last executing test programs:

1m32.745084485s ago: executing program 0 (id=187):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)

1m32.674187007s ago: executing program 0 (id=190):
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x124)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94)
ftruncate(r2, 0x2007ffc)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000680)={0x3920e, r0, 0x7, 0x1, 0x5, 0x53000000})

1m32.549757198s ago: executing program 0 (id=191):
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d00000d240f"], 0x0)

1m31.034080346s ago: executing program 0 (id=200):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x20, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

1m30.697055497s ago: executing program 0 (id=204):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7)
ioctl$TCSETS2(r0, 0x402c542b, 0x0)

1m30.043822375s ago: executing program 0 (id=213):
bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc)

1m29.949190583s ago: executing program 32 (id=213):
bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc)

4.172923034s ago: executing program 2 (id=1252):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0)
ftruncate(r1, 0x1)

4.169343429s ago: executing program 2 (id=1253):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x280008a, &(0x7f000001c380)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c636f6465706167653d3837342c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c726f6469722c73686f72746e616d653d77696e6e742c646973636172642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d6d697865642c726f6469722c7569643d6e4ad8c43b1100c0344de5741a26aab12236c332332194bd77ef64fb4717db829730779da1ecad20a6cc9fce05bebfe6069c2be726472ef871d8ee192966e4932b15af666d4b1e6276e99d45706129bb5bd87be3c0c495d72155b0f4478eb0e8043c0799390cf1371a63f7eba9c846d0a0d12e041671ac7fc36b3d9ab0da8935c15000f2aadd2023d0122b2172a54dbef3f19d0912c8ec28868e8c957de4682b9578d4a642112b0082c497e263b2f17efe44900d41a04365d3a00ef997ff6464de4a454ca7c273d7a059038c6770931336f89068425b84a8ea1d81cc84a8cc4631c746", @ANYRESHEX=0x0, @ANYRESHEX=0x0], 0x97, 0x2b3, &(0x7f0000000840)="$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")
mount(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x204400d, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, 0x103)

4.082977415s ago: executing program 2 (id=1254):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x4)
io_setup(0x2007, &(0x7f0000000980)=<r1=>0x0)
r2 = eventfd2(0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}])
ppoll(&(0x7f00000003c0)=[{r0}, {r0, 0x1028}], 0x2, 0x0, 0x0, 0x0)
shutdown(r0, 0x0)

3.896914192s ago: executing program 2 (id=1255):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f0000002400)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',barrier,nls=iso8859-15,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d30783030303030303030372c706172743d3078303030303030303030303030303030322c00ff166d65d16cfb932fb90a29e03c152d6c0cfbf1abebad4cfe2772666948ba92ded3acb6b70084f4de9608826455015212635cbdff8cf6e1485ab9413b3b2086c5c49f7500a0d801dcec1bce"], 0x20, 0x6fe, &(0x7f0000000c00)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x9041, 0x0)
mount$bind(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$nfs(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x2405, 0x0)

3.896585342s ago: executing program 2 (id=1256):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)

3.702659357s ago: executing program 2 (id=1257):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffff9c)

3.613230514s ago: executing program 33 (id=1257):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffff9c)

3.402924032s ago: executing program 1 (id=1261):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.250939996s ago: executing program 1 (id=1262):
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

2.250650661s ago: executing program 1 (id=1263):
syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca746d00090503034d00ff99"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

1.403618245s ago: executing program 3 (id=1265):
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000100)={0xc})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x20, r4, 0x0, 0x0, &(0x7f00000001c0)})
ioctl$IOMMU_VFIO_GET_API_VERSION(r3, 0x3b64)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0), &(0x7f00000001c0)=0x4)
ioctl$IOMMU_VFIO_SET_IOMMU(r3, 0x3b66, 0x3)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0)

910.81941ms ago: executing program 1 (id=1266):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0xc001, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0)

622.777386ms ago: executing program 1 (id=1267):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
close(0x3)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)

485.7805ms ago: executing program 3 (id=1268):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="44e900000080", 0x0, 0x7, 0x0, 0x0, 0x0})

391.500768ms ago: executing program 3 (id=1269):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8031, 0xffffffffffffffff, 0xb1e71000)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0)

171.572052ms ago: executing program 3 (id=1270):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000080)={[{@quota}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x38]}}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

92.459255ms ago: executing program 3 (id=1271):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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")
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81000)

332.532µs ago: executing program 3 (id=1272):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/mdstat\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024)

