last executing test programs:

4.017321221s ago: executing program 2 (id=651):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x1, 0x80000000001})
r0 = getpid()
mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=r0})
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

3.91528493s ago: executing program 2 (id=652):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1001f0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
rename(&(0x7f00000003c0)='./bus\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.91497918s ago: executing program 3 (id=653):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port1\x00', 0xeb, 0x111c27})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
dup(r0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.672623333s ago: executing program 3 (id=656):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/33, 0x21}], 0x1, 0x0, 0x0, 0x7000000}}], 0x1, 0x0, 0x0)

3.58734547s ago: executing program 0 (id=657):
socket$kcm(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYRES8=r0], 0x1c}}, 0x0)

3.48194022s ago: executing program 0 (id=658):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x8, 0x8, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001040)={&(0x7f0000001000)='signal_generate\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

3.48180155s ago: executing program 3 (id=659):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000000), 0x4)

3.213381185s ago: executing program 1 (id=671):
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{}, 0x86, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x10}}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000580)=ANY=[], 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x10012, r1, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0x80045510, &(0x7f0000000040)=@usbdevfs_connect)

3.179415448s ago: executing program 0 (id=662):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x5514, 0x0)

3.027945642s ago: executing program 1 (id=663):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x61e6, &(0x7f0000002b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
setrlimit(0x1, &(0x7f0000000a00)={0x1, 0x1000})
pwritev2(r0, &(0x7f0000000380)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x0, 0x0, 0x0)

3.027746032s ago: executing program 3 (id=664):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x566, &(0x7f0000000f00)="$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")
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./mnt\x00', 0x0, &(0x7f0000000540)={[{@noblock_validity}, {@mblk_io_submit}, {@nomblk_io_submit}, {@init_itable_val}, {@discard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nodiscard}, {@data_writeback}]}, 0x1, 0x24f, &(0x7f0000000600)="$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")
mount$bind(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x3002, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x80b0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0)

2.596215151s ago: executing program 1 (id=665):
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, 0x0)
epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x7fffffff, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x11})

2.473212123s ago: executing program 3 (id=666):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
ftruncate(r2, 0x3)
getsockopt$inet6_mreq(r1, 0x11, 0x1, 0x0, &(0x7f00000004c0))

2.472547423s ago: executing program 0 (id=677):
openat$ttyS3(0xffffff9c, 0x0, 0xc2801, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000004003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)

2.261736842s ago: executing program 0 (id=667):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x1, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x5f, &(0x7f0000000840)=ANY=[@ANYBLOB="5f030f5cc5f5278cba8d7a7c60e91ac64915412ea5b8e620307186e851775de555653a8761b526c25eca0c1168ed582213ca032320f8d33bcc2c8ffe45ff1fec08ecf41e5d4407c3602480fa7c535d675a605aa419a3933c5a673b34fe771c"]}]})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.261561852s ago: executing program 4 (id=668):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1}, 0x0)
sendmmsg$alg(r1, &(0x7f0000003a80)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001680)="08957b6c09842a93011599d481bbb5f90183", 0x12}], 0x1, &(0x7f0000001a80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)

2.07072879s ago: executing program 4 (id=669):
unshare(0x2000680)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000000c0), 0x1, 0x4e8, &(0x7f00000017c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x8004587d, &(0x7f0000000780)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
fdatasync(r1)

2.06567636s ago: executing program 2 (id=681):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB="c5f4d736bb767b568fc581ff8e99c27d82508d89e9ae2f3cfade00568ea9dc4554dfcba7939192db87f04e87274894451d39177e8f5f802da73188537ecb3fa8562c91db4555823cd9400b329888f25675b5d0456289c4abacc0064180e88dd59b7cf11156ef401d4e93e9bd3ed64cceacca7306494e8513dc3c8526c364bac4eae8c1f4742eba009e756f10178a7a375ac6688a5e68bd75e66bac279dd8b99aa27ed4faeb1cb998440ee5ba749c6ba78992c5d277481c5450f8b79f7365c3b530d547e07f1e8b12c9e07478ff45f0b4fba5769a21678282764df0d930379693", @ANYRES16, @ANYRES8=0x0, @ANYRES64, @ANYRES32=0x0], 0x1, 0x19d, &(0x7f0000000000)="$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")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000e1"])

1.975119178s ago: executing program 1 (id=670):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}}, 0x0)

1.824144302s ago: executing program 1 (id=672):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000140)=0x9})
prlimit64(0x0, 0xe, 0x0, 0x0)

1.610523752s ago: executing program 4 (id=673):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xff)
write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file1'}, 0xb)
close(r0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
execveat(r0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
syz_read_part_table(0x5f2, &(0x7f0000000000)="$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")

1.122520677s ago: executing program 4 (id=674):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x488}]})

1.121479847s ago: executing program 1 (id=686):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000300)={0x50, 0x3, 0xff56, {0x0, 0xc97}, {}, @cond=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}]})

982.33426ms ago: executing program 4 (id=675):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0xc0049364, 0x0)

976.32189ms ago: executing program 2 (id=688):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a00)='f2fs_reserve_new_blocks\x00'}, 0xfffffffffffffc45)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/17, 0x2}], 0x4e)

835.481963ms ago: executing program 3 (id=676):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x2, 0x0, 0x10000}, 0x24)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r1, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000240)="3ec025", &(0x7f0000000380)=""/180}, 0x20)

615.200383ms ago: executing program 4 (id=679):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket(0x2b, 0x80801, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x2b, 0x0, 0x0, 0x1f000000}, 0x600)

610.029114ms ago: executing program 2 (id=691):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000200)=0x7ff7fffb, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

411.535922ms ago: executing program 2 (id=680):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

0s ago: executing program 0 (id=682):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x7)
setuid(r2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0xf)

kernel console output (not intermixed with test programs):

