last executing test programs:

4.721703324s ago: executing program 2 (id=605):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

4.348391377s ago: executing program 2 (id=619):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005780)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000002, 0x0)

4.229403547s ago: executing program 0 (id=611):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfb, 0x27f, &(0x7f0000000480)="$eJzs3T9v00AYx/HfOWkbaFXcPwgJMRUqMaG2LIilCGVgZ2FCQBOkiqhIUMSfKTAj2Nl5C7wARibEjMTGxAvIFnTnC3HSOA5W00vS70dKlNT32M/F5949rqoIwKl1u/rr8/Xf9mGkkkqSbkqRpIpUlnReFyovDg73Dxv12rAdlVyEfRglkeZIm72D+qBQG+civNi+K2sp/TOMR+Wnmh9v3XkZOg+E5a7+ASJpwV+dbnvlxDMbj2boBAIzLbX0Ssuh8wAAhOXn/8jP80t+/R5F0qaf9nvn/ymfQFuhExizrznbU/O/q7Laxp7fc25Tt95zJZzdHnWqxCK5zCsZWT0LTJNXVbpcojOP9xv1a3tPG7VI77TrzXWbrbvnWjJ0O9LZvj26640BtekQxfu+6PowZ/uwk84/1WTteI+Yz3wz3819E+uTav/Wf+W2safJnam470wl+W9l79H1cl6uVUYvV9xBLvojeEN7WVJGRaLOiFpR7w2COC9PF7XaF5X0bjsnam1g1E5O1Hp/VHc0Z0eOm/lg7pkN/dEXVVPr/8h+2psa5cq0bVxLPzKG9qfsWsZuPvFXXfPSwJZR0R6hgPd6pBtafv76zZOHjUb92cy+sFfiBKQxUS86g2BS8pnZF/ZDDnL0zrxTfD/BfjPhBHVP+n8G8reZWWHXXSap/1L1ypZbrNmnuHedvpCObeftPLXH7YzaYNU9n82u4HoYd+thMbuCG7XmunxVujLKEROxz3Py7BYJMlX90APu/wMAAAAAAAAAAAAAAAAAAEyb4/uXg4qyNoXuIwAAAAAAAAAAAAAAAAAAAAAA027ivv/3rpJ3fP8vMHZ/AwAA////DnhI")
sync()
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)

4.156474858s ago: executing program 2 (id=613):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

4.044820669s ago: executing program 2 (id=614):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000010c0)={0x2c, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0})

3.85251615s ago: executing program 0 (id=616):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1, 0x823, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x25, 0x0, 0x0, 0x0, "5c91440132bb112201000000fa9dc579e8e83b944b666113f344d29963e5089fc83532f17b33515bbbec6ee14f53b9fc9b00"}}, 0x80}, 0x1, 0x0, 0x0, 0x40080}, 0x8881)

3.419629484s ago: executing program 0 (id=632):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000006a020000000000000000e8"])

2.998240817s ago: executing program 0 (id=624):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001200), 0xc, &(0x7f0000001400)={0x0, 0x124}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000001340)=[{0x0, 0x0, 0x0}], 0x7, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r1)

2.55337673s ago: executing program 4 (id=630):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
read$char_usb(r1, &(0x7f00000022c0)=""/171, 0xab)

2.460385281s ago: executing program 1 (id=631):
mmap(&(0x7f00002f9000/0x4000)=nil, 0x4000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

2.431476411s ago: executing program 4 (id=633):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-8'], 0x27)

2.227877733s ago: executing program 4 (id=635):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63ec070046dc3f0adf008936e7a8", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2.158570623s ago: executing program 3 (id=636):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}, @NL80211_ATTR_IE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40408e0}, 0x0)

2.057619864s ago: executing program 3 (id=637):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x7}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0)

1.988124484s ago: executing program 1 (id=638):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r0)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00')

1.983211904s ago: executing program 0 (id=648):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xfffffbfd, 0x100, 0x2, 0x13b}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x8, 0x1})
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

1.962789715s ago: executing program 4 (id=639):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0)
r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

1.810820106s ago: executing program 2 (id=640):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'poly1305-simd\x00'}})

1.803876266s ago: executing program 1 (id=651):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)

1.801025466s ago: executing program 0 (id=641):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0xb8e1, &(0x7f0000013cc0)="$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")
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x441, 0x0)
fallocate(r0, 0x0, 0x4001200, 0x1000005)

1.770624296s ago: executing program 3 (id=642):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f0000000040))

1.579536708s ago: executing program 1 (id=643):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r1}, 0x8)

1.515048558s ago: executing program 3 (id=644):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x78bd27, 0xa5dfdbfb, {0x0, 0x0, 0x0, r2, 0xa2e89, 0x56211}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c041}, 0x2)

1.461492969s ago: executing program 2 (id=645):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

1.21968518s ago: executing program 3 (id=646):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
symlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.20751159s ago: executing program 1 (id=647):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
close(r0)

1.054052512s ago: executing program 4 (id=649):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r1, 0x200002, 0x30}, 0xc)

488.814576ms ago: executing program 1 (id=650):
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

488.580436ms ago: executing program 4 (id=652):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000010c0)={0x2c, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f0000000a00)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 3 (id=653):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

kernel console output (not intermixed with test programs):

