last executing test programs:

2m24.814181853s ago: executing program 0 (id=9):
r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000000))
mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r0, 0x8000000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2m24.671015889s ago: executing program 0 (id=10):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_dbg\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys_dbg\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_dbg/bus/usb/devices/usb5/authorized_default\x00', 0x1, 0x0)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000200)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x1, 0xec, 0xf, 0x6, {0x1, 0x1, 0x10001, 0x6e01, 0x6, 0x4, 0xe, 0x2, 0xe, 0x8000, 0x3, 0x0, 0xee00, 0x6, 0xffffe7e9}}, {0x0, 0x1}}}, 0xa0)

2m24.421916581s ago: executing program 0 (id=11):
r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016b})
r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0)
readv(r1, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3)
close_range(r0, 0xffffffffffffffff, 0x0)

2m24.041887169s ago: executing program 0 (id=14):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a04447, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x8, 0x1e6, &(0x7f0000000400)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc090, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x22)

2m23.509240363s ago: executing program 0 (id=19):
ioperm(0x0, 0x2, 0x7e)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fadvise64(r0, 0x9, 0x8, 0x0)

2m17.80123507s ago: executing program 0 (id=56):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

2m17.35888792s ago: executing program 32 (id=56):
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
io_setup(0x8, &(0x7f0000004200)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

1m53.228319834s ago: executing program 1 (id=242):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x200008c4)

1m52.922719668s ago: executing program 1 (id=245):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x178, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x3}, @TCA_GRED_PARMS={0x32, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x178}}, 0x24040004)

1m52.695975509s ago: executing program 1 (id=250):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x18b341, 0x85)
write$P9_RSTATu(r0, &(0x7f0000000280)=ANY=[], 0x59)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x1, 0x400, 0x0, 0xd5e2})

1m52.214866591s ago: executing program 1 (id=254):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000009c0)='./bus\x00', 0x1081e, &(0x7f0000000140), 0xff, 0x44f, &(0x7f0000000540)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00')

1m51.650828008s ago: executing program 1 (id=259):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003b40)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x14c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x12, 0x1, {0xf, 0x7, 0x5, 0xe, 0x3, 0x18, 0x6}}]}}]}, 0x14c}}, 0xc014)

1m51.013159738s ago: executing program 1 (id=261):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100004800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x4)

1m50.432806194s ago: executing program 33 (id=261):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100004800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x4)

1m33.301109382s ago: executing program 2 (id=398):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0)

1m33.065248974s ago: executing program 2 (id=401):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x1f90, @loopback}, 0x10)

1m32.852344103s ago: executing program 2 (id=403):
r0 = semget(0x1, 0x4, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2)
semop(r0, &(0x7f00000000c0)=[{0x1, 0xff80, 0x1400}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff])

1m32.50124015s ago: executing program 2 (id=406):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a04447, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x8, 0x1e6, &(0x7f0000000400)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc090, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x22)

1m32.047108691s ago: executing program 2 (id=409):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x3, 0x1, '@'}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240), 0x8)

1m24.9792645s ago: executing program 2 (id=437):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0xb, 0x3})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

1m24.493500473s ago: executing program 34 (id=437):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0xb, 0x3})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

4.099248629s ago: executing program 6 (id=1052):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4467, &(0x7f0000004480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x42, 0x1b6)
unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x200)

3.297760776s ago: executing program 4 (id=1059):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000000040), 0x81, 0x50d4, &(0x7f00000051c0)="$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")
chdir(&(0x7f0000000300)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101201, 0x20)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)

2.5568569s ago: executing program 6 (id=1062):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
lseek(r0, 0x851, 0x0)

2.180040908s ago: executing program 5 (id=1065):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000001040)=@mmap={0x0, 0x2, 0x4, 0x4, 0xfffffffc, {0x0, 0x2710}, {0x5, 0x8, 0xf, 0x8, 0x1, 0x0, "b8d0361b"}, 0x200, 0x1, {}, 0xff})

1.863885763s ago: executing program 3 (id=1066):
set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

1.681215141s ago: executing program 6 (id=1067):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x2c, 0x0, 0x0)

1.669071762s ago: executing program 5 (id=1068):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0xfffffffc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

1.48118072s ago: executing program 3 (id=1069):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:01.0/class\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000100)=""/10, 0xa, 0x0)

1.436854522s ago: executing program 4 (id=1070):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

1.427236083s ago: executing program 5 (id=1071):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa280, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x1})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)

1.265093071s ago: executing program 3 (id=1072):
mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0)
pwrite64(r0, 0x0, 0x0, 0x8000000)

1.106590508s ago: executing program 3 (id=1073):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)

907.780907ms ago: executing program 3 (id=1074):
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)

872.911269ms ago: executing program 6 (id=1075):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0xa, 0x4000, 0x0, 0x1}, 'syz1\x00', 0x26})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e)
ioctl$UI_DEV_CREATE(r0, 0x5501)

871.882069ms ago: executing program 5 (id=1076):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

609.988941ms ago: executing program 3 (id=1077):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10040, &(0x7f00000000c0)=ANY=[@ANYBLOB='heartbeat=none,journal_async_commit,journal_async_commit,coherency=full,coherency=full\x00'], 0x1, 0x4445, &(0x7f00000044c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x222000, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000)

558.920173ms ago: executing program 4 (id=1078):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="02"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac01, 0xfac0a, 0xfac0a, 0xfac0d, 0xfac00]}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x0)

504.789326ms ago: executing program 6 (id=1079):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x80, 0x2, 0x5, 0x828e, 0x3})
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0)

437.253439ms ago: executing program 5 (id=1080):
r0 = io_uring_setup(0x79c4, &(0x7f00000001c0)={0x0, 0x701e, 0x400, 0x2, 0x64})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="137c0300231a05002c0012800e0001006970366772657461700000001800028014000700000000000000000000000000020000000d0001"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x20040840)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1)

394.579491ms ago: executing program 4 (id=1081):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setns(0xc9, 0x0)
r0 = socket(0x8, 0x2, 0x0)
setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54)

318.710114ms ago: executing program 5 (id=1082):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0xff, 0x560c, {0x7ffd, 0x595}, {0xfffa, 0x2}, @rumble={0x5, 0x9}})

229.297469ms ago: executing program 6 (id=1083):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x0, 0x7}})
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xef89, 0x7f9, 0xb2, "35969809006e24a7446d8073145e6c31c267a0", 0xfb, 0x200008})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))

166.125321ms ago: executing program 4 (id=1084):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x1007, 0x41, 0x0, 0x83, "00000000000000000000ffff00"})
r1 = syz_open_pts(r0, 0x40)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0xf9ae, 0x8, 0x9, 0x8, 0x15, "b533c16b127d1d2fa0027b55087c44b9ca74f9"})

0s ago: executing program 4 (id=1085):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0)

kernel console output (not intermixed with test programs):

