last executing test programs:

5.6441428s ago: executing program 1 (id=3268):
r0 = io_uring_setup(0x5111, &(0x7f00000003c0)={0x0, 0xbab9, 0x80, 0x82, 0x2f9})
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000007fc0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1)

5.606079331s ago: executing program 1 (id=3269):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100)
write$cgroup_devices(r0, &(0x7f0000000400)=ANY=[], 0xfffffeff)
close(0x3)
mount$bind(0x0, 0x0, 0x0, 0x1005848, 0x0)

3.684058376s ago: executing program 0 (id=3274):
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xca9f, 0xc000, 0x6, 0xbe})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)

3.683928496s ago: executing program 1 (id=3275):
clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDENABIO(r0, 0x4b36)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2, 0x2, 0xfffffff7, 0x8, 0xbb9, <r1=>0xffffffffffffffff})
capget(&(0x7f0000000180)={0x19980330, r1}, &(0x7f00000001c0)={0x3, 0x8, 0x5, 0x2, 0x5, 0x9})
syz_clone(0x65e54b32259ae034, 0x0, 0x0, 0x0, 0x0, 0x0)

3.603906579s ago: executing program 0 (id=3276):
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, r0)

3.448284274s ago: executing program 0 (id=3279):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000980), 0x1, 0x60200)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x63a, &(0x7f0000000640)="$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")
pipe(0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071182f000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110)

3.350181897s ago: executing program 2 (id=3280):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

3.317418439s ago: executing program 1 (id=3281):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mkdir(&(0x7f0000000a40)='./file0\x00', 0x68)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), 0x84, &(0x7f0000003140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}]}})

2.432362058s ago: executing program 1 (id=3282):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000300000080"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38)

2.38813589s ago: executing program 0 (id=3284):
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r4=>0xffffffffffffffff])
keyctl$chown(0x4, r3, 0xee01, r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2.199465156s ago: executing program 1 (id=3285):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./mnt\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x10235, &(0x7f00000102c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)

1.639430965s ago: executing program 2 (id=3286):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_emit_ethernet(0x7a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61bc4a0600442f00fe8000000000000000000000000000bb"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ae, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.504066249s ago: executing program 3 (id=3287):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x5111, 0x0)
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000007fc0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1)

1.467570071s ago: executing program 3 (id=3288):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103282, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x3, 0x4000, 0x1000, &(0x7f0000fee000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000800)="64660f30c4c2792a08c4c17950cb0fc76850c4e1fd519ac93b0000b9800000c00f3235001000000f30b9840a00000f320f009500000000c4c2150648ee0fd95a4a", 0x41}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.395293823s ago: executing program 3 (id=3289):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x20000000}, 0xc)
bind$netlink(r2, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

1.393273653s ago: executing program 2 (id=3290):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0)

1.264166678s ago: executing program 2 (id=3291):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
close_range(r1, r1, 0x2)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})

1.245339538s ago: executing program 3 (id=3292):
mkdirat(0xffffffffffffff9c, 0x0, 0xe)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000ffffffff4c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="8e", 0x1}], 0x1}, 0x0)
sendto$inet6(r3, &(0x7f00000007c0)="87", 0x1, 0x4000, 0x0, 0xfffffffffffffe00)
sendto$inet6(r3, &(0x7f0000000140)="87", 0x1, 0x20004000, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
socket$inet_udp(0x2, 0x2, 0x0)

1.082875374s ago: executing program 2 (id=3293):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000300000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38)

884.05506ms ago: executing program 0 (id=3294):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="329dc454428809b629e045f21921bc6253dead6c2aa8a69eceb75dbce5c9b5e1bd42e00f3dc1389a9428b056338855bbcc9512db0eb05f59a1d656a78c51d1e0f5e6e1f1c3ab8972603d1b075c97e50c", 0x50}, {0x0}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c808c9287b917c381ccff12f2e942df6a8738cdd1c9cc732a2e710d824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d941a0ddfe82e5c91ed329ac", 0x4e}], 0x3}}, {{0x0, 0x0, &(0x7f0000001400)}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x8, 0x1, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

239.501092ms ago: executing program 2 (id=3295):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYBLOB="80c4d7e4f845e14f854a817679b4d470d01b954c7feb7f0a22c6b28823a98950b6481cfbafa8da55931c4b357cc99cb920bba5607ecf455bac2ed673a6d9f10ceab0440484d51ad55e62f6504a0df682df03f86ffc47bfd44c9904d7fb59f3b71dd1f28fefc6dbf5e8fc1b51977bfb37cacb36d1231a42eeefb170a7d98385920a4a3dbacdf1d5b3bafee4c1d09730e4b64e"], 0x2, 0x1a9, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0)
read(r0, &(0x7f0000001680)=""/185, 0x20f5)

186.644634ms ago: executing program 3 (id=3296):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x5111, 0x0)
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000007fc0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1)

175.09µs ago: executing program 3 (id=3297):
syz_open_dev$evdev(0x0, 0x1, 0x60200)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
syz_socket_connect_nvme_tcp()
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x4, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', r3, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000580)='./cgroup\x00', 0x814718, &(0x7f0000000740)={[{@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x80}}, {@jqfmt_vfsold}, {@minixdf}, {@abort}, {@nouid32}, {@errors_remount}]}, 0x0, 0x48d, &(0x7f0000001ac0)="$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")
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2)
umount2(&(0x7f0000000080)='./cgroup\x00', 0x2)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00'})
setsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000740)}, 0x8}], 0x1, 0x0, 0x0)
getdents(r5, 0xfffffffffffffffd, 0x58)
setsockopt$inet6_int(r4, 0x29, 0x48, &(0x7f0000000000)=0x2, 0x4)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)

