last executing test programs:

5.980835483s ago: executing program 1 (id=970):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @local}, 0x3ff, 0x0, 0x2}}, 0x2e)

5.446508301s ago: executing program 1 (id=974):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/24)

3.75184171s ago: executing program 2 (id=986):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0)

3.461720832s ago: executing program 3 (id=989):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = dup(r0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000640)={0x1, 'bridge_slave_0\x00', 0xde6}, 0x18)

3.351905516s ago: executing program 2 (id=990):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
bind$packet(r0, &(0x7f00000001c0)={0x11, 0x6, r1, 0x1, 0xd, 0x6, @local}, 0x14)
close(0x3)

3.23556826s ago: executing program 1 (id=991):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0xfffffffc)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

3.067477104s ago: executing program 3 (id=994):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040), &(0x7f00000000c0)=""/198}, 0x20)

2.990537521s ago: executing program 2 (id=996):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.835430513s ago: executing program 1 (id=998):
r0 = io_uring_setup(0x25b4, &(0x7f00000002c0)={0x0, 0x1670, 0x400, 0x2, 0x170})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2.664114423s ago: executing program 3 (id=999):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000840)=0xa, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x10c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x102, 0xa, 0x0, 0x80, 0x2e}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)

2.559449709s ago: executing program 3 (id=1001):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xffdffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c)
dup3(r0, r1, 0x80000)

2.530865513s ago: executing program 3 (id=1002):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xa0142, 0xb0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x4030582b, &(0x7f0000000080)={@id={0x2, 0x0, @c}})

2.492042453s ago: executing program 2 (id=1003):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private0, @in=@remote, 0xfffc, 0x0, 0x0, 0x4, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x3, 0x0, 0x2, 0x0, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000)

2.44720343s ago: executing program 1 (id=1005):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002000010000000000000000000a0000000000000000000000140011"], 0x38}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}}, 0x0)

2.382394338s ago: executing program 5 (id=1006):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)

2.197206463s ago: executing program 4 (id=1007):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = socket(0x28, 0x801, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

2.103446899s ago: executing program 2 (id=1008):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000001821f10f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
getpid()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)

2.029639814s ago: executing program 5 (id=1010):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12)

2.029370457s ago: executing program 1 (id=1011):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="001e1400000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.882054246s ago: executing program 0 (id=1012):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x32}, 0x50)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000340)=@tcp=r1, 0x1}, 0x20)

1.830955557s ago: executing program 4 (id=1013):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r2, @ANYBLOB="040014000a000100000000000000000008000f0004"], 0x30}}, 0x0)

1.816726179s ago: executing program 5 (id=1014):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

1.65609586s ago: executing program 5 (id=1015):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0x2)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0xa2, 0xa, 0x0, 0x2001}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0})

1.595491692s ago: executing program 0 (id=1016):
r0 = io_uring_setup(0x265b, &(0x7f0000000340)={0x0, 0xe8e2, 0x1, 0x1fffe, 0x200002c6})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000400)=[{0x0}], 0x10d9)
r1 = io_uring_setup(0x407d, &(0x7f0000000500)={0x0, 0x3fbe, 0x890, 0x3, 0xef, 0x0, r0})
io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000280)=[r0], 0x1)

1.595254597s ago: executing program 4 (id=1017):
r0 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x24)
fcntl$notify(r0, 0x402, 0x0)

1.339745876s ago: executing program 0 (id=1018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)

1.339493921s ago: executing program 4 (id=1019):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @mss, @timestamp, @timestamp, @timestamp, @window, @sack_perm], 0x2132)

1.216874161s ago: executing program 5 (id=1020):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20)

1.022586956s ago: executing program 0 (id=1021):
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
keyctl$restrict_keyring(0x3, r0, 0x0, 0x0)
request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0)

1.021934193s ago: executing program 4 (id=1022):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000480)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@obj_user={'obj_user', 0x3d, '\x90\xbf\x81\xd2\x01Po\xb6\xc1\xb48+Q\xc9q\x85\xae\xe0\x10L\xa9a\r-O\xc8\x17\xa0)\xfcb\x04\xcc\x15X\xfb\\\xee(\x99\xbfjK\xdc\xcd\xa33\xc5B\xa3\xd7C1\xfbHgs\xe8\x03\xa2\x10\x97\xe6\xf7\x0fw\xf8\xa7\t\xea&b?\xc9T\xb6:\x9a\xcckB\xefX\xa0LWr\x0f*vW\xa9Fv Au\xa0g\xa5\f:(\xb3c\xa4[d\x8ex\x98J#\xb1L\x9eau\x87\xed\xdd\x8f{\x89\xd0\xad;\r\xc6`\xfc-\xa2\xee$hI\xbc0y-\x06\x1a\x1a)!\x8d\xbb\xd2\x904u\xd4+\xa8sna\xba\xb4\x1d\xe8gH\xa3\x02\xb0\xa9\xcb\xd9L\bDPv,\xef\x155\xf3\x7f\xd7\xea\x00\x00'}}, {@subj_user={'subj_user', 0x3d, '\xe3U\xa7j\x11\xa1\xbe\x18'}}, {@measure}, {@audit}], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000240)={@desc={0x1, 0x0, @desc1}})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

820.855383ms ago: executing program 5 (id=1023):
unshare(0x24020400)
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

684.26414ms ago: executing program 0 (id=1024):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'gre0\x00', 0xd4b7fee290057ae2})

194.649834ms ago: executing program 3 (id=1025):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
read(r0, &(0x7f0000000300)=""/250, 0xfa)
socket$xdp(0x2c, 0x3, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc000000000000800100000020000000040000000000000078581acb6cc5dcfa094eb3a410545b99935500ffffffff00000053", 0x48}], 0x1)

194.205357ms ago: executing program 4 (id=1026):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00"/28, @ANYRES8=r0], 0x30}}, 0x0)

140.490388ms ago: executing program 0 (id=1027):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x52, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x5, "20359d"}]}}}}}}}}, 0x0)

0s ago: executing program 2 (id=1028):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0)

kernel console output (not intermixed with test programs):