eth2
[   80.353768][ T4262] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.443210][ T4264] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.452596][ T4264] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.470748][ T4264] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.482180][ T4264] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.535489][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.579063][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.589272][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.634776][ T4250] 8021q: adding VLAN 0 to HW filter on device team0
[   80.648897][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.659244][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.669548][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.676901][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.692870][ T4249] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.717117][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.725327][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.734600][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.744509][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.751756][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.762077][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.781654][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.790975][ T4249] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.800718][ T4249] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.821751][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.842541][ T4249] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.854875][ T4256] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.872960][ T4256] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.894825][ T4256] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.904345][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.915156][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.924768][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.948198][ T4256] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.967802][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.979615][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.989310][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.998817][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.008424][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.017035][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.024878][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.034056][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.053544][ T4262] 8021q: adding VLAN 0 to HW filter on device team0
[   81.074402][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.087562][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.103920][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.114174][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.124309][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.131717][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.144932][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.190444][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.200557][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   81.217381][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.228842][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.238374][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.245517][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.254299][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.264652][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.281162][ T4264] 8021q: adding VLAN 0 to HW filter on device team0
[   81.309171][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.321084][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.331110][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.341179][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.351066][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.372042][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.382801][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.411285][ T4262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.430673][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.446049][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   81.454859][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   81.464534][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.471806][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.487637][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.496925][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.510937][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   81.520243][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   81.530739][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   81.540454][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.547624][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.605125][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   81.614012][ T4260] Bluetooth: hci1: command 0x041b tx timeout
[   81.631620][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   81.649454][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.661055][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.671328][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   81.685158][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   81.693406][ T4269] Bluetooth: hci2: command 0x041b tx timeout
[   81.693421][ T4260] Bluetooth: hci0: command 0x041b tx timeout
[   81.699591][ T4269] Bluetooth: hci3: command 0x041b tx timeout
[   81.699646][ T4269] Bluetooth: hci4: command 0x041b tx timeout
[   81.721218][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.776135][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   81.785409][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   81.808980][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.839782][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.874456][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.912670][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.940152][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.950617][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.963435][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.973455][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.982630][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   81.993180][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.003694][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   82.029033][ T4249] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.049640][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.076556][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.090924][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.119109][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.140493][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.172572][ T4256] 8021q: adding VLAN 0 to HW filter on device team0
[   82.227258][ T4249] 8021q: adding VLAN 0 to HW filter on device team0
[   82.234929][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.246500][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.283846][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.313763][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.324602][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.331812][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.359989][ T4250] device veth0_vlan entered promiscuous mode
[   82.379913][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.389326][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   82.412082][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   82.421943][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.429163][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.466124][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.481331][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.506492][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.513660][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.536893][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.557334][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.572951][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   82.582098][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   82.591414][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.598629][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.614676][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.624078][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   82.640859][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.653777][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.673288][ T4250] device veth1_vlan entered promiscuous mode
[   82.701625][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.713668][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   82.730614][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.742126][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   82.753207][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.765047][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.780405][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.791119][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.840478][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.849167][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.858208][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   82.867737][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   82.876711][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   82.886807][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   82.895471][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.905211][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.913971][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   82.922996][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   82.931965][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   82.939870][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   82.947855][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   82.956903][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   82.965376][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   82.988563][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.003481][ T4249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   83.016833][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.026687][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.039059][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   83.048611][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   83.060542][ T4250] device veth0_macvtap entered promiscuous mode
[   83.079077][ T4250] device veth1_macvtap entered promiscuous mode
[   83.112851][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.122893][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.132461][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.142639][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.224965][ T4262] device veth0_vlan entered promiscuous mode
[   83.242818][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   83.252092][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   83.262224][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.276763][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.309141][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.324107][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.334978][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.351103][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.360630][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.386030][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.393422][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   83.403344][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   83.412403][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.422774][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.436001][ T4262] device veth1_vlan entered promiscuous mode
[   83.445139][ T4264] device veth0_vlan entered promiscuous mode
[   83.455236][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.472420][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   83.482599][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   83.518287][ T4250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.534164][ T4250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.550022][ T4250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.570363][ T4250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.604473][ T4264] device veth1_vlan entered promiscuous mode
[   83.668335][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.680118][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   83.688119][ T4260] Bluetooth: hci1: command 0x040f tx timeout
[   83.689953][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.706298][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.713839][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.731565][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.750974][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.761179][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.766862][   T48] Bluetooth: hci0: command 0x040f tx timeout
[   83.772168][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   83.775130][ T4260] Bluetooth: hci4: command 0x040f tx timeout
[   83.782511][ T4269] Bluetooth: hci3: command 0x040f tx timeout
[   83.782551][ T4269] Bluetooth: hci2: command 0x040f tx timeout
[   83.784019][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   83.820570][ T4249] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.830137][ T4262] device veth0_macvtap entered promiscuous mode
[   83.879857][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.890402][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.900257][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.914530][ T4264] device veth0_macvtap entered promiscuous mode
[   83.931081][ T4264] device veth1_macvtap entered promiscuous mode
[   83.953388][ T4262] device veth1_macvtap entered promiscuous mode
[   84.003171][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.012422][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.024683][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.033012][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.042746][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.051925][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   84.062168][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   84.102596][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.115056][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.129747][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.143974][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.161919][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.163037][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.180786][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.184841][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.191270][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.193969][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.219491][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.229102][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.239027][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.248757][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.258418][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.277231][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.288274][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.301320][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.310080][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.321050][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.333189][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.344849][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.356619][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.378554][ T4249] device veth0_vlan entered promiscuous mode
[   84.390270][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.399537][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.409318][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.421781][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.431009][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.440173][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.449463][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   84.458376][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   84.470299][ T4264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.479398][ T4264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.489122][ T4264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.498186][ T4264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.520133][ T4262] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.529140][ T4262] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.538498][ T4262] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.547482][ T4262] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.568517][ T4249] device veth1_vlan entered promiscuous mode
[   84.577557][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.586988][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.595266][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.603652][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   84.611914][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   84.620627][ T4256] device veth0_vlan entered promiscuous mode