 120.626782][ T6609] EXT4-fs (loop1): free_blocks=0
[  120.632307][ T6609] EXT4-fs (loop1): dirty_blocks=1
[  120.637552][ T6609] EXT4-fs (loop1): Block reservation details
[  120.644783][ T6609] EXT4-fs (loop1): i_reserved_data_blocks=1
[  120.756276][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.847951][ T6621] netlink: 'syz.4.253': attribute type 6 has an invalid length.
[  120.930910][ T6626] loop1: detected capacity change from 0 to 512
[  120.950150][ T6626] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  120.985935][ T6626] EXT4-fs (loop1): 1 truncate cleaned up
[  121.028092][ T6626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.032581][ T6630] loop4: detected capacity change from 0 to 512
[  121.119649][ T5814] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  121.320138][ T5775] EXT4-fs error (device loop1): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 2048
[  121.339080][ T5814] usb 4-1: too many configurations: 102, using maximum allowed: 8
[  121.355097][ T5814] usb 4-1: config index 0 descriptor too short (expected 76, got 45)
[  121.367389][ T5775] EXT4-fs error (device loop1): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 2048
[  121.380731][ T5814] usb 4-1: config index 1 descriptor too short (expected 76, got 45)
[  121.396381][ T5814] usb 4-1: config index 2 descriptor too short (expected 76, got 45)
[  121.408445][ T5814] usb 4-1: config index 3 descriptor too short (expected 76, got 45)
[  121.431970][ T5814] usb 4-1: config index 4 descriptor too short (expected 76, got 45)
[  121.453132][ T5814] usb 4-1: config index 5 descriptor too short (expected 76, got 45)
[  121.486258][ T5814] usb 4-1: config index 6 descriptor too short (expected 76, got 45)
[  121.509179][ T5814] usb 4-1: config index 7 descriptor too short (expected 76, got 45)
[  121.530939][ T5814] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  121.550564][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.564085][ T5814] usb 4-1: Product: syz
[  121.568371][ T5814] usb 4-1: Manufacturer: syz
[  121.607344][ T5814] usb 4-1: SerialNumber: syz
[  121.817491][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.861969][  T147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.030312][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  122.052291][  T147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.085535][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  122.111511][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  122.124465][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  122.138667][ T5814] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  122.143011][ T6639] loop2: detected capacity change from 0 to 4096
[  122.165398][ T5814] lan78xx: probe of 4-1:1.0 failed with error -71
[  122.209192][ T5814] usb 4-1: USB disconnect, device number 3
[  122.253456][  T147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.308239][ T6640] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.412717][  T147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.470008][ T6639] capability: warning: `syz.2.260' uses 32-bit capabilities (legacy support in use)
[  122.905724][ T6654] loop3: detected capacity change from 0 to 64
[  123.216174][ T6657] IPv6: NLM_F_CREATE should be specified when creating new route
[  123.524734][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  123.536042][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  123.559836][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  123.602562][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.630300][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  123.637647][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  123.793140][ T6677] loop2: detected capacity change from 0 to 512
[  123.825747][ T6677] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  123.900433][ T6677] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  123.961782][ T6677] EXT4-fs (loop2): 1 orphan inode deleted
[  123.979335][ T6677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.050969][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.164659][ T6690] loop3: detected capacity change from 0 to 64
[  124.272947][ T6690] hfs: request for non-existent node 131072 in B*Tree
[  124.283025][ T6690] hfs: request for non-existent node 131072 in B*Tree
[  124.484952][ T6697] loop3: detected capacity change from 0 to 128
[  124.525164][ T6697] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  124.537861][ T6697] hpfs: filesystem error: improperly stopped
[  124.545259][ T6697] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  124.559214][ T6697] hpfs: You really don't want any checks? You are crazy...
[  124.567643][ T6697] hpfs: hpfs_map_sector(): read error
[  124.573511][ T6697] hpfs: code page support is disabled
[  124.579771][ T6697] hpfs: hpfs_map_4sectors(): unaligned read
[  124.586843][ T6697] hpfs: hpfs_map_4sectors(): unaligned read
[  124.594508][ T6697] hpfs: filesystem error: unable to find root dir
[  124.616232][ T6697] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  124.875644][ T6670] chnl_net:caif_netlink_parms(): no params data found
[  124.894788][ T6708] i2c i2c-0: delete_device: Can't parse I2C address
[  124.969318][ T5882] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  125.209997][ T5882] usb 3-1: Using ep0 maxpacket: 8
[  125.274134][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  125.340328][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  125.374873][  T147] hsr_slave_0: left promiscuous mode
[  125.390428][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  125.403987][  T147] hsr_slave_1: left promiscuous mode
[  125.412435][ T6729] loop3: detected capacity change from 0 to 64
[  125.420656][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.434707][  T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.459393][  T147] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.467456][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  125.478858][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.510948][  T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.518555][  T147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.546912][ T6729] hfs: request for non-existent node 131072 in B*Tree
[  125.565286][  T147] bridge_slave_1: left allmulticast mode
[  125.571334][ T6729] hfs: request for non-existent node 131072 in B*Tree
[  125.597343][  T147] bridge_slave_1: left promiscuous mode
[  125.617130][  T147] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.646982][  T147] bridge_slave_0: left allmulticast mode
[  125.676120][  T147] bridge_slave_0: left promiscuous mode
[  125.690653][  T147] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.719553][ T5783] Bluetooth: hci2: command tx timeout
[  125.727831][ T5882] usb 3-1: GET_CAPABILITIES returned 0
[  125.734044][ T5882] usbtmc 3-1:16.0: can't read capabilities
[  125.828207][  T147] veth1_macvtap: left promiscuous mode
[  125.845912][  T147] veth0_macvtap: left promiscuous mode
[  125.868455][  T147] veth1_vlan: left promiscuous mode
[  125.876446][  T147] veth0_vlan: left promiscuous mode
[  125.999012][ T5814] usb 3-1: USB disconnect, device number 5
[  126.647939][ T6744] loop2: detected capacity change from 0 to 256
[  126.733519][  T147] team0 (unregistering): Port device team_slave_1 removed
[  126.794273][  T147] team0 (unregistering): Port device team_slave_0 removed
[  126.863484][  T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.973011][  T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.556546][  T147] bond0 (unregistering): Released all slaves
[  127.724739][ T6670] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.734859][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.749739][ T6670] bridge_slave_0: entered allmulticast mode
[  127.767841][ T6670] bridge_slave_0: entered promiscuous mode
[  127.790990][ T6670] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.803901][ T5783] Bluetooth: hci2: command tx timeout
[  127.848420][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.897862][ T6670] bridge_slave_1: entered allmulticast mode
[  127.905969][ T6670] bridge_slave_1: entered promiscuous mode
[  128.002394][ T6765] loop4: detected capacity change from 0 to 1024
[  128.010174][ T6670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.033372][ T6670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.184300][ T6670] team0: Port device team_slave_0 added
[  128.213082][ T6670] team0: Port device team_slave_1 added
[  128.321953][ T6670] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.339987][ T6670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.414719][ T6670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.452584][ T6670] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.468756][ T6670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.614498][ T6670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.842215][ T6670] hsr_slave_0: entered promiscuous mode
[  128.858071][ T6670] hsr_slave_1: entered promiscuous mode
[  128.874359][ T6670] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.886226][ T6788] loop4: detected capacity change from 0 to 512
[  128.894826][ T6670] Cannot create hsr debugfs directory
[  128.908274][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'.
[  128.986771][ T6788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.039640][ T6788] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.292503][ T5998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.576908][ T6806] loop3: detected capacity change from 0 to 8192
[  129.612884][ T6806] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  129.841667][ T6670] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  129.869551][ T5783] Bluetooth: hci2: command tx timeout
[  129.921784][ T6670] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  129.953277][ T6670] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  130.088002][ T6670] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  130.307078][ T6831] netlink: 'syz.2.321': attribute type 10 has an invalid length.
[  130.354940][ T6831] team0: Port device netdevsim0 added
[  130.424858][ T6670] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.506731][ T6670] 8021q: adding VLAN 0 to HW filter on device team0
[  130.559568][ T6838] netlink: 'syz.4.322': attribute type 3 has an invalid length.
[  130.574939][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'.
[  130.599391][ T5816] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  130.601067][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.614188][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.633549][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.640889][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.791652][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.815727][ T5816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.849388][ T5816] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  130.869012][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.896650][ T5816] usb 4-1: config 0 descriptor??
[  131.238233][ T6670] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.357189][ T5816] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[  131.376407][ T5816] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[  131.384933][ T5816] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[  131.407082][ T5816] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[  131.420094][ T5816] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[  131.439372][ T2137] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  131.455253][ T5816] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  131.669874][ T2137] usb 5-1: Using ep0 maxpacket: 8
[  131.696666][ T2137] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  131.717128][ T2137] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  131.738303][ T2137] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  131.760338][ T2137] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  131.771812][ T5816] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 32: -71
[  131.791071][ T2137] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  131.804174][ T5816] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense firmware info: -71
[  131.813866][ T5816] playstation 0003:054C:0DF2.0003: Failed to get firmware info from DualSense
[  131.830002][ T2137] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  131.848618][ T2137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.857267][ T5816] playstation 0003:054C:0DF2.0003: Failed to create dualsense.
[  131.900962][ T5816] playstation: probe of 0003:054C:0DF2.0003 failed with error -71
[  131.949622][ T5816] usb 4-1: USB disconnect, device number 4
[  131.963572][ T5783] Bluetooth: hci2: command tx timeout
[  132.121204][ T2137] usb 5-1: GET_CAPABILITIES returned 0
[  132.148525][ T2137] usbtmc 5-1:16.0: can't read capabilities
[  132.173288][ T6670] veth0_vlan: entered promiscuous mode
[  132.191943][ T6670] veth1_vlan: entered promiscuous mode
[  132.266072][ T6670] veth0_macvtap: entered promiscuous mode
[  132.302581][ T6670] veth1_macvtap: entered promiscuous mode
[  132.365647][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.375031][    C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  132.386334][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.401144][ T5815] usb 5-1: USB disconnect, device number 2
[  132.426861][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.456005][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.486831][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  132.519745][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.553777][ T6670] batman_adv: batadv0: Interface activated: batadv_slave_0
[  132.635548][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.646729][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.668749][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.692075][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.703371][ T6670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  132.717518][ T6670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  132.749886][ T6670] batman_adv: batadv0: Interface activated: batadv_slave_1
[  132.788846][ T6670] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  132.805481][ T6893] loop2: detected capacity change from 0 to 2048
[  132.818387][ T6670] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  132.827749][ T6670] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.842925][ T6670] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.898574][ T6893]  loop2: p1 p2 p3 < > p4 < p5 p6 >
[  132.920417][ T6893] loop2: partition table partially beyond EOD, truncated
[  133.000199][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  133.008423][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  133.016951][ T6893] loop2: p1 start 3405774849 is beyond EOD, truncated
[  133.085585][  T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.098167][ T6893] loop2: p2 start 53543428 is beyond EOD, truncated
[  133.119367][ T6893] loop2: p3 start 4284289 is beyond EOD, truncated
[  133.119417][  T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.147961][ T6893] loop2: p5 start 3405774849 is beyond EOD, truncated
[  133.174220][ T6893] loop2: p6 start 53543428 is beyond EOD, truncated
[  133.246740][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.253139][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  133.275995][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.437361][ T6912] loop4: detected capacity change from 0 to 256
[  133.479433][    T9] usb 3-1: Using ep0 maxpacket: 32
[  133.489019][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10
[  133.512606][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9056, setting to 1024
[  133.562517][ T6912] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  133.580096][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  133.589198][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.640676][    T9] usb 3-1: config 0 descriptor??
[  133.674916][    T9] hub 3-1:0.0: USB hub found