keymap rc-empty
[  133.647395][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.699663][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.724412][ T5839] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  133.755647][ T5839] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6
[  133.790142][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.833930][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.845186][ T5831] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  133.879805][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.940106][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  133.970329][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  134.138498][ T6763] loop4: detected capacity change from 0 to 128
[  134.346624][ T6763] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  134.359478][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  134.389471][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  134.409482][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  134.429448][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  134.481773][ T5839] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  134.532521][ T5839] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  134.563061][ T5839] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  134.652630][ T5839] usb 2-1: USB disconnect, device number 4
[  134.678073][ T6767] loop0: detected capacity change from 0 to 512
[  134.708161][ T6767] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  134.769786][ T6770] loop9: detected capacity change from 0 to 8
[  134.791249][ T6770] Dev loop9: unable to read RDB block 8
[  134.809365][ T6770]  loop9: unable to read partition table
[  134.829218][ T6770] loop9: partition table beyond EOD, truncated
[  134.850984][ T6770] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿÿ ) failed (rc=-5)
[  134.923306][ T6767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.017303][ T6767] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  135.213167][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.234382][ T6780] loop4: detected capacity change from 0 to 1024
[  135.261961][ T6780] EXT4-fs: Ignoring removed bh option
[  135.371002][ T6780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.470708][ T6780] EXT4-fs warning (device loop4): ext4_resize_begin:72: won't resize using backup superblock at 1
[  135.621274][ T6784] loop2: detected capacity change from 0 to 8192
[  135.682394][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.822209][ T6765] loop3: detected capacity change from 0 to 32768
[  135.914291][ T6765] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.028781][ T6765] XFS (loop3): Ending clean mount
[  136.103194][ T6765] XFS (loop3): Quotacheck needed: Please wait.
[  136.239719][ T6765] XFS (loop3): Quotacheck: Done.
[  136.547246][ T5826] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.869844][ T6782] loop1: detected capacity change from 0 to 32768
[  137.010524][ T6782] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  137.121255][ T6782] XFS (loop1): Ending clean mount
[  137.178278][ T6782] XFS (loop1): Quotacheck needed: Please wait.
[  137.256874][ T6782] XFS (loop1): Quotacheck: Done.
[  137.311650][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  137.314581][ T6800] loop4: detected capacity change from 0 to 32768
[  137.327463][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  137.427631][ T6800] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.680491][ T6831] loop0: detected capacity change from 0 to 2048
[  137.712091][ T6800] XFS (loop4): Ending clean mount
[  137.730902][ T5833] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  137.758646][ T6831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.760176][ T6800] XFS (loop4): Quotacheck needed: Please wait.
[  137.844259][ T6833] input: syz0 as /devices/virtual/input/input7
[  137.889735][ T6800] XFS (loop4): Quotacheck: Done.
[  137.983339][ T6819] loop2: detected capacity change from 0 to 40427
[  138.032638][ T6819] F2FS-fs (loop2): invalid crc value
[  138.212008][ T5828] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.414106][ T6819] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  138.477924][ T6819] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  138.808209][ T5831] syz-executor: attempt to access beyond end of device
[  138.808209][ T5831] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  138.877084][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  138.877123][ T5831] Tainted: [L]=SOFTLOCKUP
[  138.877133][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  138.877147][ T5831] Call Trace:
[  138.877156][ T5831]  <TASK>
[  138.877166][ T5831]  dump_stack_lvl+0xe8/0x150
[  138.877203][ T5831]  f2fs_handle_critical_error+0x37c/0x540
[  138.877241][ T5831]  f2fs_write_end_io+0xc1d/0xfd0
[  138.877291][ T5831]  __submit_merged_bio+0x256/0x650
[  138.877326][ T5831]  __submit_merged_write_cond+0x269/0x530
[  138.877361][ T5831]  f2fs_write_data_pages+0x2806/0x3360
[  138.877390][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.877456][ T5831]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  138.877502][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.877529][ T5831]  ? __lock_acquire+0x6b5/0x2cf0
[  138.877603][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.877631][ T5831]  ? __lock_acquire+0x6b5/0x2cf0
[  138.877681][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.877718][ T5831]  ? __lock_acquire+0x6b5/0x2cf0
[  138.877762][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.877790][ T5831]  ? do_raw_spin_lock+0x12b/0x2f0
[  138.877825][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.877857][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.877885][ T5831]  ? do_raw_spin_unlock+0xf5/0x210
[  138.877914][ T5831]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  138.877947][ T5831]  do_writepages+0x32e/0x550
[  138.877983][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.878014][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.878046][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.878074][ T5831]  ? do_raw_spin_unlock+0xf5/0x210
[  138.878108][ T5831]  filemap_fdatawrite+0x1e9/0x2f0
[  138.878148][ T5831]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  138.878225][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.878256][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.878289][ T5831]  ? do_raw_spin_unlock+0xf5/0x210
[  138.878323][ T5831]  f2fs_sync_dirty_inodes+0x30e/0x810
[  138.878374][ T5831]  f2fs_write_checkpoint+0x9c6/0x2490
[  138.878442][ T5831]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  138.878474][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.878563][ T5831]  kill_f2fs_super+0x308/0x710
[  138.878605][ T5831]  ? __pfx_kill_f2fs_super+0x10/0x10
[  138.878665][ T5831]  deactivate_locked_super+0xbc/0x130
[  138.878710][ T5831]  cleanup_mnt+0x437/0x4d0
[  138.878743][ T5831]  ? _raw_spin_unlock_irq+0x23/0x50
[  138.878787][ T5831]  task_work_run+0x1d9/0x270
[  138.878823][ T5831]  ? __pfx_task_work_run+0x10/0x10
[  138.878854][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.878892][ T5831]  exit_to_user_mode_loop+0xed/0x480
[  138.878927][ T5831]  ? srso_alias_return_thunk+0x5/0xfbef5
[  138.878954][ T5831]  ? rcu_is_watching+0x15/0xb0
[  138.878982][ T5831]  do_syscall_64+0x2b7/0xf80
[  138.879009][ T5831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.879032][ T5831]  ? trace_irq_disable+0x37/0x100
[  138.879064][ T5831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.879088][ T5831] RIP: 0033:0x7fd65e19c117
[  138.879109][ T5831] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  138.879129][ T5831] RSP: 002b:00007fff3edb1248 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  138.879153][ T5831] RAX: 0000000000000000 RBX: 00007fd65e20471f RCX: 00007fd65e19c117
[  138.879170][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3edb1300
[  138.879186][ T5831] RBP: 00007fff3edb1300 R08: 00007fff3edb2300 R09: 00000000ffffffff
[  138.879202][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff3edb2390
[  138.879218][ T5831] R13: 00007fd65e20471f R14: 0000000000021dae R15: 00007fff3edb23d0
[  138.879256][ T5831]  </TASK>
[  138.879266][ T5831] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  140.201494][ T6882] loop3: detected capacity change from 0 to 256
[  140.208752][ T6882] exfat: Deprecated parameter 'utf8'
[  140.255010][ T6882] exfat: Deprecated parameter 'utf8'
[  140.323182][ T6882] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  141.194436][ T6914] loop2: detected capacity change from 0 to 256
[  141.855814][ T6933] loop2: detected capacity change from 0 to 256
[  141.984228][ T6933] FAT-fs (loop2): Directory bread(block 64) failed
[  142.036737][ T6933] FAT-fs (loop2): Directory bread(block 65) failed
[  142.075809][ T6933] FAT-fs (loop2): Directory bread(block 66) failed
[  142.099500][ T6933] FAT-fs (loop2): Directory bread(block 67) failed
[  142.106134][ T6933] FAT-fs (loop2): Directory bread(block 68) failed
[  142.164855][ T6933] FAT-fs (loop2): Directory bread(block 69) failed
[  142.249536][ T6933] FAT-fs (loop2): Directory bread(block 70) failed
[  142.292690][ T6933] FAT-fs (loop2): Directory bread(block 71) failed
[  142.345400][ T6933] FAT-fs (loop2): Directory bread(block 72) failed
[  142.369429][   T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  142.400329][ T6933] FAT-fs (loop2): Directory bread(block 73) failed
[  142.539394][   T30] usb 1-1: Using ep0 maxpacket: 16
[  142.551770][   T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.589460][   T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.616551][   T30] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  142.649413][   T30] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  142.708705][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.700699][   T30] usb 1-1: config 0 descriptor??
[  143.721448][ T6965] loop5: detected capacity change from 0 to 128
[  143.876111][ T6965] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  143.985083][ T6965] hpfs: filesystem error: improperly stopped
[  144.050778][ T6965] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  144.136693][ T6965] hpfs: You really don't want any checks? You are crazy...
[  144.174281][ T6965] hpfs: hpfs_map_sector(): read error
[  144.214973][ T6965] hpfs: code page support is disabled
[  144.257820][ T6965] hpfs: hpfs_map_4sectors(): unaligned read
[  144.298310][ T6965] hpfs: hpfs_map_4sectors(): unaligned read
[  144.343054][ T6965] hpfs: filesystem error: unable to find root dir
[  144.748094][   T30] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input8
[  144.855849][   T30] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  144.906474][   T30] usb 1-1: USB disconnect, device number 3
[  145.365284][ T6961] loop1: detected capacity change from 0 to 32768
[  145.490126][ T6961] 
[  145.490126][ T6961]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.490126][ T6961] 
[  145.505046][ T6984] fido_id[6984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  145.634028][ T6991] loop5: detected capacity change from 0 to 128
[  145.690820][ T6961] 
[  145.690820][ T6961]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.690820][ T6961] 
[  145.729658][ T6961] 
[  145.729658][ T6961]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.729658][ T6961] 
[  145.750458][ T6991] FAT-fs (loop5): Directory bread(block 162) failed
[  145.780472][ T6991] FAT-fs (loop5): Directory bread(block 163) failed
[  145.792637][ T6961] 
[  145.792637][ T6961]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.792637][ T6961] 
[  145.820156][ T6991] FAT-fs (loop5): Directory bread(block 164) failed
[  145.849503][ T6991] FAT-fs (loop5): Directory bread(block 165) failed
[  145.873892][ T6961] 
[  145.873892][ T6961]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.873892][ T6961] 
[  145.880569][ T6991] FAT-fs (loop5): Directory bread(block 166) failed
[  145.915284][  T112] 
[  145.915284][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  145.915284][  T112] 
[  145.933880][ T6991] FAT-fs (loop5): Directory bread(block 167) failed
[  145.965619][ T6995] loop2: detected capacity change from 0 to 512
[  145.999444][ T6991] FAT-fs (loop5): Directory bread(block 168) failed
[  146.006116][ T6991] FAT-fs (loop5): Directory bread(block 169) failed
[  146.064428][ T6991] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  146.085945][ T6995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.189369][   T31] kauditd_printk_skb: 13 callbacks suppressed
[  146.189389][   T31] audit: type=1800 audit(1769741589.414:42): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.372" name="bus" dev="loop2" ino=18 res=0 errno=0
[  146.271547][ T6991] FAT-fs (loop5): Directory bread(block 162) failed
[  146.299926][ T6991] FAT-fs (loop5): Directory bread(block 163) failed
[  146.312366][ T7002] loop0: detected capacity change from 0 to 64
[  146.338738][ T6991] syz.5.370: attempt to access beyond end of device
[  146.338738][ T6991] loop5: rw=8388611, sector=226, nr_sectors = 6 limit=128
[  146.423832][ T6991] syz.5.370: attempt to access beyond end of device
[  146.423832][ T6991] loop5: rw=8390659, sector=232, nr_sectors = 2 limit=128
[  146.528431][ T5833] 
[  146.528431][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  146.528431][ T5833] 
[  146.580457][ T5833] 
[  146.580457][ T5833]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  146.580457][ T5833] 
[  146.715110][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.000310][ T7012] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280
[  147.135609][ T7018] loop3: detected capacity change from 0 to 64
[  147.528104][ T7024] loop5: detected capacity change from 0 to 32768
[  147.578845][ T7031] Zero length message leads to an empty skb
[  147.623484][ T7033] loop0: detected capacity change from 0 to 1024
[  147.633659][ T7024] JBD2: Ignoring recovery information on journal
[  147.723387][ T7024] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  147.750943][ T7033] EXT4-fs: Ignoring removed orlov option
[  147.766612][ T7024] OCFS2: ERROR (device loop5): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71
[  147.783472][ T7024] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  147.793456][ T7024] OCFS2: File system is now read-only.
[  147.798936][ T7024] (syz.5.385,7024,1):ocfs2_reserve_suballoc_bits:857 ERROR: status = -30
[  147.809907][ T7024] (syz.5.385,7024,1):ocfs2_reserve_cluster_bitmap_bits:1140 ERROR: status = -30
[  147.818996][ T7024] (syz.5.385,7024,1):ocfs2_reserve_clusters_with_limit:1209 ERROR: status = -30
[  147.820200][ T7033] EXT4-fs: Ignoring removed nomblk_io_submit option
[  147.828225][ T7024] (syz.5.385,7024,1):ocfs2_reserve_clusters_with_limit:1222 ERROR: status = -30
[  147.844103][ T7024] (syz.5.385,7024,1):ocfs2_block_group_alloc:680 ERROR: status = -30
[  147.852266][ T7024] (syz.5.385,7024,1):ocfs2_block_group_alloc:765 ERROR: status = -30
[  147.861225][ T7024] (syz.5.385,7024,1):ocfs2_reserve_suballoc_bits:840 ERROR: status = -30
[  147.869728][ T7024] (syz.5.385,7024,1):ocfs2_reserve_suballoc_bits:857 ERROR: status = -30
[  147.878155][ T7024] (syz.5.385,7024,1):ocfs2_reserve_new_metadata_blocks:997 ERROR: status = -30
[  147.887331][ T7024] (syz.5.385,7024,1):ocfs2_reserve_new_metadata_blocks:1020 ERROR: status = -30
[  147.896714][ T7024] (syz.5.385,7024,1):ocfs2_expand_inline_dir:2868 ERROR: status = -30
[  147.907214][ T7024] (syz.5.385,7024,1):ocfs2_extend_dir:3232 ERROR: status = -30
[  147.915079][ T7024] (syz.5.385,7024,1):ocfs2_prepare_dir_for_insert:4350 ERROR: status = -30
[  147.923731][ T7024] (syz.5.385,7024,1):ocfs2_mknod:302 ERROR: status = -30
[  147.930834][ T7024] (syz.5.385,7024,1):ocfs2_mknod:506 ERROR: status = -30
[  147.937873][ T7024] (syz.5.385,7024,1):ocfs2_create:679 ERROR: status = -30
[  148.043147][ T7024] syz.5.385 (7024) used greatest stack depth: 18040 bytes left
[  148.069893][ T7033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.345494][   T31] audit: type=1800 audit(1769741591.574:43): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.389" name="bus" dev="loop0" ino=19 res=0 errno=0
[  148.478536][ T5832] ocfs2: Unmounting device (7,5) on (node local)
[  148.556725][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.156825][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.066385][ T7057] loop0: detected capacity change from 0 to 32768
[  150.080144][ T7048] loop1: detected capacity change from 0 to 40427
[  150.124885][ T7057] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.397 (7057)
[  150.141750][ T7048] F2FS-fs (loop1): invalid crc value
[  150.190207][ T7057] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  150.240912][ T7057] BTRFS info (device loop0): using blake2b (blake2b-256-lib) checksum algorithm
[  150.525839][ T7048] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  150.592964][ T7057] BTRFS info (device loop0): enabling ssd optimizations
[  150.605742][ T7048] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  150.629523][ T7057] BTRFS info (device loop0): turning on async discard
[  150.636332][ T7057] BTRFS info (device loop0): enabling free space tree