[   84.634787][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.643173][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.674413][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.684191][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.703194][ T4256] device veth1_vlan entered promiscuous mode
[   84.738009][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   84.753838][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   84.764919][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.773819][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.786209][ T4249] device veth0_macvtap entered promiscuous mode
[   84.804824][ T4249] device veth1_macvtap entered promiscuous mode
[   84.865034][ T4256] device veth0_macvtap entered promiscuous mode
[   84.882036][ T4256] device veth1_macvtap entered promiscuous mode
[   84.912893][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   84.942892][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   84.970426][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   84.980008][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   84.989527][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   85.010436][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   85.065136][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.082655][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.098856][ T4336] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'.
[   85.099033][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.118778][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.130941][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.141727][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.154119][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.165924][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.183495][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.213851][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.224778][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.235093][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.246322][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.255471][ T4338] loop0: detected capacity change from 0 to 512
[   85.257007][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.273838][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.291546][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.323827][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.336631][ T4338] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.7: bg 0: block 288: padding at end of block bitmap is not set
[   85.358443][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.362539][ T4338] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem
[   85.376926][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   85.385685][ T4338] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.7: attempt to clear invalid blocks 1024 len 1
[   85.387459][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   85.407336][ T4338] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.7: invalid indirect mapped block 1819239214 (level 0)
[   85.427266][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.428397][ T4338] EXT4-fs (loop0): 1 truncate cleaned up
[   85.443637][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.444374][ T4338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   85.454120][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.503063][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.519726][ T4249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.530613][ T4249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.544581][ T4249] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.545289][ T4250] EXT4-fs (loop0): unmounting filesystem.
[   85.580477][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.588915][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.598254][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.636167][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.658220][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.692521][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.698441][ T4343] Bluetooth: MGMT ver 1.22
[   85.705334][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.719620][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.730448][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.746549][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.761717][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.772771][ T4260] Bluetooth: hci1: command 0x0419 tx timeout
[   85.780231][ T4256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   85.791095][ T4256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.804965][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.817264][ T4249] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.826788][ T4249] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.835535][ T4249] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.844293][ T4345] loop0: detected capacity change from 0 to 1024
[   85.851512][ T4249] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.858432][ T4260] Bluetooth: hci0: command 0x0419 tx timeout
[   85.872641][   T48] Bluetooth: hci4: command 0x0419 tx timeout
[   85.872738][ T4259] Bluetooth: hci2: command 0x0419 tx timeout
[   85.885201][ T4260] Bluetooth: hci3: command 0x0419 tx timeout
[   85.904744][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   85.913078][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.921735][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.934395][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   85.954952][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   85.968914][ T4256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.978741][ T4256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.990938][ T4256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.008262][ T4256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.103525][   T41] hfsplus: b-tree write err: -5, ino 4
[   86.140025][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.155226][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.171519][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.187348][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.230619][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.247632][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.362451][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.371660][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.402598][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.431576][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.451621][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.454698][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.468009][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.482201][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.517466][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.545924][  T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   86.557452][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.596693][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.609528][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.765898][  T126] usb 1-1: Using ep0 maxpacket: 8
[   86.784675][  T126] usb 1-1: unable to get BOS descriptor or descriptor too short
[   86.804495][  T126] usb 1-1: config 4 interface 0 has no altsetting 0
[   86.808239][   T26] cfg80211: failed to load regulatory.db
[   86.868366][  T126] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   86.896569][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.924419][  T126] usb 1-1: Product: syz
[   86.930838][  T126] usb 1-1: Manufacturer: syz
[   86.935499][  T126] usb 1-1: SerialNumber: syz
[   87.276011][ T4367] loop2: detected capacity change from 0 to 1024
[   87.383473][ T4367] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   87.404373][  T126] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   87.458442][  T126] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   87.520462][   T27] audit: type=1804 audit(1741919018.464:2): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.15" name="/newroot/2/file1/bus" dev="loop2" ino=18 res=1 errno=0
[   87.541023][  T126] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   87.600805][  T126] usb 1-1: media controller created
[   87.652040][  T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.805071][ T4256] EXT4-fs (loop2): unmounting filesystem.
[   88.006550][  T126] usb 1-1: USB disconnect, device number 2
[   88.420712][ T4374] loop4: detected capacity change from 0 to 32768
[   88.428053][ T4374] =======================================================
[   88.428053][ T4374] WARNING: The mand mount option has been deprecated and
[   88.428053][ T4374]          and is ignored by this kernel. Remove the mand
[   88.428053][ T4374]          option from the mount to silence this warning.
[   88.428053][ T4374] =======================================================
[   88.473747][ T4374] XFS: ikeep mount option is deprecated.
[   88.495537][ T4374] XFS: noikeep mount option is deprecated.
[   88.583473][ T4374] XFS (loop4): Mounting V5 Filesystem
[   88.737289][ T4402] Falling back ldisc for ttyS3.
[   88.766065][ T4374] XFS (loop4): Ending clean mount
[   88.798201][ T4374] XFS (loop4): Quotacheck needed: Please wait.
[   88.876054][ T4374] XFS (loop4): Quotacheck: Done.
[   89.020892][ T4407] netlink: 120 bytes leftover after parsing attributes in process `syz.1.27'.
[   89.057421][ T4262] XFS (loop4): Unmounting Filesystem
[   89.356570][ T4399] loop0: detected capacity change from 0 to 32768
[   89.427140][ T4399] 
[   89.427140][ T4399]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   89.427140][ T4399] 
[   89.503550][ T4399] ERROR: (device loop0): diWrite: ixpxd invalid
[   89.503550][ T4399] 
[   89.528518][ T4399] ERROR: (device loop0): txCommit: 
[   89.528518][ T4399] 
[   89.670414][ T4250] 
[   89.670414][ T4250]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   89.670414][ T4250] 
[   89.682164][ T4250] 
[   89.682164][ T4250]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   89.682164][ T4250] 
[   89.737221][  T126] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   89.896530][ T4304] hid-generic 0005:0B57:0200.0001: item fetching failed at offset 0/1
[   89.918585][ T4304] hid-generic: probe of 0005:0B57:0200.0001 failed with error -22
[   89.945833][  T126] usb 2-1: Using ep0 maxpacket: 32
[   89.953268][  T126] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[   89.970932][  T126] usb 2-1: config 0 has no interface number 0
[   89.986676][  T126] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   89.995997][  T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.004415][  T126] usb 2-1: Product: syz
[   90.010233][  T126] usb 2-1: Manufacturer: syz
[   90.014962][  T126] usb 2-1: SerialNumber: syz
[   90.022609][  T126] usb 2-1: config 0 descriptor??
[   90.032188][  T126] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   90.128953][ T4298] kernel write not supported for file bpf-prog (pid: 4298 comm: kworker/1:4)
[   90.258562][  T126] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   90.273134][ T4431] loop4: detected capacity change from 0 to 256
[   90.301780][  T126] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   90.326707][ T4260] Bluetooth: hci0: command 0x0c1a tx timeout
[   90.333640][ T4386] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   90.373254][ T4434] loop3: detected capacity change from 0 to 512
[   90.391485][ T4435] loop0: detected capacity change from 0 to 256
[   90.428161][ T4434] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   90.451170][ T4435] exfat: Deprecated parameter 'namecase'
[   90.493595][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short
[   90.515210][ T4435] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[   90.570526][ T4434] EXT4-fs (loop3): 1 orphan inode deleted
[   90.590540][    T9] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   90.601597][ T4434] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   90.628936][    T9] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:0: Failed to release dquot type 1
[   90.658146][ T4434] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.695844][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[   90.706548][ T4307] usb 2-1: USB disconnect, device number 2
[   90.767372][ T4307] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   90.830639][ T4307] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   90.873991][ T4307] quatech2 2-1:0.51: device disconnected
[   90.910592][ T4281] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   90.939036][ T4281] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:6: Failed to release dquot type 1
[   90.975801][ T4264] EXT4-fs (loop3): unmounting filesystem.
[   91.297725][ T4440] loop4: detected capacity change from 0 to 32768
[   91.346965][ T4440] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.40 (4440)
[   91.414823][ T4440] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   91.449644][ T4452] loop0: detected capacity change from 0 to 128
[   91.451307][ T4440] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   91.523119][ T4440] BTRFS info (device loop4): setting nodatacow, compression disabled
[   91.555824][ T4440] BTRFS info (device loop4): max_inline at 0
[   91.556278][ T4453] loop1: detected capacity change from 0 to 2048
[   91.561862][ T4440] BTRFS info (device loop4): enabling disk space caching
[   91.561892][ T4440] BTRFS info (device loop4): turning off barriers
[   91.561911][ T4440] BTRFS info (device loop4): turning on flush-on-commit
[   91.701064][ T4440] BTRFS info (device loop4): doing ref verification
[   91.714708][ T4457] loop3: detected capacity change from 0 to 1024
[   91.730808][ T4440] BTRFS info (device loop4): force clearing of disk cache
[   91.731314][ T4453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   91.758645][ T4457] EXT4-fs: Ignoring removed orlov option
[   91.800157][ T4440] BTRFS info (device loop4): enabling ssd optimizations
[   91.815484][ T4457] EXT4-fs: Ignoring removed bh option
[   91.846187][ T4440] BTRFS info (device loop4): max_inline at 4096
[   91.866003][ T4440] BTRFS info (device loop4): disk space caching is enabled
[   91.906125][ T4457] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   92.003524][ T4249] EXT4-fs (loop1): unmounting filesystem.
[   92.226123][ T4440] BTRFS info (device loop4): rebuilding free space tree
[   92.339555][ T4264] EXT4-fs (loop3): unmounting filesystem.
[   92.362949][ T4440] BTRFS info (device loop4): disabling free space tree
[   92.393455][ T4440] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   92.405885][   T48] Bluetooth: hci0: command 0x0401 tx timeout
[   92.422552][ T4440] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   92.451448][ T4495] loop1: detected capacity change from 0 to 4096
[   92.651816][ T4499] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.696832][ T4504] loop2: detected capacity change from 0 to 16
[   92.708979][ T4504] erofs: (device loop2): mounted with root inode @ nid 36.
[   92.745854][ T4260] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000]
[   92.767855][ T4504] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[   92.785747][   T27] audit: type=1800 audit(1741919023.714:3): pid=4440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.40" name="file2" dev="loop4" ino=261 res=0 errno=0
[   92.822145][ T4504] syz.2.58 (4504) used greatest stack depth: 19488 bytes left
[   92.846929][   T27] audit: type=1800 audit(1741919023.724:4): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.58" name="file3" dev="loop2" ino=89 res=0 errno=0
[   92.966724][ T4307] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.171194][ T4307] usb 4-1: Using ep0 maxpacket: 32
[   93.191302][ T4307] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[   93.231524][ T4307] usb 4-1: config 0 has no interface number 0
[   93.285480][ T4307] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   93.308287][ T4512] loop1: detected capacity change from 0 to 1024
[   93.327058][ T4307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.345181][ T4262] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   93.372486][ T4307] usb 4-1: Product: syz
[   93.381207][ T4307] usb 4-1: Manufacturer: syz
[   93.387144][ T4307] usb 4-1: SerialNumber: syz
[   93.408672][ T4307] usb 4-1: config 0 descriptor??
[   93.422371][ T4307] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   93.436591][ T4512] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   93.567019][ T4521] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   93.598325][ T4521] overlayfs: overlapping lowerdir path
[   93.633172][ T4307] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   93.648691][ T4512] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   93.760697][ T4307] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   93.829663][ T4249] EXT4-fs (loop1): unmounting filesystem.
[   93.923734][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short
[   94.118051][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[   94.130850][   T22] usb 4-1: USB disconnect, device number 2
