last executing test programs:

1m8.820901259s ago: executing program 2 (id=505):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/fscreate\x00')
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
ftruncate(r0, 0x7fffffffffffffff)

1m8.682031591s ago: executing program 2 (id=508):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@commit={'commit', 0x3d, 0x4}}, {@datasum}, {@max_inline={'max_inline', 0x3d, [0x36, 0x2d, 0x37, 0x33, 0x25, 0x74, 0x74]}}, {@space_cache}, {@nodiscard}, {@nobarrier}, {@notreelog}, {@user_subvol_rm}, {@enospc_debug}, {@noenospc_debug}, {@clear_cache}, {@compress_force_algo={'compress-force', 0x3d, 'lzo'}}, {@nossd_spread}, {@treelog}, {@max_inline={'max_inline', 0x3d, [0x2b, 0x32, 0x35, 0x38, 0x35, 0x67]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x2)

1m6.541082633s ago: executing program 2 (id=528):
r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000000000/0x4000)=nil)
shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00')
lseek(r1, 0x1000000, 0x0)

1m5.747851254s ago: executing program 2 (id=544):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000400)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000280))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m3.517097699s ago: executing program 2 (id=562):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000002c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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")
lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r2)

1m1.744504085s ago: executing program 2 (id=579):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005400)=@delchain={0x24, 0x65, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffe0, 0xe}, {0x8, 0xfff1}, {0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4048840)

1m1.570329419s ago: executing program 32 (id=579):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005400)=@delchain={0x24, 0x65, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffe0, 0xe}, {0x8, 0xfff1}, {0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4048840)

27.184087475s ago: executing program 5 (id=858):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8000000000000000)
write$uinput_user_dev(r0, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffff9, 0x0, 0x400, 0x40, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x681, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x8]}, 0x45c)

27.027034113s ago: executing program 5 (id=859):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000000)=""/43, 0x2b)

26.536200335s ago: executing program 5 (id=861):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000006c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)={r1, 0x246c, 0x4, "bad60bcf"}, 0xc)

26.342602056s ago: executing program 5 (id=862):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=cp857,time_offset=0x0000000000000003,errors=remount-ro,fmask=00000000000000000000006,iocharset=cp862,allow_utime=00000000000000000077777,namecase=1,dmask=00000000000000000000201,utf8,dmask=000000000000\x00'/224], 0x1, 0x1543, &(0x7f0000000500)="$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")
lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffff)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x183341, 0x0)

25.811649091s ago: executing program 5 (id=869):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x18}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004090)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800)

25.236605275s ago: executing program 5 (id=876):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
read(r1, &(0x7f0000000180)=""/147, 0x93)

25.062457311s ago: executing program 33 (id=876):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
read(r1, &(0x7f0000000180)=""/147, 0x93)

19.596164448s ago: executing program 4 (id=922):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1, @remote, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f0000000240)={0xa, 0x4e1f, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000300)="b7a4fdf2", 0x4}], 0x1}}], 0x2, 0x8000)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x7c, &(0x7f00000002c0)="1a00000002000000", 0x8)

18.776910674s ago: executing program 4 (id=927):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r0, 0x90101)
shutdown(r0, 0x0)

18.65860579s ago: executing program 4 (id=930):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unshare(0x24020400)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x2, @null}, 0x1c)

18.350696549s ago: executing program 4 (id=933):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000001c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@background_gc_off}, {@noflush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@inlinecrypt}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x5510, &(0x7f00000020c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

16.045678188s ago: executing program 4 (id=942):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
pselect6(0x40, &(0x7f0000000040)={0xc, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x7, 0xfffffffffffffff9, 0x0, 0x3, 0x1000, 0x2000000000008, 0x80000000000009, 0x0, 0x8000000400005a, 0x3})

12.709046661s ago: executing program 4 (id=965):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x8, 0x0, [{0x0, 0x0, 0xfff}, {0x7fff, 0x0, 0xedb}, {0x1, 0x0, 0x9}, {0x8, 0x0, 0x7fff}, {0x80000001, 0x0, 0x4}, {0x9, 0x0, 0x4}, {0x5, 0x0, 0x7}, {0x200, 0x0, 0x3}, {0x3, 0x0, 0xa}, {0x5, 0x0, 0x8}, {0x800, 0x0, 0x1}, {0x7}, {0x8, 0x0, 0xed0}, {0xd, 0x0, 0x5}, {0x4, 0x0, 0x7c32}, {0x2, 0x0, 0x5}]})

12.451250009s ago: executing program 34 (id=965):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000600)={0x8, 0x0, [{0x0, 0x0, 0xfff}, {0x7fff, 0x0, 0xedb}, {0x1, 0x0, 0x9}, {0x8, 0x0, 0x7fff}, {0x80000001, 0x0, 0x4}, {0x9, 0x0, 0x4}, {0x5, 0x0, 0x7}, {0x200, 0x0, 0x3}, {0x3, 0x0, 0xa}, {0x5, 0x0, 0x8}, {0x800, 0x0, 0x1}, {0x7}, {0x8, 0x0, 0xed0}, {0xd, 0x0, 0x5}, {0x4, 0x0, 0x7c32}, {0x2, 0x0, 0x5}]})

4.218134953s ago: executing program 6 (id=1044):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x24, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x80, 0x9, 0x2}}]}, 0x40}}, 0x40004)

3.983753996s ago: executing program 6 (id=1046):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000140)={[{@fat=@nfs_stale_rw}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_lower}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@shortname_lower}]}, 0x4, 0x350, &(0x7f0000000580)="$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")
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x41)

3.147836119s ago: executing program 1 (id=1053):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000340)='./file1\x00', 0x3000010, &(0x7f0000000200)={[{@adinicb}, {@volume={'volume', 0x3d, 0x3}}, {@uid}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@gid_forget}, {@shortad}, {@uid_forget}, {@partition={'partition', 0x3d, 0x410a}}]}, 0x1, 0xc59, &(0x7f0000001640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0)
pwrite64(r0, 0x0, 0x0, 0x8080c61)
fallocate(r0, 0x0, 0x8004, 0x8000c62)

2.90030475s ago: executing program 6 (id=1055):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000000)=0x6)

2.815843913s ago: executing program 1 (id=1056):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x80000007, @local, 0x4, 0x3}, 0x20)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100))

2.70452714s ago: executing program 0 (id=1057):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000580)={0x1e57, 0x0, 0x3, 0x3ff, 0x2, "04ad7d2ed56d7f7f598d90590de9d3000d00", 0x400002, 0x205})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa)

2.60452459s ago: executing program 0 (id=1058):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xc70}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={0xa, 0x4c21, 0x0, @remote, 0x5}, 0x1c)

2.586497257s ago: executing program 1 (id=1059):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c00038018000080080003400040"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

2.457916461s ago: executing program 0 (id=1060):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x80000001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.345182069s ago: executing program 1 (id=1061):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
fcntl$notify(r0, 0x402, 0x80000033)
r1 = syz_open_procfs(0x0, &(0x7f0000000640)='cmdline\x00')
preadv(r1, &(0x7f0000000800)=[{&(0x7f0000000000)=""/211, 0xd3}, {0x0}], 0x2, 0x8001, 0x4)

2.216303843s ago: executing program 1 (id=1062):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x204050, &(0x7f0000000540)=ANY=[], 0x1, 0x6da, &(0x7f0000002240)="$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")
truncate(&(0x7f0000000000)='./file1\x00', 0x100003)
creat(0x0, 0x18)
truncate(&(0x7f0000001c40)='./file1\x00', 0xe4a0)

1.790838737s ago: executing program 1 (id=1064):
syz_emit_ethernet(0x6a, &(0x7f00000003c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "f7e7a952cb701deb74c18ef31d18c527f475b58db115c30c", "5938f4e9c10d3866495ae44482c8aa17e7db6a9e17be7d65a692e6fe93112d21"}}}}}}, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
r0 = getpid()
syz_open_procfs(r0, 0x0)

1.312982172s ago: executing program 0 (id=1066):
dup(0xffffffffffffffff)
syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5fe, &(0x7f00000002c0)="$eJzs3M9uG8cZAPBZW4oZBTUKBG0cx0A2Tg4uCiskVcsQ3IPZ1UrahOQSu1QgnwqjllIjUgIkLdD4UhgF0gZo0VPPRXrooU/Ql8ozqFhyaf0XFduKXeT3A8wZcj/OfLtczFgEZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEKJkudlsRaGb9dc34pMly0XeO+X4pL3/HigOmN33GKIQoupfaDTClfFLV17fi/1J9XA9vDF+9kZoVEUjPHrtpz++8/rMheqNs1EUTknouXi1eti9GOqOPrswzufJ8S++fPTJ/e3tzc/PO5GX1Graz8o863VW0zgr83hpcbH5/tpKGa9k3bS8Vw7TXpwUaWeYF/GN5G4IYWkhTufv5ev91eVON41vJD+LW0tLt2+2m83F+IP5Qdopyrz//gfzZbKWdbtZf3UUUx2+2X473K5uxA+zYTxMG7043nq4vbkwLckqqHWWoPa0oHaz3W612u3W4q2lW7ebzcb4dvh3+/MwfmGmeUg4/JaZ879peem8EvYNHJMx7pXnNYbD09pN/n78gYvfdyYAAADAeYlG37FHo+/lr4xqK1k3bR6I2Y1efWH5AQAAAM8uCqPf10X1D/OuhOjo3//7+M0KAAAA/B/6y5M1dpeOWWMXoiiUg0vR5M/+wcZ70U6nqnV26gUCR9YJDFeuRpfrRkbF4kz9LEmvRW+Og96cRH9bF1sH1/rNhsN5REUxGz0eJXCwv7MlUEXNhL+Gq+OYqw/G5YM6rl6ROLeSddP5JO/eaYVO5/KFYbox/P2nD/8QQlHsXvy637scha2H25vzv/ls+8Eol8dVK493onFz0em5XAp7FyP87sm6x3p1492DZzw7+iKmOuuv+725cb/N/R9AvRjxwtk/gPBVeGsc89bcuJybHPn5qM9G1Wdr/piz359Fa7Dx3qW6szOe+aEsro1jrt14tyrevVEfmQ17WbSnZdGur/8fq+v/VNfihCzCviwWpmWxsP8uuDC6yY4aVlfr+CwAXpStw7PQkfl/b949cd4Zr+k/ZazdOnUl/2gKP9zLkf9e/DZM6+Wr8M445p2rM3sz0qERvTltRG+ecV4/aUT/T7j+z3+EsB6uT4KPmVdGc2zV798OzKrRzjfVG76p+/3Xn3ZHQqhXmoey266evnpnPH9/efHmw537H29+vPlpu72w2PxFs3mrHWZHp1EXx1+vi8HcA/CDlhbfRnPDP0dFkQ1+3VpaanWGa2lc5MmHcZEtr6Zx1h+mRbLW6a+m8aDIh3mSd6vKR9lyWsbl+mCQF8N4JS/iQV5mG6OdX+J665cy7XX6wywpB920U6ZxkveHnWQYL2dlEg/Wf9XNyrW0GL25HKRJtpIlnWGW9+MyXy+SdD6OyzTdF5gtp/1htpJV1X48KLJep7gXf5R313tpvJyWSZENhvm4wUlfWX8lL3pVs0cmcQD4ofoi1DvYPdnK7jtXQmNKzIs+RwDgoMOz9KUTI+0BAAAAAAAAAAAAAAAAL8r+5Xq/rLf0eeYVgZNK4zm1M6XSOPjK3deOC3773NP4TpUQwsyjT+5PNuF5pgYnOzG9DOf17JUohPASpHH6PXZelcaUj3K2Pv60XVQXd3rwj6qY73skAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDp/hcAAP//TxeL0Q==")
stat(&(0x7f0000000040)='./file0/file1\x00', 0x0)
link(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)='./file0/file1/file0\x00')

1.247511999s ago: executing program 6 (id=1067):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000d80)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, {[@eol, @sack={0x5, 0x12, [0xbc8, 0x3, 0x0, 0x10000]}]}}}}}}}, 0x0)

1.077674236s ago: executing program 6 (id=1068):
syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x150d, &(0x7f0000000780)="$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")
lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="d14fd7"], 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

1.049692799s ago: executing program 3 (id=1069):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
io_setup(0x2, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x3, r0, 0x0, 0x0, 0x800000000001dbc}])

768.185613ms ago: executing program 3 (id=1070):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='uid_map\x00')
read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020)
pread64(r0, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9)
read$FUSE(r0, &(0x7f00000040c0)={0x2020}, 0x2020)

768.059523ms ago: executing program 7 (id=966):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0)

718.182833ms ago: executing program 0 (id=1071):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
write$binfmt_elf32(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xdc, 0x2, 0x3, 0xac78, 0x2, 0x3, 0x80004, 0x33e, 0x38, 0xd6, 0x1, 0x3fe, 0x20, 0x3, 0x7, 0x8, 0xe89}, [{0x5, 0x1abd, 0x9, 0x9, 0x5, 0x9, 0x5, 0x400}, {0x7, 0x4, 0x2, 0x8, 0xa60, 0x1, 0x0, 0x5}, {0x3, 0x8001, 0x6, 0x0, 0x9, 0x4, 0x25be, 0x9851}]}, 0x98)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

632.239317ms ago: executing program 6 (id=1072):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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")
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0)
unlink(&(0x7f0000000580)='./file0/file0\x00')

573.071935ms ago: executing program 3 (id=1073):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x0, @initdev}})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)

540.860458ms ago: executing program 7 (id=1074):
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'nr0\x00', 0x2}, 0x18)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001200210325bd70000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

447.77234ms ago: executing program 3 (id=1075):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@ipv4_newaddr={0x28, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x20, 0x51, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0xc090}, 0x0)

337.903787ms ago: executing program 7 (id=1076):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14)

307.301071ms ago: executing program 0 (id=1077):
r0 = msgget$private(0x0, 0x1f3)
msgrcv(r0, 0x0, 0x0, 0x3, 0x2000)
msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x68, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x1, 0x0, 0x0, 0xee00, 0x0, 0x20, 0x80}, 0x0, 0x0, 0x6, 0x2, 0x8, 0x7, 0x9, 0x8d9, 0x8, 0xffff})