0s ago: executing program 1 (id=1273):
syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x14, 0x3d, 0xc0, 0x20, 0x84f, 0x1, 0x6c05, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x0, 0x6, [{{0x9, 0x4, 0x5b, 0x0, 0x0, 0x98, 0xc7, 0xa2, 0xff}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.695233][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.726627][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.730244][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.760319][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.842152][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.849921][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.889324][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.893571][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.029886][ T6625] mkiss: ax0: crc mode is auto.
[   81.262115][ T6641] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   81.304778][ T6641] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.326484][ T6641] bond1: (slave ip6erspan0): making interface the new active one
[   81.330885][ T6641] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[   81.431365][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   81.457305][  T974] cfg80211: failed to load regulatory.db
[   81.531484][ T6658] Driver unsupported XDP return value 0 on prog  (id 26) dev N/A, expect packet loss!
[   81.877088][ T6664] netlink: 'syz.1.262': attribute type 2 has an invalid length.
[   82.047665][ T6639] loop3: detected capacity change from 0 to 40427
[   82.104316][ T6639] F2FS-fs (loop3): invalid crc value
[   82.114153][ T6667] loop2: detected capacity change from 0 to 4096
[   82.248595][ T6639] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   82.255229][ T6639] F2FS-fs (loop3): Start checkpoint disabled!
[   82.267438][ T6639] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   82.335136][ T6639] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   82.376774][  T167] kworker/u9:3: attempt to access beyond end of device
[   82.376774][  T167] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   82.385314][  T167] CPU: 0 UID: 0 PID: 167 Comm: kworker/u9:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   82.385326][  T167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   82.385331][  T167] Workqueue: writeback wb_workfn (flush-7:3)
[   82.385344][  T167] Call Trace:
[   82.385347][  T167]  <TASK>
[   82.385351][  T167]  dump_stack_lvl+0x189/0x250
[   82.385362][  T167]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.385370][  T167]  ? __pfx_queue_work_on+0x10/0x10
[   82.385377][  T167]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   82.385386][  T167]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   82.385398][  T167]  f2fs_handle_critical_error+0x37c/0x540
[   82.385410][  T167]  f2fs_write_end_io+0x886/0xb60
[   82.385423][  T167]  __submit_merged_bio+0x27a/0x6a0
[   82.385434][  T167]  __submit_merged_write_cond+0x255/0x530
[   82.385445][  T167]  f2fs_write_data_pages+0x261d/0x3000
[   82.385467][  T167]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   82.385507][  T167]  ? f2fs_write_meta_pages+0x357/0x450
[   82.385520][  T167]  ? __lock_acquire+0xab9/0xd20
[   82.385531][  T167]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   82.385541][  T167]  do_writepages+0x32e/0x550
[   82.385552][  T167]  ? reacquire_held_locks+0x127/0x1d0
[   82.385558][  T167]  ? writeback_sb_inodes+0x384/0x1010
[   82.385570][  T167]  __writeback_single_inode+0x145/0xff0
[   82.385578][  T167]  ? do_raw_spin_unlock+0x4d/0x240
[   82.385587][  T167]  writeback_sb_inodes+0x6c7/0x1010
[   82.385606][  T167]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   82.385630][  T167]  ? rcu_is_watching+0x15/0xb0
[   82.385640][  T167]  wb_writeback+0x43b/0xaf0
[   82.385651][  T167]  ? queue_io+0x3c1/0x590
[   82.385660][  T167]  ? __pfx_wb_writeback+0x10/0x10
[   82.385671][  T167]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.385680][  T167]  wb_workfn+0x409/0xef0
[   82.385693][  T167]  ? __pfx_wb_workfn+0x10/0x10
[   82.385701][  T167]  ? __lock_acquire+0xab9/0xd20
[   82.385721][  T167]  ? process_scheduled_works+0x9ef/0x17b0
[   82.385730][  T167]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.385737][  T167]  ? process_scheduled_works+0x9ef/0x17b0
[   82.385742][  T167]  ? process_scheduled_works+0x9ef/0x17b0
[   82.385749][  T167]  process_scheduled_works+0xae1/0x17b0
[   82.385766][  T167]  ? __pfx_process_scheduled_works+0x10/0x10
[   82.385779][  T167]  worker_thread+0x8a0/0xda0
[   82.385787][  T167]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   82.385798][  T167]  ? __kthread_parkme+0x7b/0x200
[   82.385809][  T167]  kthread+0x711/0x8a0
[   82.385818][  T167]  ? __pfx_worker_thread+0x10/0x10
[   82.385824][  T167]  ? __pfx_kthread+0x10/0x10
[   82.385833][  T167]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.385840][  T167]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.385847][  T167]  ? __pfx_kthread+0x10/0x10
[   82.385855][  T167]  ret_from_fork+0x3fc/0x770
[   82.385864][  T167]  ? __pfx_ret_from_fork+0x10/0x10
[   82.385873][  T167]  ? __switch_to_asm+0x39/0x70
[   82.385880][  T167]  ? __switch_to_asm+0x33/0x70
[   82.385887][  T167]  ? __pfx_kthread+0x10/0x10
[   82.385895][  T167]  ret_from_fork_asm+0x1a/0x30
[   82.385909][  T167]  </TASK>
[   82.385912][  T167] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   82.409489][   T54] Bluetooth: hci1: command tx timeout
[   82.471662][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   83.511224][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   84.256516][ T6704] loop3: detected capacity change from 0 to 32768
[   84.261691][ T6704] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.275 (6704)
[   84.271520][ T6704] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.276343][ T6704] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   84.280060][ T6704] BTRFS info (device loop3): using free-space-tree
[   84.404982][ T6474] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.551818][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   84.582259][   T54] Bluetooth: hci1: command tx timeout
[   84.633676][ T6730] loop1: detected capacity change from 0 to 2048
[   84.639869][ T6730] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   84.646040][ T5975] udevd[5975]: incorrect nilfs2 checksum on /dev/loop1
[   84.664008][ T6731] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.675328][ T6733] sg_read: process 25 (syz.3.278) changed security contexts after opening file descriptor, this is not allowed.
[   84.702516][ T6731] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   84.706443][ T6731] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[   84.715718][ T6731] Remounting filesystem read-only
[   84.725993][ T5856] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[   84.815510][ T6741] netlink: 'syz.1.282': attribute type 1 has an invalid length.
[   84.921746][ T6737] loop3: detected capacity change from 0 to 32768
[   84.968327][ T6737] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   84.987594][ T6737] XFS (loop3): Ending clean mount
[   84.991591][ T6737] XFS (loop3): Quotacheck needed: Please wait.
[   85.010433][ T6737] XFS (loop3): Quotacheck: Done.
[   85.044165][ T6474] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   85.140353][ T6760] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   85.186421][ T6764] netlink: 'syz.3.289': attribute type 1 has an invalid length.
[   85.189772][ T6764] netlink: 240 bytes leftover after parsing attributes in process `syz.3.289'.
[   85.375793][ T6770] loop1: detected capacity change from 0 to 32768
[   85.511431][ T6009] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.591276][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   85.661226][ T6009] usb 4-1: Using ep0 maxpacket: 32
[   85.665001][ T6009] usb 4-1: config 0 has an invalid interface number: 63 but max is 0
[   85.668528][ T6009] usb 4-1: config 0 has no interface number 0
[   85.671091][ T6009] usb 4-1: config 0 interface 63 has no altsetting 0
[   85.674529][ T6009] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=3b.9a
[   85.678278][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.684473][ T6009] usb 4-1: config 0 descriptor??
[   85.893900][ T6009] usb 4-1: string descriptor 0 read error: -71
[   85.899922][ T6009] gspca_main: t613-2.14.0 probing 17a1:0128
[   85.909014][ T6009] gspca_t613: unknown sensor 0000
[   85.910853][ T6009] t613 4-1:0.63: probe with driver t613 failed with error -22
[   85.919374][ T6009] usb 4-1: USB disconnect, device number 2
[   86.116429][ T6774] loop1: detected capacity change from 0 to 131072
[   86.120928][ T6774] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[   86.124432][ T6774] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   86.129219][ T6774] F2FS-fs (loop1): invalid crc value
[   86.168795][ T6774] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   86.175656][ T6774] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   86.177978][ T6774] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   86.478986][ T6783] loop3: detected capacity change from 0 to 2048
[   86.631763][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   86.759757][ T6793] loop1: detected capacity change from 0 to 4096
[   86.885575][ T6798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.302'.
[   87.027515][ T6805] loop2: detected capacity change from 0 to 512
[   87.054464][ T6805] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.305: corrupted inode contents
[   87.065719][ T6805] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.305: mark_inode_dirty error
[   87.071103][ T6805] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.305: corrupted inode contents
[   87.076914][ T6805] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.305: mark_inode_dirty error
[   87.085049][ T6805] Quota error (device loop2): write_blk: dquota write failed
[   87.088020][ T6805] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   87.092552][ T6805] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.305: Failed to acquire dquot type 0
[   87.112586][ T6805] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.305: corrupted inode contents
[   87.127462][ T6805] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.305: mark_inode_dirty error
[   87.132601][ T6805] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.305: corrupted inode contents
[   87.137788][ T6805] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.305: mark_inode_dirty error
[   87.147201][ T6805] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.305: corrupted inode contents
[   87.156054][ T6805] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[   87.159674][ T6805] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.305: corrupted inode contents
[   87.164563][ T6805] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.305: mark_inode_dirty error
[   87.173567][ T6805] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[   87.190082][ T6805] EXT4-fs (loop2): 1 truncate cleaned up
[   87.199308][ T6805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.205207][ T6805] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.347312][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.593157][ T6833] loop2: detected capacity change from 0 to 32768
[   87.597990][ T6833] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.316 (6833)
[   87.611344][ T6833] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[   87.614772][ T6833] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   87.617530][ T6833] BTRFS info (device loop2): using free-space-tree
[   87.671240][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   87.763300][   T33] audit: type=1804 audit(1755256884.476:5): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.316" name="/newroot/93/file0/file1" dev="loop2" ino=260 res=1 errno=0
[   87.789292][ T5848] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[   88.022037][ T6867] loop3: detected capacity change from 0 to 32768
[   88.031630][ T6867] (syz.3.324,6867,0):ocfs2_read_blocks:239 ERROR: status = -12
[   88.034586][ T6867] (syz.3.324,6867,0):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[   88.038140][ T6867] (syz.3.324,6867,0):ocfs2_read_dir_block:511 ERROR: status = -12
[   88.041061][ T6867] (syz.3.324,6867,0):ocfs2_read_blocks:239 ERROR: status = -12
[   88.044028][ T6867] (syz.3.324,6867,0):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[   88.046924][ T6867] (syz.3.324,6867,0):ocfs2_read_dir_block:511 ERROR: status = -12
[   88.049881][ T6867] (syz.3.324,6867,0):ocfs2_read_blocks:239 ERROR: status = -12
[   88.053599][ T6867] (syz.3.324,6867,0):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[   88.056717][ T6867] (syz.3.324,6867,0):ocfs2_read_dir_block:511 ERROR: status = -12
[   88.060284][ T6867] (syz.3.324,6867,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[   88.064446][ T6867] (syz.3.324,6867,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[   88.064463][ T6867] (syz.3.324,6867,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[   88.073254][ T6867] (syz.3.324,6867,0):ocfs2_initialize_super:2198 ERROR: status = -22
[   88.076549][ T6867] (syz.3.324,6867,0):ocfs2_fill_super:1177 ERROR: status = -22
[   88.712178][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   89.751732][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   89.784979][ T6901] loop2: detected capacity change from 0 to 4096
[   89.807038][ T6901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.826570][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.338'.
[   89.880608][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.030591][   T33] audit: type=1326 audit(1755256886.736:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.1.343" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4918ebe9 code=0x7ffc0000
[   90.110746][ T6918] loop1: detected capacity change from 0 to 2048
[   90.143375][ T6914] loop3: detected capacity change from 0 to 32768
[   90.156171][   T33] audit: type=1326 audit(1755256886.736:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.1.343" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4918ebe9 code=0x7ffc0000
[   90.164809][   T33] audit: type=1326 audit(1755256886.756:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.1.343" exe="/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f1c4918ebe9 code=0x7ffc0000
[   90.171866][   T33] audit: type=1326 audit(1755256886.756:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.1.343" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4918ebe9 code=0x7ffc0000
[   90.178848][   T33] audit: type=1326 audit(1755256886.756:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6911 comm="syz.1.343" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c4918ebe9 code=0x7ffc0000
[   90.204858][ T6914] (syz.3.344,6914,1):ocfs2_read_journal_inode:1659 ERROR: status = -13
[   90.207561][ T6914] (syz.3.344,6914,1):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[   90.210247][ T6914] (syz.3.344,6914,1):ocfs2_check_volume:2420 ERROR: status = -13
[   90.212738][ T6914] (syz.3.344,6914,1):ocfs2_check_volume:2432 ERROR: status = -13
[   90.215246][ T6914] (syz.3.344,6914,1):ocfs2_mount_volume:1764 ERROR: status = -13
[   90.228331][ T6914] (syz.3.344,6914,1):ocfs2_fill_super:1177 ERROR: status = -13
[   90.748437][ T5744] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.791754][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   90.826846][ T5744] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.890901][ T5744] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.950418][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   90.956050][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   90.959754][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   90.962835][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   90.965657][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   90.984620][ T5744] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.118231][ T5744] bridge_slave_1: left allmulticast mode
[   91.120333][ T5744] bridge_slave_1: left promiscuous mode
[   91.123669][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.128115][ T5744] bridge_slave_0: left allmulticast mode
[   91.130120][ T5744] bridge_slave_0: left promiscuous mode
[   91.133568][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.579145][ T6950] loop2: detected capacity change from 0 to 512