[   94.184077][   T22] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   94.227550][   T22] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   94.265364][   T22] quatech2 4-1:0.51: device disconnected
[   95.589642][ T4563] loop0: detected capacity change from 0 to 2048
[   95.687937][ T4563] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.774652][ T4540] mmap: syz.2.72 (4540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   95.852465][ T4532] loop1: detected capacity change from 0 to 65536
[   95.949214][ T4532] XFS (loop1): Mounting V5 Filesystem
[   95.999830][ T4532] XFS (loop1): Ending clean mount
[   96.012399][ T4532] XFS (loop1): Quotacheck needed: Please wait.
[   96.111356][ T4532] XFS (loop1): Quotacheck: Done.
[   96.384075][ T4249] XFS (loop1): Unmounting Filesystem
[   96.486637][   T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   96.693469][   T22] usb 1-1: Using ep0 maxpacket: 32
[   96.702209][   T22] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[   96.757140][   T22] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   96.782174][ T4601] loop2: detected capacity change from 0 to 512
[   96.823000][   T22] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   96.859061][ T4601] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.86: invalid indirect mapped block 32768 (level 0)
[   96.918390][ T4611] loop4: detected capacity change from 0 to 64
[   96.925723][   T22] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   96.949882][ T4601] EXT4-fs (loop2): Remounting filesystem read-only
[   96.953542][ T4611] hfs: unable to locate alternate MDB
[   96.973290][ T4601] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.86: attempt to clear invalid blocks 1024 len 1
[   96.997256][ T4601] EXT4-fs (loop2): Remounting filesystem read-only
[   97.024655][   T22] usb 1-1: config 0 interface 0 has no altsetting 0
[   97.031831][ T4601] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[   97.064127][ T4611] hfs: continuing without an alternate MDB
[   97.073716][   T22] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   97.083020][ T4601] EXT4-fs (loop2): Remounting filesystem read-only
[   97.083476][ T4601] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.86: invalid indirect mapped block 1819213824 (level 0)
[   97.111646][   T22] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   97.137079][   T22] usb 1-1: Product: syz
[   97.151687][   T22] usb 1-1: Manufacturer: syz
[   97.156591][   T22] usb 1-1: SerialNumber: syz
[   97.181366][ T4601] EXT4-fs (loop2): Remounting filesystem read-only
[   97.201383][   T22] usb 1-1: config 0 descriptor??
[   97.211019][   T27] audit: type=1800 audit(1741919028.154:5): pid=4611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.88" name="file1" dev="loop4" ino=18 res=0 errno=0
[   97.235895][ T4601] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.86: invalid indirect mapped block 33554432 (level 2)
[   97.270165][   T22] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   97.302114][ T4601] EXT4-fs (loop2): Remounting filesystem read-only
[   97.334740][ T4601] EXT4-fs (loop2): 1 truncate cleaned up
[   97.358115][   T22] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   97.366573][ T4601] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   97.438189][ T4617] loop3: detected capacity change from 0 to 4096
[   97.513074][ T4617] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[   97.541736][   T22] usb 1-1: USB disconnect, device number 3
[   97.547901][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[   97.573514][   T22] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[   97.619977][ T4256] EXT4-fs (loop2): unmounting filesystem.
[   97.772168][ T4589] ldusb: No device or device unplugged -19
[   98.009305][  T126] kernel write not supported for file /sg0 (pid: 126 comm: kworker/0:2)
[   98.825038][ T4629] loop1: detected capacity change from 0 to 32768
[   98.959295][ T4629] XFS (loop1): Mounting V5 Filesystem
[   99.040966][ T4637] loop2: detected capacity change from 0 to 32768
[   99.097802][ T4629] XFS (loop1): Ending clean mount
[   99.114810][ T4647] loop0: detected capacity change from 0 to 32768
[   99.125876][ T4647] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.99 (4647)
[   99.170283][ T4647] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   99.184922][ T4637] XFS (loop2): Mounting V5 Filesystem
[   99.214124][ T4647] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   99.235791][ T4647] BTRFS info (device loop0): using free space tree
[   99.304004][ T4629] syz.1.93 (4629) used greatest stack depth: 19240 bytes left
[   99.374261][ T4637] XFS (loop2): Ending clean mount
[   99.392908][ T4647] BTRFS info (device loop0): enabling ssd optimizations
[   99.408771][ T4637] XFS (loop2): Quotacheck needed: Please wait.
[   99.494357][ T4644] loop3: detected capacity change from 0 to 40427
[   99.529208][ T4637] XFS (loop2): Quotacheck: Done.
[   99.581825][ T4644] F2FS-fs (loop3): invalid crc value
[   99.594586][ T4249] XFS (loop1): Unmounting Filesystem
[   99.672531][ T4644] F2FS-fs (loop3): Found nat_bits in checkpoint
[   99.962762][ T4644] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[   99.962849][ T4250] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  100.008851][ T4644] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  100.045146][ T4256] XFS (loop2): Unmounting Filesystem
[  100.382530][ T4644] syz.3.96: attempt to access beyond end of device
[  100.382530][ T4644] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  100.470420][ T4699] loop1: detected capacity change from 0 to 2048
[  100.569960][ T4702] netlink: 'syz.4.105': attribute type 5 has an invalid length.
[  100.584435][ T4703] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.714515][ T4264] syz-executor: attempt to access beyond end of device
[  100.714515][ T4264] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  100.910206][ T4709] loop0: detected capacity change from 0 to 512
[  101.104509][ T4709] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  101.149034][ T4709] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.512757][ T4719] loop4: detected capacity change from 0 to 32768
[  101.610820][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  101.714914][ T4732] loop3: detected capacity change from 0 to 512
[  101.784669][ T4732] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.107: casefold flag without casefold feature
[  101.809336][ T4732] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.107: couldn't read orphan inode 15 (err -117)
[  101.828378][ T4719] XFS (loop4): Mounting V5 Filesystem
[  101.913206][ T4732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  102.038992][ T4719] XFS (loop4): Ending clean mount
[  102.083971][ T4719] XFS (loop4): Quotacheck needed: Please wait.
[  102.091382][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  102.164181][ T4719] XFS (loop4): Quotacheck: Done.
[  102.386029][ T4262] XFS (loop4): Unmounting Filesystem
[  102.572966][ T4750] loop3: detected capacity change from 0 to 8192
[  102.635479][ T4750] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  102.722123][ T4729] loop1: detected capacity change from 0 to 32768
[  102.731391][ T4750] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  102.740985][ T4750] REISERFS (device loop3): using ordered data mode
[  102.747856][ T4750] reiserfs: using flush barriers
[  102.757207][ T4750] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  102.765944][   T22] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  102.775145][ T4750] REISERFS (device loop3): checking transaction log (loop3)
[  102.807941][ T4755] loop0: detected capacity change from 0 to 4096
[  102.902267][ T4729] XFS (loop1): Mounting V5 Filesystem
[  103.014712][   T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.063640][   T22] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  103.093213][ T4750] REISERFS (device loop3): Using tea hash to sort names
[  103.094882][ T4768] loop4: detected capacity change from 0 to 2048
[  103.112898][   T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  103.137120][ T4729] XFS (loop1): Ending clean mount
[  103.137903][ T4750] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  103.146757][ T4768] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  103.176587][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.184647][   T22] usb 3-1: Product: syz
[  103.191550][ T4769] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.211822][   T22] usb 3-1: Manufacturer: syz
[  103.224883][ T4768] capability: warning: `syz.4.124' uses 32-bit capabilities (legacy support in use)
[  103.254793][   T22] usb 3-1: SerialNumber: syz
[  103.383624][ T4249] XFS (loop1): Unmounting Filesystem
[  103.481041][   T22] usb 3-1: 0:2 : does not exist
[  103.513332][   T22] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  103.680736][   T22] usb 3-1: USB disconnect, device number 2
[  103.994800][ T4332] udevd[4332]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.090959][ T4780] loop4: detected capacity change from 0 to 128
[  104.215075][ T4780] FAT-fs (loop4): Directory bread(block 32) failed
[  104.242583][ T4780] FAT-fs (loop4): Directory bread(block 33) failed
[  104.262947][ T4780] FAT-fs (loop4): Directory bread(block 34) failed
[  104.275667][ T4780] FAT-fs (loop4): Directory bread(block 35) failed
[  104.282410][ T4780] FAT-fs (loop4): Directory bread(block 36) failed
[  104.318633][ T4780] FAT-fs (loop4): Directory bread(block 37) failed
[  104.325317][ T4780] FAT-fs (loop4): Directory bread(block 38) failed
[  104.369349][ T4780] FAT-fs (loop4): Directory bread(block 39) failed
[  104.385040][ T4771] loop0: detected capacity change from 0 to 32768
[  104.392651][ T4780] FAT-fs (loop4): Directory bread(block 40) failed
[  104.425683][ T4780] FAT-fs (loop4): Directory bread(block 41) failed
[  104.437477][ T4771] XFS: ikeep mount option is deprecated.
[  104.528364][   T22] hid-generic 0005:15C2:0001.0002: item fetching failed at offset 0/1
[  104.540080][   T27] audit: type=1326 audit(1741919035.474:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4796 comm="syz.2.135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55b1f8d169 code=0x0
[  104.540889][ T4794] bond0: Unable to set up delay as MII monitoring is disabled
[  104.575242][ T4771] XFS (loop0): Mounting V5 Filesystem
[  104.595949][   T22] hid-generic: probe of 0005:15C2:0001.0002 failed with error -22
[  104.739905][ T4771] XFS (loop0): Ending clean mount
[  104.761220][ T4771] XFS (loop0): Quotacheck needed: Please wait.
[  104.813146][ T4771] XFS (loop0): Quotacheck: Done.
[  104.984351][ T4250] XFS (loop0): Unmounting Filesystem
[  105.202640][ T4812] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  105.212029][ T4812] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  105.220863][ T4812] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  105.229642][ T4812] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.709385][ T4806] loop3: detected capacity change from 0 to 32768
[  105.760395][ T4806] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.137 (4806)
[  105.861991][ T4806] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.916844][ T4806] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  105.966197][ T4806] BTRFS info (device loop3): setting nodatacow, compression disabled
[  105.982119][ T4806] BTRFS info (device loop3): max_inline at 0
[  105.992113][ T4806] BTRFS info (device loop3): enabling disk space caching
[  106.018524][ T4806] BTRFS info (device loop3): turning off barriers
[  106.025055][ T4806] BTRFS info (device loop3): turning on flush-on-commit
[  106.054620][ T4806] BTRFS info (device loop3): doing ref verification
[  106.081197][ T4806] BTRFS info (device loop3): force clearing of disk cache
[  106.101787][ T4806] BTRFS info (device loop3): enabling ssd optimizations
[  106.127976][ T4806] BTRFS info (device loop3): max_inline at 4096
[  106.144545][ T4806] BTRFS info (device loop3): disk space caching is enabled
[  106.402233][ T4806] BTRFS info (device loop3): rebuilding free space tree
[  106.473350][ T4806] BTRFS info (device loop3): disabling free space tree
[  106.517910][ T4806] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  106.555990][ T4806] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  106.726155][   T27] audit: type=1800 audit(1741919037.664:7): pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.137" name="file2" dev="loop3" ino=261 res=0 errno=0
[  106.943573][ T4264] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.948326][ T4865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.155'.
[  107.304695][ T4873] loop1: detected capacity change from 0 to 2048
[  107.444508][ T4879] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.642948][ T4873] syz.1.159 (4873) used greatest stack depth: 18800 bytes left
[  107.707990][ T4886] loop0: detected capacity change from 0 to 2048
[  107.778856][ T4886] UDF-fs: bad mount option "01777777777777777777777��18446744073709551615" or missing value
[  109.026056][ T4926] netlink: 6 bytes leftover after parsing attributes in process `syz.4.182'.
[  109.186238][ T4928] loop4: detected capacity change from 0 to 16
[  109.217315][ T4928] erofs: (device loop4): mounted with root inode @ nid 36.
[  109.310605][ T4928] overlayfs: failed to get redirect (-117)
[  109.522532][ T4912] loop0: detected capacity change from 0 to 32768
[  109.523760][ T4923] loop3: detected capacity change from 0 to 32768
[  109.627524][ T4923] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  109.627524][ T4923] 
[  109.680714][ T4923] ERROR: (device loop3): remounting filesystem as read-only
[  109.688598][ T4912] XFS (loop0): Mounting V5 Filesystem
[  109.725847][ T4923] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  109.725847][ T4923] 
[  109.755005][ T4923] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  109.755005][ T4923] 
[  109.891114][ T4912] XFS (loop0): Ending clean mount
[  109.973576][ T4951] loop2: detected capacity change from 0 to 64
[  110.083783][   T27] audit: type=1800 audit(1741919041.024:8): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.190" name="file1" dev="loop2" ino=18 res=0 errno=0
[  110.186201][ T4250] XFS (loop0): Unmounting Filesystem
[  110.195496][ T4956] loop1: detected capacity change from 0 to 1024
[  110.414596][ T4956] syz.1.193: attempt to access beyond end of device
[  110.414596][ T4956] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  110.436360][ T4956] Buffer I/O error on dev loop1, logical block 100663296, async page read
[  110.445259][ T4956] hfsplus: unable to mark blocks free: error -5
[  110.458096][ T4956] hfsplus: can't free extent
[  110.653568][ T4525] kernel write not supported for file /snd/seq (pid: 4525 comm: kworker/1:11)
[  111.240051][ T4983] loop1: detected capacity change from 0 to 64
[  111.385535][ T4986] loop0: detected capacity change from 0 to 128
[  111.424468][ T4986] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  111.441746][ T4986] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  111.775343][   T27] audit: type=1326 audit(1741919042.714:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb9d8d169 code=0x7ffc0000
[  111.853162][   T27] audit: type=1326 audit(1741919042.754:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb9d8d169 code=0x7ffc0000
[  111.946276][   T27] audit: type=1326 audit(1741919042.764:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cb9d8d169 code=0x7ffc0000
[  112.005780][   T27] audit: type=1326 audit(1741919042.764:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb9d8d169 code=0x7ffc0000
[  112.056344][   T27] audit: type=1326 audit(1741919042.764:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb9d8d169 code=0x7ffc0000
[  112.134485][ T4997] netlink: 'syz.0.210': attribute type 1 has an invalid length.
[  112.135791][   T27] audit: type=1326 audit(1741919042.764:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f1cb9d8d169 code=0x7ffc0000
[  112.163079][ T4997] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.210'.
[  112.234715][   T27] audit: type=1326 audit(1741919042.764:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb9d8d169 code=0x7ffc0000
[  112.335720][   T27] audit: type=1326 audit(1741919042.764:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb9d8d169 code=0x7ffc0000
[  112.490966][   T27] audit: type=1326 audit(1741919042.774:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4992 comm="syz.0.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f1cb9d8d169 code=0x7ffc0000
[  112.662541][ T4991] loop1: detected capacity change from 0 to 32768
[  112.840589][ T4991] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  112.904110][ T4976] loop4: detected capacity change from 0 to 65536
[  112.913600][ T4991] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  113.011925][ T4976] XFS (loop4): Mounting V5 Filesystem
[  113.227029][ T4976] XFS (loop4): Ending clean mount
[  113.401731][ T5035] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[  113.464110][ T4249] ocfs2: Unmounting device (7,1) on (node local)
[  113.484353][ T4262] XFS (loop4): Unmounting Filesystem
[  113.653368][ T5038] loop2: detected capacity change from 0 to 128
[  113.718381][ T4878] kernel read not supported for file /dsp1 (pid: 4878 comm: kworker/0:16)