139.680338ms ago: executing program 3 (id=1078):
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000240)={0x0, 0xab12, 0x0, 0xffffffff, 0x5}, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2160, 0x1})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

68.321024ms ago: executing program 3 (id=1079):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0xf0b, 0x70b526, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000)

0s ago: executing program 7 (id=1080):
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x8}}, 0x20)

kernel console output (not intermixed with test programs):

DM device
[  107.670633][ T5307] FAT-fs (loop3): Directory bread(block 66) failed
[  107.677223][ T5307] FAT-fs (loop3): Directory bread(block 67) failed
[  107.687334][ T5264] cdc_wdm 2-1:1.0: Unknown control protocol
[  107.705400][ T5264] usb 1-1: USB disconnect, device number 4
[  107.723587][ T5307] FAT-fs (loop3): Directory bread(block 68) failed
[  107.741070][ T5307] FAT-fs (loop3): Directory bread(block 69) failed
[  107.754908][ T5307] FAT-fs (loop3): Directory bread(block 70) failed
[  107.765204][ T5307] FAT-fs (loop3): Directory bread(block 71) failed
[  107.779581][ T5307] FAT-fs (loop3): Directory bread(block 72) failed
[  107.786639][ T5307] FAT-fs (loop3): Directory bread(block 73) failed
[  107.843269][ T5309] syz.4.400 uses obsolete (PF_INET,SOCK_PACKET)
[  107.853290][ T5255] usb 2-1: USB disconnect, device number 4
[  108.274874][ T5324] loop4: detected capacity change from 0 to 512
[  108.417838][ T5324] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  108.587196][ T5324] fs-verity: sha512 using implementation "sha512-avx2"
[  108.615148][ T5343] netlink: 44 bytes leftover after parsing attributes in process `syz.0.418'.
[  108.624370][ T5324] EXT4-fs warning (device loop4): ext4_begin_enable_verity:136: inode #13: comm syz.4.411: verity is only allowed on extent-based files
[  108.677016][ T5345] program syz.2.417 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  108.771257][ T5337] loop3: detected capacity change from 0 to 8192
[  109.153649][ T5372] loop1: detected capacity change from 0 to 128
[  109.210911][ T5376] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.220071][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.249006][ T5379] loop4: detected capacity change from 0 to 256
[  109.259890][ T5376] device bridge0 entered promiscuous mode
[  109.286278][ T5372] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  109.329943][ T5372] hpfs: filesystem error: improperly stopped
[  109.336031][ T5372] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  109.358827][ T5379] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  109.394433][ T5381] loop2: detected capacity change from 0 to 764
[  109.399480][ T5372] hpfs: You really don't want any checks? You are crazy...
[  109.428904][ T5372] hpfs: hpfs_map_sector(): read error
[  109.438568][ T5372] hpfs: code page support is disabled
[  109.465842][ T5372] hpfs: hpfs_map_4sectors(): unaligned read
[  109.476708][ T5372] hpfs: hpfs_map_4sectors(): unaligned read
[  109.493209][ T5372] hpfs: filesystem error: unable to find root dir
[  109.562224][ T5372] hpfs: hpfs_map_4sectors(): unaligned read
[  109.898632][ T5397] loop3: detected capacity change from 0 to 8192
[  109.910757][ T5400] vxcan0: tx address claim with dest, not broadcast
[  110.032928][ T5397] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  110.070046][ T5397] REISERFS (device loop3): using ordered data mode
[  110.076982][ T5397] reiserfs: using flush barriers
[  110.130736][ T5397] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  110.169783][ T5397] REISERFS (device loop3): checking transaction log (loop3)
[  110.225825][ T5395] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  110.240090][ T5395] REISERFS (device loop4): using ordered data mode
[  110.266020][ T5397] REISERFS (device loop3): Using r5 hash to sort names
[  110.277507][ T5409] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  110.298317][ T5395] reiserfs: using flush barriers
[  110.336786][ T5409] hfsplus: unable to find HFS+ superblock
[  110.357784][ T5395] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  110.468705][ T5395] REISERFS (device loop4): checking transaction log (loop4)
[  110.487459][ T5395] REISERFS (device loop4): Using r5 hash to sort names
[  110.525680][ T5395] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  110.595041][ T5395] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  110.632212][ T5383] set_capacity_and_notify: 1 callbacks suppressed
[  110.632230][ T5383] loop0: detected capacity change from 0 to 32768
[  110.700199][ T5395] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  110.730480][ T5383] XFS: attr2 mount option is deprecated.
[  110.879379][ T5423] loop2: detected capacity change from 0 to 4096
[  110.906769][ T5383] XFS (loop0): Mounting V5 Filesystem
[  111.047978][ T5383] XFS (loop0): Ending clean mount
[  111.054109][ T5432] loop3: detected capacity change from 0 to 2048
[  111.092717][ T5383] XFS (loop0): Quotacheck needed: Please wait.
[  111.202824][ T5432] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  111.225377][ T5383] XFS (loop0): Quotacheck: Done.
[  111.254694][ T5432] UDF-fs: Scanning with blocksize 512 failed
[  111.390493][ T5432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.465954][ T4186] XFS (loop0): Unmounting Filesystem
[  111.594972][ T5446] loop1: detected capacity change from 0 to 2048
[  111.698335][ T5446] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  111.867827][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'.
[  112.099936][ T5469] loop0: detected capacity change from 0 to 64
[  112.106709][ T5471] loop4: detected capacity change from 0 to 128
[  112.148579][ T5471] EXT4-fs (loop4): Test dummy encryption mode enabled
[  112.156141][ T5471] EXT4-fs (loop4): Test dummy encryption mode enabled
[  112.158664][ T5473] loop2: detected capacity change from 0 to 164
[  112.164058][ T5471] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  112.187388][ T5471] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  112.189556][ T5254] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  112.195750][ T5471] EXT4-fs (loop4): Ignoring removed nobh option
[  112.220906][ T5469] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  112.271830][ T5471] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,nobh,,errors=continue. Quota mode: none.
[  112.306436][ T5473] rock: directory entry would overflow storage
[  112.346452][ T5473] rock: sig=0x66, size=4, remaining=3
[  112.391500][ T5473] rock: directory entry would overflow storage
[  112.398057][ T5473] rock: sig=0x66, size=4, remaining=3
[  112.468695][ T5471] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  112.486445][ T5473] iso9660: Corrupted directory entry in block 4 of inode 1792
[  112.581575][ T5254] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  112.619026][ T5254] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  112.679321][ T5254] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  112.699312][ T5254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.704203][ T5479] loop2: detected capacity change from 0 to 4096
[  112.730332][ T5466] loop1: detected capacity change from 0 to 32768
[  112.752440][ T5254] usb 4-1: config 0 descriptor??
[  112.786932][ T5479] NILFS (loop2): mounting unchecked fs
[  112.798288][ T5479] NILFS (loop2): recovery required for readonly filesystem
[  112.810097][ T5479] NILFS (loop2): write access will be enabled during recovery
[  112.828795][ T5479] NILFS (loop2): invalid segment: Checksum error in segment payload
[  112.862883][ T5479] NILFS (loop2): trying rollback from an earlier position
[  112.883583][ T5471] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  112.895652][ T5466] XFS (loop1): Mounting V5 Filesystem
[  112.914609][ T5479] NILFS (loop2): recovery complete
[  113.026311][ T5500] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.098330][ T5466] XFS (loop1): Ending clean mount
[  113.112646][ T5466] XFS (loop1): Quotacheck needed: Please wait.
[  113.223087][ T5466] XFS (loop1): Quotacheck: Done.
[  113.234663][ T5254] cherry 0003:046A:0027.0004: collection stack underflow
[  113.248053][ T5254] cherry 0003:046A:0027.0004: item 0 0 0 12 parsing failed
[  113.260813][ T5254] cherry: probe of 0003:046A:0027.0004 failed with error -22
[  113.309369][ T5252] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  113.374965][ T4194] XFS (loop1): Unmounting Filesystem
[  113.465375][ T5510] device macsec1 entered promiscuous mode
[  113.475146][ T4234] usb 4-1: USB disconnect, device number 3
[  113.494731][ T5510] device virt_wifi0 entered promiscuous mode
[  113.557118][ T5514] loop4: detected capacity change from 0 to 1024
[  113.615330][ T5514] EXT4-fs (loop4): Ignoring removed nobh option
[  113.630417][ T5514] EXT4-fs (loop4): Ignoring removed bh option
[  113.639485][ T5514] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  113.689605][ T5252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.721382][ T5252] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.723985][ T5514] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  113.731831][ T5252] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  113.767068][ T5252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.789956][ T5252] usb 1-1: config 0 descriptor??
[  114.243331][ T5530] blktrace: Concurrent blktraces are not allowed on loop3
[  114.292334][ T5252] playstation 0003:054C:0DF2.0005: item fetching failed at offset 1/5
[  114.311299][ T5252] playstation 0003:054C:0DF2.0005: Parse failed
[  114.317635][ T5252] playstation: probe of 0003:054C:0DF2.0005 failed with error -22
[  114.330924][ T5523] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  114.451884][ T5537] vivid-004: disconnect
[  114.456981][ T5536] vivid-004: reconnect
[  114.516694][ T5541] netlink: 'syz.3.489': attribute type 10 has an invalid length.
[  114.527837][ T5254] usb 1-1: USB disconnect, device number 5
[  114.594926][ T5541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.627427][ T5541] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  114.649440][ T5252] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  114.727726][ T5544] hfsplus: bad catalog entry type
[  114.807045][  T144] hfsplus: b-tree write err: -5, ino 4
[  114.899411][ T5252] usb 2-1: Using ep0 maxpacket: 16
[  115.020627][ T5252] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  115.028898][ T5252] usb 2-1: config 0 has no interface number 0
[  115.079061][ T5252] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  115.097850][ T5561] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lW»=¸Ý•¹µ«=
[  115.104838][ T5561] [U] J"—e:ÀÆ"