[  133.917846][    T9] hub 3-1:0.0: 26 ports detected
[  133.939650][    T9] hub 3-1:0.0: insufficient power available to use all downstream ports
[  134.137040][    T9] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  134.157232][    T9] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  134.188619][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  134.204397][    T9] usbhid: probe of 3-1:0.0 failed with error -71
[  134.239506][ T1193] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  134.253441][    T9] usb 3-1: USB disconnect, device number 6
[  134.395376][ T6935] syz.4.343 (6935) used greatest stack depth: 19728 bytes left
[  134.440021][ T1193] usb 4-1: Using ep0 maxpacket: 8
[  134.449644][ T1193] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  134.469560][ T1193] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  134.503402][ T1193] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  134.534330][ T1193] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  134.568324][ T1193] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  134.586025][ T1193] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  134.601664][ T1193] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  134.611379][ T1193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.869494][ T1193] usb 4-1: GET_CAPABILITIES returned 0
[  134.875067][ T1193] usbtmc 4-1:16.0: can't read capabilities
[  135.151565][ T6925] usb 4-1: usbtmc_ioctl_clear_in_halt returned -32
[  135.188406][ T1193] usb 4-1: USB disconnect, device number 5
[  135.219090][ T6961] loop4: detected capacity change from 0 to 136
[  135.257398][ T6961] Attempt to read inode for relocated directory
[  136.511759][ T1193] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  136.545981][ T7009] loop5: detected capacity change from 0 to 512
[  136.605596][ T7009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.712727][   T27] kauditd_printk_skb: 27 callbacks suppressed
[  136.712742][   T27] audit: type=1800 audit(1789486752.189:39): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.366" name="file1" dev="loop5" ino=15 res=0 errno=0
[  136.768164][ T1193] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.809568][ T1193] usb 3-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[  136.839770][ T1193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  136.875624][ T1193] usb 3-1: Product: syz
[  136.894368][ T1193] usb 3-1: Manufacturer: syz
[  136.949517][ T1193] navman 3-1:1.0: navman converter detected
[  136.970594][ T1193] usb 3-1: navman converter now attached to ttyUSB0
[  137.033047][ T6670] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.232943][   T28] usb 3-1: USB disconnect, device number 7
[  137.267172][   T28] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[  137.308691][   T28] navman 3-1:1.0: device disconnected
[  137.996021][ T7045] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  138.119343][ T5788] Bluetooth: hci1: command 0x0406 tx timeout
[  138.690757][ T7072] loop4: detected capacity change from 0 to 1024
[  138.761383][ T7072] gfs2: path_lookup on c::: returned error -2
[  139.586486][ T7102] loop3: detected capacity change from 0 to 256
[  139.983717][ T7112] ip_tables: iptables: counters copy to user failed while replacing table
[  140.132268][ T7109] loop4: detected capacity change from 0 to 8192
[  140.173883][ T7109] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  140.226794][ T7109] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  140.240341][ T7109] REISERFS (device loop4): using ordered data mode
[  140.246955][ T7109] reiserfs: using flush barriers
[  140.262091][ T7120] netlink: 7 bytes leftover after parsing attributes in process `syz.3.402'.
[  140.316744][ T7109] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  140.335107][ T7109] REISERFS (device loop4): checking transaction log (loop4)
[  140.548205][ T7131] loop2: detected capacity change from 0 to 16
[  140.633694][ T7131] erofs: (device loop2): mounted with root inode @ nid 36.
[  140.680863][ T7109] REISERFS (device loop4): Using tea hash to sort names
[  140.722704][ T7109] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  140.747226][ T7131] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 46
[  140.799577][ T7109] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  140.843902][ T7135] loop3: detected capacity change from 0 to 1024
[  140.884806][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  140.910650][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  140.945570][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  140.994537][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.016972][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.055164][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.073851][ T7109] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2)
[  141.105991][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.128678][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.171570][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.210064][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.254360][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.303479][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.349717][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.358624][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.391020][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.438291][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.474417][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.520190][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.580404][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.625665][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.651688][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.691514][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.715357][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.740161][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.770367][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.793667][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.811031][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.830753][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.850245][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.860873][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.880233][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.889036][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.930320][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.939185][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.960171][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.979603][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  141.988503][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.012150][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.025507][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.046806][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.070229][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.099314][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.113857][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.140238][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.149082][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.184524][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.206218][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.234500][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.254531][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.280251][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.289146][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.313515][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.327139][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.336310][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.360262][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.369212][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.379047][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.391137][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.400429][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.410097][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.418945][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.434880][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.457200][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.480205][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.489071][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.530279][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.539058][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.578635][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.615901][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.657371][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.670638][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.689833][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.698797][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.725809][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.748152][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.772781][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.800534][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.830951][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.869959][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.894523][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.912445][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.938200][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.952621][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.964147][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.979087][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  142.994495][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.012817][ T7171] netlink: 7 bytes leftover after parsing attributes in process `syz.5.416'.
[  143.033305][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.070573][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.099624][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.134046][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.160536][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.201527][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.245776][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.290466][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.308823][ T7177] loop5: detected capacity change from 0 to 4096
[  143.319799][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.341095][ T7177] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  143.360399][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.373166][ T7177] ntfs3: loop5: Failed to load $Bitmap (-2).
[  143.399729][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.409104][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.428133][ T7160] loop4: detected capacity change from 0 to 32768
[  143.480806][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.490497][ T7160] XFS: noikeep mount option is deprecated.
[  143.509965][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.518714][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.588474][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.597419][ T7160] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.650498][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.733049][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.775056][ T7160] XFS (loop4): Ending clean mount
[  143.788864][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.812539][ T7160] XFS (loop4): Quotacheck needed: Please wait.
[  143.822094][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.873323][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.920615][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.955591][ T7160] XFS (loop4): Quotacheck: Done.
[  143.958078][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  143.990974][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.031647][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.071196][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.106261][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.160443][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.170536][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.201446][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.223582][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.251985][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.288924][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.309098][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.330311][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.357663][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.367391][ T5998] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.393965][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.427951][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.470160][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.480285][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.489780][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.512592][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.536644][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.555881][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.592574][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.630085][ T7179] loop3: detected capacity change from 0 to 32768
[  144.630753][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.690284][ T7179] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.419 (7179)
[  144.710158][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.718996][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.773871][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.790274][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.822078][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.839830][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.871577][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.872862][ T7179] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  144.890950][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.908974][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.930804][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.939400][ T7179] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  144.956497][ T7179] BTRFS info (device loop3): using free space tree
[  144.968487][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  144.996227][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.005554][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.017736][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.028459][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.038369][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.047767][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.057690][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.067394][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.077596][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.087051][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.097188][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.107414][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.117021][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.126790][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.136504][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.146044][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.157621][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.167531][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.177459][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.190712][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.200237][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.210458][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.220031][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.228941][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.261881][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.289463][ T7179] BTRFS info (device loop3): enabling ssd optimizations
[  145.339508][ T7179] BTRFS info (device loop3): auto enabling async discard