[  113.732178][ T5038] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512)
[  113.743044][ T5038] FAT-fs (loop2): Filesystem has been set read-only
[  113.776528][ T5038] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512)
[  114.348554][ T5055] netlink: 'syz.2.230': attribute type 3 has an invalid length.
[  114.388051][ T5057] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  114.603915][ T5065] sctp: [Deprecated]: syz.0.233 (pid 5065) Use of struct sctp_assoc_value in delayed_ack socket option.
[  114.603915][ T5065] Use struct sctp_sack_info instead
[  114.824037][ T5069] loop0: detected capacity change from 0 to 1024
[  114.865872][ T4878] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  114.924294][ T5069] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  114.953130][ T5069] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.065654][ T4878] usb 3-1: Using ep0 maxpacket: 32
[  115.072996][ T4878] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  115.092777][ T4878] usb 3-1: config 0 has no interface number 0
[  115.122056][ T4878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.149823][ T5069] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  115.186091][ T5069] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28
[  115.216154][ T4878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.244775][ T5069] EXT4-fs (loop0): This should not happen!! Data will be lost
[  115.244775][ T5069] 
[  115.244814][ T4878] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  115.267140][ T5069] EXT4-fs (loop0): Total free blocks count 0
[  115.273201][ T5069] EXT4-fs (loop0): Free/Dirty block details
[  115.323437][ T5069] EXT4-fs (loop0): free_blocks=4293918720
[  115.352970][ T4878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.361800][ T5069] EXT4-fs (loop0): dirty_blocks=48
[  115.376588][ T5069] EXT4-fs (loop0): Block reservation details
[  115.383848][ T4878] usb 3-1: config 0 descriptor??
[  115.409656][ T5069] EXT4-fs (loop0): i_reserved_data_blocks=3
[  115.525084][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  116.017800][ T4878] uclogic 0003:28BD:0094.0003: failed retrieving string descriptor #100: -71
[  116.093396][ T4878] uclogic 0003:28BD:0094.0003: failed retrieving pen parameters: -71
[  116.171187][ T5089] loop1: detected capacity change from 0 to 32768
[  116.179111][ T4878] uclogic 0003:28BD:0094.0003: pen probing failed: -71
[  116.229973][ T4878] uclogic 0003:28BD:0094.0003: failed probing parameters: -71
[  116.324381][ T5089] XFS (loop1): Mounting V5 Filesystem
[  116.375839][ T4878] uclogic: probe of 0003:28BD:0094.0003 failed with error -71
[  116.402882][ T4878] usb 3-1: USB disconnect, device number 3
[  116.720090][ T5089] XFS (loop1): Ending clean mount
[  117.008886][ T5108] loop0: detected capacity change from 0 to 32768
[  117.040578][ T4249] XFS (loop1): Unmounting Filesystem
[  117.072660][ T5108] JBD2: Ignoring recovery information on journal
[  117.327380][ T5108] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  117.419459][ T5108] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[  117.587233][ T5108] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  117.637817][ T5108] OCFS2: File system is now read-only.
[  117.643355][ T5108] (syz.0.248,5108,1):ocfs2_search_one_group:1684 ERROR: status = -30
[  117.663734][ T5125] loop3: detected capacity change from 0 to 256
[  117.681717][ T5108] (syz.0.248,5108,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30
[  117.723683][ T5108] (syz.0.248,5108,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  117.735313][ T5108] (syz.0.248,5108,1):ocfs2_claim_new_inode:2216 ERROR: status = -30
[  117.775163][ T5108] (syz.0.248,5108,1):ocfs2_claim_new_inode:2231 ERROR: status = -30
[  117.795436][ T5108] (syz.0.248,5108,1):ocfs2_mknod_locked:639 ERROR: status = -30
[  117.815796][ T5108] (syz.0.248,5108,1):ocfs2_mknod:385 ERROR: status = -30
[  117.824117][ T5108] (syz.0.248,5108,1):ocfs2_mknod:502 ERROR: status = -30
[  117.844014][ T5108] (syz.0.248,5108,1):ocfs2_mkdir:659 ERROR: status = -30
[  117.935883][ T1191] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  118.009418][ T5130] loop1: detected capacity change from 0 to 4096
[  118.013797][ T4250] ocfs2: Unmounting device (7,0) on (node local)
[  118.096190][ T4332] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  118.166421][ T1191] usb 3-1: Using ep0 maxpacket: 32
[  118.173797][ T1191] usb 3-1: config 0 interface 0 has no altsetting 0
[  118.212275][ T5130] loop1: detected capacity change from 0 to 1024
[  118.229760][ T1191] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  118.244084][ T1191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.297900][ T1191] usb 3-1: Product: syz
[  118.302236][ T1191] usb 3-1: Manufacturer: syz
[  118.327780][ T1191] usb 3-1: SerialNumber: syz
[  118.346479][ T1191] usb 3-1: config 0 descriptor??
[  118.541606][ T5140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.260'.
[  118.584535][ T5140] netlink: 28 bytes leftover after parsing attributes in process `syz.0.260'.
[  118.760726][ T1191] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  118.832840][ T5150] input: syz0 as /devices/virtual/input/input5
[  119.169894][ T1191] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  119.193077][ T1191] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  119.224267][ T1191] gs_usb: probe of 3-1:0.0 failed with error -71
[  119.255414][ T1191] usb 3-1: USB disconnect, device number 4
[  119.636950][   T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  119.822512][ T5179] loop2: detected capacity change from 0 to 256
[  119.847329][   T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.887271][   T22] usb 2-1: config 0 interface 0 has no altsetting 0
[  119.920317][   T22] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  119.948565][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.964456][   T22] usb 2-1: Product: syz
[  119.969481][ T5184] Context (ID=0x0) not attached to queue pair (handle=0x4d3:0x0)
[  119.969569][   T22] usb 2-1: Manufacturer: syz
[  119.969591][   T22] usb 2-1: SerialNumber: syz
[  119.991207][ T5179] FAT-fs (loop2): Directory bread(block 64) failed
[  119.996979][   T22] usb 2-1: config 0 descriptor??
[  120.025997][ T5179] FAT-fs (loop2): Directory bread(block 65) failed
[  120.032755][ T5179] FAT-fs (loop2): Directory bread(block 66) failed
[  120.042441][ T5179] FAT-fs (loop2): Directory bread(block 67) failed
[  120.052449][   T22] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  120.066711][ T5179] FAT-fs (loop2): Directory bread(block 68) failed
[  120.073309][ T5179] FAT-fs (loop2): Directory bread(block 69) failed
[  120.092096][ T5179] FAT-fs (loop2): Directory bread(block 70) failed
[  120.113034][   T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  120.122843][ T5179] FAT-fs (loop2): Directory bread(block 71) failed
[  120.130216][   T22] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  120.144073][ T5179] FAT-fs (loop2): Directory bread(block 72) failed
[  120.151008][   T22] usb 2-1: media controller created
[  120.161118][ T5179] FAT-fs (loop2): Directory bread(block 73) failed
[  120.209019][   T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.345519][ T5193] loop3: detected capacity change from 0 to 1024
[  120.394423][ T5193] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.474095][   T22] DVB: Unable to find symbol tda10046_attach()
[  120.481385][   T22] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  120.500620][   T22] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  120.523695][ T5193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  120.747072][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  120.891844][ T5208] loop2: detected capacity change from 0 to 47
[  120.990401][ T5208] minix_free_block (loop2:21): bit already cleared
[  120.999883][   T22] dvb_usb_m920x: probe of 2-1:0.0 failed with error -71
[  121.045813][   T22] usb 2-1: USB disconnect, device number 3
[  121.375218][ T5214] loop3: detected capacity change from 0 to 1024
[  121.557343][   T75] hfsplus: b-tree write err: -5, ino 4
[  121.650923][ T5200] loop0: detected capacity change from 0 to 40427
[  121.693742][ T5200] F2FS-fs (loop0): invalid crc value
[  121.774540][ T5200] F2FS-fs (loop0): Found nat_bits in checkpoint
[  121.977569][ T5200] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  122.015405][ T5200] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  122.201701][ T5242] loop2: detected capacity change from 0 to 256
[  122.252268][ T5242] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  122.280569][ T5242] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  122.308231][ T5200] syz.0.288: attempt to access beyond end of device
[  122.308231][ T5200] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  122.350911][ T5242] devtmpfs: Unknown parameter 'dirsyncZ�֦�ikڙv��io:����h:�N���l��.���j��n���n����I4���y��1}M?��0/��f�d��f�j��af�n��	?�2�Qf�cƙq&�g7�3�L4��$3e@v3�L3�&��03�,3��6��\3��7��B��,2�L�I1��b��,5K�r�ܬ4+�j�ڬ5k�z��l4���l1[�V��l7;�N���6{����3�&��7��
s�4�!s�6��s�5G�1s�7��IsҜ2��isڜ5g�9sΜ7��s!��/P�
[  122.350911][ T5242] L`�A� !H2��'
[  122.815509][ T5254] loop3: detected capacity change from 0 to 2048
[  122.891627][ T5260] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.990099][   T27] kauditd_printk_skb: 2 callbacks suppressed
[  122.990115][   T27] audit: type=1800 audit(1741919053.934:20): pid=5254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.312" name="bus" dev="loop3" ino=2097152 res=0 errno=0
[  123.074160][ T5262] loop1: detected capacity change from 0 to 64
[  123.477095][ T5268] device vlan2 entered promiscuous mode
[  123.481687][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'.
[  123.483120][ T5268] device macvtap0 entered promiscuous mode
[  123.508233][ T5268] team0: Port device vlan2 added
[  123.919432][ T5277] loop3: detected capacity change from 0 to 64
[  124.193182][ T5279] loop2: detected capacity change from 0 to 4096
[  124.238855][ T4240] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.449946][ T4240] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.475840][ T4240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  124.481141][ T4256] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  124.506412][ T4256] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  124.530336][ T4240] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  124.589461][ T4240] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c
[  124.609008][ T4240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.663705][ T4240] usb 1-1: config 0 descriptor??
[  124.701144][ T4240] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[  124.876223][ T5294] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  124.885724][ T4260] Bluetooth: hci4: command 0x0405 tx timeout
[  124.934861][ T4240] usb 1-1: USB disconnect, device number 4
[  124.974681][ T4240] appletouch 1-1:0.0: input: appletouch disconnected
[  125.203690][ T4878] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  125.428208][ T4878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.455628][ T4878] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  125.464664][ T4878] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  125.546203][ T4878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.587063][ T4878] usb 4-1: config 0 descriptor??
[  125.824984][ T4525] usb 4-1: USB disconnect, device number 3
[  126.027017][ T5327] device batadv_slave_1 entered promiscuous mode
[  126.058523][ T5326] device batadv_slave_1 left promiscuous mode
[  126.198629][ T5332] input: syz0 as /devices/virtual/input/input7
[  126.317014][ T5336] loop0: detected capacity change from 0 to 256
[  126.699970][ T5349] loop0: detected capacity change from 0 to 512
[  126.790163][ T5349] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.344: iget: bogus i_mode (0)
[  126.845512][ T5349] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.344: couldn't read orphan inode 17 (err -117)
[  126.905974][ T5357] bridge0: port 3(team0) entered blocking state
[  126.906036][ T5349] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  126.970839][ T5349] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.344: bg 0: block 7: invalid block bitmap
[  127.000860][ T5357] bridge0: port 3(team0) entered disabled state
[  127.028728][ T5357] device team0 entered promiscuous mode
[  127.037923][ T5357] device team_slave_0 entered promiscuous mode
[  127.055274][ T5357] device team_slave_1 entered promiscuous mode
[  127.086320][ T5357] bridge0: port 3(team0) entered blocking state
[  127.093276][ T5357] bridge0: port 3(team0) entered forwarding state
[  127.181081][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  127.436910][ T5370] netlink: 'syz.0.348': attribute type 25 has an invalid length.
[  127.444712][ T5370] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'.
[  127.560623][ T5373] loop2: detected capacity change from 0 to 2048
[  127.606762][ T5373] UDF-fs: bad mount option "������0xffffffffffffffff�選T����JfW�J"Ǫ�ʈnt�	��*PN�)��Ai���'���<�9���L" or missing value
[  127.645662][ T4525] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  127.711768][ T4332] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  127.831152][ T4525] usb 4-1: Using ep0 maxpacket: 16
[  127.857792][ T4525] usb 4-1: unable to get BOS descriptor or descriptor too short
[  127.918747][ T4525] usb 4-1: unable to read config index 0 descriptor/start: -71
[  127.949428][ T4525] usb 4-1: can't read configurations, error -71
[  128.540717][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'.
[  128.838062][ T5248] Set syz1 is full, maxelem 65536 reached
[  128.844566][ T5408] loop6: detected capacity change from 0 to 524287999
[  128.881204][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  128.890503][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  128.919144][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  128.928418][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  128.994654][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  129.003941][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.019365][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  129.021362][ T5411] loop1: detected capacity change from 0 to 1024
[  129.028581][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.043226][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  129.052435][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.064850][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  129.074233][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.123114][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  129.132345][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.140815][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  129.150106][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.158236][ T5408] ldm_validate_partition_table(): Disk read failed.
[  129.190813][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  129.200104][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.211373][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  129.240790][ T5411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  129.259196][ T5408] Dev loop6: unable to read RDB block 0
[  129.333190][ T5408]  loop6: unable to read partition table
[  129.341540][   T27] audit: type=1800 audit(1741919060.284:21): pid=5411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.367" name="file1" dev="loop1" ino=15 res=0 errno=0
[  129.357851][ T5408] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  129.542141][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  129.804732][ T5442] netlink: 'syz.0.378': attribute type 3 has an invalid length.
[  129.861446][ T5444] loop3: detected capacity change from 0 to 128
[  129.925763][ T4260] Bluetooth: hci3: Opcode 0x206c failed: -110
[  129.925880][   T48] Bluetooth: hci3: command 0x206e tx timeout
[  129.947391][ T4260] Bluetooth: hci3: Opcode 0x2046 failed: -110
[  129.971897][ T5444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  130.018947][ T5444] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.194491][ T5454] loop0: detected capacity change from 0 to 2048
[  130.207152][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  130.236718][ T5454] UDF-fs: bad mount option "nos�rict" or missing value
[  130.280387][ T5457] loop1: detected capacity change from 0 to 256
[  130.328269][ T5457] exfat: Deprecated parameter 'utf8'
[  130.362495][ T5457] exfat: Deprecated parameter 'namecase'
[  130.380151][ T5454] loop0: detected capacity change from 0 to 1994
[  130.397776][ T5457] exfat: Deprecated parameter 'utf8'
[  130.444776][ T5457] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  130.498480][ T5454] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=2016, location=2016
[  130.532464][ T5454] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.564942][ T5465] loop3: detected capacity change from 0 to 256
[  130.583366][ T5454] UDF-fs: error (device loop0): udf_read_inode: (ino 1376) failed !bh
[  130.615476][ T5465] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  130.634392][ T5454] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=64, partition=0
[  130.709447][ T5467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'.
[  130.745777][ T4525] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  130.765456][ T5469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.392'.