[  115.119250][ T5252] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  115.149501][ T5252] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  115.163483][ T5560] [U] ­Ý‘M
[  115.297692][ T5574] netem: change failed
[  115.319926][ T5252] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  115.339058][ T5252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.367724][ T5252] usb 2-1: Product: syz
[  115.387538][ T5252] usb 2-1: Manufacturer: syz
[  115.408657][ T5252] usb 2-1: SerialNumber: syz
[  115.452217][ T5252] usb 2-1: config 0 descriptor??
[  115.489585][ T5533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  115.496707][ T5533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  115.761126][ T5533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  115.768255][ T5533] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  115.851464][ T5567] set_capacity_and_notify: 3 callbacks suppressed
[  115.851480][ T5567] loop0: detected capacity change from 0 to 40427
[  115.865276][ T4234] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  115.901673][ T5567] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff
[  115.910982][ T5567] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4
[  115.923313][ T5591] device wireguard0 entered promiscuous mode
[  115.938491][ T5591] team0: Device wireguard0 is of different type
[  115.954842][ T5567] F2FS-fs (loop0): invalid crc value
[  115.971387][ T5567] F2FS-fs (loop0): Found nat_bits in checkpoint
[  116.042658][ T5578] loop2: detected capacity change from 0 to 32768
[  116.049465][ T5252] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  116.108265][ T5578] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.508 (5578)
[  116.148049][ T5567] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  116.175915][ T5578] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  116.187770][ T5578] BTRFS info (device loop2): max_inline at 6
[  116.194183][ T5578] BTRFS info (device loop2): enabling disk space caching
[  116.201833][ T5578] BTRFS info (device loop2): turning off barriers
[  116.208457][ T5578] BTRFS info (device loop2): disabling tree log
[  116.215800][ T5578] BTRFS info (device loop2): force clearing of disk cache
[  116.224871][ T5578] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  116.230629][ T4234] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  116.236020][ T5578] BTRFS info (device loop2): force lzo compression, level 0
[  116.269835][ T5252] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  116.280206][ T5578] BTRFS info (device loop2): enabling tree log
[  116.280268][ T5578] BTRFS info (device loop2): max_inline at 0
[  116.297823][ T4234] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.318271][ T5252] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  116.326316][ T5578] BTRFS info (device loop2): disk space caching is enabled
[  116.339213][ T4234] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  116.361036][ T5252] asix: probe of 2-1:0.34 failed with error -71
[  116.382627][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0
[  116.389821][ T5252] usb 2-1: USB disconnect, device number 5
[  116.397223][ T4234] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  116.406854][ T5578] BTRFS info (device loop2): has skinny extents
[  116.465047][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.494238][ T4186] attempt to access beyond end of device
[  116.494238][ T4186] loop0: rw=2049, want=45104, limit=40427
[  116.526795][ T4234] usb 5-1: config 0 descriptor??
[  116.705096][ T5613] loop3: detected capacity change from 0 to 4096
[  116.713240][ T5578] BTRFS info (device loop2): enabling ssd optimizations
[  116.772606][ T5578] BTRFS info (device loop2): clearing free space tree
[  116.792558][ T5578] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  116.873588][ T5578] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  117.054947][ T4234] hid (null): unknown global tag 0xec
[  117.082867][ T5624] netlink: 6 bytes leftover after parsing attributes in process `syz.1.521'.
[  117.084999][ T4234] hid (null): unknown global tag 0xd
[  117.123717][ T5624] netlink: 6 bytes leftover after parsing attributes in process `syz.1.521'.
[  117.150303][ T5624] Zero length message leads to an empty skb
[  117.259235][ T4234] usb 5-1: USB disconnect, device number 3
[  118.292401][ T5678] loop4: detected capacity change from 0 to 512
[  118.325867][ T5678] EXT4-fs (loop4): Test dummy encryption mode enabled
[  118.365361][ T5684] loop1: detected capacity change from 0 to 1024
[  118.372003][ T5678] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  118.523227][ T5678] EXT4-fs error (device loop4): xattr_find_entry:297: inode #15: comm syz.4.540: corrupted xattr entries
[  118.611395][ T5678] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  118.669526][ T1599] hfsplus: b-tree write err: -5, ino 3
[  118.688853][ T5685] loop0: detected capacity change from 0 to 4096
[  118.724128][ T5678] EXT4-fs (loop4): 1 orphan inode deleted
[  118.744660][ T5678] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: none.
[  119.238411][ T5687] loop2: detected capacity change from 0 to 40427
[  119.296105][ T5701] loop4: detected capacity change from 0 to 512
[  119.321337][ T5704] loop0: detected capacity change from 0 to 128
[  119.394287][ T5687] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff
[  119.415540][ T5704] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  119.433384][ T5701] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  119.466578][ T5682] loop3: detected capacity change from 0 to 32768
[  119.474244][ T5704] hpfs: filesystem error: improperly stopped
[  119.480934][ T5704] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  119.488728][ T5704] hpfs: You really don't want any checks? You are crazy...
[  119.496341][ T5687] F2FS-fs (loop2): invalid crc value
[  119.512069][ T5701] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  119.552702][ T5687] F2FS-fs (loop2): Found nat_bits in checkpoint
[  119.571436][ T5704] hpfs: hpfs_map_sector(): read error
[  119.576905][ T5704] hpfs: code page support is disabled
[  119.583169][ T5701] System zones: 0-1, 15-15, 18-18, 34-34
[  119.650171][ T5701] EXT4-fs (loop4): orphan cleanup on readonly fs
[  119.656709][ T5701] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  119.666883][ T5704] hpfs: hpfs_map_4sectors(): unaligned read
[  119.705048][ T5704] hpfs: hpfs_map_4sectors(): unaligned read
[  119.747100][ T5704] hpfs: filesystem error: unable to find root dir
[  119.754781][ T5701] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  119.809373][ T5701] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  119.845458][ T5682] XFS (loop3): Mounting V5 Filesystem
[  119.852700][ T5687] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  119.873823][ T5701] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.551: bg 0: block 40: padding at end of block bitmap is not set
[  119.941228][ T5701] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6194: Corrupt filesystem
[  120.006438][ T5701] EXT4-fs (loop4): 1 truncate cleaned up
[  120.013752][ T5701] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  120.021795][ T5682] XFS (loop3): Ending clean mount
[  120.045845][ T5701] fscrypt (loop4, inode 16): Error -61 getting encryption context
[  120.057793][ T5701] fscrypt (loop4, inode 16): Error -61 getting encryption context
[  120.168946][ T5709] XFS (loop1): Mounting V5 Filesystem
[  120.194638][ T5682] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  120.274280][ T5687] F2FS-fs (loop2) : inject dquot initialize in f2fs_dquot_initialize of f2fs_unlink+0x233/0xbf0
[  120.288960][ T5687] overlayfs: cleanup of 'work/#1' failed (-3)
[  120.330586][ T5709] XFS (loop1): Ending clean mount
[  120.403676][ T5709] XFS (loop1): Quotacheck needed: Please wait.
[  120.504602][ T4191] XFS (loop3): Unmounting Filesystem
[  120.510208][ T5709] XFS (loop1): Quotacheck: Done.
[  120.609764][ T4187] attempt to access beyond end of device
[  120.609764][ T4187] loop2: rw=524288, want=45072, limit=40427
[  120.668504][ T4187] attempt to access beyond end of device
[  120.668504][ T4187] loop2: rw=0, want=45072, limit=40427
[  120.796847][ T4194] XFS (loop1): Unmounting Filesystem
[  120.958410][  T671] attempt to access beyond end of device
[  120.958410][  T671] loop2: rw=2049, want=40984, limit=40427
[  121.397557][ T5760] set_capacity_and_notify: 2 callbacks suppressed
[  121.397574][ T5760] loop3: detected capacity change from 0 to 2048
[  121.547224][ T5760] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  121.605625][ T5760] ext4 filesystem being mounted at /121/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  121.716278][ T5754] loop0: detected capacity change from 0 to 32768
[  121.995135][  T671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.071220][ T5754] XFS (loop0): Mounting V5 Filesystem
[  122.284900][ T5754] XFS (loop0): Ending clean mount
[  122.299594][  T671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.412204][  T671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.563640][ T4186] XFS (loop0): Unmounting Filesystem
[  122.568716][  T671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.643362][ T5784] loop1: detected capacity change from 0 to 32768
[  122.767832][ T5779] loop4: detected capacity change from 0 to 40427
[  122.853094][ T5779] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[  122.922906][ T5779] F2FS-fs (loop4): invalid crc value
[  122.997165][ T5779] F2FS-fs (loop4): Found nat_bits in checkpoint
[  123.051647][ T5784] JBD2: Ignoring recovery information on journal
[  123.182196][ T5779] F2FS-fs (loop4): recover fsync data on readonly fs
[  123.221668][ T5779] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  123.228851][ T5779] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  123.287812][ T5807] netlink: 284 bytes leftover after parsing attributes in process `syz.3.585'.
[  123.324673][ T5779] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  123.332608][ T5784] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  123.524091][ T5816] overlayfs: conflicting lowerdir path
[  123.853898][ T5827] loop3: detected capacity change from 0 to 128
[  123.885139][ T4194] ocfs2: Unmounting device (7,1) on (node local)
[  123.950572][ T5827] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  123.986268][ T5827] hpfs: filesystem error: improperly stopped
[  124.005617][ T5827] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  124.018830][ T5827] hpfs: You really don't want any checks? You are crazy...
[  124.050003][ T5827] hpfs: Code page index out of array
[  124.055876][ T5827] hpfs: code page support is disabled
[  124.079323][ T5827] hpfs: hpfs_map_4sectors(): unaligned read
[  124.085537][ T5827] hpfs: hpfs_map_4sectors(): unaligned read
[  124.148048][ T5827] hpfs: filesystem error: unable to find root dir
[  124.353733][ T5803] chnl_net:caif_netlink_parms(): no params data found
[  124.545224][ T5847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.596'.
[  124.599606][ T5852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.596'.
[  124.733801][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.744309][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.756633][ T5803] device bridge_slave_0 entered promiscuous mode
[  124.771071][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.778250][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.787061][ T5803] device bridge_slave_1 entered promiscuous mode
[  124.870447][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.895162][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.938373][ T5803] team0: Port device team_slave_0 added
[  125.048360][ T5803] team0: Port device team_slave_1 added
[  125.191917][ T5861] loop0: detected capacity change from 0 to 32768
[  125.200312][ T4235] Bluetooth: hci1: command 0x0409 tx timeout
[  125.215082][ T5834] loop4: detected capacity change from 0 to 32768
[  125.277643][ T5861] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  125.286879][ T5861] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  125.331237][ T5861] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  125.348494][ T4233] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  125.359254][ T4233] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  125.445089][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.511615][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.571361][ T4233] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 212ms
[  125.600409][ T4233] gfs2: fsid=syz:syz.0: jid=0: Done
[  125.608087][ T5861] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  125.649441][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.697881][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.705102][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.760994][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.789620][ T5861] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[  125.800440][ T5861] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  125.800440][ T5861]   inode = 12 2341
[  125.800440][ T5861]   function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602
[  125.819335][ T5861] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  125.826982][ T5861] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  125.835840][ T5861] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  125.844291][ T5861] gfs2: fsid=syz:syz.0: File system withdrawn
[  125.850449][ T5861] CPU: 0 PID: 5861 Comm: syz.0.599 Not tainted syzkaller #0
[  125.857766][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  125.867869][ T5861] Call Trace:
[  125.871179][ T5861]  <TASK>
[  125.874142][ T5861]  dump_stack_lvl+0x188/0x250
[  125.878861][ T5861]  ? kobject_uevent_env+0x371/0x890
[  125.884106][ T5861]  ? show_regs_print_info+0x20/0x20
[  125.889351][ T5861]  ? load_image+0x400/0x400
[  125.893911][ T5861]  ? kobject_uevent_env+0x371/0x890
[  125.899159][ T5861]  gfs2_withdraw+0x1149/0x1490
[  125.903983][ T5861]  ? gfs2_lm+0x240/0x240
[  125.908266][ T5861]  ? load_image+0x400/0x400
[  125.912816][ T5861]  ? gfs2_consist_inode_i+0xc0/0xe0
[  125.918073][ T5861]  gfs2_dirent_scan+0x525/0x650
[  125.922968][ T5861]  ? gfs2_dirent_search+0x7f0/0x7f0
[  125.928240][ T5861]  gfs2_dirent_search+0x2e9/0x7f0
[  125.933299][ T5861]  ? gfs2_dirent_search+0x7f0/0x7f0
[  125.938533][ T5861]  ? gfs2_permission+0x40a/0x4e0
[  125.943514][ T5861]  ? gfs2_dir_search+0x220/0x220
[  125.948504][ T5861]  ? gfs2_lookupi+0x600/0x600
[  125.953211][ T5861]  ? gfs2_glock_nq+0xcb0/0x1550
[  125.958108][ T5861]  gfs2_dir_search+0x49/0x220
[  125.962854][ T5861]  gfs2_lookupi+0x46c/0x600
[  125.967405][ T5861]  ? gfs2_lookup_simple+0x100/0x100
[  125.972634][ T5861]  ? mark_lock+0x94/0x320
[  125.977000][ T5861]  ? gfs2_lookupi+0x40e/0x600
[  125.981711][ T5861]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  125.987822][ T5861]  ? lock_chain_count+0x20/0x20
[  125.992709][ T5861]  __gfs2_lookup+0xa9/0x290
[  125.997245][ T5861]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  126.003443][ T5861]  ? gfs2_atomic_open+0x210/0x210
[  126.008549][ T5861]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  126.014773][ T5861]  __lookup_slow+0x29d/0x410
[  126.019425][ T5861]  ? lookup_one_len+0x2d0/0x2d0
[  126.024314][ T5861]  ? gfs2_lookupi+0x600/0x600
[  126.029030][ T5861]  ? down_read+0x1aa/0x2e0
[  126.033491][ T5861]  lookup_slow+0x53/0x70
[  126.037779][ T5861]  walk_component+0x319/0x460
[  126.042494][ T5861]  link_path_walk+0x665/0xd70
[  126.047218][ T5861]  ? handle_lookup_down+0x130/0x130
[  126.052462][ T5861]  path_openat+0x28d/0x2fa0
[  126.057020][ T5861]  ? verify_lock_unused+0x140/0x140
[  126.062253][ T5861]  ? slab_post_alloc_hook+0x4c/0x380
[  126.067586][ T5861]  ? do_filp_open+0x410/0x410
[  126.072317][ T5861]  do_filp_open+0x1e2/0x410
[  126.076864][ T5861]  ? vfs_tmpfile+0x300/0x300
[  126.081509][ T5861]  ? _raw_spin_unlock+0x24/0x40
[  126.086397][ T5861]  ? alloc_fd+0x598/0x630
[  126.090788][ T5861]  do_sys_openat2+0x150/0x4b0
[  126.095509][ T5861]  ? __lock_acquire+0x7d10/0x7d10
[  126.100576][ T5861]  ? do_sys_open+0xe0/0xe0
[  126.105033][ T5861]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  126.111070][ T5861]  ? lock_chain_count+0x20/0x20
[  126.115982][ T5861]  ? vtime_user_exit+0x2c8/0x3e0
[  126.120956][ T5861]  __x64_sys_openat+0x135/0x160
[  126.125870][ T5861]  do_syscall_64+0x4c/0xa0
[  126.130319][ T5861]  ? clear_bhb_loop+0x30/0x80
[  126.135035][ T5861]  ? clear_bhb_loop+0x30/0x80
[  126.139748][ T5861]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  126.145690][ T5861] RIP: 0033:0x7fb6b1d93799
[  126.150162][ T5861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.169810][ T5861] RSP: 002b:00007fb6affed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  126.178302][ T5861] RAX: ffffffffffffffda RBX: 00007fb6b200cfa0 RCX: 00007fb6b1d93799
[  126.186307][ T5861] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  126.194324][ T5861] RBP: 00007fb6b1e29bd9 R08: 0000000000000000 R09: 0000000000000000
[  126.202332][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  126.210334][ T5861] R13: 00007fb6b200d038 R14: 00007fb6b200cfa0 R15: 00007ffc677da0e8
[  126.218352][ T5861]  </TASK>
[  126.308181][ T5884] device vlan3 entered promiscuous mode
[  126.314391][ T5884] device wlan0 entered promiscuous mode
[  126.402660][ T5803] device hsr_slave_0 entered promiscuous mode
[  126.444114][ T5803] device hsr_slave_1 entered promiscuous mode
[  126.478962][ T5803] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.520590][ T5803] Cannot create hsr debugfs directory