0s ago: executing program 0 (id=3298):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f00006e9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_emit_ethernet(0x7a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61bc4a0600442f00fe8000000000000000000000000000bb"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x56ae, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ted capacity change from 0 to 32768
[  501.600260][T13515] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1744 (13515)
[  501.655420][T13514] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  501.655820][T13515] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  501.676596][T13515] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  501.686467][T13515] BTRFS info (device loop1): enabling auto defrag
[  501.693011][T13515] BTRFS info (device loop1): use no compression
[  501.700780][T13515] BTRFS info (device loop1): max_inline at 4096
[  501.707454][T13515] BTRFS info (device loop1): using free space tree
[  501.797688][T13514] XFS (loop0): Ending clean mount
[  501.877056][T13515] BTRFS info (device loop1): enabling ssd optimizations
[  501.914648][T13515] BTRFS info (device loop1): auto enabling async discard
[  501.925555][   T11] kworker/u4:0: attempt to access beyond end of device
[  501.925555][   T11] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  501.940585][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  501.946265][   T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  502.075835][ T5765] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  502.590109][T13553] loop3: detected capacity change from 0 to 2048
[  502.635791][T13553] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  502.777085][T13557] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  504.488183][T13576] loop2: detected capacity change from 0 to 32768
[  504.515851][T13576] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1757 (13576)
[  504.540121][T13569] loop3: detected capacity change from 0 to 32768
[  504.563814][T13576] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  504.582275][T13576] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  504.592489][T13576] BTRFS info (device loop2): enabling auto defrag
[  504.600856][T13576] BTRFS info (device loop2): use no compression
[  504.622639][T13573] loop1: detected capacity change from 0 to 40427
[  504.630619][T13576] BTRFS info (device loop2): max_inline at 4096
[  504.638161][T13576] BTRFS info (device loop2): using free space tree
[  504.647473][T13569] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  504.657516][T13573] F2FS-fs (loop1): invalid crc value
[  504.667624][T13573] F2FS-fs (loop1): Found nat_bits in checkpoint
[  504.796724][T13569] XFS (loop3): Ending clean mount
[  504.806015][T13573] F2FS-fs (loop1): Start checkpoint disabled!
[  504.848096][T13576] BTRFS info (device loop2): enabling ssd optimizations
[  504.864042][T13576] BTRFS info (device loop2): auto enabling async discard
[  504.878093][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  504.907725][T13573] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  505.067312][ T5767] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  505.109843][T13605] loop0: detected capacity change from 0 to 2048
[  505.165539][T13605] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  505.260638][T13607] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  505.650176][   T49] kworker/u4:3: attempt to access beyond end of device
[  505.650176][   T49] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  505.717837][   T49] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  507.360218][T13641] loop0: detected capacity change from 0 to 2048
[  507.401387][T13641] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  507.432899][T13643] loop1: detected capacity change from 0 to 2048
[  507.454903][T13641] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  507.462601][T13641] UDF-fs: Scanning with blocksize 512 failed
[  507.471834][T13643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  507.512156][T13641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  507.529047][   T27] audit: type=1800 audit(1775197908.054:135): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1768" name="file1" dev="loop1" ino=1367 res=0 errno=0
[  507.614036][   T27] audit: type=1804 audit(1775197908.054:136): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1768" name="/newroot/444/file0/file1" dev="loop1" ino=1367 res=1 errno=0
[  507.684092][   T27] audit: type=1800 audit(1775197908.164:137): pid=13641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1766" name="bus" dev="loop0" ino=851 res=0 errno=0
[  509.468378][T13655] loop3: detected capacity change from 0 to 32768
[  509.522762][T13655] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1773 (13655)
[  509.554999][T13655] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  509.659368][T13655] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  509.806527][T13655] BTRFS info (device loop3): setting nodatacow, compression disabled
[  509.923136][T13655] BTRFS info (device loop3): enabling auto defrag
[  510.058580][T13655] BTRFS info (device loop3): max_inline at 0
[  510.169575][T13655] BTRFS info (device loop3): using free space tree
[  510.263228][ T5857] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  510.278603][T13651] loop1: detected capacity change from 0 to 40427
[  510.336598][T13655] BTRFS info (device loop3): auto enabling async discard
[  510.360976][T13651] F2FS-fs (loop1): invalid crc value
[  510.445925][ T5857] usb 1-1: Using ep0 maxpacket: 32
[  510.451242][T13651] F2FS-fs (loop1): Found nat_bits in checkpoint
[  510.481294][ T5857] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  510.514201][ T5857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.522264][ T5857] usb 1-1: Product: syz
[  510.562351][ T5857] usb 1-1: Manufacturer: syz
[  510.572249][ T5857] usb 1-1: SerialNumber: syz
[  510.596408][ T5857] usb 1-1: config 0 descriptor??
[  510.620108][T13651] F2FS-fs (loop1): Start checkpoint disabled!
[  510.628593][ T5857] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  510.665456][T13651] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  510.857218][ T5766] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  511.148113][  T144] kworker/u4:5: attempt to access beyond end of device
[  511.148113][  T144] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  511.174092][  T144] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  511.416104][ T5857] gspca_ov534_9: reg_w failed -71
[  511.446501][T13688] loop2: detected capacity change from 0 to 32768
[  511.476432][T13688] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1778 (13688)
[  511.551420][T13688] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  511.583229][T13688] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  511.602611][T13688] BTRFS info (device loop2): using free space tree
[  511.757601][T13688] BTRFS info (device loop2): enabling ssd optimizations
[  511.790814][T13688] BTRFS info (device loop2): auto enabling async discard
[  511.804432][ T5857] gspca_ov534_9: Unknown sensor 0000
[  511.804518][ T5857] ov534_9: probe of 1-1:0.0 failed with error -22
[  511.840983][ T5857] usb 1-1: USB disconnect, device number 21
[  511.974940][ T5767] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  512.902406][T13719] loop0: detected capacity change from 0 to 32768
[  513.066608][T13719] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  513.471904][T13719] XFS (loop0): Ending clean mount
[  513.724543][T13719] XFS (loop0): Quotacheck needed: Please wait.
[  514.009728][T13719] XFS (loop0): Quotacheck: Done.
[  514.132338][T13723] loop2: detected capacity change from 0 to 32768
[  514.748139][T13723] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  514.768081][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  514.791961][T13725] loop3: detected capacity change from 0 to 32768
[  514.889120][T13723] XFS (loop2): Ending clean mount
[  514.896774][T13725] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  514.968708][T13723] XFS (loop2): Quotacheck needed: Please wait.
[  514.979717][T13756] loop1: detected capacity change from 0 to 2048
[  515.015105][T13725] XFS (loop3): Ending clean mount
[  515.032259][T13756] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  515.049143][T13725] XFS (loop3): Quotacheck needed: Please wait.
[  515.100900][   T27] audit: type=1800 audit(1775197915.624:138): pid=13756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1789" name="file1" dev="loop1" ino=1367 res=0 errno=0
[  515.158195][   T27] audit: type=1804 audit(1775197915.624:139): pid=13756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1789" name="/newroot/449/file0/file1" dev="loop1" ino=1367 res=1 errno=0
[  515.187364][T13725] XFS (loop3): Quotacheck: Done.
[  515.214441][T13723] XFS (loop2): Quotacheck: Done.
[  515.239769][   T27] audit: type=1800 audit(1775197915.764:140): pid=13723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1784" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  515.436998][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  515.684557][ T5767] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  516.671166][T13778] loop2: detected capacity change from 0 to 512
[  516.724145][T13778] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  516.786907][T13778] EXT4-fs (loop2): 1 truncate cleaned up
[  516.793696][T13778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  516.975414][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.481634][T13776] loop0: detected capacity change from 0 to 32768
[  517.523601][T13776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1788 (13776)
[  517.574087][T13776] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  517.594545][T13776] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  517.603257][T13776] BTRFS info (device loop0): enabling auto defrag