[   91.624274][ T6950] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   91.666344][ T6950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   91.678090][ T6950] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.783665][ T6962] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   91.831283][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   91.842617][ T5744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   91.847183][ T6968] loop3: detected capacity change from 0 to 8
[   91.860300][ T5744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.865571][ T6968] SQUASHFS error: Failed to read block 0x4de: -5
[   91.866240][ T5744] bond0 (unregistering): Released all slaves
[   91.868189][ T6968] SQUASHFS error: Failed to read block 0x4de: -5
[   91.881852][ T6968] SQUASHFS error: Failed to read block 0x4de: -5
[   91.884106][ T6968] SQUASHFS error: Failed to read block 0x4de: -5
[   91.887117][ T6968] SQUASHFS error: Failed to read block 0x4de: -5
[   91.890291][   T33] audit: type=1800 audit(1755256888.596:11): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.366" name="file1" dev="loop3" ino=5 res=0 errno=0
[   91.918569][ T6970] loop2: detected capacity change from 0 to 4096
[   91.939934][ T6971] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   91.993918][ T5744] tipc: Disabling bearer <udp:s>
[   91.997458][ T6928] chnl_net:caif_netlink_parms(): no params data found
[   92.000186][ T5744] tipc: Left network mode
[   92.080257][ T5848] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424
[   92.087863][ T5848] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12)
[   92.100403][ T5848] Remounting filesystem read-only
[   92.104483][ T5848] NILFS (loop2): error -5 truncating bmap (ino=12)
[   92.116205][ T5848] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[   92.210557][ T6928] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.215338][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.222023][ T6928] bridge_slave_0: entered allmulticast mode
[   92.242344][ T6928] bridge_slave_0: entered promiscuous mode
[   92.247027][ T6928] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.260546][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.261581][ T6984] loop3: detected capacity change from 0 to 4096
[   92.265919][ T6928] bridge_slave_1: entered allmulticast mode
[   92.271406][ T6928] bridge_slave_1: entered promiscuous mode
[   92.372385][ T6995] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.555280][ T6928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   92.620604][ T6928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   92.699544][ T6928] team0: Port device team_slave_0 added
[   92.717788][ T6928] team0: Port device team_slave_1 added
[   92.738257][ T5744] hsr_slave_0: left promiscuous mode
[   92.746694][ T5744] hsr_slave_1: left promiscuous mode
[   92.748816][ T5744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.758437][ T5744] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.766361][ T5744] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.768826][ T5744] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.799133][ T5744] veth1_macvtap: left promiscuous mode
[   92.811924][ T5744] veth0_macvtap: left promiscuous mode
[   92.817597][ T5744] veth1_vlan: left promiscuous mode
[   92.819434][ T5744] veth0_vlan: left promiscuous mode
[   93.041324][ T5233] Bluetooth: hci2: command tx timeout
[   93.509735][ T5744] team0 (unregistering): Port device team_slave_1 removed
[   93.541967][ T5744] team0 (unregistering): Port device team_slave_0 removed
[   93.903459][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.909719][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.934673][ T6928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.940320][ T7020] loop3: detected capacity change from 0 to 256
[   93.951981][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.955067][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.022001][ T6928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.101913][ T6928] hsr_slave_0: entered promiscuous mode
[   94.104381][ T6928] hsr_slave_1: entered promiscuous mode
[   94.106550][ T6928] debugfs: 'hsr0' already exists in 'hsr'
[   94.109714][ T6928] Cannot create hsr debugfs directory
[   94.147933][ T7028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.381'.
[   94.189776][   T33] audit: type=1326 audit(1755256890.896:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fbb98ebe9 code=0x7ffc0000
[   94.219440][ T7033] loop2: detected capacity change from 0 to 512
[   94.226048][   T33] audit: type=1326 audit(1755256890.896:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fbb98ebe9 code=0x7ffc0000
[   94.264582][   T33] audit: type=1326 audit(1755256890.896:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.383" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fbb98ebe9 code=0x7ffc0000
[   94.282110][ T7033] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   94.285375][ T7033] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[   94.288320][   T33] audit: type=1326 audit(1755256890.896:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fbb98ebe9 code=0x7ffc0000
[   94.308914][ T7033] EXT4-fs (loop2): 1 truncate cleaned up
[   94.317462][   T33] audit: type=1326 audit(1755256890.896:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fbb98ebe9 code=0x7ffc0000
[   94.318723][ T7033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.349529][   T33] audit: type=1326 audit(1755256890.896:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.383" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fbb98ebe9 code=0x7ffc0000
[   94.374580][   T33] audit: type=1326 audit(1755256890.906:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fbb98ebe9 code=0x7ffc0000
[   94.390866][ T5744] IPVS: stop unused estimator thread 0...
[   94.396481][   T33] audit: type=1326 audit(1755256890.936:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.383" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fbb985ba7 code=0x7ffc0000
[   94.407479][   T33] audit: type=1326 audit(1755256890.936:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.383" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7fbb92add9 code=0x7ffc0000
[   94.410975][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.415569][   T33] audit: type=1326 audit(1755256890.936:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.3.383" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fbb985ba7 code=0x7ffc0000
[   94.478883][ T7038] sctp: [Deprecated]: syz.3.385 (pid 7038) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.478883][ T7038] Use struct sctp_sack_info instead
[   94.740953][ T6928] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.752649][ T6928] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.759078][ T6928] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.774434][ T6928] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.888773][ T6928] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.930107][ T6928] 8021q: adding VLAN 0 to HW filter on device team0
[   94.938815][ T1104] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.941732][ T1104] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.960729][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.963574][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.037793][ T7074] sctp: [Deprecated]: syz.3.396 (pid 7074) Use of int in maxseg socket option.
[   95.037793][ T7074] Use struct sctp_assoc_value instead
[   95.111282][ T5233] Bluetooth: hci2: command tx timeout
[   95.188298][ T7080] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   95.480431][ T6928] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.527508][ T6928] veth0_vlan: entered promiscuous mode
[   95.532857][ T6928] veth1_vlan: entered promiscuous mode
[   95.547485][ T6928] veth0_macvtap: entered promiscuous mode
[   95.553120][ T6928] veth1_macvtap: entered promiscuous mode
[   95.562487][ T6928] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.568852][ T6928] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.579839][ T6478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.583639][ T6478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.587711][ T6478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.593143][ T6478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.652031][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.654667][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.675632][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.678805][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.761206][ T6009] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   95.996254][ T6009] usb 4-1: Using ep0 maxpacket: 8
[   96.000440][ T6009] usb 4-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[   96.005228][ T6009] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[   96.010632][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.017191][ T6009] hub 4-1:32.0: bad descriptor, ignoring hub
[   96.019593][ T6009] hub 4-1:32.0: probe with driver hub failed with error -5
[   96.475867][ T7115] netlink: 452 bytes leftover after parsing attributes in process `syz.2.411'.
[   96.547186][  T793] IPVS: starting estimator thread 0...
[   96.633638][ T6009] usb 4-1: reset high-speed USB device number 3 using dummy_hcd
[   96.641259][ T7120] IPVS: using max 80 ests per chain, 192000 per kthread
[   96.651591][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.416'.
[   96.849760][ T7133] netlink: 201872 bytes leftover after parsing attributes in process `syz.1.419'.
[   96.861597][ T7133] netlink: zone id is out of range
[   96.864205][ T7133] netlink: zone id is out of range
[   96.866518][ T7133] netlink: zone id is out of range
[   96.870229][ T7133] netlink: zone id is out of range
[   96.874729][ T7133] netlink: zone id is out of range
[   96.877066][ T7133] netlink: zone id is out of range
[   96.879338][ T7133] netlink: zone id is out of range
[   96.882850][ T7133] netlink: zone id is out of range
[   96.885054][ T7133] netlink: zone id is out of range
[   96.888460][ T7133] netlink: zone id is out of range
[   97.089413][ T7146] loop2: detected capacity change from 0 to 1024
[   97.110567][ T7146] syz.2.426: attempt to access beyond end of device
[   97.110567][ T7146] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024
[   97.120878][ T7146] Buffer I/O error on dev loop2, logical block 458752, async page read
[   97.124652][ T7146] syz.2.426: attempt to access beyond end of device
[   97.124652][ T7146] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024
[   97.130495][ T7146] Buffer I/O error on dev loop2, logical block 458752, async page read
[   97.194750][ T5233] Bluetooth: hci2: command tx timeout
[   97.731923][    T9] usb 4-1: USB disconnect, device number 3
[   98.231377][ T6009] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   98.397992][ T6009] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[   98.401758][ T6009] usb 4-1: config 0 has no interface number 0
[   98.415121][ T6009] usb 4-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=c6.7f
[   98.420614][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.430526][ T6009] usb 4-1: Product: syz
[   98.434718][ T6009] usb 4-1: Manufacturer: syz
[   98.437801][ T6009] usb 4-1: SerialNumber: syz
[   98.445882][ T6009] usb 4-1: config 0 descriptor??
[   98.450941][ T6009] esd_usb 4-1:0.120: sending version message failed
[   98.453696][ T6009] esd_usb 4-1:0.120: probe with driver esd_usb failed with error -22
[   98.574153][ T7188] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[   98.665566][ T6009] usb 4-1: USB disconnect, device number 4
[   98.902811][ T7223] loop1: detected capacity change from 0 to 136
[   98.917598][ T7223] Symlink component flag not implemented
[   98.920455][ T7223] Symlink component flag not implemented (108)
[   98.973571][ T7231] loop2: detected capacity change from 0 to 256
[   98.984453][ T7231] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   99.023608][ T7235] Zero length message leads to an empty skb
[   99.155891][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'.
[   99.271358][ T5233] Bluetooth: hci2: command tx timeout
[   99.508171][ T7249] loop2: detected capacity change from 0 to 8
[   99.547821][ T7250] capability: warning: `syz.1.473' uses deprecated v2 capabilities in a way that may be insecure
[  100.031235][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  100.196207][   T10] usb 2-1: Using ep0 maxpacket: 8
[  100.203740][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  100.208701][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  100.280126][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  100.284400][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  100.289615][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  100.296909][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  100.300912][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.307010][   T10] usb 2-1: config 0 descriptor??
[  100.319505][ T5233] Bluetooth: hci3: urb ffff88802216e800 submission failed (90)
[  100.535830][ T5883] usb 2-1: USB disconnect, device number 7
[  100.957042][ T7285] wg0 speed is unknown, defaulting to 1000
[  100.963527][ T7285] wg0 speed is unknown, defaulting to 1000
[  100.968426][ T7285] wg0 speed is unknown, defaulting to 1000
[  101.117664][ T7285] infiniband syz2: set active
[  101.121556][   T10] wg0 speed is unknown, defaulting to 1000
[  101.124307][ T7285] infiniband syz2: added wg0
[  101.158072][ T7285] RDS/IB: syz2: added
[  101.160358][ T7285] smc: adding ib device syz2 with port count 1
[  101.163451][ T7285] smc:    ib device syz2 port 1 has pnetid 
[  101.167621][   T10] wg0 speed is unknown, defaulting to 1000
[  101.172284][ T7285] wg0 speed is unknown, defaulting to 1000
[  101.374533][ T7292] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.378242][ T7292] syzkaller0: entered promiscuous mode
[  101.380626][ T7292] syzkaller0: entered allmulticast mode
[  101.406468][ T7285] wg0 speed is unknown, defaulting to 1000
[  101.408902][ T7292] tipc: Resetting bearer <eth:syzkaller0>
[  101.417122][ T7291] tipc: Resetting bearer <eth:syzkaller0>
[  101.429838][ T7291] tipc: Disabling bearer <eth:syzkaller0>
[  101.553754][ T7285] wg0 speed is unknown, defaulting to 1000
[  101.666887][ T7302] input: syz0 as /devices/virtual/input/input7
[  103.053795][ T7326] batadv_slave_0: entered promiscuous mode
[  103.081810][ T7326] batadv_slave_0: left promiscuous mode
[  103.227698][ T7334] loop1: detected capacity change from 0 to 8192
[  103.295625][ T7334]  loop1: AHDI p2 p3 p4
[  103.298008][ T7334] loop1: p2 size 8426755 extends beyond EOD, truncated
[  103.307124][ T7334] loop1: p4 size 100663296 extends beyond EOD, truncated
[  103.678956][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  103.695744][    T9] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  104.655152][ T7367] loop1: detected capacity change from 0 to 8
[  104.684765][ T7367] unable to read id index table
[  105.128518][ T7382] loop2: detected capacity change from 0 to 128
[  105.156265][ T7384] netlink: 830 bytes leftover after parsing attributes in process `syz.1.528'.
[  105.267043][   T33] kauditd_printk_skb: 87 callbacks suppressed
[  105.267052][   T33] audit: type=1326 audit(1755256901.976:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc778ebe9 code=0x7ffc0000
[  105.302779][   T33] audit: type=1326 audit(1755256901.996:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc778ebe9 code=0x7ffc0000
[  105.310475][   T33] audit: type=1326 audit(1755256901.996:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.534" exe="/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f7fc778ebe9 code=0x7ffc0000
[  105.320839][   T33] audit: type=1326 audit(1755256901.996:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fc778ebe9 code=0x7ffc0000
[  105.514457][ T7408] loop1: detected capacity change from 0 to 128
[  105.662015][ T6009] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  105.821176][ T6009] usb 3-1: Using ep0 maxpacket: 16
[  105.835075][ T6009] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  105.838803][ T6009] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.853534][ T6009] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.863806][ T6009] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.867956][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.876387][ T6009] usb 3-1: Product: syz
[  105.880012][ T6009] usb 3-1: Manufacturer: syz
[  105.884055][ T6009] usb 3-1: SerialNumber: syz
[  106.376914][ T6009] usb 3-1: 0:2 : does not exist
[  106.387048][ T6009] usb 3-1: USB disconnect, device number 7
[  107.045632][ T7452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.559'.