4374] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  112.816489][ T4374] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  112.930198][ T4394] loop1: detected capacity change from 0 to 1024
[  112.958348][   T26] audit: type=1800 audit(1727259923.589:10): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.166" name="bus" dev="loop4" ino=10 res=0 errno=0
[  113.058127][ T4394] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  113.127299][ T4372] syz.4.166: attempt to access beyond end of device
[  113.127299][ T4372] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  113.249838][ T3851] EXT4-fs (loop1): unmounting filesystem.
[  113.276899][   T48] Bluetooth: hci1: command tx timeout
[  113.286232][   T41] kworker/u4:2: attempt to access beyond end of device
[  113.286232][   T41] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  113.330463][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.362921][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.478508][ T4133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.498508][ T4402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'.
[  113.594224][   T48] Bluetooth: hci3: command tx timeout
[  113.713421][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  113.736918][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  113.971066][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  113.987566][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  114.005071][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  114.024860][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  114.283101][ T4133] device veth0_vlan entered promiscuous mode
[  114.338633][  T102] device hsr_slave_0 left promiscuous mode
[  114.392282][  T102] device hsr_slave_1 left promiscuous mode
[  114.413133][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.430963][  T102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.475815][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.483283][  T102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.504851][  T102] device bridge_slave_1 left promiscuous mode
[  114.520752][  T102] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.555420][  T102] device bridge_slave_0 left promiscuous mode
[  114.571069][  T102] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.641358][  T102] device hsr_slave_0 left promiscuous mode
[  114.662321][  T102] device hsr_slave_1 left promiscuous mode
[  114.669536][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.678231][  T102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.687793][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.705369][  T102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.723668][  T102] device bridge_slave_1 left promiscuous mode
[  114.730360][ T4414] loop1: detected capacity change from 0 to 32768
[  114.733126][  T102] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.794868][  T102] device bridge_slave_0 left promiscuous mode
[  114.801126][  T102] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.909293][ T4433] loop4: detected capacity change from 0 to 256
[  114.942229][  T102] device veth1_macvtap left promiscuous mode
[  114.950893][  T102] device veth0_macvtap left promiscuous mode
[  114.959035][  T102] device veth1_vlan left promiscuous mode
[  114.966094][ T3747] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  114.978800][  T102] device veth0_vlan left promiscuous mode
[  114.986435][ T4433] sctp: [Deprecated]: syz.4.176 (pid 4433) Use of int in maxseg socket option.
[  114.986435][ T4433] Use struct sctp_assoc_value instead
[  115.006416][  T102] device veth1_macvtap left promiscuous mode
[  115.012594][  T102] device veth0_macvtap left promiscuous mode
[  115.043276][  T102] device veth1_vlan left promiscuous mode
[  115.062040][  T102] device veth0_vlan left promiscuous mode
[  115.149312][ T4435] loop4: detected capacity change from 0 to 512
[  115.158514][ T4435] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  115.216659][ T4435] EXT4-fs (loop4): 1 truncate cleaned up
[  115.222655][ T4435] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  115.243599][ T4435] syz.4.177 (pid 4435) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  115.306191][ T3651] EXT4-fs (loop4): unmounting filesystem.
[  115.354299][   T48] Bluetooth: hci1: command tx timeout
[  115.681532][   T48] Bluetooth: hci3: command tx timeout
[  115.978738][  T102] team0 (unregistering): Port device team_slave_1 removed
[  116.023000][  T102] team0 (unregistering): Port device team_slave_0 removed
[  116.067383][  T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.110275][  T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.632326][  T102] bond0 (unregistering): Released all slaves
[  117.118886][  T102] team0 (unregistering): Port device team_slave_1 removed
[  117.162374][  T102] team0 (unregistering): Port device team_slave_0 removed
[  117.209649][  T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.255025][  T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.788065][  T102] bond0 (unregistering): Released all slaves
[  117.879274][ T4457] input: syz1 as /devices/virtual/input/input9
[  117.927732][ T4133] device veth1_vlan entered promiscuous mode
[  117.948606][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  118.003945][ T4459] loop1: detected capacity change from 0 to 512
[  118.019728][ T4459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  118.028882][ T4459] System zones: 1-12
[  118.042625][ T4459] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.186: bg 0: block 361: padding at end of block bitmap is not set
[  118.072924][ T4459] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem
[  118.086089][ T4459] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.186: attempt to clear invalid blocks 33619980 len 1
[  118.102368][ T4459] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.186: invalid indirect mapped block 1819239214 (level 0)
[  118.122677][ T4459] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.186: invalid indirect mapped block 1819239214 (level 1)
[  118.148299][ T4459] EXT4-fs (loop1): 1 orphan inode deleted
[  118.154481][ T4459] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  118.212303][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  118.226051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  118.238340][ T4133] device veth0_macvtap entered promiscuous mode
[  118.275005][ T4133] device veth1_macvtap entered promiscuous mode
[  118.404665][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.438525][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.512880][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  118.541083][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.554641][ T4133] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.583629][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  118.597550][ T4469] ptrace attach of "./syz-executor exec"[3651] was attempted by ""[4469]
[  118.602522][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  118.644346][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  118.675005][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  118.735756][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.784044][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.803439][ T4133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.822948][ T4133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.835656][ T4133] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.858255][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  118.879461][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  118.896257][ T3851] EXT4-fs (loop1): unmounting filesystem.
[  118.913527][ T4133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.939218][ T4133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.981747][ T4133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.005607][ T4133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.098561][ T4259] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  119.178646][ T4259] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  119.264369][    T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  119.291737][ T4259] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  119.335437][ T4259] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  119.408765][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.436294][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.450691][ T4254] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  119.502691][ T4254] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  119.509639][    T7] usb 2-1: Using ep0 maxpacket: 32
[  119.535348][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  119.567823][ T4254] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  119.576744][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  119.587975][ T4254] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  119.614916][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  119.644246][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.664851][    T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.679129][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.684966][    T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  119.764205][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.793661][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.803359][    T7] usb 2-1: config 0 descriptor??
[  119.855104][    T7] hub 2-1:0.0: USB hub found
[  119.884110][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  119.895148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  119.915879][ T4259] 8021q: adding VLAN 0 to HW filter on device team0
[  119.977648][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  119.991764][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  120.040226][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.047417][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.094338][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  120.130614][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  120.154916][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.162058][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.263969][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.625900][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.661529][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.678621][ T4493] loop4: detected capacity change from 0 to 32768
[  122.685820][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.693514][ T4493] XFS: attr2 mount option is deprecated.
[  122.720568][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.748832][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.762535][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.781710][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.807547][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.823161][ T4506] loop0: detected capacity change from 0 to 512
[  122.845357][ T4254] 8021q: adding VLAN 0 to HW filter on device team0
[  122.873813][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.925262][ T4506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  122.941576][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.970301][ T4506] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff)
[  123.018867][ T4259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  123.044119][   T26] audit: type=1800 audit(1727259933.679:11): pid=4506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.194" name="bus" dev="loop0" ino=18 res=0 errno=0
[  123.089088][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.111394][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  123.127929][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  123.150749][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  123.159846][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  123.168825][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.176001][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  123.229450][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.245554][ T4133] EXT4-fs (loop0): unmounting filesystem.
[  123.252722][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  123.275219][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.282430][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.301134][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  123.321971][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.364325][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.385126][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.423545][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  123.452018][ T4524] loop4: detected capacity change from 0 to 1024
[  123.488833][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.508975][ T4524] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  123.509135][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  123.530133][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  123.563251][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  123.571578][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  123.580722][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  123.617849][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  123.634899][ T4524] overlayfs: failed to resolve './file0': -2
[  123.646866][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  123.665187][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.674465][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.729607][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.790378][ T3651] EXT4-fs (loop4): unmounting filesystem.
[  124.124963][    T7] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  124.263979][    T7] usbhid 2-1:0.0: can't add hid device: -71
[  124.270096][    T7] usbhid: probe of 2-1:0.0 failed with error -71
[  124.325260][    T7] usb 2-1: USB disconnect, device number 2
[  124.334639][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  124.342151][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  124.401082][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.485974][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  124.493530][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  124.547658][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  124.573517][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.646507][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.673007][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  124.713022][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  124.740437][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  124.772886][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  124.822886][ T4259] device veth0_vlan entered promiscuous mode
[  124.901146][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  124.934740][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  124.949546][ T4567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.204'.
[  124.963098][ T4259] device veth1_vlan entered promiscuous mode
[  125.030680][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  125.056192][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  125.081018][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  125.113723][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  125.148907][ T4254] device veth0_vlan entered promiscuous mode
[  125.245553][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.264868][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.305889][ T4254] device veth1_vlan entered promiscuous mode
[  125.316514][ T4259] device veth0_macvtap entered promiscuous mode
[  125.358863][ T4259] device veth1_macvtap entered promiscuous mode
[  125.407806][ T4254] device veth0_macvtap entered promiscuous mode
[  125.443551][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  125.474216][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  125.506810][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.544993][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  125.561954][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.583169][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.596539][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.654264][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.664603][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.683426][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.697363][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.709500][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.722801][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.751023][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.762142][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  125.804947][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  125.822784][ T4585] capability: warning: `syz.1.212' uses deprecated v2 capabilities in a way that may be insecure