[  145.347903][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.382035][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.406144][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.425335][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.447260][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.470738][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.498039][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.552720][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.590653][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.611251][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.637574][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.671060][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.697465][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.708141][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.721227][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.742975][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.754590][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.766415][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.798762][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.847503][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.907567][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.924544][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.947417][ T5777] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  145.960068][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  145.969004][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.005345][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.051038][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.087903][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.116688][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.137887][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.166760][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.185014][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.198228][ T5814] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  146.210860][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.241441][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.272570][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.298692][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.327244][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.356892][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.386343][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.389800][ T5814] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.423394][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.460355][ T5814] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  146.477596][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.485330][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.504638][ T5814] usb 6-1: config 0 descriptor??
[  146.557374][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.600421][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.651184][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.711824][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.781615][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.793339][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.814500][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.847110][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.876457][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.905933][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  146.964304][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.010463][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.038312][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.060115][ T7256] loop4: detected capacity change from 0 to 64
[  147.081363][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.130741][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.160080][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.189549][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.198713][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.214675][ T5814] ath6kl: Failed to read usb control message: -71
[  147.238813][ T5814] ath6kl: Unable to read the bmi data from the device: -71
[  147.250544][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.267811][ T5814] ath6kl: unable to read target info byte count: -71
[  147.278046][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.288551][ T5814] ath6kl: Failed to init ath6kl core: -71
[  147.308223][ T5814] ath6kl_usb: probe of 6-1:0.0 failed with error -71
[  147.316243][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.346520][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.366781][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.370628][ T5814] usb 6-1: USB disconnect, device number 2
[  147.408750][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.458080][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.480541][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.495857][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.505169][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.519643][ T5778] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  147.704223][ T7269] loop4: detected capacity change from 0 to 128
[  147.737727][ T7269] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  147.845440][ T7269] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  147.865256][ T7269] FAT-fs (loop4): Filesystem has been set read-only
[  148.022940][   T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.060596][ T5998] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  148.223281][   T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.311772][   T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.621493][   T49] team0: Port device netdevsim0 removed
[  148.650023][   T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.467742][ T7304] loop4: detected capacity change from 0 to 736
[  149.554285][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  149.564355][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  149.579401][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  149.596047][ T7309] loop3: detected capacity change from 0 to 128
[  149.607582][ T7309] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  149.616823][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  149.639426][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  149.647168][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  149.788592][ T7309] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1)
[  149.816218][ T7309] FAT-fs (loop3): Filesystem has been set read-only
[  150.060711][ T5777] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  150.268931][ T7317] loop3: detected capacity change from 0 to 2048
[  150.334689][ T7317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.349616][ T7317] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.473297][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.725056][ T7333] loop3: detected capacity change from 0 to 1024
[  151.195344][ T7306] chnl_net:caif_netlink_parms(): no params data found
[  151.709539][ T5783] Bluetooth: hci0: command tx timeout
[  151.997662][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.014326][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.029636][ T7306] bridge_slave_0: entered allmulticast mode
[  152.037345][ T7306] bridge_slave_0: entered promiscuous mode
[  152.140563][ T7385] loop4: detected capacity change from 0 to 128
[  152.143806][   T49] hsr_slave_0: left promiscuous mode
[  152.173070][   T49] hsr_slave_1: left promiscuous mode
[  152.181167][ T7385] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  152.195705][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.215231][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.249197][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.258216][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.299265][ T7385] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.314753][   T49] bridge_slave_1: left allmulticast mode
[  152.320781][   T49] bridge_slave_1: left promiscuous mode
[  152.326585][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.408133][   T49] bridge_slave_0: left allmulticast mode
[  152.418925][   T49] bridge_slave_0: left promiscuous mode
[  152.445641][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.599856][   T49] veth1_macvtap: left promiscuous mode
[  152.605474][   T49] veth0_macvtap: left promiscuous mode
[  152.637253][   T49] veth1_vlan: left promiscuous mode
[  152.659745][   T49] veth0_vlan: left promiscuous mode
[  152.962747][ T7401] loop5: detected capacity change from 0 to 8192
[  153.017488][ T7401] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  153.789598][ T5783] Bluetooth: hci0: command tx timeout
[  153.905074][   T49] team0 (unregistering): Port device team_slave_1 removed
[  153.951737][   T49] team0 (unregistering): Port device team_slave_0 removed
[  154.000016][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  154.046809][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  154.363438][   T49] bond0 (unregistering): Released all slaves
[  154.477806][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.486463][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.495435][ T7306] bridge_slave_1: entered allmulticast mode
[  154.504063][ T7306] bridge_slave_1: entered promiscuous mode
[  154.523933][ T7409] IPv6: Can't replace route, no match found
[  154.588834][ T7306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  154.633937][ T7306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.773522][ T7306] team0: Port device team_slave_0 added
[  154.794904][ T7306] team0: Port device team_slave_1 added
[  154.873107][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.884042][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.945345][ T7306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.981542][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.988536][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.050004][ T7306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.078009][ T7426] IPVS: stopping master sync thread 7427 ...
[  155.206493][ T7306] hsr_slave_0: entered promiscuous mode
[  155.213819][ T7306] hsr_slave_1: entered promiscuous mode
[  155.227490][ T7306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.249314][ T7306] Cannot create hsr debugfs directory
[  155.474929][ T7440] bonding: no command found in bonding_masters - use +ifname or -ifname
[  155.842592][ T7306] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  155.871101][ T5783] Bluetooth: hci0: command tx timeout
[  155.907445][ T7306] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  155.970538][ T7306] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  156.011657][ T7306] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  156.326231][ T7306] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.370489][ T7306] 8021q: adding VLAN 0 to HW filter on device team0
[  156.412967][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.420205][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.458176][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.465409][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.522300][ T7468] syz.5.500: attempt to access beyond end of device
[  156.522300][ T7468] loop10: rw=2048, sector=0, nr_sectors = 8 limit=0
[  156.570152][ T7468] SQUASHFS error: Failed to read block 0x0: -5
[  156.974153][ T7306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.049582][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  157.270743][    T8] usb 5-1: Using ep0 maxpacket: 32
[  157.305967][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.338503][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.368950][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  157.404016][    T8] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  157.418030][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.443475][    T8] usb 5-1: config 0 descriptor??
[  157.819515][ T7306] veth0_vlan: entered promiscuous mode
[  157.853653][ T7306] veth1_vlan: entered promiscuous mode
[  157.935764][ T7306] veth0_macvtap: entered promiscuous mode
[  157.958109][    T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0004/input/input8
[  157.969908][ T5783] Bluetooth: hci0: command tx timeout
[  157.991057][ T7306] veth1_macvtap: entered promiscuous mode
[  158.076530][    T8] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0004/input/input9
[  158.208845][ T7306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.263106][    T8] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[  158.269675][ T7306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.319530][    T8] usb 5-1: USB disconnect, device number 3
[  158.334146][ T7306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.375866][ T7306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.399274][ T7306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.429419][ T7306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.445892][ T7511] fido_id[7511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  158.474401][ T7306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.546508][ T7306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.566524][ T7306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.578894][ T7306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.602295][ T7306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.613699][ T7306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.625498][ T7306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.641929][ T7306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.666854][ T7306] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.676271][ T7306] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.685853][ T7306] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.695961][ T7306] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.910109][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.941005][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.074572][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.108510][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.620259][ T5882] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  159.689980][ T7545] netlink: 'syz.5.517': attribute type 11 has an invalid length.
[  159.870050][ T5882] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[  159.907224][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0
[  159.920661][ T5882] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  159.935581][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  159.965352][ T5882] usb 4-1: Product: syz
[  159.978813][ T5882] usb 4-1: Manufacturer: syz
[  159.994971][ T5882] usb 4-1: SerialNumber: syz
[  160.018492][ T5882] usb 4-1: config 0 descriptor??
[  160.046781][ T5882] usb 4-1: selecting invalid altsetting 0
[  160.251791][ T5882] usb 4-1: USB disconnect, device number 6
[  160.413495][ T6304] udevd[6304]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.847854][ T7569] i2c i2c-0: delete_device: Can't find device in list
[  160.971631][ T7572] loop6: detected capacity change from 0 to 2048
[  161.035476][ T7572] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.066774][ T7572] EXT4-fs error (device loop6): ext4_find_extent:947: inode #2: comm syz.6.527: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  161.101866][ T7572] EXT4-fs (loop6): Remounting filesystem read-only
[  161.146758][ T7306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.383727][ T7606] loop5: detected capacity change from 0 to 512
[  162.425522][ T7606] EXT4-fs (loop5): 1 truncate cleaned up
[  162.480947][ T7606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.506052][ T7606] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.538: bg 0: block 465: padding at end of block bitmap is not set
[  162.540469][ T7606] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  162.552970][ T7606] EXT4-fs (loop5): This should not happen!! Data will be lost
[  162.552970][ T7606] 
[  162.563869][ T7606] EXT4-fs (loop5): Total free blocks count 0
[  162.583004][ T7606] EXT4-fs (loop5): Free/Dirty block details