[  107.653194][ T7479] sctp: [Deprecated]: syz.3.572 (pid 7479) Use of struct sctp_assoc_value in delayed_ack socket option.
[  107.653194][ T7479] Use struct sctp_sack_info instead
[  109.041314][ T6009] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  109.191342][ T6009] usb 2-1: Using ep0 maxpacket: 8
[  109.195470][ T6009] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  109.204083][ T6009] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  109.209465][ T6009] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  109.213125][ T6009] usb 2-1: Product: syz
[  109.215067][ T6009] usb 2-1: Manufacturer: syz
[  109.217207][ T6009] usb 2-1: SerialNumber: syz
[  109.689370][ T6009] usb 2-1: Handspring Visor / Palm OS: No valid connect info available
[  109.692632][ T6009] usb 2-1: Handspring Visor / Palm OS: port 0, is for Debugger use
[  109.695303][ T6009] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  109.697907][ T6009] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  109.702046][ T6009] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[  109.704823][ T6009] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  109.708355][ T6009] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  109.713049][ T6009] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  109.716644][ T6009] usb 2-1: USB disconnect, device number 8
[  109.721552][ T6009] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  109.725629][ T6009] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  109.728868][ T6009] visor 2-1:1.0: device disconnected
[  109.870658][ T7519] loop2: detected capacity change from 0 to 32768
[  109.874915][ T7519] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.589 (7519)
[  109.882028][ T7519] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.885403][ T7519] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  109.888236][ T7519] BTRFS info (device loop2): using free-space-tree
[  109.916909][ T7519] BTRFS info (device loop2): checking UUID tree
[  109.945297][ T5848] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  110.199649][ T6009] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  110.206360][ T6009] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  110.368062][ T7557] loop1: detected capacity change from 0 to 512
[  110.370546][ T7557] EXT4-fs: Ignoring removed orlov option
[  110.379780][ T7557] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  110.393738][ T7557] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.599: corrupted in-inode xattr: e_value size too large
[  110.402323][ T7557] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.599: couldn't read orphan inode 15 (err -117)
[  110.419491][ T7557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.450595][ T6928] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.170448][ T7603] loop3: detected capacity change from 0 to 32768
[  112.175026][ T7603] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.617 (7603)
[  112.184110][ T7603] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  112.187845][ T7603] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  112.190649][ T7603] BTRFS info (device loop3): using free-space-tree
[  112.760280][ T6474] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  112.945983][ T7626] loop2: detected capacity change from 0 to 32768
[  112.953803][ T7626] 
[  112.953803][ T7626]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.953803][ T7626] 
[  112.967489][ T7626] 
[  112.967489][ T7626]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.967489][ T7626] 
[  112.972072][ T7626] 
[  112.972072][ T7626]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.972072][ T7626] 
[  112.976369][ T7626] 
[  112.976369][ T7626]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.976369][ T7626] 
[  112.980664][ T7626] 
[  112.980664][ T7626]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.980664][ T7626] 
[  112.989346][  T116] 
[  112.989346][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  112.989346][  T116] 
[  112.995924][ T7626] ialloc: diAlloc returned -5!
[  113.011526][ T5848] 
[  113.011526][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  113.011526][ T5848] 
[  113.019504][ T5848] 
[  113.019504][ T5848]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  113.019504][ T5848] 
[  113.169111][ T7638] hub 6-0:1.0: USB hub found
[  113.173342][ T7638] hub 6-0:1.0: 1 port detected
[  113.408223][ T7650] net_ratelimit: 11 callbacks suppressed
[  113.408234][ T7650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.411887][ T7649] loop3: detected capacity change from 0 to 128
[  113.417767][ T7649] befs: (loop3): No write support. Marking filesystem read-only
[  113.424131][ T7649] befs: (loop3): invalid magic header
[  113.476082][ T7654] loop3: detected capacity change from 0 to 4096
[  113.481612][ T7654] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  113.503724][ T7654] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  113.860071][ T7679] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present
[  113.990827][ T7687] loop1: detected capacity change from 0 to 4096
[  114.073622][   T64] ntfs3(loop1): ino=5, mi_enum_attr
[  114.135256][ T7691] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  114.435975][ T7710] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0)
[  114.721046][ T7714] loop2: detected capacity change from 0 to 32768
[  114.758617][ T7714] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  114.767322][ T7714] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  114.780465][ T7714] (syz.2.660,7714,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  114.856980][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[  114.939276][ T7737] veth1_vlan: entered allmulticast mode
[  115.301319][ T6009] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  115.455447][ T6009] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.471064][ T6009] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  115.479343][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.482108][ T6009] usb 4-1: Product: syz
[  115.483508][ T6009] usb 4-1: Manufacturer: syz
[  115.485068][ T6009] usb 4-1: SerialNumber: syz
[  115.506997][ T7743] loop2: detected capacity change from 0 to 32768
[  115.526681][ T7743] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.546658][ T7743] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  115.559286][ T7743] XFS (loop2): Starting recovery (logdev: internal)
[  115.574273][ T7743] XFS (loop2): Ending recovery (logdev: internal)
[  115.631759][ T5848] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  115.920868][ T6009] cdc_ncm 4-1:1.0: bind() failure
[  115.937906][ T6009] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[  115.947689][ T6009] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  115.957297][ T6009] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  115.995490][ T6009] usb 4-1: USB disconnect, device number 5
[  116.171363][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  116.321343][   T10] usb 3-1: Using ep0 maxpacket: 16
[  116.327405][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.331898][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.336048][   T10] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  116.339926][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.346817][   T10] usb 3-1: config 0 descriptor??
[  116.689130][ T7773] loop3: detected capacity change from 0 to 32768
[  116.756328][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  116.756347][ T7773]   allowing incompatible features above 0.0: (unknown version)
[  116.756354][ T7773]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  116.756362][ T7773]   with devices loop3
[  116.777900][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  116.782641][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  116.794027][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  116.799633][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  116.810076][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  116.816289][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  116.823028][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  116.826754][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  116.850659][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  116.866797][   T10] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0
[  116.938041][ T7773] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown by ioctl type 0emergency read only at seq 2
[  116.943482][ T5311] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  116.967553][ T7773] syz.3.684 (7773) used greatest stack depth: 15352 bytes left
[  116.971425][   T10] corsair 0003:1B1C:1B02.0006: Read invalid backlight brightness: 50.
[  116.975669][ T5311] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  116.985833][ T5311] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 2
[  116.991286][ T5311] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 2
[  116.993242][ T6474] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  116.996413][ T5311] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): unclean shutdown complete, journal seq 2
[  117.007155][ T5311] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done going read-only, filesystem not clean
[  117.029221][ T6474] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  117.161673][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  117.169784][   T24] usb 3-1: USB disconnect, device number 8
[  117.311464][    T9] usb 2-1: Using ep0 maxpacket: 8
[  117.315312][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.319640][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  117.324020][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  117.327972][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  117.332203][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  117.337710][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  117.341470][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.346723][    T9] usb 2-1: config 0 descriptor??
[  117.559859][ T6009] usb 2-1: USB disconnect, device number 9
[  117.703116][ T7790] binder: 7789:7790 ioctl c00c620f 0 returned -14
[  118.071955][ T6009] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  118.143746][ T7802] loop3: detected capacity change from 0 to 4096
[  118.169317][ T7802] ntfs3(loop3): failed to convert "0080" to koi8-ru
[  118.175506][ T7802] ntfs3(loop3): failed to convert name for inode 1e.
[  118.178424][ T7802] ntfs3(loop3): ino=1f, mi_enum_attr
[  118.180484][ T7802] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  118.235067][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  118.241263][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  118.259147][ T6009] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  118.266315][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.269697][ T6009] usb 3-1: Product: syz
[  118.275895][ T6009] usb 3-1: Manufacturer: syz
[  118.277830][ T6009] usb 3-1: SerialNumber: syz
[  118.284726][ T6009] usb 3-1: config 0 descriptor??
[  118.471246][ T7820] syz.1.701 (7820): /proc/7819/oom_adj is deprecated, please use /proc/7819/oom_score_adj instead.
[  118.561548][ T6009] usb 3-1: USB disconnect, device number 9
[  118.881100][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'.
[  118.884902][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'.
[  119.191820][   T33] audit: type=1804 audit(1755256915.896:113): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.709" name="/newroot/158/file0" dev="tmpfs" ino=845 res=1 errno=0
[  119.270313][ T7843] loop3: detected capacity change from 0 to 4096
[  119.275868][ T7843] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  119.354651][ T7844] netlink: 68 bytes leftover after parsing attributes in process `syz.3.710'.
[  119.398841][   T33] audit: type=1800 audit(1755256916.106:114): pid=7844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.710" name="file1" dev="loop3" ino=33 res=0 errno=0
[  119.410190][ T5311] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  119.584332][ T5311] usb 3-1: config 0 has an invalid interface number: 199 but max is 1
[  119.587701][ T5311] usb 3-1: config 0 has no interface number 1
[  119.590250][ T5311] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  119.594251][ T5311] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  119.599616][ T5311] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  119.604768][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  119.607898][ T5311] usb 3-1: SerialNumber: syz
[  119.617288][ T5311] usb 3-1: config 0 descriptor??
[  119.621446][ T5311] usb 3-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  119.624085][ T5311] usb 3-1: No valid video chain found.
[  119.864449][    T9] usb 3-1: USB disconnect, device number 10
[  119.896374][ T7848] IPv6: sit1: Disabled Multicast RS
[  119.905618][ T7848] sit1: entered allmulticast mode
[  120.192128][ T7852] loop1: detected capacity change from 0 to 1024
[  120.197284][ T7852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  120.200158][ T7852] EXT4-fs (loop1): Test dummy encryption mode enabled
[  120.205150][ T7852] EXT4-fs (loop1): filesystem too large to mount safely on this system
[  120.529623][ T7858] netlink: 'syz.2.716': attribute type 10 has an invalid length.
[  120.533304][ T7858] syz_tun: entered promiscuous mode
[  120.548279][ T7858] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  120.573976][ T7858] netlink: 'syz.2.716': attribute type 10 has an invalid length.
[  120.587688][ T7858] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.593767][ T7858] team0: Port device bond0 added
[  120.800754][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'.
[  120.811050][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'.
[  122.019493][ T7892] netlink: 'syz.1.731': attribute type 34 has an invalid length.
[  122.130606][ T7898] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  122.336063][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'.
[  122.339747][ T7915] bridge_slave_1: left allmulticast mode
[  122.343756][ T7915] bridge_slave_1: left promiscuous mode
[  122.347096][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.352954][ T7915] bridge_slave_0: left allmulticast mode
[  122.354812][ T7915] bridge_slave_0: left promiscuous mode
[  122.356995][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.180778][ T7925] loop2: detected capacity change from 0 to 512
[  123.188983][ T7925] EXT4-fs: Ignoring removed oldalloc option
[  123.203653][ T7925] EXT4-fs (loop2): 1 truncate cleaned up
[  123.209298][ T7925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.231342][ T5311] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  123.287259][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.337034][ T7931] nfs4: Bad value for 'source'
[  123.391622][ T5311] usb 2-1: Using ep0 maxpacket: 16
[  123.413930][ T5311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.419878][ T7935] syz.2.749 uses obsolete (PF_INET,SOCK_PACKET)
[  123.420470][ T5311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.443087][ T5311] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  123.450976][ T5311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.457640][ T5311] usb 2-1: Product: syz
[  123.459509][ T5311] usb 2-1: Manufacturer: syz
[  123.462878][ T5311] usb 2-1: SerialNumber: syz
[  123.705217][ T5311] usb 2-1: 0:2 : does not exist
[  123.723888][ T5311] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  123.750455][ T5311] usb 2-1: USB disconnect, device number 10
[  124.067263][ T7949] loop2: detected capacity change from 0 to 1024
[  124.071069][ T7949] EXT4-fs: Ignoring removed orlov option
[  124.076256][ T7949] EXT4-fs (loop2): Test dummy encryption mode enabled
[  124.086196][ T7949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.133358][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.533358][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'.
[  124.679210][ T7966] loop2: detected capacity change from 0 to 32768
[  124.702512][ T7984] loop3: detected capacity change from 0 to 64
[  124.712950][ T7987] netlink: 288 bytes leftover after parsing attributes in process `syz.1.769'.
[  124.714146][ T7966] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.719199][ T7984] MINIX-fs: mounting file system with errors, running fsck is recommended
[  124.745183][ T7966] XFS (loop2): Ending clean mount
[  124.750411][ T7966] XFS (loop2): Quotacheck needed: Please wait.
[  124.771623][ T7966] XFS (loop2): Quotacheck: Done.
