promiscuous mode
[  187.107550][ T4270] Bluetooth: hci1: Entering manufacturer mode failed (-110)
[  187.109143][ T4284] Bluetooth: hci1: command 0xfc11 tx timeout
[  187.603125][ T5722] loop3: detected capacity change from 0 to 32768
[  187.654371][ T5722] XFS (loop3): Mounting V5 Filesystem
[  187.730693][ T5722] XFS (loop3): Ending clean mount
[  187.749725][ T5722] XFS (loop3): Quotacheck needed: Please wait.
[  187.828967][ T5722] XFS (loop3): Quotacheck: Done.
[  187.829476][ T5262] usb 2-1: USB disconnect, device number 3
[  187.875449][   T27] audit: type=1800 audit(1769354463.735:12): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.387" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  187.986183][ T5732] capability: warning: `syz.1.388' uses deprecated v2 capabilities in a way that may be insecure
[  188.024035][ T4278] XFS (loop3): Unmounting Filesystem
[  188.441988][   T11] team0 (unregistering): Port device team_slave_1 removed
[  188.606772][   T11] team0 (unregistering): Port device team_slave_0 removed
[  188.627226][ T5734] fuse: Unknown parameter 'user_id00000000000000000000'
[  188.685748][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.865105][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.234352][   T11] bond0 (unregistering): Released all slaves
[  189.323828][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.332823][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.343597][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.352777][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.431967][ T5701] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.476134][ T5732] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 41471 - 0
[  189.488794][ T5732] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 41471 - 0
[  189.497699][ T5732] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 41471 - 0
[  189.528832][ T5732] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 41471 - 0
[  189.537801][ T5732] device geneve2 entered promiscuous mode
[  189.571604][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.810694][ T5701] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.039532][ T4512] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  190.071182][ T5701] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.097132][ T5701] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.148241][ T5701] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.158901][ T4349] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  190.196265][ T5701] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.250629][ T4512] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  190.269006][ T4512] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  190.304347][ T4512] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  190.341597][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.350915][ T4512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.359935][ T4349] usb 2-1: Using ep0 maxpacket: 32
[  190.360644][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.373041][ T4349] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  190.405141][ T5745] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  190.433052][ T5550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.440451][ T4349] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  190.483907][ T4349] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  190.531862][ T4349] usb 2-1: Product: syz
[  190.546329][ T4349] usb 2-1: Manufacturer: syz
[  190.564991][ T4349] usb 2-1: SerialNumber: syz
[  190.619574][ T4349] usb 2-1: config 0 descriptor??
[  190.625688][ T5751] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  190.676961][ T4349] hub 2-1:0.0: bad descriptor, ignoring hub
[  190.690342][ T4349] hub: probe of 2-1:0.0 failed with error -5
[  190.743706][ T5758] loop4: detected capacity change from 0 to 4096
[  190.758923][   T27] audit: type=1326 audit(1769354466.605:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5744 comm="syz.3.392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x0
[  190.846521][   T26] usb 4-1: USB disconnect, device number 4
[  191.516376][ T5758] EXT4-fs: Ignoring removed nomblk_io_submit option
[  191.574228][ T5758] EXT4-fs (loop4): Test dummy encryption mode enabled
[  191.715256][ T5758] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  191.746187][ T5758] System zones: 0-5
[  191.856236][ T5758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  192.052711][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.091143][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  192.219595][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  192.230109][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.261751][ T5550] device veth0_vlan entered promiscuous mode
[  192.269866][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.294828][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.316152][ T5792] fuse: Unknown parameter 'user_id00000000000000000000'
[  192.332922][ T5550] device veth1_vlan entered promiscuous mode
[  192.448801][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  192.463983][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  192.487707][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  192.510109][ T4696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  192.530533][ T5550] device veth0_macvtap entered promiscuous mode
[  192.542843][ T5550] device veth1_macvtap entered promiscuous mode
[  192.582603][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.607053][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.627632][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.648716][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.673179][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.715447][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.729125][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.768780][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.791055][ T5550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.799119][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  192.827862][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  192.844227][ T4266] EXT4-fs (loop4): unmounting filesystem.
[  192.871586][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.939673][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  192.961843][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.984356][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.019875][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.041119][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.068791][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.129572][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.169418][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.208686][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.209447][ T5262] usb 2-1: USB disconnect, device number 4
[  193.306201][ T5550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.349675][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  193.365447][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  193.569690][ T5809] loop4: detected capacity change from 0 to 32768
[  193.597056][ T5550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.648954][ T5550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.745550][ T5809] XFS (loop4): Mounting V5 Filesystem
[  193.794962][ T5550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.804079][ T5550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.949761][ T5809] XFS (loop4): Ending clean mount
[  193.961573][ T5809] XFS (loop4): Quotacheck needed: Please wait.
[  194.126343][ T5809] XFS (loop4): Quotacheck: Done.
[  194.263050][ T4822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.292782][ T4822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.304441][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  194.310856][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  194.369918][   T27] audit: type=1800 audit(1769354470.235:14): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.400" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  194.410222][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  194.537346][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.560086][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.624154][ T4822] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  194.687818][ T4266] XFS (loop4): Unmounting Filesystem
[  195.338869][   T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  195.442596][ T5853] netlink: 80 bytes leftover after parsing attributes in process `syz.1.422'.
[  195.476649][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'.