[  126.544919][  T671] device hsr_slave_0 left promiscuous mode
[  126.629583][  T671] device hsr_slave_1 left promiscuous mode
[  126.661414][  T671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.669050][  T671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.754777][  T671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.784040][  T671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.800125][  T671] device bridge_slave_1 left promiscuous mode
[  126.801932][ T5904] loop3: detected capacity change from 0 to 1024
[  126.825707][  T671] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.915919][ T5904] hfsplus: bad catalog entry type
[  126.944553][  T671] device bridge_slave_0 left promiscuous mode
[  126.967925][  T671] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.013971][ T1599] hfsplus: b-tree write err: -5, ino 4
[  127.107044][  T671] device veth1_macvtap left promiscuous mode
[  127.117868][ T5909] loop3: detected capacity change from 0 to 256
[  127.141924][  T671] device veth0_macvtap left promiscuous mode
[  127.148211][  T671] device veth1_vlan left promiscuous mode
[  127.165240][  T671] device veth0_vlan left promiscuous mode
[  127.269437][ T4233] Bluetooth: hci1: command 0x041b tx timeout
[  127.510364][ T5897] loop1: detected capacity change from 0 to 40427
[  127.547934][ T5897] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  127.576176][ T5897] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  127.621175][ T5897] F2FS-fs (loop1): invalid crc value
[  127.649011][ T5897] F2FS-fs (loop1): Found nat_bits in checkpoint
[  127.790972][ T5897] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  127.805959][ T5897] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  127.903854][  T671] team0 (unregistering): Port device team_slave_1 removed
[  127.922159][  T671] team0 (unregistering): Port device team_slave_0 removed
[  127.944214][  T671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.963711][  T671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.078485][  T671] bond0 (unregistering): Released all slaves
[  128.489691][ T5928] loop0: detected capacity change from 0 to 4096
[  128.537996][ T5932] loop3: detected capacity change from 0 to 4096
[  128.587862][ T5928] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  128.732522][ T5936] loop1: detected capacity change from 0 to 2048
[  128.800014][ T5803] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  128.851461][ T5803] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  128.868037][ T4180]  loop1: p3 < >
[  128.877660][ T4191] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  128.913032][ T5803] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  128.945760][ T5936]  loop1: p3 < >
[  128.949710][ T4191] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  128.969891][ T5803] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  129.056167][ T3562]  loop1: p3 < >
[  129.344171][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  129.355473][ T5664] Bluetooth: hci1: command 0x040f tx timeout
[  129.440462][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.487219][ T5953] loop1: detected capacity change from 0 to 512
[  129.520992][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  129.549776][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  129.572890][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  129.597706][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[  129.613707][ T5955] loop0: detected capacity change from 0 to 1024
[  129.634857][ T5953] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[  129.647902][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  129.659799][ T5953] System zones: 1-12
[  129.668039][ T5953] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.628: Directory hole found for htree index block 0
[  129.750435][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  129.829801][ T1590] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.833954][ T5953] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117
[  129.836971][ T1590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.872782][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  129.909818][ T5953] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.628: Directory hole found for htree index block 0
[  129.963460][ T5953] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  129.983311][ T5953] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota=",,errors=continue. Quota mode: writeback.
[  129.996659][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  130.017910][ T5934] loop4: detected capacity change from 0 to 32768
[  130.048300][ T4265] hfsplus: b-tree write err: -5, ino 4
[  130.074290][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  130.090196][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  130.142473][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.149646][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.336516][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  130.370906][ T5934] XFS (loop4): Mounting V5 Filesystem
[  130.429580][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  130.502047][ T5934] XFS (loop4): Ending clean mount
[  130.565113][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  130.641241][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  130.669912][ T4199] XFS (loop4): Unmounting Filesystem
[  130.682137][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  130.702292][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  130.714278][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  130.723840][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  130.736876][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  130.752844][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  130.770589][ T5803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  130.792781][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  130.806140][ T5948] loop3: detected capacity change from 0 to 40427
[  130.897897][ T5948] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  130.906931][ T4234] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  130.916517][ T5948] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  131.006051][ T5948] F2FS-fs (loop3): invalid crc value
[  131.078623][ T5948] F2FS-fs (loop3): Found nat_bits in checkpoint
[  131.196590][ T5948] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  131.246992][ T5948] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  131.279355][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.319594][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.330652][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  131.338219][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  131.375931][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.420212][ T5664] Bluetooth: hci1: command 0x0419 tx timeout
[  131.439544][ T4234] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  131.470098][ T4234] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  131.509200][ T4234] usb 2-1: Manufacturer: syz
[  131.536495][ T4234] usb 2-1: config 0 descriptor??
[  131.544675][ T1599] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  131.565974][ T1599] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  131.864684][ T5981] loop0: detected capacity change from 0 to 32768
[  131.918672][ T5981] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.633 (5981)
[  132.003284][ T5981] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  132.049241][ T5981] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  132.082293][ T6013] loop4: detected capacity change from 0 to 128
[  132.109444][ T5981] BTRFS info (device loop0): use zstd compression, level 3
[  132.116864][ T5981] BTRFS info (device loop0): using free space tree
[  132.179581][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  132.188545][ T6013] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  132.222519][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  132.226936][ T5981] BTRFS info (device loop0): has skinny extents
[  132.248158][ T6013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.312231][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  132.356580][ T6013] [U] 
[  132.370848][ T6013] [U] 
[  132.374872][ T6013] [U] \ÀÀ
N¼.ÜZÀ‚9Q¡ÝÌZ׎ۤØ!QÒÝH‰'»ßÝ��™��ÍŽ
[  132.388461][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  132.399428][ T6013] [U] ÊL
[  132.403251][ T6013] [U] Û$GETÛPR¯YEÔ§ÔÞJGM×)GWE´÷¥’9Ï÷ÞÕÄU›§_O¿ZŸŽÄC¯¨V¿?´ÒÏ›\9:Ë_Ñ%SAµ3ƒ–ÓKC2:0PÅWÈ—>V´÷Ä©�ÈC×2ÛÑB÷ÛÔJÎɱÈÐÁ¬Ò
[  132.433221][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  132.481550][ T6013] [U] „ºS,Ì›KªÖÚÍÆÑÅÙ,Á;„#Ý»¢ÉšY~ˆ÷CI{\Ú' 1ŒQÔ'£ÑVÛ¹  -ɃLÜW2ÚÓË=6Ή{AÁEšÔ»ÃÙÉ\·Û³Œ¾Ú'ˆÕ§™I³�ÝÆF¼XGF�©ŒÝBCW„±Y/Ö¤Œ~®»3ŒÍÑB?�ÑÌÉ 6ÁÅ>ICSAÌÞÑÉɱ¦ÐÇÕß×E´ÍÅ´     ÊÒ–—ÍF;ʱWÞÛÛ›Õ;ºOŸ_OߟŒ,»IÛÁ=¯½ÏÖÛž¿^�ÚÍÕ–Œ¾Ù~��[L+Q»~«ß;L¯OÈHÂ×ÊØ„�ÝÆFV\°M«߷E”-,”ËÆÖ¿­�ÈÝ?RßOT·Ž&ÕßÖȲ¤=ΦƜ:$ǯ]™œÌÍ’ A‚D9±Ú=ZÁ»ß&£7ÏßVÏØÛ¿V‡Ã¿¿¯‡÷ß#Õ;JÒÝ[DÙ;‰UJÎÜÔL,%¹ÅÙKÏŧF&R¹BO6S¸ÛÐ�ÞL,ŒÍÂTÝEµ.Å̳ڕ¿.?ŸUŽßJ�ßÕ;JRÝO�,KTŒWÊ>UØÚß]FOÝ´P~Ž~ÐØ?XÎZÆ©ÅÏÒÕÙ¤Ú¿Y–´Ç}¤1§
[  132.525134][ T4234] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71
[  132.535227][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  132.551334][ T4234] uclogic 0003:256C:006D.0007: failed probing parameters: -71
[  132.569280][ T5981] BTRFS info (device loop0): enabling ssd optimizations
[  132.581764][ T5803] device veth0_vlan entered promiscuous mode
[  132.609467][ T4234] uclogic: probe of 0003:256C:006D.0007 failed with error -71
[  132.680824][ T5803] device veth1_vlan entered promiscuous mode
[  132.724453][ T4234] usb 2-1: USB disconnect, device number 6
[  132.767088][ T6013] [U] 8RÔ…ŒÖªDNX¶HG¢ŸX×Þ
[  132.771736][ T6013] [U] 
[  132.774482][ T6013] [U] 
[  132.777206][ T6013] [U] 
[  132.783373][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.789765][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.847500][ T6013] [U] 
[  132.850273][ T6013] [U] 
[  132.853000][ T6013] [U] 
[  132.898382][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  132.916180][ T6011] [U] 
[  132.927286][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  132.991914][ T5803] device veth0_macvtap entered promiscuous mode
[  133.037089][ T5803] device veth1_macvtap entered promiscuous mode
[  133.129903][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.179440][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.205066][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.239171][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.266076][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.294471][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.317229][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  133.349163][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.420086][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.484692][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  133.513592][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  133.560042][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  133.584956][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  133.656032][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.708524][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.747270][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.793796][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.855416][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  133.922273][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  133.980541][ T5803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.028018][ T5803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.122725][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.156289][ T6044] loop3: detected capacity change from 0 to 32768
[  134.195926][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  134.207738][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  134.245250][ T5803] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.263276][ T5803] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.286719][ T6044] XFS (loop3): Mounting V5 Filesystem
[  134.311442][ T5803] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.329350][ T5803] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.399495][ T6044] XFS (loop3): Ending clean mount
[  134.463279][ T6044] XFS (loop3): Quotacheck needed: Please wait.
[  134.608334][ T1599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.642973][ T6044] XFS (loop3): Quotacheck: Done.
[  134.683828][ T1599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.737295][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  134.837430][ T4191] XFS (loop3): Unmounting Filesystem
[  134.866209][ T1599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.898350][ T1599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.939249][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  135.030542][ T6063] loop1: detected capacity change from 0 to 40427
[  135.122298][ T6063] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1)
[  135.162171][ T6063] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  135.249687][ T6063] F2FS-fs (loop1): invalid crc value
[  135.336427][ T6063] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root
[  135.432627][ T6063] F2FS-fs (loop1): Found nat_bits in checkpoint
[  135.642175][ T6063] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  135.721632][ T6063] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  135.813628][ T6090] loop5: detected capacity change from 0 to 32768
[  135.949794][ T6063] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  135.957090][ T6063] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  136.064979][ T6107] loop4: detected capacity change from 0 to 40427
[  136.113655][ T6090] jfs_strtoUCS: char2uni returned -22.
[  136.126915][ T6107] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1ffff
[  136.141794][ T6107] F2FS-fs (loop4): invalid crc value
[  136.166318][ T6107] F2FS-fs (loop4): Found nat_bits in checkpoint
[  136.172980][ T6090] charset = ascii, char = 0xf5
[  136.233222][ T6107] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  136.428162][ T4194] attempt to access beyond end of device
[  136.428162][ T4194] loop1: rw=2049, want=45112, limit=40427
[  136.646374][ T6125] sch_fq: defrate 0 ignored.
[  136.705216][ T6129] loop0: detected capacity change from 0 to 128
[  136.711391][ T6127] loop5: detected capacity change from 0 to 1024
[  136.838128][ T6129] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  136.922204][ T6129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.933445][ T6135] hfsplus: request for non-existent node 62977 in B*Tree
[  136.979381][ T6135] hfsplus: request for non-existent node 62977 in B*Tree
[  136.999660][ T6137] loop4: detected capacity change from 0 to 64
[  137.142512][  T671] hfsplus: b-tree write err: -5, ino 3
[  137.393870][ T6110] loop3: detected capacity change from 0 to 32768
[  137.607244][ T6161] loop5: detected capacity change from 0 to 256
[  137.626331][ T6110] XFS (loop3): Mounting V5 Filesystem
[  137.705311][ T4234] kernel write not supported for file /snd/midiC2D0 (pid: 4234 comm: kworker/1:6)
[  137.734617][ T6110] XFS (loop3): Ending clean mount
[  137.759365][ T5664] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  137.786653][ T6161] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xa483dd5f, utbl_chksum : 0xe619d30d)
[  137.822214][ T6110] XFS (loop3): Quotacheck needed: Please wait.
[  137.870592][ T6161] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 2199023255554)
[  137.890456][ T6110] XFS (loop3): Quotacheck: Done.
[  138.136204][ T6177] netlink: 'syz.1.669': attribute type 6 has an invalid length.
[  138.249557][ T5664] usb 5-1: config 0 interface 0 has no altsetting 0
[  138.256275][ T5664] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  138.297184][ T5664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.325807][ T5664] usb 5-1: config 0 descriptor??
[  138.361259][ T4191] XFS (loop3): Unmounting Filesystem
[  138.584100][ T6194] loop0: detected capacity change from 0 to 2048
[  138.661800][ T6194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.171717][ T6214] netlink: 20 bytes leftover after parsing attributes in process `syz.0.678'.
[  139.260923][ T5664] video4linux radio48: keene_cmd_main failed (-71)
[  139.281263][ T5664] radio-keene 5-1:0.0: V4L2 device registered as radio48
[  139.315575][ T6217] loop3: detected capacity change from 0 to 512
[  139.331750][ T5664] usb 5-1: USB disconnect, device number 4
[  139.452195][ T6225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.681'.
[  139.477311][ T6217] EXT4-fs (loop3): 1 orphan inode deleted
[  139.495276][ T6190] loop1: detected capacity change from 0 to 40427
[  139.503256][ T6217] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  139.523738][ T6217] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.630581][ T6190] F2FS-fs (loop1): invalid crc value
[  139.701106][ T6190] F2FS-fs (loop1): Found nat_bits in checkpoint
[  139.951696][ T6190] F2FS-fs (loop1): Start checkpoint disabled!
[  140.019465][ T6190] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  140.075763][ T6248] hub 1-0:1.0: USB hub found
[  140.107633][ T6248] hub 1-0:1.0: 1 port detected
[  140.324893][ T6253] device batadv_slave_1 entered promiscuous mode
[  140.368683][ T6252] device batadv_slave_1 left promiscuous mode
[  141.135543][ T6294] loop3: detected capacity change from 0 to 128
[  141.234910][ T6294] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  141.266718][ T6294] hpfs: filesystem error: improperly stopped