[  125.838748][ T4254] device veth1_macvtap entered promiscuous mode
[  125.886603][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.899723][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.910421][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.938253][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.954580][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.988553][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.006489][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.028546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  126.056769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  126.082197][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.102299][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.113862][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.130602][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.141113][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.161249][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.177186][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  126.211384][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.255155][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  126.270606][ T4259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.283153][ T4259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.292695][ T4259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.301642][ T4259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.312805][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  126.339353][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  126.341558][ T4579] loop4: detected capacity change from 0 to 32768
[  126.353718][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.370699][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.382127][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.393625][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.412904][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.421600][ T4579] XFS (loop4): Mounting V5 Filesystem
[  126.424128][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.439281][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.450105][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.461868][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.475102][ T4254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.484009][ T4254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.492791][ T4254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.502175][ T4254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.506374][ T4579] XFS (loop4): Ending clean mount
[  126.521995][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  126.534797][ T4579] XFS (loop4): Quotacheck needed: Please wait.
[  126.535455][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  126.577321][ T4579] XFS (loop4): Quotacheck: Done.
[  126.728471][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.750816][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.765690][ T3651] XFS (loop4): Unmounting Filesystem
[  126.785763][ T1084] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.820008][ T4207] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.867152][ T4207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.909005][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.909316][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  126.922591][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.962449][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.004437][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.014781][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  127.046431][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  127.237486][ T4605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'.
[  128.462209][ T3686] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  128.474716][ T3691] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  128.610568][ T4608] loop2: detected capacity change from 0 to 32768
[  128.631241][ T4608] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.147 (4608)
[  128.695535][ T4608] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  128.721703][ T4612] loop1: detected capacity change from 0 to 32768
[  128.726377][ T4608] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  128.769161][ T4608] BTRFS info (device loop2): using free space tree
[  128.914279][ T3686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.925466][ T3691] usb 5-1: config 0 has an invalid interface number: 199 but max is 0
[  128.944756][ T3691] usb 5-1: config 0 has no interface number 0
[  128.950923][ T3691] usb 5-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=9e.c3
[  129.013885][ T3686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.051144][ T3691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.064180][ T4608] BTRFS info (device loop2): enabling ssd optimizations
[  129.079439][ T3686] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  129.139777][ T3691] usb 5-1: config 0 descriptor??
[  129.155965][ T3686] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  129.183969][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.198239][ T3691] gspca_main: spca501-2.14.0 probing 0506:00df
[  129.226097][ T3686] usb 1-1: config 0 descriptor??
[  129.361889][ T4638] loop3: detected capacity change from 0 to 32768
[  129.370684][ T4259] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  129.393739][ T4638] XFS: attr2 mount option is deprecated.
[  129.418957][ T4638] XFS (loop3): stripe width (220) must be a multiple of the stripe unit (155)
[  129.699335][ T3686] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  129.755490][ T3686] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  129.827333][ T3686] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  130.001195][ T3975] usb 1-1: USB disconnect, device number 2
[  130.515057][ T3691] gspca_spca501: reg write: error -71
[  130.521950][ T3691] spca501 5-1:0.199: Reg write failed for 0x00,0x00,0x05
[  130.554066][ T3691] spca501: probe of 5-1:0.199 failed with error -22
[  130.571396][ T4675] loop1: detected capacity change from 0 to 512
[  130.575629][ T3691] usb 5-1: USB disconnect, device number 3
[  130.745577][ T4675] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.231: inode #1: comm syz.1.231: iget: illegal inode #
[  130.930030][ T4675] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.231: error while reading EA inode 1 err=-117
[  131.064250][ T4675] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.231: inode #1: comm syz.1.231: iget: illegal inode #
[  131.203932][ T4675] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.231: error while reading EA inode 1 err=-117
[  131.331093][ T4675] EXT4-fs (loop1): 1 orphan inode deleted
[  131.394223][ T4675] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  132.029503][ T3851] EXT4-fs (loop1): unmounting filesystem.
[  132.294594][ T4707] loop2: detected capacity change from 0 to 2048
[  132.323219][ T4707] EXT4-fs: Ignoring removed mblk_io_submit option
[  132.357993][ T4707] EXT4-fs: Ignoring removed nobh option
[  132.433651][ T4707] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  132.496286][ T4707] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.239: bg 0: block 234: padding at end of block bitmap is not set
[  132.568070][ T4707] EXT4-fs (loop2): Remounting filesystem read-only
[  132.729475][ T4259] EXT4-fs (loop2): unmounting filesystem.
[  132.959242][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  132.965684][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  133.078195][   T48] Bluetooth: hci5: sending frame failed (-49)
[  133.086891][ T3656] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  133.151569][ T4742] Process accounting resumed
[  133.438253][ T4751] loop2: detected capacity change from 0 to 16
[  133.500825][ T4751] erofs: (device loop2): mounted with root inode @ nid 36.
[  133.571328][ T4751] erofs: (device loop2): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36
[  133.582882][ T4751] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  134.175001][   T48] Bluetooth: hci5: sending frame failed (-49)
[  134.182429][ T4764] loop2: detected capacity change from 0 to 32768
[  134.189416][ T3656] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  134.351072][ T4780] loop3: detected capacity change from 0 to 1024
[  134.656203][ T4786] loop4: detected capacity change from 0 to 8
[  134.722851][ T4786] squashfs image failed sanity check
[  135.039028][ T4798] loop0: detected capacity change from 0 to 2048
[  135.058560][ T4800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.274'.
[  135.106720][ T4798]  loop0: p2 p3 < > p4 < p5 >
[  135.111942][ T4798] loop0: partition table partially beyond EOD, truncated
[  135.142573][ T4798] loop0: p2 start 33028 is beyond EOD, truncated
[  135.158438][ T4804] loop1: detected capacity change from 0 to 512
[  135.160048][ T4798] loop0: p3 start 4284160 is beyond EOD, truncated
[  135.184065][ T3629] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  135.187354][ T4804] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  135.213738][ T4798] loop0: p5 start 33028 is beyond EOD, truncated
[  135.253161][ T4804] EXT4-fs (loop1): 1 truncate cleaned up
[  135.308658][ T4804] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  135.331426][ T4809] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  135.454049][ T3629] usb 4-1: Using ep0 maxpacket: 8
[  135.485877][ T4816] loop0: detected capacity change from 0 to 128
[  135.598455][ T3629] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  135.609616][ T3851] EXT4-fs (loop1): unmounting filesystem.
[  135.617218][ T3629] usb 4-1: config 179 has no interface number 0
[  135.632428][ T3629] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  135.660703][ T3629] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  135.682444][ T4818] dccp_invalid_packet: invalid packet type
[  135.689524][ T3629] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  135.701259][ T3718] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  135.709070][ T3629] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  135.723021][ T3629] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  135.732447][ T3629] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.774191][ T4791] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  135.954398][ T3718] usb 5-1: Using ep0 maxpacket: 32
[  136.046252][ T4828] loop0: detected capacity change from 0 to 128
[  136.058820][ T3629] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10
[  136.151466][ T3748] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  136.230015][ T3629] usb 4-1: USB disconnect, device number 4
[  136.253908][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  136.264549][ T3629] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  136.276399][ T3718] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  136.303449][ T3718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.312110][ T3718] usb 5-1: Product: syz
[  136.316652][ T3718] usb 5-1: Manufacturer: syz
[  136.321360][ T3718] usb 5-1: SerialNumber: syz
[  136.333421][ T3718] usb 5-1: config 0 descriptor??
[  136.376110][ T3718] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  136.416609][ T4822] loop1: detected capacity change from 0 to 32768
[  136.670200][ T4836] netlink: 7232 bytes leftover after parsing attributes in process `syz.1.286'.
[  136.774111][ T3687] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  137.142497][ T4840] loop3: detected capacity change from 0 to 32768
[  137.156974][ T4848] Falling back ldisc for ttyS3.
[  137.157536][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.190519][ T4846] loop1: detected capacity change from 0 to 1024
[  137.222567][ T3687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.273750][ T3687] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  137.290814][ T4846] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  137.309931][ T3687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.312823][ T4846] EXT4-fs: Ignoring removed mblk_io_submit option
[  137.324945][ T4846] EXT4-fs: Ignoring removed nomblk_io_submit option
[  137.331798][ T3687] usb 1-1: config 0 descriptor??
[  137.332363][ T4846] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  137.347850][ T4846] EXT4-fs (loop1): re-mounted. Quota mode: writeback.
[  137.422199][ T3851] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /57/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0
[  137.479948][ T3851] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0
[  137.511480][ T3851] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /57/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0
[  137.519082][ T4855] loop2: detected capacity change from 0 to 512
[  137.552346][ T3851] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0
[  137.578829][ T4855] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  137.605805][ T3851] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /57/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0
[  137.639523][ T3851] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0
[  137.660685][ T3851] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /57/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0
[  137.687235][ T3851] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0
[  137.703883][ T4855] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  137.709143][ T3851] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /57/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0
[  137.728061][ T4855] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  137.748646][ T4855] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.295: Failed to acquire dquot type 0
[  137.775290][ T3851] EXT4-fs error (device loop1): ext4_empty_dir:3175: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0
[  137.780893][ T4855] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  137.863968][ T3718] gspca_ov534_9: reg_w failed -71
[  137.881583][ T4855] EXT4-fs (loop2): 1 truncate cleaned up
[  137.897283][ T4855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  137.943494][ T4855] EXT4-fs (loop2): shut down requested (2)
[  137.997503][ T4259] EXT4-fs (loop2): unmounting filesystem.
[  138.314222][ T3718] gspca_ov534_9: Unknown sensor 0000
[  138.314299][ T3718] ov534_9: probe of 5-1:0.0 failed with error -22
[  138.342852][ T4862] loop3: detected capacity change from 0 to 32768
[  138.349905][ T3718] usb 5-1: USB disconnect, device number 4
[  138.458400][ T3851] EXT4-fs (loop1): unmounting filesystem.
[  138.661289][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.694183][ T3687] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71
[  138.712257][ T3687] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71
[  138.749002][ T3687] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71
[  138.768079][ T3687] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[  138.798600][ T3687] uclogic: probe of 0003:256C:006D.0005 failed with error -71
[  138.823052][ T3687] usb 1-1: USB disconnect, device number 3
[  139.036246][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.170212][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.254317][ T3974] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  139.369515][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.389538][ T4884] loop0: detected capacity change from 0 to 512
[  139.415593][ T4884] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  139.464773][ T4884] EXT4-fs (loop0): 1 truncate cleaned up
[  139.479523][ T4884] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  139.580446][ T4133] EXT4-fs (loop0): unmounting filesystem.
[  139.585271][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  139.605414][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  139.614664][ T3974] usb 4-1: config 0 has an invalid interface number: 6 but max is 0
[  139.622840][ T3974] usb 4-1: config 0 has no interface number 0
[  139.623135][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  139.634173][ T3975] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  139.664074][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  139.672817][   T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  139.690060][   T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  139.744247][ T3974] usb 4-1: too many endpoints for config 0 interface 6 altsetting 0: 32, using maximum allowed: 30