[  195.520752][   T27] audit: type=1326 audit(1769354471.385:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5854 comm="syz.2.412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e4559acb9 code=0x0
[  195.542643][   T26] usb 4-1: Using ep0 maxpacket: 16
[  195.551207][   T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.587511][   T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.615432][   T26] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  195.640773][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.664934][   T26] usb 4-1: Product: syz
[  195.678778][   T26] usb 4-1: Manufacturer: syz
[  195.691416][   T26] usb 4-1: SerialNumber: syz
[  195.921313][   T26] usb 4-1: 0:2 : does not exist
[  195.934004][   T26] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  196.036960][   T26] usb 4-1: USB disconnect, device number 5
[  196.344667][ T5863] program syz.5.414 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  197.185119][ T5867] fuse: Bad value for 'fd'
[  197.885727][ T5881] loop8: detected capacity change from 0 to 7
[  197.904248][ T4436] Dev loop8: unable to read RDB block 7
[  197.912549][ T4436]  loop8: unable to read partition table
[  197.939004][ T4436] loop8: partition table beyond EOD, truncated
[  197.980543][ T5881] Dev loop8: unable to read RDB block 7
[  197.986390][ T5881]  loop8: unable to read partition table
[  198.034721][ T5881] loop8: partition table beyond EOD, truncated
[  198.094167][ T5881] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  198.219839][ T5886] loop5: detected capacity change from 0 to 4096
[  198.431592][ T5886] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  200.134493][ T5914] fuse: Bad value for 'fd'
[  200.506747][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.433'.
[  200.568785][ T4702] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  200.768813][ T4702] usb 4-1: Using ep0 maxpacket: 32
[  200.794094][ T4702] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  200.841180][ T4702] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  200.873912][ T4702] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  200.898753][ T4702] usb 4-1: Product: syz
[  200.903191][ T4702] usb 4-1: Manufacturer: syz
[  200.908014][ T4702] usb 4-1: SerialNumber: syz
[  200.983649][ T4702] usb 4-1: config 0 descriptor??
[  201.028308][ T5919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  201.052125][ T4702] hub 4-1:0.0: bad descriptor, ignoring hub
[  201.058299][ T4702] hub: probe of 4-1:0.0 failed with error -5
[  202.006913][ T4270] Bluetooth: hci2: command 0x0406 tx timeout
[  202.018701][ T4284] Bluetooth: hci0: command 0x0406 tx timeout
[  202.025804][ T4285] Bluetooth: hci4: command 0x0406 tx timeout
[  202.025813][ T4275] Bluetooth: hci3: command 0x0406 tx timeout
[  202.568408][ T5953] loop5: detected capacity change from 0 to 32768
[  202.632863][ T5953] XFS (loop5): Mounting V5 Filesystem
[  202.769479][ T5953] XFS (loop5): Ending clean mount
[  202.778536][ T5953] XFS (loop5): Quotacheck needed: Please wait.
[  202.859070][ T5953] XFS (loop5): Quotacheck: Done.
[  202.900804][ T5966] fuse: Bad value for 'fd'
[  202.959025][ T5262] usb 4-1: USB disconnect, device number 6
[  202.991471][ T5550] XFS (loop5): Unmounting Filesystem
[  203.859586][ T4702] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  204.054920][ T4702] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  204.095221][ T4702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.138840][ T4702] usb 6-1: Product: syz
[  204.143097][ T4702] usb 6-1: Manufacturer: syz
[  204.178392][ T4702] usb 6-1: SerialNumber: syz
[  204.205366][ T4702] usb 6-1: config 0 descriptor??
[  204.477850][ T5999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.450'.
[  204.525081][ T4702] usb-storage 6-1:0.0: USB Mass Storage device detected
[  205.283665][ T4702] usb 6-1: USB disconnect, device number 2
[  205.549303][ T6011] fuse: Unknown parameter '00000000000000000000003'
[  205.738912][    T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  206.062856][ T6019] loop5: detected capacity change from 0 to 32768
[  206.091330][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.850594][    T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  206.938831][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.976012][    T7] usb 2-1: config 0 descriptor??
[  207.005665][ T6019] XFS (loop5): Mounting V5 Filesystem
[  207.031517][ T6029] loop3: detected capacity change from 0 to 128
[  207.136284][ T6019] XFS (loop5): Ending clean mount
[  207.143831][ T6019] XFS (loop5): Quotacheck needed: Please wait.
[  207.325589][ T6019] XFS (loop5): Quotacheck: Done.
[  207.336013][   T27] audit: type=1800 audit(1769354483.195:16): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.458" name="file1" dev="loop5" ino=4422 res=0 errno=0
[  207.527891][    T7] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor
[  207.554264][ T5550] XFS (loop5): Unmounting Filesystem
[  207.668954][    T7] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0001/input/input10
[  207.778395][ T6005] loop4: detected capacity change from 0 to 40427
[  207.851572][ T6005] F2FS-fs (loop4): invalid crc value
[  207.895642][ T6005] F2FS-fs (loop4): Found nat_bits in checkpoint
[  208.184979][ T6005] F2FS-fs (loop4): Start checkpoint disabled!
[  208.346546][ T6005] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  208.449159][    T7] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  208.922539][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.463'.