[  141.294639][ T6294] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  141.308511][ T6294] hpfs: You really don't want any checks? You are crazy...
[  141.329512][ T6294] hpfs: hpfs_map_sector(): read error
[  141.335177][ T6294] hpfs: code page support is disabled
[  141.365795][ T6294] hpfs: hpfs_map_4sectors(): unaligned read
[  141.379950][ T5243] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  141.392930][ T6294] hpfs: hpfs_map_4sectors(): unaligned read
[  141.423729][ T6294] hpfs: filesystem error: unable to find root dir
[  141.444369][ T6299] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  141.586091][ T6281] loop5: detected capacity change from 0 to 40427
[  141.667701][ T6281] F2FS-fs (loop5): Found nat_bits in checkpoint
[  141.749501][ T5243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.788092][ T5243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.814869][ T6314] loop1: detected capacity change from 0 to 16
[  141.848086][ T6281] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  141.870887][ T5243] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  141.890050][ T6314] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  141.911866][ T5243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.975946][ T5243] usb 1-1: config 0 descriptor??
[  142.155962][ T6327] netlink: 'syz.4.720': attribute type 4 has an invalid length.
[  142.919526][ T5243] hid-led: probe of 0003:0FC5:B080.0008 failed with error -71
[  142.943416][ T5243] usb 1-1: USB disconnect, device number 6
[  143.269237][ T1324] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  143.349303][ T4234] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  143.554868][ T1324] usb 4-1: Using ep0 maxpacket: 8
[  143.589351][ T4234] usb 6-1: Using ep0 maxpacket: 32
[  143.683330][ T6382] loop1: detected capacity change from 0 to 128
[  143.699304][ T1324] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  143.707812][ T1324] usb 4-1: config 0 has no interface number 0
[  143.709839][ T4234] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  143.729517][ T4234] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  143.747030][ T1324] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  143.761929][ T1324] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  143.771307][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.781500][ T1324] usb 4-1: config 0 descriptor??
[  143.782342][ T4234] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  143.810694][ T4234] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  143.834468][ T6386] Set syz0 is full, maxelem 0 reached
[  143.836159][ T1324] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  143.863586][ T4234] usb 6-1: config 0 interface 0 has no altsetting 0
[  144.034782][ T4234] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  144.048486][ T4234] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  144.069212][ T4234] usb 6-1: Product: syz
[  144.073465][ T4234] usb 6-1: Manufacturer: syz
[  144.096537][ T4234] usb 6-1: SerialNumber: syz
[  144.133923][ T4234] usb 6-1: config 0 descriptor??
[  144.144739][ T5254] usb 4-1: USB disconnect, device number 4
[  144.179696][ T4234] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  144.223785][ T4234] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  144.404586][ T4234] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  144.476832][ T5254] usb 6-1: USB disconnect, device number 2
[  144.495651][ T5254] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  144.574674][ T6398] loop1: detected capacity change from 0 to 32768
[  144.643699][ T6398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.749 (6398)
[  144.685170][ T6398] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  144.695480][ T6398] BTRFS info (device loop1): using free space tree
[  144.703557][ T6398] BTRFS info (device loop1): has skinny extents
[  144.735397][ T6398] BTRFS info (device loop1): enabling ssd optimizations
[  144.785865][ T4234] usb 1-1: config 0 interface 0 has no altsetting 0
[  144.815272][ T4234] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  144.883683][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.973294][ T4234] usb 1-1: config 0 descriptor??
[  145.095982][ T6432] kvm [6431]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010001 data 0x20d
[  145.241861][ T6434] loop3: detected capacity change from 0 to 8192
[  145.435492][ T6434] attempt to access beyond end of device
[  145.435492][ T6434] loop3: rw=0, want=57848, limit=8192
[  145.457534][ T6434] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  145.467308][ T6434] FAT-fs (loop3): Filesystem has been set read-only
[  145.480766][ T6434] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  145.519370][   T26] audit: type=1800 audit(1772153159.956:6): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.767" name="file2" dev="loop3" ino=1048624 res=0 errno=0
[  145.630820][ T6444] loop4: detected capacity change from 0 to 32768
[  145.639372][ T4233] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  145.707703][ T6444] (syz.4.760,6444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.724409][ T6444] (syz.4.760,6444,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.802669][ T6444] JBD2: Ignoring recovery information on journal
[  145.846550][ T6444] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  145.909918][ T6444] process 'syz.4.760' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  145.999572][ T4234] video4linux radio48: keene_cmd_main failed (-71)
[  146.130591][ T4234] radio-keene 1-1:0.0: V4L2 device registered as radio48
[  146.139735][ T4233] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.163169][ T4233] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  146.174908][ T4234] usb 1-1: USB disconnect, device number 7
[  146.191925][ T4199] ocfs2: Unmounting device (7,4) on (node local)
[  146.228475][ T4233] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  146.272898][ T4233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.295219][ T4233] usb 6-1: config 0 descriptor??
[  146.361289][ T4233] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  146.376073][ T4233] dvb-usb: bulk message failed: -22 (3/0)
[  146.400926][ T4233] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  146.439662][ T4233] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  146.467144][ T4233] usb 6-1: media controller created
[  146.502498][ T4233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  146.540077][ T6468] loop1: detected capacity change from 0 to 2048
[  146.570618][ T4233] dvb-usb: bulk message failed: -22 (6/0)
[  146.597518][ T4233] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  146.601814][ T6440] dvb-usb: bulk message failed: -22 (2/0)
[  146.636569][ T6468] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.691737][ T4233] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7
[  146.751134][ T4233] dvb-usb: schedule remote query interval to 150 msecs.
[  146.788132][ T4233] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  146.810960][ T6458] loop3: detected capacity change from 0 to 32768
[  146.868876][ T4233] usb 6-1: USB disconnect, device number 3
[  146.895619][ T6458] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.762 (6458)
[  147.022857][ T4233] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  147.112271][ T6475] loop4: detected capacity change from 0 to 40427
[  147.124451][ T6475] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  147.131629][ T6475] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  147.156759][ T6458] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  147.213955][ T6458] BTRFS info (device loop3): using free space tree
[  147.222446][ T6458] BTRFS info (device loop3): has skinny extents
[  147.367746][ T6491] loop1: detected capacity change from 0 to 1024
[  147.412137][ T6497] loop0: detected capacity change from 0 to 8
[  147.438282][ T6499] binder: 6493:6499 ioctl c0306201 200000000480 returned -14
[  147.570222][ T6491] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #3: block 1: comm syz.1.771: lblock 1 mapped to illegal pblock 1 (length 1)
[  147.629509][ T6491] Quota error (device loop1): write_blk: dquota write failed
[  147.690024][ T6458] BTRFS info (device loop3): enabling ssd optimizations
[  147.703906][ T6491] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  147.769403][ T6491] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.771: Failed to acquire dquot type 0
[  147.831162][ T6491] EXT4-fs error (device loop1): ext4_free_blocks:6234: comm syz.1.771: Freeing blocks not in datazone - block = 0, count = 4096
[  147.945040][ T1324] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  148.023522][ T6491] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.771: Invalid inode bitmap blk 0 in block_group 0
[  148.051378][ T1590] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  148.087846][ T6491] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  148.130184][ T1590] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  148.139061][ T6523] loop0: detected capacity change from 0 to 256
[  148.146202][ T1590] EXT4-fs error (device loop1): ext4_release_dquot:6270: comm kworker/u4:4: Failed to release dquot type 0
[  148.163162][ T6491] EXT4-fs (loop1): 1 orphan inode deleted
[  148.168956][ T6491] EXT4-fs (loop1): mounted filesystem without journal. Opts: €�; ,errors=continue. Quota mode: writeback.
[  148.191165][ T6523] exfat: Deprecated parameter 'utf8'
[  148.196562][ T6523] exfat: Deprecated parameter 'namecase'
[  148.239456][ T6523] exfat: Deprecated parameter 'utf8'
[  148.346795][ T6523] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  148.445477][ T1324] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  148.457187][ T6523] attempt to access beyond end of device
[  148.457187][ T6523] loop0: rw=524288, want=34359738496, limit=256
[  148.488942][ T6528] attempt to access beyond end of device
[  148.488942][ T6528] loop0: rw=0, want=34359738489, limit=256
[  148.489583][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.522135][ T1324] usb 5-1: config 0 descriptor??
[  148.558672][ T6523] attempt to access beyond end of device
[  148.558672][ T6523] loop0: rw=0, want=34359738496, limit=256
[  148.591515][ T1324] gspca_main: spca508-2.14.0 probing 8086:0110
[  148.619414][   T26] audit: type=1800 audit(1772153163.146:7): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.779" name="file1" dev="loop0" ino=1048625 res=0 errno=0
[  148.799531][ T1324] gspca_spca508: reg_read err -32
[  148.839472][ T1324] gspca_spca508: reg_read err -32
[  149.099603][ T1324] gspca_spca508: reg_read err -71
[  149.119346][ T1324] gspca_spca508: reg_read err -71
[  149.139284][ T1324] gspca_spca508: reg write: error -71
[  149.145689][ T1324] spca508: probe of 5-1:0.0 failed with error -71
[  149.185187][ T1324] usb 5-1: USB disconnect, device number 5
[  149.380179][ T6549] loop3: detected capacity change from 0 to 512
[  149.407566][ T6549] EXT4-fs (loop3): Ignoring removed nobh option
[  149.424393][ T6549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  149.486284][ T6549] EXT4-fs (loop3): 1 truncate cleaned up
[  149.499301][ T6549] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none.
[  149.541383][ T6536] loop1: detected capacity change from 0 to 40427
[  149.560108][ T5664] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  149.576533][ T6536] F2FS-fs (loop1): invalid crc value
[  149.662663][ T6536] F2FS-fs (loop1): Found nat_bits in checkpoint
[  149.749016][ T6554] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.789: corrupted xattr block 33
[  149.830003][ T6554] EXT4-fs (loop3): Remounting filesystem read-only
[  149.854758][ T6536] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  149.855351][ T6554] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2757: inode #15: comm syz.3.789: corrupted xattr block 33
[  149.989637][ T5664] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  150.006249][ T5664] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  150.020514][ T6554] EXT4-fs (loop3): Remounting filesystem read-only
[  150.049200][ T5664] usb 6-1: config 0 has no interface number 0
[  150.089272][ T5664] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  150.129212][ T5664] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  150.148884][ T5664] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  150.169524][ T5664] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.191378][ T5664] usb 6-1: config 0 descriptor??
[  150.211920][ T4194] attempt to access beyond end of device
[  150.211920][ T4194] loop1: rw=2049, want=45104, limit=40427
[  150.664468][ T6581] loop3: detected capacity change from 0 to 4096
[  150.866746][ T6581] ntfs: volume version 3.1.
[  150.910832][ T5664] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input8
[  150.968337][ T5664] input: failed to attach handler kbd to device input8, error: -5
[  151.045842][ T6581] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  151.145108][ T5664] usb 6-1: USB disconnect, device number 4
[  151.158342][ T6581] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  151.282493][ T6598] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  151.342658][ T6598] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  151.445201][ T6575] loop0: detected capacity change from 0 to 40427
[  151.496686][ T1599] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  151.558776][ T6575] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  151.586742][ T6575] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  151.625226][ T6615] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  151.706878][ T6575] F2FS-fs (loop0): Found nat_bits in checkpoint
[  151.768871][ T6622] loop5: detected capacity change from 0 to 64
[  151.915758][ T6575] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  151.963425][ T6575] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  152.392560][ T6575] F2FS-fs (loop0): Unrecognized mount option "memory=normal" or missing value
[  152.750053][ T6661] netlink: 'syz.5.820': attribute type 1 has an invalid length.
[  152.857877][ T6663] loop3: detected capacity change from 0 to 512
[  152.974875][ T6663] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  153.015395][ T6663] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  153.089316][ T6663] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  153.163220][ T6663] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  153.180349][ T6663] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[  153.232860][ T6663] EXT4-fs (loop3): orphan cleanup on readonly fs
[  153.287322][ T6663] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.821: bg 0: block 34: padding at end of block bitmap is not set
[  153.429580][ T6663] Quota error (device loop3): write_blk: dquota write failed
[  153.448010][ T6663] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  153.479390][ T1324] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  153.489294][ T6663] EXT4-fs error (device loop3): ext4_acquire_dquot:6234: comm syz.3.821: Failed to acquire dquot type 1
[  153.586624][ T6663] EXT4-fs (loop3): 1 truncate cleaned up
[  153.634606][ T6663] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,barrier,,errors=continue. Quota mode: writeback.
[  153.775201][ T1324] usb 1-1: Using ep0 maxpacket: 8
[  153.900412][ T1324] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  153.910852][ T1324] usb 1-1: config 0 has no interface number 0
[  153.950549][ T1324] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  154.019285][ T1324] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  154.047064][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.061954][ T6647] loop4: detected capacity change from 0 to 32768
[  154.087525][ T1324] usb 1-1: config 0 descriptor??
[  154.132407][ T1324] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  154.258888][ T6647] XFS (loop4): Mounting V5 Filesystem
[  154.399844][ T1324] usb 1-1: USB disconnect, device number 8
[  154.467318][ T6647] XFS (loop4): Ending clean mount
[  154.549066][ T4199] XFS (loop4): Unmounting Filesystem
[  154.709367][ T6447] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  154.997197][ T6706] loop3: detected capacity change from 0 to 32768
[  155.221822][ T6706] XFS (loop3): Mounting V5 Filesystem
[  155.229540][ T6447] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  155.266863][ T6447] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.281096][ T6447] usb 6-1: Product: syz
[  155.286374][ T6447] usb 6-1: Manufacturer: syz
[  155.291276][ T6447] usb 6-1: SerialNumber: syz
[  155.302049][ T6447] usb 6-1: config 0 descriptor??
[  155.377011][ T6768] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  155.401583][ T6706] XFS (loop3): Ending clean mount
[  155.549605][ T6447] cx82310_eth: probe of 6-1:0.0 failed with error -22
[  155.602413][ T4191] XFS (loop3): Unmounting Filesystem
[  155.643408][ T6775] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  155.979876][ T6447] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[  156.182495][ T6447] usb 6-1: USB disconnect, device number 5
[  156.194847][ T1324] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  156.463996][ T5664] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  156.619561][ T1324] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  156.633378][ T1324] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  156.719388][ T5664] usb 5-1: Using ep0 maxpacket: 8