[  150.683670][ T7057] BTRFS info (device loop0): use zstd compression, level 3
[  150.741646][ T7048] syz.1.394: attempt to access beyond end of device
[  150.741646][ T7048] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.781472][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz.1.394 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  150.781511][ T7048] Tainted: [L]=SOFTLOCKUP
[  150.781521][ T7048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  150.781535][ T7048] Call Trace:
[  150.781545][ T7048]  <TASK>
[  150.781556][ T7048]  dump_stack_lvl+0xe8/0x150
[  150.781595][ T7048]  f2fs_handle_critical_error+0x37c/0x540
[  150.781658][ T7048]  f2fs_write_end_io+0xc1d/0xfd0
[  150.781725][ T7048]  __submit_merged_bio+0x256/0x650
[  150.781763][ T7048]  __submit_merged_write_cond+0x269/0x530
[  150.781803][ T7048]  f2fs_write_data_pages+0x2806/0x3360
[  150.781834][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.781912][ T7048]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.781942][ T7048]  ? __lock_acquire+0x6b5/0x2cf0
[  150.781996][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.782024][ T7048]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.782099][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.782127][ T7048]  ? __lock_acquire+0x146e/0x2cf0
[  150.782198][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.782225][ T7048]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.782259][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.782292][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.782318][ T7048]  ? do_raw_spin_unlock+0xf5/0x210
[  150.782346][ T7048]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.782379][ T7048]  do_writepages+0x32e/0x550
[  150.782417][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.782448][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.782482][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.782508][ T7048]  ? do_raw_spin_unlock+0xf5/0x210
[  150.782540][ T7048]  filemap_fdatawrite+0x1e9/0x2f0
[  150.782579][ T7048]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  150.782660][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.782689][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.782728][ T7048]  ? do_raw_spin_unlock+0xf5/0x210
[  150.782762][ T7048]  f2fs_sync_dirty_inodes+0x30e/0x810
[  150.782815][ T7048]  f2fs_write_checkpoint+0x9c6/0x2490
[  150.782848][ T7048]  ? __pfx_stack_trace_save+0x10/0x10
[  150.782912][ T7048]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  150.782997][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.783024][ T7048]  ? down_write+0x16d/0x200
[  150.783054][ T7048]  ? __pfx_down_write+0x10/0x10
[  150.783099][ T7048]  f2fs_trim_fs+0xc02/0x1620
[  150.783148][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.783181][ T7048]  ? __pfx_f2fs_trim_fs+0x10/0x10
[  150.783233][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.783262][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.783288][ T7048]  ? sb_start_write+0x114/0x1c0
[  150.783324][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.783352][ T7048]  ? mnt_want_write_file+0x164/0x200
[  150.783391][ T7048]  __f2fs_ioctl+0x4e80/0xbba0
[  150.783452][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.783480][ T7048]  ? file_ioctl+0x273/0x860
[  150.783521][ T7048]  ? __pfx_file_ioctl+0x10/0x10
[  150.783579][ T7048]  ? kasan_quarantine_put+0xbb/0x1f0
[  150.783623][ T7048]  ? __pfx___f2fs_ioctl+0x10/0x10
[  150.783658][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.783691][ T7048]  ? tomoyo_path_number_perm+0x219/0x630
[  150.783729][ T7048]  ? tomoyo_path_number_perm+0x219/0x630
[  150.783761][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.783789][ T7048]  ? do_vfs_ioctl+0x1166/0x1530
[  150.783830][ T7048]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  150.783886][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.783913][ T7048]  ? do_futex+0x333/0x420
[  150.783948][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.784006][ T7048]  ? __fget_files+0x2a/0x420
[  150.784042][ T7048]  ? __fget_files+0x3a0/0x420
[  150.784069][ T7048]  ? __fget_files+0x2a/0x420
[  150.784100][ T7048]  ? srso_alias_return_thunk+0x5/0xfbef5
[  150.784128][ T7048]  ? f2fs_ioctl+0x135/0x250
[  150.784163][ T7048]  ? __pfx_f2fs_ioctl+0x10/0x10
[  150.784199][ T7048]  __se_sys_ioctl+0xfc/0x170
[  150.784240][ T7048]  do_syscall_64+0xe2/0xf80
[  150.784267][ T7048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.784290][ T7048]  ? trace_irq_disable+0x37/0x100
[  150.784323][ T7048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.784348][ T7048] RIP: 0033:0x7f666939aeb9
[  150.784370][ T7048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.784390][ T7048] RSP: 002b:00007f66675f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  150.784416][ T7048] RAX: ffffffffffffffda RBX: 00007f6669615fa0 RCX: 00007f666939aeb9
[  150.784434][ T7048] RDX: 0000200000000140 RSI: 00000000c0185879 RDI: 0000000000000005
[  150.784450][ T7048] RBP: 00007f6669408c1f R08: 0000000000000000 R09: 0000000000000000
[  150.784466][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.784480][ T7048] R13: 00007f6669616038 R14: 00007f6669615fa0 R15: 00007fffe497d178
[  150.784525][ T7048]  </TASK>
[  150.784534][ T7048] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  151.090225][   T31] audit: type=1800 audit(1769741594.174:44): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.397" name="file1" dev="loop0" ino=260 res=0 errno=0
[  151.413252][ T5827] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  151.739102][ T7128] loop2: detected capacity change from 0 to 16
[  151.757206][ T7128] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  152.311233][ T7112] loop5: detected capacity change from 0 to 32768
[  152.348335][ T7112] (syz.5.413,7112,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  152.411104][ T7112] (syz.5.413,7112,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  152.534220][ T7112] JBD2: Ignoring recovery information on journal
[  152.712650][ T7112] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  153.162869][ T7160] loop3: detected capacity change from 0 to 2048
[  153.200484][ T7160] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  153.240994][ T7160] NILFS (loop3): mounting unchecked fs
[  153.324004][ T5847] udevd[5847]: incorrect nilfs2 checksum on /dev/loop3
[  153.347300][ T5832] ocfs2: Unmounting device (7,5) on (node local)
[  153.362975][ T7160] NILFS (loop3): recovery complete
[  153.436260][ T7169] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.749179][ T7173] loop2: detected capacity change from 0 to 4096
[  154.097727][ T7185] loop4: detected capacity change from 0 to 512
[  154.274900][ T7185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.372245][ T7185] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.454652][ T7185] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:105: comm syz.4.445: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  154.582557][ T7200] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  154.722792][ T7207] loop2: detected capacity change from 0 to 1024
[  154.790328][ T7207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  154.804581][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.889622][ T7207] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.038177][ T7207] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.452: lblock 3 mapped to illegal pblock 3 (length 3)
[  155.119719][ T7218] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.452: bg 0: block 112: padding at end of block bitmap is not set
[  155.181525][ T7207] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  155.241291][ T7207] EXT4-fs (loop2): This should not happen!! Data will be lost
[  155.241291][ T7207] 
[  155.448733][   T12] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 5)
[  155.463860][ T7226] bond1: ARP target 9.0.0.0 is already present
[  155.490694][ T7226] bond1: option arp_ip_target: invalid value (9)
[  155.507582][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117
[  155.525599][ T7226] bond1 (unregistering): Released all slaves
[  155.557092][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  155.557092][   T12] 
[  155.572944][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  155.737839][ T7235] loop0: detected capacity change from 0 to 512
[  155.799073][ T7235] EXT4-fs: Ignoring removed i_version option
[  155.859481][ T7235] EXT4-fs: Ignoring removed nobh option
[  155.877093][ T7235] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  155.949796][ T7235] EXT4-fs (loop0): 1 truncate cleaned up
[  155.957272][ T7235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.006381][ T7220] loop5: detected capacity change from 0 to 32768
[  156.016917][ T7242] loop1: detected capacity change from 0 to 4096
[  156.167384][   T31] audit: type=1800 audit(1769741599.394:45): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.456" name="file3" dev="loop5" ino=5 res=0 errno=0
[  156.205718][ T7220] ERROR: (device loop5): dbAllocBits: leaf page corrupt
[  156.205718][ T7220] 
[  156.228305][ T7220] ERROR: (device loop5): remounting filesystem as read-only
[  156.261254][ T7220] syz.5.456: attempt to access beyond end of device
[  156.261254][ T7220] loop5: rw=34817, sector=4680704, nr_sectors = 776 limit=32768
[  156.273298][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.360582][ T7250] loop2: detected capacity change from 0 to 512
[  156.387074][  T111] blkno = 8ed80, nblocks = 61
[  156.406179][  T111] ERROR: (device loop5): dbFree: block to be freed is outside the map
[  156.406179][  T111] 
[  156.452737][ T7250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002]
[  156.502833][ T7250] System zones: 1-12
[  156.514278][ T7250] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.470: corrupted in-inode xattr: e_value size too large
[  156.611349][ T7256] sctp: [Deprecated]: syz.1.472 (pid 7256) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.611349][ T7256] Use struct sctp_sack_info instead
[  156.631810][ T7250] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.470: couldn't read orphan inode 15 (err -117)
[  156.690427][ T7250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.790366][ T7260] warning: `syz.3.473' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  156.818050][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.848921][ T7264] netlink: 44 bytes leftover after parsing attributes in process `syz.0.476'.
[  156.944039][ T7266] loop1: detected capacity change from 0 to 128
[  157.013005][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.479'.
[  157.052378][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'.
[  157.103109][ T7272] erspan0: entered promiscuous mode
[  157.110726][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.479'.
[  157.145771][ T7273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'.
[  157.418026][ T7279] netlink: 72 bytes leftover after parsing attributes in process `syz.3.483'.
[  157.484169][ T7284] loop4: detected capacity change from 0 to 256
[  157.889730][ T5839] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  158.086936][ T7304] loop3: detected capacity change from 0 to 512
[  158.119735][ T5839] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  158.134608][ T7304] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  158.159485][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.167492][ T5839] usb 6-1: Product: syz
[  158.218806][ T5839] usb 6-1: Manufacturer: syz
[  158.229108][ T5839] usb 6-1: SerialNumber: syz
[  158.231395][ T7304] EXT4-fs (loop3): 1 truncate cleaned up
[  158.258055][ T5839] usb 6-1: config 0 descriptor??
[  158.318108][ T7304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.487564][ T7315] netlink: 72 bytes leftover after parsing attributes in process `syz.4.498'.
[  158.530654][   T30] usb 6-1: USB disconnect, device number 5
[  158.556108][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.690259][ T6601] udevd[6601]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  158.717538][ T7318] loop1: detected capacity change from 0 to 512
[  158.728661][ T7320] loop4: detected capacity change from 0 to 128
[  158.812486][ T7318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.915749][ T7320] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  159.020940][ T7320] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  159.089099][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.126521][ T7329] loop2: detected capacity change from 0 to 4096
[  159.130070][ T7309] loop0: detected capacity change from 0 to 32768
[  159.147443][ T7329] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  159.157027][ T7320] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.501: checksumming directory block 0
[  159.267605][ T7309] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  159.283326][ T7329] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  159.392733][ T5828] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  159.402002][ T7309] XFS (loop0): Ending clean mount
[  159.433593][ T7309] XFS (loop0): Quotacheck needed: Please wait.
[  159.626437][ T7309] XFS (loop0): Quotacheck: Done.
[  159.889253][ T5827] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  160.021952][ T7351] loop3: detected capacity change from 0 to 4096
[  160.102937][ T7351] NILFS (loop3): invalid segment: Checksum error in segment payload
[  160.121445][ T7351] NILFS (loop3): trying rollback from an earlier position
[  160.179874][ T5906] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  160.214831][ T7351] NILFS (loop3): recovery complete
[  160.256742][ T7362] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.374680][ T5906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.422419][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  160.452089][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.499828][ T5906] usb 5-1: Product: syz
[  160.514319][ T5906] usb 5-1: Manufacturer: syz
[  160.518932][ T5906] usb 5-1: SerialNumber: syz
[  160.568726][ T5906] hub 5-1:1.0: bad descriptor, ignoring hub
[  160.586207][ T5906] hub 5-1:1.0: probe with driver hub failed with error -5
[  160.921443][ T7374] loop5: detected capacity change from 0 to 16
[  160.928738][ T7374] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  161.138955][ T5906] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[  161.203104][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'.
[  161.709764][ T5839] usb 5-1: USB disconnect, device number 3
[  161.758258][ T7361] loop1: detected capacity change from 0 to 32768
[  161.842763][ T7361] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  161.878042][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.530'.
[  161.977783][ T7413] program syz.2.532 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.987376][ T7361] XFS (loop1): Ending clean mount
[  162.014573][ T7361] XFS (loop1): Quotacheck needed: Please wait.
[  162.139193][ T7361] XFS (loop1): Quotacheck: Done.
[  162.194308][ T7420] syz.5.535 uses obsolete (PF_INET,SOCK_PACKET)
[  162.230779][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.535'.
[  162.250560][   T31] audit: type=1800 audit(1769741605.454:46): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="file2" dev="loop1" ino=4423 res=0 errno=0
[  162.482927][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'.
[  162.505602][ T7431] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0
[  162.575824][ T5833] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  162.738096][ T7441] loop2: detected capacity change from 0 to 2048
[  162.776210][ T7441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.211134][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.550'.
[  163.255440][ T7454] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  163.447910][ T7459] loop2: detected capacity change from 0 to 512
[  163.461487][ T7459] EXT4-fs: Ignoring removed orlov option
[  163.503389][ T7461] autofs4:pid:7461:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(951.8), cmd(0xc018937e)
[  163.534783][ T7459] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  163.552877][ T7461] autofs4:pid:7461:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[  163.605342][ T7459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  163.657297][ T7459] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.553: corrupted in-inode xattr: e_value size too large
[  163.768010][ T7444] loop3: detected capacity change from 0 to 32768
[  163.777934][ T7459] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.553: couldn't read orphan inode 15 (err -117)
[  163.824513][ T7444] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.545 (7444)
[  163.869851][ T7459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.899999][ T7444] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  163.946906][ T7444] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm
[  164.103490][ T7444] BTRFS info (device loop3): enabling ssd optimizations
[  164.105023][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.153368][ T7444] BTRFS info (device loop3): turning on async discard