[  162.599646][ T7606] EXT4-fs (loop5): free_blocks=0
[  162.604743][ T7606] EXT4-fs (loop5): dirty_blocks=1
[  162.612539][ T7606] EXT4-fs (loop5): Block reservation details
[  162.618675][ T7606] EXT4-fs (loop5): i_reserved_data_blocks=1
[  162.690953][ T6670] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.086119][ T7626] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  163.159051][ T7624] IPVS: stopping master sync thread 7626 ...
[  163.346772][ T7629] loop5: detected capacity change from 0 to 4096
[  163.381064][ T7629] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512).
[  163.562831][ T7634] loop3: detected capacity change from 0 to 4096
[  163.619332][ T7636] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.619493][ T7629] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  163.648014][ T7632] loop6: detected capacity change from 0 to 4096
[  163.690572][ T7632] EXT4-fs: inline encryption not supported
[  163.744554][ T7632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  163.775410][ T7632] EXT4-fs (loop6): Test dummy encryption mode enabled
[  163.850977][ T7632] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  163.920232][ T7632] System zones: 0-5
[  163.941099][ T7632] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.276681][ T7641] loop3: detected capacity change from 0 to 4096
[  164.309315][ T7641] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  164.347876][ T7306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.494335][ T7641] ntfs3: loop3: ino=1a, mi_enum_attr
[  164.511883][ T7641] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  164.557827][ T7641] ntfs3: loop3: ino=1a, mi_enum_attr
[  164.567829][ T7641] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  164.683262][ T7653] loop6: detected capacity change from 0 to 512
[  164.781442][ T7653] EXT4-fs (loop6): 1 truncate cleaned up
[  164.788525][ T7653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.986401][ T7653] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.542: bg 0: block 465: padding at end of block bitmap is not set
[  165.013986][ T7653] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  165.033184][ T7653] EXT4-fs (loop6): This should not happen!! Data will be lost
[  165.033184][ T7653] 
[  165.044088][ T7653] EXT4-fs (loop6): Total free blocks count 0
[  165.050604][ T7653] EXT4-fs (loop6): Free/Dirty block details
[  165.056640][ T7653] EXT4-fs (loop6): free_blocks=0
[  165.062036][ T7653] EXT4-fs (loop6): dirty_blocks=1
[  165.068727][ T7653] EXT4-fs (loop6): Block reservation details
[  165.077220][ T7653] EXT4-fs (loop6): i_reserved_data_blocks=1
[  165.204629][ T7306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.513743][ T7668] loop3: detected capacity change from 0 to 512
[  165.576359][ T7668] EXT4-fs (loop3): 1 truncate cleaned up
[  165.594713][ T7668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.679388][ T5834] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  165.760023][ T7668] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.555: bg 0: block 465: padding at end of block bitmap is not set
[  165.797758][ T7668] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  165.850555][ T7668] EXT4-fs (loop3): This should not happen!! Data will be lost
[  165.850555][ T7668] 
[  165.882405][ T7668] EXT4-fs (loop3): Total free blocks count 0
[  165.909960][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.929303][ T7668] EXT4-fs (loop3): Free/Dirty block details
[  165.935452][ T5834] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  165.969600][ T7668] EXT4-fs (loop3): free_blocks=0
[  165.974616][ T7668] EXT4-fs (loop3): dirty_blocks=1
[  165.979983][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.003228][ T5834] usb 7-1: config 0 descriptor??
[  166.022445][ T7668] EXT4-fs (loop3): Block reservation details
[  166.028568][ T7668] EXT4-fs (loop3): i_reserved_data_blocks=1
[  166.159387][ T7678] sd 0:0:1:0: PR command failed: 1026
[  166.178770][ T7678] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  166.211814][ T7678] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  166.222139][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.464626][ T5834] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0
[  166.493008][ T5834] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0
[  166.508669][ T5834] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0
[  166.535992][ T5834] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0
[  166.544079][ T5834] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0
[  166.558670][ T7687] netlink: 'syz.3.549': attribute type 11 has an invalid length.
[  166.579307][ T5834] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0
[  166.624439][ T5834] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID vef.fd Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0
[  166.728348][ T5834] usb 7-1: USB disconnect, device number 2
[  166.893671][ T7688] fido_id[7688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  166.912893][ T7692] IPVS: stopping master sync thread 7693 ...
[  166.919045][ T7693] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  167.158167][ T7698] loop5: detected capacity change from 0 to 1024
[  167.170518][ T7698] EXT4-fs: Ignoring removed orlov option
[  167.297416][ T7698] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.510159][ T7703] loop3: detected capacity change from 0 to 4096
[  167.526987][ T7703] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  167.588470][ T6670] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.733099][ T7703] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  168.401155][ T7547] Set syz1 is full, maxelem 65536 reached
[  168.796725][ T7732] loop6: detected capacity change from 0 to 4096
[  168.819140][ T7732] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  168.922693][ T7732] ntfs3: loop6: ino=1a, mi_enum_attr
[  168.936337][ T7735] loop5: detected capacity change from 0 to 512
[  168.942002][ T7732] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  168.960247][ T7732] ntfs3: loop6: ino=1a, mi_enum_attr
[  168.968371][ T7735] EXT4-fs: Ignoring removed nomblk_io_submit option
[  168.975100][ T7732] ntfs3: loop6: Failed to initialize $Extend/$Reparse.
[  169.026774][ T7735] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  169.088013][ T7735] EXT4-fs (loop5): orphan cleanup on readonly fs
[  169.114217][ T7735] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  169.138464][ T7735] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  169.178246][ T7735] EXT4-fs (loop5): 1 truncate cleaned up
[  169.198344][ T7735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  169.244411][ T7735] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  169.344547][ T6670] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.682789][ T7750] loop5: detected capacity change from 0 to 4096
[  169.748016][ T7758] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.839287][   T27] audit: type=1800 audit(1789486785.299:40): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.565" name="file1" dev="loop5" ino=15 res=0 errno=0
[  170.431779][ T7755] loop4: detected capacity change from 0 to 32768
[  170.611436][ T7755] JBD2: Ignoring recovery information on journal
[  170.681844][ T7755] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  171.213247][ T5998] ocfs2: Unmounting device (7,4) on (node local)
[  171.665236][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.677064][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.684421][ T7786] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.698580][ T7786] bridge_slave_0: left allmulticast mode
[  171.705997][ T7786] bridge_slave_0: left promiscuous mode
[  171.717666][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.743046][ T7786] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  171.978034][ T7789] loop4: detected capacity change from 0 to 1024
[  172.063891][ T7789] hfsplus: walked past end of dir
[  172.073077][ T7779] loop5: detected capacity change from 0 to 32768
[  172.156349][ T7779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.578 (7779)
[  172.220830][  T147] hfsplus: bad catalog file entry
[  172.262840][ T7779] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  172.299323][ T7779] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  172.349715][ T7779] BTRFS info (device loop5): using free space tree
[  172.424355][ T7798] base or size exceeds the MTRR width
[  172.528095][ T7813] loop6: detected capacity change from 0 to 256
[  172.600842][ T7779] BTRFS info (device loop5): enabling ssd optimizations
[  172.607961][ T7779] BTRFS info (device loop5): auto enabling async discard
[  172.637557][ T7813] FAT-fs (loop6): Directory bread(block 64) failed
[  172.659318][ T7813] FAT-fs (loop6): Directory bread(block 65) failed
[  172.666001][ T7813] FAT-fs (loop6): Directory bread(block 66) failed
[  172.689360][ T7813] FAT-fs (loop6): Directory bread(block 67) failed
[  172.724843][ T7813] FAT-fs (loop6): Directory bread(block 68) failed
[  172.760765][ T7813] FAT-fs (loop6): Directory bread(block 69) failed
[  172.789925][ T7813] FAT-fs (loop6): Directory bread(block 70) failed
[  172.818146][ T7813] FAT-fs (loop6): Directory bread(block 71) failed
[  172.876489][ T7813] FAT-fs (loop6): Directory bread(block 72) failed
[  172.905691][ T7813] FAT-fs (loop6): Directory bread(block 73) failed
[  172.914397][ T6670] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  172.974554][ T7817] loop4: detected capacity change from 0 to 8192
[  173.103682][ T7817] Dev loop4: RDB in block 1 has bad checksum
[  173.763515][ T7835] tmpfs: Bad value for 'uid'
[  174.094718][ T7841] loop5: detected capacity change from 0 to 512
[  174.285771][ T7841] EXT4-fs error (device loop5): __ext4_iget:5091: inode #11: block 1: comm syz.5.583: invalid block
[  174.322897][ T7839] loop6: detected capacity change from 0 to 8192
[  174.365205][ T7841] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.583: couldn't read orphan inode 11 (err -117)
[  174.378821][ T7841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.408690][ T7839] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  174.449473][ T7839] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  174.459068][ T7839] REISERFS (device loop6): using ordered data mode
[  174.478447][ T7839] reiserfs: using flush barriers
[  174.549373][ T7839] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  174.637812][ T6670] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.649926][ T7839] REISERFS (device loop6): checking transaction log (loop6)
[  174.703135][ T7839] REISERFS (device loop6): Using r5 hash to sort names
[  174.737907][ T7839] REISERFS (device loop6): using 3.5.x disk format
[  174.769770][ T7839] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  175.137548][ T7853] program syz.5.585 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.293327][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.588'.
[  176.181997][ T7879] netlink: 100 bytes leftover after parsing attributes in process `syz.5.596'.
[  176.756997][ T7900] loop4: detected capacity change from 0 to 512
[  176.822272][ T7900] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.602: inode has both inline data and extents flags
[  176.911501][ T7900] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.602: couldn't read orphan inode 15 (err -117)
[  177.009779][ T7900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.055973][ T7907] batman_adv: batadv0: Adding interface: gretap1
[  177.104332][ T7907] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.122938][ T7905] loop6: detected capacity change from 0 to 2048
[  177.167415][ T7907] batman_adv: batadv0: Interface activated: gretap1
[  177.187136][ T5998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.225595][ T7905] NILFS (loop6): invalid segment: Magic number mismatch
[  177.239652][ T7905] NILFS (loop6): trying rollback from an earlier position
[  177.286231][ T7905] NILFS (loop6): recovery complete
[  177.328284][ T7911] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.418075][ T7916] loop5: detected capacity change from 0 to 128
[  177.484880][ T7916] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  177.518236][ T7916] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.690248][ T6670] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  177.888586][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.611'.
[  177.975029][ T7928] loop4: detected capacity change from 0 to 512
[  178.031829][ T7928] EXT4-fs: Invalid want_extra_isize 206
[  178.139602][ T7935] loop5: detected capacity change from 0 to 256
[  178.238602][ T7935] netlink: 24 bytes leftover after parsing attributes in process `syz.5.614'.
[  178.967643][ T7951] loop4: detected capacity change from 0 to 128
[  179.031762][ T7951] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  179.065899][ T7951] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  179.184036][ T5998] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  179.298005][ T7752] Set syz1 is full, maxelem 65536 reached
[  179.558892][ T7968] loop4: detected capacity change from 0 to 512
[  179.633413][ T7968] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.656401][ T7968] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.785470][ T7968] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #12: comm syz.4.626: Directory hole found for htree leaf block 0
[  179.883464][ T5998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.343477][   T27] audit: type=1400 audit(1789486795.809:41): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7990 comm="syz.3.635" name="p" offset=48
[  181.134063][ T8028] loop3: detected capacity change from 0 to 256
[  181.159126][ T8028] exfat: Deprecated parameter 'utf8'
[  181.200096][ T8028] exfat: Deprecated parameter 'utf8'
[  181.224118][ T8030] netlink: 'syz.5.651': attribute type 1 has an invalid length.
[  181.350393][ T8028] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  181.777992][ T8048] loop6: detected capacity change from 0 to 512
[  181.788874][ T8045] loop3: detected capacity change from 0 to 2048
[  181.844540][ T8045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.858196][ T8048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.927638][ T7306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.205129][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.653838][ T8080] loop4: detected capacity change from 0 to 256
[  182.711563][ T8083] loop3: detected capacity change from 0 to 256
[  182.745467][ T8080] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  183.711174][ T8086] loop6: detected capacity change from 0 to 32768
[  183.829605][ T8086] JBD2: Ignoring recovery information on journal
[  183.923966][ T8114] capability: warning: `syz.3.676' uses deprecated v2 capabilities in a way that may be insecure
[  183.944055][ T8086] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  184.209340][   T27] audit: type=1800 audit(1789486799.679:42): pid=8086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.668" name="file1" dev="loop6" ino=17058 res=0 errno=0
[  184.319423][ T5834] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  184.451531][ T7306] ocfs2: Unmounting device (7,6) on (node local)
[  184.459813][ T8097] loop4: detected capacity change from 0 to 32768
[  184.514948][ T5834] usb 6-1: Using ep0 maxpacket: 32
[  184.550899][ T5834] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  184.585514][ T5834] usb 6-1: config 0 has no interface number 0
[  184.609480][ T8097] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  184.624550][ T5834] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  184.679763][ T5834] usb 6-1: config 0 interface 85 has no altsetting 0
[  184.700405][ T5834] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  184.719369][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.727601][ T5834] usb 6-1: Product: syz
[  184.737760][ T5834] usb 6-1: Manufacturer: syz
[  184.748452][ T5834] usb 6-1: SerialNumber: syz
[  184.768195][ T5834] usb 6-1: config 0 descriptor??
[  184.769716][ T8097] XFS (loop4): Ending clean mount