[  156.839559][ T1324] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  156.854084][ T1324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.863107][ T5664] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  156.876829][ T5664] usb 5-1: config 0 has no interface number 0
[  156.905693][ T1324] usb 1-1: Product: syz
[  156.911018][ T5664] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  156.928071][ T1324] usb 1-1: Manufacturer: syz
[  156.935997][ T1324] usb 1-1: SerialNumber: syz
[  156.943168][ T5664] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  156.963457][ T1324] usb 1-1: config 0 descriptor??
[  156.971901][ T5664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.980584][ T4235] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  156.996733][ T5664] usb 5-1: config 0 descriptor??
[  157.019580][ T6785] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  157.027573][ T6785] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  157.052645][ T5664] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  157.117662][ T6447] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  157.160834][ T6447] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  157.288105][ T6785] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  157.289362][ T4235] usb 2-1: Using ep0 maxpacket: 32
[  157.309419][ T5243] usb 5-1: USB disconnect, device number 6
[  157.340333][ T6785] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  157.421018][ T6835] fido_id[6835]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  157.459482][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.479180][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.520875][ T4235] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  157.559164][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.586333][ T4235] usb 2-1: config 0 descriptor??
[  157.650570][ T4235] hub 2-1:0.0: USB hub found
[  157.718542][ T6851] loop5: detected capacity change from 0 to 256
[  157.799509][ T1324] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  157.804543][ T6851] exfat: Deprecated parameter 'namecase'
[  157.839332][ T6851] exfat: Deprecated parameter 'utf8'
[  157.859428][ T4235] hub 2-1:0.0: 15 ports detected
[  157.889489][ T4235] hub 2-1:0.0: insufficient power available to use all downstream ports
[  157.917145][ T6851] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  158.019506][ T1324] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  158.078801][ T1324] usb 1-1: USB disconnect, device number 9
[  158.248424][ T6864] Core dump to core aborted: cannot preserve file permissions
[  158.645482][ T4235] usb 2-1: USB disconnect, device number 7
[  159.022989][ T6889] loop0: detected capacity change from 0 to 128
[  159.057313][ T6891] loop3: detected capacity change from 0 to 128
[  159.243966][ T6891] VFS: Found a Xenix FS (block size = 512) on device loop3
[  159.274843][ T6872] loop4: detected capacity change from 0 to 40427
[  159.285311][ T6894] loop1: detected capacity change from 0 to 256
[  159.439541][ T6872] F2FS-fs (loop4): invalid crc value
[  159.453256][ T4191] sysv_free_block: trying to free block not in datazone
[  159.504620][ T6894] FAT-fs (loop1): Directory bread(block 64) failed
[  159.511176][ T4191] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  159.518164][ T6894] FAT-fs (loop1): Directory bread(block 65) failed
[  159.525021][ T6894] FAT-fs (loop1): Directory bread(block 66) failed
[  159.532115][ T6894] FAT-fs (loop1): Directory bread(block 67) failed
[  159.538752][ T6894] FAT-fs (loop1): Directory bread(block 68) failed
[  159.545819][ T6894] FAT-fs (loop1): Directory bread(block 69) failed
[  159.552832][ T6894] FAT-fs (loop1): Directory bread(block 70) failed
[  159.560506][ T6872] F2FS-fs (loop4): Found nat_bits in checkpoint
[  159.569810][ T6894] FAT-fs (loop1): Directory bread(block 71) failed
[  159.576504][ T6894] FAT-fs (loop1): Directory bread(block 72) failed
[  159.603730][ T6894] FAT-fs (loop1): Directory bread(block 73) failed
[  159.636487][ T6872] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  159.691889][ T6872] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  159.867413][ T6872] attempt to access beyond end of device
[  159.867413][ T6872] loop4: rw=2049, want=45104, limit=40427
[  160.059081][ T6897] chnl_net:caif_netlink_parms(): no params data found
[  160.280097][ T6897] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.287403][ T6897] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.296318][ T6897] device bridge_slave_0 entered promiscuous mode
[  160.308817][ T6897] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.316675][ T6897] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.325446][ T6897] device bridge_slave_1 entered promiscuous mode
[  160.356422][ T6897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.370436][ T6897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.419227][ T6897] team0: Port device team_slave_0 added
[  160.457270][ T6897] team0: Port device team_slave_1 added
[  160.537098][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.567381][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.605980][ T6925] loop1: detected capacity change from 0 to 512
[  160.637224][ T6897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.664558][ T6897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  160.680793][ T6897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.744318][ T6897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  160.790206][ T6925] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  160.990128][ T6897] device hsr_slave_0 entered promiscuous mode
[  161.022913][ T6897] device hsr_slave_1 entered promiscuous mode
[  161.038074][ T6897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.063756][ T6933] loop4: detected capacity change from 0 to 512
[  161.080789][ T6897] Cannot create hsr debugfs directory
[  161.161685][ T6935] netlink: 288 bytes leftover after parsing attributes in process `syz.3.896'.
[  161.252727][ T6933] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.893: EA inode hash validation failed
[  161.387004][ T6933] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #15: comm syz.4.893: corrupted inode contents
[  161.498907][ T6933] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #15: comm syz.4.893: mark_inode_dirty error
[  161.518133][ T5663] Bluetooth: hci1: command 0x0409 tx timeout
[  161.568541][ T6933] EXT4-fs error (device loop4): ext4_do_update_inode:5222: inode #15: comm syz.4.893: corrupted inode contents
[  161.640129][ T6933] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2952: inode #15: comm syz.4.893: mark_inode_dirty error
[  161.697533][ T6933] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2955: inode #15: comm syz.4.893: mark inode dirty (error -117)
[  161.711819][ T6945] loop1: detected capacity change from 0 to 4096
[  161.791709][ T6933] EXT4-fs warning (device loop4): ext4_evict_inode:302: xattr delete (err -117)
[  161.823281][ T6897] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  161.831620][ T6933] EXT4-fs (loop4): 1 orphan inode deleted
[  161.846582][ T6933] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  161.892792][ T6897] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  161.915697][ T6897] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  161.966636][ T6897] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  162.010777][ T6949] loop3: detected capacity change from 0 to 4096
[  162.089408][ T6949] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  162.151167][ T4194] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  162.158011][ T4194] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  162.272178][   T26] audit: type=1800 audit(1772153176.796:8): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.900" name="file1" dev="loop3" ino=15 res=0 errno=0
[  162.304695][ T6954] loop4: detected capacity change from 0 to 64
[  162.518062][  T671] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.518841][ T6958] loop1: detected capacity change from 0 to 64
[  162.648110][ T6897] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.915210][  T671] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.933013][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.943769][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  163.039150][ T6897] 8021q: adding VLAN 0 to HW filter on device team0
[  163.058415][  T671] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.138244][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  163.171625][ T6972] sctp: [Deprecated]: syz.4.910 (pid 6972) Use of int in max_burst socket option.
[  163.171625][ T6972] Use struct sctp_assoc_value instead
[  163.189076][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  163.211752][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.218861][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.274659][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  163.311977][ T6979] loop0: detected capacity change from 0 to 1024
[  163.345912][  T671] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.376804][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  163.386697][ T6976] loop1: detected capacity change from 0 to 4096
[  163.394264][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.403775][ T1599] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.410949][ T1599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.422417][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  163.458192][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  163.487689][ T6979] hfsplus: bad catalog entry type
[  163.523661][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  163.575321][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  163.583785][ T4233] Bluetooth: hci1: command 0x041b tx timeout
[  163.620826][    T9] hfsplus: b-tree write err: -5, ino 4
[  163.638584][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.673214][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  163.720427][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  163.746465][   T26] audit: type=1326 audit(1772153178.266:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b1d93799 code=0x7ffc0000
[  163.765540][ T4194] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  163.791170][ T6897] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  163.828055][ T4194] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  163.839658][   T26] audit: type=1326 audit(1772153178.326:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b1d93799 code=0x7ffc0000
[  163.865277][ T6897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.919082][ T6985] loop3: detected capacity change from 0 to 8192
[  163.919949][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.949501][   T26] audit: type=1326 audit(1772153178.326:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b1d93799 code=0x7ffc0000
[  163.973005][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  164.011916][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  164.027635][ T6985] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  164.039880][ T6985] REISERFS (device loop3): using ordered data mode
[  164.046517][ T6985] reiserfs: using flush barriers
[  164.052598][ T6987] loop4: detected capacity change from 0 to 8192
[  164.059682][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  164.067918][   T26] audit: type=1326 audit(1772153178.326:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6b1d93799 code=0x7ffc0000
[  164.091236][   T26] audit: type=1326 audit(1772153178.326:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b1d93799 code=0x7ffc0000
[  164.097135][ T6985] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  164.114602][   T26] audit: type=1326 audit(1772153178.326:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b1d93799 code=0x7ffc0000
[  164.153506][   T26] audit: type=1326 audit(1772153178.326:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b1d93799 code=0x7ffc0000
[  164.169615][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  164.183153][   T26] audit: type=1326 audit(1772153178.326:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb6b1d93799 code=0x7ffc0000
[  164.260750][ T6987] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  164.288374][   T26] audit: type=1326 audit(1772153178.326:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.0.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b1d93799 code=0x7ffc0000
[  164.311616][ T6985] REISERFS (device loop3): checking transaction log (loop3)
[  164.523795][ T6998] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  164.639216][ T6998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.762254][ T6985] REISERFS (device loop3): Using tea hash to sort names
[  164.810703][ T6985] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  164.896125][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  164.910931][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  164.928727][ T6985] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  164.947514][ T6897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.652254][ T7029] set_capacity_and_notify: 2 callbacks suppressed
[  165.652271][ T7029] loop1: detected capacity change from 0 to 4096
[  165.689802][ T5663] Bluetooth: hci1: command 0x040f tx timeout
[  166.122591][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  166.141665][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  166.218584][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  166.236406][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  166.268243][ T6897] device veth0_vlan entered promiscuous mode
[  166.287638][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  166.321793][ T1590] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  166.365583][ T6897] device veth1_vlan entered promiscuous mode
[  166.483458][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  166.499936][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  166.535127][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  166.576636][ T7040] loop0: detected capacity change from 0 to 131072
[  166.584075][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  166.665874][ T7040] F2FS-fs (loop0): invalid crc value
[  166.678913][ T6897] device veth0_macvtap entered promiscuous mode
[  166.704467][ T7040] F2FS-fs (loop0): Found nat_bits in checkpoint
[  166.744221][ T7040] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  166.755316][ T7040] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  166.813884][ T7029] ntfs: volume version 3.1.
[  166.833222][ T6897] device veth1_macvtap entered promiscuous mode
[  167.031806][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.057690][ T7044] loop4: detected capacity change from 0 to 40427
[  167.069219][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.118496][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.139251][ T7044] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  167.173834][ T7044] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff
[  167.197009][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.225712][ T7044] F2FS-fs (loop4): inline encryption not supported
[  167.267658][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.294415][ T7044] F2FS-fs (loop4): invalid crc value
[  167.321379][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.373687][ T7044] F2FS-fs (loop4): Found nat_bits in checkpoint
[  167.390518][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.435500][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.518578][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  167.549267][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.575638][ T7044] F2FS-fs (loop4): Start checkpoint disabled!
[  167.585246][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.616487][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  167.625381][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  167.643167][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  167.672926][ T7044] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  167.710827][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  167.750313][ T5663] Bluetooth: hci1: command 0x0419 tx timeout
[  167.782787][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.814415][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.858458][ T7076] loop0: detected capacity change from 0 to 8192
[  167.876143][ T7044] F2FS-fs (loop4) : inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1dd/0x8f0
[  167.884532][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.938843][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.978256][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.011774][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.023993][ T4199] F2FS-fs (loop4): access invalid blkaddr:4043309056
[  168.029248][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.047622][ T4199] CPU: 1 PID: 4199 Comm: syz-executor Not tainted syzkaller #0
[  168.055230][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  168.059239][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.065397][ T4199] Call Trace:
[  168.065451][ T4199]  <TASK>
[  168.081501][ T4199]  dump_stack_lvl+0x188/0x250
[  168.086305][ T4199]  ? show_regs_print_info+0x20/0x20
[  168.091545][ T4199]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  168.097488][ T4199]  f2fs_is_valid_blkaddr+0xc7e/0x1250
[  168.102903][ T4199]  f2fs_map_blocks+0xbcd/0x3300
[  168.106819][ T6897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.107901][ T4199]  ? f2fs_force_buffered_io+0x680/0x680
[  168.123789][ T4199]  ? xa_load+0x276/0x2a0
[  168.128071][ T4199]  f2fs_mpage_readpages+0xc95/0x2260
[  168.133412][ T4199]  ? dquot_release_reservation_block+0xa0/0xa0