[  124.787677][ T7994] netlink: 'syz.3.771': attribute type 5 has an invalid length.
[  124.798103][ T5848] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.952423][ T8004] loop2: detected capacity change from 0 to 512
[  124.954890][ T8004] EXT4-fs: Ignoring removed i_version option
[  124.956897][ T8004] EXT4-fs: Ignoring removed nobh option
[  124.959141][ T8004] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  124.964859][ T8004] EXT4-fs (loop2): 1 truncate cleaned up
[  124.967860][ T8004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.028542][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.488101][ T8032] loop2: detected capacity change from 0 to 2048
[  125.503014][ T8033] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.639191][ T8043] netlink: 244 bytes leftover after parsing attributes in process `syz.1.793'.
[  125.825032][   T33] audit: type=1326 audit(1755256922.536:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.803" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4baf8ebe9 code=0x7ffc0000
[  125.858470][   T33] audit: type=1326 audit(1755256922.556:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.803" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4baf90b07 code=0x7ffc0000
[  125.891636][   T33] audit: type=1326 audit(1755256922.556:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.803" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe4baf90a7c code=0x7ffc0000
[  125.900744][   T33] audit: type=1326 audit(1755256922.556:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.803" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe4baf909b4 code=0x7ffc0000
[  125.923106][   T33] audit: type=1326 audit(1755256922.556:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.803" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe4baf909b4 code=0x7ffc0000
[  125.936066][   T33] audit: type=1326 audit(1755256922.556:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.803" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe4baf8d84a code=0x7ffc0000
[  126.176210][   T33] audit: type=1326 audit(1755256922.556:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.803" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4baf8ebe9 code=0x7ffc0000
[  126.185167][   T33] audit: type=1326 audit(1755256922.556:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8062 comm="syz.2.803" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4baf8ebe9 code=0x7ffc0000
[  126.323655][ T8071] loop3: detected capacity change from 0 to 32768
[  126.336017][ T8071] (syz.3.806,8071,0):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  126.336033][ T8071] (syz.3.806,8071,0):ocfs2_check_volume:2432 ERROR: status = -27
[  126.343727][ T8071] (syz.3.806,8071,0):ocfs2_mount_volume:1764 ERROR: status = -27
[  126.350759][ T8071] (syz.3.806,8071,0):ocfs2_fill_super:1177 ERROR: status = -27
[  126.446025][ T8084] loop2: detected capacity change from 0 to 512
[  126.446036][ T8085] loop3: detected capacity change from 0 to 256
[  126.454776][ T8085] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  126.478488][ T8084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.484398][ T8084] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.496650][   T33] audit: type=1800 audit(1755256923.206:123): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.811" name="file1" dev="loop2" ino=15 res=0 errno=0
[  126.560250][   T33] audit: type=1800 audit(1755256923.266:124): pid=8092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.811" name="file2" dev="loop2" ino=16 res=0 errno=0
[  126.668416][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.794947][ T6009] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  126.961463][   T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  126.964767][ T6009] usb 4-1: Using ep0 maxpacket: 8
[  126.973491][ T6009] usb 4-1: unable to get BOS descriptor or descriptor too short
[  126.980214][ T6009] usb 4-1: config 0 has an invalid interface number: 88 but max is 0
[  126.983797][ T6009] usb 4-1: config 0 has no interface number 0
[  126.986441][ T6009] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  126.992245][ T6009] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  126.996933][ T6009] usb 4-1: config 0 interface 88 has no altsetting 0
[  127.003203][ T6009] usb 4-1: string descriptor 0 read error: -22
[  127.005977][ T6009] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  127.009829][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  127.018656][ T6009] usb 4-1: config 0 descriptor??
[  127.027525][ T6009] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input8
[  127.122239][   T24] usb 2-1: Using ep0 maxpacket: 8
[  127.127922][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  127.134527][   T24] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  127.138401][   T24] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  127.143133][   T24] usb 2-1: Product: syz
[  127.144925][   T24] usb 2-1: Manufacturer: syz
[  127.146847][   T24] usb 2-1: SerialNumber: syz
[  127.235708][ T6009] usb 4-1: USB disconnect, device number 6
[  127.357170][   T24] usb 2-1: Handspring Visor / Palm OS: No valid connect info available
[  127.359889][   T24] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  127.362498][   T24] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  127.365128][   T24] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  127.558562][   T24] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  127.571754][   T24] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  127.581339][   T24] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  127.626919][ T8103] loop2: detected capacity change from 0 to 16
[  127.636362][ T8103] erofs (device loop2): mounted with root inode @ nid 36.
[  127.707166][ T8107] syz_tun: entered allmulticast mode
[  127.719714][ T8107] dvmrp1: entered allmulticast mode
[  127.730355][ T8106] syz_tun: left allmulticast mode
[  127.764856][ T6009] usb 2-1: USB disconnect, device number 11
[  127.774432][ T6009] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  127.780430][ T6009] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  127.791568][ T6009] visor 2-1:1.0: device disconnected
[  127.838994][ T8117] netlink: 'syz.3.826': attribute type 1 has an invalid length.
[  127.841767][ T8117] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.826'.
[  127.951660][ T8124] loop3: detected capacity change from 0 to 4096
[  127.955697][ T8124] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  127.969786][ T8124] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  128.346236][ T8142] loop1: detected capacity change from 0 to 256
[  128.351924][ T8142] exFAT-fs (loop1): error, The cluster chain has a loop
[  128.354401][ T8142] exFAT-fs (loop1): failed to count the number of clusters in root
[  128.357228][ T8142] exFAT-fs (loop1): failed to recognize exfat type
[  128.411275][ T6009] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  128.581743][ T6009] usb 4-1: Using ep0 maxpacket: 8
[  128.594930][ T6009] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  128.598278][ T6009] usb 4-1: config 179 has no interface number 0
[  128.601024][ T6009] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  128.608169][ T6009] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  128.612729][ T6009] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  128.617014][ T6009] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  128.621506][ T6009] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  128.626848][ T6009] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  128.630350][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.645222][ T8136] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  128.943985][  T793] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9
[  129.395377][ T5311] usb 4-1: USB disconnect, device number 7
[  129.395380][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  130.076225][ T8153] loop3: detected capacity change from 0 to 512
[  130.081441][ T8153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  130.092345][ T8153] EXT4-fs (loop3): 1 truncate cleaned up
[  130.096272][ T8153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.178139][ T6474] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.425821][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'.
[  130.428782][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.846'.
[  130.571240][ T5311] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  130.708145][ T8175] loop2: detected capacity change from 0 to 512
[  130.713522][ T8175] EXT4-fs (loop2): Invalid default hash set in the superblock
[  130.725020][ T5311] usb 2-1: unable to get BOS descriptor or descriptor too short
[  130.728924][ T5311] usb 2-1: not running at top speed; connect to a high speed hub
[  130.733851][ T5311] usb 2-1: config 4 has an invalid interface number: 32 but max is 0
[  130.736967][ T5311] usb 2-1: config 4 has no interface number 0
[  130.740992][ T5311] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  130.744871][ T5311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.747774][ T5311] usb 2-1: Product: syz
[  130.749125][ T5311] usb 2-1: Manufacturer: syz
[  130.750614][ T5311] usb 2-1: SerialNumber: syz
[  130.771276][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  130.923938][    T9] usb 4-1: config 160 has an invalid interface number: 200 but max is 0
[  130.926726][    T9] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config
[  130.930080][    T9] usb 4-1: config 160 has no interface number 0
[  130.933323][    T9] usb 4-1: config 160 interface 200 has no altsetting 0
[  130.937884][    T9] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  130.940862][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.944581][    T9] usb 4-1: Product: syz
[  130.946032][    T9] usb 4-1: Manufacturer: syz
[  130.952687][    T9] usb 4-1: SerialNumber: syz
[  130.967684][ T5311] usb 2-1: Found UVC 0.02 device syz (17dc:0202)
[  130.969780][ T5311] usb 2-1: No valid video chain found.
[  130.974254][ T5311] usb 2-1: USB disconnect, device number 12
[  131.690676][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  131.693579][    T9] usb 4-1: MIDIStreaming interface descriptor not found
[  131.706719][    T9] usb 4-1: USB disconnect, device number 8
[  132.085699][ T8226] loop3: detected capacity change from 0 to 512
[  132.112393][ T8226] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  132.114699][ T8228] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.875'.
[  132.137813][ T8226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  132.150037][ T8226] System zones: 1-12
[  132.162084][ T8226] EXT4-fs (loop3): 1 truncate cleaned up
[  132.167657][ T8226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.234416][ T6474] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.326322][ T8244] syz.3.879 (8244): attempted to duplicate a private mapping with mremap.  This is not supported.
[  132.330107][ T8242] libceph: resolve '4..' (ret=-3): failed
[  132.468926][ T8235] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  132.581578][ T8262] cgroup: subsys name conflicts with all
[  132.636439][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.638576][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.710856][ T8272] loop1: detected capacity change from 0 to 4096
[  132.719613][ T8272] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  132.750980][ T8281] netlink: 48 bytes leftover after parsing attributes in process `syz.3.898'.
[  132.802339][ T8288] openvswitch: netlink: Missing valid actions attribute.
[  132.806658][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.847176][ T8293] loop1: detected capacity change from 0 to 128
[  132.854578][ T8293] FAT-fs (loop1): Directory bread(block 32) failed
[  132.856820][ T8293] FAT-fs (loop1): Directory bread(block 33) failed
[  132.858926][ T8293] FAT-fs (loop1): Directory bread(block 34) failed
[  132.861751][ T8293] FAT-fs (loop1): Directory bread(block 35) failed
[  132.864592][ T8293] FAT-fs (loop1): Directory bread(block 36) failed
[  132.866605][ T8293] FAT-fs (loop1): Directory bread(block 37) failed
[  132.868725][ T8293] FAT-fs (loop1): Directory bread(block 38) failed
[  132.870909][ T8293] FAT-fs (loop1): Directory bread(block 39) failed
[  132.876023][ T8293] FAT-fs (loop1): Directory bread(block 40) failed
[  132.878514][ T8293] FAT-fs (loop1): Directory bread(block 41) failed
[  132.907979][ T8293] syz.1.904: attempt to access beyond end of device
[  132.907979][ T8293] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128
[  132.916728][ T8293] FAT-fs (loop1): Filesystem has been set read-only
[  132.919260][ T8293] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  132.924577][ T8293] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  132.955287][ T8285] loop2: detected capacity change from 0 to 32768
[  133.311222][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  133.329965][ T8308] loop2: detected capacity change from 0 to 32768
[  133.336276][ T8308] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.354333][ T8308] XFS (loop2): Ending clean mount
[  133.359924][ T8308] XFS (loop2): Quotacheck needed: Please wait.
[  133.372478][ T8308] XFS (loop2): Quotacheck: Done.
[  133.406512][ T5848] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.471313][    T9] usb 2-1: Using ep0 maxpacket: 8
[  133.476250][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  133.485173][    T9] usb 2-1: config 17 has an invalid interface number: 8 but max is 1
[  133.488348][    T9] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2
[  133.493684][    T9] usb 2-1: config 17 has no interface number 0
[  133.496177][    T9] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 170, changing to 7
[  133.500435][    T9] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 33185, setting to 1024
[  133.505554][    T9] usb 2-1: config 17 interface 8 has no altsetting 0
[  133.510441][    T9] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  133.515897][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.519003][    T9] usb 2-1: Product: syz
[  133.520736][    T9] usb 2-1: Manufacturer: syz
[  133.522668][    T9] usb 2-1: SerialNumber: syz
[  133.738787][    T9] usb 2-1: selecting invalid altsetting 0
[  133.740717][    T9] usb 2-1: 8:6 : no UAC_FORMAT_TYPE desc
[  133.742869][    T9] usb 2-1: selecting invalid altsetting 0
[  133.750632][    T9] usb 2-1: USB disconnect, device number 13
[  133.751296][ T6009] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  133.911236][ T6009] usb 3-1: Using ep0 maxpacket: 32
[  133.915180][ T6009] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  133.921172][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.931942][ T6009] usb 3-1: config 0 descriptor??
[  133.940527][ T6009] gspca_main: nw80x-2.14.0 probing 055f:d001
[  134.092298][  T793] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  134.140246][ T6009] gspca_nw80x: reg_w err -71
[  134.142181][ T6009] nw80x 3-1:0.0: probe with driver nw80x failed with error -71
[  134.145745][ T6009] usb 3-1: USB disconnect, device number 11
[  134.263543][  T793] usb 4-1: Using ep0 maxpacket: 32
[  134.267971][  T793] usb 4-1: unable to get BOS descriptor or descriptor too short
[  134.272174][  T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64
[  134.279362][  T793] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe
[  134.283520][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.287300][  T793] usb 4-1: Product: syz
[  134.289473][  T793] usb 4-1: Manufacturer: syz
[  134.292030][  T793] usb 4-1: SerialNumber: syz
[  134.297404][  T793] usb 4-1: config 0 descriptor??
[  134.452140][ T8331] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  134.507242][  T793] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  134.711415][   T10] usb 4-1: USB disconnect, device number 9
[  135.002467][ T8343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.058708][ T8343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.116170][ T8343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  135.255613][ T8341] loop2: detected capacity change from 0 to 131072
[  135.258672][ T8341] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  135.261370][ T8341] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  135.264937][ T8341] F2FS-fs (loop2): invalid crc value
[  135.296342][ T8341] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  135.301646][ T8341] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  135.303889][ T8341] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  135.655313][ T8363] loop3: detected capacity change from 0 to 32768