[  184.849874][ T8097] XFS (loop4): Quotacheck needed: Please wait.
[  184.936539][ T8097] XFS (loop4): Quotacheck: Done.
[  185.106190][ T8119] loop3: detected capacity change from 0 to 40427
[  185.126356][ T5998] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.158763][ T8119] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  185.183482][ T8119] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  185.206371][ T8119] F2FS-fs (loop3): Image doesn't support compression
[  185.226005][ T8119] F2FS-fs (loop3): Image doesn't support compression
[  185.309359][ T8119] F2FS-fs (loop3): invalid crc value
[  185.429387][ T5834] appletouch 6-1:0.85: Geyser mode initialized.
[  185.462995][ T5834] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input10
[  185.761220][ T5816] usb 6-1: USB disconnect, device number 3
[  185.829764][ T8119] F2FS-fs (loop3): Start checkpoint disabled!
[  185.879450][ T8119] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  185.905427][ T8119] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  185.946868][ T5816] appletouch 6-1:0.85: input: appletouch disconnected
[  186.153339][ T1104] kworker/u4:8: attempt to access beyond end of device
[  186.153339][ T1104] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  186.215101][ T1104] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  187.079365][   T28] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  187.103039][ T8183] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd
[  187.291953][   T28] usb 6-1: not running at top speed; connect to a high speed hub
[  187.321284][   T28] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  187.373872][   T28] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  187.411005][   T28] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.419085][   T28] usb 6-1: Product: syz
[  187.445924][   T28] usb 6-1: Manufacturer: syz
[  187.460426][   T28] usb 6-1: SerialNumber: syz
[  187.494609][   T28] oti6858 6-1:1.0: oti6858 converter detected
[  187.523961][   T28] usb 6-1: oti6858 converter now attached to ttyUSB0
[  187.892588][ T8205] i2c i2c-0: delete_device: Extra parameters
[  187.971955][   T28] usb 6-1: USB disconnect, device number 4
[  188.001025][   T28] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  188.040932][   T28] oti6858 6-1:1.0: device disconnected
[  188.416198][ T8216] mmap: syz.6.703 (8216) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  188.701622][ T5816] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  188.929826][ T5816] usb 5-1: config 0 interface 0 has no altsetting 0
[  188.949307][ T5816] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  188.975200][ T5816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.011797][ T5816] usb 5-1: config 0 descriptor??
[  189.448123][ T5816] kye 0003:0458:0138.0006: unknown main item tag 0x6
[  189.479943][ T5816] kye 0003:0458:0138.0006: unknown main item tag 0x0
[  189.510975][ T5816] kye 0003:0458:0138.0006: unknown main item tag 0x0
[  189.517767][ T5816] kye 0003:0458:0138.0006: unknown main item tag 0x0
[  189.564475][ T5816] kye 0003:0458:0138.0006: unknown main item tag 0x0
[  189.588159][ T5816] kye 0003:0458:0138.0006: item fetching failed at offset 12/38
[  189.620051][ T5816] kye 0003:0458:0138.0006: parse failed
[  189.651695][ T5816] kye: probe of 0003:0458:0138.0006 failed with error -22
[  189.666242][ T8231] loop5: detected capacity change from 0 to 32768
[  189.683279][ T5816] usb 5-1: USB disconnect, device number 4
[  189.709803][ T8231] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.707 (8231)
[  189.787847][ T8231] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  189.821377][ T8231] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  189.857767][ T8231] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  189.901770][ T8231] BTRFS info (device loop5): use zstd compression, level 3
[  189.909102][ T8231] BTRFS info (device loop5): using free space tree
[  190.094085][ T8231] BTRFS info (device loop5): enabling ssd optimizations
[  190.109309][ T8231] BTRFS info (device loop5): auto enabling async discard
[  190.370218][ T8291] netlink: 52 bytes leftover after parsing attributes in process `syz.4.719'.
[  190.449108][ T6670] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  190.866922][ T8305] raw_sendmsg: syz.6.725 forgot to set AF_INET. Fix it!
[  191.063643][ T8308] loop4: detected capacity change from 0 to 256
[  191.789637][ T5834] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  191.999304][ T5834] usb 7-1: Using ep0 maxpacket: 32
[  192.016300][ T5834] usb 7-1: config index 0 descriptor too short (expected 27632, got 27)
[  192.025619][ T8344] loop5: detected capacity change from 0 to 1024
[  192.036456][ T5834] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  192.075411][ T8344] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  192.086067][ T5834] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  192.130734][ T8344] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  192.133973][ T5834] usb 7-1: config 1 has no interface number 0
[  192.169429][ T8344] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal
[  192.190433][ T5834] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  192.226143][ T5834] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  192.266767][ T5834] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  192.307168][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.346492][ T5834] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  192.360896][ T8350] loop4: detected capacity change from 0 to 1024
[  192.413226][ T8350] hfsplus: invalid length 32517 has been corrected to 255
[  192.549353][   T27] audit: type=1800 audit(1789486808.019:43): pid=8350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.740" name="file1" dev="loop4" ino=20 res=0 errno=0
[  192.596132][ T5834] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached
[  192.673688][ T8350] hfsplus: b-tree write err: -5, ino 20
[  193.000319][   T42] hfsplus: b-tree write err: -5, ino 20
[  193.012113][ T5814] usb 7-1: USB disconnect, device number 3
[  193.026367][ T5814] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  193.208615][ T8370] loop4: detected capacity change from 0 to 128
[  193.844903][ T8391] netem: incorrect ge model size
[  193.868291][ T8391] netem: change failed
[  194.153838][ T8404] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd83
[  194.405301][ T8409] loop6: detected capacity change from 0 to 2048
[  194.435467][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  194.449459][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  194.499387][ T8409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.514219][ T5765] hid-generic 0005:0B57:05DF.0007: item fetching failed at offset 0/1
[  194.540100][ T5765] hid-generic: probe of 0005:0B57:05DF.0007 failed with error -22
[  194.691376][ T8410] loop3: detected capacity change from 0 to 8192
[  195.150802][ T8434] loop6: detected capacity change from 0 to 2048
[  195.197530][ T8439] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.489694][ T8449] kAFS: bad VL server IP address
[  195.702140][ T8453] loop3: detected capacity change from 0 to 2048
[  195.781399][ T8453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.964735][   T28] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  196.181131][   T28] usb 7-1: Using ep0 maxpacket: 32
[  196.232278][   T28] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.264237][   T28] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  196.303784][   T28] usb 7-1: config 0 interface 0 has no altsetting 0
[  196.323727][   T28] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  196.359903][   T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.389354][   T28] usb 7-1: config 0 descriptor??
[  196.834439][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  196.858252][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  196.890954][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  196.898201][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  196.929764][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  196.953037][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  196.975002][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.000219][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.021904][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.029120][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.069838][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.077350][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.091670][ T8500] loop3: detected capacity change from 0 to 2048
[  197.108309][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.121826][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.138106][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.162851][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.187697][ T8500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.219099][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.244445][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.269773][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.304800][ T8500] EXT4-fs (loop3): Online resizing not supported with bigalloc
[  197.319442][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.359795][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.394302][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.449069][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.478555][   T28] logitech 0003:046D:C29C.0008: unknown main item tag 0x0
[  197.491282][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.510819][   T28] logitech 0003:046D:C29C.0008: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0
[  197.696408][ T8521] rnbd_client L127: Can't parse path ip:127.0.: -22
[  197.731464][   T28] logitech 0003:046D:C29C.0008: no inputs found
[  197.801010][   T28] usb 7-1: USB disconnect, device number 4
[  197.817610][ T5783] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1
[  197.826298][ T5783] Bluetooth: hci1: unexpected event for opcode 0x203e
[  197.826338][ T8523] netlink: 'syz.3.791': attribute type 1 has an invalid length.
[  197.907708][ T8523] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.791'.
[  198.006511][ T8527] loop7: detected capacity change from 0 to 7
[  198.039829][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.049305][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  198.082542][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.091885][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  198.115027][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.124362][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  198.133870][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.143104][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  198.155013][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.164244][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  198.172898][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.182213][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  198.196567][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.205785][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  198.213781][ T8527] ldm_validate_partition_table(): Disk read failed.
[  198.229258][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.238449][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  198.252944][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.262177][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  198.271072][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  198.280449][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  198.292245][ T8527] Dev loop7: unable to read RDB block 0
[  198.301843][ T8527]  loop7: unable to read partition table
[  198.307793][ T8527] loop7: partition table beyond EOD, truncated
[  198.314212][ T8527] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  198.532145][ T8542] loop3: detected capacity change from 0 to 1024
[  198.551471][ T8542] hfsplus: invalid length 32517 has been corrected to 255
[  198.600055][   T27] audit: type=1800 audit(1789486814.069:44): pid=8542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.797" name="file1" dev="loop3" ino=20 res=0 errno=0
[  198.742846][ T8542] hfsplus: b-tree write err: -5, ino 20
[  198.826783][ T1082] hfsplus: b-tree write err: -5, ino 20
[  198.949676][ T1193] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  199.149630][ T1193] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  199.187175][ T8569] loop4: detected capacity change from 0 to 128
[  199.196984][ T1193] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  199.215291][ T8569] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  199.216620][ T1193] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  199.255358][ T1193] usb 7-1: SerialNumber: syz
[  199.273366][ T1193] hub 7-1:1.0: bad descriptor, ignoring hub
[  199.289360][ T1193] hub: probe of 7-1:1.0 failed with error -5
[  199.304536][ T8569] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  199.319843][ T5882] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  199.488961][ T1082] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  199.510529][ T8577] netlink: 40 bytes leftover after parsing attributes in process `syz.5.805'.
[  199.524295][ T5882] usb 4-1: not running at top speed; connect to a high speed hub
[  199.537254][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  199.560399][ T5882] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  199.572165][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.589362][ T5882] usb 4-1: Product: syz
[  199.599522][ T5882] usb 4-1: Manufacturer: syz
[  199.609644][ T5882] usb 4-1: SerialNumber: syz
[  199.652288][ T5882] oti6858 4-1:1.0: oti6858 converter detected
[  199.693315][ T5882] usb 4-1: oti6858 converter now attached to ttyUSB0
[  199.775628][ T8584] loop5: detected capacity change from 0 to 1024
[  199.810496][ T8584] EXT4-fs: Ignoring removed orlov option
[  199.836569][ T8584] EXT4-fs: Ignoring removed bh option
[  199.876179][ T8584] EXT4-fs: Ignoring removed bh option
[  199.893938][ T8584] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  199.942399][ T8584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.950079][ T1193] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42
[  200.094375][ T8584] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  200.164800][ T5816] usb 4-1: USB disconnect, device number 7
[  200.186699][ T5816] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  200.218019][ T5816] oti6858 4-1:1.0: device disconnected
[  200.268008][ T6670] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.282288][ T5882] usb 7-1: USB disconnect, device number 5
[  200.300974][ T5882] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device
[  200.535313][ T8582] loop4: detected capacity change from 0 to 32768
[  200.582985][ T8582] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.806 (8582)
[  200.647404][ T8582] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.689564][ T8582] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  200.699582][ T8582] BTRFS info (device loop4): using free space tree
[  200.887287][ T8582] BTRFS info (device loop4): enabling ssd optimizations
[  200.894478][ T8582] BTRFS info (device loop4): auto enabling async discard
[  201.006371][ T8628] loop3: detected capacity change from 0 to 256
[  201.019304][   T28] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  201.119525][ T8628] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  201.174292][ T5998] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.249374][   T28] usb 7-1: Using ep0 maxpacket: 32
[  201.281330][   T28] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  201.315917][   T28] usb 7-1: config 0 has no interface number 0
[  201.347557][   T28] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  201.404747][   T28] usb 7-1: config 0 interface 85 has no altsetting 0
[  201.443197][   T28] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  201.470415][   T28] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.527566][   T28] usb 7-1: Product: syz