[  168.139610][ T4199]  ? f2fs_is_compress_backend_ready+0x99/0x120
[  168.145791][ T4199]  ? f2fs_readahead+0x163/0x2f0
[  168.149216][ T6897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.150662][ T4199]  ? f2fs_set_data_page_dirty+0xad0/0xad0
[  168.150689][ T4199]  read_pages+0x175/0x930
[  168.150719][ T4199]  ? page_cache_ra_unbounded+0x940/0x940
[  168.176216][ T4199]  ? add_to_page_cache_lru+0x2a8/0x4a0
[  168.181711][ T4199]  page_cache_ra_unbounded+0x838/0x940
[  168.187228][ T4199]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  168.193781][ T4199]  f2fs_readdir+0x496/0xda0
[  168.196641][ T6897] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.198368][ T4199]  ? f2fs_fill_dentries+0xd10/0xd10
[  168.210743][ T4199]  ? end_current_label_crit_section+0x14b/0x170
[  168.217023][ T4199]  ? iterate_dir+0x10d/0x560
[  168.221653][ T4199]  ? down_read_killable+0x1ce/0x340
[  168.226875][ T4199]  ? fsnotify_perm+0x254/0x560
[  168.231684][ T4199]  iterate_dir+0x218/0x560
[  168.236131][ T4199]  ? f2fs_fill_dentries+0xd10/0xd10
[  168.241366][ T4199]  __se_sys_getdents64+0xf2/0x270
[  168.246428][ T4199]  ? __x64_sys_getdents64+0x80/0x80
[  168.251651][ T4199]  ? filldir+0x720/0x720
[  168.255911][ T4199]  ? vtime_user_exit+0x2c8/0x3e0
[  168.260892][ T4199]  ? lockdep_hardirqs_on+0x94/0x140
[  168.266121][ T4199]  do_syscall_64+0x4c/0xa0
[  168.270558][ T4199]  ? clear_bhb_loop+0x30/0x80
[  168.275261][ T4199]  ? clear_bhb_loop+0x30/0x80
[  168.279969][ T4199]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  168.285902][ T4199] RIP: 0033:0x7f031764c133
[  168.290366][ T4199] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[  168.310267][ T4199] RSP: 002b:00007ffc13e09958 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  168.318719][ T4199] RAX: ffffffffffffffda RBX: 000055557a843a30 RCX: 00007f031764c133
[  168.326725][ T4199] RDX: 0000000000008000 RSI: 000055557a843a60 RDI: 0000000000000005
[  168.334726][ T4199] RBP: 000055557a843a60 R08: 00007f0317872e20 R09: 0000000000000001
[  168.342729][ T4199] R10: 0000000000000000 R11: 0000000000000293 R12: 000055557a843a34
[  168.350729][ T4199] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007ffc13e0bc00
[  168.358756][ T4199]  </TASK>
[  168.379555][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  168.411344][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.456101][ T7076] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  168.467574][ T6897] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.483158][ T4199] attempt to access beyond end of device
[  168.483158][ T4199] loop4: rw=524288, want=45072, limit=40427
[  168.487147][ T7076] REISERFS (device loop0): using ordered data mode
[  168.496768][ T4199] attempt to access beyond end of device
[  168.496768][ T4199] loop4: rw=0, want=45072, limit=40427
[  168.518435][ T6897] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.547819][ T6897] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.568109][ T7076] reiserfs: using flush barriers
[  168.578222][ T6897] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.591372][ T7076] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  168.695169][ T7076] REISERFS (device loop0): checking transaction log (loop0)
[  168.741771][ T4282] attempt to access beyond end of device
[  168.741771][ T4282] loop4: rw=2049, want=40984, limit=40427
[  168.992960][ T7100] loop1: detected capacity change from 0 to 256
[  169.043996][ T7095] loop3: detected capacity change from 0 to 4096
[  169.048311][ T7076] REISERFS (device loop0): Using tea hash to sort names
[  169.065330][ T7076] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  169.081364][ T7100] exfat: Deprecated parameter 'utf8'
[  169.097112][ T7100] exfat: Deprecated parameter 'utf8'
[  169.115768][  T671] device hsr_slave_0 left promiscuous mode
[  169.123747][ T7095] __ntfs_warning: 11 callbacks suppressed
[  169.123764][ T7095] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  169.203301][ T7100] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  169.223085][  T671] device hsr_slave_1 left promiscuous mode
[  169.257274][  T671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.272258][ T7095] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  169.289203][  T671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.300348][   T26] audit: type=1800 audit(1772153183.826:24): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.936" name="file1" dev="loop0" ino=4 res=0 errno=0
[  169.327049][  T671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.334845][  T671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.344116][ T7095] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  169.358278][  T671] device bridge_slave_1 left promiscuous mode
[  169.376838][  T671] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.402639][ T7095] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  169.417493][  T671] device bridge_slave_0 left promiscuous mode
[  169.442885][  T671] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.489390][ T7095] ntfs: volume version 3.1.
[  169.497530][  T671] device veth1_macvtap left promiscuous mode
[  169.549339][  T671] device veth0_macvtap left promiscuous mode
[  169.555521][  T671] device veth1_vlan left promiscuous mode
[  169.590503][  T671] device veth0_vlan left promiscuous mode
[  169.651485][ T7095] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  169.719638][ T7095] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  169.784159][  T154] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  169.825396][  T154] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  169.865790][ T4191] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  170.043168][ T7119] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  170.283261][  T671] team0 (unregistering): Port device team_slave_1 removed
[  170.306925][  T671] team0 (unregistering): Port device team_slave_0 removed
[  170.322042][  T671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.340853][  T671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.417235][  T671] bond0 (unregistering): Released all slaves
[  170.565144][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.630906][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.708917][ T1599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  170.748404][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.791856][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.858986][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  171.081653][ T7141] loop0: detected capacity change from 0 to 1024
[  171.086068][ T7144] netlink: 7 bytes leftover after parsing attributes in process `syz.6.877'.
[  171.446242][ T1590] hfsplus: b-tree write err: -5, ino 3
[  172.159492][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'.
[  172.199301][ T7180] ip6erspan0: tun_chr_ioctl cmd 1074025677
[  172.249575][ T7180] ip6erspan0: linktype set to 1
[  172.285307][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.975'.
[  172.296318][ T7184] netlink: 'syz.0.975': attribute type 15 has an invalid length.
[  172.345063][ T7148] loop3: detected capacity change from 0 to 32768
[  172.461416][ T7148] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.964 (7148)
[  172.599817][ T7148] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  172.647396][ T7148] BTRFS info (device loop3): enabling auto defrag
[  172.667642][ T7148] BTRFS info (device loop3): use no compression
[  172.710825][ T7148] BTRFS info (device loop3): max_inline at 4096
[  172.741861][ T7148] BTRFS info (device loop3): using free space tree
[  172.774454][ T7148] BTRFS info (device loop3): has skinny extents
[  173.006511][ T7183] chnl_net:caif_netlink_parms(): no params data found
[  173.111101][ T5663] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  173.125817][ T5663] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  173.162700][ T7148] BTRFS info (device loop3): enabling ssd optimizations
[  173.363367][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.388834][ T7243] sctp: [Deprecated]: syz.1.987 (pid 7243) Use of struct sctp_assoc_value in delayed_ack socket option.
[  173.388834][ T7243] Use struct sctp_sack_info instead
[  173.437411][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.472845][ T7183] device bridge_slave_0 entered promiscuous mode
[  173.569932][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.577053][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.659744][ T6351] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (6351)
[  173.673273][ T7183] device bridge_slave_1 entered promiscuous mode
[  173.801467][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.853489][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.053370][ T7262] loop6: detected capacity change from 0 to 128
[  174.075902][ T7183] team0: Port device team_slave_0 added
[  174.172021][ T7183] team0: Port device team_slave_1 added
[  174.230179][ T7262] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  174.249346][ T7262] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  174.299283][ T5663] Bluetooth: hci4: command 0x0409 tx timeout
[  174.359411][ T4233] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  174.380495][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.408934][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.451819][ T7262] overlayfs: Failed to create volatile/dirty file.
[  174.470947][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.503467][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.532622][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.596682][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.759433][ T4233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  174.787263][ T4233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  174.803314][ T7282] loop6: detected capacity change from 0 to 512
[  174.840791][ T7183] device hsr_slave_0 entered promiscuous mode
[  174.860810][ T7183] device hsr_slave_1 entered promiscuous mode
[  174.892362][ T7183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.909281][ T7282] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  174.919574][ T4233] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  174.928655][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  174.949544][ T7183] Cannot create hsr debugfs directory
[  174.967820][ T4233] usb 1-1: SerialNumber: syz
[  174.990578][ T7282] EXT4-fs (loop6): 1 truncate cleaned up
[  174.996299][ T7282] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,debug_want_extra_isize=0x0000000000000064,barrier,jqfmt=vfsold,quota,. Quota mode: writeback.
[  175.033925][ T7282] EXT4-fs (loop6): shut down requested (2)
[  175.272450][ T4233] usb 1-1: 0:2 : does not exist
[  175.374692][ T4233] usb 1-1: USB disconnect, device number 10
[  175.417528][ T7300] loop6: detected capacity change from 0 to 512
[  175.435635][ T4178] udevd[4178]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory
[  175.503559][ T4178] udevd[4178]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory
[  175.565447][ T7300] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.1002: EA inode hash validation failed
[  175.657632][ T7307] netlink: 'syz.1.1004': attribute type 5 has an invalid length.
[  175.672784][ T7300] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.1002: corrupted inode contents
[  175.691026][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  175.747386][ T7183] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  175.781609][ T7300] EXT4-fs error (device loop6): ext4_dirty_inode:6058: inode #15: comm syz.6.1002: mark_inode_dirty error
[  175.806805][ T7183] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  175.849833][ T7300] EXT4-fs error (device loop6): ext4_do_update_inode:5222: inode #15: comm syz.6.1002: corrupted inode contents
[  175.868137][ T7183] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  175.903681][ T7300] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.1002: mark_inode_dirty error
[  175.927185][ T7300] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.1002: mark inode dirty (error -117)
[  175.944362][ T7183] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  175.971042][ T7300] EXT4-fs warning (device loop6): ext4_evict_inode:302: xattr delete (err -117)
[  176.050764][ T7300] EXT4-fs (loop6): 1 orphan inode deleted
[  176.056562][ T7300] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  176.287910][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0
[  176.370725][ T7326] binder: 7325:7326 ioctl c018620c 0 returned -14
[  176.379713][ T5663] Bluetooth: hci4: command 0x041b tx timeout
[  176.388043][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  176.430501][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  176.461775][ T7183] 8021q: adding VLAN 0 to HW filter on device team0
[  176.513206][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  176.530373][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  176.570839][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.577969][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.646209][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  176.663206][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  176.708981][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  176.734761][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.741971][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.775411][ T7336] loop0: detected capacity change from 0 to 2048
[  176.795752][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  176.825550][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  176.881524][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  176.907169][ T7351] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.921621][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  176.977630][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  176.997661][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  177.032636][ T7336] NILFS (loop0): failed to count free inodes: err=-34
[  177.064077][  T671] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.144450][ T7183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  177.193186][ T7183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  177.255835][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.278306][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.297191][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.337888][ T4186] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 8796093022222
[  177.338911][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  177.364691][ T4186] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16)
[  177.383329][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  177.410905][ T4186] Remounting filesystem read-only
[  177.429275][ T4186] NILFS (loop0): error -5 truncating bmap (ino=16)
[  177.451151][  T671] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.499385][ T4186] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  177.520255][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  177.588830][  T671] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.719932][  T671] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.735527][ T7348] loop6: detected capacity change from 0 to 32768
[  177.873715][ T7348] (syz.6.1020,7348,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  177.972258][ T7348] (syz.6.1020,7348,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  178.034420][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  178.046937][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  178.098940][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.205056][ T7348] JBD2: Ignoring recovery information on journal
[  178.374117][ T7348] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  178.385457][ T7403] loop0: detected capacity change from 0 to 128
[  178.469572][ T4233] Bluetooth: hci4: command 0x040f tx timeout
[  178.490353][ T7403] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  178.531894][ T7403] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.562660][ T1324] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  178.959476][ T1324] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  178.968589][ T1324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.000203][ T1324] usb 2-1: config 0 descriptor??
[  179.060753][ T1324] cp210x 2-1:0.0: cp210x converter detected
[  179.155757][ T7428] loop0: detected capacity change from 0 to 4096
[  179.208794][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  179.216561][ T6897] ocfs2: Unmounting device (7,6) on (node local)
[  179.229004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  179.338341][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  179.390248][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  179.432333][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  179.472678][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  179.489707][ T1324] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  179.500266][ T7183] device veth0_vlan entered promiscuous mode
[  179.549570][ T1324] usb 2-1: cp210x converter now attached to ttyUSB0
[  179.575018][ T7183] device veth1_vlan entered promiscuous mode
[  179.658692][ T7183] device veth0_macvtap entered promiscuous mode
[  179.713091][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  179.738383][ T4233] usb 2-1: USB disconnect, device number 8
[  179.747201][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  179.776546][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  179.787017][ T4233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  179.810906][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  179.894268][ T4233] cp210x 2-1:0.0: device disconnected