[  164.185266][ T7444] BTRFS info (device loop3): enabling free space tree
[  164.196042][ T7445] loop4: detected capacity change from 0 to 40427
[  164.210194][ T7444] BTRFS info (device loop3): use lzo compression, level 1
[  164.235325][ T7444] BTRFS info (device loop3): max_inline set to 0
[  164.244440][ T7445] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  164.291678][ T7445] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  164.323030][ T7445] F2FS-fs (loop4): invalid crc value
[  164.709016][ T7497] loop0: detected capacity change from 0 to 128
[  164.716854][ T7445] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  164.761274][ T5826] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  164.782171][ T7445] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  164.830092][ T7445] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  164.993401][   T31] audit: type=1804 audit(1769741608.224:47): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.546" name="/newroot/89/file0/bus" dev="loop4" ino=10 res=1 errno=0
[  165.190962][ T7504] loop2: detected capacity change from 0 to 1024
[  165.470687][   T60] hfsplus: b-tree write err: -5, ino 4
[  165.500806][ T7490] loop5: detected capacity change from 0 to 32768
[  165.970272][ T7519] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.570'.
[  166.042792][ T7523] loop2: detected capacity change from 0 to 128
[  166.761008][ T7536] loop4: detected capacity change from 0 to 4096
[  166.816411][ T7536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.187293][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.268824][ T7529] loop2: detected capacity change from 0 to 32768
[  167.330697][ T7529] (syz.2.575,7529,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  167.419489][ T7529] (syz.2.575,7529,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  167.517704][ T7529] JBD2: Ignoring recovery information on journal
[  167.580380][ T7529] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  168.131957][ T5831] ocfs2: Unmounting device (7,2) on (node local)
[  168.581591][ T7581] serio: Serial port ttyS3
[  168.610652][ T5906] IPVS: starting estimator thread 0...
[  168.630995][ T7578] IPVS: sed: FWM 3 0x00000003 - no destination available
[  168.699866][ T7584] IPVS: using max 31 ests per chain, 74400 per kthread
[  168.846273][ T7590] loop1: detected capacity change from 0 to 128
[  168.941429][ T7590] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  168.959442][ T7590] hpfs: filesystem error: improperly stopped
[  168.983515][ T7590] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  169.002054][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'.
[  169.029438][ T7590] hpfs: You really don't want any checks? You are crazy...
[  169.047604][ T7590] hpfs: hpfs_map_sector(): read error
[  169.077936][ T7590] hpfs: code page support is disabled
[  169.126670][ T7590] hpfs: hpfs_map_4sectors(): unaligned read
[  169.144750][ T7590] hpfs: hpfs_map_4sectors(): unaligned read
[  169.165736][ T7590] hpfs: filesystem error: unable to find root dir
[  169.439858][ T7603] loop2: detected capacity change from 0 to 1024
[  169.471947][ T7603] EXT4-fs: Ignoring removed nomblk_io_submit option
[  169.542271][ T7603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.626236][ T7603] EXT4-fs (loop2): shut down requested (2)
[  169.634982][ T5929] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  169.746643][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.819798][ T5929] usb 5-1: Using ep0 maxpacket: 32
[  169.849056][ T5929] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  169.871492][ T5929] usb 5-1: config 0 has no interface number 0
[  169.899021][ T7619] loop3: detected capacity change from 0 to 512
[  169.902732][ T5929] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  169.937257][ T7619] EXT4-fs: Ignoring removed i_version option
[  169.962191][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.978696][ T7619] EXT4-fs: Ignoring removed nobh option
[  169.990954][ T5929] usb 5-1: Product: syz
[  169.995335][ T5929] usb 5-1: Manufacturer: syz
[  170.012852][ T5929] usb 5-1: SerialNumber: syz
[  170.038498][ T7619] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  170.038856][ T5929] usb 5-1: config 0 descriptor??
[  170.054691][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  170.082983][ T7619] EXT4-fs (loop3): 1 truncate cleaned up
[  170.143102][ T7619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.166198][ T5929] smsc95xx v2.0.0
[  170.209369][ T5929] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  170.250137][    T9] usb 2-1: Using ep0 maxpacket: 32
[  170.277677][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  170.285074][ T5929] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22
[  170.319431][    T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  170.359859][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.403335][    T9] usb 2-1: Product: syz
[  170.413991][    T9] usb 2-1: Manufacturer: syz
[  170.424192][    T9] usb 2-1: SerialNumber: syz
[  170.449159][ T7601] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  170.462806][    T9] usb 2-1: config 0 descriptor??
[  170.515092][   T30] usb 5-1: USB disconnect, device number 4
[  170.630780][ T7639] loop5: detected capacity change from 0 to 8
[  170.661189][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.680901][ T7639] SQUASHFS error: zlib decompression failed, data probably corrupt
[  170.699501][ T7639] SQUASHFS error: Failed to read block 0x9b: -5
[  170.724840][ T7639] SQUASHFS error: Unable to read metadata cache entry [99]
[  170.770693][ T7639] SQUASHFS error: Unable to read inode 0x127
[  170.927474][    T9] gs_usb 2-1:0.0: Configuring for 156 interfaces
[  171.081342][ T7651] netlink: 'syz.3.624': attribute type 7 has an invalid length.
[  171.250417][ T5920] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  171.341798][    T9] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  171.367158][    T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[  171.441462][ T5920] usb 6-1: Using ep0 maxpacket: 16
[  171.446769][    T9] usb 2-1: USB disconnect, device number 5
[  171.471325][ T5920] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  171.497957][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.528508][ T5920] usb 6-1: Product: syz
[  171.542494][ T5920] usb 6-1: Manufacturer: syz
[  171.552627][ T5920] usb 6-1: SerialNumber: syz
[  171.590079][ T7643] loop0: detected capacity change from 0 to 32768
[  171.599679][ T5920] usb 6-1: config 0 descriptor??
[  171.625534][ T5920] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  171.830124][ T5920] gp8psk: usb in 128 operation failed.
[  171.851988][ T5920] gp8psk: usb in 137 operation failed.
[  171.901803][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  171.946522][ T5920] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  171.992554][ T5920] usb 6-1: media controller created
[  172.088745][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  172.182276][ T5920] gp8psk_fe: Frontend revision 1 attached
[  172.188659][ T5920] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  172.222418][ T5920] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  172.467144][ T7678] loop1: detected capacity change from 0 to 64
[  172.491249][ T5920] gp8psk: usb in 138 operation failed.
[  172.512360][ T5920] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  172.548148][ T5920] gp8psk: found Genpix USB device pID = 201 (hex)
[  172.585234][ T5920] usb 6-1: USB disconnect, device number 6
[  172.905579][ T5920] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  173.048705][ T7698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'.
[  173.086182][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'.
[  173.122313][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'.
[  173.545875][ T7716] program syz.5.655 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  173.630073][ T5920] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  173.798071][ T5920] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  173.822874][ T5920] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  173.855537][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.908613][ T5920] gspca_main: stv0680-2.14.0 probing 041e:4007
[  173.947856][ T7727] loop0: detected capacity change from 0 to 512
[  174.055753][ T7729] option changes via remount are deprecated (pid=7728 comm=syz.5.661)
[  174.108667][ T7729] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 ""
[  174.395678][ T7735] loop1: detected capacity change from 0 to 4096
[  174.411119][ T7735] EXT4-fs: Ignoring removed mblk_io_submit option
[  174.441759][ T7735] EXT4-fs (loop1): Test dummy encryption mode enabled
[  174.492052][ T7735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.624502][ T7735] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  174.712511][ T7747] loop3: detected capacity change from 0 to 1024
[  174.717685][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.778041][ T7747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.912281][   T31] audit: type=1800 audit(1769741618.144:48): pid=7747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.669" name="file1" dev="loop3" ino=15 res=0 errno=0
[  175.009545][ T5920] stv0680 3-1:4.0: Could not get descriptor 0200
[  175.106252][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.170101][ T7760] netlink: 20 bytes leftover after parsing attributes in process `syz.5.675'.
[  175.213399][ T5920] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  175.257088][ T5920] stv0680 3-1:4.0: last error: 2,  command = 0x30
[  175.279241][ T7764] loop1: detected capacity change from 0 to 16
[  175.291109][ T5920] usb 3-1: USB disconnect, device number 5
[  175.322061][ T7764] erofs (device loop1): mounted with root inode @ nid 36.
[  175.423485][ T7740] loop0: detected capacity change from 0 to 32768
[  175.433486][ T7764] erofs (device loop1): readahead error at folio 232 @ nid 36
[  175.481790][ T7764] erofs (device loop1): readahead error at folio 231 @ nid 36
[  175.527123][ T7740] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.536602][ T7764] erofs (device loop1): readahead error at folio 230 @ nid 36
[  175.558161][ T7764] erofs (device loop1): readahead error at folio 205 @ nid 36
[  175.610623][ T7764] erofs (device loop1): readahead error at folio 204 @ nid 36
[  175.651280][ T7764] erofs (device loop1): readahead error at folio 203 @ nid 36
[  175.679473][ T7764] erofs (device loop1): readahead error at folio 202 @ nid 36
[  175.697523][ T7764] erofs (device loop1): readahead error at folio 201 @ nid 36
[  175.719405][ T7764] erofs (device loop1): readahead error at folio 200 @ nid 36
[  175.768101][ T7764] erofs (device loop1): readahead error at folio 197 @ nid 36
[  175.805295][ T7764] erofs (device loop1): readahead error at folio 196 @ nid 36
[  175.841546][ T7764] erofs (device loop1): readahead error at folio 195 @ nid 36
[  175.871999][ T7764] erofs (device loop1): readahead error at folio 194 @ nid 36
[  175.902448][ T7764] erofs (device loop1): readahead error at folio 193 @ nid 36
[  175.943043][ T7764] erofs (device loop1): readahead error at folio 192 @ nid 36
[  175.983685][ T7764] erofs (device loop1): readahead error at folio 191 @ nid 36
[  176.022158][ T7764] erofs (device loop1): readahead error at folio 190 @ nid 36
[  176.058429][ T7764] erofs (device loop1): readahead error at folio 189 @ nid 36
[  176.110453][ T7764] erofs (device loop1): readahead error at folio 188 @ nid 36
[  176.118256][ T7764] erofs (device loop1): readahead error at folio 180 @ nid 36
[  176.197554][ T7764] erofs (device loop1): readahead error at folio 179 @ nid 36
[  176.232920][ T7764] erofs (device loop1): readahead error at folio 178 @ nid 36
[  176.242595][ T7782] netlink: 'syz.2.680': attribute type 2 has an invalid length.
[  176.268774][ T7764] erofs (device loop1): readahead error at folio 177 @ nid 36
[  176.299207][ T7764] erofs (device loop1): readahead error at folio 176 @ nid 36
[  176.330025][ T7764] erofs (device loop1): readahead error at folio 175 @ nid 36
[  176.337542][ T7764] erofs (device loop1): readahead error at folio 174 @ nid 36
[  176.356602][ T7762] loop4: detected capacity change from 0 to 32768
[  176.405812][ T7764] erofs (device loop1): readahead error at folio 173 @ nid 36
[  176.439872][ T7764] erofs (device loop1): readahead error at folio 172 @ nid 36
[  176.467835][ T7764] erofs (device loop1): readahead error at folio 171 @ nid 36
[  176.493051][ T7764] erofs (device loop1): readahead error at folio 170 @ nid 36
[  176.520233][ T7764] erofs (device loop1): readahead error at folio 169 @ nid 36
[  176.548904][ T7764] erofs (device loop1): readahead error at folio 168 @ nid 36
[  176.569156][ T7764] erofs (device loop1): readahead error at folio 167 @ nid 36
[  176.598801][ T7764] erofs (device loop1): readahead error at folio 166 @ nid 36
[  176.619043][ T7764] erofs (device loop1): readahead error at folio 165 @ nid 36
[  176.632585][ T7784] loop2: detected capacity change from 0 to 4096
[  176.684725][ T7740] XFS (loop0): Ending clean mount
[  176.691741][ T7764] erofs (device loop1): readahead error at folio 164 @ nid 36
[  176.699261][ T7764] erofs (device loop1): readahead error at folio 163 @ nid 36
[  176.703111][ T7773] loop5: detected capacity change from 0 to 32768
[  176.731755][ T7784] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  176.756666][ T7740] XFS (loop0): Quotacheck needed: Please wait.
[  176.768037][ T7764] erofs (device loop1): readahead error at folio 162 @ nid 36
[  176.782785][ T7764] erofs (device loop1): readahead error at folio 161 @ nid 36
[  176.782953][ T7778] loop3: detected capacity change from 0 to 131072
[  176.791225][ T7764] erofs (device loop1): readahead error at folio 160 @ nid 36
[  176.791278][ T7764] erofs (device loop1): readahead error at folio 159 @ nid 36
[  176.791318][ T7764] erofs (device loop1): readahead error at folio 158 @ nid 36
[  176.791344][ T7764] erofs (device loop1): readahead error at folio 157 @ nid 36
[  176.791367][ T7764] erofs (device loop1): readahead error at folio 156 @ nid 36
[  176.791404][ T7764] erofs (device loop1): readahead error at folio 155 @ nid 36
[  176.791444][ T7764] erofs (device loop1): readahead error at folio 154 @ nid 36
[  176.791474][ T7764] erofs (device loop1): readahead error at folio 153 @ nid 36
[  176.791506][ T7764] erofs (device loop1): readahead error at folio 152 @ nid 36
[  176.791661][ T7764] erofs (device loop1): readahead error at folio 149 @ nid 36
[  176.791704][ T7764] erofs (device loop1): readahead error at folio 148 @ nid 36
[  176.791729][ T7764] erofs (device loop1): readahead error at folio 147 @ nid 36
[  176.791753][ T7764] erofs (device loop1): readahead error at folio 146 @ nid 36
[  176.791792][ T7764] erofs (device loop1): readahead error at folio 145 @ nid 36
[  176.791823][ T7764] erofs (device loop1): readahead error at folio 144 @ nid 36
[  176.791849][ T7764] erofs (device loop1): readahead error at folio 143 @ nid 36
[  176.791872][ T7764] erofs (device loop1): readahead error at folio 142 @ nid 36
[  176.791896][ T7764] erofs (device loop1): readahead error at folio 141 @ nid 36
[  176.791922][ T7764] erofs (device loop1): readahead error at folio 140 @ nid 36
[  176.791960][ T7764] erofs (device loop1): readahead error at folio 139 @ nid 36
[  176.791991][ T7764] erofs (device loop1): readahead error at folio 138 @ nid 36
[  176.792014][ T7764] erofs (device loop1): readahead error at folio 137 @ nid 36
[  176.792036][ T7764] erofs (device loop1): readahead error at folio 136 @ nid 36
[  176.792066][ T7764] erofs (device loop1): readahead error at folio 135 @ nid 36
[  176.792092][ T7764] erofs (device loop1): readahead error at folio 134 @ nid 36
[  176.792114][ T7764] erofs (device loop1): readahead error at folio 133 @ nid 36
[  176.792137][ T7764] erofs (device loop1): readahead error at folio 132 @ nid 36
[  176.792171][ T7764] erofs (device loop1): readahead error at folio 131 @ nid 36
[  176.792194][ T7764] erofs (device loop1): readahead error at folio 130 @ nid 36
[  176.792225][ T7764] erofs (device loop1): readahead error at folio 129 @ nid 36
[  176.792247][ T7764] erofs (device loop1): readahead error at folio 128 @ nid 36
[  176.793900][ T7764] erofs (device loop1): readahead error at folio 92 @ nid 36
[  176.826481][ T7778] F2FS-fs (loop3): invalid crc value
[  176.852989][ T7764] erofs (device loop1): readahead error at folio 91 @ nid 36
[  177.061474][ T7764] erofs (device loop1): readahead error at folio 90 @ nid 36
[  177.102319][ T7764] erofs (device loop1): readahead error at folio 89 @ nid 36
[  177.184413][ T7764] erofs (device loop1): readahead error at folio 88 @ nid 36
[  177.201673][ T7778] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  177.226056][ T7778] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  177.228197][ T7773] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.254816][ T7778] F2FS-fs (loop3): f2fs_lookup: inode (ino=4) has zero i_nlink
[  177.297352][ T7764] erofs (device loop1): readahead error at folio 77 @ nid 36
[  177.302577][ T7740] XFS (loop0): Quotacheck: Done.