[  201.569288][   T28] usb 7-1: Manufacturer: syz
[  201.596214][ T5766] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop4 scanned by udevd (5766)
[  201.608529][   T28] usb 7-1: SerialNumber: syz
[  201.638883][   T28] usb 7-1: config 0 descriptor??
[  201.879508][ T5783] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  201.888936][ T5783] Bluetooth: hci1: Injecting HCI hardware error event
[  201.897814][ T5783] Bluetooth: hci1: hardware error 0x00
[  202.288692][ T8656] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  202.357130][   T28] appletouch 7-1:0.85: Geyser mode initialized.
[  202.399046][   T28] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input11
[  202.624656][ T5814] usb 7-1: USB disconnect, device number 6
[  202.727161][ T5814] appletouch 7-1:0.85: input: appletouch disconnected
[  202.983897][ T8647] loop4: detected capacity change from 0 to 32768
[  203.028199][ T8668] loop3: detected capacity change from 0 to 4096
[  203.092472][ T8647] 
[  203.092472][ T8647]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.092472][ T8647] 
[  203.155412][ T8673] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.309601][   T27] audit: type=1800 audit(1789486818.779:45): pid=8668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.823" name="file1" dev="loop3" ino=15 res=0 errno=0
[  203.472257][   T42] ERROR: (device loop4): diWrite: ixpxd invalid
[  203.472257][   T42] 
[  203.519044][   T42] ERROR: (device loop4): txCommit: 
[  203.519044][   T42] 
[  203.558408][   T42] jfs_write_inode: jfs_commit_inode failed!
[  203.599762][ T5998] 
[  203.599762][ T5998]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.599762][ T5998] 
[  203.659378][ T5998] 
[  203.659378][ T5998]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.659378][ T5998] 
[  203.945026][ T8692] openvswitch: netlink: Message has 161 unknown bytes.
[  203.991420][ T8692] openvswitch: netlink: Actions may not be safe on all matching packets
[  204.109350][ T5783] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  204.341852][   T27] audit: type=1326 audit(1789486819.819:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.827" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8419e159 code=0x7ffc0000
[  204.462797][   T27] audit: type=1326 audit(1789486819.819:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.827" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8419e159 code=0x7ffc0000
[  204.579631][   T27] audit: type=1326 audit(1789486819.849:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.827" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f2e8419e159 code=0x7ffc0000
[  204.649345][   T27] audit: type=1326 audit(1789486819.849:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.827" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8419e159 code=0x7ffc0000
[  204.754262][ T8690] loop6: detected capacity change from 0 to 32768
[  204.771323][   T27] audit: type=1326 audit(1789486819.859:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.827" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f2e8419e159 code=0x7ffc0000
[  204.885873][   T27] audit: type=1326 audit(1789486819.859:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.827" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8419e159 code=0x7ffc0000
[  204.894048][ T8720] loop3: detected capacity change from 0 to 512
[  204.937253][ T8690] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  204.981759][   T27] audit: type=1326 audit(1789486819.859:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8699 comm="syz.4.827" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e8419e159 code=0x7ffc0000
[  205.094553][ T8720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.171777][ T8732] loop4: detected capacity change from 0 to 16
[  205.238870][ T8690] XFS (loop6): Ending clean mount
[  205.258958][ T8732] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  205.272888][ T8720] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  205.464129][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.607566][ T7306] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  205.691544][ T8740] loop3: detected capacity change from 0 to 512
[  205.748666][ T8704] loop5: detected capacity change from 0 to 32768
[  205.889597][ T8704] JBD2: Ignoring recovery information on journal
[  206.095464][ T8704] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  206.352316][   T27] audit: type=1800 audit(1789486821.829:53): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.834" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  206.568217][ T6670] ocfs2: Unmounting device (7,5) on (node local)
[  207.290197][ T8787] process 'syz.5.852' launched './file1' with NULL argv: empty string added
[  207.915592][ T8815] loop5: detected capacity change from 0 to 512
[  207.960215][ T8815] EXT4-fs: Ignoring removed nobh option
[  208.022699][ T8815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.070524][ T8815] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.123770][ T8815] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #2: comm syz.5.864: corrupted inode contents
[  208.163230][ T8815] EXT4-fs error (device loop5): ext4_dirty_inode:6166: inode #2: comm syz.5.864: mark_inode_dirty error
[  208.207332][ T8815] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #2: comm syz.5.864: corrupted inode contents
[  208.325004][ T6670] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.730643][ T8838] loop5: detected capacity change from 0 to 2048
[  208.792883][ T8842] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.816186][   T27] audit: type=1800 audit(1789486824.289:54): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.873" name="file1" dev="loop5" ino=15 res=0 errno=0
[  208.884524][   T27] audit: type=1800 audit(1789486824.319:55): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.873" name="file1" dev="loop5" ino=15 res=0 errno=0
[  209.027283][ T8842] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  209.057593][ T8842] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  209.112935][ T8842] Remounting filesystem read-only
[  209.129047][   T63] NILFS (loop5): discard dirty page: offset=0, ino=15
[  209.159145][   T63] NILFS (loop5): discard dirty block: blocknr=22, size=1024
[  209.183308][   T63] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.205722][   T63] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.226062][   T63] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.247495][   T63] NILFS (loop5): discard dirty page: offset=0, ino=5
[  209.262207][   T63] NILFS (loop5): discard dirty block: blocknr=41, size=1024
[  209.277253][   T63] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.294821][   T63] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.308312][   T63] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.326516][ T6670] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  209.346710][ T6670] NILFS (loop5): discard dirty page: offset=0, ino=6
[  209.366459][ T6670] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.388796][ T6670] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.411023][ T6670] NILFS (loop5): discard dirty block: blocknr=37, size=1024
[  209.419300][ T6670] NILFS (loop5): discard dirty block: blocknr=38, size=1024
[  209.437721][ T6670] NILFS (loop5): discard dirty page: offset=0, ino=4
[  209.457441][ T6670] NILFS (loop5): discard dirty block: blocknr=40, size=1024
[  209.476047][ T6670] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.493915][ T6670] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.521644][ T6670] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.550135][ T6670] NILFS (loop5): discard dirty page: offset=0, ino=3
[  209.556888][ T6670] NILFS (loop5): discard dirty block: blocknr=42, size=1024
[  209.571293][ T6670] NILFS (loop5): discard dirty block: blocknr=43, size=1024
[  209.578640][ T6670] NILFS (loop5): discard dirty block: blocknr=44, size=1024
[  209.587033][ T6670] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.597300][ T6670] NILFS (loop5): discard dirty page: offset=229376, ino=3
[  209.629494][ T5783] Bluetooth: hci0: command tx timeout
[  209.635003][ T6670] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.647409][ T8843] loop6: detected capacity change from 0 to 32768
[  209.678918][ T6670] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.690259][ T6670] NILFS (loop5): discard dirty block: blocknr=50, size=1024
[  209.701870][ T6670] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  209.744511][ T8843] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  209.961810][ T8843] XFS (loop6): Ending clean mount
[  210.284468][ T7306] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  210.365422][ T8868] loop4: detected capacity change from 0 to 2048
[  210.465214][ T8868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.579464][ T8868] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.780247][ T5998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.192627][ T8880] netlink: 'syz.3.887': attribute type 10 has an invalid length.
[  211.326192][ T8866] loop5: detected capacity change from 0 to 40427
[  211.350569][ T8866] F2FS-fs (loop5): Wrong segment_count / block_count (31 > 0)
[  211.360484][ T8866] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  211.374615][ T8866] F2FS-fs (loop5): invalid crc value
[  211.385176][ T8883] autofs4:pid:8883:autofs_fill_super: pipe file descriptor does not contain proper ops
[  211.408693][ T8866] F2FS-fs (loop5): Found nat_bits in checkpoint
[  211.586274][ T8866] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  211.606696][ T8866] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  211.784855][ T6670] syz-executor: attempt to access beyond end of device
[  211.784855][ T6670] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  211.825999][ T6670] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  212.031053][ T8897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.894'.
[  212.052185][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.894'.
[  212.073972][ T8899] loop4: detected capacity change from 0 to 512
[  212.115322][ T8899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  212.260887][ T8899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.344037][ T8899] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.634440][ T5998] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.365078][ T8936] loop6: detected capacity change from 0 to 512
[  213.419651][ T8936] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.908: corrupted in-inode xattr: invalid ea_ino
[  213.480121][ T8936] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.908: couldn't read orphan inode 15 (err -117)
[  213.510702][ T8936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.607035][ T7306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.440661][ T8966] loop5: detected capacity change from 0 to 256
[  214.471080][ T8966] exfat: Deprecated parameter 'namecase'
[  214.483895][ T8966] exfat: Deprecated parameter 'namecase'
[  214.509117][ T8966] exfat: Deprecated parameter 'namecase'
[  214.561186][ T8966] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  214.867763][ T8974] netlink: 144 bytes leftover after parsing attributes in process `syz.6.924'.
[  214.893605][ T8975] kAFS: bad VL server IP address
[  215.102846][ T8978] loop6: detected capacity change from 0 to 1024
[  215.187143][ T8962] loop3: detected capacity change from 0 to 32768
[  215.229885][ T8962] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  215.304930][ T8962] JBD2: Ignoring recovery information on journal
[  215.420707][ T8962] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  215.810227][ T8996] binder: 8995:8996 ioctl c0306201 0 returned -14
[  215.896171][ T5777] ocfs2: Unmounting device (7,3) on (node local)
[  216.213575][ T9011] netlink: 32 bytes leftover after parsing attributes in process `syz.4.938'.
[  216.383824][ T9014] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied.
[  216.670842][ T9026] loop9: detected capacity change from 0 to 524287998
[  216.816533][ T9031] kAFS: Invalid Command on /proc/fs/afs/cells file
[  217.397582][ T9051] loop6: detected capacity change from 0 to 512
[  217.411226][ T9051] EXT4-fs: Ignoring removed nobh option
[  217.509830][ T9051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  217.540247][ T9051] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.564043][ T9051] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #2: comm syz.6.955: corrupted inode contents
[  217.595880][ T9051] EXT4-fs error (device loop6): ext4_dirty_inode:6166: inode #2: comm syz.6.955: mark_inode_dirty error
[  217.637466][ T9051] EXT4-fs error (device loop6): ext4_do_update_inode:5268: inode #2: comm syz.6.955: corrupted inode contents
[  217.785156][ T7306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.795310][ T9088] loop3: detected capacity change from 0 to 512
[  218.828148][ T9088] EXT4-fs: Ignoring removed nobh option
[  218.982036][ T9088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.994830][ T9088] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.051604][ T9088] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.971: corrupted inode contents
[  219.122137][ T9088] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.971: mark_inode_dirty error
[  219.183898][ T9088] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.971: corrupted inode contents
[  219.311827][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.497860][ T9106] loop3: detected capacity change from 0 to 256
[  219.934375][ T9098] loop5: detected capacity change from 0 to 32768
[  219.995084][ T9098] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  220.095016][ T9098] XFS (loop5): Ending clean mount
[  220.216644][ T6670] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  220.885374][ T9133] loop3: detected capacity change from 0 to 512
[  220.928619][ T9133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.981761][ T9131] loop4: detected capacity change from 0 to 4096
[  220.997823][ T9133] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.008622][ T9131] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  221.118197][ T9131] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  221.135892][ T9131] ntfs3: loop4: ino=5, "/" mi_enum_attr
[  221.141899][ T9131] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  221.148591][ T9131] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  221.158696][ T9131] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  221.237055][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.262531][   T42] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[  221.621512][   T27] audit: type=1326 audit(1789486837.099:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9147 comm="syz.3.992" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f690539e159 code=0x0
[  221.658421][ T9149] loop4: detected capacity change from 0 to 1024
[  222.314474][ T9164] loop4: detected capacity change from 0 to 16
[  222.340995][ T9164] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  222.389606][ T5766] udevd[5766]: incorrect cramfs checksum on /dev/loop4
[  222.463008][ T5766] udevd[5766]: incorrect cramfs checksum on /dev/loop4
[  222.744869][ T9173] loop4: detected capacity change from 0 to 256
[  222.804854][ T9173] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  223.049839][ T5816] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  223.239518][ T5816] usb 4-1: Using ep0 maxpacket: 8
[  223.251587][ T5816] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  223.262472][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.279421][ T5816] usb 4-1: Product: syz
[  223.289259][ T5816] usb 4-1: Manufacturer: syz
[  223.299243][ T5816] usb 4-1: SerialNumber: syz
[  223.320477][ T5816] usb 4-1: config 0 descriptor??
[  223.342385][ T5816] gspca_main: se401-2.14.0 probing 047d:5003
[  223.756753][ T5816] gspca_se401: Bayer format not supported!
[  223.999703][ T5816] usb 4-1: USB disconnect, device number 8
[  224.596495][ T9208] loop6: detected capacity change from 0 to 32768