[  517.633242][T13780] loop3: detected capacity change from 0 to 32768
[  517.668172][T13776] BTRFS info (device loop0): use no compression
[  517.680933][T13776] BTRFS info (device loop0): max_inline at 4096
[  517.715993][T13776] BTRFS info (device loop0): using free space tree
[  517.766124][T13780] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  517.859285][T13780] XFS (loop3): Ending clean mount
[  517.889484][T13780] XFS (loop3): Quotacheck needed: Please wait.
[  517.895919][T13776] BTRFS info (device loop0): enabling ssd optimizations
[  517.936664][T13776] BTRFS info (device loop0): auto enabling async discard
[  518.026943][T13780] XFS (loop3): Quotacheck: Done.
[  518.193879][ T5768] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  518.389531][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  518.702129][T13819] Zero length message leads to an empty skb
[  518.921335][ T5758] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop0 scanned by udevd (5758)
[  519.442487][T13815] loop1: detected capacity change from 0 to 32768
[  519.760027][T13815] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  520.181528][T13815] XFS (loop1): Ending clean mount
[  520.221069][T13815] XFS (loop1): Quotacheck needed: Please wait.
[  520.282044][T13815] XFS (loop1): Quotacheck: Done.
[  520.380729][T13840] loop0: detected capacity change from 0 to 512
[  520.428134][T13840] EXT4-fs (loop0): Test dummy encryption mode enabled
[  520.445148][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  520.454885][T13840] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  520.526557][T13840] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  520.543762][T13840] EXT4-fs (loop0): orphan cleanup on readonly fs
[  520.595183][T13840] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.1805: corrupted xattr entries
[  520.661466][T13840] EXT4-fs (loop0): 1 orphan inode deleted
[  520.686017][T13840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  520.742902][T13840] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  520.818766][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.929654][T13845] loop3: detected capacity change from 0 to 32768
[  520.964344][T13845] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1808 (13845)
[  520.998121][T13845] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  521.028922][T13845] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  521.047691][T13845] BTRFS info (device loop3): setting nodatasum
[  521.064723][T13845] BTRFS info (device loop3): force zlib compression, level 3
[  521.085594][T13845] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  521.124285][T13845] BTRFS info (device loop3): use lzo compression, level 0
[  521.141684][T13845] BTRFS info (device loop3): turning on flush-on-commit
[  521.161931][T13845] BTRFS info (device loop3): enabling auto defrag
[  521.172047][T13845] BTRFS info (device loop3): max_inline at 4096
[  521.184054][T13845] BTRFS info (device loop3): using free space tree
[  521.293214][T13842] loop2: detected capacity change from 0 to 40427
[  521.334535][T13845] BTRFS info (device loop3): enabling ssd optimizations
[  521.336748][T13842] F2FS-fs (loop2): Found nat_bits in checkpoint
[  521.456308][ T5766] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  521.518294][T13842] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  521.754326][ T5767] syz-executor: attempt to access beyond end of device
[  521.754326][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  521.804200][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  521.959638][T13847] loop0: detected capacity change from 0 to 32768
[  522.046767][   T27] audit: type=1800 audit(1775197922.574:141): pid=13847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1810" name="file1" dev="loop0" ino=7 res=0 errno=0
[  522.816871][T13869] loop3: detected capacity change from 0 to 32768
[  522.872665][T13869] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  522.999875][T13873] loop0: detected capacity change from 0 to 40427
[  523.005142][T13869] XFS (loop3): Ending clean mount
[  523.031232][T13871] loop1: detected capacity change from 0 to 32768
[  523.054547][T13869] XFS (loop3): Quotacheck needed: Please wait.
[  523.279678][T13869] XFS (loop3): Quotacheck: Done.
[  523.282415][T13873] F2FS-fs (loop0): Found nat_bits in checkpoint
[  523.478097][   T27] audit: type=1800 audit(1775197923.914:142): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1809" name="file1" dev="loop1" ino=7 res=0 errno=0
[  523.875708][T13873] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  524.048351][T13873] syz.0.1813: attempt to access beyond end of device
[  524.048351][T13873] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  524.080798][T13873] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  524.105987][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  524.154549][T13894] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  526.692281][T13907] loop0: detected capacity change from 0 to 32768
[  526.715470][T13903] loop3: detected capacity change from 0 to 40427
[  526.720221][T13907] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1819 (13907)
[  526.745888][T13905] loop1: detected capacity change from 0 to 32768
[  526.756981][T13903] F2FS-fs (loop3): Found nat_bits in checkpoint
[  526.786557][T13905] (syz.1.1821,13905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  526.822662][T13907] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  526.866170][T13905] (syz.1.1821,13905,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  526.883318][T13907] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  526.898729][T13903] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  526.914182][T13907] BTRFS info (device loop0): setting nodatasum
[  526.935575][T13905] JBD2: Ignoring recovery information on journal
[  526.946177][T13907] BTRFS info (device loop0): force zlib compression, level 3
[  527.000078][T13907] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  527.009903][T13907] BTRFS info (device loop0): use lzo compression, level 0
[  527.017846][T13907] BTRFS info (device loop0): turning on flush-on-commit
[  527.025774][T13907] BTRFS info (device loop0): enabling auto defrag
[  527.032359][T13907] BTRFS info (device loop0): max_inline at 4096
[  527.038877][T13907] BTRFS info (device loop0): using free space tree
[  527.049992][ T5766] syz-executor: attempt to access beyond end of device
[  527.049992][ T5766] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  527.089615][T13905] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  527.111738][ T5766] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  527.213008][T13909] loop2: detected capacity change from 0 to 32768
[  527.274157][T13907] BTRFS info (device loop0): enabling ssd optimizations
[  527.306833][T13909] JFS: block map error in dbBackSplit
[  527.332658][T13909] ERROR: (device loop2): dbDiscardAG: -EIO
[  527.332658][T13909] 
[  527.384582][T13909] ERROR: (device loop2): remounting filesystem as read-only
[  527.392059][T13909] syz.2.1822: attempt to access beyond end of device
[  527.392059][T13909] loop2: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768
[  527.423625][T13909] JFS: sb_issue_discard(ffff88805b682000, 328704, 1024, GFP_NOFS, 0) = -5 => failed!
[  527.435664][ T5768] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  527.438542][T13909] blkno = 50400, nblocks = 400
[  527.453323][T13909] ERROR: (device loop2): dbFree: block to be freed is outside the map
[  527.453323][T13909] 
[  527.494705][   T27] audit: type=1800 audit(1775197928.014:143): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1821" name="file1" dev="loop1" ino=16979 res=0 errno=0
[  527.742492][ T5765] ocfs2: Unmounting device (7,1) on (node local)
[  529.088221][ T5805] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  529.294211][ T5805] usb 2-1: Using ep0 maxpacket: 8
[  529.374996][ T5805] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  529.384481][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.392759][ T5805] usb 2-1: Product: syz
[  529.398416][ T5805] usb 2-1: Manufacturer: syz
[  529.518346][ T5805] usb 2-1: SerialNumber: syz
[  529.548688][ T5805] usb 2-1: config 0 descriptor??
[  530.406497][ T5805] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  531.624831][ T5805] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  531.636232][ T5805] usb 2-1: USB disconnect, device number 21
[  532.428525][T13963] loop3: detected capacity change from 0 to 32768
[  532.488646][   T27] audit: type=1800 audit(1775197933.004:144): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1832" name="file1" dev="loop3" ino=7 res=0 errno=0
[  532.493370][T13961] loop2: detected capacity change from 0 to 40427
[  532.587793][T13961] F2FS-fs (loop2): Found nat_bits in checkpoint
[  532.625871][T13966] loop1: detected capacity change from 0 to 32768
[  532.666206][T13966] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1833 (13966)
[  532.720482][T13966] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  532.733574][T13961] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  532.755351][T13966] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  532.798740][T13966] BTRFS info (device loop1): setting nodatasum
[  532.834017][T13966] BTRFS info (device loop1): force zlib compression, level 3
[  532.864048][T13966] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  532.893680][T13966] BTRFS info (device loop1): use lzo compression, level 0
[  532.922490][T13966] BTRFS info (device loop1): turning on flush-on-commit
[  532.922914][ T5767] syz-executor: attempt to access beyond end of device
[  532.922914][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  532.944003][T13966] BTRFS info (device loop1): enabling auto defrag