[  139.823567][ T3974] usb 4-1: config 0 interface 6 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  139.882842][ T3974] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  139.898605][ T3974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.930350][ T3974] usb 4-1: config 0 descriptor??
[  139.991653][ T3974] cp210x 4-1:0.6: cp210x converter detected
[  140.045895][ T3975] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  140.057168][ T3975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.077034][ T3975] usb 5-1: config 0 descriptor??
[  140.194612][ T4891] loop0: detected capacity change from 0 to 32768
[  140.195616][ T3975] cp210x 5-1:0.0: cp210x converter detected
[  140.217848][ T4891] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.310 (4891)
[  140.242537][ T4891] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  140.267514][ T4891] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  140.276699][ T4891] BTRFS info (device loop0): using free space tree
[  140.416226][ T4886] chnl_net:caif_netlink_parms(): no params data found
[  140.434162][ T3974] cp210x 4-1:0.6: failed to get vendor val 0x000e size 3: -32
[  140.494517][ T4891] BTRFS info (device loop0): enabling ssd optimizations
[  140.577761][   T26] audit: type=1804 audit(1727259951.219:12): pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.310" name="/newroot/30/file0/bus" dev="loop0" ino=263 res=1 errno=0
[  140.615184][ T4891] Invalid ELF header len 1
[  140.634592][ T3975] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  140.663498][   T26] audit: type=1800 audit(1727259951.249:13): pid=4891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.310" name="bus" dev="loop0" ino=263 res=0 errno=0
[  140.700382][ T3975] usb 5-1: cp210x converter now attached to ttyUSB0
[  140.714267][ T3974] cp210x 4-1:0.6: GPIO initialisation failed: -19
[  140.754514][ T3974] usb 4-1: cp210x converter now attached to ttyUSB1
[  140.901990][ T3974] usb 5-1: USB disconnect, device number 5
[  140.935046][ T3974] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  140.951089][ T4133] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  141.021548][ T3974] cp210x 5-1:0.0: device disconnected
[  141.101784][ T3975] usb 4-1: USB disconnect, device number 5
[  141.134338][ T3975] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  141.142634][ T3975] cp210x 4-1:0.6: device disconnected
[  141.321057][ T4930] loop2: detected capacity change from 0 to 40427
[  141.371365][ T4930] F2FS-fs (loop2): invalid crc value
[  141.401012][ T4930] F2FS-fs (loop2): Found nat_bits in checkpoint
[  141.465657][ T4886] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.480433][ T4886] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.496569][ T4886] device bridge_slave_0 entered promiscuous mode
[  141.532908][ T4930] F2FS-fs (loop2): Start checkpoint disabled!
[  141.570335][ T4886] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.570640][ T4930] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  141.578302][ T4886] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.595670][ T4886] device bridge_slave_1 entered promiscuous mode
[  141.706021][ T4886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.754061][ T3656] Bluetooth: hci2: command tx timeout
[  141.775722][ T4886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.876856][ T4948] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  141.951394][ T4886] team0: Port device team_slave_0 added
[  142.039902][ T4886] team0: Port device team_slave_1 added
[  142.430277][ T4886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.440645][ T4886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.526157][ T4886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.578339][ T4886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.606349][ T4886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.635041][   T46] kworker/u4:3: attempt to access beyond end of device
[  142.635041][   T46] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  142.741333][ T4886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.001829][ T4886] device hsr_slave_0 entered promiscuous mode
[  143.027966][ T4886] device hsr_slave_1 entered promiscuous mode
[  143.124281][    T9] device hsr_slave_0 left promiscuous mode
[  143.142524][    T9] device hsr_slave_1 left promiscuous mode
[  143.174702][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.219230][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.282408][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.292553][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.331032][    T9] device bridge_slave_1 left promiscuous mode
[  143.346070][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.405219][    T9] device bridge_slave_0 left promiscuous mode
[  143.420522][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.651108][    T9] device veth1_macvtap left promiscuous mode
[  143.664059][    T9] device veth0_macvtap left promiscuous mode
[  143.670216][    T9] device veth1_vlan left promiscuous mode
[  143.713549][    T9] device veth0_vlan left promiscuous mode
[  143.772784][ T5000] loop0: detected capacity change from 0 to 64
[  143.844612][ T3656] Bluetooth: hci2: command tx timeout
[  144.285994][ T4986] loop3: detected capacity change from 0 to 40427
[  144.320489][ T4986] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  144.346265][ T4986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  144.358099][ T4986] F2FS-fs (loop3): invalid crc value
[  144.401800][ T4986] F2FS-fs (loop3): Found nat_bits in checkpoint
[  144.416497][ T5015] delete_channel: no stack
[  144.623032][ T4986] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  144.640759][ T4986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  144.841616][ T4254] syz-executor: attempt to access beyond end of device
[  144.841616][ T4254] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  144.868093][ T5018] loop2: detected capacity change from 0 to 4096
[  145.892857][    T9] team0 (unregistering): Port device team_slave_1 removed
[  145.924220][ T3656] Bluetooth: hci2: command tx timeout
[  145.958064][ T5029] loop2: detected capacity change from 0 to 4096
[  146.000469][ T5029] ntfs: volume version 3.1.
[  146.045550][    T9] team0 (unregistering): Port device team_slave_0 removed
[  146.139728][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.146197][ T5029] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  146.173430][ T5029] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  146.281175][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.554967][ T5026] loop3: detected capacity change from 0 to 40427
[  146.604380][ T5026] F2FS-fs (loop3): invalid crc value
[  146.654676][ T5026] F2FS-fs (loop3): Found nat_bits in checkpoint
[  146.807258][ T5026] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[  146.828416][ T5026] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  146.919784][ T4254] syz-executor: attempt to access beyond end of device
[  146.919784][ T4254] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  147.020667][ T5032] loop2: detected capacity change from 0 to 32768
[  147.043189][ T5032] XFS: attr2 mount option is deprecated.
[  147.062235][ T5032] XFS: ikeep mount option is deprecated.
[  147.068916][ T5032] XFS: noikeep mount option is deprecated.
[  147.138370][ T5032] XFS (loop2): Mounting V5 Filesystem
[  147.300042][ T5032] XFS (loop2): Ending clean mount
[  147.316646][ T5032] XFS (loop2): Quotacheck needed: Please wait.
[  147.388790][ T5032] XFS (loop2): Quotacheck: Done.
[  147.597940][    T9] bond0 (unregistering): Released all slaves
[  147.746126][ T4259] XFS (loop2): Unmounting Filesystem
[  147.884999][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'.
[  147.915448][ T3718] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  148.004143][ T3656] Bluetooth: hci2: command tx timeout
[  148.244830][ T5068] loop2: detected capacity change from 0 to 128
[  148.343569][ T5068] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  148.352417][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  148.375274][ T5068] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  148.379230][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  148.418317][ T3718] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  148.431304][ T3718] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  148.440993][ T3718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.460058][ T3718] usb 1-1: config 0 descriptor??
[  148.484202][ T5053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  148.680009][ T5068] loop2: detected capacity change from 128 to 11
[  148.730106][ T5079] EXT4-fs warning (device loop2): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 19
[  148.877659][ T4259] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5882: Out of memory
[  148.946259][ T5053] loop0: detected capacity change from 0 to 8
[  148.970739][ T4259] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #2: comm syz-executor: mark_inode_dirty error
[  149.012081][ T5053] SQUASHFS error: lzo decompression failed, data probably corrupt
[  149.071279][ T5092] loop3: detected capacity change from 0 to 8
[  149.084446][ T5053] SQUASHFS error: Failed to read block 0x91: -5
[  149.090743][ T5053] SQUASHFS error: Unable to read metadata cache entry [8f]
[  149.096418][ T5092] squashfs: Unknown parameter 'euid'
[  149.125051][ T5053] SQUASHFS error: Unable to read inode 0x11f
[  149.166723][ T3747] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  149.219284][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.236979][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.250935][ T5096] loop4: detected capacity change from 0 to 1024
[  149.261326][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.280586][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.308439][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.324191][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.338135][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.355167][ T5096] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  149.356927][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.400214][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.408489][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.416977][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.424473][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.431891][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.439886][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.447382][ T3718] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  149.456218][ T3718] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  149.477495][ T3718] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  149.510495][ T3718] usb 1-1: USB disconnect, device number 4
[  149.712399][ T4886] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  149.762646][ T4259] EXT4-fs (loop2): unmounting filesystem.
[  149.790804][ T4886] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  149.816839][ T4886] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  149.853760][ T4886] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  150.145604][ T4886] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.195379][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  150.215441][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  150.218802][  T102] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  150.248827][ T4886] 8021q: adding VLAN 0 to HW filter on device team0
[  150.320485][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.344820][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.374166][  T102] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  150.383636][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.394287][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.434031][  T102] EXT4-fs (loop4): This should not happen!! Data will be lost
[  150.434031][  T102] 
[  150.443740][  T102] EXT4-fs (loop4): Total free blocks count 0
[  150.453864][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  150.495513][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  150.518941][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.539770][  T102] EXT4-fs (loop4): Free/Dirty block details
[  150.551779][  T102] EXT4-fs (loop4): free_blocks=68451041280
[  150.553209][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.564866][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.571278][  T102] EXT4-fs (loop4): dirty_blocks=2224
[  150.594337][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  150.603636][  T102] EXT4-fs (loop4): Block reservation details
[  150.646413][  T102] EXT4-fs (loop4): i_reserved_data_blocks=139
[  150.654921][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  150.674424][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  150.706958][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  150.760157][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  150.784879][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  150.850579][  T102] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 168 with error 28
[  150.854011][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.902074][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  150.921463][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.937022][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.949262][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.958578][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  150.968563][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  150.984435][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  150.993674][   T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  151.005836][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  151.019077][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  151.037948][ T4886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  151.221875][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.431450][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.616701][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.805211][ T5111] loop0: detected capacity change from 0 to 40427
[  151.835298][ T5111] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  151.843092][ T5111] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  151.876044][ T5111] F2FS-fs (loop0): invalid crc value
[  151.921062][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.936774][ T5111] F2FS-fs (loop0): Found nat_bits in checkpoint
[  152.025483][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  152.033161][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  152.073133][ T4886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.156911][ T5111] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  152.174858][ T5111] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  152.232797][ T5122] chnl_net:caif_netlink_parms(): no params data found
[  152.251005][ T5111] syz.0.362: attempt to access beyond end of device
[  152.251005][ T5111] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  152.341178][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  152.359602][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  152.408863][ T5140] loop3: detected capacity change from 0 to 32768
[  152.489662][ T5140] XFS (loop3): Mounting V5 Filesystem
[  152.527482][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  152.589258][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  152.643232][   T11] kworker/u4:1: attempt to access beyond end of device
[  152.643232][   T11] loop0: rw=1, sector=45216, nr_sectors = 8 limit=40427
[  152.667152][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  152.676647][ T4133] syz-executor: attempt to access beyond end of device
[  152.676647][ T4133] loop0: rw=2051, sector=45096, nr_sectors = 120 limit=40427
[  152.685089][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  152.701081][ T4133] F2FS-fs (loop0): Issue discard(5637, 5637, 15) failed, ret: -5
[  152.728599][ T5140] XFS (loop3): Ending clean mount
[  152.770369][ T4886] device veth0_vlan entered promiscuous mode
[  152.788369][ T5171] device wlan0 entered promiscuous mode
[  152.810075][ T5171] device macsec1 entered promiscuous mode
[  152.824596][ T5140] XFS (loop3): Quotacheck needed: Please wait.
[  152.883607][ T4886] device veth1_vlan entered promiscuous mode