[  177.319701][ T7764] erofs (device loop1): readahead error at folio 76 @ nid 36
[  177.348109][ T7764] erofs (device loop1): readahead error at folio 75 @ nid 36
[  177.368693][ T7773] XFS (loop5): Ending clean mount
[  177.429950][ T7773] XFS (loop5): Quotacheck needed: Please wait.
[  177.447017][ T5827] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.459408][ T7764] erofs (device loop1): readahead error at folio 74 @ nid 36
[  177.473491][ T7764] erofs (device loop1): readahead error at folio 73 @ nid 36
[  177.528686][ T7764] erofs (device loop1): readahead error at folio 72 @ nid 36
[  177.541595][ T7773] XFS (loop5): Quotacheck: Done.
[  177.570872][ T7764] erofs (device loop1): readahead error at folio 69 @ nid 36
[  177.578274][ T7764] erofs (device loop1): readahead error at folio 68 @ nid 36
[  177.623605][ T7764] erofs (device loop1): readahead error at folio 67 @ nid 36
[  177.679434][ T7764] erofs (device loop1): readahead error at folio 66 @ nid 36
[  177.727135][ T7764] erofs (device loop1): readahead error at folio 65 @ nid 36
[  177.753101][ T5832] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.800326][ T7764] erofs (device loop1): readahead error at folio 64 @ nid 36
[  177.851348][ T7764] erofs (device loop1): readahead error at folio 63 @ nid 36
[  177.858780][ T7764] erofs (device loop1): readahead error at folio 62 @ nid 36
[  177.899219][ T7764] erofs (device loop1): readahead error at folio 61 @ nid 36
[  177.979689][ T7764] erofs (device loop1): readahead error at folio 60 @ nid 36
[  178.019031][ T7764] erofs (device loop1): readahead error at folio 59 @ nid 36
[  178.065980][ T7764] erofs (device loop1): readahead error at folio 58 @ nid 36
[  178.066875][ T7803] loop4: detected capacity change from 0 to 512
[  178.109259][ T7764] erofs (device loop1): readahead error at folio 57 @ nid 36
[  178.118684][ T7764] erofs (device loop1): readahead error at folio 56 @ nid 36
[  178.192317][ T7803] EXT4-fs: Ignoring removed bh option
[  178.192665][ T7764] erofs (device loop1): readahead error at folio 40 @ nid 36
[  178.242079][ T7803] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  178.259695][ T7764] erofs (device loop1): readahead error at folio 39 @ nid 36
[  178.299702][ T7764] erofs (device loop1): readahead error at folio 38 @ nid 36
[  178.333744][ T7764] erofs (device loop1): readahead error at folio 37 @ nid 36
[  178.364611][ T7803] EXT4-fs (loop4): 1 truncate cleaned up
[  178.371870][ T7764] erofs (device loop1): readahead error at folio 36 @ nid 36
[  178.433000][ T7803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.439496][ T7764] erofs (device loop1): readahead error at folio 35 @ nid 36
[  178.474253][ T7803] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.685: invalid indirect mapped block 4294901760 (level 0)
[  178.503959][ T7764] erofs (device loop1): readahead error at folio 34 @ nid 36
[  178.570723][ T7764] erofs (device loop1): readahead error at folio 33 @ nid 36
[  178.609549][ T7803] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.685: invalid indirect mapped block 4294967295 (level 1)
[  178.637107][ T7764] erofs (device loop1): readahead error at folio 32 @ nid 36
[  178.679211][ T7764] erofs (device loop1): readahead error at folio 31 @ nid 36
[  178.694563][ T7764] erofs (device loop1): readahead error at folio 30 @ nid 36
[  178.743908][ T7764] erofs (device loop1): readahead error at folio 29 @ nid 36
[  178.781401][ T7764] erofs (device loop1): readahead error at folio 28 @ nid 36
[  178.837262][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.837833][ T7764] erofs (device loop1): readahead error at folio 27 @ nid 36
[  178.850574][ T7818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  178.919074][ T7818] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.955922][ T7764] erofs (device loop1): readahead error at folio 26 @ nid 36
[  178.992125][ T5906] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  179.009744][ T7764] erofs (device loop1): readahead error at folio 25 @ nid 36
[  179.017824][ T7764] erofs (device loop1): readahead error at folio 24 @ nid 36
[  179.025556][ T7764] erofs (device loop1): readahead error at folio 23 @ nid 36
[  179.035960][ T7764] erofs (device loop1): readahead error at folio 22 @ nid 36
[  179.089135][ T7764] erofs (device loop1): readahead error at folio 19 @ nid 36
[  179.098978][ T7764] erofs (device loop1): readahead error at folio 18 @ nid 36
[  179.126816][ T7764] erofs (device loop1): readahead error at folio 17 @ nid 36
[  179.171071][ T7764] erofs (device loop1): readahead error at folio 16 @ nid 36
[  179.193224][ T5906] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  179.210372][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.218480][ T7764] erofs (device loop1): readahead error at folio 15 @ nid 36
[  179.246736][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  179.256066][ T7764] erofs (device loop1): readahead error at folio 14 @ nid 36
[  179.274156][ T5906] usb 3-1: config 0 descriptor??
[  179.289073][ T7764] erofs (device loop1): readahead error at folio 13 @ nid 36
[  179.304168][ T5906] cp210x 3-1:0.0: cp210x converter detected
[  179.320287][ T7764] erofs (device loop1): readahead error at folio 12 @ nid 36
[  179.354368][ T7764] erofs (device loop1): readahead error at folio 11 @ nid 36
[  179.420069][ T7764] erofs (device loop1): readahead error at folio 10 @ nid 36
[  179.428129][ T7764] erofs (device loop1): readahead error at folio 9 @ nid 36
[  179.479365][ T7764] erofs (device loop1): readahead error at folio 8 @ nid 36
[  179.486715][ T7764] erofs (device loop1): readahead error at folio 7 @ nid 36
[  179.549880][ T7764] erofs (device loop1): readahead error at folio 6 @ nid 36
[  179.557315][ T7764] erofs (device loop1): readahead error at folio 5 @ nid 36
[  179.598763][ T7764] erofs (device loop1): readahead error at folio 4 @ nid 36
[  179.637470][ T7764] erofs (device loop1): readahead error at folio 3 @ nid 36
[  179.666912][ T7764] erofs (device loop1): readahead error at folio 2 @ nid 36
[  179.713853][ T7764] erofs (device loop1): readahead error at folio 1 @ nid 36
[  179.727702][ T5906] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  179.729508][ T7764] erofs (device loop1): readahead error at folio 0 @ nid 36
[  179.787993][ T5906] usb 3-1: cp210x converter now attached to ttyUSB0
[  179.803577][ T7764] syz.1.676: attempt to access beyond end of device
[  179.803577][ T7764] loop1: rw=524288, sector=67108872, nr_sectors = 8 limit=16
[  179.867925][ T7764] syz.1.676: attempt to access beyond end of device
[  179.867925][ T7764] loop1: rw=524288, sector=13478624032, nr_sectors = 16 limit=16
[  179.941015][ T7764] syz.1.676: attempt to access beyond end of device
[  179.941015][ T7764] loop1: rw=524288, sector=14550774152, nr_sectors = 16 limit=16
[  179.983089][   T24] usb 3-1: USB disconnect, device number 6
[  179.999862][ T7764] syz.1.676: attempt to access beyond end of device
[  179.999862][ T7764] loop1: rw=524288, sector=13716630376, nr_sectors = 16 limit=16
[  180.025772][ T7764] syz.1.676: attempt to access beyond end of device
[  180.025772][ T7764] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16
[  180.032889][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  180.053891][ T7764] syz.1.676: attempt to access beyond end of device
[  180.053891][ T7764] loop1: rw=524288, sector=6495626064, nr_sectors = 16 limit=16
[  180.122567][ T7764] syz.1.676: attempt to access beyond end of device
[  180.122567][ T7764] loop1: rw=524288, sector=400, nr_sectors = 16 limit=16
[  180.172118][   T24] cp210x 3-1:0.0: device disconnected
[  180.188432][ T7764] syz.1.676: attempt to access beyond end of device
[  180.188432][ T7764] loop1: rw=524288, sector=32, nr_sectors = 16 limit=16
[  180.218128][ T7764] syz.1.676: attempt to access beyond end of device
[  180.218128][ T7764] loop1: rw=524288, sector=16240345096, nr_sectors = 8 limit=16
[  180.253296][ T7764] syz.1.676: attempt to access beyond end of device
[  180.253296][ T7764] loop1: rw=524288, sector=13612835600, nr_sectors = 16 limit=16
[  180.396236][ T7858] set_capacity_and_notify: 2 callbacks suppressed
[  180.396257][ T7858] loop3: detected capacity change from 0 to 256
[  180.460729][ T7858] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[  180.746130][ T7864] loop5: detected capacity change from 0 to 4096
[  180.818618][ T7870] loop0: detected capacity change from 0 to 512
[  180.851447][ T7870] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  180.905466][ T7870] EXT4-fs (loop0): 1 truncate cleaned up
[  180.997711][ T7870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.313547][ T7886] netem: incorrect ge model size
[  181.359461][ T7886] netem: change failed
[  181.559618][ T5920] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  181.647627][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.772272][ T5920] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  181.809415][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.850425][ T5920] usb 6-1: config 0 descriptor??
[  182.000358][ T7907] loop2: detected capacity change from 0 to 1024
[  182.142430][ T7907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.356505][ T7922] netlink: 165 bytes leftover after parsing attributes in process `syz.1.735'.
[  182.386975][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.634951][ T7930] loop0: detected capacity change from 0 to 1024
[  182.680365][ T5920] usb 6-1: Cannot set autoneg
[  182.695660][ T5920] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  182.730509][ T7930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.744360][ T5920] usb 6-1: USB disconnect, device number 7
[  182.892778][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.929986][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  183.067585][ T7946] loop3: detected capacity change from 0 to 512
[  183.084478][   T24] usb 3-1: Using ep0 maxpacket: 32
[  183.103091][   T24] usb 3-1: config 32 has an invalid interface number: 85 but max is 0
[  183.128771][   T24] usb 3-1: config 32 has no interface number 0
[  183.159224][   T24] usb 3-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  183.178586][   T24] usb 3-1: config 32 interface 85 has no altsetting 0
[  183.250923][   T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  183.281588][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.316623][   T24] usb 3-1: Product: syz
[  183.329425][   T24] usb 3-1: Manufacturer: syz
[  183.351009][   T24] usb 3-1: SerialNumber: syz
[  183.603687][ T7956] loop0: detected capacity change from 0 to 4096
[  183.648180][ T7964] loop5: detected capacity change from 0 to 256
[  183.661334][ T7956] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  183.743545][ T7956] ntfs3(loop0): ino=1a, mi_enum_attr
[  183.748922][ T7956] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  183.755897][ T7964] FAT-fs (loop5): Directory bread(block 64) failed
[  183.793428][ T7964] FAT-fs (loop5): Directory bread(block 65) failed
[  183.820376][ T7964] FAT-fs (loop5): Directory bread(block 66) failed
[  183.839831][ T7964] FAT-fs (loop5): Directory bread(block 67) failed
[  183.861130][ T7964] FAT-fs (loop5): Directory bread(block 68) failed
[  183.877979][ T7964] FAT-fs (loop5): Directory bread(block 69) failed
[  183.900046][ T7964] FAT-fs (loop5): Directory bread(block 70) failed
[  183.916961][ T7964] FAT-fs (loop5): Directory bread(block 71) failed
[  183.969585][ T7964] FAT-fs (loop5): Directory bread(block 72) failed
[  183.976212][ T7964] FAT-fs (loop5): Directory bread(block 73) failed
[  184.090326][ T5906] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  184.135670][   T24] appletouch 3-1:32.85: Geyser mode initialized.
[  184.167030][   T24] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:32.85/input/input9
[  184.243139][    C0] appletouch 3-1:32.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  184.289666][ T5906] usb 2-1: Using ep0 maxpacket: 16
[  184.306728][ T5906] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  184.342654][ T5906] usb 2-1: config 0 has no interface number 0
[  184.399401][ T5906] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  184.446267][ T5839] usb 3-1: USB disconnect, device number 7
[  184.475000][ T5906] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  184.531331][ T5906] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  184.571899][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  184.601159][ T5839] appletouch 3-1:32.85: input: appletouch disconnected
[  184.609754][ T5906] usb 2-1: Product: syz
[  184.613922][ T5906] usb 2-1: SerialNumber: syz
[  184.700846][ T5906] usb 2-1: config 0 descriptor??
[  184.752229][ T5906] cm109 2-1:0.8: invalid payload size 0, expected 4
[  184.800139][ T5906] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input10
[  185.006179][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  185.015417][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  185.022569][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  185.029742][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  185.036872][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  185.044088][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  185.051351][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  185.058755][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  185.066375][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  185.074745][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  185.095797][ T5906] usb 2-1: USB disconnect, device number 6
[  185.101707][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  185.443154][ T8016] loop2: detected capacity change from 0 to 512
[  185.489424][ T8016] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  185.533369][ T8016] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.769: invalid indirect mapped block 4294967295 (level 0)
[  185.604305][ T8016] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.769: invalid indirect mapped block 4294967295 (level 1)
[  185.622791][ T8016] EXT4-fs (loop2): 1 orphan inode deleted
[  185.629478][ T8016] EXT4-fs (loop2): 1 truncate cleaned up
[  185.710387][ T8016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.998574][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.012218][ T5906] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  186.145155][ T8030] loop1: detected capacity change from 0 to 128
[  186.361312][ T8034] netlink: 64 bytes leftover after parsing attributes in process `syz.2.772'.
[  186.371179][ T8040] loop3: detected capacity change from 0 to 256
[  186.396727][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'.
[  186.530429][ T8040] FAT-fs (loop3): Directory bread(block 64) failed
[  186.587171][ T8038] loop4: detected capacity change from 0 to 4096
[  186.596028][ T8040] FAT-fs (loop3): Directory bread(block 65) failed
[  186.637823][ T8040] FAT-fs (loop3): Directory bread(block 66) failed
[  186.678313][ T8040] FAT-fs (loop3): Directory bread(block 67) failed
[  186.758354][ T8040] FAT-fs (loop3): Directory bread(block 68) failed
[  186.854467][ T8040] FAT-fs (loop3): Directory bread(block 69) failed
[  186.913593][ T8040] FAT-fs (loop3): Directory bread(block 70) failed
[  186.991209][ T8040] FAT-fs (loop3): Directory bread(block 71) failed
[  187.087545][ T8040] FAT-fs (loop3): Directory bread(block 72) failed
[  187.113445][ T8018] loop5: detected capacity change from 0 to 32768
[  187.135249][ T8049] netlink: 88 bytes leftover after parsing attributes in process `syz.2.779'.
[  187.152220][ T8040] FAT-fs (loop3): Directory bread(block 73) failed
[  187.253356][ T8049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.779'.
[  187.297865][ T8018] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.423979][ T8040] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  187.482925][ T8040] FAT-fs (loop3): Filesystem has been set read-only
[  187.624615][ T8018] XFS (loop5): Ending clean mount
[  187.653665][ T8044] loop1: detected capacity change from 0 to 131072
[  187.671014][ T8044] F2FS-fs (loop1): Test dummy encryption mode enabled
[  187.680628][ T8044] F2FS-fs (loop1): invalid crc value
[  187.740315][ T8018] XFS (loop5): Quotacheck needed: Please wait.
[  187.804624][ T8044] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  187.817694][ T8044] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  187.931683][ T8066] ntfs3(loop4): ino=5, "/" indx_read
[  187.945507][ T8018] XFS (loop5): Quotacheck: Done.
[  187.990106][ T8066] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  188.059972][   T31] audit: type=1800 audit(1769741631.294:49): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.770" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  188.148053][   T31] audit: type=1800 audit(1769741631.324:50): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.770" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  188.259633][   T24] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  188.366159][ T5832] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.432224][   T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  188.465495][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  188.518096][   T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  188.544536][   T24] usb 3-1: New USB device strings: Mfr=49, Product=228, SerialNumber=2