[  532.944063][T13966] BTRFS info (device loop1): max_inline at 4096
[  532.944083][T13966] BTRFS info (device loop1): using free space tree
[  533.072540][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  533.158867][T13966] BTRFS info (device loop1): enabling ssd optimizations
[  533.314644][ T5765] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  533.544192][ T7525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (7525)
[  533.842537][T13979] loop3: detected capacity change from 0 to 32768
[  533.884447][T13979] (syz.3.1834,13979,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  533.945977][T13979] (syz.3.1834,13979,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  534.137458][T13979] JBD2: Ignoring recovery information on journal
[  534.313592][T13979] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  535.149720][   T27] audit: type=1800 audit(1775197935.674:145): pid=13979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1834" name="file1" dev="loop3" ino=16979 res=0 errno=0
[  535.179896][T13993] loop1: detected capacity change from 0 to 32768
[  535.335133][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  536.093936][T14007] loop0: detected capacity change from 0 to 32768
[  536.096850][T14005] loop2: detected capacity change from 0 to 40427
[  536.141543][T14005] F2FS-fs (loop2): invalid crc value
[  536.141756][T14007] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  536.202308][T14005] F2FS-fs (loop2): Found nat_bits in checkpoint
[  536.242048][T14007] XFS (loop0): Ending clean mount
[  536.277252][T14007] XFS (loop0): Quotacheck needed: Please wait.
[  536.349857][T14005] F2FS-fs (loop2): Start checkpoint disabled!
[  536.361079][T14005] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  536.384915][T14007] XFS (loop0): Quotacheck: Done.
[  536.403917][T14005] syz.2.1839: attempt to access beyond end of device
[  536.403917][T14005] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  537.454811][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  537.463216][ T1093] kworker/u4:7: attempt to access beyond end of device
[  537.463216][ T1093] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  537.486597][ T1093] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  537.493752][ T1093] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  537.513785][ T1093] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  537.694048][T14030] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  538.071581][T14030] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  538.084082][T14030] usb 2-1: config 0 has no interface number 0
[  538.090250][T14030] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  538.113514][T14030] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  538.852786][T14030] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  538.862251][T14030] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.870465][T14030] usb 2-1: Product: syz
[  538.876307][T14030] usb 2-1: Manufacturer: syz
[  538.881026][T14030] usb 2-1: SerialNumber: syz
[  538.889164][T14030] usb 2-1: config 0 descriptor??
[  538.895119][T14032] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  538.906445][T14030] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  538.965946][T14030] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  539.186808][T14040] loop2: detected capacity change from 0 to 32768
[  539.429050][    T8] usb 2-1: USB disconnect, device number 22
[  539.492187][T14052] warning: `syz.3.1851' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  539.810770][    T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  540.020941][    T8] cyberjack 2-1:0.69: device disconnected
[  540.248836][T14048] loop0: detected capacity change from 0 to 32768
[  540.369395][T14048] (syz.0.1850,14048,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  540.456459][T14048] (syz.0.1850,14048,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  540.586219][T14048] JBD2: Ignoring recovery information on journal
[  540.835294][T14048] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  541.846619][ T5768] ocfs2: Unmounting device (7,0) on (node local)
[  542.110648][T14058] loop2: detected capacity change from 0 to 40427
[  542.160728][T14058] F2FS-fs (loop2): invalid crc value
[  542.180151][T14058] F2FS-fs (loop2): Found nat_bits in checkpoint
[  542.242686][T14063] loop1: detected capacity change from 0 to 32768
[  542.293140][T14063] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  542.311340][T14058] F2FS-fs (loop2): Start checkpoint disabled!
[  542.366211][T14058] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  542.490204][T14058] syz.2.1853: attempt to access beyond end of device
[  542.490204][T14058] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  542.530879][T14063] XFS (loop1): Ending clean mount
[  542.682136][T14063] XFS (loop1): Quotacheck needed: Please wait.
[  543.610202][T14063] XFS (loop1): Quotacheck: Done.
[  543.649622][   T11] kworker/u4:0: attempt to access beyond end of device
[  543.649622][   T11] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  543.692162][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  543.708604][   T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  543.731145][   T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  543.764626][   T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  544.177444][T14090] loop0: detected capacity change from 0 to 32768
[  544.579836][T14096] loop1: detected capacity change from 0 to 32768
[  544.644549][T14096] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  544.658761][T14096] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  544.670995][T14094] loop3: detected capacity change from 0 to 32768
[  544.674964][T14096] BTRFS info (device loop1): setting nodatasum
[  544.694262][T14096] BTRFS info (device loop1): force zlib compression, level 3
[  544.705152][T14094] (syz.3.1865,14094,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  544.733565][T14096] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[  544.751966][T14103] overlayfs: missing 'lowerdir'
[  544.771056][T14094] (syz.3.1865,14094,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  544.775462][T14096] BTRFS info (device loop1): use lzo compression, level 0
[  544.810771][T14096] BTRFS info (device loop1): turning on flush-on-commit
[  544.818637][T14103] loop2: detected capacity change from 0 to 512
[  544.828414][T14096] BTRFS info (device loop1): enabling auto defrag
[  544.851659][T14103] EXT4-fs (loop2): Test dummy encryption mode enabled
[  544.875143][T14096] BTRFS info (device loop1): max_inline at 4096
[  544.882753][T14103] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  544.893778][T14094] JBD2: Ignoring recovery information on journal
[  544.901122][T14096] BTRFS info (device loop1): using free space tree
[  544.912022][T14103] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  544.955092][T14103] EXT4-fs (loop2): orphan cleanup on readonly fs
[  544.963191][T14103] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.1867: corrupted xattr entries
[  545.019262][T14094] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  545.100713][T14103] EXT4-fs (loop2): 1 orphan inode deleted
[  545.108113][T14103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  545.121575][T14096] BTRFS info (device loop1): enabling ssd optimizations
[  545.160045][T14103] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  545.268901][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.295803][ T5765] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  545.432636][T14099] loop0: detected capacity change from 0 to 40427
[  545.507404][ T5766] ocfs2: Unmounting device (7,3) on (node local)
[  545.517830][T14099] F2FS-fs (loop0): Found nat_bits in checkpoint
[  545.664689][T14099] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  545.717614][T14099] syz.0.1866: attempt to access beyond end of device
[  545.717614][T14099] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  545.776030][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  545.910156][ T5768] syz-executor: attempt to access beyond end of device
[  545.910156][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  545.952422][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  545.976152][    T8] usb 3-1: unable to get BOS descriptor or descriptor too short
[  546.003149][    T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  546.041775][    T8] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7
[  546.089489][    T8] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  546.108814][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.135117][    T8] usb 3-1: Product: syz
[  546.139515][    T8] usb 3-1: Manufacturer: syz
[  546.159917][    T8] usb 3-1: SerialNumber: syz
[  546.433040][T14129] loop3: detected capacity change from 0 to 32768
[  546.459655][T14129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1870 (14129)
[  546.508394][T14129] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  546.508680][    T8] usb 3-1: Can't get UAC3 power state for id 10
[  546.547317][T14129] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  546.577010][    T8] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[  546.595342][T14129] BTRFS info (device loop3): setting nodatasum
[  546.601557][T14129] BTRFS info (device loop3): force zlib compression, level 3
[  546.609013][    T8] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  546.678897][T14129] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  546.688751][    T8] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  546.702641][T14129] BTRFS info (device loop3): use lzo compression, level 0
[  546.711122][    T8] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  546.723470][T14129] BTRFS info (device loop3): turning on flush-on-commit
[  546.741207][T14129] BTRFS info (device loop3): enabling auto defrag