[  210.986826][    T7] usb 2-1: USB disconnect, device number 5
[  211.549447][   T27] audit: type=1326 audit(1769354487.415:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  211.552480][ T6075] fuse: Unknown parameter '00000000000000000000003'
[  211.646017][   T27] audit: type=1326 audit(1769354487.415:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  211.753292][ T6083] loop8: detected capacity change from 0 to 7
[  211.783873][ T4436] Dev loop8: unable to read RDB block 7
[  211.789731][ T4436]  loop8: unable to read partition table
[  211.796114][   T27] audit: type=1326 audit(1769354487.455:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  211.834937][ T4436] loop8: partition table beyond EOD, truncated
[  211.862812][ T6083] Dev loop8: unable to read RDB block 7
[  211.877859][ T6083]  loop8: unable to read partition table
[  211.902618][   T27] audit: type=1326 audit(1769354487.455:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  211.925381][ T6083] loop8: partition table beyond EOD, truncated
[  211.953005][ T6080] loop3: detected capacity change from 0 to 4096
[  211.956128][ T6083] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  212.061426][ T6080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  212.128915][   T27] audit: type=1326 audit(1769354487.455:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  212.233229][ T6077] 9pnet_fd: Insufficient options for proto=fd
[  212.319456][   T27] audit: type=1326 audit(1769354487.455:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  212.708909][   T27] audit: type=1326 audit(1769354487.455:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  212.821619][   T27] audit: type=1326 audit(1769354487.455:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  212.881339][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  212.901317][ T6092] device syzkaller0 entered promiscuous mode
[  213.779057][   T27] audit: type=1326 audit(1769354487.465:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  214.124277][   T27] audit: type=1326 audit(1769354487.465:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  214.228782][   T27] audit: type=1326 audit(1769354487.465:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  214.296363][   T27] audit: type=1326 audit(1769354487.465:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  214.422071][   T27] audit: type=1326 audit(1769354487.585:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  214.476188][   T27] audit: type=1326 audit(1769354487.585:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  214.593493][   T27] audit: type=1326 audit(1769354487.975:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  214.683958][   T27] audit: type=1326 audit(1769354488.035:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60839acb9 code=0x7ffc0000
[  215.575310][ T5262] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  215.768818][ T5262] usb 2-1: Using ep0 maxpacket: 32
[  215.779315][ T5262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.817704][ T5262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.875625][ T5262] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  215.926174][ T5262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.964666][ T5262] usb 2-1: config 0 descriptor??
[  216.237924][ T6138] fuse: Unknown parameter '00000000000000000000003'
[  216.335708][ T6136] loop4: detected capacity change from 0 to 4096
[  216.387445][ T6136] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  216.473719][ T6136] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  216.975274][ T5262] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  218.628885][    T7] usb 2-1: reset high-speed USB device number 6 using dummy_hcd
[  219.551801][ T4349] usb 2-1: USB disconnect, device number 6
[  220.882857][ T6168] fuse: Unknown parameter '00000000000000000000003'
[  221.559318][ T6148] netlink: 'syz.4.490': attribute type 10 has an invalid length.
[  221.612543][ T6148] team0: Port device dummy0 added
[  221.648722][ T6149] netlink: 'syz.4.490': attribute type 10 has an invalid length.
[  221.746885][ T6149] team0: Port device dummy0 removed
[  221.763667][ T6149] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  221.793558][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'.
[  221.799812][ T6180] loop5: detected capacity change from 0 to 8
[  221.833317][ T6180] SQUASHFS error: Failed to read block 0x4de: -5
[  221.840236][ T6180] SQUASHFS error: Failed to read block 0x4de: -5
[  221.846966][   T27] kauditd_printk_skb: 18 callbacks suppressed
[  221.846982][   T27] audit: type=1800 audit(1769354497.705:51): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.505" name="file1" dev="loop5" ino=5 res=0 errno=0
[  221.911640][ T6180] SQUASHFS error: Failed to read block 0x6e6: -5
[  221.918530][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  221.926767][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  221.934089][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  221.942479][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  221.949947][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  221.956858][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  221.963485][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  221.970844][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  221.978229][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  221.985504][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  221.992996][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.000379][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.006921][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.014341][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.021242][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.027824][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.035279][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.042278][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.048535][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.056169][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.063115][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.069704][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.077565][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.084753][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.091043][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.098828][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.105688][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.112396][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.119890][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.126863][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.133337][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.140886][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.148010][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.154480][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.161833][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.168857][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.175253][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.184905][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.192178][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.198525][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.205928][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.212960][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.219277][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.226670][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.233526][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.239897][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.247218][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.254086][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.260333][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.267832][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.274709][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.283170][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.290571][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.297474][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.304021][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.311554][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.318418][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.324896][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.332271][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.339183][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.345597][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.353030][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.359885][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.366106][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.373452][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.380935][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.387540][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.395148][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.402053][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.408321][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.415784][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.422840][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.429467][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.437039][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.444024][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.450679][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.458403][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.465518][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.471901][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.479408][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.486771][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.493210][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.500729][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.507713][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.514070][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.521463][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.528407][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.534930][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.542684][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.549825][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.556131][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.563478][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.570625][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.577047][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.584856][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.592317][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.598548][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.606250][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.613227][ T6180] SQUASHFS error: Failed to read block 0x0: -5
[  222.619900][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.627214][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.634848][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.642581][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.649759][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.657078][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.664153][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.671812][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.733674][ T6182] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.777843][ T6182] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.818817][ T6182] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.893465][ T6182] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.941440][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.949784][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.968121][ T6182] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  222.986150][ T6182] SQUASHFS error: read_indexes: reading block [6e4:0]
[  222.995628][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  223.003821][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  223.011219][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  223.018560][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  223.025535][ T6180] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  223.033035][ T6180] SQUASHFS error: read_indexes: reading block [6e4:0]
[  223.049772][ T6182] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  223.088825][ T6182] SQUASHFS error: read_indexes: reading block [6e4:0]
[  223.180415][ T6194] fuse: Unknown parameter '00000000000000000000003'
[  223.222350][ T6189] MPTCP: addr_signal error, rm_addr=4
[  223.453889][ T6196] loop4: detected capacity change from 0 to 32768
[  223.476702][ T6196] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.512 (6196)
[  223.544464][ T6196] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  223.554950][ T6196] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  223.564469][ T6196] BTRFS info (device loop4): turning on sync discard
[  223.571503][ T6196] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  223.581074][ T6196] BTRFS info (device loop4): use zstd compression, level 3
[  223.588390][ T6196] BTRFS info (device loop4): turning off barriers
[  223.594939][ T6196] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  223.606196][ T6196] BTRFS info (device loop4): trying to use backup root at mount time
[  223.615232][ T6196] BTRFS info (device loop4): enabling auto defrag
[  223.621850][ T6196] BTRFS info (device loop4): using free space tree
[  223.907060][   T75] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  223.928786][ T6196] BTRFS error (device loop4): failed to load root extent
[  223.935995][ T6196] BTRFS warning (device loop4): try to load backup roots slot 1
[  223.945386][   T29] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  224.031068][ T6196] BTRFS warning (device loop4): couldn't read tree root
[  224.038274][ T6196] BTRFS warning (device loop4): try to load backup roots slot 2
[  224.046717][ T6196] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  224.058732][ T6196] BTRFS warning (device loop4): couldn't read tree root
[  224.065753][ T6196] BTRFS warning (device loop4): try to load backup roots slot 3
[  224.117040][ T6196] BTRFS info (device loop4): enabling ssd optimizations
[  224.133985][ T6196] BTRFS info (device loop4): rebuilding free space tree
[  224.154754][ T6196] BTRFS info (device loop4): checking UUID tree
[  224.389927][ T4266] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  224.506948][ T6242] netlink: 'syz.3.519': attribute type 10 has an invalid length.