[  135.658124][ T8363] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.931 (8363)
[  135.663567][ T8363] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  135.676065][ T8363] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  135.679292][ T8363] BTRFS info (device loop3): using free-space-tree
[  135.716631][ T8377] netlink: 20 bytes leftover after parsing attributes in process `syz.1.934'.
[  135.717680][ T8363] BTRFS info (device loop3): rebuilding free space tree
[  135.759689][ T8384] loop1: detected capacity change from 0 to 128
[  135.763754][ T6474] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  135.770577][ T8384] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.776143][ T8384] ext4 filesystem being mounted at /185/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.783662][ T8384] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  135.810530][ T6928] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.502587][ T8393] loop3: detected capacity change from 0 to 32768
[  136.509557][ T8393] lmLogInit: exit(-22)
[  136.511264][ T8393] lmLogOpen: exit(-22)
[  137.185826][ T8438] loop1: detected capacity change from 0 to 128
[  137.331267][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  137.491245][   T24] usb 4-1: Using ep0 maxpacket: 8
[  137.498502][   T24] usb 4-1: config 162 has an invalid interface number: 150 but max is 0
[  137.503747][   T24] usb 4-1: config 162 has no interface number 0
[  137.507369][   T24] usb 4-1: config 162 interface 150 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  137.514221][   T24] usb 4-1: config 162 interface 150 has no altsetting 0
[  137.524237][   T24] usb 4-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=e0.0e
[  137.528106][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.534290][   T24] usb 4-1: Product: syz
[  137.536063][   T24] usb 4-1: Manufacturer: syz
[  137.538192][   T24] usb 4-1: SerialNumber: syz
[  137.752621][   T24] usb 4-1: Found UVC 0.0a device syz (058f:3820)
[  137.754909][   T24] usb 4-1: No valid video chain found.
[  137.760260][   T24] usb 4-1: USB disconnect, device number 10
[  137.891198][ T6009] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  138.041188][ T6009] usb 2-1: Using ep0 maxpacket: 32
[  138.045021][ T6009] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  138.047991][ T6009] usb 2-1: config 0 has no interface number 0
[  138.050221][ T6009] usb 2-1: config 0 interface 184 has no altsetting 0
[  138.055144][ T6009] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  138.058289][ T6009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.060791][ T6009] usb 2-1: Product: syz
[  138.062239][ T6009] usb 2-1: Manufacturer: syz
[  138.063754][ T6009] usb 2-1: SerialNumber: syz
[  138.068889][ T6009] usb 2-1: config 0 descriptor??
[  138.080904][ T6009] smsc75xx v1.0.0
[  138.082276][ T6009] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  138.090078][ T6009] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[  138.205070][ T8450] loop2: detected capacity change from 0 to 32768
[  138.207993][ T8450] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.964 (8450)
[  138.213790][ T8450] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  138.217194][ T8450] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  138.220280][ T8450] BTRFS info (device loop2): disk space caching is enabled
[  138.222976][ T8450] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  138.241784][ T8450] BTRFS info (device loop2): rebuilding free space tree
[  138.248021][ T8450] BTRFS info (device loop2): disabling free space tree
[  138.250302][ T8450] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.253663][ T8450] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.284508][ T8450] BTRFS info (device loop2): balance: start -susage=10..4095,devid=0,limit=0,stripes=0..0
[  138.290772][ T8450] BTRFS info (device loop2): balance: ended with status: 0
[  138.294751][ T5311] usb 2-1: USB disconnect, device number 14
[  138.315956][   T33] kauditd_printk_skb: 21 callbacks suppressed
[  138.315968][   T33] audit: type=1800 audit(1755256935.026:146): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.965" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  138.332126][ T5848] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  139.181304][ T5311] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  139.331333][ T5311] usb 2-1: Using ep0 maxpacket: 8
[  139.341872][ T5311] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  139.345785][ T5311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.348591][ T5311] usb 2-1: Product: syz
[  139.350065][ T5311] usb 2-1: Manufacturer: syz
[  139.355644][ T5311] usb 2-1: SerialNumber: syz
[  139.360913][ T5311] usb 2-1: config 0 descriptor??
[  139.385098][ T5311] gspca_main: se401-2.14.0 probing 047d:5003
[  139.472886][ T8491] netlink: 'syz.3.975': attribute type 3 has an invalid length.
[  139.725487][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'.
[  139.795802][ T5311] gspca_se401: ExtraFeatures: 79
[  139.797856][ T5311] gspca_se401: Frame size: 0x0 1/16th janggu
[  139.818411][ T8506] tmpfs: Bad value for 'mpol'
[  140.007847][ T5311] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11
[  140.027573][ T5311] usb 2-1: USB disconnect, device number 15
[  140.694867][ T8523] loop1: detected capacity change from 0 to 256
[  141.044619][ T8549] loop1: detected capacity change from 0 to 4096
[  141.106200][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'.
[  141.158019][    T9] wg0 speed is unknown, defaulting to 1000
[  141.821324][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  141.971232][   T24] usb 4-1: Using ep0 maxpacket: 16
[  141.978086][   T24] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  141.982063][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.985546][   T24] usb 4-1: Product: syz
[  142.034674][   T24] usb 4-1: Manufacturer: syz
[  142.038432][   T24] usb 4-1: SerialNumber: syz
[  142.042471][   T24] usb 4-1: config 0 descriptor??
[  142.389490][ T8592] loop2: detected capacity change from 0 to 1024
[  142.416846][ T8592] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5
[  142.432823][ T8592] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  142.436800][ T8592] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1021: Failed to acquire dquot type 0
[  142.464710][ T8592] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  142.476103][ T8592] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1021: corrupted inode contents
[  142.480069][ T8596] loop1: detected capacity change from 0 to 512
[  142.481002][ T8592] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.1021: mark_inode_dirty error
[  142.485253][   T24] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  142.495848][ T8592] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1021: corrupted inode contents
[  142.500891][ T8592] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.1021: mark_inode_dirty error
[  142.501247][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  142.505990][ T8592] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1021: corrupted inode contents
[  142.510121][   T24] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  142.516162][ T8592] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  142.519500][   T24] usb 4-1: media controller created
[  142.521095][ T8592] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.1021: corrupted inode contents
[  142.528734][ T8592] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.1021: mark_inode_dirty error
[  142.536274][ T8596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.540142][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  142.542865][ T8596] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.549642][ T8592] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  142.559144][ T8592] EXT4-fs (loop2): 1 truncate cleaned up
[  142.562917][ T8592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.589618][ T8592] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  142.625670][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.686009][   T24] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  142.690002][   T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  142.716716][ T6928] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.795769][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.802942][ T8609] bond0: (slave rose0): Enslaving as an active interface with an up link
[  142.853910][ T8614] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  142.905823][   T24] usb 4-1: USB disconnect, device number 11
[  142.933259][   T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  143.047294][ T8616] loop1: detected capacity change from 0 to 32768
[  143.051296][ T8616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1030 (8616)
[  143.057725][ T8616] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.061499][ T8616] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  143.064460][ T8616] BTRFS info (device loop1): using free-space-tree
[  143.105938][ T8616] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4)
[  143.142579][ T8620] loop2: detected capacity change from 0 to 32768
[  143.148667][ T6928] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.163731][ T8620] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  143.185236][ T8620] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  143.292222][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[  143.373393][ T8645] loop1: detected capacity change from 0 to 512
[  143.376794][ T8645] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  143.381242][ T8645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  143.384828][ T8645] EXT4-fs (loop1): orphan cleanup on readonly fs
[  143.386849][ T8645] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1037: bad orphan inode 267
[  143.390196][ T8645] EXT4-fs (loop1): Remounting filesystem read-only
[  143.394733][ T8645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  143.401072][ T8645] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1037: dx entry: limit 0 != root limit 125
[  143.406714][ T8645] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1037: Corrupt directory, running e2fsck is recommended
[  143.436468][ T6928] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  143.489140][ T8654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  143.492297][ T8654] IPv6: NLM_F_CREATE should be set when creating new route
[  143.505774][ T8654] lo: entered allmulticast mode
[  143.509786][ T8654] tunl0: entered allmulticast mode
[  143.513896][ T8656] loop3: detected capacity change from 0 to 512
[  143.516821][ T8654] gre0: entered allmulticast mode
[  143.528291][ T8654] gretap0: entered allmulticast mode
[  143.532771][ T8656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  143.538659][ T8656] ext4 filesystem being mounted at /250/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  143.551219][ T8654] erspan0: entered allmulticast mode
[  143.555812][ T8654] ip_vti0: entered allmulticast mode
[  143.559136][ T8654] ip6_vti0: entered allmulticast mode
[  143.564824][ T8654] sit0: entered allmulticast mode
[  143.569442][ T8654] ip6tnl0: entered allmulticast mode
[  143.577572][ T8654] ip6gre0: entered allmulticast mode
[  143.589650][ T8654] syz_tun: entered allmulticast mode
[  143.597358][ T8654] ip6gretap0: entered allmulticast mode
[  143.604863][ T8654] vcan0: entered allmulticast mode
[  143.611855][ T8654] bond0: entered allmulticast mode
[  143.613982][ T8654] bond_slave_0: entered allmulticast mode
[  143.616501][ T8654] bond_slave_1: entered allmulticast mode
[  143.623777][ T8654] team0: entered allmulticast mode
[  143.625985][ T8654] team_slave_0: entered allmulticast mode
[  143.628399][ T8654] team_slave_1: entered allmulticast mode
[  143.633952][ T8654] dummy0: entered allmulticast mode
[  143.640803][ T6474] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  143.644841][ T8654] nlmon0: entered allmulticast mode
[  143.647288][ T8654] caif0: entered allmulticast mode
[  143.649269][ T8654] batadv0: entered allmulticast mode
[  143.653682][ T8654] vxcan0: entered allmulticast mode
[  143.663761][ T8654] vxcan1: entered allmulticast mode
[  143.666504][ T8654] veth0: entered allmulticast mode
[  143.669706][ T8654] veth1: entered allmulticast mode
[  143.695829][ T8648] loop2: detected capacity change from 0 to 32768
[  143.700131][ T8654] wg0: entered allmulticast mode
[  143.704644][ T8654] wg1: entered allmulticast mode
[  143.706941][ T8648] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.712766][ T8654] wg2: entered allmulticast mode
[  143.717488][ T8654] veth0_to_bridge: entered allmulticast mode
[  143.724972][ T8654] bridge_slave_0: entered allmulticast mode
[  143.729461][ T8654] veth1_to_bridge: entered allmulticast mode
[  143.736167][ T8648] XFS (loop2): Ending clean mount
[  143.741567][ T8654] bridge_slave_1: entered allmulticast mode
[  143.744055][ T8648] XFS (loop2): Quotacheck needed: Please wait.
[  143.747014][ T8671] autofs: Unknown parameter 'no9 PG!8E	'
[  143.747218][ T8654] veth0_to_bond: entered allmulticast mode
[  143.765549][ T8654] veth1_to_bond: entered allmulticast mode
[  143.772226][ T8654] veth0_to_team: entered allmulticast mode
[  143.787399][ T8654] veth1_to_team: entered allmulticast mode
[  143.794090][ T8648] XFS (loop2): Quotacheck: Done.
[  143.794244][ T8654] veth0_to_batadv: entered allmulticast mode
[  143.801423][ T8654] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.804798][ T8654] batadv_slave_0: entered allmulticast mode
[  143.817464][ T8654] veth1_to_batadv: entered allmulticast mode
[  143.824586][ T8654] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.839645][ T8654] batadv_slave_1: entered allmulticast mode
[  143.843824][ T8654] xfrm0: entered allmulticast mode
[  143.847095][ T8654] veth0_to_hsr: entered allmulticast mode
[  143.851004][ T8654] hsr_slave_0: entered allmulticast mode
[  143.856687][ T8654] veth1_to_hsr: entered allmulticast mode
[  143.864279][ T8654] hsr_slave_1: entered allmulticast mode
[  143.868755][ T8654] hsr0: entered allmulticast mode
[  143.875581][ T8654] veth1_virt_wifi: entered allmulticast mode
[  143.879638][ T8654] veth0_virt_wifi: entered allmulticast mode
[  143.885030][ T8654] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  143.887799][ T8654] veth1_vlan: entered allmulticast mode
[  143.900493][ T5848] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.902279][ T8654] veth0_vlan: entered allmulticast mode
[  143.938243][ T8654] vlan0: entered allmulticast mode
[  143.940866][ T8654] vlan1: entered allmulticast mode
[  143.944560][ T8654] macvlan0: entered allmulticast mode
[  143.960374][ T8654] macvlan1: entered allmulticast mode
[  143.969054][ T8654] ipvlan0: entered allmulticast mode
[  143.979229][ T8654] ipvlan1: entered allmulticast mode
[  143.996044][ T8654] veth1_macvtap: entered allmulticast mode
[  144.006084][ T8654] veth0_macvtap: entered allmulticast mode
[  144.015263][ T8654] macvtap0: entered allmulticast mode
[  144.027690][ T8654] macsec0: entered allmulticast mode
[  144.046394][ T8654] geneve0: entered allmulticast mode
[  144.064240][ T8654] geneve1: entered allmulticast mode
[  144.075195][ T8654] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  144.087584][ T8654] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  144.098211][ T8654] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  144.112490][ T8654] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  144.121525][ T8654] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode
[  144.126101][ T6478] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.129470][ T6478] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.134938][ T6478] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.138181][ T6478] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.238369][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1053'.
[  144.313405][ T8695] syzkaller1: entered promiscuous mode
[  144.318254][ T8695] syzkaller1: entered allmulticast mode
[  144.321385][ T5311] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  144.358141][ T8699] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1057'.
[  144.397555][   T33] audit: type=1326 audit(1755256941.106:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.1058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4baf8ebe9 code=0x7ffc0000
[  144.405622][   T33] audit: type=1326 audit(1755256941.106:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.1058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4baf8ebe9 code=0x7ffc0000