[  152.923679][ T5140] XFS (loop3): Quotacheck: Done.
[  153.046518][ T5140] XFS (loop3): User initiated shutdown received.
[  153.066099][ T5140] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  153.104029][ T5140] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  153.114272][   T48] Bluetooth: hci3: command tx timeout
[  153.142334][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.178503][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.191976][ T5183] input: syz0 as /devices/virtual/input/input11
[  153.200151][ T5122] device bridge_slave_0 entered promiscuous mode
[  153.329704][ T4254] XFS (loop3): Unmounting Filesystem
[  153.427085][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  153.468391][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  153.511382][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  153.534483][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  153.548398][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.584044][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.592396][ T5122] device bridge_slave_1 entered promiscuous mode
[  153.633341][ T4886] device veth0_macvtap entered promiscuous mode
[  153.747972][ T4886] device veth1_macvtap entered promiscuous mode
[  153.881346][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.962190][ T5199] loop0: detected capacity change from 0 to 512
[  153.982681][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  153.994973][ T5199] EXT4-fs: Ignoring removed bh option
[  154.022474][ T5199] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  154.031392][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.031415][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.031432][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.121595][ T5204] loop3: detected capacity change from 0 to 128
[  154.150282][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.160549][ T5204] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  154.182749][ T5199] EXT4-fs (loop0): 1 truncate cleaned up
[  154.188987][ T5204] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  154.216890][ T5199] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  154.274003][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.302757][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  154.340707][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.356588][ T4886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.379015][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  154.438087][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  154.451798][ T4133] EXT4-fs (loop0): unmounting filesystem.
[  154.459901][ T3740] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  154.477873][ T5188] loop4: detected capacity change from 0 to 32768
[  154.478523][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  154.568087][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  154.637512][ T5188] XFS (loop4): Mounting V5 Filesystem
[  154.721155][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.745148][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.765104][ T5188] XFS (loop4): Ending clean mount
[  154.773123][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.801817][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.811939][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.822722][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.832627][ T4886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  154.842419][   T26] audit: type=1800 audit(1727259965.479:14): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.377" name="bus" dev="loop4" ino=9289 res=0 errno=0
[  154.843191][ T4886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  154.894088][ T4886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.974598][ T5122] team0: Port device team_slave_0 added
[  154.996017][ T5224] team0: Port device virt_wifi0 added
[  155.010201][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  155.023550][ T3651] XFS (loop4): Unmounting Filesystem
[  155.057155][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  155.184852][ T5122] team0: Port device team_slave_1 added
[  155.192173][ T4886] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.202298][   T48] Bluetooth: hci3: command tx timeout
[  155.216669][ T4886] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.275225][ T4886] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.294355][ T4886] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.387372][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.406252][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.505033][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.631820][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.644237][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.702950][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.914649][ T5122] device hsr_slave_0 entered promiscuous mode
[  155.934613][ T5122] device hsr_slave_1 entered promiscuous mode
[  155.972902][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  155.997532][ T5122] Cannot create hsr debugfs directory
[  156.122711][ T5241] loop3: detected capacity change from 0 to 32768
[  156.324345][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.343286][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.363665][ T5241] JBD2: Ignoring recovery information on journal
[  156.472694][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  156.500945][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.542459][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.584447][ T5241] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  156.585157][    T9] device hsr_slave_0 left promiscuous mode
[  156.615856][    T9] device hsr_slave_1 left promiscuous mode
[  156.629443][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.648275][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.733774][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.742148][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.779950][    T9] device bridge_slave_1 left promiscuous mode
[  156.801057][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.829435][    T9] device bridge_slave_0 left promiscuous mode
[  156.849375][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.992965][ T4254] ocfs2: Unmounting device (7,3) on (node local)
[  157.072454][    T9] device veth1_macvtap left promiscuous mode
[  157.100102][    T9] device veth0_macvtap left promiscuous mode
[  157.148677][    T9] device veth1_vlan left promiscuous mode
[  157.170034][    T9] device veth0_vlan left promiscuous mode
[  157.275814][   T48] Bluetooth: hci3: command tx timeout
[  157.352845][ T5281] loop0: detected capacity change from 0 to 1024
[  157.469057][   T26] audit: type=1800 audit(1727259968.109:15): pid=5281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.392" name=A814F6F2377BCFC78E2E86368C138510A04CEDF7175AF8C2034FAE7413E3ACE8C71AB9A0AF1CA7042011A6ED028E205648535DABF3B2F85196AE18D36B839E3CD54AE4933AD529888FDAC7BB8A70C72BC0FC81BA06506F2D5BC7686E219BBE5283959CBEF9950E071CB6D9F341FC624A5110341F26CEBD71 dev="loop0" ino=27 res=0 errno=0
[  157.811411][ T5295] loop0: detected capacity change from 0 to 512
[  157.841128][ T5295] ext4: Unknown parameter 'noacl'
[  158.309346][ T5308] loop0: detected capacity change from 0 to 2048
[  158.378964][ T5308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  158.617406][ T4133] EXT4-fs (loop0): unmounting filesystem.
[  159.194255][    T9] team0 (unregistering): Port device team_slave_1 removed
[  159.237083][ T3686] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  159.300668][    T9] team0 (unregistering): Port device team_slave_0 removed
[  159.357654][   T48] Bluetooth: hci3: command tx timeout
[  159.430740][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.503931][ T3686] usb 5-1: Using ep0 maxpacket: 16
[  159.526532][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.634342][ T3686] usb 5-1: config 0 has no interfaces?
[  159.640144][ T3686] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  159.649615][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.676084][ T3686] usb 5-1: config 0 descriptor??
[  159.946363][ T4938] usb 5-1: USB disconnect, device number 6
[  160.122197][    T9] bond0 (unregistering): Released all slaves
[  160.242250][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  160.423579][ T5344] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  160.451391][ T5344] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[  160.518784][ T5348] loop0: detected capacity change from 0 to 512
[  160.539829][ T5344] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume.
[  160.585949][ T5348] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  160.632567][ T5348] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  160.683630][ T5348] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  160.755178][ T5348] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  160.801649][ T5348] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e000e118, mo2=0000]
[  160.810101][ T5348] EXT4-fs (loop0): failed to initialize system zone (-117)
[  160.817892][ T5348] EXT4-fs (loop0): mount failed
[  160.910090][ T5348] loop0: detected capacity change from 0 to 256
[  160.990527][ T5348] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  161.468606][ T5122] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  161.545107][ T5122] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  161.612971][ T5122] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  161.667794][ T5122] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  161.957626][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.991202][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.005293][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.028784][ T5122] 8021q: adding VLAN 0 to HW filter on device team0
[  162.055077][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.070083][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.091379][ T4207] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.098573][ T4207] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.144393][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.202828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.265865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.294527][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.297691][ T5410] loop4: detected capacity change from 0 to 512
[  162.301642][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.333741][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.371178][ T5410] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  162.389733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.415165][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.415723][ T5410] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  162.447286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.457843][ T5410] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  162.490628][ T5410] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  162.499201][ T5410] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e000e118, mo2=0000]
[  162.501305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  162.508018][ T5410] EXT4-fs (loop4): failed to initialize system zone (-117)
[  162.522283][ T5410] EXT4-fs (loop4): mount failed
[  162.561372][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.594319][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.613313][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.631890][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.662604][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.684411][ T5410] loop4: detected capacity change from 0 to 256
[  162.702733][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.743676][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  162.775291][ T5410] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  163.049014][ T5430] loop4: detected capacity change from 0 to 256
[  163.546552][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.565503][ T3718] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  163.589408][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.622444][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.693318][ T5447] loop4: detected capacity change from 0 to 16
[  163.717070][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  163.726099][ T5447] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  163.754862][ T4207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  163.830396][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  163.854553][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  163.890786][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  163.915935][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  163.961702][ T5122] device veth0_vlan entered promiscuous mode
[  163.974392][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.999893][ T5122] device veth1_vlan entered promiscuous mode
[  164.012192][ T3718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.044644][ T3718] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.098536][ T3718] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[  164.109344][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  164.119779][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  164.128215][ T5420] loop3: detected capacity change from 0 to 40427
[  164.134860][ T3718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.148148][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.156272][ T5420] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  164.168801][ T3718] usb 1-1: config 0 descriptor??
[  164.174968][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.184182][ T5420] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  164.211784][ T5122] device veth0_macvtap entered promiscuous mode
[  164.250723][ T5122] device veth1_macvtap entered promiscuous mode
[  164.276027][ T5420] F2FS-fs (loop3): Found nat_bits in checkpoint
[  164.318434][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.344190][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.363491][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.390771][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.404267][ T5420] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  164.411351][ T5420] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  164.419747][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.431243][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.441481][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.456388][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.462097][ T5439] loop1: detected capacity change from 0 to 32768
[  164.466935][ T5420] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  164.477222][ T5459] loop4: detected capacity change from 0 to 2048
[  164.506697][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.529647][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  164.538874][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  164.549258][ T5439] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.440 (5439)
[  164.558715][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  164.566026][ T5420] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  164.583486][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  164.605549][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.625945][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.637007][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.649245][ T5459] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.658232][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.679282][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.695100][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.716434][ T5439] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  164.727331][ T3718] betop 0003:11C2:2208.0007: item fetching failed at offset 4/5
[  164.761151][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.768406][ T5439] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  164.772881][ T3718] betop 0003:11C2:2208.0007: parse failed
[  164.792526][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.803462][ T3718] betop: probe of 0003:11C2:2208.0007 failed with error -22
[  164.821856][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.856242][ T5439] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  164.862854][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  164.879749][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  164.899599][ T5122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.906472][ T5439] BTRFS info (device loop1): force lzo compression, level 0