[  224.592318][ T6200] netlink: 'syz.1.513': attribute type 72 has an invalid length.
[  224.656115][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.1.513'.
[  224.895758][ T6242] bond0: (slave dummy0): Releasing backup interface
[  224.967990][ T6242] team0: Port device dummy0 added
[  225.008804][ T6245] netlink: 'syz.3.519': attribute type 10 has an invalid length.
[  225.144564][ T6245] team0: Port device dummy0 removed
[  225.194602][ T6245] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  225.206861][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'.
[  225.538323][ T6262] loop3: detected capacity change from 0 to 512
[  225.589052][ T6264] fuse: Unknown parameter '00000000000000000000003'
[  225.596715][ T6262] EXT4-fs: Ignoring removed nomblk_io_submit option
[  225.731453][ T6262] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  225.763882][ T6262] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.013763][ T6262] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  226.077733][ T6262] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  226.215709][ T6262] EXT4-fs error (device loop3): ext4_acquire_dquot:6835: comm syz.3.524: Failed to acquire dquot type 1
[  226.669461][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  226.990502][ T6291] loop3: detected capacity change from 0 to 16
[  227.046668][ T6291] erofs: (device loop3): mounted with root inode @ nid 36.
[  227.095700][ T6293] netlink: 'syz.5.535': attribute type 10 has an invalid length.
[  227.211968][ T6293] team0: Port device dummy0 added
[  227.254270][ T6297] netlink: 'syz.5.535': attribute type 10 has an invalid length.
[  227.327085][ T6297] team0: Port device dummy0 removed
[  227.340109][ T6297] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  227.541094][ T6306] loop8: detected capacity change from 0 to 7
[  227.589569][ T6306] Dev loop8: unable to read RDB block 7
[  227.607272][ T6306]  loop8: unable to read partition table
[  227.624264][ T6306] loop8: partition table beyond EOD, truncated
[  227.648214][ T6306] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  228.833751][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'.
[  229.302607][ T6346] netlink: 'syz.5.551': attribute type 10 has an invalid length.
[  229.335475][ T6346] bond0: (slave dummy0): Releasing backup interface
[  229.354370][ T6346] team0: Port device dummy0 added
[  229.354873][ T6349] netlink: 'syz.5.551': attribute type 10 has an invalid length.
[  229.424275][ T6349] team0: Port device dummy0 removed
[  229.453469][ T6349] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  229.879339][ T6361] loop5: detected capacity change from 0 to 512
[  230.055843][ T6361] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  231.428090][ T6369] loop4: detected capacity change from 0 to 8
[  231.544574][ T6369] SQUASHFS error: Failed to read block 0x4de: -5
[  231.551757][ T6369] SQUASHFS error: Failed to read block 0x4de: -5
[  231.561217][   T27] audit: type=1800 audit(1769354507.425:52): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.557" name="file1" dev="loop4" ino=5 res=0 errno=0
[  231.758931][ T6369] SQUASHFS error: Failed to read block 0x6e6: -5
[  231.765445][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.773851][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.780769][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.787089][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.794480][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.801904][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.809119][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.816559][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.824136][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.830514][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.837823][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.844715][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.851002][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.858475][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.865510][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.871786][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.879570][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.887236][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.893512][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.901004][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.907849][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.914124][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.921626][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.928459][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.934749][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.942244][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.949368][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.955613][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.963130][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.970050][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.976633][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  231.983966][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  231.990834][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  231.997072][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.004594][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.011456][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.017662][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.025008][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.031887][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.038096][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.045876][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.053113][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.059974][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.067355][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.074212][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.080740][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.088216][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.095190][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.101598][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.109013][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.115926][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.122217][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.129664][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.136680][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.142952][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.150515][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.157552][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.163828][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.171313][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.178247][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.184555][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.192531][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.199592][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.205960][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.213669][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.220730][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.227047][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.234401][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.241387][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.247697][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.255147][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.262021][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.268319][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.275753][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.282832][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.289088][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.296664][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.303651][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.310048][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.317970][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.325159][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.331433][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.338849][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.345860][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.352166][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.359690][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.366543][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.372853][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.380300][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.387813][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.395139][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.402567][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.409610][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.415905][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.423262][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.430281][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.436629][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.444197][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.451074][ T6369] SQUASHFS error: Failed to read block 0x0: -5
[  232.457529][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.465083][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.472364][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.479725][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.486596][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.494141][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.501012][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.508301][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.610758][ T6373] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  232.647655][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.655111][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.662226][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.669621][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.676518][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.684068][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.691083][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.698766][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.720504][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.728705][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.735697][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.743586][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.750702][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.758053][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  232.765022][ T6369] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  232.772432][ T6369] SQUASHFS error: read_indexes: reading block [6e4:0]
[  233.251631][ T6396] loop8: detected capacity change from 0 to 7
[  233.262051][ T4436] Dev loop8: unable to read RDB block 7
[  233.267890][ T4436]  loop8: unable to read partition table
[  233.300212][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.564'.