[  130.937661][ T4525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.959009][ T4525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.002157][ T4525] usb 5-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00
[  131.039009][ T4525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.052671][ T4525] usb 5-1: config 0 descriptor??
[  131.255661][ T4878] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  131.446029][ T4878] usb 3-1: Using ep0 maxpacket: 8
[  131.465045][ T4878] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  131.486613][ T4878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.494697][ T4878] usb 3-1: Product: syz
[  131.498085][ T4525] hid-generic 0003:0EEF:C002.0004: unbalanced delimiter at end of report description
[  131.509781][ T4878] usb 3-1: Manufacturer: syz
[  131.514447][ T4878] usb 3-1: SerialNumber: syz
[  131.515911][ T5485] loop0: detected capacity change from 0 to 256
[  131.526655][ T4525] hid-generic: probe of 0003:0EEF:C002.0004 failed with error -22
[  131.552800][ T5485] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  131.561635][ T4878] usb 3-1: config 0 descriptor??
[  131.584166][ T5485] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  131.620921][ T4878] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  131.642964][ T5485] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  131.712261][ T4525] usb 5-1: USB disconnect, device number 2
[  131.798258][ T5477] loop1: detected capacity change from 0 to 32768
[  131.820072][ T4878] gspca_sn9c2028: read1 error -32
[  131.830567][ T4878] gspca_sn9c2028: read1 error -32
[  131.928198][ T4260] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  131.937293][ T4260] Bluetooth: hci3: Injecting HCI hardware error event
[  131.955228][   T48] Bluetooth: hci3: hardware error 0x00
[  132.070031][ T4878] usb 3-1: USB disconnect, device number 5
[  132.202813][ T5483] loop3: detected capacity change from 0 to 32768
[  132.270383][ T5483] XFS (loop3): Mounting V5 Filesystem
[  132.514454][ T5483] XFS (loop3): Ending clean mount
[  132.563670][ T5483] XFS (loop3): Quotacheck needed: Please wait.
[  132.663173][ T5483] XFS (loop3): Quotacheck: Done.
[  132.794196][ T4264] XFS (loop3): Unmounting Filesystem
[  132.872072][ T5512] loop0: detected capacity change from 0 to 4096
[  132.896312][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  132.903592][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  132.920693][ T5512] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  132.943695][ T5512] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  132.998197][ T5512] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  133.024216][ T5512] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00
[  133.050112][ T5512] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00
[  133.075908][ T5512] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00
[  133.088503][ T5512] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00
[  133.107377][ T5512] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00
[  133.130955][ T5512] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00
[  133.161735][ T5512] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00
[  133.305808][ T1191] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  133.508641][ T1191] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  133.529344][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.575489][ T1191] usb 3-1: config 0 descriptor??
[  133.588779][ T1191] cp210x 3-1:0.0: cp210x converter detected
[  133.651856][ T5525] loop0: detected capacity change from 0 to 1024
[  133.680276][ T5525] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  133.740158][ T5519] loop1: detected capacity change from 0 to 32768
[  133.756538][ T5519] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.411 (5519)
[  133.821235][ T4250] EXT4-fs (loop0): unmounting filesystem.
[  133.876449][ T5519] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  133.912659][ T5519] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  133.932855][ T5519] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  133.935718][ T4525] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  133.972697][ T5519] BTRFS info (device loop1): use lzo compression, level 0
[  133.991630][ T5519] BTRFS info (device loop1): using free space tree
[  134.007216][   T48] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  134.147131][ T4525] usb 4-1: Using ep0 maxpacket: 16
[  134.179358][ T4525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.191331][ T4525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.201576][ T1191] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  134.205281][ T4525] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  134.218929][ T4525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.227268][ T1191] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  134.240403][ T4525] usb 4-1: config 0 descriptor??
[  134.251650][ T1191] usb 3-1: cp210x converter now attached to ttyUSB0
[  134.284320][ T5519] BTRFS info (device loop1): enabling ssd optimizations
[  134.302540][ T1191] usb 3-1: USB disconnect, device number 6
[  134.330662][ T1191] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  134.356306][ T1191] cp210x 3-1:0.0: device disconnected
[  134.554612][ T4249] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  134.696609][ T4525] elan 0003:04F3:0755.0005: failed to start in urb: -90
[  134.790857][ T5531] loop4: detected capacity change from 0 to 32768
[  134.810741][ T4525] elan 0003:04F3:0755.0005: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  134.861254][ T5531] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.415 (5531)
[  134.903543][ T4525] usb 4-1: USB disconnect, device number 6
[  134.977733][ T5531] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.025743][ T5531] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  135.034526][ T5531] BTRFS info (device loop4): use no compression
[  135.076047][ T5531] BTRFS info (device loop4): force zlib compression, level 3
[  135.083507][ T5531] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  135.159929][ T5531] BTRFS info (device loop4): use lzo compression, level 0
[  135.175727][ T5531] BTRFS info (device loop4): turning on flush-on-commit
[  135.182827][ T5531] BTRFS info (device loop4): enabling auto defrag
[  135.198754][ T5531] BTRFS info (device loop4): using free space tree
[  135.551019][ T5531] BTRFS info (device loop4): enabling ssd optimizations
[  135.636201][ T5555] loop0: detected capacity change from 0 to 40427
[  135.699341][ T5555] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[  135.753291][ T4262] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.797239][ T5555] F2FS-fs (loop0): invalid crc value
[  135.833978][ T5555] F2FS-fs (loop0): Found nat_bits in checkpoint
[  135.860354][ T5587] loop1: detected capacity change from 0 to 512
[  136.069124][ T5587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  136.109367][ T5587] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.209656][ T5597] Quota error (device loop1): do_check_range: Getting block 4128768 out of range 0-5
[  136.245502][ T5558] loop2: detected capacity change from 0 to 32768
[  136.253065][ T5555] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  136.413945][   T27] audit: type=1800 audit(1741919067.354:22): pid=5558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.420" name="file1" dev="loop2" ino=4 res=0 errno=0
[  136.479373][ T5558] syz.2.420: attempt to access beyond end of device
[  136.479373][ T5558] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  136.503197][ T4250] syz-executor: attempt to access beyond end of device
[  136.503197][ T4250] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  136.513905][ T5558] metapage_write_end_io: I/O error
[  136.517644][ T5604] capability: warning: `syz.4.427' uses deprecated v2 capabilities in a way that may be insecure
[  136.564360][ T5558] blkno = 8ed2c, nblocks = 1
[  136.575911][ T5558] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  136.575911][ T5558] 
[  136.621686][ T5558] ERROR: (device loop2): remounting filesystem as read-only
[  136.652465][ T5558] blkno = 8ed2c, nblocks = 1
[  136.661824][ T5558] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  136.661824][ T5558] 
[  136.683511][ T4249] EXT4-fs (loop1): unmounting filesystem.
[  136.718841][ T5558] UFO tlock:0xffffc9000287a240
[  136.852713][ T5558] ERROR: (device loop2): dbAllocBits: leaf page corrupt
[  136.852713][ T5558] 
[  136.891255][ T5558] syz.2.420: attempt to access beyond end of device
[  136.891255][ T5558] loop2: rw=34817, sector=4680704, nr_sectors = 968 limit=32768
[  136.973543][  T106] blkno = 8ed2c, nblocks = 4
[  136.979632][  T106] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  136.979632][  T106] 
[  137.015686][  T106] blkno = 8ed80, nblocks = 79
[  137.030684][  T106] ERROR: (device loop2): dbFree: block to be freed is outside the map
[  137.030684][  T106] 
[  137.193913][ T4256] syz-executor: attempt to access beyond end of device
[  137.193913][ T4256] loop2: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  137.230497][ T4256] metapage_write_end_io: I/O error
[  137.250840][ T4256] JFS: metapage_get_blocks failed
[  137.266465][ T4256] JFS: metapage_get_blocks failed
[  137.271590][ T4256] JFS: metapage_get_blocks failed
[  137.291903][ T4256] JFS: metapage_get_blocks failed
[  137.699216][ T5606] loop3: detected capacity change from 0 to 40427
[  137.735424][ T5606] F2FS-fs (loop3): Invalid segment count (0)
[  137.766799][ T5606] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  137.806941][ T5606] F2FS-fs (loop3): invalid crc value
[  137.848190][ T5606] F2FS-fs (loop3): Found nat_bits in checkpoint
[  137.970613][ T5606] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  137.987548][ T5606] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  138.153918][ T4264] syz-executor: attempt to access beyond end of device
[  138.153918][ T4264] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  138.339200][ T5636] Falling back ldisc for ttyS3.
[  138.463740][ T5638] loop0: detected capacity change from 0 to 256
[  139.136557][ T5657] device hsr0 entered promiscuous mode
[  139.194808][ T5657] device hsr0 left promiscuous mode
[  139.253568][ T5661] UHID_CREATE from different security context by process 189 (syz.1.452), this is not allowed.
[  139.282597][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.301962][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.319396][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.336445][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.352881][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.371610][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.388272][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.404942][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.420535][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.437240][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.452756][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.471644][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.488228][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.503816][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.519020][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.532396][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.544617][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.556967][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.572970][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.585103][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.598556][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.612975][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.625079][ T5649] loop0: detected capacity change from 0 to 40427
[  139.630213][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.641796][ T5649] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  139.651267][ T5649] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  139.663513][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.687678][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.689399][ T5649] F2FS-fs (loop0): invalid crc value
[  139.704502][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.728311][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.742351][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.750415][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.764177][ T5649] F2FS-fs (loop0): Found nat_bits in checkpoint
[  139.764331][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.786891][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.794532][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.803016][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.810811][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.818668][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.827155][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.834682][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.842647][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.850544][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.858419][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.887543][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.895015][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.913305][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.918591][ T5649] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  139.922343][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.938064][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.945921][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.953463][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  139.960876][ T5649] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  140.006403][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.014007][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.022210][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.030453][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.038402][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.049583][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.057799][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.065248][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.073223][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.082879][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.090872][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.098746][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.106712][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.114238][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.122223][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.130054][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.137964][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.145514][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.153453][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.161252][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.169151][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.178091][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.185738][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.193329][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.201036][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.208790][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.216632][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.224058][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.231627][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.239462][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.247128][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.254717][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.262384][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.269860][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.277481][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.286661][ T4346] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  140.316088][ T4346] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  141.132665][ T5687] loop4: detected capacity change from 0 to 4096
[  141.176604][ T5687] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  141.368938][   T27] audit: type=1800 audit(1741919072.314:23): pid=5698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.463" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=30 res=0 errno=0
[  141.770535][ T5710] netlink: 428 bytes leftover after parsing attributes in process `syz.1.473'.
[  141.804033][ T5710] netlink: 32 bytes leftover after parsing attributes in process `syz.1.473'.
[  141.830438][ T5712] loop4: detected capacity change from 0 to 1024
[  141.999771][ T5712] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  142.138618][   T27] audit: type=1804 audit(1741919073.084:24): pid=5712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.472" name="/newroot/92/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  142.278485][ T4262] EXT4-fs (loop4): unmounting filesystem.
[  142.577272][ T5703] loop0: detected capacity change from 0 to 40427