[  144.413371][   T33] audit: type=1326 audit(1755256941.116:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.1058" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe4baf8ebe9 code=0x7ffc0000
[  144.420880][   T33] audit: type=1326 audit(1755256941.126:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.1058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4baf8ebe9 code=0x7ffc0000
[  144.429045][   T33] audit: type=1326 audit(1755256941.126:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.2.1058" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4bafc14a5 code=0x7ffc0000
[  144.436614][   T33] audit: type=1326 audit(1755256941.136:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.1058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4baf8ebe9 code=0x7ffc0000
[  144.444664][   T33] audit: type=1326 audit(1755256941.136:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.1058" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe4baf8d84a code=0x7ffc0000
[  144.452491][   T33] audit: type=1326 audit(1755256941.136:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.1058" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4bafc14a5 code=0x7ffc0000
[  144.471250][ T5311] usb 4-1: Using ep0 maxpacket: 16
[  144.474860][ T5311] usb 4-1: config 0 has an invalid interface number: 157 but max is 0
[  144.478229][ T5311] usb 4-1: config 0 has no interface number 0
[  144.480491][ T5311] usb 4-1: config 0 interface 157 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  144.483671][ T5311] usb 4-1: config 0 interface 157 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  144.490628][ T5311] usb 4-1: New USB device found, idVendor=058f, idProduct=9720, bcdDevice=fb.74
[  144.493649][ T5311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.496139][ T5311] usb 4-1: Product: syz
[  144.497517][ T5311] usb 4-1: Manufacturer: syz
[  144.499063][ T5311] usb 4-1: SerialNumber: syz
[  144.502499][ T5311] usb 4-1: config 0 descriptor??
[  144.504610][ T8681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  144.507117][ T8681] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  144.510383][ T5311] pl2303 4-1:0.157: required interrupt-in endpoint missing
[  144.563958][   T33] audit: type=1326 audit(1755256941.276:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8702 comm="syz.2.1058" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe4baf8ebe9 code=0x7ffc0000
[  144.628732][   T33] audit: type=1326 audit(1755256941.336:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8700 comm="syz.2.1058" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4baf8ebe9 code=0x7ffc0000
[  144.712920][ T5311] usb 4-1: USB disconnect, device number 12
[  145.221225][ T8704] loop1: detected capacity change from 0 to 32768
[  145.226192][ T8704] 
[  145.226192][ T8704]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.226192][ T8704] 
[  145.246522][ T8704] ERROR: (device loop1): diWrite: ixpxd invalid
[  145.246522][ T8704] 
[  145.251877][ T8704] ERROR: (device loop1): txCommit: 
[  145.251877][ T8704] 
[  145.257282][ T8704] 
[  145.257282][ T8704]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.257282][ T8704] 
[  145.266961][ T8704] 
[  145.266961][ T8704]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.266961][ T8704] 
[  145.281090][ T8704] ERROR: (device loop1): diWrite: ixpxd invalid
[  145.281090][ T8704] 
[  145.284809][ T8704] ERROR: (device loop1): txCommit: 
[  145.284809][ T8704] 
[  145.331902][ T6928] 
[  145.331902][ T6928]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.331902][ T6928] 
[  145.342693][ T6928] 
[  145.342693][ T6928]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.342693][ T6928] 
[  145.390623][ T8721] loop3: detected capacity change from 0 to 1024
[  145.394522][ T8721] EXT4-fs: Ignoring removed mblk_io_submit option
[  145.405763][ T8721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.448552][ T6474] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.667381][ T8747] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1079'.
[  145.971846][ T5311] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  145.986649][   T24] kernel write not supported for file /sequencer (pid: 24 comm: kworker/1:0)
[  146.123424][ T5311] usb 2-1: unable to get BOS descriptor or descriptor too short
[  146.127446][ T5311] usb 2-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16
[  146.131254][ T5311] usb 2-1: config 66 interface 0 has no altsetting 0
[  146.135701][ T5311] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  146.139229][ T5311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.142587][ T5311] usb 2-1: Product: syz
[  146.144340][ T5311] usb 2-1: Manufacturer: syz
[  146.146266][ T5311] usb 2-1: SerialNumber: syz
[  146.150933][ T8751] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  146.321253][   T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  146.362131][ T5311] ati_remote2 2-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint
[  146.375964][ T5311] usb 2-1: USB disconnect, device number 16
[  146.511374][   T24] usb 4-1: Using ep0 maxpacket: 8
[  146.516364][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  146.519863][   T24] usb 4-1: config 4 has an invalid interface number: 255 but max is 0
[  146.522656][   T24] usb 4-1: config 4 has no interface number 0
[  146.524740][   T24] usb 4-1: config 4 interface 255 has no altsetting 0
[  146.529016][   T24] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= e.87
[  146.532725][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.535344][   T24] usb 4-1: Product: syz
[  146.536773][   T24] usb 4-1: Manufacturer: syz
[  146.538336][   T24] usb 4-1: SerialNumber: syz
[  146.892195][   T24] usb 4-1: USB disconnect, device number 13
[  146.967182][ T8775] loop1: detected capacity change from 0 to 1024
[  146.970707][ T8775] EXT4-fs: Ignoring removed mblk_io_submit option
[  146.987199][ T8775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.064391][ T6928] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.386230][ T8789] team0: Device gtp0 is of different type
[  147.437440][ T8793] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4)
[  147.440285][ T8793] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  147.446182][ T8793] vhci_hcd vhci_hcd.0: Device attached
[  147.450413][ T8794] vhci_hcd: connection closed
[  147.452738][ T6478] vhci_hcd: stop threads
[  147.457283][ T6478] vhci_hcd: release socket
[  147.459444][ T6478] vhci_hcd: disconnect device
[  147.965556][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1101'.
[  147.969241][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1101'.
[  148.817068][ T8835] loop2: detected capacity change from 0 to 4096
[  148.819870][ T8835] ntfs3: Unknown parameter ''
[  148.866686][ T8834] loop2: detected capacity change from 0 to 512
[  148.889578][ T8834] EXT4-fs (loop2): orphan cleanup on readonly fs
[  148.893369][ T8834] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1114: Failed to acquire dquot type 1
[  148.898405][ T8834] EXT4-fs (loop2): 1 truncate cleaned up
[  148.910712][ T8834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  149.050659][ T8840] bond0: (slave bond_slave_1): Releasing backup interface
[  149.189343][ T8854] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  149.193614][ T8854] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  149.376379][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.801271][ T5311] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  149.952687][ T5311] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  149.956578][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  149.960217][ T5311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  149.964081][ T5311] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  149.968617][ T5311] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  149.971722][ T5311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.975618][ T5311] usb 3-1: config 0 descriptor??
[  150.034567][ T8869] binder_alloc: 8868: binder_alloc_buf, no vma
[  150.128890][ T8873] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.406291][ T5311] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  150.724433][  T793] usb 3-1: USB disconnect, device number 12
[  151.141781][ T8892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1140'.
[  151.146276][ T8892] IPVS: Error connecting to the multicast addr
[  151.375121][ T8908] loop3: detected capacity change from 0 to 4096
[  151.382332][ T8908] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  151.404981][ T8908] ntfs3(loop3): ino=1a, mi_enum_attr
[  151.407270][ T8908] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  151.410565][ T8908] ntfs3(loop3): ino=1a, mi_enum_attr
[  151.413235][ T8908] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  151.428422][ T8908] ntfs3(loop3): ino=5, "/" ntfs_readdir
[  151.610325][ T8932] loop2: detected capacity change from 0 to 512
[  151.614156][ T8932] EXT4-fs: Ignoring removed i_version option
[  151.616634][ T8932] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  151.627680][ T8932] EXT4-fs (loop2): 1 truncate cleaned up
[  151.633454][ T8932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.731689][ T8935] loop1: detected capacity change from 0 to 256
[  152.316263][ T1096] Bluetooth: hci3: Frame reassembly failed (-84)
[  152.640615][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.793996][ T8962] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1172'.
[  154.111837][ T8972] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  154.320956][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1178'.
[  154.332329][ T8976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1178'.
[  154.391315][ T5233] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  154.391342][   T54] Bluetooth: hci3: command 0x1003 tx timeout
[  154.620297][ T8988] bridge0: port 3(veth0_to_bridge) entered blocking state
[  154.622841][ T8988] bridge0: port 3(veth0_to_bridge) entered disabled state
[  154.625327][ T8988] veth0_to_bridge: entered allmulticast mode
[  154.628002][ T8988] veth0_to_bridge: entered promiscuous mode
[  154.630246][ T8988] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  154.636105][ T8988] bridge0: port 3(veth0_to_bridge) entered blocking state
[  154.638613][ T8988] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  154.861005][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  154.861014][   T33] audit: type=1800 audit(1755256951.566:178): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1183" name="file1" dev="overlay" ino=1365 res=0 errno=0
[  154.911638][ T8996] loop2: detected capacity change from 0 to 4096
[  154.915845][ T8996] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  155.002938][ T9004] netlink: 'syz.3.1191': attribute type 7 has an invalid length.
[  155.006678][ T9004] netlink: 'syz.3.1191': attribute type 8 has an invalid length.
[  155.013839][ T9005] netlink: 'syz.2.1192': attribute type 10 has an invalid length.
[  155.017020][ T9005] bridge0: port 3(veth0_to_bridge) entered disabled state
[  155.019794][ T9005] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.022367][ T9005] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.031071][ T9005] bridge0: port 3(veth0_to_bridge) entered blocking state
[  155.033494][ T9005] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  155.037619][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.040240][ T9005] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.042803][ T9005] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.045202][ T9005] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.050931][ T9005] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  155.072570][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  155.076610][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  155.080653][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  155.084632][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  155.088602][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  155.092549][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  155.096364][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  155.100404][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  155.104480][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  155.108422][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  155.306830][ T9015]  nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9
[  155.309814][ T9015] nullb0: p1 start 3121229925 is beyond EOD, truncated
[  155.322881][ T9015] nullb0: p2 start 1125600442 is beyond EOD, truncated
[  155.325890][ T9015] nullb0: p3 start 2749556348 is beyond EOD, truncated
[  155.328850][ T9015] nullb0: p4 size 749881270 extends beyond EOD, truncated
[  155.337183][ T9015] nullb0: p5 start 3634521299 is beyond EOD, truncated
[  155.340210][ T9015] nullb0: p6 start 3691333785 is beyond EOD, truncated
[  155.348879][ T9015] nullb0: p7 start 3987215793 is beyond EOD, truncated
[  155.353296][ T9015] nullb0: p8 start 1563769952 is beyond EOD, truncated
[  155.356179][ T9015] nullb0: p9 start 1763214672 is beyond EOD, truncated
[  155.447123][ T9023] UBIFS error (pid: 9023): cannot open "c:::", error -22
[  155.658081][ T9038] loop1: detected capacity change from 0 to 256
[  155.679271][ T9038] exfat: Deprecated parameter 'namecase'
[  155.688296][ T9038] exfat: Deprecated parameter 'namecase'
[  155.694396][ T9038] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  156.211375][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  156.361253][    T9] usb 2-1: Using ep0 maxpacket: 32
[  156.365582][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.370194][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.377231][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  156.381477][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.386595][    T9] usb 2-1: config 0 descriptor??
[  156.801732][    T9] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[  156.817568][    T9] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[  156.819878][    T9] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[  156.830622][ T9060] loop3: detected capacity change from 0 to 32768
[  156.832979][    T9] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[  156.836247][    T9] koneplus 0003:1E7D:2D51.0008: unknown main item tag 0x0
[  156.840415][    T9] koneplus 0003:1E7D:2D51.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[  156.856325][ T9060] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  156.856325][ T9060] 
[  156.888870][ T1091] read_mapping_page failed!
[  156.892404][ T1091] ERROR: (device loop3): txCommit: 
[  156.892404][ T1091] 
[  156.894945][ T1091] jfs_write_inode: jfs_commit_inode failed!
[  157.062655][    T9] koneplus 0003:1E7D:2D51.0008: couldn't init struct koneplus_device
[  157.069635][    T9] koneplus 0003:1E7D:2D51.0008: couldn't install mouse
[  157.075333][    T9] koneplus 0003:1E7D:2D51.0008: probe with driver koneplus failed with error -71
[  157.079882][    T9] usb 2-1: USB disconnect, device number 17
[  157.100940][ T9069] pim6reg: entered allmulticast mode
[  157.268798][ T9083] loop6: detected capacity change from 0 to 63
[  157.280342][ T9083] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.295005][ T9083] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.306610][ T9083] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.314537][ T9083] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.317067][ T9083] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.319731][ T9083] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.338200][ T9083] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.348719][ T9083] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.357881][ T9083] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.370330][ T9083] Buffer I/O error on dev loop6, logical block 0, async page read
[  157.958692][ T9095] loop3: detected capacity change from 0 to 512
[  157.975737][ T9095] EXT4-fs (loop3): orphan cleanup on readonly fs
[  157.984775][ T9095] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  157.992943][ T9095] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  158.013210][ T9095] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1225: attempt to clear invalid blocks 2 len 1
[  158.017584][ T9095] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1225: invalid indirect mapped block 1819239214 (level 0)
[  158.025408][ T9095] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1225: invalid indirect mapped block 1819239214 (level 1)