[  546.755175][    T8] usb 3-1: USB disconnect, device number 16
[  546.772540][T14129] BTRFS info (device loop3): max_inline at 4096
[  546.787101][T14129] BTRFS info (device loop3): using free space tree
[  546.863536][T14133] loop1: detected capacity change from 0 to 32768
[  546.879944][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  546.979400][T14133] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  547.010098][T14129] BTRFS info (device loop3): enabling ssd optimizations
[  547.195280][T14133] XFS (loop1): Ending clean mount
[  547.216394][ T5766] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  547.228445][T14133] XFS (loop1): Quotacheck needed: Please wait.
[  547.365010][ T5758] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (5758)
[  547.490341][T14133] XFS (loop1): Quotacheck: Done.
[  547.727775][ T5765] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  547.990787][T14151] loop0: detected capacity change from 0 to 40427
[  548.049685][T14151] F2FS-fs (loop0): Found nat_bits in checkpoint
[  548.218419][T14151] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  548.403507][ T5768] syz-executor: attempt to access beyond end of device
[  548.403507][ T5768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  548.419863][ T5768] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  548.470026][T14173] loop3: detected capacity change from 0 to 32768
[  549.308013][T14182] loop2: detected capacity change from 0 to 40427
[  549.355273][T14182] F2FS-fs (loop2): Found nat_bits in checkpoint
[  549.488125][T14182] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  549.497573][T14188] loop0: detected capacity change from 0 to 32768
[  549.535129][T14182] syz.2.1879: attempt to access beyond end of device
[  549.535129][T14182] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  549.559666][T14188] (syz.0.1878,14188,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  549.611462][T14188] (syz.0.1878,14188,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  549.678938][ T5767] syz-executor: attempt to access beyond end of device
[  549.678938][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  549.714710][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  549.742094][T14188] JBD2: Ignoring recovery information on journal
[  550.628071][T14188] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  550.929366][T14190] loop1: detected capacity change from 0 to 32768
[  550.966497][T14190] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  551.078300][ T5768] ocfs2: Unmounting device (7,0) on (node local)
[  551.123211][T14149] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  551.154877][T13952] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  551.389793][T13952] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  551.402705][T13952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.418044][T13952] usb 4-1: Product: syz
[  551.423931][T13952] usb 4-1: Manufacturer: syz
[  551.436116][T13952] usb 4-1: SerialNumber: syz
[  551.455952][T13952] usb 4-1: config 0 descriptor??
[  551.519715][T13952] usb 4-1: selecting invalid altsetting 3
[  551.553385][ T5765] cgroup: fork rejected by pids controller in /syz1
[  551.561496][T13952] comedi comedi5: could not set alternate setting 3 in high speed
[  551.573887][T13952] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device.
[  551.614430][T13952] usbdux: probe of 4-1:0.0 failed with error -22
[  552.254478][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.342861][ T5805] usb 4-1: USB disconnect, device number 30
[  552.467062][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.633075][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.788371][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  552.884302][    T8] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  552.982959][T14223] loop2: detected capacity change from 0 to 40427
[  553.040896][T14223] F2FS-fs (loop2): Found nat_bits in checkpoint
[  553.084212][    T8] usb 4-1: Using ep0 maxpacket: 8
[  553.125124][    T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  553.161735][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.204247][    T8] usb 4-1: Product: syz
[  553.225219][T14234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  553.229478][    T8] usb 4-1: Manufacturer: syz
[  553.240422][T14234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  553.247533][    T8] usb 4-1: SerialNumber: syz
[  553.252670][T14234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  553.264976][T14234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  553.272775][T14234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  553.273147][    T8] usb 4-1: config 0 descriptor??
[  553.285370][T14223] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  553.287322][T14234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  553.386978][T14223] syz.2.1890: attempt to access beyond end of device
[  553.386978][T14223] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  553.500621][ T5767] syz-executor: attempt to access beyond end of device
[  553.500621][ T5767] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  553.554347][ T5767] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  553.619108][    T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  553.767691][T14228] loop0: detected capacity change from 0 to 32768
[  553.832142][T14228] (syz.0.1892,14228,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  553.901941][T14228] (syz.0.1892,14228,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  553.974268][T14228] JBD2: Ignoring recovery information on journal
[  554.116400][T14228] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  554.226532][    T8] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32
[  554.246552][    T8] usb 4-1: USB disconnect, device number 31
[  554.440800][T14232] chnl_net:caif_netlink_parms(): no params data found
[  554.649226][ T5768] ocfs2: Unmounting device (7,0) on (node local)
[  555.390899][ T5778] Bluetooth: hci3: command tx timeout
[  555.470250][T14232] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.477626][T14232] bridge0: port 1(bridge_slave_0) entered disabled state
[  555.486544][T14232] bridge_slave_0: entered allmulticast mode
[  555.494501][T14232] bridge_slave_0: entered promiscuous mode
[  555.506231][T14232] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.513352][T14232] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.520710][T14232] bridge_slave_1: entered allmulticast mode
[  555.528408][T14232] bridge_slave_1: entered promiscuous mode
[  555.550652][T14248] loop2: detected capacity change from 0 to 32768
[  555.608393][T14248] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  555.841916][T14149] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9
[  556.001908][T14232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.048258][T14232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.449349][T14232] team0: Port device team_slave_0 added
[  556.735666][T14232] team0: Port device team_slave_1 added
[  557.176442][T14232] batman_adv: batadv0: Adding interface: batadv_slave_0
[  557.235113][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  557.271279][T14232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  557.318082][   T12] hsr_slave_0: left promiscuous mode
[  557.333414][   T12] hsr_slave_1: left promiscuous mode
[  557.360434][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  557.378710][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  557.425910][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  557.433463][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  557.444619][ T5778] Bluetooth: hci3: command tx timeout
[  557.465028][   T12] bridge_slave_1: left allmulticast mode
[  557.470759][   T12] bridge_slave_1: left promiscuous mode
[  557.479682][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  557.527975][   T12] bridge_slave_0: left allmulticast mode
[  557.533682][   T12] bridge_slave_0: left promiscuous mode
[  557.559550][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  557.683909][   T12] team_slave_0: left promiscuous mode
[  557.689997][   T12] team_slave_1: left promiscuous mode
[  557.705659][   T12] veth1_macvtap: left promiscuous mode
[  557.713742][   T12] veth0_macvtap: left promiscuous mode
[  557.726911][   T12] veth1_vlan: left promiscuous mode
[  557.889653][   T12] veth0_vlan: left promiscuous mode
[  558.418632][T14305] loop0: detected capacity change from 0 to 32768
[  558.467389][T14305] (syz.0.1902,14305,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  558.509158][T14305] (syz.0.1902,14305,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  558.592984][T14305] JBD2: Ignoring recovery information on journal
[  558.780027][T14305] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  559.525346][ T5778] Bluetooth: hci3: command tx timeout
[  559.746816][T14316] loop3: detected capacity change from 0 to 32768
[  559.815039][ T5768] ocfs2: Unmounting device (7,0) on (node local)
[  559.821486][T14316] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  559.884345][T14316] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  559.893127][T14316] BTRFS info (device loop3): setting nodatasum
[  559.924117][T14316] BTRFS info (device loop3): force zlib compression, level 3
[  559.931622][T14316] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  559.954499][T14316] BTRFS info (device loop3): use lzo compression, level 0
[  559.961683][T14316] BTRFS info (device loop3): turning on flush-on-commit
[  559.984804][T14316] BTRFS info (device loop3): enabling auto defrag
[  559.991350][T14316] BTRFS info (device loop3): max_inline at 4096
[  560.014043][T14316] BTRFS info (device loop3): using free space tree
[  560.184460][T14316] BTRFS info (device loop3): enabling ssd optimizations