[  164.922114][ T5122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.941757][   T27] usb 1-1: USB disconnect, device number 5
[  164.951164][ T5439] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  164.968232][ T5461] F2FS-fs (loop3): Inconsistent i_blocks, ino:8, iblocks:0, sectors:8
[  164.978005][ T5122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.997658][ T5439] BTRFS info (device loop1): use zstd compression, level 3
[  165.011202][ T5122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.017924][ T5439] BTRFS info (device loop1): using free space tree
[  165.192846][ T3740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.224886][ T3740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.282608][ T5439] BTRFS info (device loop1): enabling ssd optimizations
[  165.309940][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  165.334933][   T26] audit: type=1800 audit(1727259975.979:16): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.440" name="bus" dev="loop1" ino=263 res=0 errno=0
[  165.358186][ T3740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.373994][ T3740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.392137][   T26] audit: type=1800 audit(1727259975.999:17): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.440" name="bus" dev="loop1" ino=263 res=0 errno=0
[  165.446934][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  165.482440][   T26] audit: type=1800 audit(1727259975.999:18): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.440" name="bus" dev="loop1" ino=263 res=0 errno=0
[  165.789246][ T4886] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  165.984712][ T5498] loop0: detected capacity change from 0 to 8192
[  166.019985][ T5498] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  166.061552][ T5498] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  166.071552][ T5498] REISERFS (device loop0): using ordered data mode
[  166.104241][ T5498] reiserfs: using flush barriers
[  166.114149][ T5498] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  166.184672][ T5498] REISERFS (device loop0): checking transaction log (loop0)
[  166.220086][ T5498] REISERFS (device loop0): Using r5 hash to sort names
[  166.233290][ T5498] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  166.301126][ T5521] loop4: detected capacity change from 0 to 256
[  166.368702][ T5521] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  166.643233][ T5527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.454'.
[  166.931558][ T5501] loop3: detected capacity change from 0 to 40427
[  166.939575][ T5501] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  166.953498][ T5501] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  166.961453][ T5537] loop0: detected capacity change from 0 to 512
[  166.994752][ T5537] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  167.040967][ T5537] EXT4-fs (loop0): 1 truncate cleaned up
[  167.049230][ T5501] F2FS-fs (loop3): Found nat_bits in checkpoint
[  167.065710][ T5517] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  167.066560][ T5537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  167.133445][   T26] audit: type=1800 audit(1727259977.769:19): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.457" name="bus" dev="loop0" ino=18 res=0 errno=0
[  167.173405][ T5546] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  167.193184][   T26] audit: type=1800 audit(1727259977.769:20): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.457" name="bus" dev="loop0" ino=18 res=0 errno=0
[  167.213522][ T5546] syz.4.459 (5546) used greatest stack depth: 19704 bytes left
[  167.268522][ T5501] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  167.285548][ T5501] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  167.303922][ T5517] usb 2-1: Using ep0 maxpacket: 32
[  167.445839][ T5517] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  167.470780][ T5517] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  167.578717][ T5555] loop4: detected capacity change from 0 to 256
[  167.626345][   T41] kworker/u4:2: attempt to access beyond end of device
[  167.626345][   T41] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  167.638741][ T5555] FAT-fs (loop4): Directory bread(block 64) failed
[  167.654881][ T5517] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  167.659610][ T5555] FAT-fs (loop4): Directory bread(block 65) failed
[  167.677385][ T5517] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.703568][ T5555] FAT-fs (loop4): Directory bread(block 66) failed
[  167.705280][ T5517] usb 2-1: Product: syz
[  167.724786][ T5555] FAT-fs (loop4): Directory bread(block 67) failed
[  167.725098][ T5517] usb 2-1: Manufacturer: syz
[  167.746880][ T5517] usb 2-1: SerialNumber: syz
[  167.759785][ T5555] FAT-fs (loop4): Directory bread(block 68) failed
[  167.794100][ T5555] FAT-fs (loop4): Directory bread(block 69) failed
[  167.801764][ T5555] FAT-fs (loop4): Directory bread(block 70) failed
[  167.811820][ T5555] FAT-fs (loop4): Directory bread(block 71) failed
[  167.824013][ T5555] FAT-fs (loop4): Directory bread(block 72) failed
[  167.833286][ T5555] FAT-fs (loop4): Directory bread(block 73) failed
[  168.056375][ T5517] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  168.069403][ T4133] EXT4-fs (loop0): unmounting filesystem.
[  168.082557][ T3740] kworker/u4:7: attempt to access beyond end of device
[  168.082557][ T3740] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256
[  168.307195][ T3975] usb 2-1: USB disconnect, device number 3
[  168.331789][ T3975] usblp0: removed
[  168.431508][ T5572] loop3: detected capacity change from 0 to 128
[  168.476151][ T5572] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  168.486030][ T5572] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  168.558906][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  168.748745][ T5583] loop0: detected capacity change from 0 to 1024
[  168.784574][ T5583] EXT4-fs: Ignoring removed i_version option
[  168.790630][ T5583] EXT4-fs: Ignoring removed mblk_io_submit option
[  168.872821][ T5583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  168.975522][ T5588] loop2: detected capacity change from 0 to 512
[  169.046272][ T5595] loop4: detected capacity change from 0 to 2048
[  169.060438][ T5588] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0
[  169.098526][ T5598] loop1: detected capacity change from 0 to 2048
[  169.117736][ T5598] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  169.119362][ T5595] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  169.162117][ T4133] EXT4-fs (loop0): unmounting filesystem.
[  169.243472][ T3651] EXT4-fs (loop4): unmounting filesystem.
[  169.677218][ T5611] loop0: detected capacity change from 0 to 128
[  169.705707][ T5582] loop3: detected capacity change from 0 to 32768
[  169.722778][ T5582] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.472 (5582)
[  169.779649][ T5582] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  169.810123][ T5582] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  169.830009][ T5582] BTRFS info (device loop3): using free space tree
[  170.003984][ T3691] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  170.143999][ T5582] BTRFS info (device loop3): enabling ssd optimizations
[  170.263980][ T3691] usb 1-1: Using ep0 maxpacket: 8
[  170.384896][ T5648] netlink: 277 bytes leftover after parsing attributes in process `syz.1.493'.
[  170.405150][ T3691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  170.434755][ T3691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  170.438608][ T4254] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.453847][ T3691] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  170.469434][ T3691] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  170.484184][ T3691] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  170.501648][ T3691] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  170.519476][ T3691] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.566437][ T3691] usb 1-1: config 0 descriptor??
[  170.630928][ T3656] Bluetooth: hci5: urb ffff888027984f00 submission failed (90)
[  170.744843][ T5652] loop1: detected capacity change from 0 to 256
[  170.774933][ T5652] exfat: Deprecated parameter 'utf8'
[  170.780364][ T5652] exfat: Deprecated parameter 'utf8'
[  170.811787][ T5513] usb 1-1: USB disconnect, device number 6
[  170.900597][ T5652] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  171.111069][ T5623] loop4: detected capacity change from 0 to 32768
[  171.122162][ T5623] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.487 (5623)
[  171.155431][ T5623] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.168670][ T5623] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  171.197518][ T5623] BTRFS info (device loop4): using free space tree
[  171.454252][ T5623] BTRFS info (device loop4): enabling ssd optimizations
[  171.469104][ T5673] loop1: detected capacity change from 0 to 4096
[  171.659696][   T26] audit: type=1800 audit(1727259982.299:21): pid=5673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.499" name="bus" dev="loop1" ino=33 res=0 errno=0
[  172.318080][ T3651] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.414469][ T5675] loop2: detected capacity change from 0 to 40427
[  172.518506][ T5685] loop0: detected capacity change from 0 to 32768
[  172.525155][ T5675] F2FS-fs (loop2): Found nat_bits in checkpoint
[  172.667462][ T5675] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  172.682747][ T5675] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  172.878290][ T5700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.509'.
[  172.973138][ T5700] device vcan0 entered promiscuous mode
[  174.749129][ T5731] loop3: detected capacity change from 0 to 1024
[  174.782954][ T5703] loop1: detected capacity change from 0 to 32768
[  174.961296][ T5703] XFS (loop1): Mounting V5 Filesystem
[  175.172262][ T5717] loop0: detected capacity change from 0 to 40427
[  175.243983][ T5703] XFS (loop1): Ending clean mount
[  175.249851][ T5727] loop4: detected capacity change from 0 to 32768
[  175.293543][ T5717] F2FS-fs (loop0): Found nat_bits in checkpoint
[  175.320922][ T5727] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.519 (5727)
[  175.363154][ T5703] XFS (loop1): Quotacheck needed: Please wait.
[  175.463082][ T5703] XFS (loop1): Quotacheck: Done.
[  175.573134][ T5727] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  175.614818][ T5717] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  175.634107][ T5727] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  175.643606][ T5727] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  175.683913][ T5727] BTRFS info (device loop4): use zstd compression, level 3
[  175.691192][ T5727] BTRFS info (device loop4): using free space tree
[  175.720151][    T9] hfsplus: b-tree write err: -5, ino 4
[  175.769543][ T4886] XFS (loop1): Unmounting Filesystem
[  175.914284][ T5727] BTRFS info (device loop4): enabling ssd optimizations
[  175.968702][   T26] audit: type=1800 audit(1727259986.609:22): pid=5727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.519" name="file1" dev="loop4" ino=260 res=0 errno=0
[  176.058856][    T9] kworker/u4:0: attempt to access beyond end of device
[  176.058856][    T9] loop3: rw=1, sector=7312, nr_sectors = 24144 limit=1024
[  176.099678][   T26] audit: type=1800 audit(1727259986.719:23): pid=5727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.519" name="file1" dev="loop4" ino=260 res=0 errno=0
[  176.237944][ T3651] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  176.575714][ T5772] loop0: detected capacity change from 0 to 512
[  176.710743][ T5772] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.525: corrupted in-inode xattr
[  176.724589][ T5772] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.525: couldn't read orphan inode 15 (err -117)
[  176.795126][ T5772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  176.886982][ T5772] EXT4-fs warning (device loop0): __ext4fs_dirhash:283: invalid/unsupported hash tree version 135
[  176.953113][ T5776] netlink: 'syz.1.523': attribute type 11 has an invalid length.
[  177.002027][ T5776] netem: change failed
[  177.094857][ T4133] EXT4-fs (loop0): unmounting filesystem.
[  177.210570][ T5782] 9pnet: p9_errstr2errno: server reported unknown error Çi6rµŠŜ
[  177.442153][ T5792] loop2: detected capacity change from 0 to 512
[  177.469584][ T5792] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  177.518003][ T5794] netlink: 'syz.3.534': attribute type 3 has an invalid length.
[  177.526715][ T3973] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  177.543238][ T5792] EXT4-fs (loop2): 1 truncate cleaned up
[  177.552313][ T5792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  177.699641][ T5801] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  177.745710][ T5122] EXT4-fs (loop2): unmounting filesystem.
[  177.773913][ T3973] usb 1-1: Using ep0 maxpacket: 8
[  177.863970][ T3970] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  177.894760][ T3973] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  177.903346][ T5805] loop4: detected capacity change from 0 to 512
[  177.918758][ T3973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  177.929394][ T3973] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  177.940144][ T5805] EXT4-fs: Ignoring removed oldalloc option
[  177.949272][ T5805] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  177.968840][ T3973] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  177.982138][ T3973] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  177.987301][ T5805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  177.991735][ T3973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.021277][ T5805] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038 (0x7fffffff)
[  178.098014][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'.
[  178.107261][ T3970] usb 4-1: Using ep0 maxpacket: 16
[  178.112607][ T5809] device bridge_slave_1 left promiscuous mode
[  178.122562][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.145796][ T5809] device bridge_slave_0 left promiscuous mode
[  178.152250][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.273974][ T3973] usb 1-1: usb_control_msg returned -32
[  178.279954][ T3973] usbtmc 1-1:16.0: can't read capabilities
[  178.384125][ T3970] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9a.3c
[  178.393326][ T3970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.423877][ T3970] usb 4-1: Product: syz
[  178.428120][ T3970] usb 4-1: Manufacturer: syz
[  178.432748][ T3970] usb 4-1: SerialNumber: syz
[  178.446030][ T5811] loop1: detected capacity change from 0 to 32768
[  178.468107][ T3970] usb 4-1: config 0 descriptor??
[  178.473445][ T5811] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.540 (5811)
[  178.501867][ T5811] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  178.513952][ T5811] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  178.521776][ T3970] usb_ehset_test: probe of 4-1:0.0 failed with error -32
[  178.526307][ T5811] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  178.540180][ T5811] BTRFS info (device loop1): use zstd compression, level 3
[  178.548763][ T5811] BTRFS info (device loop1): using free space tree
[  178.877919][ T5515] usb 4-1: USB disconnect, device number 6
[  179.364318][ T5811] BTRFS info (device loop1): enabling ssd optimizations
[  179.822267][ T3747] udevd[3747]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [5817] terminated by signal 1 (Hangup)
[  181.481116][ T3747] udevd[3747]: '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0' [5833] terminated by signal 1 (Hangup)
[  181.861671][ T3651] EXT4-fs (loop4): unmounting filesystem.
[  181.945299][ T5835] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  181.971939][ T4886] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  182.574047][ T3691] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  182.687886][ T5856] loop3: detected capacity change from 0 to 512
[  182.756571][ T5856] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  182.771862][ T5856] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038 (0x7fffffff)
[  182.830146][ T5856] Process accounting resumed
[  182.835140][ T3691] usb 5-1: Using ep0 maxpacket: 16