[  142.606021][ T5703] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  142.615501][ T5703] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  142.697711][ T5703] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  142.813689][ T5703] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  142.826301][ T5703] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  142.871488][ T5703] syz.0.469: attempt to access beyond end of device
[  142.871488][ T5703] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  142.988678][ T5722] loop1: detected capacity change from 0 to 32768
[  143.013993][ T5722] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.475 (5722)
[  143.027941][ T4250] syz-executor: attempt to access beyond end of device
[  143.027941][ T4250] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  143.071779][ T5722] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.093390][ T5722] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  143.122803][ T5722] BTRFS info (device loop1): setting nodatacow, compression disabled
[  143.178358][ T5722] BTRFS info (device loop1): enabling auto defrag
[  143.207695][ T5722] BTRFS info (device loop1): max_inline at 0
[  143.232960][ T5722] BTRFS info (device loop1): using free space tree
[  143.616703][ T5758] loop3: detected capacity change from 0 to 1024
[  143.637487][ T5758] EXT4-fs: Ignoring removed nomblk_io_submit option
[  143.731684][ T5758] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  143.917828][ T4249] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.998204][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  144.241834][ T5773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.488'.
[  144.868729][ T5787] device bond_slave_0 entered promiscuous mode
[  144.875528][ T5787] device bond_slave_1 entered promiscuous mode
[  144.888266][ T5787] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  144.898320][ T5787] device bond_slave_0 left promiscuous mode
[  144.904394][ T5787] device bond_slave_1 left promiscuous mode
[  145.249339][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.274880][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.293261][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.308042][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.324240][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.340982][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.356783][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.373251][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.413798][ T5796] loop2: detected capacity change from 0 to 512
[  145.427683][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.448509][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.465654][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.481617][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.496844][ T5796] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  145.508574][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.528758][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.543045][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.563530][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.584673][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.593356][ T5796] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.497: invalid block
[  145.625022][ T5800] pim6reg0: tun_chr_ioctl cmd 1074025677
[  145.631114][ T5800] pim6reg0: linktype set to 773
[  145.656794][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.665042][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.683647][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.696268][ T5796] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.497: invalid indirect mapped block 4294967295 (level 1)
[  145.706284][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.755655][ T5796] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.497: invalid indirect mapped block 4294967295 (level 1)
[  145.785725][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.793526][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.803072][ T5796] EXT4-fs (loop2): 2 truncates cleaned up
[  145.809217][ T5796] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  145.826475][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.834174][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.854303][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.865695][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.873162][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.904250][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.918202][ T5796] EXT4-fs (loop2): shut down requested (2)
[  145.924165][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.942253][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  145.979472][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.005638][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.023457][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.039200][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.047193][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.054879][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.055082][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  146.062413][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.062440][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.062462][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.062485][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.062551][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.162020][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.179816][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.193222][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.211240][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.221415][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.235785][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.253587][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.263737][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.283981][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.304206][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.324627][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.345649][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.363494][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.371221][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.380274][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.387996][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.395919][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.403451][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.411602][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.419390][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.435227][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.449681][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.464321][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.477715][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.492173][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.507187][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.521496][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.535115][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.548464][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.562900][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.576317][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.589441][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.603903][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.617960][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.631679][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.639629][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.647324][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.654998][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.662745][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.675629][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.683101][ T5557] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  146.725945][ T5557] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  147.246385][ T5820] vxcan1: tx address claim with dlc 0
[  147.435318][ T5824] netlink: 428 bytes leftover after parsing attributes in process `syz.4.508'.
[  147.470836][ T5824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.508'.
[  148.322728][ T5842] loop0: detected capacity change from 0 to 4096
[  148.463519][ T5848] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.752886][ T5850] loop2: detected capacity change from 0 to 1024
[  148.931497][ T5850] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  148.976756][ T5850] EXT4-fs (loop2): shut down requested (2)
[  149.216232][ T5859] loop4: detected capacity change from 0 to 256
[  149.217257][ T4256] EXT4-fs (loop2): unmounting filesystem.
[  149.562982][ T5868] netlink: 60 bytes leftover after parsing attributes in process `syz.4.528'.
[  149.788763][ T5872] device bond_slave_0 entered promiscuous mode
[  149.795095][ T5872] device bond_slave_1 entered promiscuous mode
[  149.816797][ T5872] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  149.855460][ T5872] device bond_slave_0 left promiscuous mode
[  149.861749][ T5872] device bond_slave_1 left promiscuous mode
[  149.926590][ T5781] Set syz1 is full, maxelem 65536 reached
[  150.588186][ T5864] loop2: detected capacity change from 0 to 40427
[  150.630375][ T5864] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  150.647443][ T5887] loop3: detected capacity change from 0 to 2048
[  150.674470][ T5864] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  150.743851][ T5864] F2FS-fs (loop2): invalid crc value
[  150.744843][ T5887] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.787973][ T5864] F2FS-fs (loop2): Found nat_bits in checkpoint
[  151.008952][ T5864] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  151.030029][ T5864] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  152.200209][ T5929] loop2: detected capacity change from 0 to 64
[  152.244911][ T5929] hfs: unable to locate alternate MDB
[  152.281734][ T5933] loop3: detected capacity change from 0 to 512
[  152.288583][ T5929] hfs: continuing without an alternate MDB
[  152.350577][   T27] audit: type=1800 audit(1741919083.294:25): pid=5929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.543" name="file1" dev="loop2" ino=18 res=0 errno=0
[  152.450705][ T5933] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 33619980: comm syz.3.544: invalid block
[  152.544949][ T5933] EXT4-fs (loop3): Remounting filesystem read-only
[  152.616166][ T5933] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.544: attempt to clear invalid blocks 1024 len 1
[  152.680112][ T5933] EXT4-fs (loop3): Remounting filesystem read-only
[  152.687703][ T5933] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  152.700182][ T4346] kernel write not supported for file /sg0 (pid: 4346 comm: kworker/1:9)
[  152.739085][ T5933] EXT4-fs (loop3): Remounting filesystem read-only
[  152.758490][ T5933] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.544: invalid indirect mapped block 1819213824 (level 0)
[  152.858638][ T5933] EXT4-fs (loop3): Remounting filesystem read-only
[  152.902964][ T5933] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.544: invalid indirect mapped block 33554432 (level 2)
[  152.925491][ T5933] EXT4-fs (loop3): Remounting filesystem read-only
[  152.934230][ T5933] EXT4-fs (loop3): 1 truncate cleaned up
[  152.943289][ T5933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  153.170035][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  153.231707][ T5958] netlink: 'syz.1.552': attribute type 5 has an invalid length.
[  153.667304][ T5966] loop0: detected capacity change from 0 to 8192
[  153.713063][ T5966] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  153.765853][ T5966] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  153.856403][ T5966] REISERFS (device loop0): using ordered data mode
[  153.862979][ T5966] reiserfs: using flush barriers
[  153.912838][ T5966] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  153.980893][ T5966] REISERFS (device loop0): checking transaction log (loop0)
[  154.032664][ T5988] loop2: detected capacity change from 0 to 2048
[  154.104058][ T5988] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  154.187562][ T5991] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.319841][ T5966] REISERFS (device loop0): Using tea hash to sort names
[  154.339367][ T5966] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  154.570542][ T4872] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  154.671469][ T5984] loop4: detected capacity change from 0 to 32768
[  154.695803][ T5986] loop3: detected capacity change from 0 to 32768
[  154.721893][ T5986] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.566 (5986)
[  154.767902][ T5986] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  154.792113][ T5986] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  154.794132][ T4872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.818640][ T4872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  154.828591][ T5986] BTRFS info (device loop3): using free space tree
[  154.839266][ T5984] XFS (loop4): Mounting V5 Filesystem
[  154.845058][ T6003] bond0: Unable to set up delay as MII monitoring is disabled
[  154.845853][ T4872] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  154.892217][ T4872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.901527][ T4872] usb 2-1: Product: syz
[  154.924314][ T4872] usb 2-1: Manufacturer: syz
[  154.941500][ T4872] usb 2-1: SerialNumber: syz
[  154.984185][ T5984] XFS (loop4): Ending clean mount
[  155.081561][ T5986] BTRFS info (device loop3): enabling ssd optimizations
[  155.101072][ T4262] XFS (loop4): Unmounting Filesystem
[  155.186284][ T4872] usb 2-1: 0:2 : does not exist
[  155.203467][ T4872] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  155.467301][ T4872] usb 2-1: USB disconnect, device number 4
[  155.591091][ T4264] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  155.781996][ T4332] udevd[4332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.553610][   T27] audit: type=1326 audit(1741919087.494:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.3.575" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e5398d169 code=0x0
[  156.570874][ T6030] loop0: detected capacity change from 0 to 32768
[  156.612053][ T6034] loop4: detected capacity change from 0 to 32768
[  156.626609][ T6034] XFS: ikeep mount option is deprecated.
[  156.651673][ T6030] XFS (loop0): Mounting V5 Filesystem
[  156.704440][ T6034] XFS (loop4): Mounting V5 Filesystem
[  156.756886][ T6030] XFS (loop0): Ending clean mount
[  156.781326][ T6030] XFS (loop0): Quotacheck needed: Please wait.
[  156.865802][ T6030] XFS (loop0): Quotacheck: Done.
[  156.873350][ T6034] XFS (loop4): Ending clean mount
[  156.890573][ T6076] loop1: detected capacity change from 0 to 128
[  156.920925][ T6034] XFS (loop4): Quotacheck needed: Please wait.
[  156.957878][ T6076] FAT-fs (loop1): Directory bread(block 32) failed
[  156.991755][ T6076] FAT-fs (loop1): Directory bread(block 33) failed
[  157.008813][ T6034] XFS (loop4): Quotacheck: Done.
[  157.015455][ T6076] FAT-fs (loop1): Directory bread(block 34) failed
[  157.026397][ T6076] FAT-fs (loop1): Directory bread(block 35) failed
[  157.033107][ T6076] FAT-fs (loop1): Directory bread(block 36) failed
[  157.080183][ T4250] XFS (loop0): Unmounting Filesystem
[  157.080561][ T6076] FAT-fs (loop1): Directory bread(block 37) failed
[  157.094084][ T6076] FAT-fs (loop1): Directory bread(block 38) failed
[  157.122890][ T6076] FAT-fs (loop1): Directory bread(block 39) failed
[  157.165723][ T6076] FAT-fs (loop1): Directory bread(block 40) failed
[  157.182603][ T6076] FAT-fs (loop1): Directory bread(block 41) failed
[  157.252575][ T6080] loop2: detected capacity change from 0 to 2048
[  157.260989][ T6080] UDF-fs: bad mount option "01777777777777777777777��18446744073709551615" or missing value
[  157.290603][ T4262] XFS (loop4): Unmounting Filesystem
[  157.946832][ T6089] loop2: detected capacity change from 0 to 2048
[  158.067536][ T6094] loop0: detected capacity change from 0 to 16
[  158.088729][ T6094] erofs: (device loop0): mounted with root inode @ nid 36.
[  158.155397][ T6096] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.168389][ T6094] overlayfs: failed to get redirect (-117)
[  158.637018][ T6106] loop2: detected capacity change from 0 to 4096
[  158.665666][ T6106] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  158.890753][ T6111] netlink: 6 bytes leftover after parsing attributes in process `syz.0.602'.
[  159.346736][ T6102] loop4: detected capacity change from 0 to 32768
[  159.470734][ T6136] loop0: detected capacity change from 0 to 64
[  159.498771][ T6102] XFS (loop4): Mounting V5 Filesystem
[  159.679611][   T27] audit: type=1800 audit(1741919090.624:27): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.611" name="file1" dev="loop0" ino=18 res=0 errno=0
[  159.718902][ T6102] XFS (loop4): Ending clean mount
[  159.907611][ T4262] XFS (loop4): Unmounting Filesystem
[  159.955861][ T5594] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  160.109755][ T6155] loop3: detected capacity change from 0 to 128
[  160.155947][ T5594] usb 3-1: Using ep0 maxpacket: 8
[  160.167565][ T5594] usb 3-1: unable to get BOS descriptor or descriptor too short
[  160.178103][ T6155] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512)
[  160.190911][ T6155] FAT-fs (loop3): Filesystem has been set read-only