[  560.285304][ T5766] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  560.515403][   T28] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  560.721600][   T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  560.752473][   T28] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  560.771989][   T28] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  560.781382][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.797574][   T28] usb 1-1: Product: syz
[  560.802990][   T28] usb 1-1: Manufacturer: syz
[  560.808455][   T28] usb 1-1: SerialNumber: syz
[  561.031457][   T12] team0 (unregistering): Port device team_slave_1 removed
[  561.055404][   T28] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  561.067390][   T28] usb 1-1: clock source 0 is not valid, cannot use
[  561.078118][   T28] usb 1-1: 1:1: cannot get freq (v2/v3): err -71
[  561.085594][   T28] usb 1-1: 1:1: cannot set freq 48000 (v2/v3): err -71
[  561.137388][   T12] team0 (unregistering): Port device team_slave_0 removed
[  561.152685][   T28] usb 1-1: USB disconnect, device number 22
[  561.228288][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  561.246365][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  561.328059][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  561.607981][ T5778] Bluetooth: hci3: command tx timeout
[  562.519163][   T12] bond0 (unregistering): Released all slaves
[  562.673857][T14232] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.681019][T14232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.708812][T14232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.762912][T14357] random: crng reseeded on system resumption
[  563.530756][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  563.537222][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  563.612876][T14232] hsr_slave_0: entered promiscuous mode
[  563.619861][T14232] hsr_slave_1: entered promiscuous mode
[  563.626970][T14232] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  563.634606][T14232] Cannot create hsr debugfs directory
[  564.244149][ T5869] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  564.429837][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1914'.
[  564.464087][ T5869] usb 1-1: Using ep0 maxpacket: 32
[  564.474982][ T5869] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  564.485828][ T5869] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  564.496029][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0
[  564.536757][ T5869] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  564.554835][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.584254][ T5869] usb 1-1: Product: syz
[  564.591871][ T5869] usb 1-1: Manufacturer: syz
[  564.604048][ T5869] usb 1-1: SerialNumber: syz
[  564.620911][ T5869] usb 1-1: config 0 descriptor??
[  565.082168][ T5869] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  565.249654][T14364] loop2: detected capacity change from 0 to 32768
[  565.280336][T14364] (syz.2.1915,14364,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  565.292541][ T5869] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  565.306037][T14364] (syz.2.1915,14364,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  565.347046][ T5869] gs_usb: probe of 1-1:0.0 failed with error -22
[  565.545840][T14364] JBD2: Ignoring recovery information on journal
[  565.563539][T13952] usb 1-1: USB disconnect, device number 23
[  565.634532][T14232] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  565.645630][T14364] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  565.669065][T14232] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  565.692511][T14232] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  565.730745][T14232] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  565.793821][T14378] loop3: detected capacity change from 0 to 32768
[  565.822628][T14378] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1917 (14378)
[  565.872182][T14378] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  565.883179][T14378] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  565.897619][T14378] BTRFS info (device loop3): setting nodatasum
[  565.907303][T14378] BTRFS info (device loop3): force zlib compression, level 3
[  565.918008][T14378] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  565.933303][T14378] BTRFS info (device loop3): use lzo compression, level 0
[  565.947906][T14378] BTRFS info (device loop3): turning on flush-on-commit
[  565.978994][T14378] BTRFS info (device loop3): enabling auto defrag
[  565.990160][T14232] 8021q: adding VLAN 0 to HW filter on device bond0
[  565.997770][T14378] BTRFS info (device loop3): max_inline at 4096
[  566.013365][T14378] BTRFS info (device loop3): using free space tree
[  566.052394][T14232] 8021q: adding VLAN 0 to HW filter on device team0
[  566.072176][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.079390][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  566.150483][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.157785][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  566.162078][ T5767] ocfs2: Unmounting device (7,2) on (node local)
[  566.252334][T14378] BTRFS info (device loop3): enabling ssd optimizations
[  566.258956][T14232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  567.187298][ T5766] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  567.307656][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'.
[  567.530140][T14232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  568.416265][T14232] veth0_vlan: entered promiscuous mode
[  568.474844][T14232] veth1_vlan: entered promiscuous mode
[  568.740307][T14232] veth0_macvtap: entered promiscuous mode
[  568.770808][T14232] veth1_macvtap: entered promiscuous mode
[  568.873242][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  568.912277][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.934900][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.135417][ T5857] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  569.171445][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.839807][ T5857] usb 3-1: Using ep0 maxpacket: 8
[  569.854376][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  569.926434][ T5857] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  569.944069][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  569.944946][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.989317][ T5857] usb 3-1: Product: syz
[  569.995516][T14232] batman_adv: batadv0: Interface activated: batadv_slave_0
[  570.013841][ T5857] usb 3-1: Manufacturer: syz
[  570.027047][ T5857] usb 3-1: SerialNumber: syz
[  570.044785][ T5857] usb 3-1: config 0 descriptor??
[  570.082252][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.105052][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.135108][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.159287][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.184176][T14232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  570.234187][T14232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.268542][T14232] batman_adv: batadv0: Interface activated: batadv_slave_1
[  570.275914][ T5857] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  570.320578][T14232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  570.343742][T14232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  570.370640][T14232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.391138][T14232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  570.639747][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.673629][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.767266][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.787509][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.880106][ T5857] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32
[  570.900932][T14462] loop3: detected capacity change from 0 to 32768
[  570.917753][ T5857] usb 3-1: USB disconnect, device number 17
[  570.955125][T14462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1928 (14462)
[  571.027082][T14462] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  571.043887][T14465] loop0: detected capacity change from 0 to 32768
[  571.058494][T14462] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  571.087759][T14462] BTRFS info (device loop3): setting nodatasum
[  571.103110][T14462] BTRFS info (device loop3): force zlib compression, level 3
[  571.123040][   T27] audit: type=1800 audit(1775197971.644:146): pid=14465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1929" name="file1" dev="loop0" ino=7 res=0 errno=0
[  571.125660][T14462] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  571.188211][T14462] BTRFS info (device loop3): use lzo compression, level 0
[  571.234042][T14462] BTRFS info (device loop3): turning on flush-on-commit
[  571.260825][T14462] BTRFS info (device loop3): enabling auto defrag
[  571.274133][T14462] BTRFS info (device loop3): max_inline at 4096
[  571.286573][T14462] BTRFS info (device loop3): using free space tree
[  571.434282][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  571.654244][T14462] BTRFS info (device loop3): enabling ssd optimizations
[  572.314413][ T5766] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  573.265944][T14149] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (14149)
[  582.175382][T14588] loop2: detected capacity change from 0 to 32768
[  582.624477][T14588] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  582.855295][T14588] XFS (loop2): AIL initialisation failed: error -12
[  582.930494][T14588] XFS (loop2): log mount failed
[  583.341600][T14615] loop1: detected capacity change from 0 to 32768
[  583.362193][T14615] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1957 (14615)
[  583.406286][T14615] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  583.433880][T14615] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  583.459837][T14615] BTRFS info (device loop1): force clearing of disk cache