[  182.921897][ T5856] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  182.970343][ T3691] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.995033][ T3691] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.021264][ T3691] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  183.052007][ T3691] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  183.063611][ T3691] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  183.074884][ T3691] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  183.089822][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  183.118641][   T26] audit: type=1326 audit(1727259993.759:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0497def9 code=0x7ffc0000
[  183.176503][   T26] audit: type=1326 audit(1727259993.759:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0497def9 code=0x7ffc0000
[  183.230653][   T26] audit: type=1326 audit(1727259993.819:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0497def9 code=0x7ffc0000
[  183.260929][   T26] audit: type=1326 audit(1727259993.819:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0497def9 code=0x7ffc0000
[  183.294174][ T3691] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  183.303443][ T3691] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.321529][ T3691] usb 5-1: Product: syz
[  183.361439][ T3691] usb 5-1: Manufacturer: syz
[  183.369217][   T26] audit: type=1326 audit(1727259993.819:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0497def9 code=0x7ffc0000
[  183.379034][ T3691] usb 5-1: SerialNumber: syz
[  183.423891][   T26] audit: type=1326 audit(1727259993.849:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0497def9 code=0x7ffc0000
[  183.488482][   T26] audit: type=1326 audit(1727259993.849:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0497def9 code=0x7ffc0000
[  183.515251][   T26] audit: type=1326 audit(1727259993.849:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0497def9 code=0x7ffc0000
[  183.547740][   T26] audit: type=1326 audit(1727259993.849:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0497def9 code=0x7ffc0000
[  183.572752][   T26] audit: type=1326 audit(1727259993.849:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0497def9 code=0x7ffc0000
[  183.595517][ T5879] netlink: 44 bytes leftover after parsing attributes in process `syz.1.562'.
[  183.607196][ T5879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.562'.
[  183.693993][ T3973] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  183.760858][ T5883] loop1: detected capacity change from 0 to 4096
[  183.773199][ T5883] ntfs3: loop1: Failed to load $MFT.
[  183.839796][ T3748] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  183.944186][ T3691] cdc_ncm 5-1:1.0: bind() failure
[  183.969626][ T3691] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  183.983175][ T3691] cdc_ncm 5-1:1.1: bind() failure
[  184.001687][ T3691] usb 5-1: USB disconnect, device number 7
[  184.054079][ T3973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.077556][ T3973] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  184.183475][ T5892] loop3: detected capacity change from 0 to 1024
[  184.231369][ T5892] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  184.264269][ T3973] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  184.273379][ T3973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.286380][ T3973] usb 3-1: Product: syz
[  184.290636][ T3973] usb 3-1: Manufacturer: syz
[  184.295747][ T3973] usb 3-1: SerialNumber: syz
[  184.418184][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  184.450438][ T5890] loop1: detected capacity change from 0 to 32768
[  184.458894][ T5895] sctp: [Deprecated]: syz.4.569 (pid 5895) Use of struct sctp_assoc_value in delayed_ack socket option.
[  184.458894][ T5895] Use struct sctp_sack_info instead
[  184.495816][ T5890] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.567 (5890)
[  184.546557][ T5876] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  184.564221][ T5890] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.581222][ T5890] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  184.617451][ T5890] BTRFS info (device loop1): using free space tree
[  184.800679][ T5890] BTRFS info (device loop1): enabling ssd optimizations
[  184.836341][ T5890] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.210947][ T5924] loop1: detected capacity change from 0 to 8192
[  185.216835][ T5876] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  185.232853][ T5924] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  185.246505][ T5924] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  185.260480][ T5924] REISERFS (device loop1): using ordered data mode
[  185.267401][ T5924] reiserfs: using flush barriers
[  185.280269][ T5924] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  185.303247][ T5924] REISERFS (device loop1): checking transaction log (loop1)
[  185.405964][ T5924] REISERFS (device loop1): Using tea hash to sort names
[  185.416249][ T5924] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  185.476152][ T3973] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  185.482677][ T3973] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  185.490483][ T3973] cdc_ncm 3-1:1.0: setting rx_max = 2048
[  185.704026][ T3973] cdc_ncm 3-1:1.0: setting tx_max = 88
[  185.721911][ T3973] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  185.761180][ T3973] usb 3-1: USB disconnect, device number 6
[  185.795091][ T3973] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  185.804791][ T5933] loop1: detected capacity change from 0 to 16
[  185.858050][ T5933] erofs: (device loop1): mounted with root inode @ nid 36.
[  186.014224][ T5784] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -110
[  186.120597][ T3975] usb 1-1: USB disconnect, device number 7
[  186.618134][ T5955] loop0: detected capacity change from 0 to 256
[  186.648443][ T5955] exfat: Bad value for 'errors'
[  186.989556][ T3747] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  187.060431][ T5967] mmap: syz.3.587 (5967) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  187.073152][ T5955] loop0: detected capacity change from 0 to 512
[  187.102304][ T5955] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  187.120288][ T5972] loop2: detected capacity change from 0 to 8
[  187.175535][ T5955] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  187.195253][ T5955] EXT4-fs (loop0): 1 truncate cleaned up
[  187.201032][ T5955] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  187.302703][ T4133] EXT4-fs (loop0): unmounting filesystem.
[  187.568527][ T5985] netlink: 'syz.3.591': attribute type 12 has an invalid length.
[  188.007554][ T5513] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  188.057530][ T6010] block nbd1: shutting down sockets
[  188.274131][ T5513] usb 1-1: Using ep0 maxpacket: 16
[  188.282119][ T6021] loop1: detected capacity change from 0 to 64
[  188.394278][ T5513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.424189][ T3691] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  188.432938][ T5513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.452828][ T6023] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  188.471302][ T5513] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00
[  188.509508][ T5513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.536012][ T5513] usb 1-1: config 0 descriptor??
[  188.626271][ T6027] block nbd1: shutting down sockets
[  188.679944][ T6032] af_packet: tpacket_rcv: packet too big, clamped from 4929 to 3952. macoff=96
[  188.826654][ T6037] loop1: detected capacity change from 0 to 1024
[  188.828638][ T3691] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  188.862518][ T3691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.869317][ T6037] EXT4-fs: Ignoring removed orlov option
[  188.895418][ T3691] usb 5-1: config 0 descriptor??
[  188.910275][ T6037] EXT4-fs (loop1): Test dummy encryption mode enabled
[  188.958287][ T6037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  189.033539][ T5513] lenovo 0003:17EF:6009.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0
[  189.179230][ T4886] EXT4-fs (loop1): unmounting filesystem.
[  189.254402][ T3691] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00
[  189.268871][ T3691] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  189.284736][ T5506] usb 1-1: USB disconnect, device number 8
[  189.371283][ T6048] loop1: detected capacity change from 0 to 256
[  189.393054][ T3691] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2
[  189.408324][ T3691] [drm] Initialized udl on minor 2
[  189.447539][ T6048] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  189.678993][ T6034] loop3: detected capacity change from 0 to 32768
[  189.693434][ T6034] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+"
[  189.704137][ T6034] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)...
[  189.729089][ T6034] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms
[  189.740039][ T4937] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use
[  189.763184][ T4937] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal...
[  189.780794][ T3691] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  189.801815][ T3691] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  189.832670][ T3691] usb 5-1: USB disconnect, device number 8
[  189.862108][ T5513] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  189.887245][ T4937] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 124ms
[  189.899407][ T5513] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  189.921418][ T4937] gfs2: fsid=(œ[{{{+.0: jid=0: Done
[  189.926164][ T5513] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  189.935737][ T6034] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount
[  190.230607][ T6063] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  192.170507][ T6080] loop3: detected capacity change from 0 to 4096
[  192.242797][ T6080] ntfs3: loop3: Failed to load $MFT.
[  192.283012][ T6090] Invalid ELF header len 5
[  192.794410][ T3975] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  192.983191][ T6086] loop1: detected capacity change from 0 to 40427
[  193.020797][ T6086] F2FS-fs (loop1): invalid crc value
[  193.033258][ T6086] F2FS-fs (loop1): Found nat_bits in checkpoint
[  193.043985][ T3691] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  193.111262][ T6097] loop0: detected capacity change from 0 to 40427
[  193.122226][ T6086] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  193.132595][ T6097] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  193.141260][ T6097] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  193.164141][ T3975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.181660][ T3975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.193470][ T3975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  193.207597][ T3975] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  193.219891][ T6097] F2FS-fs (loop0): Found nat_bits in checkpoint
[  193.225892][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  193.225909][   T26] audit: type=1800 audit(1727260003.859:41): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.631" name="file0" dev="loop1" ino=10 res=0 errno=0
[  193.233943][ T3975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.266443][ T6086] syz.1.631: attempt to access beyond end of device
[  193.266443][ T6086] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.285437][ T3975] usb 5-1: config 0 descriptor??
[  193.318609][ T4886] syz-executor: attempt to access beyond end of device
[  193.318609][ T4886] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  193.483842][ T6097] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  193.490948][ T6097] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  193.605969][ T3656] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  193.614738][ T3656] Bluetooth: hci3: Injecting HCI hardware error event
[  193.626755][   T48] Bluetooth: hci3: hardware error 0x00
[  194.398918][ T1272] ieee802154 phy0 wpan0: encryption failed: -22
[  194.405403][ T1272] ieee802154 phy1 wpan1: encryption failed: -22
[  195.674338][   T48] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  196.374020][ T3691] usb 4-1: unable to read config index 0 descriptor/all
[  196.382653][ T3691] usb 4-1: can't read configurations, error -71
[  196.454154][ T6119] loop2: detected capacity change from 0 to 1024
[  196.517928][ T6119] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  196.604675][ T6123] sctp: [Deprecated]: syz.1.644 (pid 6123) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.604675][ T6123] Use struct sctp_sack_info instead
[  196.731603][ T5122] EXT4-fs (loop2): unmounting filesystem.
[  196.881157][ T6131] Process accounting resumed
[  196.886659][ T6129] loop1: detected capacity change from 0 to 2048
[  196.922543][ T6129] EXT4-fs: Ignoring removed mblk_io_submit option
[  196.949556][ T6129] EXT4-fs: Ignoring removed nobh option
[  197.022440][ T6129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  197.130223][ T6129] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.646: bg 0: block 234: padding at end of block bitmap is not set
[  197.203973][ T6129] EXT4-fs (loop1): Remounting filesystem read-only
[  197.311773][ T4886] EXT4-fs (loop1): unmounting filesystem.
[  197.617281][ T3975] usbhid 5-1:0.0: can't add hid device: -71
[  197.623440][ T3975] usbhid: probe of 5-1:0.0 failed with error -71
[  197.653096][ T6162] loop4: detected capacity change from 0 to 128
[  197.662668][ T3975] usb 5-1: USB disconnect, device number 9
[  197.753922][   T48] Bluetooth: hci3: Opcode 0x206c failed: -110
[  197.959969][ T6168] loop4: detected capacity change from 0 to 512
[  197.979496][ T6167] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  198.017670][ T6168] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  198.113656][ T6172] loop3: detected capacity change from 0 to 1024
[  198.127110][ T6168] EXT4-fs (loop4): 1 truncate cleaned up
[  198.139695][ T6168] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  198.237433][ T6172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  198.339019][ T6174] loop1: detected capacity change from 0 to 32768
[  198.355970][ T6172] EXT4-fs: Ignoring removed mblk_io_submit option
[  198.373956][ T6172] EXT4-fs: Ignoring removed nomblk_io_submit option
[  198.375610][ T6144] loop2: detected capacity change from 0 to 40427
[  198.385405][ T6172] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  198.411084][ T6172] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[  198.426803][ T6144] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  198.447334][ T6144] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  198.543632][ T6144] F2FS-fs (loop2): Found nat_bits in checkpoint
[  198.588728][ T3651] EXT4-fs (loop4): unmounting filesystem.
[  198.600792][ T4254] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /99/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0
[  198.682721][ T4254] EXT4-fs error (device loop3): ext4_empty_dir:3175: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0
[  198.710628][ T6144] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  198.735845][ T6144] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  198.745872][ T4254] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /99/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0
[  198.859423][ T4254] EXT4-fs error (device loop3): ext4_empty_dir:3175: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0
[  198.925655][ T4254] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /99/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0
[  198.978920][ T4254] EXT4-fs error (device loop3): ext4_empty_dir:3175: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0
[  199.017701][ T6192] loop4: detected capacity change from 0 to 512
[  199.042537][ T6192] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  199.059132][ T3740] kworker/u4:7: attempt to access beyond end of device
[  199.059132][ T3740] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  199.073400][ T4254] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /99/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0
[  199.100283][ T4254] EXT4-fs error (device loop3): ext4_empty_dir:3175: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0
[  199.148281][ T6192] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  199.161452][ T4254] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 33: comm syz-executor: path /99/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=2113929216, rec_len=1024, size=1024 fake=0