[  160.200621][ T6155] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512)
[  160.207127][ T5594] usb 3-1: config 4 interface 0 has no altsetting 0
[  160.238556][ T5594] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  160.258301][ T5594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.296796][ T5594] usb 3-1: Product: syz
[  160.301037][ T5594] usb 3-1: Manufacturer: syz
[  160.317055][ T5594] usb 3-1: SerialNumber: syz
[  160.493853][ T6164] netlink: 'syz.3.622': attribute type 1 has an invalid length.
[  160.512051][ T6164] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.622'.
[  160.777351][ T5594] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  160.821894][ T5594] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  160.828643][ T6173] sctp: [Deprecated]: syz.4.625 (pid 6173) Use of struct sctp_assoc_value in delayed_ack socket option.
[  160.828643][ T6173] Use struct sctp_sack_info instead
[  160.838412][ T5594] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  160.884671][ T5594] usb 3-1: media controller created
[  160.933381][ T5594] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.293322][ T5594] usb 3-1: USB disconnect, device number 7
[  161.745198][ T6195] netlink: 'syz.3.637': attribute type 3 has an invalid length.
[  162.244538][ T6211] sctp: [Deprecated]: syz.1.643 (pid 6211) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.244538][ T6211] Use struct sctp_sack_info instead
[  162.437531][  T128] kernel read not supported for file /dsp1 (pid: 128 comm: kworker/1:2)
[  163.173035][ T6217] loop3: detected capacity change from 0 to 40427
[  163.243555][ T6217] F2FS-fs (loop3): invalid crc value
[  163.320049][ T6217] F2FS-fs (loop3): Found nat_bits in checkpoint
[  163.426021][ T6217] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  163.484394][ T6217] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  163.535777][ T6042] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  163.576223][ T6217] syz.3.646: attempt to access beyond end of device
[  163.576223][ T6217] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.729291][ T6042] usb 5-1: Using ep0 maxpacket: 8
[  163.738334][ T6042] usb 5-1: unable to get BOS descriptor or descriptor too short
[  163.786917][ T6042] usb 5-1: config 4 interface 0 has no altsetting 0
[  163.814736][ T6042] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  163.840981][ T6042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.862145][ T6042] usb 5-1: Product: syz
[  163.871019][ T6042] usb 5-1: Manufacturer: syz
[  163.880258][ T6042] usb 5-1: SerialNumber: syz
[  163.915150][ T6204] loop0: detected capacity change from 0 to 65536
[  163.927523][    C1] ------------[ cut here ]------------
[  163.933732][    C1] WARNING: CPU: 1 PID: 3623 at net/ipv4/route.c:1274 ip_rt_bug+0x25/0xf0
[  163.942251][    C1] Modules linked in:
[  163.946221][    C1] CPU: 1 PID: 3623 Comm: udevd Not tainted 6.1.131-syzkaller #0
[  163.953917][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  163.964922][    C1] RIP: 0010:ip_rt_bug+0x25/0xf0
[  163.969864][    C1] Code: ff ff 0f 1f 00 41 57 41 56 41 55 41 54 53 48 89 d3 e8 2f b1 61 f8 66 90 e8 28 b1 61 f8 48 89 df be 01 00 00 00 e8 cb 06 76 ff <0f> 0b 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 49 bd 00 00 00 00 00 fc
[  163.989845][    C1] RSP: 0018:ffffc900001e0638 EFLAGS: 00010296
[  163.996185][    C1] RAX: 7bff1a08fc9ba901 RBX: ffff888027f6c640 RCX: ffffffff816b249a
[  164.004199][    C1] RDX: dffffc0000000000 RSI: ffffffff8b0c1d40 RDI: ffffffff8b5f6f80
[  164.012434][    C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff225725f
[  164.020502][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027f6c640
[  164.028570][    C1] R13: ffff888027f6c698 R14: ffff88807373b880 R15: ffff88801eef9380
[  164.036637][    C1] FS:  00007fa590ba8c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  164.045671][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.052307][    C1] CR2: 00007f55b2178ab8 CR3: 00000000215ca000 CR4: 00000000003506e0
[  164.060944][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  164.069016][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  164.077084][    C1] Call Trace:
[  164.080422][    C1]  <IRQ>
[  164.083309][    C1]  ? __warn+0x15a/0x520
[  164.087565][    C1]  ? ip_rt_bug+0x25/0xf0
[  164.091871][    C1]  ? report_bug+0x2af/0x500
[  164.096466][    C1]  ? ip_rt_bug+0x25/0xf0
[  164.100805][    C1]  ? handle_bug+0x3d/0x70
[  164.105185][    C1]  ? exc_invalid_op+0x16/0x40
[  164.109957][    C1]  ? asm_exc_invalid_op+0x16/0x20
[  164.115038][    C1]  ? mark_lock+0x9a/0x340
[  164.119487][    C1]  ? ip_rt_bug+0x25/0xf0
[  164.123786][    C1]  ? ip_rt_bug+0x25/0xf0
[  164.128132][    C1]  ip_send_skb+0x113/0x1a0
[  164.132591][    C1]  __icmp_send+0x12fd/0x1840
[  164.137265][    C1]  ? __icmp_send+0x21c/0x1840
[  164.142119][    C1]  ? icmp_out_count+0x90/0x90
[  164.147078][    C1]  ? look_up_lock_class+0x77/0x140
[  164.152308][    C1]  ? mark_lock+0x9a/0x340
[  164.157102][    C1]  ipv4_link_failure+0x63d/0xa20
[  164.162279][    C1]  ? ipv4_negative_advice+0x1a0/0x1a0
[  164.167754][    C1]  ? do_raw_write_lock+0x143/0x4e0
[  164.172913][    C1]  ? ipv4_negative_advice+0x1a0/0x1a0
[  164.178387][    C1]  arp_error_report+0x112/0x160
[  164.183303][    C1]  neigh_invalidate+0x240/0x460
[  164.188265][    C1]  neigh_timer_handler+0x8a1/0x1010
[  164.193524][    C1]  call_timer_fn+0x1ad/0x6b0
[  164.198205][    C1]  ? neigh_release+0x80/0x80
[  164.203370][    C1]  ? call_timer_fn+0xc2/0x6b0
[  164.208144][    C1]  ? __run_timers+0x890/0x890
[  164.212873][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  164.218169][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  164.223414][    C1]  ? neigh_release+0x80/0x80
[  164.228106][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  164.233355][    C1]  ? neigh_release+0x80/0x80
[  164.238044][    C1]  __run_timers+0x67c/0x890
[  164.242707][    C1]  ? detach_timer+0x380/0x380
[  164.247480][    C1]  ? print_irqtrace_events+0x210/0x210
[  164.252989][    C1]  ? seqcount_lockdep_reader_access+0x1bd/0x220
[  164.259466][    C1]  run_timer_softirq+0x63/0xf0
[  164.264283][    C1]  handle_softirqs+0x2ee/0xa40
[  164.269155][    C1]  ? __irq_exit_rcu+0x157/0x240
[  164.274064][    C1]  ? do_softirq+0x240/0x240
[  164.278774][    C1]  ? irqtime_account_irq+0xd0/0x1e0
[  164.284026][    C1]  __irq_exit_rcu+0x157/0x240
[  164.288815][    C1]  ? irq_exit_rcu+0x20/0x20
[  164.293414][    C1]  irq_exit_rcu+0x5/0x20
[  164.297751][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  164.303444][    C1]  </IRQ>
[  164.306450][    C1]  <TASK>
[  164.309506][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  164.315593][    C1] RIP: 0010:__sanitizer_cov_trace_switch+0x83/0xe0
[  164.322151][    C1] Code: 8b 74 d6 10 65 8b 05 c4 c0 77 7e 25 00 01 ff 00 74 11 3d 00 01 00 00 75 de 41 83 bb 1c 16 00 00 00 74 d4 41 8b 83 f8 15 00 00 <83> f8 03 75 c8 49 8b 8b 00 16 00 00 45 8b bb fc 15 00 00 49 c1 e7
[  164.341950][    C1] RSP: 0018:ffffc900032d76b8 EFLAGS: 00000246
[  164.348110][    C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000000008b
[  164.356179][    C1] RDX: 000000000000000a RSI: ffffffff8e89db00 RDI: 0000000000000000
[  164.364198][    C1] RBP: ffffc900032d77d0 R08: 0000000000000001 R09: ffffffff8aabb580
[  164.372275][    C1] R10: 0000000000000012 R11: ffff88807d6bd940 R12: 0000000000000000
[  164.380329][    C1] R13: 0000000000000000 R14: 000000000000000a R15: ffffffff8b58ae40
[  164.388411][    C1]  ? vsnprintf+0x190/0x1c70
[  164.392981][    C1]  vsnprintf+0x190/0x1c70
[  164.397521][    C1]  ? ptr_to_hashval+0x70/0x70
[  164.402256][    C1]  tomoyo_supervisor+0x123/0x12d0
[  164.407394][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  164.413433][    C1]  ? print_irqtrace_events+0x210/0x210
[  164.419012][    C1]  ? tomoyo_path_permission+0x1cc/0x360
[  164.424618][    C1]  ? tomoyo_profile+0x50/0x50
[  164.429404][    C1]  ? kasan_quarantine_put+0xd4/0x220
[  164.434739][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  164.440062][    C1]  ? tomoyo_check_path_acl+0x132/0x1c0
[  164.445622][    C1]  ? tomoyo_check_acl+0x374/0x3e0
[  164.452701][    C1]  ? tomoyo_execute_permission+0x410/0x410
[  164.452794][    C1]  tomoyo_path_permission+0x243/0x360
[  164.464214][    C1]  tomoyo_path_perm+0x478/0x710
[  164.469201][    C1]  ? tomoyo_path_perm+0x272/0x710
[  164.474281][    C1]  ? tomoyo_path_permission+0x360/0x360
[  164.479988][    C1]  ? __might_sleep+0xb0/0xb0
[  164.484625][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  164.489813][    C1]  security_inode_getattr+0xcf/0x120
[  164.495155][    C1]  vfs_statx+0x18b/0x480
[  164.499527][    C1]  ? vfs_fstatat+0x70/0x70
[  164.503999][    C1]  __x64_sys_newfstatat+0x151/0x1e0
[  164.509321][    C1]  ? __ia32_sys_newlstat+0x180/0x180
[  164.514678][    C1]  ? syscall_enter_from_user_mode+0x2e/0x230
[  164.520784][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  164.526083][    C1]  ? syscall_enter_from_user_mode+0x2e/0x230
[  164.532128][    C1]  do_syscall_64+0x3b/0xb0
[  164.536644][    C1]  ? clear_bhb_loop+0x45/0xa0
[  164.541383][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  164.547358][    C1] RIP: 0033:0x7fa5907165f4
[  164.551843][    C1] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8
[  164.571519][    C1] RSP: 002b:00007ffcce2610e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000106
[  164.579996][    C1] RAX: ffffffffffffffda RBX: 0000564acef02900 RCX: 00007fa5907165f4
[  164.588050][    C1] RDX: 00007ffcce261100 RSI: 00007fa5907b3130 RDI: 000000000000000d
[  164.596118][    C1] RBP: 0000564acef60260 R08: 0000000000090800 R09: 0000564acef1e880
[  164.604159][    C1] R10: 0000000000001000 R11: 0000000000000202 R12: 00007ffcce261100
[  164.610909][ T6204] XFS (loop0): Mounting V5 Filesystem
[  164.612204][    C1] R13: 00000000000000ff R14: 0000564acc8891c4 R15: 0000000000000000
[  164.625656][    C1]  </TASK>
[  164.628715][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  164.636007][    C1] CPU: 1 PID: 3623 Comm: udevd Not tainted 6.1.131-syzkaller #0
[  164.643638][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  164.653714][    C1] Call Trace:
[  164.657031][    C1]  <IRQ>
[  164.659890][    C1]  dump_stack_lvl+0x1e3/0x2cb
[  164.664572][    C1]  ? nf_tcp_handle_invalid+0x647/0x647
[  164.670145][    C1]  ? panic+0x764/0x764
[  164.674236][    C1]  ? vscnprintf+0x59/0x80
[  164.678584][    C1]  panic+0x318/0x764
[  164.682520][    C1]  ? __warn+0x169/0x520
[  164.686696][    C1]  ? memcpy_page_flushcache+0xfc/0xfc
[  164.692135][    C1]  __warn+0x348/0x520
[  164.696132][    C1]  ? ip_rt_bug+0x25/0xf0
[  164.700418][    C1]  report_bug+0x2af/0x500
[  164.704773][    C1]  ? ip_rt_bug+0x25/0xf0
[  164.709075][    C1]  handle_bug+0x3d/0x70
[  164.713259][    C1]  exc_invalid_op+0x16/0x40
[  164.717767][    C1]  asm_exc_invalid_op+0x16/0x20
[  164.722631][    C1] RIP: 0010:ip_rt_bug+0x25/0xf0
[  164.727489][    C1] Code: ff ff 0f 1f 00 41 57 41 56 41 55 41 54 53 48 89 d3 e8 2f b1 61 f8 66 90 e8 28 b1 61 f8 48 89 df be 01 00 00 00 e8 cb 06 76 ff <0f> 0b 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 49 bd 00 00 00 00 00 fc
[  164.747111][    C1] RSP: 0018:ffffc900001e0638 EFLAGS: 00010296
[  164.753212][    C1] RAX: 7bff1a08fc9ba901 RBX: ffff888027f6c640 RCX: ffffffff816b249a
[  164.761216][    C1] RDX: dffffc0000000000 RSI: ffffffff8b0c1d40 RDI: ffffffff8b5f6f80
[  164.769205][    C1] RBP: dffffc0000000000 R08: dffffc0000000000 R09: fffffbfff225725f
[  164.777204][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888027f6c640
[  164.785186][    C1] R13: ffff888027f6c698 R14: ffff88807373b880 R15: ffff88801eef9380
[  164.793183][    C1]  ? mark_lock+0x9a/0x340
[  164.797552][    C1]  ? ip_rt_bug+0x25/0xf0
[  164.801864][    C1]  ip_send_skb+0x113/0x1a0
[  164.806332][    C1]  __icmp_send+0x12fd/0x1840
[  164.810961][    C1]  ? __icmp_send+0x21c/0x1840
[  164.813977][ T6204] XFS (loop0): Ending clean mount
[  164.820729][    C1]  ? icmp_out_count+0x90/0x90
[  164.825459][    C1]  ? look_up_lock_class+0x77/0x140
[  164.830625][    C1]  ? mark_lock+0x9a/0x340
[  164.835015][    C1]  ipv4_link_failure+0x63d/0xa20
[  164.840017][    C1]  ? ipv4_negative_advice+0x1a0/0x1a0
[  164.845449][    C1]  ? do_raw_write_lock+0x143/0x4e0
[  164.850609][    C1]  ? ipv4_negative_advice+0x1a0/0x1a0
[  164.856039][    C1]  arp_error_report+0x112/0x160
[  164.860949][    C1]  neigh_invalidate+0x240/0x460
[  164.865864][    C1]  neigh_timer_handler+0x8a1/0x1010
[  164.871116][    C1]  call_timer_fn+0x1ad/0x6b0
[  164.875749][    C1]  ? neigh_release+0x80/0x80
[  164.880380][    C1]  ? call_timer_fn+0xc2/0x6b0
[  164.885088][    C1]  ? __run_timers+0x890/0x890
[  164.889815][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  164.895025][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  164.900244][    C1]  ? neigh_release+0x80/0x80
[  164.904845][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  164.910056][    C1]  ? neigh_release+0x80/0x80
[  164.914661][    C1]  __run_timers+0x67c/0x890
[  164.919202][    C1]  ? detach_timer+0x380/0x380
[  164.923893][    C1]  ? print_irqtrace_events+0x210/0x210
[  164.929376][    C1]  ? seqcount_lockdep_reader_access+0x1bd/0x220
[  164.935655][    C1]  run_timer_softirq+0x63/0xf0
[  164.940493][    C1]  handle_softirqs+0x2ee/0xa40
[  164.945300][    C1]  ? __irq_exit_rcu+0x157/0x240
[  164.950174][    C1]  ? do_softirq+0x240/0x240
[  164.954714][    C1]  ? irqtime_account_irq+0xd0/0x1e0
[  164.959935][    C1]  __irq_exit_rcu+0x157/0x240
[  164.964629][    C1]  ? irq_exit_rcu+0x20/0x20
[  164.969182][    C1]  irq_exit_rcu+0x5/0x20
[  164.973442][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  164.979183][    C1]  </IRQ>
[  164.982154][    C1]  <TASK>
[  164.985102][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  164.991195][    C1] RIP: 0010:__sanitizer_cov_trace_switch+0x83/0xe0
[  164.997730][    C1] Code: 8b 74 d6 10 65 8b 05 c4 c0 77 7e 25 00 01 ff 00 74 11 3d 00 01 00 00 75 de 41 83 bb 1c 16 00 00 00 74 d4 41 8b 83 f8 15 00 00 <83> f8 03 75 c8 49 8b 8b 00 16 00 00 45 8b bb fc 15 00 00 49 c1 e7
[  165.017352][    C1] RSP: 0018:ffffc900032d76b8 EFLAGS: 00000246
[  165.023453][    C1] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 000000000000008b
[  165.031519][    C1] RDX: 000000000000000a RSI: ffffffff8e89db00 RDI: 0000000000000000
[  165.039504][    C1] RBP: ffffc900032d77d0 R08: 0000000000000001 R09: ffffffff8aabb580
[  165.047483][    C1] R10: 0000000000000012 R11: ffff88807d6bd940 R12: 0000000000000000
[  165.055458][    C1] R13: 0000000000000000 R14: 000000000000000a R15: ffffffff8b58ae40
[  165.063443][    C1]  ? vsnprintf+0x190/0x1c70
[  165.067971][    C1]  vsnprintf+0x190/0x1c70
[  165.072339][    C1]  ? ptr_to_hashval+0x70/0x70
[  165.077061][    C1]  tomoyo_supervisor+0x123/0x12d0
[  165.082096][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  165.088106][    C1]  ? print_irqtrace_events+0x210/0x210
[  165.093582][    C1]  ? tomoyo_path_permission+0x1cc/0x360
[  165.099141][    C1]  ? tomoyo_profile+0x50/0x50
[  165.103824][    C1]  ? kasan_quarantine_put+0xd4/0x220
[  165.109117][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  165.114329][    C1]  ? tomoyo_check_path_acl+0x132/0x1c0
[  165.119803][    C1]  ? tomoyo_check_acl+0x374/0x3e0
[  165.124869][    C1]  ? tomoyo_execute_permission+0x410/0x410
[  165.130714][    C1]  tomoyo_path_permission+0x243/0x360
[  165.136117][    C1]  tomoyo_path_perm+0x478/0x710
[  165.141006][    C1]  ? tomoyo_path_perm+0x272/0x710
[  165.146044][    C1]  ? tomoyo_path_permission+0x360/0x360
[  165.151620][    C1]  ? __might_sleep+0xb0/0xb0
[  165.156230][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  165.161274][    C1]  security_inode_getattr+0xcf/0x120
[  165.166576][    C1]  vfs_statx+0x18b/0x480
[  165.170833][    C1]  ? vfs_fstatat+0x70/0x70
[  165.175259][    C1]  __x64_sys_newfstatat+0x151/0x1e0
[  165.180471][    C1]  ? __ia32_sys_newlstat+0x180/0x180
[  165.185811][    C1]  ? syscall_enter_from_user_mode+0x2e/0x230
[  165.191817][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  165.197047][    C1]  ? syscall_enter_from_user_mode+0x2e/0x230
[  165.203040][    C1]  do_syscall_64+0x3b/0xb0
[  165.207459][    C1]  ? clear_bhb_loop+0x45/0xa0
[  165.212142][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.218043][    C1] RIP: 0033:0x7fa5907165f4
[  165.222482][    C1] Code: 64 c7 00 09 00 00 00 83 c8 ff c3 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 00 00 00 00 41 89 ca b8 06 01 00 00 0f 05 <45> 31 c0 3d 00 f0 ff ff 76 10 48 8b 15 03 a8 0d 00 f7 d8 41 83 c8
[  165.242096][    C1] RSP: 002b:00007ffcce2610e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000106
[  165.250517][    C1] RAX: ffffffffffffffda RBX: 0000564acef02900 RCX: 00007fa5907165f4
[  165.258515][    C1] RDX: 00007ffcce261100 RSI: 00007fa5907b3130 RDI: 000000000000000d
[  165.266498][    C1] RBP: 0000564acef60260 R08: 0000000000090800 R09: 0000564acef1e880
[  165.274469][    C1] R10: 0000000000001000 R11: 0000000000000202 R12: 00007ffcce261100
[  165.282442][    C1] R13: 00000000000000ff R14: 0000564acc8891c4 R15: 0000000000000000
[  165.290430][    C1]  </TASK>
[  165.293748][    C1] Kernel Offset: disabled
[  165.298229][    C1] Rebooting in 86400 seconds..