[  583.478703][T14615] BTRFS info (device loop1): metadata ratio 0
[  583.493752][T14615] BTRFS info (device loop1): enabling ssd optimizations
[  583.513205][T14615] BTRFS info (device loop1): using spread ssd allocation scheme
[  583.531819][T14615] BTRFS info (device loop1): using free space tree
[  583.643691][T14615] BTRFS info (device loop1): auto enabling async discard
[  583.669555][T14615] BTRFS info (device loop1): rebuilding free space tree
[  583.811323][T14232] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  584.512052][T14149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop1 scanned by udevd (14149)
[  587.135436][T14685] overlayfs: missing 'lowerdir'
[  587.180069][T14685] loop2: detected capacity change from 0 to 512
[  587.228438][T14685] EXT4-fs (loop2): Test dummy encryption mode enabled
[  587.254140][T14685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  587.287695][T14685] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  587.324598][T14685] EXT4-fs (loop2): orphan cleanup on readonly fs
[  587.356689][T14685] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.1968: corrupted xattr entries
[  587.369523][T14685] EXT4-fs (loop2): 1 orphan inode deleted
[  587.380298][T14685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  587.406588][T14685] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  587.445696][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.455152][ T5805] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  587.645396][ T5805] usb 2-1: Using ep0 maxpacket: 32
[  587.645820][T14684] loop3: detected capacity change from 0 to 32768
[  587.661496][ T5805] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  587.678873][ T5805] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  587.693182][ T5805] usb 2-1: config 0 interface 0 has no altsetting 0
[  587.700645][T14684] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  587.703136][ T5805] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  587.719679][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.727941][ T5805] usb 2-1: Product: syz
[  587.732308][ T5805] usb 2-1: Manufacturer: syz
[  587.737071][ T5805] usb 2-1: SerialNumber: syz
[  587.746468][ T5805] usb 2-1: config 0 descriptor??
[  587.779208][T14684] XFS (loop3): Ending clean mount
[  587.791323][T14684] XFS (loop3): Quotacheck needed: Please wait.
[  587.871250][T14684] XFS (loop3): Quotacheck: Done.
[  587.939322][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  588.167228][ T5805] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  588.596187][ T5805] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  588.778774][ T5805] gs_usb: probe of 2-1:0.0 failed with error -71
[  589.176798][ T5805] usb 2-1: USB disconnect, device number 23
[  589.637815][T14721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'.
[  589.919628][T14726] overlayfs: missing 'lowerdir'
[  589.959543][T14726] loop1: detected capacity change from 0 to 512
[  589.989563][T14726] EXT4-fs (loop1): Test dummy encryption mode enabled
[  590.021623][T14726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  590.049799][T14726] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  590.104867][T14726] EXT4-fs (loop1): orphan cleanup on readonly fs
[  590.112642][T14726] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.1980: corrupted xattr entries
[  590.124958][T14726] EXT4-fs (loop1): 1 orphan inode deleted
[  590.131908][T14726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  590.160261][T14726] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  590.244964][T14232] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.156160][    T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  591.464069][    T8] usb 2-1: Using ep0 maxpacket: 8
[  591.473805][    T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  591.483543][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.484385][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'.
[  591.491944][    T8] usb 2-1: Product: syz
[  591.524800][    T8] usb 2-1: Manufacturer: syz
[  591.536100][    T8] usb 2-1: SerialNumber: syz
[  591.552221][    T8] usb 2-1: config 0 descriptor??
[  591.649189][T14761] overlayfs: missing 'workdir'
[  591.668371][T14761] loop2: detected capacity change from 0 to 512
[  591.698527][T14761] EXT4-fs (loop2): Test dummy encryption mode enabled
[  591.713411][T14761] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  591.744732][T14761] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  591.753289][T14761] EXT4-fs (loop2): orphan cleanup on readonly fs
[  591.764153][T14761] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.1992: corrupted xattr entries
[  591.780296][T14761] EXT4-fs (loop2): 1 orphan inode deleted
[  591.795107][T14761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  591.807319][    T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  591.843187][T14761] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  591.987160][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  592.544128][    T8] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  592.776281][    T8] usb 2-1: USB disconnect, device number 24
[  593.999405][    T8] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  594.034992][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'.
[  594.128393][T14791] overlayfs: missing 'workdir'
[  594.149120][T14791] loop1: detected capacity change from 0 to 512
[  594.175571][T14791] EXT4-fs (loop1): Test dummy encryption mode enabled
[  594.196883][    T8] usb 1-1: not running at top speed; connect to a high speed hub
[  594.214335][T14791] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  594.216252][    T8] usb 1-1: config 3 has an invalid interface number: 52 but max is 0
[  594.261890][T14791] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  594.271350][T14791] EXT4-fs (loop1): orphan cleanup on readonly fs
[  594.279191][T14791] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.2002: corrupted xattr entries
[  594.283454][    T8] usb 1-1: config 3 has no interface number 0
[  594.305987][T14791] EXT4-fs (loop1): 1 orphan inode deleted
[  594.326704][T14791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  594.348062][    T8] usb 1-1: config 3 interface 52 has no altsetting 0
[  594.387592][T14791] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  594.402595][    T8] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca
[  594.549227][T14232] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.663138][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.249889][    T8] usb 1-1: Product: syz
[  595.254650][    T8] usb 1-1: Manufacturer: syz
[  595.259728][    T8] usb 1-1: SerialNumber: syz
[  595.562569][    T8] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
[  595.610782][    T8] usb 1-1: selecting invalid altsetting 0
[  595.661510][    T8] usb 1-1: USB disconnect, device number 24
[  595.684669][ T2317] pvrusb2: control-write URB failure, status=-71
[  595.691727][ T2317] pvrusb2: Device being rendered inoperable
[  595.724462][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  595.735209][ T5869] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  595.742947][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  595.954048][ T5869] usb 2-1: Using ep0 maxpacket: 8
[  595.969608][ T5869] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  595.986220][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.995306][ T5869] usb 2-1: Product: syz
[  595.999649][ T5869] usb 2-1: Manufacturer: syz
[  596.004566][ T5869] usb 2-1: SerialNumber: syz
[  596.014882][ T5869] usb 2-1: config 0 descriptor??
[  596.231040][ T5869] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  598.141397][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2012'.
[  598.209598][ T5869] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  598.223192][ T5869] usb 2-1: USB disconnect, device number 25
[  598.347850][T14827] overlayfs: missing 'workdir'
[  598.359893][T14827] loop0: detected capacity change from 0 to 512
[  598.377806][T14827] EXT4-fs (loop0): Test dummy encryption mode enabled
[  598.385034][T14827] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  598.415408][T14827] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  598.423708][T14827] EXT4-fs (loop0): orphan cleanup on readonly fs
[  598.474823][T14827] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.2013: corrupted xattr entries
[  598.581650][T14834] overlayfs: failed to clone upperpath
[  598.618578][T14827] EXT4-fs (loop0): 1 orphan inode deleted
[  598.666994][T14827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  599.703756][T14827] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  599.782745][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.114199][ T5869] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  600.314080][ T5869] usb 3-1: Using ep0 maxpacket: 32
[  600.336424][ T5869] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  600.345123][ T5869] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  600.353752][ T5869] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  600.393400][ T5869] usb 3-1: config 1 has no interface number 0
[  600.401454][ T5869] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  600.455090][ T5869] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  600.480966][ T5869] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  600.493779][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.689981][T14844] loop0: detected capacity change from 0 to 32768
[  600.696178][ T5869] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  600.731090][T14844] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  601.310994][ T5869] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  601.328998][T14844] XFS (loop0): Ending clean mount