[  188.570702][   T24] usb 3-1: Product: syz
[  188.589382][   T24] usb 3-1: Manufacturer: syz
[  188.599472][   T24] usb 3-1: SerialNumber: syz
[  188.625525][   T24] usb 3-1: config 0 descriptor??
[  188.644148][   T24] usb 3-1: selecting invalid altsetting 0
[  188.749375][ T5839] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  188.940994][ T5839] usb 5-1: Using ep0 maxpacket: 16
[  188.949854][   T24] usb 3-1: USB disconnect, device number 8
[  188.958898][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.973672][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.984457][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  189.007660][ T5839] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  189.034976][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.062296][ T5839] usb 5-1: config 0 descriptor??
[  189.517668][ T5839] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  189.585293][ T5839] microsoft 0003:045E:07DA.0004: no inputs found
[  189.612315][ T5839] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway
[  189.715079][ T5920] usb 5-1: USB disconnect, device number 5
[  189.804691][ T8097] fido_id[8097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  189.970374][ T8107] loop3: detected capacity change from 0 to 256
[  189.995060][ T8107] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  190.015245][ T8103] loop5: detected capacity change from 0 to 4096
[  190.108068][   T31] audit: type=1800 audit(1769741633.334:51): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.796" name="file1" dev="loop3" ino=1048642 res=0 errno=0
[  190.197930][   T31] audit: type=1800 audit(1769741633.374:52): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.796" name="file1" dev="loop3" ino=1048642 res=0 errno=0
[  190.513860][ T8119] loop4: detected capacity change from 0 to 16
[  190.558658][ T8119] erofs (device loop4): mounted with root inode @ nid 36.
[  190.613105][ T8119] erofs (device loop4): failed to decompress (lz4) -117 @ pa 1416 size 1 => 3560
[  190.680790][ T8119] erofs (device loop4): read error -117 @ 80 of nid 36
[  190.703584][ T8119] erofs (device loop4): failed to readdir of logical block 80 of nid 36
[  190.798020][ T8107] FAT-fs (loop3): error, corrupted file size (i_pos 202, 16779008)
[  190.829791][ T8107] FAT-fs (loop3): Filesystem has been set read-only
[  190.836473][ T8107] FAT-fs (loop3): error, corrupted file size (i_pos 202, 16779008)
[  190.946301][ T8128] loop5: detected capacity change from 0 to 64
[  191.148254][ T8133] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  191.551609][ T8149] loop0: detected capacity change from 0 to 64
[  191.637441][ T8150] loop2: detected capacity change from 0 to 2048
[  191.682419][ T8153] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.711869][ T8153] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  191.744423][ T8153] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  191.778945][ T8153] Remounting filesystem read-only
[  192.199479][ T5839] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  192.324716][ T8170] loop1: detected capacity change from 0 to 2048
[  192.381720][ T5839] usb 1-1: Using ep0 maxpacket: 16
[  192.389413][ T5839] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  192.390057][ T8170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.409491][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  192.426832][ T5839] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  192.437215][ T5839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.446609][ T5839] usb 1-1: Product: syz
[  192.450943][ T5839] usb 1-1: Manufacturer: syz
[  192.455547][ T5839] usb 1-1: SerialNumber: syz
[  192.465724][ T5839] usb 1-1: config 0 descriptor??
[  192.479062][ T5839] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  192.488434][ T5839] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  192.514566][ T8170] EXT4-fs error (device loop1): ext4_find_extent:903: inode #2: comm syz.1.823: inode has invalid extent depth: 9
[  192.533406][ T8170] EXT4-fs (loop1): Remounting filesystem read-only
[  192.631662][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.923736][ T8189] loop2: detected capacity change from 0 to 1024
[  192.937702][ T8189] EXT4-fs: Ignoring removed nomblk_io_submit option
[  192.992357][ T8189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.049405][ T5906] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  193.103633][ T5839] em28xx 1-1:0.0: chip ID is em28174
[  193.203735][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.224345][ T5906] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  193.267542][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.290391][ T5906] usb 5-1: config 0 descriptor??
[  193.309708][ T5839] usb 1-1: USB disconnect, device number 4
[  193.316958][ T5839] em28xx 1-1:0.0: Disconnecting em28xx
[  193.363043][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.378076][ T5839] em28xx 1-1:0.0: Freeing device
[  193.397253][ T8202] Bluetooth: MGMT ver 1.23
[  193.842625][ T8208] process 'syz.3.840' launched './file1' with NULL argv: empty string added
[  193.902795][ T5944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.919806][ T5906] razer 0003:1532:010E.0005: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0
[  194.132851][ T5906] usb 5-1: USB disconnect, device number 6
[  194.181686][ T5944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.404399][ T5944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.772637][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  194.781984][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  194.790775][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  194.798931][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  194.810020][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  194.936652][ T8217] loop3: detected capacity change from 0 to 65536
[  194.971362][ T5906] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  195.022358][ T8217] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  195.056027][ T8217] XFS (loop3): Ending clean mount
[  195.067417][ T8217] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x1a9/0x1590, inode 0x26 dinode
[  195.078195][ T8217] XFS (loop3): Unmount and run xfs_repair
[  195.084040][ T8217] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  195.091557][ T8217] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  195.100496][ T8217] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  195.110698][ T8217] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[  195.119609][ T8217] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 00 0a  4.Xhz.DM........
[  195.128464][ T8217] 00000040: 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  195.139503][ T8217] 00000050: 00 00 25 01 00 00 00 00 00 00 00 00 38 7c 45 d7  ..%.........8|E.
[  195.148460][ T8217] 00000060: ff ff ff ff da a2 56 a4 00 00 00 00 00 00 00 08  ......V.........
[  195.157462][ T8217] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  195.187994][ T5906] usb 1-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00
[  195.219051][ T8235] program syz.1.846 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  195.249667][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.274357][ T5944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.289957][ T5839] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  195.308444][ T5906] usb 1-1: config 0 descriptor??
[  195.318017][ T5826] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  195.547912][ T5839] usb 5-1: unable to get BOS descriptor or descriptor too short
[  195.569626][ T5906] usbhid 1-1:0.0: can't add hid device: -71
[  195.579788][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  195.581087][ T5839] usb 5-1: not running at top speed; connect to a high speed hub
[  195.613329][ T5906] usb 1-1: USB disconnect, device number 5
[  195.651404][ T5839] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.682183][ T5839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.743881][ T5839] usb 5-1: string descriptor 0 read error: -22
[  195.758882][ T5839] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  195.792195][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.829952][ T5839] usb 5-1: 0:2 : does not exist
[  195.869554][ T5920] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  195.926398][ T8246] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  196.062058][ T5920] usb 2-1: Using ep0 maxpacket: 16
[  196.124513][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0
[  196.144471][ T8251] netlink: 100 bytes leftover after parsing attributes in process `syz.3.848'.
[  196.160571][ T5920] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  196.180511][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.205599][ T5944] bridge_slave_1: left allmulticast mode
[  196.220863][ T5920] usb 2-1: config 0 descriptor??
[  196.227635][ T5944] bridge_slave_1: left promiscuous mode
[  196.261617][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.353356][ T5944] bridge_slave_0: left allmulticast mode
[  196.379484][ T5944] bridge_slave_0: left promiscuous mode
[  196.397985][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.628518][ T8270] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  196.636508][ T8270] IPv6: NLM_F_CREATE should be set when creating new route
[  196.672260][ T5920] hid (null): unknown global tag 0xe
[  196.704794][ T5839] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  196.713250][ T5920] hid (null): unknown global tag 0xd
[  196.718610][ T5920] hid (null): unknown global tag 0xd
[  196.759618][ T5920] hid (null): unknown global tag 0xc
[  196.769189][ T5920] hid (null): report_id 14868 is invalid
[  196.778856][ T5839] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  196.827116][ T5920] hid (null): unknown global tag 0xc
[  196.875069][ T5839] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  196.887951][ T5920] usb 2-1: USB disconnect, device number 7
[  196.908274][ T5838] Bluetooth: hci2: command tx timeout
[  196.912969][ T5839] usb 5-1: USB disconnect, device number 7
[  197.189805][ T8282] loop2: detected capacity change from 0 to 128
[  197.401020][ T8278] loop0: detected capacity change from 0 to 32768
[  197.429802][ T8282] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  197.469434][ T8282] hpfs: filesystem error: improperly stopped
[  197.472569][ T8278] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  197.475454][ T8282] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  197.475491][ T8282] hpfs: You really don't want any checks? You are crazy...
[  197.488110][ T8282] hpfs: hpfs_map_sector(): read error
[  197.491898][ T8278] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  197.539958][ T8282] hpfs: code page support is disabled
[  197.565370][ T8282] hpfs: hpfs_map_4sectors(): unaligned read
[  197.577398][ T8278] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  197.589750][ T5906] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  197.598145][ T5906] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  197.616373][ T8292] loop4: detected capacity change from 0 to 1024
[  197.635892][ T8282] hpfs: hpfs_map_4sectors(): unaligned read
[  197.646602][ T5906] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 48ms
[  197.661617][ T5906] gfs2: fsid=syz:syz.0: jid=0: Done
[  197.685185][ T8282] hpfs: filesystem error: unable to find root dir
[  197.694211][ T8278] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  197.799852][ T8278] gfs2: fsid=syz:syz.0: found 1 quota changes
[  197.853356][ T8292] hfsplus: bad catalog entry type
[  198.131304][ T5933] hfsplus: b-tree write err: -5, ino 4
[  198.204162][ T5827] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402
[  198.254203][ T5827] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  198.300913][ T5827] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5827 [syz-executor] gfs2_quota_sync+0x370/0x470
[  198.363637][ T5827] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  198.376501][ T8305] loop3: detected capacity change from 0 to 2048
[  198.408788][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  198.408827][ T5827] Tainted: [L]=SOFTLOCKUP
[  198.408837][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  198.408852][ T5827] Call Trace:
[  198.408862][ T5827]  <TASK>
[  198.408873][ T5827]  dump_stack_lvl+0xe8/0x150
[  198.408909][ T5827]  gfs2_withdraw+0xc3/0x1b0
[  198.408940][ T5827]  inode_go_instantiate+0xdd8/0x1220
[  198.408964][ T5827]  ? __pfx_bit_wait+0x10/0x10
[  198.409007][ T5827]  ? __pfx_bit_wait+0x10/0x10
[  198.409033][ T5827]  ? __pfx_inode_go_instantiate+0x10/0x10
[  198.409062][ T5827]  ? __pfx_wake_bit_function+0x10/0x10
[  198.409100][ T5827]  gfs2_instantiate+0x168/0x220
[  198.409132][ T5827]  gfs2_glock_wait+0x1d4/0x2a0
[  198.409165][ T5827]  do_sync+0x49a/0xcb0
[  198.409197][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.409227][ T5827]  ? _raw_spin_unlock+0x28/0x50
[  198.409267][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.409295][ T5827]  ? gfs2_quota_sync+0x370/0x470
[  198.409341][ T5827]  ? __pfx_do_sync+0x10/0x10
[  198.409386][ T5827]  ? gfs2_quota_sync+0x370/0x470
[  198.409422][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.409456][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.409483][ T5827]  ? do_raw_spin_unlock+0xf5/0x210
[  198.409517][ T5827]  gfs2_quota_sync+0x370/0x470
[  198.409565][ T5827]  gfs2_sync_fs+0x4c/0xb0
[  198.409600][ T5827]  sync_filesystem+0xee/0x230
[  198.409635][ T5827]  generic_shutdown_super+0x6f/0x2c0
[  198.409675][ T5827]  kill_block_super+0x44/0x90
[  198.409713][ T5827]  deactivate_locked_super+0xbc/0x130
[  198.409749][ T5827]  cleanup_mnt+0x437/0x4d0
[  198.409781][ T5827]  ? _raw_spin_unlock_irq+0x23/0x50
[  198.409825][ T5827]  task_work_run+0x1d9/0x270
[  198.409862][ T5827]  ? __pfx_task_work_run+0x10/0x10
[  198.409893][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.409933][ T5827]  exit_to_user_mode_loop+0xed/0x480
[  198.409974][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  198.410002][ T5827]  ? rcu_is_watching+0x15/0xb0
[  198.410031][ T5827]  do_syscall_64+0x2b7/0xf80
[  198.410057][ T5827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.410081][ T5827]  ? trace_irq_disable+0x37/0x100
[  198.410111][ T5827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.410135][ T5827] RIP: 0033:0x7fc84219c117
[  198.410157][ T5827] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  198.410177][ T5827] RSP: 002b:00007ffd806cb0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  198.410202][ T5827] RAX: 0000000000000000 RBX: 00007fc84220471f RCX: 00007fc84219c117
[  198.410220][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd806cb180
[  198.410235][ T5827] RBP: 00007ffd806cb180 R08: 00007ffd806cc180 R09: 00000000ffffffff
[  198.410253][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd806cc210
[  198.410269][ T5827] R13: 00007fc84220471f R14: 00000000000304e6 R15: 00007ffd806cc250
[  198.410307][ T5827]  </TASK>
[  198.447894][ T8311] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.728847][ T5827] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  198.793262][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  198.801325][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  198.991814][ T5838] Bluetooth: hci2: command tx timeout
[  199.176865][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.203289][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.222075][ T8317] loop3: detected capacity change from 0 to 256
[  199.222100][ T5944] bond0 (unregistering): Released all slaves
[  199.256213][ T8317] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  199.733737][ T8333] loop2: detected capacity change from 0 to 128
[  199.744379][ T8334] program syz.1.879 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  199.760665][ T8333] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  199.792666][ T8333] hpfs: filesystem error: improperly stopped
[  199.795279][ T8328] loop3: detected capacity change from 0 to 2048
[  199.814116][ T8333] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  199.854707][ T8333] hpfs: You really don't want any checks? You are crazy...
[  199.889830][ T8333] hpfs: hpfs_map_sector(): read error
[  199.895262][ T8333] hpfs: code page support is disabled
[  199.926437][ T6601]  loop3: p1 < > p4
[  199.941618][ T8333] hpfs: hpfs_map_4sectors(): unaligned read
[  199.948234][ T8333] hpfs: hpfs_map_4sectors(): unaligned read
[  199.958447][ T8333] hpfs: filesystem error: unable to find root dir
[  199.971533][ T8333] hpfs: hpfs_map_4sectors(): unaligned read
[  199.979234][ T8333] hpfs: hpfs_map_sector(): read error
[  199.985169][ T8333] hpfs: hpfs_map_sector(): read error
[  200.006748][ T6601] loop3: p4 size 722688 extends beyond EOD, truncated
[  200.019022][ T8340] loop1: detected capacity change from 0 to 512
[  200.031769][ T8340] EXT4-fs: Ignoring removed oldalloc option
[  200.046135][ T8340] EXT4-fs (loop1): 1 truncate cleaned up
[  200.098209][ T8220] chnl_net:caif_netlink_parms(): no params data found