[  233.330082][ T4436] loop8: partition table beyond EOD, truncated
[  233.971049][ T6396] Dev loop8: unable to read RDB block 7
[  233.988379][ T6396]  loop8: unable to read partition table
[  234.010835][ T6396] loop8: partition table beyond EOD, truncated
[  234.018585][ T6396] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  235.068380][ T6417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.571'.
[  235.766379][ T6423] netlink: 'syz.4.575': attribute type 10 has an invalid length.
[  235.866533][ T6423] bond0: (slave dummy0): Releasing backup interface
[  235.987081][ T6423] team0: Port device dummy0 added
[  236.051639][ T6426] netlink: 'syz.4.575': attribute type 10 has an invalid length.
[  236.178047][ T6426] team0: Port device dummy0 removed
[  236.227951][ T6426] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  236.703411][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'.
[  236.861272][ T6437] loop3: detected capacity change from 0 to 8
[  236.936674][ T6437] SQUASHFS error: xz decompression failed, data probably corrupt
[  236.972266][ T6437] SQUASHFS error: Failed to read block 0x108: -5
[  237.000991][ T6437] SQUASHFS error: Unable to read metadata cache entry [106]
[  237.018746][ T6437] SQUASHFS error: Unable to read inode 0x11f
[  237.063985][ T6427] loop5: detected capacity change from 0 to 32768
[  237.209111][ T6427] XFS (loop5): Mounting V5 Filesystem
[  237.327456][ T6427] XFS (loop5): Ending clean mount
[  237.377125][ T6427] XFS (loop5): Quotacheck needed: Please wait.
[  237.443063][ T6427] XFS (loop5): Quotacheck: Done.
[  237.486498][   T27] audit: type=1800 audit(1769354513.345:53): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.576" name="file1" dev="loop5" ino=4422 res=0 errno=0
[  237.664848][ T5550] XFS (loop5): Unmounting Filesystem
[  239.183021][ T6508] loop3: detected capacity change from 0 to 32768
[  239.291373][ T6508] XFS (loop3): Mounting V5 Filesystem
[  239.392315][ T6508] XFS (loop3): Ending clean mount
[  239.465458][ T6508] XFS (loop3): Quotacheck needed: Please wait.
[  239.542047][ T6508] XFS (loop3): Quotacheck: Done.
[  239.564201][   T27] audit: type=1800 audit(1769354515.425:54): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.597" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  239.640893][ T4278] XFS (loop3): Unmounting Filesystem
[  240.106704][ T6550] loop3: detected capacity change from 0 to 2048
[  240.130783][ T6550] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  240.151046][ T6550] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  240.161741][ T6550] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  240.169628][ T6550] UDF-fs: Scanning with blocksize 512 failed
[  240.197153][ T6550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.870726][ T6554] netlink: 68 bytes leftover after parsing attributes in process `syz.1.611'.
[  241.087392][ T6552] loop4: detected capacity change from 0 to 32768
[  241.239850][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.613'.
[  241.303191][ T6552] XFS (loop4): Mounting V5 Filesystem
[  241.465084][ T6579] netlink: 'syz.1.618': attribute type 10 has an invalid length.
[  241.473115][ T6576] loop8: detected capacity change from 0 to 7
[  241.489283][ T6576] Dev loop8: unable to read RDB block 7
[  241.495156][ T6576]  loop8: unable to read partition table
[  241.501570][ T6576] loop8: partition table beyond EOD, truncated
[  241.508400][ T6576] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  241.529656][ T6552] XFS (loop4): Ending clean mount
[  241.537485][ T6552] XFS (loop4): Quotacheck needed: Please wait.
[  241.614205][ T6552] XFS (loop4): Quotacheck: Done.
[  241.650357][ T6579] bond0: (slave dummy0): Releasing backup interface
[  241.776986][ T6579] team0: Port device dummy0 added
[  241.808013][ T6581] netlink: 'syz.1.618': attribute type 10 has an invalid length.
[  241.825627][ T4266] XFS (loop4): Unmounting Filesystem
[  241.919801][ T6581] team0: Port device dummy0 removed
[  241.963028][ T6581] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  242.000692][ T6586] netlink: 316 bytes leftover after parsing attributes in process `syz.3.620'.
[  242.357435][ T6573] loop5: detected capacity change from 0 to 32768
[  242.378544][ T6573] XFS (loop5): Mounting V5 Filesystem
[  242.427534][ T6604] program syz.4.621 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  242.443006][ T6573] XFS (loop5): Ending clean mount
[  242.479398][ T6573] XFS (loop5): Quotacheck needed: Please wait.
[  242.576723][ T6573] XFS (loop5): Quotacheck: Done.
[  242.630220][ T5550] XFS (loop5): Unmounting Filesystem
[  242.956568][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'.
[  243.168146][ T6620] loop8: detected capacity change from 0 to 7
[  243.219508][ T6620] Dev loop8: unable to read RDB block 7
[  243.225355][ T6620]  loop8: unable to read partition table
[  243.266099][ T6620] loop8: partition table beyond EOD, truncated
[  243.292565][ T6620] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  243.305216][ T6628] nfs4: Unknown parameter '
/file0/../file0'
[  243.451502][ T6630] loop4: detected capacity change from 0 to 2048
[  243.510195][ T6626] loop5: detected capacity change from 0 to 32768
[  243.563351][ T6630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.584073][ T6633] netlink: 'syz.3.634': attribute type 10 has an invalid length.
[  243.627969][ T6626] XFS (loop5): Mounting V5 Filesystem
[  243.646604][   T27] audit: type=1800 audit(1769354519.505:55): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.632" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  243.690823][ T6626] XFS (loop5): Ending clean mount
[  243.699176][ T6626] XFS (loop5): Quotacheck needed: Please wait.