[  199.173943][ T6192] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  199.190078][ T3975] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  199.192464][ T6192] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.669: Failed to acquire dquot type 0
[  199.217503][ T6192] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  199.239017][ T6192] EXT4-fs (loop4): 1 truncate cleaned up
[  199.255607][ T4254] EXT4-fs error (device loop3): ext4_empty_dir:3175: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=2113929216, rec_len=1024, size=1024 fake=0
[  199.283321][ T6192] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  199.342981][ T6192] EXT4-fs (loop4): shut down requested (2)
[  199.427954][ T3651] EXT4-fs (loop4): unmounting filesystem.
[  199.594344][ T3975] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  199.603462][ T3975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.634815][ T3975] usb 1-1: config 0 descriptor??
[  199.675219][ T3975] cp210x 1-1:0.0: cp210x converter detected
[  199.691372][ T6202] loop4: detected capacity change from 0 to 2048
[  199.711354][ T6204] loop2: detected capacity change from 0 to 8
[  199.732130][ T6204] squashfs image failed sanity check
[  199.737457][ T6202]  loop4: p2 p3 < > p4 < p5 >
[  199.737488][ T6202] loop4: partition table partially beyond EOD, truncated
[  199.737661][ T6202] loop4: p2 start 33028 is beyond EOD, truncated
[  199.780563][ T6202] loop4: p3 start 4284160 is beyond EOD, truncated
[  199.814886][ T6202] loop4: p5 start 33028 is beyond EOD, truncated
[  199.834090][   T48] Bluetooth: hci3: Opcode 0x2046 failed: -110
[  200.022873][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  200.105277][ T3975] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  200.162439][ T3975] usb 1-1: cp210x converter now attached to ttyUSB0
[  200.171367][   T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.209279][ T5513] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  200.321627][   T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.369990][ T3975] usb 1-1: USB disconnect, device number 9
[  200.384746][ T3975] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  200.406442][ T3975] cp210x 1-1:0.0: device disconnected
[  200.470949][   T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.514021][ T5513] usb 2-1: Using ep0 maxpacket: 8
[  200.620381][   T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.658935][ T5513] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  200.686013][ T5513] usb 2-1: config 179 has no interface number 0
[  200.712830][ T5513] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  200.737090][ T6222] loop2: detected capacity change from 0 to 2048
[  200.759867][ T5513] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  200.795548][ T5513] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  200.807648][ T5513] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  200.821791][ T5513] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  200.831956][ T5513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.845259][ T6222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.914133][ T6207] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  200.927622][ T3654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  200.938154][ T3654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  200.948350][ T3654] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  200.957884][ T3654] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  200.968660][ T3654] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  200.976910][ T3654] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  201.241219][ T5513] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input12
[  201.464809][ T5513] usb 2-1: USB disconnect, device number 4
[  201.473858][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  201.482269][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  201.497023][ T5513] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  201.630259][ T5122] ==================================================================
[  201.638388][ T5122] BUG: KASAN: slab-out-of-bounds in udf_readdir+0xc5f/0x2240
[  201.645802][ T5122] Write of size 149 at addr ffff88802b91c26a by task syz-executor/5122
[  201.654073][ T5122] 
[  201.656437][ T5122] CPU: 1 PID: 5122 Comm: syz-executor Not tainted 6.1.111-syzkaller #0
[  201.664713][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  201.674815][ T5122] Call Trace:
[  201.678117][ T5122]  <TASK>
[  201.681054][ T5122]  dump_stack_lvl+0x1e3/0x2cb
[  201.685755][ T5122]  ? nf_tcp_handle_invalid+0x642/0x642
[  201.691272][ T5122]  ? panic+0x764/0x764
[  201.695352][ T5122]  ? _printk+0xd1/0x111
[  201.699516][ T5122]  ? __virt_addr_valid+0x17f/0x530
[  201.704638][ T5122]  ? __virt_addr_valid+0x17f/0x530
[  201.709781][ T5122]  print_report+0x15f/0x4f0
[  201.714295][ T5122]  ? __virt_addr_valid+0x17f/0x530
[  201.719418][ T5122]  ? __virt_addr_valid+0x17f/0x530
[  201.724536][ T5122]  ? __virt_addr_valid+0x45b/0x530
[  201.729663][ T5122]  ? __phys_addr+0xb6/0x170
[  201.734207][ T5122]  ? udf_readdir+0xc5f/0x2240
[  201.738917][ T5122]  kasan_report+0x136/0x160
[  201.743452][ T5122]  ? udf_readdir+0xc5f/0x2240
[  201.748142][ T5122]  kasan_check_range+0x27f/0x290
[  201.753171][ T5122]  ? udf_readdir+0xc5f/0x2240
[  201.757857][ T5122]  memcpy+0x3c/0x60
[  201.761674][ T5122]  udf_readdir+0xc5f/0x2240
[  201.766199][ T5122]  ? load_block_bitmap+0x520/0x520
[  201.771347][ T5122]  ? __might_sleep+0xb0/0xb0
[  201.775968][ T5122]  ? aa_file_perm+0x3e3/0xf60
[  201.780664][ T5122]  ? trace_raw_output_contention_end+0xd0/0xd0
[  201.786827][ T5122]  ? load_block_bitmap+0x520/0x520
[  201.791959][ T5122]  ? __fdget_pos+0x2ba/0x360
[  201.796580][ T5122]  ? end_current_label_crit_section+0x147/0x170
[  201.803097][ T5122]  ? common_file_perm+0x17d/0x1d0
[  201.808135][ T5122]  ? fsnotify_perm+0x439/0x590
[  201.812908][ T5122]  iterate_dir+0x224/0x560
[  201.817328][ T5122]  ? load_block_bitmap+0x520/0x520
[  201.822453][ T5122]  __se_sys_getdents64+0x209/0x4f0
[  201.827569][ T5122]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  201.833589][ T5122]  ? __x64_sys_getdents64+0x80/0x80
[  201.838793][ T5122]  ? filldir+0x6f0/0x6f0
[  201.843040][ T5122]  ? syscall_enter_from_user_mode+0x2e/0x230
[  201.849046][ T5122]  ? lockdep_hardirqs_on+0x94/0x130
[  201.854265][ T5122]  ? syscall_enter_from_user_mode+0x2e/0x230
[  201.860290][ T5122]  do_syscall_64+0x3b/0xb0
[  201.864727][ T5122]  ? clear_bhb_loop+0x45/0xa0
[  201.869421][ T5122]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  201.875330][ T5122] RIP: 0033:0x7f2f049b0093
[  201.879766][ T5122] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  201.899375][ T5122] RSP: 002b:00007fff70803a28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  201.907806][ T5122] RAX: ffffffffffffffda RBX: 00005555741f9600 RCX: 00007f2f049b0093
[  201.915781][ T5122] RDX: 0000000000008000 RSI: 00005555741f9600 RDI: 0000000000000005
[  201.923758][ T5122] RBP: 00005555741f95d4 R08: 0000000000000000 R09: 0000000000000000
[  201.931740][ T5122] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  201.939715][ T5122] R13: 0000000000000010 R14: 00005555741f95d0 R15: 00007fff70805cd0
[  201.947698][ T5122]  </TASK>
[  201.950720][ T5122] 
[  201.953043][ T5122] Allocated by task 5122:
[  201.957366][ T5122]  kasan_set_track+0x4b/0x70
[  201.961971][ T5122]  __kasan_kmalloc+0x97/0xb0
[  201.966563][ T5122]  udf_readdir+0xb78/0x2240
[  201.971074][ T5122]  iterate_dir+0x224/0x560
[  201.975490][ T5122]  __se_sys_getdents64+0x209/0x4f0
[  201.980619][ T5122]  do_syscall_64+0x3b/0xb0
[  201.985044][ T5122]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  201.990944][ T5122] 
[  201.993268][ T5122] Last potentially related work creation:
[  201.998978][ T5122]  kasan_save_stack+0x3b/0x60
[  202.003667][ T5122]  __kasan_record_aux_stack+0xb0/0xc0
[  202.009042][ T5122]  call_rcu+0x163/0xa10
[  202.013196][ T5122]  fib_release_info+0x61c/0x6e0
[  202.018059][ T5122]  fib_table_flush+0xcfe/0x13d0
[  202.022916][ T5122]  fib_netdev_event+0x3c2/0x730
[  202.027772][ T5122]  raw_notifier_call_chain+0xd0/0x170
[  202.033160][ T5122]  dev_close_many+0x37c/0x530
[  202.037838][ T5122]  unregister_netdevice_many+0x4f7/0x17a0
[  202.043565][ T5122]  default_device_exit_batch+0x956/0x9d0
[  202.049197][ T5122]  cleanup_net+0x763/0xb60
[  202.053648][ T5122]  process_one_work+0x8a9/0x11d0
[  202.058593][ T5122]  worker_thread+0xa47/0x1200
[  202.063273][ T5122]  kthread+0x28d/0x320
[  202.067342][ T5122]  ret_from_fork+0x1f/0x30
[  202.071788][ T5122] 
[  202.074136][ T5122] Second to last potentially related work creation:
[  202.080715][ T5122]  kasan_save_stack+0x3b/0x60
[  202.085400][ T5122]  __kasan_record_aux_stack+0xb0/0xc0
[  202.090806][ T5122]  kvfree_call_rcu+0x116/0x8c0
[  202.095574][ T5122]  drop_sysctl_table+0x317/0x460
[  202.100641][ T5122]  drop_sysctl_table+0x329/0x460
[  202.105582][ T5122]  unregister_sysctl_table+0x86/0x130
[  202.110958][ T5122]  neigh_sysctl_unregister+0x74/0x90
[  202.116251][ T5122]  inetdev_event+0x814/0x1490
[  202.120935][ T5122]  raw_notifier_call_chain+0xd0/0x170
[  202.126429][ T5122]  unregister_netdevice_many+0xebf/0x17a0
[  202.132181][ T5122]  ip_tunnel_delete_nets+0x2ed/0x330
[  202.137471][ T5122]  cleanup_net+0x763/0xb60
[  202.141894][ T5122]  process_one_work+0x8a9/0x11d0
[  202.146928][ T5122]  worker_thread+0xa47/0x1200
[  202.151623][ T5122]  kthread+0x28d/0x320
[  202.155780][ T5122]  ret_from_fork+0x1f/0x30
[  202.160205][ T5122] 
[  202.162530][ T5122] The buggy address belongs to the object at ffff88802b91c200
[  202.162530][ T5122]  which belongs to the cache kmalloc-256 of size 256
[  202.176671][ T5122] The buggy address is located 106 bytes inside of
[  202.176671][ T5122]  256-byte region [ffff88802b91c200, ffff88802b91c300)
[  202.189961][ T5122] 
[  202.192284][ T5122] The buggy address belongs to the physical page:
[  202.198702][ T5122] page:ffffea0000ae4700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b91c
[  202.208854][ T5122] head:ffffea0000ae4700 order:1 compound_mapcount:0 compound_pincount:0
[  202.217175][ T5122] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  202.225175][ T5122] raw: 00fff00000010200 ffffea0001f6e000 dead000000000002 ffff888017c41b40
[  202.233772][ T5122] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  202.242356][ T5122] page dumped because: kasan: bad access detected
[  202.248862][ T5122] page_owner tracks the page as allocated
[  202.254571][ T5122] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3638, tgid 3638 (syz-executor), ts 70777329874, free_ts 70764188967
[  202.275988][ T5122]  post_alloc_hook+0x18d/0x1b0
[  202.280787][ T5122]  get_page_from_freelist+0x322e/0x33b0
[  202.286336][ T5122]  __alloc_pages+0x28d/0x770
[  202.290929][ T5122]  alloc_slab_page+0x6a/0x150
[  202.295644][ T5122]  new_slab+0x84/0x2d0
[  202.299720][ T5122]  ___slab_alloc+0xc20/0x1270
[  202.304428][ T5122]  __kmem_cache_alloc_node+0x19f/0x260
[  202.309931][ T5122]  __kmalloc+0xa1/0x230
[  202.314094][ T5122]  __register_sysctl_table+0x9f1/0x11e0
[  202.319640][ T5122]  mpls_dev_sysctl_register+0x1ed/0x2d0
[  202.325200][ T5122]  mpls_dev_notify+0x24e/0x790
[  202.329994][ T5122]  raw_notifier_call_chain+0xd0/0x170
[  202.335370][ T5122]  call_netdevice_notifiers+0x145/0x1b0
[  202.340944][ T5122]  register_netdevice+0x12f2/0x1720
[  202.346151][ T5122]  __ip_tunnel_create+0x2b0/0x370
[  202.351179][ T5122]  ip_tunnel_init_net+0x21f/0x700
[  202.356205][ T5122] page last free stack trace:
[  202.360909][ T5122]  free_unref_page_prepare+0xf63/0x1120
[  202.366488][ T5122]  free_unref_page+0x33/0x3e0
[  202.371170][ T5122]  qlist_free_all+0x76/0xe0
[  202.375677][ T5122]  kasan_quarantine_reduce+0x156/0x170
[  202.381144][ T5122]  __kasan_slab_alloc+0x1f/0x70
[  202.385995][ T5122]  slab_post_alloc_hook+0x52/0x3a0
[  202.391113][ T5122]  __kmem_cache_alloc_node+0x137/0x260
[  202.396605][ T5122]  __kmalloc_node+0xa2/0x230
[  202.401199][ T5122]  kvmalloc_node+0x6e/0x180
[  202.405709][ T5122]  alloc_netdev_mqs+0x85/0xeb0
[  202.410479][ T5122]  __ip_tunnel_create+0x205/0x370
[  202.415514][ T5122]  ip_tunnel_init_net+0x21f/0x700
[  202.420627][ T5122]  vti_init_net+0x2a/0xf0
[  202.424960][ T5122]  ops_init+0x35d/0x610
[  202.429121][ T5122]  setup_net+0x4b5/0xb90
[  202.433370][ T5122]  copy_net_ns+0x392/0x5d0
[  202.437793][ T5122] 
[  202.440113][ T5122] Memory state around the buggy address:
[  202.445740][ T5122]  ffff88802b91c180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  202.453804][ T5122]  ffff88802b91c200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  202.461868][ T5122] >ffff88802b91c280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06
[  202.469927][ T5122]                                                                 ^
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  202.477900][ T5122]  ffff88802b91c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  202.485962][ T5122]  ffff88802b91c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  202.494042][ T5122] ==================================================================
[  202.512667][   T48] Bluetooth: hci3: Opcode 0x206c failed: -110
[  202.774266][ T5122] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  202.781612][ T5122] CPU: 0 PID: 5122 Comm: syz-executor Not tainted 6.1.111-syzkaller #0
[  202.789910][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  202.800000][ T5122] Call Trace:
[  202.803295][ T5122]  <TASK>
[  202.806241][ T5122]  dump_stack_lvl+0x1e3/0x2cb
[  202.810949][ T5122]  ? nf_tcp_handle_invalid+0x642/0x642
[  202.816530][ T5122]  ? panic+0x764/0x764
[  202.820629][ T5122]  ? preempt_schedule_common+0xa6/0xd0
[  202.826136][ T5122]  ? vscnprintf+0x59/0x80
[  202.830597][ T5122]  panic+0x318/0x764
[  202.834527][ T5122]  ? check_panic_on_warn+0x1d/0xa0
[  202.839666][ T5122]  ? memcpy_page_flushcache+0xfc/0xfc
[  202.845065][ T5122]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  202.851071][ T5122]  ? _raw_spin_unlock+0x40/0x40
[  202.855957][ T5122]  check_panic_on_warn+0x7e/0xa0
[  202.860925][ T5122]  ? udf_readdir+0xc5f/0x2240
[  202.865811][ T5122]  end_report+0x66/0x110
[  202.870076][ T5122]  kasan_report+0x143/0x160
[  202.874600][ T5122]  ? udf_readdir+0xc5f/0x2240
[  202.879314][ T5122]  kasan_check_range+0x27f/0x290
[  202.884276][ T5122]  ? udf_readdir+0xc5f/0x2240
[  202.888986][ T5122]  memcpy+0x3c/0x60
[  202.892827][ T5122]  udf_readdir+0xc5f/0x2240
[  202.897377][ T5122]  ? load_block_bitmap+0x520/0x520
[  202.902519][ T5122]  ? __might_sleep+0xb0/0xb0
[  202.907130][ T5122]  ? aa_file_perm+0x3e3/0xf60
[  202.911815][ T5122]  ? trace_raw_output_contention_end+0xd0/0xd0
[  202.917982][ T5122]  ? load_block_bitmap+0x520/0x520
[  202.923223][ T5122]  ? __fdget_pos+0x2ba/0x360
[  202.927842][ T5122]  ? end_current_label_crit_section+0x147/0x170
[  202.934117][ T5122]  ? common_file_perm+0x17d/0x1d0
[  202.939178][ T5122]  ? fsnotify_perm+0x439/0x590
[  202.943973][ T5122]  iterate_dir+0x224/0x560
[  202.948408][ T5122]  ? load_block_bitmap+0x520/0x520
[  202.953549][ T5122]  __se_sys_getdents64+0x209/0x4f0
[  202.958687][ T5122]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  202.964696][ T5122]  ? __x64_sys_getdents64+0x80/0x80
[  202.969901][ T5122]  ? filldir+0x6f0/0x6f0
[  202.974152][ T5122]  ? syscall_enter_from_user_mode+0x2e/0x230
[  202.980142][ T5122]  ? lockdep_hardirqs_on+0x94/0x130
[  202.985345][ T5122]  ? syscall_enter_from_user_mode+0x2e/0x230
[  202.991331][ T5122]  do_syscall_64+0x3b/0xb0
[  202.995757][ T5122]  ? clear_bhb_loop+0x45/0xa0
[  203.000444][ T5122]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  203.006348][ T5122] RIP: 0033:0x7f2f049b0093
[  203.010765][ T5122] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  203.030374][ T5122] RSP: 002b:00007fff70803a28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  203.038809][ T5122] RAX: ffffffffffffffda RBX: 00005555741f9600 RCX: 00007f2f049b0093
[  203.046803][ T5122] RDX: 0000000000008000 RSI: 00005555741f9600 RDI: 0000000000000005
[  203.054863][ T5122] RBP: 00005555741f95d4 R08: 0000000000000000 R09: 0000000000000000
[  203.062927][ T5122] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  203.070904][ T5122] R13: 0000000000000010 R14: 00005555741f95d0 R15: 00007fff70805cd0
[  203.078910][ T5122]  </TASK>
[  203.082249][ T5122] Kernel Offset: disabled
[  203.086577][ T5122] Rebooting in 86400 seconds..