[  200.154909][ T8340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.205666][ T8328]  loop3: p1 < > p4
[  200.218873][ T8328] loop3: p4 size 722688 extends beyond EOD, truncated
[  200.259951][   T31] audit: type=1800 audit(1769741643.474:53): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.884" name="file0" dev="loop1" ino=13 res=0 errno=0
[  200.414828][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.532850][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  200.539503][ T8360] loop3: detected capacity change from 0 to 128
[  200.570593][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  200.783711][ T5847] udevd[5847]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  200.817346][ T5837] udevd[5837]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  201.062272][ T5838] Bluetooth: hci2: command tx timeout
[  201.096139][ T8375] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  201.106871][ T8375] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  201.233462][ T5944] hsr_slave_0: left promiscuous mode
[  201.311560][ T5944] hsr_slave_1: left promiscuous mode
[  201.332597][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.351512][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.386881][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.429609][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.515653][ T5944] veth1_macvtap: left promiscuous mode
[  201.529648][ T5944] veth0_macvtap: left promiscuous mode
[  201.542298][ T5944] veth1_vlan: left promiscuous mode
[  201.547872][ T5944] veth0_vlan: left promiscuous mode
[  201.796761][ T8362] loop1: detected capacity change from 0 to 40427
[  201.849473][ T8362] F2FS-fs (loop1): Image doesn't support compression
[  201.871427][ T8362] F2FS-fs (loop1): build fault injection rate: 690
[  201.888641][ T8362] F2FS-fs (loop1): invalid crc value
[  202.009666][ T8362] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  202.025914][ T8362] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  202.039463][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  202.062043][   T31] audit: type=1800 audit(1769741645.294:54): pid=8362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.889" name="file1" dev="loop1" ino=10 res=0 errno=0
[  202.126437][ T5833] bio_check_eod: 9 callbacks suppressed
[  202.126455][ T5833] syz-executor: attempt to access beyond end of device
[  202.126455][ T5833] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  202.160543][ T5833] CPU: 0 UID: 0 PID: 5833 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  202.160582][ T5833] Tainted: [L]=SOFTLOCKUP
[  202.160591][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  202.160606][ T5833] Call Trace:
[  202.160615][ T5833]  <TASK>
[  202.160625][ T5833]  dump_stack_lvl+0xe8/0x150
[  202.160664][ T5833]  f2fs_handle_critical_error+0x37c/0x540
[  202.160705][ T5833]  f2fs_write_end_io+0xc1d/0xfd0
[  202.160761][ T5833]  __submit_merged_bio+0x256/0x650
[  202.160799][ T5833]  __submit_merged_write_cond+0x269/0x530
[  202.160838][ T5833]  f2fs_write_data_pages+0x2806/0x3360
[  202.160868][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.160953][ T5833]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  202.160983][ T5833]  ? __lock_acquire+0x6b5/0x2cf0
[  202.161045][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161073][ T5833]  ? do_raw_spin_lock+0x12b/0x2f0
[  202.161139][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161167][ T5833]  ? do_raw_spin_unlock+0xf5/0x210
[  202.161200][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161229][ T5833]  ? __lock_acquire+0x6b5/0x2cf0
[  202.161284][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161313][ T5833]  ? __lock_acquire+0x6b5/0x2cf0
[  202.161361][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161390][ T5833]  ? do_raw_spin_lock+0x12b/0x2f0
[  202.161427][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161461][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161489][ T5833]  ? do_raw_spin_unlock+0xf5/0x210
[  202.161519][ T5833]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  202.161554][ T5833]  do_writepages+0x32e/0x550
[  202.161593][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161641][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161675][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161704][ T5833]  ? do_raw_spin_unlock+0xf5/0x210
[  202.161740][ T5833]  filemap_fdatawrite+0x1e9/0x2f0
[  202.161781][ T5833]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  202.161870][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161902][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.161937][ T5833]  ? do_raw_spin_unlock+0xf5/0x210
[  202.161973][ T5833]  f2fs_sync_dirty_inodes+0x30e/0x810
[  202.162035][ T5833]  f2fs_write_checkpoint+0x9c6/0x2490
[  202.162119][ T5833]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  202.162155][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.162261][ T5833]  kill_f2fs_super+0x308/0x710
[  202.162306][ T5833]  ? __pfx_kill_f2fs_super+0x10/0x10
[  202.162383][ T5833]  deactivate_locked_super+0xbc/0x130
[  202.162426][ T5833]  cleanup_mnt+0x437/0x4d0
[  202.162463][ T5833]  ? _raw_spin_unlock_irq+0x23/0x50
[  202.162513][ T5833]  task_work_run+0x1d9/0x270
[  202.162550][ T5833]  ? __pfx_task_work_run+0x10/0x10
[  202.162582][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.162625][ T5833]  exit_to_user_mode_loop+0xed/0x480
[  202.162660][ T5833]  ? srso_alias_return_thunk+0x5/0xfbef5
[  202.162688][ T5833]  ? rcu_is_watching+0x15/0xb0
[  202.162718][ T5833]  do_syscall_64+0x2b7/0xf80
[  202.162746][ T5833]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.162769][ T5833]  ? trace_irq_disable+0x37/0x100
[  202.162801][ T5833]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.162826][ T5833] RIP: 0033:0x7f666939c117
[  202.162849][ T5833] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  202.162869][ T5833] RSP: 002b:00007fffe497c3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  202.162895][ T5833] RAX: 0000000000000000 RBX: 00007f666940471f RCX: 00007f666939c117
[  202.162912][ T5833] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe497c4a0
[  202.162928][ T5833] RBP: 00007fffe497c4a0 R08: 00007fffe497d4a0 R09: 00000000ffffffff
[  202.162946][ T5833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe497d530
[  202.162962][ T5833] R13: 00007f666940471f R14: 0000000000031549 R15: 00007fffe497d570
[  202.163012][ T5833]  </TASK>
[  202.180519][ T5833] F2FS-fs (loop1): Remounting filesystem read-only
[  202.209745][    T9] usb 5-1: Using ep0 maxpacket: 8
[  202.576877][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  202.588244][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  202.598323][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  202.608624][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  202.622394][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  202.631714][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.902076][    T9] usb 5-1: GET_CAPABILITIES returned 0
[  202.908327][    T9] usbtmc 5-1:16.0: can't read capabilities
[  203.027275][ T5944] team0 (unregistering): Port device team_slave_1 removed
[  203.112753][ T5944] team0 (unregistering): Port device team_slave_0 removed
[  203.140941][ T5838] Bluetooth: hci2: command tx timeout
[  203.193028][    T9] usb 5-1: USB disconnect, device number 8
[  203.762690][ T8421] loop1: detected capacity change from 0 to 128
[  203.802847][ T8421] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  203.821326][ T8421] System zones: 1-3, 19-19, 35-36
[  203.853974][ T8421] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  203.862316][ T5827] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 564
[  203.895243][ T8421] ext4 filesystem being mounted at /127/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  203.907988][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  203.908024][ T5827] Tainted: [L]=SOFTLOCKUP
[  203.908034][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  203.908049][ T5827] Call Trace:
[  203.908063][ T5827]  <TASK>
[  203.908073][ T5827]  dump_stack_lvl+0xe8/0x150
[  203.908112][ T5827]  gfs2_assert_warn_i+0x194/0x2c0
[  203.908152][ T5827]  gfs2_make_fs_ro+0x30d/0x320
[  203.908188][ T5827]  ? __pfx_gfs2_make_fs_ro+0x10/0x10
[  203.908219][ T5827]  ? do_raw_spin_lock+0x12b/0x2f0
[  203.908250][ T5827]  ? __pfx_autoremove_wake_function+0x10/0x10
[  203.908282][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.908315][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.908350][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.908380][ T5827]  ? do_raw_spin_unlock+0xf5/0x210
[  203.908417][ T5827]  gfs2_put_super+0x220/0x860
[  203.908458][ T5827]  ? __pfx_gfs2_put_super+0x10/0x10
[  203.908491][ T5827]  generic_shutdown_super+0x135/0x2c0
[  203.908532][ T5827]  kill_block_super+0x44/0x90
[  203.908573][ T5827]  deactivate_locked_super+0xbc/0x130
[  203.908611][ T5827]  cleanup_mnt+0x437/0x4d0
[  203.908646][ T5827]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.908694][ T5827]  task_work_run+0x1d9/0x270
[  203.908731][ T5827]  ? __pfx_task_work_run+0x10/0x10
[  203.908773][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.908814][ T5827]  exit_to_user_mode_loop+0xed/0x480
[  203.908852][ T5827]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.908882][ T5827]  ? rcu_is_watching+0x15/0xb0
[  203.908912][ T5827]  do_syscall_64+0x2b7/0xf80
[  203.908940][ T5827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.908965][ T5827]  ? trace_irq_disable+0x37/0x100
[  203.908998][ T5827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.909024][ T5827] RIP: 0033:0x7fc84219c117
[  203.909047][ T5827] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  203.909069][ T5827] RSP: 002b:00007ffd806cb0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  203.909095][ T5827] RAX: 0000000000000000 RBX: 00007fc84220471f RCX: 00007fc84219c117
[  203.909113][ T5827] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd806cb180
[  203.909129][ T5827] RBP: 00007ffd806cb180 R08: 00007ffd806cc180 R09: 00000000ffffffff
[  203.909148][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd806cc210
[  203.909165][ T5827] R13: 00007fc84220471f R14: 00000000000304e6 R15: 00007ffd806cc250
[  203.909207][ T5827]  </TASK>
[  204.236895][ T8386] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  204.242183][ T5833] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  204.250501][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'.
[  204.250651][ T8425] netlink: 28 bytes leftover after parsing attributes in process `syz.4.912'.
[  204.308036][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.339891][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.347186][ T8220] bridge_slave_0: entered allmulticast mode
[  204.371374][ T8220] bridge_slave_0: entered promiscuous mode
[  204.472188][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.510104][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.517351][ T8220] bridge_slave_1: entered allmulticast mode
[  204.572664][ T8220] bridge_slave_1: entered promiscuous mode
[  204.775465][ T8220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.841830][ T8220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.879511][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  204.951095][ T8440] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  205.025998][ T8220] team0: Port device team_slave_0 added
[  205.068097][ T8220] team0: Port device team_slave_1 added
[  205.088883][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.126104][    T9] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  205.166864][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.202665][    T9] usb 4-1: config 0 descriptor??
[  205.393728][ T8220] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.410834][ T8220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.500982][ T8455] netlink: 332 bytes leftover after parsing attributes in process `syz.0.922'.
[  205.505114][ T8220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.575812][ T8220] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.609480][ T8220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  205.672184][    T9] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0
[  205.692388][    T9] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0
[  205.721786][    T9] dragonrise 0003:0079:0006.0007: unknown main item tag 0x0
[  205.729138][    T9] dragonrise 0003:0079:0006.0007: unexpected long global item
[  205.739466][ T8220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.773337][    T9] dragonrise 0003:0079:0006.0007: parse failed
[  205.806441][    T9] dragonrise 0003:0079:0006.0007: probe with driver dragonrise failed with error -22
[  205.843490][ T8463] program syz.0.923 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.874609][    T9] usb 4-1: USB disconnect, device number 3
[  205.888353][ T8462] loop2: detected capacity change from 0 to 1024
[  206.047760][ T8220] hsr_slave_0: entered promiscuous mode
[  206.089087][   T13] hfsplus: b-tree write err: -5, ino 4
[  206.092015][ T8220] hsr_slave_1: entered promiscuous mode
[  206.294404][ T8472] loop1: detected capacity change from 0 to 128
[  206.374296][ T8472] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  206.441304][ T8447] loop4: detected capacity change from 0 to 32768
[  206.512772][ T8447] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.666786][ T8447] XFS (loop4): Ending clean mount
[  206.890856][ T5828] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  206.993669][ T8494] loop1: detected capacity change from 0 to 256
[  207.145127][ T8494] FAT-fs (loop1): Directory bread(block 64) failed
[  207.196648][ T8494] FAT-fs (loop1): Directory bread(block 65) failed
[  207.203750][ T8499] loop2: detected capacity change from 0 to 512
[  207.245034][ T8499] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.935: corrupted in-inode xattr: invalid ea_ino
[  207.279838][ T8499] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.935: couldn't read orphan inode 15 (err -117)
[  207.309781][ T8494] FAT-fs (loop1): Directory bread(block 66) failed
[  207.317967][ T8494] FAT-fs (loop1): Directory bread(block 67) failed
[  207.324697][ T8494] FAT-fs (loop1): Directory bread(block 68) failed
[  207.334720][ T8494] FAT-fs (loop1): Directory bread(block 69) failed
[  207.344102][ T8499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.357627][ T8494] FAT-fs (loop1): Directory bread(block 70) failed
[  207.365185][ T8494] FAT-fs (loop1): Directory bread(block 71) failed
[  207.379827][ T8494] FAT-fs (loop1): Directory bread(block 72) failed
[  207.401026][ T8494] FAT-fs (loop1): Directory bread(block 73) failed
[  207.528121][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.535358][ T8504] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.542973][ T8504] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.550185][ T8504] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.632648][ T8504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.635796][ T8506] loop3: detected capacity change from 0 to 4096
[  207.666645][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.731395][ T8506] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  207.841446][ T8507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.915108][ T8506] ntfs3(loop3): ino=19, mi_enum_attr
[  207.949488][ T8506] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  208.012488][ T8519] input: syz0 as /devices/virtual/input/input12
[  208.684262][ T8538] loop2: detected capacity change from 0 to 1024
[  208.822653][ T8538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.013565][ T8220] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  209.100408][ T8220] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  209.123883][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'.
[  209.153778][ T8554] bond0: option mode: unable to set because the bond device has slaves
[  209.166963][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.186963][ T8220] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  209.217178][ T8220] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  209.661848][ T8220] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.679407][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  209.735294][ T8220] 8021q: adding VLAN 0 to HW filter on device team0
[  209.772343][ T8533] loop3: detected capacity change from 0 to 32768
[  209.785045][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.792306][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.819014][ T8533] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.944 (8533)
[  209.864261][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.871520][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.899440][ T5920] usb 1-1: Using ep0 maxpacket: 8
[  209.919632][ T5920] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  209.940033][ T5920] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  209.954598][ T8533] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  209.989579][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  210.007351][ T8533] BTRFS info (device loop3): using blake2b (blake2b-256-lib) checksum algorithm