[  244.447047][ T6633] bond0: (slave dummy0): Releasing backup interface
[  244.503630][ T6633] team0: Port device dummy0 added
[  244.520241][ T6641] netlink: 'syz.3.634': attribute type 10 has an invalid length.
[  244.565208][ T6626] XFS (loop5): Quotacheck: Done.
[  244.675211][ T6641] team0: Port device dummy0 removed
[  244.676309][ T5550] XFS (loop5): Unmounting Filesystem
[  244.758246][ T6641] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  246.096755][ T6642] loop1: detected capacity change from 0 to 32768
[  246.123830][ T6642] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.636 (6642)
[  246.151400][ T6642] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  246.212775][ T6642] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  246.233013][ T6642] BTRFS info (device loop1): turning on sync discard
[  246.246555][ T6642] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  246.299729][ T6642] BTRFS info (device loop1): use zstd compression, level 3
[  246.340659][ T6642] BTRFS info (device loop1): turning off barriers
[  246.410830][ T6642] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  246.432080][ T6642] BTRFS info (device loop1): trying to use backup root at mount time
[  246.462500][ T6642] BTRFS info (device loop1): enabling auto defrag
[  246.488200][ T6642] BTRFS info (device loop1): using free space tree
[  246.680170][ T6642] BTRFS error (device loop1): open_ctree failed: -12
[  246.819008][ T4385] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4385)
[  246.967928][ T6684] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  247.133932][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'.
[  247.210280][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'.
[  248.394067][ T6717] netlink: 'syz.4.650': attribute type 10 has an invalid length.
[  248.490400][ T6717] bond0: (slave dummy0): Releasing backup interface
[  248.513956][ T6717] team0: Port device dummy0 added
[  248.569011][ T6719] netlink: 'syz.4.650': attribute type 10 has an invalid length.
[  248.629936][ T6724] loop8: detected capacity change from 0 to 7
[  248.784511][ T6722] loop3: detected capacity change from 0 to 32768
[  248.828200][ T6724] Dev loop8: unable to read RDB block 7
[  248.850900][ T6719] team0: Port device dummy0 removed
[  248.873072][ T6722] XFS (loop3): Mounting V5 Filesystem
[  248.884431][ T6724]  loop8: unable to read partition table
[  248.923411][ T6724] loop8: partition table beyond EOD, truncated
[  248.958248][ T6719] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  248.989002][ T6724] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5)
[  249.031256][ T6722] XFS (loop3): Ending clean mount
[  249.040714][ T6722] XFS (loop3): Quotacheck needed: Please wait.
[  249.258243][ T6722] XFS (loop3): Quotacheck: Done.
[  249.364798][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.656'.
[  249.490765][ T4278] XFS (loop3): Unmounting Filesystem
[  250.878721][ T6756] bond0: (slave dummy0): Releasing backup interface
[  250.969764][ T6756] batman_adv: batadv0: Adding interface: dummy0
[  250.989230][ T6756] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.051240][ T6756] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  251.851666][ T6778] Bluetooth: MGMT ver 1.22
[  251.878037][ T6778] Bluetooth: hci0: invalid len left 7, exp >= 48
[  252.266392][ T6789] loop1: detected capacity change from 0 to 2048
[  252.283081][ T6789] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  252.306479][ T6789] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  252.317388][ T6789] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  252.325234][ T6789] UDF-fs: Scanning with blocksize 512 failed
[  252.354467][ T6789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  252.419299][ T6788] loop3: detected capacity change from 0 to 128
[  252.761897][ T6788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  252.969934][ T6788] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  253.357810][ T6797] device syzkaller0 entered promiscuous mode
[  253.556741][ T4278] EXT4-fs (loop3): unmounting filesystem.
[  253.648106][ T6799] loop5: detected capacity change from 0 to 32768
[  253.856388][ T6799] XFS (loop5): Mounting V5 Filesystem
[  253.910419][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'.
[  253.950029][ T6813] program syz.1.672 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  254.103070][ T6799] XFS (loop5): Ending clean mount
[  254.112679][ T6799] XFS (loop5): Quotacheck needed: Please wait.
[  254.248859][ T6799] XFS (loop5): Quotacheck: Done.
[  254.341532][ T5550] XFS (loop5): Unmounting Filesystem
[  254.460175][ T6828] netlink: 316 bytes leftover after parsing attributes in process `syz.1.676'.
[  255.111878][ T6848] loop4: detected capacity change from 0 to 8
[  255.143270][ T6848] SQUASHFS error: Failed to read block 0x100002d5: -5
[  255.171788][ T6848] unable to read xattr id index table
[  255.456258][ T6856] device syzkaller0 entered promiscuous mode
[  255.600049][ T6859] loop4: detected capacity change from 0 to 2048
[  255.623082][ T6859] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  255.646850][ T6859] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  255.657874][ T6859] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  255.666347][ T6859] UDF-fs: Scanning with blocksize 512 failed
[  255.743010][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  255.749744][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  255.798437][ T6859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  256.757384][ T6863] loop1: detected capacity change from 0 to 32768
[  256.771305][ T6863] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  256.781782][ T6863] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  256.791515][ T6863] BTRFS info (device loop1): turning on sync discard
[  256.798282][ T6863] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  256.807817][ T6863] BTRFS info (device loop1): use zstd compression, level 3
[  256.815187][ T6863] BTRFS info (device loop1): turning off barriers
[  256.821730][ T6863] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  256.832451][ T6863] BTRFS info (device loop1): trying to use backup root at mount time
[  256.840610][ T6863] BTRFS info (device loop1): enabling auto defrag
[  256.847080][ T6863] BTRFS info (device loop1): using free space tree
[  256.974430][ T6881] netlink: 4 bytes leftover after parsing attributes in process `syz.5.688'.
[  257.026020][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'.
[  257.081931][ T6883] netlink: 316 bytes leftover after parsing attributes in process `syz.4.689'.