[  179.904042][ T7423] loop3: detected capacity change from 0 to 32768
[  179.966735][ T7183] device veth1_macvtap entered promiscuous mode
[  179.984128][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  180.012770][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  180.048412][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.086714][ T7454] loop6: detected capacity change from 0 to 256
[  180.094235][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.106279][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.142529][ T7423] XFS (loop3): Mounting V5 Filesystem
[  180.191058][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.249545][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.255255][ T7423] XFS (loop3): Ending clean mount
[  180.275194][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.334358][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.349046][ T7468] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  180.369442][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.409826][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.441995][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.461757][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.483288][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  180.492670][ T4191] XFS (loop3): Unmounting Filesystem
[  180.506551][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  180.550791][ T4233] Bluetooth: hci4: command 0x0419 tx timeout
[  180.568174][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.583933][ T7454] FAT-fs (loop6): Directory bread(block 64) failed
[  180.629436][ T7454] FAT-fs (loop6): Directory bread(block 65) failed
[  180.636115][ T7454] FAT-fs (loop6): Directory bread(block 66) failed
[  180.650468][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.679823][ T7454] FAT-fs (loop6): Directory bread(block 67) failed
[  180.686508][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.707368][ T7454] FAT-fs (loop6): Directory bread(block 68) failed
[  180.717420][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.729264][ T7454] FAT-fs (loop6): Directory bread(block 69) failed
[  180.752035][ T7454] FAT-fs (loop6): Directory bread(block 70) failed
[  180.778962][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.793059][ T7454] FAT-fs (loop6): Directory bread(block 71) failed
[  180.817557][ T7454] FAT-fs (loop6): Directory bread(block 72) failed
[  180.826602][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.856087][ T7454] FAT-fs (loop6): Directory bread(block 73) failed
[  180.871738][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.907806][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.947956][ T7481] loop1: detected capacity change from 0 to 2048
[  180.972565][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.985240][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.998235][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.007383][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  181.021488][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.071946][ T7183] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.118623][ T7183] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.130730][ T7481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.157212][ T7183] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.185079][ T7183] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.558132][  T671] device hsr_slave_0 left promiscuous mode
[  181.600065][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'.
[  181.622546][  T671] device hsr_slave_1 left promiscuous mode
[  181.670268][  T671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.683876][  T671] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.715448][  T671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.743670][  T671] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.775942][  T671] device bridge_slave_1 left promiscuous mode
[  181.783593][  T671] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.829261][  T671] device bridge_slave_0 left promiscuous mode
[  181.862623][  T671] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.896958][  T671] device virt_wifi0 left promiscuous mode
[  181.912898][ T7508] loop1: detected capacity change from 0 to 1024
[  181.921359][  T671] device veth1_macvtap left promiscuous mode
[  181.932675][  T671] device veth0_macvtap left promiscuous mode
[  181.947854][  T671] device veth1_vlan left promiscuous mode
[  181.976061][  T671] device veth0_vlan left promiscuous mode
[  182.057766][ T7508] hfsplus: request for non-existent node 33554434 in B*Tree
[  182.089365][ T7508] hfsplus: request for non-existent node 33554434 in B*Tree
[  182.098493][ T7508] hfsplus: request for non-existent node 33554434 in B*Tree
[  182.127265][ T7508] hfsplus: request for non-existent node 33554434 in B*Tree
[  182.155651][ T7512] hfsplus: request for non-existent node 33554434 in B*Tree
[  182.189016][ T7512] hfsplus: request for non-existent node 33554434 in B*Tree
[  182.264906][  T144] hfsplus: request for non-existent node 33554434 in B*Tree
[  182.281348][  T144] hfsplus: request for non-existent node 33554434 in B*Tree
[  182.494496][  T671] team0 (unregistering): Port device team_slave_1 removed
[  182.512200][  T671] team0 (unregistering): Port device team_slave_0 removed
[  182.527324][  T671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.548032][  T671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  182.597457][  T671] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  182.643881][  T671] bond0 (unregistering): Released all slaves
[  182.659886][ T4233] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  182.770892][ T7523] loop0: detected capacity change from 0 to 736
[  182.808738][ T7091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.837901][ T7091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.900062][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.940822][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.948817][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.039476][ T4233] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  183.047820][ T4233] usb 2-1: config 0 has no interface number 0
[  183.052723][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  183.058438][ T7530] loop6: detected capacity change from 0 to 256
[  183.104672][ T4233] usb 2-1: config 0 interface 41 has no altsetting 0
[  183.120298][ T7530] exfat: Deprecated parameter 'namecase'
[  183.142680][ T7530] exfat: Deprecated parameter 'namecase'
[  183.210481][ T7530] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d)
[  183.320232][ T4233] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  183.339143][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.359313][ T4233] usb 2-1: Product: syz
[  183.363555][ T4233] usb 2-1: Manufacturer: syz
[  183.368198][ T4233] usb 2-1: SerialNumber: syz
[  183.412501][ T4233] usb 2-1: config 0 descriptor??
[  183.591648][ T7546] loop6: detected capacity change from 0 to 512
[  183.601448][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1074'.
[  183.699492][ T4233] CoreChips: probe of 2-1:0.41 failed with error -71
[  183.722935][ T7546] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  183.770584][ T7546] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.798913][ T4233] usb 2-1: USB disconnect, device number 9
[  183.876169][ T7546] EXT4-fs error (device loop6): ext4_validate_inode_bitmap:106: comm syz.6.1072: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  184.031003][ T7566] 
[  184.033396][ T7566] ======================================================
[  184.040426][ T7566] WARNING: possible circular locking dependency detected
[  184.047463][ T7566] syzkaller #0 Not tainted
[  184.052093][ T7566] ------------------------------------------------------
[  184.059130][ T7566] syz.6.1072/7566 is trying to acquire lock:
[  184.065133][ T7566] ffff88805edd67a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  184.074056][ T7566] 
[  184.074056][ T7566] but task is already holding lock:
[  184.081429][ T7566] ffff888070f82060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0
[  184.090786][ T7566] 
[  184.090786][ T7566] which lock already depends on the new lock.
[  184.090786][ T7566] 
[  184.101199][ T7566] 
[  184.101199][ T7566] the existing dependency chain (in reverse order) is:
[  184.110215][ T7566] 
[  184.110215][ T7566] -> #2 (&ei->i_data_sem/2){++++}-{3:3}:
[  184.118053][ T7566]        down_read+0x44/0x2e0
[  184.122745][ T7566]        ext4_map_blocks+0x33c/0x1b30
[  184.128132][ T7566]        ext4_getblk+0x176/0x670
[  184.133086][ T7566]        ext4_bread+0x26/0x180
[  184.137856][ T7566]        ext4_quota_write+0x236/0x580
[  184.143333][ T7566]        get_free_dqblk+0x387/0x7d0
[  184.148546][ T7566]        do_insert_tree+0x214/0x1970
[  184.153842][ T7566]        do_insert_tree+0x5b1/0x1970
[  184.159142][ T7566]        qtree_write_dquot+0x361/0x4b0
[  184.164616][ T7566]        v2_write_dquot+0x108/0x190
[  184.169826][ T7566]        dquot_acquire+0x2d5/0x520
[  184.174949][ T7566]        ext4_acquire_dquot+0x2d9/0x4a0
[  184.180500][ T7566]        dqget+0x778/0xeb0
[  184.184925][ T7566]        __dquot_initialize+0x3c3/0xcd0
[  184.190476][ T7566]        ext4_setattr+0x2c6/0x19e0
[  184.195599][ T7566]        notify_change+0xbcd/0xee0
[  184.200731][ T7566]        chown_common+0x4a7/0x660
[  184.205766][ T7566]        do_fchownat+0x147/0x240
[  184.210721][ T7566]        __x64_sys_chown+0x7e/0x90
[  184.215837][ T7566]        do_syscall_64+0x4c/0xa0
[  184.220783][ T7566]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  184.227204][ T7566] 
[  184.227204][ T7566] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  184.235291][ T7566]        down_read+0x44/0x2e0
[  184.239983][ T7566]        v2_read_dquot+0x4a/0x110
[  184.245011][ T7566]        dquot_acquire+0x152/0x520
[  184.250145][ T7566]        ext4_acquire_dquot+0x2d9/0x4a0
[  184.255698][ T7566]        dqget+0x778/0xeb0
[  184.260117][ T7566]        __dquot_initialize+0x3c3/0xcd0
[  184.265668][ T7566]        ext4_setattr+0x2c6/0x19e0
[  184.270804][ T7566]        notify_change+0xbcd/0xee0
[  184.275939][ T7566]        chown_common+0x4a7/0x660
[  184.280977][ T7566]        do_fchownat+0x147/0x240
[  184.285928][ T7566]        __x64_sys_chown+0x7e/0x90
[  184.291054][ T7566]        do_syscall_64+0x4c/0xa0
[  184.296013][ T7566]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  184.302435][ T7566] 
[  184.302435][ T7566] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  184.310280][ T7566]        __lock_acquire+0x2c42/0x7d10
[  184.315684][ T7566]        lock_acquire+0x19e/0x400
[  184.320733][ T7566]        __mutex_lock_common+0x1e3/0x2400
[  184.326492][ T7566]        mutex_lock_nested+0x17/0x20
[  184.331790][ T7566]        dquot_commit+0x5a/0x410
[  184.336737][ T7566]        ext4_write_dquot+0x1f0/0x360
[  184.342116][ T7566]        mark_all_dquot_dirty+0xf9/0x400
[  184.347761][ T7566]        __dquot_free_space+0x7ca/0xb90
[  184.353323][ T7566]        ext4_free_blocks+0x1b2b/0x24d0
[  184.358881][ T7566]        ext4_ext_remove_space+0x1f86/0x42b0
[  184.364873][ T7566]        ext4_ext_truncate+0x192/0x240
[  184.370339][ T7566]        ext4_truncate+0xa09/0x10f0
[  184.375544][ T7566]        ext4_evict_inode+0xb4f/0x1090
[  184.381011][ T7566]        evict+0x4c9/0x8d0
[  184.385437][ T7566]        do_unlinkat+0x3e7/0x710
[  184.390378][ T7566]        __x64_sys_unlink+0x45/0x50
[  184.395593][ T7566]        do_syscall_64+0x4c/0xa0
[  184.400545][ T7566]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  184.406974][ T7566] 
[  184.406974][ T7566] other info that might help us debug this:
[  184.406974][ T7566] 
[  184.417207][ T7566] Chain exists of:
[  184.417207][ T7566]   &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2
[  184.417207][ T7566] 
[  184.430862][ T7566]  Possible unsafe locking scenario:
[  184.430862][ T7566] 
[  184.438321][ T7566]        CPU0                    CPU1
[  184.443715][ T7566]        ----                    ----
[  184.449094][ T7566]   lock(&ei->i_data_sem/2);
[  184.453704][ T7566]                                lock(&s->s_dquot.dqio_sem);
[  184.461083][ T7566]                                lock(&ei->i_data_sem/2);
[  184.468222][ T7566]   lock(&dquot->dq_lock);
[  184.472679][ T7566] 
[  184.472679][ T7566]  *** DEADLOCK ***
[  184.472679][ T7566] 
[  184.480833][ T7566] 4 locks held by syz.6.1072/7566:
[  184.485956][ T7566]  #0: ffff888022b1a460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  184.495143][ T7566]  #1: ffff888022b1a650 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x44a/0x1090
[  184.504646][ T7566]  #2: ffff888070f82060 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_truncate+0x97f/0x10f0
[  184.514408][ T7566]  #3: ffffffff8c441538 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30
[  184.523609][ T7566] 
[  184.523609][ T7566] stack backtrace:
[  184.529512][ T7566] CPU: 1 PID: 7566 Comm: syz.6.1072 Not tainted syzkaller #0
[  184.536894][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  184.546978][ T7566] Call Trace:
[  184.550289][ T7566]  <TASK>
[  184.553227][ T7566]  dump_stack_lvl+0x188/0x250
[  184.557950][ T7566]  ? load_image+0x400/0x400
[  184.562472][ T7566]  ? show_regs_print_info+0x20/0x20
[  184.567688][ T7566]  ? print_circular_bug+0x12b/0x1a0
[  184.572916][ T7566]  check_noncircular+0x296/0x330
[  184.577895][ T7566]  ? add_chain_block+0x940/0x940
[  184.582842][ T7566]  ? lockdep_lock+0xf1/0x1f0
[  184.587450][ T7566]  ? mark_lock+0x94/0x320
[  184.591820][ T7566]  ? _find_first_zero_bit+0xce/0xf0
[  184.597058][ T7566]  __lock_acquire+0x2c42/0x7d10
[  184.601935][ T7566]  ? verify_lock_unused+0x140/0x140
[  184.607149][ T7566]  ? mark_lock+0x94/0x320
[  184.611494][ T7566]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  184.617481][ T7566]  ? lock_chain_count+0x20/0x20
[  184.622348][ T7566]  lock_acquire+0x19e/0x400
[  184.626868][ T7566]  ? dquot_commit+0x5a/0x410
[  184.631475][ T7566]  ? finish_task_switch+0x12f/0x640
[  184.636689][ T7566]  ? __might_sleep+0xf0/0xf0
[  184.641290][ T7566]  ? read_lock_is_recursive+0x10/0x10
[  184.646685][ T7566]  ? __schedule+0x11f7/0x43c0
[  184.651378][ T7566]  ? dquot_commit+0x5a/0x410
[  184.655980][ T7566]  __mutex_lock_common+0x1e3/0x2400
[  184.661195][ T7566]  ? dquot_commit+0x5a/0x410
[  184.665805][ T7566]  ? __might_sleep+0xf0/0xf0
[  184.670404][ T7566]  ? mutex_lock_io_nested+0x60/0x60
[  184.675632][ T7566]  ? preempt_schedule+0xbc/0xd0
[  184.680502][ T7566]  mutex_lock_nested+0x17/0x20
[  184.685278][ T7566]  dquot_commit+0x5a/0x410
[  184.689709][ T7566]  ? __ext4_journal_start_sb+0x1bd/0x360
[  184.695354][ T7566]  ext4_write_dquot+0x1f0/0x360
[  184.700220][ T7566]  mark_all_dquot_dirty+0xf9/0x400
[  184.705341][ T7566]  __dquot_free_space+0x7ca/0xb90
[  184.710386][ T7566]  ext4_free_blocks+0x1b2b/0x24d0
[  184.715438][ T7566]  ? ext4_mb_discard_preallocations_should_retry+0x690/0x690
[  184.722830][ T7566]  ? __ext4_journal_ensure_credits+0x2c/0x450
[  184.728915][ T7566]  ? ext4_inode_journal_mode+0x18f/0x460
[  184.734566][ T7566]  ext4_ext_remove_space+0x1f86/0x42b0
[  184.740054][ T7566]  ? ext4_ext_index_trans_blocks+0xf0/0xf0
[  184.745886][ T7566]  ? ext4_es_remove_extent+0x24f/0x3e0
[  184.751357][ T7566]  ext4_ext_truncate+0x192/0x240
[  184.756308][ T7566]  ext4_truncate+0xa09/0x10f0
[  184.761001][ T7566]  ? __ext4_mark_inode_dirty+0x700/0x700
[  184.766651][ T7566]  ext4_evict_inode+0xb4f/0x1090
[  184.771599][ T7566]  ? _raw_spin_unlock+0x24/0x40
[  184.776465][ T7566]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  184.782370][ T7566]  ? do_raw_spin_unlock+0x11d/0x230
[  184.787586][ T7566]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  184.793487][ T7566]  evict+0x4c9/0x8d0
[  184.797416][ T7566]  ? proc_nr_inodes+0x320/0x320
[  184.802290][ T7566]  ? do_raw_spin_unlock+0x11d/0x230
[  184.807504][ T7566]  ? _raw_spin_unlock+0x24/0x40
[  184.812385][ T7566]  ? iput+0x706/0x8a0
[  184.816384][ T7566]  do_unlinkat+0x3e7/0x710
[  184.820808][ T7566]  ? __virt_addr_valid+0x3c6/0x470
[  184.825930][ T7566]  ? fsnotify_link_count+0xf0/0xf0
[  184.831050][ T7566]  ? strncpy_from_user+0x1fb/0x360
[  184.836182][ T7566]  ? getname_flags+0x1fe/0x500
[  184.840957][ T7566]  __x64_sys_unlink+0x45/0x50
[  184.845652][ T7566]  do_syscall_64+0x4c/0xa0
[  184.850084][ T7566]  ? clear_bhb_loop+0x30/0x80
[  184.854771][ T7566]  ? clear_bhb_loop+0x30/0x80
[  184.859457][ T7566]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  184.865360][ T7566] RIP: 0033:0x7f4483d66799
[  184.869792][ T7566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.889429][ T7566] RSP: 002b:00007f4481f9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  184.897860][ T7566] RAX: ffffffffffffffda RBX: 00007f4483fe0090 RCX: 00007f4483d66799
[  184.905846][ T7566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580
[  184.913834][ T7566] RBP: 00007f4483dfcbd9 R08: 0000000000000000 R09: 0000000000000000
[  184.921819][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.929801][ T7566] R13: 00007f4483fe0128 R14: 00007f4483fe0090 R15: 00007ffc710296e8
[  184.937781][ T7566]  </TASK>
[  185.119596][ T7566] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem
[  191.179776][ T5253] Bluetooth: hci0: command 0x0406 tx timeout
[  191.190462][ T5253] Bluetooth: hci2: command 0x0406 tx timeout
[  191.196497][ T5253] Bluetooth: hci3: command 0x0406 tx timeout