[  210.061041][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  210.094176][ T5920] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  210.139944][ T5920] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  210.156257][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.274204][ T8533] BTRFS info (device loop3): enabling ssd optimizations
[  210.319450][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  210.329451][ T8533] BTRFS info (device loop3): turning on async discard
[  210.364095][ T8533] BTRFS info (device loop3): enabling free space tree
[  210.392343][ T5920] usb 1-1: GET_CAPABILITIES returned 0
[  210.397886][ T5920] usbtmc 1-1:16.0: can't read capabilities
[  210.421370][ T8533] BTRFS info (device loop3): use zstd compression, level 3
[  210.492281][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.529416][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  210.579513][    T9] usb 5-1: config 1 has no interface number 0
[  210.608936][    T9] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  210.649600][ T5920] usb 1-1: USB disconnect, device number 6
[  210.660330][ T8552] loop1: detected capacity change from 0 to 32768
[  210.688012][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.721166][    T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  210.767871][    T9] usb 5-1: Product: syz
[  210.804310][    T9] usb 5-1: SerialNumber: syz
[  210.866197][ T5826] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  210.867699][    T9] cdc_ncm 5-1:1.1: skipping garbage
[  210.935498][    T9] usb 5-1: selecting invalid altsetting 1
[  211.099027][ T8220] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.126667][ T8606] program syz.1.960 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  211.468278][    T9] cdc_ncm 5-1:1.1: SET_CRC_MODE failed
[  211.499499][    T9] cdc_ncm 5-1:1.1: SET_NTB_FORMAT failed
[  211.554154][    T9] usb 5-1: selecting invalid altsetting 1
[  211.576357][    T9] cdc_ncm 5-1:1.1: bind() failure
[  211.648580][    T9] usb 5-1: USB disconnect, device number 9
[  211.893560][ T8580] loop2: detected capacity change from 0 to 32768
[  212.024571][ T8580] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  212.232288][ T8580] XFS (loop2): Ending clean mount
[  212.265031][ T8580] XFS (loop2): Quotacheck needed: Please wait.
[  212.387287][ T8580] XFS (loop2): Quotacheck: Done.
[  212.693651][ T5831] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  212.707717][ T8220] veth0_vlan: entered promiscuous mode
[  212.776119][ T8220] veth1_vlan: entered promiscuous mode
[  212.778968][ T8647] loop4: detected capacity change from 0 to 512
[  212.908223][ T8616] loop0: detected capacity change from 0 to 32768
[  212.934539][ T8220] veth0_macvtap: entered promiscuous mode
[  212.939925][ T8647] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.968: invalid indirect mapped block 4294967295 (level 1)
[  212.945340][ T8220] veth1_macvtap: entered promiscuous mode
[  212.982485][ T8220] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.995075][ T8220] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.010070][ T8647] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.968: invalid indirect mapped block 4294967295 (level 1)
[  213.135135][ T8616] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  213.160531][ T8647] EXT4-fs (loop4): 2 truncates cleaned up
[  213.168063][ T8647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.243764][ T5944] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.297616][ T8647] EXT4-fs (loop4): shut down requested (1)
[  213.310399][ T5944] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.364552][ T5944] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.480440][ T5944] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.490922][ T8619] loop3: detected capacity change from 0 to 32768
[  213.499431][ T8616] XFS (loop0): Ending clean mount
[  213.558358][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.747476][ T5827] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  214.015339][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.066840][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.083125][ T8681] loop2: detected capacity change from 0 to 2048
[  214.185930][ T8681] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  214.239732][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.271207][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.024029][ T8702] loop3: detected capacity change from 0 to 512
[  215.331754][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'.
[  215.657076][ T8723] loop0: detected capacity change from 0 to 2048
[  215.771121][ T8723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.183655][ T5844] Bluetooth: hci1: command 0x0406 tx timeout
[  216.189910][ T5830] Bluetooth: hci5: command 0x0406 tx timeout
[  216.190075][ T5138] Bluetooth: hci3: command 0x0406 tx timeout
[  216.207397][ T5846] Bluetooth: hci0: command 0x0406 tx timeout
[  216.300663][ T8743] loop0: detected capacity change from 0 to 256
[  216.585129][   T52] block nbd0: Receive control failed (result -32)
[  216.764991][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'.
[  216.801908][ T8761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1005'.
[  217.259509][  T978] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  217.399501][ T5839] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  217.449493][  T978] usb 3-1: Using ep0 maxpacket: 16
[  217.495201][  T978] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  217.518017][  T978] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  217.570277][ T8794] usb usb1: check_ctrlrecip: process 8794 (syz.5.1015) requesting ep 01 but needs 81
[  217.572432][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.580055][  T978] usb 3-1: config 1 has no interface number 1
[  217.607563][ T8794] usb usb1: usbfs: process 8794 (syz.5.1015) did not claim interface 0 before use
[  217.616934][  T978] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  217.643584][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.657010][  T978] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  217.709393][ T5839] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  217.718483][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.719343][  T978] usb 3-1: config 1 interface 105 has no altsetting 0
[  217.783827][ T5944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  217.795659][  T978] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  217.797407][ T5839] usb 2-1: config 0 descriptor??
[  217.828069][   T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  217.846768][ T5944] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  217.855111][  T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.885011][  T978] usb 3-1: Product: syz
[  217.900155][  T978] usb 3-1: Manufacturer: syz
[  217.904788][  T978] usb 3-1: SerialNumber: syz
[  217.939153][ T8772] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  218.057743][ T8757] loop3: detected capacity change from 0 to 32768
[  218.098769][   T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  218.121105][ T8757] (syz.3.1002,8757,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  218.188809][  T978] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22
[  218.201853][ T8809] loop4: detected capacity change from 0 to 512
[  218.213080][ T8757] (syz.3.1002,8757,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  218.272077][ T8809] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  218.314629][ T8809] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.1022: invalid block
[  218.331408][ T5839] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  218.378534][ T8757] JBD2: Ignoring recovery information on journal
[  218.395417][ T5839] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  218.432704][  T978] usb 3-1: USB disconnect, device number 9
[  218.452311][ T8809] EXT4-fs (loop4): Remounting filesystem read-only
[  218.462421][ T5839] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  218.518598][ T8809] EXT4-fs (loop4): 1 truncate cleaned up
[  218.565045][ T5839] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  218.574536][ T8809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.592745][ T5906] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  218.607963][ T5839] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  218.644477][ T8757] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  218.670012][ T5839] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[  218.685931][ T8809] EXT4-fs (loop4): shut down requested (1)
[  218.896803][ T5826] ocfs2: Unmounting device (7,3) on (node local)
[  219.015461][ T5839] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 32: -71
[  219.070389][ T5839] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense firmware info: -71
[  219.106373][ T5839] playstation 0003:054C:0DF2.0008: Failed to get firmware info from DualSense
[  219.139347][ T5839] playstation 0003:054C:0DF2.0008: Failed to create dualsense.
[  219.154466][ T6333] ==================================================================
[  219.162543][ T6333] BUG: KASAN: use-after-free in __mutex_lock+0x812/0x1300
[  219.169755][ T6333] Read of size 8 at addr ffff888061efc0a8 by task khidpd_10cf5505/6333
[  219.177994][ T6333] 
[  219.180343][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: khidpd_10cf5505 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  219.180378][ T6333] Tainted: [L]=SOFTLOCKUP
[  219.180388][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  219.180404][ T6333] Call Trace:
[  219.180412][ T6333]  <TASK>
[  219.180422][ T6333]  dump_stack_lvl+0xe8/0x150
[  219.180457][ T6333]  print_report+0xba/0x230
[  219.180483][ T6333]  ? __mutex_lock+0x812/0x1300
[  219.180512][ T6333]  kasan_report+0x117/0x150
[  219.180542][ T6333]  ? __mutex_lock+0x812/0x1300
[  219.180575][ T6333]  __mutex_lock+0x812/0x1300
[  219.180607][ T6333]  ? __mutex_lock+0x5ac/0x1300
[  219.180636][ T6333]  ? l2cap_unregister_user+0x6a/0x1b0
[  219.180677][ T6333]  ? __pfx___mutex_lock+0x10/0x10
[  219.180705][ T6333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.180740][ T6333]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  219.180780][ T6333]  ? lockdep_hardirqs_on+0x7a/0x110
[  219.180806][ T6333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.180834][ T6333]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  219.180876][ T6333]  l2cap_unregister_user+0x6a/0x1b0
[  219.180915][ T6333]  hidp_session_thread+0x3cb/0x440
[  219.180955][ T6333]  ? __pfx_hidp_session_thread+0x10/0x10
[  219.180994][ T6333]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  219.181043][ T6333]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  219.181082][ T6333]  ? __kthread_parkme+0x7a/0x1f0
[  219.181106][ T6333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.181134][ T6333]  ? __kthread_parkme+0x19c/0x1f0
[  219.181162][ T6333]  kthread+0x726/0x8b0
[  219.181191][ T6333]  ? __pfx_hidp_session_thread+0x10/0x10
[  219.181230][ T6333]  ? __pfx_kthread+0x10/0x10
[  219.181255][ T6333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.181287][ T6333]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.181325][ T6333]  ? __pfx_kthread+0x10/0x10
[  219.181353][ T6333]  ret_from_fork+0x51b/0xa40
[  219.181394][ T6333]  ? __pfx_ret_from_fork+0x10/0x10
[  219.181430][ T6333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.181459][ T6333]  ? __switch_to+0xc82/0x1410
[  219.181495][ T6333]  ? __pfx_kthread+0x10/0x10
[  219.181523][ T6333]  ret_from_fork_asm+0x1a/0x30
[  219.181568][ T6333]  </TASK>
[  219.181577][ T6333] 
[  219.391711][ T6333] The buggy address belongs to the physical page:
[  219.398196][ T6333] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61efc
[  219.406955][ T6333] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  219.414081][ T6333] raw: 00fff00000000000 ffffea00015cc408 ffff8880b8640c00 0000000000000000
[  219.422659][ T6333] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  219.431225][ T6333] page dumped because: kasan: bad access detected
[  219.437627][ T6333] page_owner tracks the page as freed
[  219.442983][ T6333] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5828, tgid 5828 (syz-executor), ts 92360190339, free_ts 219152283838
[  219.461042][ T6333]  post_alloc_hook+0x228/0x280
[  219.465891][ T6333]  get_page_from_freelist+0x24dc/0x2580
[  219.471436][ T6333]  __alloc_frozen_pages_noprof+0x18d/0x380
[  219.477236][ T6333]  alloc_pages_mpol+0x232/0x4a0
[  219.482084][ T6333]  ___kmalloc_large_node+0x4e/0x150
[  219.487268][ T6333]  __kmalloc_large_node_noprof+0x18/0x90
[  219.492887][ T6333]  __kmalloc_noprof+0x4b8/0x7e0
[  219.497727][ T6333]  hci_alloc_dev_priv+0x28/0x2060
[  219.502766][ T6333]  vhci_create_device+0x120/0x650
[  219.507829][ T6333]  vhci_write+0x3ce/0x4a0
[  219.512155][ T6333]  vfs_write+0x61d/0xb90
[  219.516395][ T6333]  ksys_write+0x150/0x270
[  219.520718][ T6333]  do_syscall_64+0xe2/0xf80
[  219.525215][ T6333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.531096][ T6333] page last free pid 5828 tgid 5828 stack trace:
[  219.537400][ T6333]  __free_frozen_pages+0xbf8/0xd70
[  219.542497][ T6333]  bt_host_release+0x82/0x90
[  219.547084][ T6333]  device_release+0x9e/0x1d0
[  219.551757][ T6333]  kobject_put+0x228/0x560
[  219.556252][ T6333]  vhci_release+0x15a/0x1a0
[  219.560752][ T6333]  __fput+0x44f/0xa70
[  219.564904][ T6333]  task_work_run+0x1d9/0x270
[  219.569485][ T6333]  do_exit+0x69b/0x2310
[  219.573726][ T6333]  do_group_exit+0x21b/0x2d0
[  219.578310][ T6333]  __x64_sys_exit_group+0x3f/0x40
[  219.583335][ T6333]  __pfx_syscall_get_nr+0x0/0x10
[  219.588273][ T6333]  do_syscall_64+0xe2/0xf80
[  219.592768][ T6333]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.598825][ T6333] 
[  219.601178][ T6333] Memory state around the buggy address:
[  219.606882][ T6333]  ffff888061efbf80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe
[  219.614929][ T6333]  ffff888061efc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  219.622980][ T6333] >ffff888061efc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  219.631041][ T6333]                                   ^
[  219.636396][ T6333]  ffff888061efc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  219.644442][ T6333]  ffff888061efc180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  219.652484][ T6333] ==================================================================
[  219.665781][ T6333] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  219.673002][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: khidpd_10cf5505 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  219.684295][ T6333] Tainted: [L]=SOFTLOCKUP
[  219.688618][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  219.698684][ T6333] Call Trace:
[  219.701969][ T6333]  <TASK>
[  219.704905][ T6333]  vpanic+0x1e0/0x670
[  219.708907][ T6333]  panic+0xc5/0xd0
[  219.712638][ T6333]  ? __pfx_panic+0x10/0x10
[  219.717069][ T6333]  ? __mutex_lock+0x812/0x1300
[  219.721848][ T6333]  ? __mutex_lock+0x812/0x1300
[  219.726620][ T6333]  check_panic_on_warn+0x89/0xb0
[  219.731573][ T6333]  ? __mutex_lock+0x812/0x1300
[  219.736344][ T6333]  end_report+0x6f/0x140
[  219.740597][ T6333]  kasan_report+0x128/0x150
[  219.745120][ T6333]  ? __mutex_lock+0x812/0x1300
[  219.749983][ T6333]  __mutex_lock+0x812/0x1300
[  219.754708][ T6333]  ? __mutex_lock+0x5ac/0x1300
[  219.759488][ T6333]  ? l2cap_unregister_user+0x6a/0x1b0
[  219.764874][ T6333]  ? __pfx___mutex_lock+0x10/0x10
[  219.769931][ T6333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.775591][ T6333]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  219.781395][ T6333]  ? lockdep_hardirqs_on+0x7a/0x110
[  219.786588][ T6333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.792237][ T6333]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  219.798137][ T6333]  l2cap_unregister_user+0x6a/0x1b0
[  219.803342][ T6333]  hidp_session_thread+0x3cb/0x440
[  219.808460][ T6333]  ? __pfx_hidp_session_thread+0x10/0x10
[  219.814093][ T6333]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  219.820345][ T6333]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  219.826617][ T6333]  ? __kthread_parkme+0x7a/0x1f0
[  219.831552][ T6333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.837189][ T6333]  ? __kthread_parkme+0x19c/0x1f0
[  219.842301][ T6333]  kthread+0x726/0x8b0
[  219.846372][ T6333]  ? __pfx_hidp_session_thread+0x10/0x10
[  219.852011][ T6333]  ? __pfx_kthread+0x10/0x10
[  219.856684][ T6333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.862327][ T6333]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.867539][ T6333]  ? __pfx_kthread+0x10/0x10
[  219.872130][ T6333]  ret_from_fork+0x51b/0xa40
[  219.876877][ T6333]  ? __pfx_ret_from_fork+0x10/0x10
[  219.882005][ T6333]  ? srso_alias_return_thunk+0x5/0xfbef5
[  219.887771][ T6333]  ? __switch_to+0xc82/0x1410
[  219.892461][ T6333]  ? __pfx_kthread+0x10/0x10
[  219.897060][ T6333]  ret_from_fork_asm+0x1a/0x30
[  219.901853][ T6333]  </TASK>
[  219.904961][ T6333] Kernel Offset: disabled
[  219.909278][ T6333] Rebooting in 86400 seconds..