[  257.164869][   T29] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  257.203443][ T6863] BTRFS error (device loop1): failed to load root extent
[  257.211610][ T6863] BTRFS warning (device loop1): try to load backup roots slot 1
[  257.223125][ T4400] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  257.236828][ T6863] BTRFS warning (device loop1): couldn't read tree root
[  257.243937][ T6863] BTRFS warning (device loop1): try to load backup roots slot 2
[  257.252487][ T6863] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  257.264345][ T6863] BTRFS warning (device loop1): couldn't read tree root
[  257.271684][ T6863] BTRFS warning (device loop1): try to load backup roots slot 3
[  257.322737][ T6863] BTRFS info (device loop1): enabling ssd optimizations
[  257.333247][ T6863] BTRFS info (device loop1): rebuilding free space tree
[  257.347080][ T6863] BTRFS info (device loop1): checking UUID tree
[  257.379112][ T6897] netlink: 280 bytes leftover after parsing attributes in process `syz.3.691'.
[  257.391150][ T6897] netlink: 280 bytes leftover after parsing attributes in process `syz.3.691'.
[  258.027386][ T4279] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.134108][ T6911] program syz.5.695 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  259.620182][ T6937] loop5: detected capacity change from 0 to 764
[  259.700346][ T6943] netlink: 316 bytes leftover after parsing attributes in process `syz.3.705'.
[  260.565583][ T6953] loop1: detected capacity change from 0 to 2048
[  260.724718][ T6953] hpfs: filesystem error: improperly stopped; already mounted read-only
[  260.808780][ T6953] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  261.966515][   T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  262.119617][ T6995] netlink: 'syz.5.719': attribute type 1 has an invalid length.
[  262.147298][ T6995] device bond1 entered promiscuous mode
[  262.157881][ T6995] 8021q: adding VLAN 0 to HW filter on device bond1
[  262.159316][   T22] usb 4-1: Using ep0 maxpacket: 16
[  262.181774][   T22] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  262.195713][   T22] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  262.204604][   T22] usb 4-1: Product: syz
[  262.208920][   T22] usb 4-1: Manufacturer: syz
[  262.213571][   T22] usb 4-1: SerialNumber: syz
[  262.221962][   T22] usb 4-1: config 0 descriptor??
[  262.237129][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.5.719'.
[  262.445078][   T22] usb 4-1: USB disconnect, device number 7
[  262.545063][ T7005] program syz.4.724 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  266.441823][ T7031] netlink: 316 bytes leftover after parsing attributes in process `syz.1.731'.
[  266.510566][ T7036] loop3: detected capacity change from 0 to 764
[  266.790024][ T7044] program syz.3.738 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  267.744143][ T7068] device vxcan1 entered promiscuous mode
[  269.579394][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'.
[  374.608592][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  374.615778][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P4400/1:b..l
[  374.624309][    C0] 	(detected by 0, t=10502 jiffies, g=28313, q=240 ncpus=2)
[  374.631616][    C0] task:kworker/u4:7    state:R  running task     stack:22264 pid:4400  ppid:2      flags:0x00004000
[  374.643649][    C0] Workqueue: bat_events batadv_nc_worker
[  374.649420][    C0] Call Trace:
[  374.652714][    C0]  <TASK>
[  374.655819][    C0]  __schedule+0x11d1/0x40e0
[  374.660438][    C0]  ? mark_lock+0x94/0x320
[  374.664822][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  374.671002][    C0]  ? __sched_text_start+0x8/0x8
[  374.675962][    C0]  ? lock_chain_count+0x20/0x20
[  374.680948][    C0]  ? preempt_schedule_irq+0xb0/0x160
[  374.686660][    C0]  preempt_schedule_irq+0xbb/0x160
[  374.691927][    C0]  ? preempt_schedule_notrace+0x120/0x120
[  374.697729][    C0]  ? rcu_is_watching+0x11/0xa0
[  374.702532][    C0]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[  374.708363][    C0]  irqentry_exit+0x63/0x70
[  374.712838][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  374.718851][    C0] RIP: 0010:lock_acquire+0x225/0x4a0
[  374.724180][    C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04
[  374.743816][    C0] RSP: 0018:ffffc9000499fac0 EFLAGS: 00000206
[  374.750553][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 33051797f0c54400
[  374.758572][    C0] RDX: 0000000000000000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0c20
[  374.766575][    C0] RBP: ffffc9000499fbc8 R08: dffffc0000000000 R09: 1ffffffff215e648
[  374.774667][    C0] R10: dffffc0000000000 R11: fffffbfff215e649 R12: 0000000000000001
[  374.782673][    C0] R13: 1ffff92000933f64 R14: 0000000000000246 R15: dffffc0000000000
[  374.790687][    C0]  ? read_lock_is_recursive+0x10/0x10
[  374.796095][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  374.802100][    C0]  ? batadv_nc_worker+0xce/0x600
[  374.807054][    C0]  batadv_nc_worker+0xeb/0x600
[  374.811839][    C0]  ? batadv_nc_worker+0xce/0x600
[  374.816939][    C0]  ? process_one_work+0x7b0/0x1160
[  374.822084][    C0]  process_one_work+0x8a2/0x1160
[  374.827134][    C0]  ? worker_detach_from_pool+0x240/0x240
[  374.832787][    C0]  ? _raw_spin_lock_irq+0xb7/0xf0
[  374.837830][    C0]  ? _raw_spin_lock_irqsave+0x100/0x100
[  374.843413][    C0]  ? kthread_data+0x4b/0xc0
[  374.848191][    C0]  worker_thread+0xaa2/0x1270
[  374.853093][    C0]  kthread+0x29d/0x330