[  158.035578][ T9095] EXT4-fs (loop3): 1 truncate cleaned up
[  158.038138][ T9095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  158.046936][ T9095] EXT4-fs error (device loop3): ext4_lookup:1784: inode #2: comm syz.3.1225: 'file1' linked to parent dir
[  158.067652][ T6474] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.160365][ T9102] loop3: detected capacity change from 0 to 256
[  158.411994][ T9108] loop3: detected capacity change from 0 to 1024
[  158.570743][   T33] audit: type=1800 audit(1755256955.276:179): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1233" name="file1" dev="loop3" ino=20 res=0 errno=0
[  159.876595][ T9125] loop1: detected capacity change from 0 to 262144
[  159.894062][ T9125] F2FS-fs (loop1): invalid crc value
[  159.929975][ T9125] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.934916][ T9125] F2FS-fs (loop1): Start checkpoint disabled!
[  159.940998][ T9125] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  160.081223][    C1] net_ratelimit: 26078 callbacks suppressed
[  160.081235][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  160.087257][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  160.092279][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  160.097250][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  160.101996][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  160.105860][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  160.109902][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  160.114394][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  160.118337][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  160.122568][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0)
[  160.682852][ T9140] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  160.981240][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  161.131335][    T9] usb 2-1: Using ep0 maxpacket: 8
[  161.140799][    T9] usb 2-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.146623][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  161.149575][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00
[  161.156150][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.167289][    T9] usb 2-1: config 0 descriptor??
[  161.570822][ T9146] loop2: detected capacity change from 0 to 16
[  161.581759][ T9146] erofs (device loop2): mounted with root inode @ nid 36.
[  161.655942][ T9150] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  161.726510][ T9156] loop2: detected capacity change from 0 to 256
[  161.799321][    T9] usb 2-1: USB disconnect, device number 18
[  161.955463][ T9161] loop2: detected capacity change from 0 to 1024
[  161.981095][ T5848] hfsplus: bad catalog entry type
[  162.013282][ T1104] hfsplus: b-tree write err: -5, ino 4
[  162.093502][ T6007] bond0: (slave syz_tun): Releasing backup interface
[  162.256391][ T6478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.423428][ T6478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.528547][ T6478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.565207][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  162.576277][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  162.579540][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  162.595666][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  162.613826][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  162.635088][ T6478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.705661][ T9169] wg0 speed is unknown, defaulting to 1000
[  162.819511][ T6478] veth0_to_bridge: left allmulticast mode
[  162.829472][ T6478] veth0_to_bridge: left promiscuous mode
[  162.833892][ T6478] bridge0: port 3(veth0_to_bridge) entered disabled state
[  162.855944][ T6478] bridge_slave_1: left allmulticast mode
[  162.857885][ T6478] bridge_slave_1: left promiscuous mode
[  162.859927][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.887454][ T6478] bridge_slave_0: left allmulticast mode
[  162.889872][ T6478] bridge_slave_0: left promiscuous mode
[  162.900677][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.089684][ T6478] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  163.229294][ T6478] dvmrp1 (unregistering): left allmulticast mode
[  163.271853][ T6478] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  163.512538][ T6478] team0: Port device bond0 removed
[  163.530422][ T6478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  163.543209][ T6478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  163.549674][ T6478] bond0 (unregistering): Released all slaves
[  163.676842][ T6478] bond1 (unregistering): Released all slaves
[  163.788476][ T6478] tipc: Disabling bearer <udp:syz2>
[  163.800500][ T6478] tipc: Disabling bearer <udp:syz0>
[  163.804836][ T6478] tipc: Left network mode
[  163.841231][  T793] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  164.007945][  T793] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  164.018979][  T793] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  164.024702][  T793] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.045810][  T793] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  164.052671][  T793] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  164.057162][  T793] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.068740][  T793] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  164.074395][  T793] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  164.078797][  T793] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.108632][  T793] usb 2-1: string descriptor 0 read error: -22
[  164.115600][  T793] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  164.119015][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.155134][ T9169] chnl_net:caif_netlink_parms(): no params data found
[  164.157454][  T793] adutux 2-1:168.0: interrupt endpoints not found
[  164.377729][ T5311] usb 2-1: USB disconnect, device number 19
[  164.399371][ T6478] hsr_slave_0: left promiscuous mode
[  164.405717][ T6478] hsr_slave_1: left promiscuous mode
[  164.408316][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.411249][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.414637][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.417587][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.430390][ T6478] veth1_macvtap: left promiscuous mode
[  164.432692][ T6478] veth0_macvtap: left promiscuous mode
[  164.434937][ T6478] veth1_vlan: left promiscuous mode
[  164.437373][ T6478] veth0_vlan: left promiscuous mode
[  164.803155][ T5233] Bluetooth: hci0: command tx timeout
[  165.085747][ T9186] loop1: detected capacity change from 0 to 32768
[  165.092133][ T9186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1266 (9186)
[  165.108853][ T6478] team0 (unregistering): Port device team_slave_1 removed
[  165.112674][ T9186] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.119519][ T9186] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  165.128708][ T9186] BTRFS info (device loop1): using free-space-tree
[  165.153667][ T6478] team0 (unregistering): Port device team_slave_0 removed
[  165.265400][ T6928] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.677683][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.680132][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.686823][ T9169] bridge_slave_0: entered allmulticast mode
[  165.692265][ T9169] bridge_slave_0: entered promiscuous mode
[  165.700858][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.704295][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.708717][ T9169] bridge_slave_1: entered allmulticast mode
[  165.716615][ T9169] bridge_slave_1: entered promiscuous mode
[  165.772954][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.780691][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.805588][ T9214] loop3: detected capacity change from 0 to 16
[  165.809296][ T9214] erofs (device loop3): mounted with root inode @ nid 36.
[  165.820178][ T9214] erofs (device loop3): corrupted dir block 8200 @ nid 36
[  165.855583][ T9169] team0: Port device team_slave_0 added
[  165.859561][ T9169] team0: Port device team_slave_1 added
[  165.906703][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.909512][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.921334][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.927124][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.929879][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.941681][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.978940][ T9220] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1274'.
[  165.987581][ T9169] hsr_slave_0: entered promiscuous mode
[  165.990784][ T9169] hsr_slave_1: entered promiscuous mode
[  165.997356][ T6478] ------------[ cut here ]------------
[  165.999915][ T6478] WARNING: CPU: 0 PID: 6478 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  166.004919][ T6478] Modules linked in:
[  166.007080][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  166.012675][ T6478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.016204][ T6478] Workqueue: netns cleanup_net
[  166.018391][ T6478] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  166.020949][ T6478] Code: c5 90 df f7 4b 83 3c 2c 00 75 19 e8 69 27 7c f7 49 81 fd f8 07 00 00 74 1d e8 5b 27 7c f7 49 83 c5 08 eb c9 e8 50 27 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  166.028356][ T6478] RSP: 0018:ffffc900047ef8b0 EFLAGS: 00010293
[  166.031280][ T6478] RAX: ffffffff8a438440 RBX: ffff8880237e8000 RCX: ffff888109c1b980
[  166.034740][ T6478] RDX: 0000000000000000 RSI: ffffffff8dba6026 RDI: ffff8880237e8000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  166.038104][ T6478] RBP: ffffc900047ef9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  166.041957][ T6478] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff8880237e8000
[  166.045369][ T6478] R13: 0000000000000000 R14: ffff88801f1e0000 R15: dffffc0000000000
[  166.048696][ T6478] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  166.052882][ T6478] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  166.055756][ T6478] CR2: 0000001b31220ff8 CR3: 0000000109614000 CR4: 00000000000006f0
[  166.059341][ T6478] Call Trace:
[  166.060820][ T6478]  <TASK>
[  166.062410][ T6478]  ops_undo_list+0x49a/0x990
[  166.064488][ T6478]  ? __pfx_ops_undo_list+0x10/0x10
[  166.066641][ T6478]  ? do_raw_spin_unlock+0x4d/0x240
[  166.068806][ T6478]  cleanup_net+0x4c5/0x800
[  166.070677][ T6478]  ? __pfx_cleanup_net+0x10/0x10
[  166.073046][ T6478]  ? _raw_spin_unlock_irq+0x23/0x50
[  166.075191][ T6478]  ? process_scheduled_works+0x9ef/0x17b0
[  166.077586][ T6478]  ? process_scheduled_works+0x9ef/0x17b0
[  166.079929][ T6478]  process_scheduled_works+0xae1/0x17b0
[  166.082404][ T6478]  ? __pfx_process_scheduled_works+0x10/0x10
[  166.084885][ T6478]  worker_thread+0x8a0/0xda0
[  166.086819][ T6478]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  166.089382][ T6478]  ? __kthread_parkme+0x7b/0x200
[  166.091540][ T6478]  kthread+0x711/0x8a0
[  166.093278][ T6478]  ? __pfx_worker_thread+0x10/0x10
[  166.095460][ T6478]  ? __pfx_kthread+0x10/0x10
[  166.097425][ T6478]  ? _raw_spin_unlock_irq+0x23/0x50
[  166.099641][ T6478]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.101971][ T6478]  ? __pfx_kthread+0x10/0x10
[  166.103918][ T6478]  ret_from_fork+0x3fc/0x770
[  166.106060][ T6478]  ? __pfx_ret_from_fork+0x10/0x10
[  166.108340][ T6478]  ? __switch_to_asm+0x39/0x70
[  166.110451][ T6478]  ? __switch_to_asm+0x33/0x70
[  166.112742][ T6478]  ? __pfx_kthread+0x10/0x10
[  166.114779][ T6478]  ret_from_fork_asm+0x1a/0x30
[  166.116942][ T6478]  </TASK>
[  166.118351][ T6478] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  166.121414][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: kworker/u8:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  166.126643][ T6478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  166.130916][ T6478] Workqueue: netns cleanup_net
[  166.132864][ T6478] Call Trace:
[  166.134254][ T6478]  <TASK>
[  166.135498][ T6478]  dump_stack_lvl+0x99/0x250
[  166.137550][ T6478]  ? __asan_memcpy+0x40/0x70
[  166.139611][ T6478]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.141931][ T6478]  ? __pfx__printk+0x10/0x10
[  166.144017][ T6478]  vpanic+0x281/0x750
[  166.145767][ T6478]  ? __pfx__printk+0x10/0x10
[  166.147703][ T6478]  ? __pfx_vpanic+0x10/0x10
[  166.149647][ T6478]  ? is_bpf_text_address+0x292/0x2b0
[  166.151894][ T6478]  panic+0xb9/0xc0
[  166.153496][ T6478]  ? __pfx_panic+0x10/0x10
[  166.155433][ T6478]  __warn+0x31b/0x4b0
[  166.157152][ T6478]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  166.159467][ T6478]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  166.161686][ T6478]  report_bug+0x2be/0x4f0
[  166.163552][ T6478]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  166.165924][ T6478]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  166.168279][ T6478]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  166.170665][ T6478]  handle_bug+0x84/0x160
[  166.172549][ T6478]  exc_invalid_op+0x1a/0x50
[  166.174576][ T6478]  asm_exc_invalid_op+0x1a/0x20
[  166.176718][ T6478] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  166.179396][ T6478] Code: c5 90 df f7 4b 83 3c 2c 00 75 19 e8 69 27 7c f7 49 81 fd f8 07 00 00 74 1d e8 5b 27 7c f7 49 83 c5 08 eb c9 e8 50 27 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  166.187801][ T6478] RSP: 0018:ffffc900047ef8b0 EFLAGS: 00010293
[  166.190489][ T6478] RAX: ffffffff8a438440 RBX: ffff8880237e8000 RCX: ffff888109c1b980
[  166.193958][ T6478] RDX: 0000000000000000 RSI: ffffffff8dba6026 RDI: ffff8880237e8000
[  166.197413][ T6478] RBP: ffffc900047ef9b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  166.200850][ T6478] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffff8880237e8000
[  166.204339][ T6478] R13: 0000000000000000 R14: ffff88801f1e0000 R15: dffffc0000000000
[  166.207803][ T6478]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  166.210179][ T6478]  ops_undo_list+0x49a/0x990
[  166.212187][ T6478]  ? __pfx_ops_undo_list+0x10/0x10
[  166.214367][ T6478]  ? do_raw_spin_unlock+0x4d/0x240
[  166.216580][ T6478]  cleanup_net+0x4c5/0x800
[  166.218493][ T6478]  ? __pfx_cleanup_net+0x10/0x10
[  166.220626][ T6478]  ? _raw_spin_unlock_irq+0x23/0x50
[  166.223023][ T6478]  ? process_scheduled_works+0x9ef/0x17b0
[  166.225539][ T6478]  ? process_scheduled_works+0x9ef/0x17b0
[  166.228082][ T6478]  process_scheduled_works+0xae1/0x17b0
[  166.230530][ T6478]  ? __pfx_process_scheduled_works+0x10/0x10
[  166.233023][ T6478]  worker_thread+0x8a0/0xda0
[  166.234926][ T6478]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  166.237637][ T6478]  ? __kthread_parkme+0x7b/0x200
[  166.239795][ T6478]  kthread+0x711/0x8a0
[  166.241584][ T6478]  ? __pfx_worker_thread+0x10/0x10
[  166.243777][ T6478]  ? __pfx_kthread+0x10/0x10
[  166.245815][ T6478]  ? _raw_spin_unlock_irq+0x23/0x50
[  166.248113][ T6478]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.250403][ T6478]  ? __pfx_kthread+0x10/0x10
[  166.252437][ T6478]  ret_from_fork+0x3fc/0x770
[  166.254382][ T6478]  ? __pfx_ret_from_fork+0x10/0x10
[  166.256554][ T6478]  ? __switch_to_asm+0x39/0x70
[  166.258665][ T6478]  ? __switch_to_asm+0x33/0x70
[  166.260675][ T6478]  ? __pfx_kthread+0x10/0x10
[  166.262638][ T6478]  ret_from_fork_asm+0x1a/0x30
[  166.264609][ T6478]  </TASK>
[  166.266728][ T6478] Kernel Offset: disabled
[  166.268289][ T6478] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:22:42  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dee630 RSP=ffffc900047eeff0
R8 =ffff888107800237 R9 =1ffff11020f00046 R10=dffffc0000000000 R11=ffffffff854efde0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efe57 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b31220ff8 CR3=0000000109614000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f7fc7812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff92000769f0c RBX=80000001253d0007 RCX=dffffc0000000000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90003b4f650 RSP=ffffc90003b4f3a0
R8 =ffffea000494f3f3 R9 =1ffffd4000929e7e R10=dffffc0000000000 R11=fffff94000929e7f
R12=00007f7fbabf9000 R13=00007f7fbaa91000 R14=ffff888032b2c488 R15=ffffc90003b4f860
RIP=ffffffff82094237 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3121dff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 00007fdf5f612e53
XMM06=0000000000000000 00007fdf5f612e4d XMM07=0000000000000000 00007fdf5f612e61
XMM08=0000000000000000 00007fdf5f612ee7 XMM09=0000000000000000 00007fdf5f612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