[  224.618155][ T9208] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop6 scanned by syz.6.1019 (9208)
[  224.658559][ T9208] BTRFS info (device loop6): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  224.683189][ T9208] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  224.698271][ T9208] BTRFS info (device loop6): using free space tree
[  224.704991][ T9224] loop4: detected capacity change from 0 to 2048
[  224.767236][ T9224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.822503][ T9208] BTRFS info (device loop6): enabling ssd optimizations
[  224.852396][ T9208] BTRFS info (device loop6): auto enabling async discard
[  224.861101][   T27] audit: type=1800 audit(1789486840.339:57): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1027" name="file1" dev="loop4" ino=15 res=0 errno=0
[  224.886153][ T9224] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  224.946792][ T9224] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  224.979261][ T9224] EXT4-fs (loop4): This should not happen!! Data will be lost
[  224.979261][ T9224] 
[  224.993354][ T9244] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  225.006235][ T9224] EXT4-fs (loop4): Total free blocks count 0
[  225.023460][ T9224] EXT4-fs (loop4): Free/Dirty block details
[  225.049891][ T9244] EXT4-fs (loop4): This should not happen!! Data will be lost
[  225.049891][ T9244] 
[  225.069576][ T9224] EXT4-fs (loop4): free_blocks=2415919104
[  225.085742][ T9224] EXT4-fs (loop4): dirty_blocks=64
[  225.099659][ T9244] EXT4-fs (loop4): Total free blocks count 0
[  225.276234][ T7306] BTRFS info (device loop6): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  225.502199][ T5766] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop6 scanned by udevd (5766)
[  225.656033][ T9222] loop5: detected capacity change from 0 to 32768
[  225.671880][ T9256] loop3: detected capacity change from 0 to 512
[  225.783195][ T9222] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  225.816144][ T9256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.981497][ T9256] EXT4-fs error (device loop3): ext4_get_first_dir_block:3586: inode #12: comm syz.3.1032: Directory block failed checksum
[  226.000982][ T9222] XFS (loop5): Ending clean mount
[  226.033696][ T9222] XFS (loop5): User initiated shutdown received.
[  226.061547][ T9222] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  226.102803][ T9222] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  226.198125][ T6670] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  226.218542][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.729797][ T5765] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  226.756300][ T9282] loop4: detected capacity change from 0 to 256
[  226.934486][ T5765] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  226.969407][ T5765] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.977503][ T5765] usb 6-1: Product: syz
[  226.999401][ T5765] usb 6-1: Manufacturer: syz
[  227.004115][ T5765] usb 6-1: SerialNumber: syz
[  227.060273][ T5765] usb 6-1: config 0 descriptor??
[  227.086484][ T5765] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 005
[  227.490688][ T5765]  (null): failure reading functionality
[  227.531766][ T5765] i2c i2c-1: connected i2c-tiny-usb device
[  227.688488][ T9294] loop3: detected capacity change from 0 to 40427
[  227.703973][ T9294] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  227.712066][ T9294] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  227.722970][ T9294] F2FS-fs (loop3): invalid crc value
[  227.745886][ T9297] loop6: detected capacity change from 0 to 32768
[  227.771896][ T5765] usb 6-1: USB disconnect, device number 5
[  227.954513][ T9294] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  227.979781][ T9294] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  228.177870][ T5777] syz-executor: attempt to access beyond end of device
[  228.177870][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  228.207339][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  228.323837][ T9308] loop6: detected capacity change from 0 to 256
[  228.356768][ T9308] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  229.113090][ T9324] loop4: detected capacity change from 0 to 164
[  229.133761][ T9324] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  229.191810][ T9324] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  229.690403][ T9316] loop6: detected capacity change from 0 to 32768
[  229.735166][ T9316] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  229.763657][ T9316] JBD2: Ignoring recovery information on journal
[  229.833749][ T9316] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  229.961518][ T9323] loop3: detected capacity change from 0 to 32768
[  230.049168][   T27] audit: type=1800 audit(1789487101.511:58): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1055" name="file1" dev="loop3" ino=4 res=0 errno=0
[  230.081776][ T9323] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong
[  230.081776][ T9323] 
[  230.120169][ T9323] ERROR: (device loop3): remounting filesystem as read-only
[  230.139235][ T9323] ialloc: diAlloc returned -5!
[  230.160276][ T9339] ERROR: (device loop3): diWrite: ixpxd invalid
[  230.160276][ T9339] 
[  230.188696][ T9339] ERROR: (device loop3): txCommit: 
[  230.188696][ T9339] 
[  230.513933][ T7306] ocfs2: Unmounting device (7,6) on (node local)
[  230.650171][ T9335] loop4: detected capacity change from 0 to 32768
[  230.667070][ T9335] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1059 (9335)
[  230.760302][ T9344] veth0_to_bond: entered promiscuous mode
[  230.768319][ T9335] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  230.794681][ T9335] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  230.830303][ T9335] BTRFS info (device loop4): using free space tree
[  230.839347][ T9344] macsec1: entered promiscuous mode
[  230.844871][ T9344] macsec1: entered allmulticast mode
[  230.899805][ T9344] veth0_to_bond: entered allmulticast mode
[  231.079619][ T9335] BTRFS info (device loop4): enabling ssd optimizations
[  231.114470][ T9335] BTRFS info (device loop4): auto enabling async discard
[  231.550689][ T5998] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  231.769038][ T9375] pimreg: tun_chr_ioctl cmd 1074025677
[  231.799696][ T9375] pimreg: linktype set to 774
[  232.190007][ T9384] netlink: 'syz.3.1074': attribute type 25 has an invalid length.
[  232.197985][ T9384] netlink: 'syz.3.1074': attribute type 28 has an invalid length.
[  232.248011][ T9383] input: syz1 as /devices/virtual/input/input12
[  232.979491][ T5814] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  233.017071][ T9401] ==================================================================
[  233.017084][ T9401] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0
[  233.017112][ T9401] Write of size 4 at addr ffffc90003dc9600 by task syz.6.1083/9401
[  233.017130][ T9401] 
[  233.017147][ T9401] CPU: 0 PID: 9401 Comm: syz.6.1083 Not tainted syzkaller #0
[  233.017168][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  233.017188][ T9401] Call Trace:
[  233.017196][ T9401]  <TASK>
[  233.017203][ T9401]  dump_stack_lvl+0x18c/0x250
[  233.017232][ T9401]  ? sys_imageblit+0x1bac/0x25d0
[  233.017252][ T9401]  ? show_regs_print_info+0x20/0x20
[  233.017279][ T9401]  ? load_image+0x420/0x420
[  233.017301][ T9401]  ? __lock_acquire+0x1336/0x7d80
[  233.017329][ T9401]  print_report+0xa8/0x210
[  233.017353][ T9401]  ? sys_imageblit+0x1bac/0x25d0
[  233.017372][ T9401]  kasan_report+0x117/0x150
[  233.017399][ T9401]  ? sys_imageblit+0x1bac/0x25d0
[  233.017423][ T9401]  sys_imageblit+0x1bac/0x25d0
[  233.017451][ T9401]  ? sys_copyarea+0x2530/0x2530
[  233.017479][ T9401]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  233.017509][ T9401]  soft_cursor+0xa01/0xc30
[  233.017544][ T9401]  bit_cursor+0x16dd/0x1f60
[  233.017583][ T9401]  ? bit_clear_margins+0x550/0x550
[  233.017617][ T9401]  ? get_color+0x2e8/0x4d0
[  233.017643][ T9401]  ? bit_clear_margins+0x550/0x550
[  233.017673][ T9401]  ? fbcon_cursor+0x430/0x640
[  233.017701][ T9401]  hide_cursor+0x7f/0x320
[  233.017727][ T9401]  do_con_write+0x1e1/0x70a0
[  233.017759][ T9401]  ? desc_read+0x1a8/0x3d0
[  233.017810][ T9401]  ? vt_resize+0xc0/0xc0
[  233.017837][ T9401]  ? __lock_acquire+0x7d80/0x7d80
[  233.017859][ T9401]  ? rcu_is_watching+0x15/0xb0
[  233.017886][ T9401]  ? trace_contention_end+0x39/0xe0
[  233.017907][ T9401]  ? __mutex_lock+0x30d/0xc80
[  233.017927][ T9401]  ? mutex_unlock+0x10/0x10
[  233.017954][ T9401]  ? __mutex_trylock_common+0x160/0x270
[  233.017976][ T9401]  con_put_char+0x83/0xc0
[  233.018004][ T9401]  ? con_write+0x40/0x40
[  233.018037][ T9401]  ? rcu_is_watching+0x15/0xb0
[  233.018074][ T9401]  ? trace_contention_end+0x39/0xe0
[  233.018093][ T9401]  ? con_write+0x40/0x40
[  233.018118][ T9401]  tty_put_char+0xc9/0x150
[  233.018161][ T9401]  ? do_SAK_work+0x20/0x20
[  233.018187][ T9401]  ? __might_sleep+0xe0/0xe0
[  233.018212][ T9401]  ? n_tty_receive_buf_common+0xc3a/0x1380
[  233.018242][ T9401]  ? read_lock_is_recursive+0x20/0x20
[  233.018278][ T9401]  __process_echoes+0x190/0x9f0
[  233.018311][ T9401]  n_tty_receive_buf_common+0xc81/0x1380
[  233.018353][ T9401]  ? paste_selection+0x1cb/0x4d0
[  233.018373][ T9401]  paste_selection+0x329/0x4d0
[  233.018395][ T9401]  ? set_selection_kernel+0x17b0/0x17b0
[  233.018415][ T9401]  ? do_task_dead+0xd0/0xd0
[  233.018434][ T9401]  ? __might_fault+0xaa/0x120
[  233.018453][ T9401]  ? __might_fault+0xc6/0x120
[  233.018472][ T9401]  ? __might_fault+0xaa/0x120
[  233.018492][ T9401]  ? tioclinux+0x34e/0x450
[  233.018516][ T9401]  vt_ioctl+0x813/0x1f20
[  233.018536][ T9401]  ? __vt_event_wait+0x260/0x260
[  233.018558][ T9401]  ? __fget_files+0x28/0x460
[  233.018586][ T9401]  ? tty_jobctrl_ioctl+0x378/0xba0
[  233.018610][ T9401]  tty_ioctl+0x91e/0xdc0
[  233.018634][ T9401]  ? tty_get_icount+0xb0/0xb0
[  233.018659][ T9401]  __se_sys_ioctl+0xfd/0x170
[  233.018685][ T9401]  do_syscall_64+0x55/0xb0
[  233.018708][ T9401]  ? clear_bhb_loop+0x40/0x90
[  233.018734][ T9401]  ? clear_bhb_loop+0x40/0x90
[  233.018760][ T9401]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.018789][ T9401] RIP: 0033:0x7f473d39e159
[  233.018809][ T9401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.018825][ T9401] RSP: 002b:00007f473e314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  233.018845][ T9401] RAX: ffffffffffffffda RBX: 00007f473d625fa0 RCX: 00007f473d39e159
[  233.018859][ T9401] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003
[  233.018872][ T9401] RBP: 00007f473d43506b R08: 0000000000000000 R09: 0000000000000000
[  233.018885][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.018905][ T9401] R13: 00007f473d626038 R14: 00007f473d625fa0 R15: 00007ffe4af358c8
[  233.018925][ T9401]  </TASK>
[  233.018931][ T9401] 
[  233.018935][ T9401] The buggy address belongs to a 0-page vmalloc region starting at 0xffffc90003dca000 allocated at drm_gem_shmem_vmap+0x3c4/0x650
[  233.018970][ T9401] Memory state around the buggy address:
[  233.018980][ T9401]  ffffc90003dc9500: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  233.018992][ T9401]  ffffc90003dc9580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  233.019004][ T9401] >ffffc90003dc9600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  233.019014][ T9401]                    ^
[  233.019023][ T9401]  ffffc90003dc9680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  233.019040][ T9401]  ffffc90003dc9700: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  233.019049][ T9401] ==================================================================
[  233.019081][ T9401] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  233.019089][ T9401] CPU: 0 PID: 9401 Comm: syz.6.1083 Not tainted syzkaller #0
[  233.019107][ T9401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  233.019117][ T9401] Call Trace:
[  233.019123][ T9401]  <TASK>
[  233.019129][ T9401]  dump_stack_lvl+0x18c/0x250
[  233.019156][ T9401]  ? show_regs_print_info+0x20/0x20
[  233.019201][ T9401]  ? load_image+0x420/0x420
[  233.019228][ T9401]  panic+0x2ca/0x720
[  233.019250][ T9401]  ? bpf_jit_dump+0xd0/0xd0
[  233.019270][ T9401]  ? _raw_spin_unlock_irqrestore+0xc0/0x120
[  233.019293][ T9401]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  233.019316][ T9401]  ? _raw_spin_unlock+0x40/0x40
[  233.019336][ T9401]  ? print_memory_metadata+0x314/0x400
[  233.019362][ T9401]  ? sys_imageblit+0x1bac/0x25d0
[  233.019380][ T9401]  check_panic_on_warn+0x84/0xa0
[  233.019405][ T9401]  ? sys_imageblit+0x1bac/0x25d0
[  233.019424][ T9401]  end_report+0x6f/0x130
[  233.019448][ T9401]  kasan_report+0x128/0x150
[  233.019472][ T9401]  ? sys_imageblit+0x1bac/0x25d0
[  233.019495][ T9401]  sys_imageblit+0x1bac/0x25d0
[  233.019522][ T9401]  ? sys_copyarea+0x2530/0x2530
[  233.019568][ T9401]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  233.019600][ T9401]  soft_cursor+0xa01/0xc30
[  233.019636][ T9401]  bit_cursor+0x16dd/0x1f60
[  233.019679][ T9401]  ? bit_clear_margins+0x550/0x550
[  233.019715][ T9401]  ? get_color+0x2e8/0x4d0
[  233.019742][ T9401]  ? bit_clear_margins+0x550/0x550
[  233.019773][ T9401]  ? fbcon_cursor+0x430/0x640
[  233.019802][ T9401]  hide_cursor+0x7f/0x320
[  233.019830][ T9401]  do_con_write+0x1e1/0x70a0
[  233.019859][ T9401]  ? desc_read+0x1a8/0x3d0
[  233.019913][ T9401]  ? vt_resize+0xc0/0xc0
[  233.019942][ T9401]  ? __lock_acquire+0x7d80/0x7d80
[  233.019966][ T9401]  ? rcu_is_watching+0x15/0xb0
[  233.019994][ T9401]  ? trace_contention_end+0x39/0xe0
[  233.020016][ T9401]  ? __mutex_lock+0x30d/0xc80
[  233.020044][ T9401]  ? mutex_unlock+0x10/0x10
[  233.020074][ T9401]  ? __mutex_trylock_common+0x160/0x270
[  233.020097][ T9401]  con_put_char+0x83/0xc0
[  233.020127][ T9401]  ? con_write+0x40/0x40
[  233.020155][ T9401]  ? rcu_is_watching+0x15/0xb0
[  233.020183][ T9401]  ? trace_contention_end+0x39/0xe0
[  233.020203][ T9401]  ? con_write+0x40/0x40
[  233.020232][ T9401]  tty_put_char+0xc9/0x150
[  233.020261][ T9401]  ? do_SAK_work+0x20/0x20
[  233.020288][ T9401]  ? __might_sleep+0xe0/0xe0
[  233.020315][ T9401]  ? n_tty_receive_buf_common+0xc3a/0x1380
[  233.020346][ T9401]  ? read_lock_is_recursive+0x20/0x20
[  233.020374][ T9401]  __process_echoes+0x190/0x9f0
[  233.020411][ T9401]  n_tty_receive_buf_common+0xc81/0x1380
[  233.020456][ T9401]  ? paste_selection+0x1cb/0x4d0
[  233.020478][ T9401]  paste_selection+0x329/0x4d0
[  233.020504][ T9401]  ? set_selection_kernel+0x17b0/0x17b0
[  233.020526][ T9401]  ? do_task_dead+0xd0/0xd0
[  233.020548][ T9401]  ? __might_fault+0xaa/0x120
[  233.020570][ T9401]  ? __might_fault+0xc6/0x120
[  233.020590][ T9401]  ? __might_fault+0xaa/0x120
[  233.020613][ T9401]  ? tioclinux+0x34e/0x450
[  233.020640][ T9401]  vt_ioctl+0x813/0x1f20
[  233.020663][ T9401]  ? __vt_event_wait+0x260/0x260
[  233.020688][ T9401]  ? __fget_files+0x28/0x460
[  233.020720][ T9401]  ? tty_jobctrl_ioctl+0x378/0xba0
[  233.020758][ T9401]  tty_ioctl+0x91e/0xdc0
[  233.020795][ T9401]  ? tty_get_icount+0xb0/0xb0
[  233.020820][ T9401]  __se_sys_ioctl+0xfd/0x170
[  233.020847][ T9401]  do_syscall_64+0x55/0xb0
[  233.020871][ T9401]  ? clear_bhb_loop+0x40/0x90
[  233.020897][ T9401]  ? clear_bhb_loop+0x40/0x90
[  233.020924][ T9401]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  233.020949][ T9401] RIP: 0033:0x7f473d39e159
[  233.020966][ T9401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.021001][ T9401] RSP: 002b:00007f473e314028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  233.021023][ T9401] RAX: ffffffffffffffda RBX: 00007f473d625fa0 RCX: 00007f473d39e159
[  233.021047][ T9401] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003
[  233.021062][ T9401] RBP: 00007f473d43506b R08: 0000000000000000 R09: 0000000000000000
[  233.021075][ T9401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.021088][ T9401] R13: 00007f473d626038 R14: 00007f473d625fa0 R15: 00007ffe4af358c8
[  233.021111][ T9401]  </TASK>
[  233.021681][ T9401] Kernel Offset: disabled