[  374.857207][    C0]  ? worker_clr_flags+0x1a0/0x1a0
[  374.862357][    C0]  ? kthread_blkcg+0xd0/0xd0
[  374.867112][    C0]  ret_from_fork+0x1f/0x30
[  374.871668][    C0]  </TASK>
[  374.874717][    C0] rcu: rcu_preempt kthread starved for 9722 jiffies! g28313 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  374.886045][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  374.896217][    C0] rcu: RCU grace-period kthread stack dump:
[  374.902311][    C0] task:rcu_preempt     state:R  running task     stack:27736 pid:16    ppid:2      flags:0x00004000
[  374.913463][    C0] Call Trace:
[  374.916846][    C0]  <TASK>
[  374.919898][    C0]  __schedule+0x11d1/0x40e0
[  374.924543][    C0]  ? __sched_text_start+0x8/0x8
[  374.929416][    C0]  ? __mod_timer+0x91e/0xd00
[  374.934135][    C0]  schedule+0xb9/0x180
[  374.938255][    C0]  schedule_timeout+0x184/0x2d0
[  374.943158][    C0]  ? console_conditional_schedule+0x40/0x40
[  374.949703][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  374.955616][    C0]  ? update_process_times+0x1b0/0x1b0
[  374.961028][    C0]  ? prepare_to_swait_event+0x335/0x350
[  374.966607][    C0]  rcu_gp_fqs_loop+0x303/0x1340
[  374.971491][    C0]  ? rcu_gp_kthread+0x3b0/0x3b0
[  374.976532][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  374.982797][    C0]  ? rcu_gp_init+0x14e0/0x14e0
[  374.987589][    C0]  ? rcu_gp_cleanup+0xb41/0xc90
[  374.992468][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  374.997718][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  375.003037][    C0]  rcu_gp_kthread+0x99/0x3b0
[  375.007650][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  375.012784][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  375.018706][    C0]  ? __kthread_parkme+0x162/0x1c0
[  375.023848][    C0]  kthread+0x29d/0x330
[  375.027936][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  375.033070][    C0]  ? kthread_blkcg+0xd0/0xd0
[  375.037768][    C0]  ret_from_fork+0x1f/0x30
[  375.042566][    C0]  </TASK>
[  375.045628][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  375.051969][    C0] Sending NMI from CPU 0 to CPUs 1:
[  375.058671][    C1] NMI backtrace for cpu 1
[  375.058702][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[  375.058719][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  375.058730][    C1] RIP: 0010:kasan_check_range+0x84/0x290
[  375.058761][    C1] Code: 49 c1 e9 03 4b 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 <0f> 85 86 01 00 00 49 ff c3 48 ff c3 75 ee e9 18 01 00 00 44 89 dd
[  375.058776][    C1] RSP: 0018:ffffc900001e0c78 EFLAGS: 00000046
[  375.058792][    C1] RAX: ffffffff81710901 RBX: ffffffffffffffff RCX: ffffffff8171099e
[  375.058806][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff96c3f340
[  375.058817][    C1] RBP: 0000000000000002 R08: ffffffff96c3f347 R09: 1ffffffff2d87e68
[  375.058829][    C1] R10: dffffc0000000000 R11: fffffbfff2d87e68 R12: dffffc0000000001
[  375.058842][    C1] R13: ffff8880b8f2af00 R14: 1ffffffff2d87e68 R15: 0000000000000001
[  375.058854][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  375.058868][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  375.058881][    C1] CR2: 000055f55c4ea950 CR3: 0000000027cc3000 CR4: 00000000003506e0
[  375.058896][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  375.058906][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  375.058917][    C1] Call Trace:
[  375.058925][    C1]  <IRQ>
[  375.058934][    C1]  profile_tick+0xbe/0x160
[  375.058963][    C1]  tick_sched_timer+0x387/0x560
[  375.058991][    C1]  __hrtimer_run_queues+0x521/0xd70
[  375.059011][    C1]  ? ktime_get_update_offsets_now+0x95/0x3e0
[  375.059033][    C1]  ? ktime_get_update_offsets_now+0x95/0x3e0
[  375.059059][    C1]  ? tick_setup_sched_timer+0x2e0/0x2e0
[  375.059088][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  375.059111][    C1]  hrtimer_interrupt+0x3c5/0x9c0
[  375.059143][    C1]  __sysvec_apic_timer_interrupt+0x153/0x5a0
[  375.059197][    C1]  sysvec_apic_timer_interrupt+0x9b/0xc0
[  375.059225][    C1]  </IRQ>
[  375.059229][    C1]  <TASK>
[  375.059235][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  375.059257][    C1] RIP: 0010:default_idle+0xb/0x10
[  375.059282][    C1] Code: 48 89 df e8 a7 10 9d f7 e9 44 ff ff ff e8 7d 07 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d 87 5d 50 00 fb f4 <c3> 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48
[  375.059296][    C1] RSP: 0018:ffffc90000177de8 EFLAGS: 000002c6
[  375.059310][    C1] RAX: 6c9421cc5f18c200 RBX: ffffffff8a3651a7 RCX: 6c9421cc5f18c200
[  375.059323][    C1] RDX: 0000000000000001 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0c20
[  375.059335][    C1] RBP: ffffc90000177f20 R08: ffff8880b8f3580b R09: 1ffff110171e6b01
[  375.059348][    C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 1ffff9200002efc8
[  375.059361][    C1] R13: dffffc0000000000 R14: ffff88813fee1dc0 R15: 0000000000000001
[  375.059375][    C1]  ? default_idle_call+0x77/0xc0
[  375.059406][    C1]  default_idle_call+0x84/0xc0
[  375.059446][    C1]  do_idle+0x20d/0x5a0
[  375.059473][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  375.059497][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  375.059524][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  375.059547][    C1]  ? schedule_idle+0x57/0x90
[  375.059576][    C1]  cpu_startup_entry+0x3f/0x60
[  375.059600][    C1]  start_secondary+0xe4/0xf0
[  375.059621][    C1]  secondary_startup_64_no_verify+0xcf/0xdb
[  375.059651][    C1]  </TASK>