[  601.339195][T14844] XFS (loop0): Quotacheck needed: Please wait.
[  601.446509][T14844] XFS (loop0): Quotacheck: Done.
[  601.629448][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  601.655935][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2024'.
[  602.066071][    T8] usb 3-1: USB disconnect, device number 18
[  602.073329][    T8] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  605.490478][T14903] input: syz0 as /devices/virtual/input/input6
[  610.780763][T14952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2054'.
[  610.815777][T14938] loop2: detected capacity change from 0 to 40427
[  610.850607][T14938] F2FS-fs (loop2): invalid crc value
[  610.863185][T14938] F2FS-fs (loop2): Found nat_bits in checkpoint
[  610.965239][T14938] F2FS-fs (loop2): Start checkpoint disabled!
[  610.990580][T14938] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  611.738071][T14938] syz.2.2050: attempt to access beyond end of device
[  611.738071][T14938] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  612.147475][ T3514] kworker/u4:9: attempt to access beyond end of device
[  612.147475][ T3514] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  612.178509][ T3514] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  612.188507][ T3514] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  612.197473][ T3514] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  613.713690][T14981] loop3: detected capacity change from 0 to 512
[  613.763778][T14981] EXT4-fs (loop3): 1 truncate cleaned up
[  613.780527][T14981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.793742][T14984] netlink: 'syz.1.2063': attribute type 18 has an invalid length.
[  613.799942][   T27] audit: type=1800 audit(1775198014.314:147): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2061" name="file1" dev="loop3" ino=15 res=0 errno=0
[  613.826642][T14981] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2061: bg 0: block 465: padding at end of block bitmap is not set
[  614.022346][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  614.501196][T14999] netlink: 'syz.3.2069': attribute type 10 has an invalid length.
[  614.562294][T14999] team0: Device vxcan1 is of different type
[  616.646056][T15015] loop0: detected capacity change from 0 to 512
[  616.768505][T15015] EXT4-fs (loop0): 1 truncate cleaned up
[  616.792351][T15015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.380348][   T27] audit: type=1800 audit(1775198017.724:148): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2075" name="file1" dev="loop0" ino=15 res=0 errno=0
[  617.815740][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.343936][T14030] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  619.544086][T14030] usb 1-1: Using ep0 maxpacket: 8
[  619.553324][T14030] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  619.569260][T14030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.654582][T14030] usb 1-1: Product: syz
[  619.668295][T14030] usb 1-1: Manufacturer: syz
[  619.713598][T14030] usb 1-1: SerialNumber: syz
[  619.725550][T14030] usb 1-1: config 0 descriptor??
[  619.937661][T14030] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  620.950174][T14030] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  620.986088][T14030] usb 1-1: USB disconnect, device number 25
[  621.909238][T15085] mmap: syz.2.2100 (15085) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  624.616023][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.624317][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  629.764266][ T5805] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  630.098728][ T5805] usb 1-1: Using ep0 maxpacket: 16
[  630.139042][ T5805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  630.164287][ T5805] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  630.207124][ T5805] usb 1-1: New USB device found, idVendor=2040, idProduct=0064, bcdDevice=4e.d1
[  630.234269][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.273032][ T5805] usb 1-1: Product: syz
[  630.285905][ T5805] usb 1-1: Manufacturer: syz
[  630.293326][ T5805] usb 1-1: SerialNumber: syz
[  630.326001][ T5805] usb 1-1: config 0 descriptor??
[  630.570057][T15188] overlayfs: failed to clone upperpath
[  630.743373][ T5805] usb 1-1: USB disconnect, device number 26
[  632.060635][T15202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2141'.
[  632.101231][T15202] binder: 15198:15202 ioctl c0306201 0 returned -14
[  632.115326][T15202] netlink: 'syz.3.2141': attribute type 10 has an invalid length.
[  632.211978][T15204] loop5: detected capacity change from 0 to 7
[  632.236967][T15204] Dev loop5: unable to read RDB block 7
[  632.243041][T15204]  loop5: AHDI p1
[  632.247013][T15204] loop5: partition table partially beyond EOD, truncated
[  632.346406][T15202] 8021q: adding VLAN 0 to HW filter on device batadv0
[  632.365636][T15202] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  632.463305][T15204] netlink: 'syz.3.2141': attribute type 10 has an invalid length.
[  632.471753][T15204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2141'.
[  632.483604][T15204] batadv0: entered promiscuous mode
[  632.489362][T15204] batadv0: entered allmulticast mode
[  632.954728][T15204] bond0: (slave batadv0): Releasing backup interface
[  632.965666][T15204] bridge0: port 3(batadv0) entered blocking state
[  632.972249][T15204] bridge0: port 3(batadv0) entered disabled state
[  633.246335][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  633.256405][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  635.066078][T15221] overlayfs: failed to clone upperpath
[  635.534316][    T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  636.624041][    T9] usb 4-1: Using ep0 maxpacket: 8
[  636.632894][    T9] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  636.642750][    T9] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  636.664038][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  636.673001][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11
[  636.698118][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59391, setting to 1024
[  636.721926][    T9] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  636.769627][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.790595][    T9] usb 4-1: Product: syz
[  636.800474][    T9] usb 4-1: Manufacturer: syz
[  636.812380][    T9] usb 4-1: SerialNumber: syz
[  636.852748][    T9] usb 4-1: config 0 descriptor??
[  636.874902][T15224] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  636.905156][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[  636.911217][    T9] hub: probe of 4-1:0.0 failed with error -5
[  636.948469][    T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[  637.189319][ T5869] usb 4-1: USB disconnect, device number 32
[  639.313183][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2162'.
[  639.326861][T15262] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  639.476663][T15262] batman_adv: batadv0: Removing interface: batadv_slave_0
[  642.534294][T15305] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  644.623630][T15341] netlink: 'syz.0.2190': attribute type 10 has an invalid length.
[  644.638427][T15341] team0: Device vxcan1 is of different type
[  647.089086][T15368] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2198'.
[  648.403974][    C0] sched: RT throttling activated
[  651.849292][T15420] Driver unsupported XDP return value 0 on prog  (id 82) dev N/A, expect packet loss!
[  653.146105][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2223'.
[  654.074545][T15457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'.
[  656.318904][T15476] loop0: detected capacity change from 0 to 32768
[  656.332829][T15476] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  656.673507][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2238'.
[  657.223601][T14149] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  659.206988][T15511] loop3: detected capacity change from 0 to 32768
[  659.362220][   T27] audit: type=1800 audit(1775198059.854:149): pid=15511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2243" name="file1" dev="loop3" ino=7 res=0 errno=0
[  660.370379][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2249'.
[  662.707786][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'.
[  665.293292][ T5778] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  665.535947][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2272'.
[  665.692717][T15612] process 'syz.1.2275' launched './file2' with NULL argv: empty string added
[  667.140114][T15638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2284'.
[  669.111792][T15665] netlink: 'syz.1.2293': attribute type 10 has an invalid length.
[  669.134676][T15665] team0: Device vxcan1 is of different type
[  669.205619][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'.
[  669.728354][T15679] netlink: 'syz.1.2295': attribute type 10 has an invalid length.
[  669.754144][T15679] team0: Device vxcan1 is of different type
[  670.694170][T15693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2301'.
[  670.972842][T14234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  670.986195][T14234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  671.010282][T14234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  671.025823][T14234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  671.034812][T14234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  671.043105][T14234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  671.287916][T15710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2306'.
[  671.580857][T15701] chnl_net:caif_netlink_parms(): no params data found
[  671.608992][T15719] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2307'.
[  671.790902][T15701] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.814208][T15701] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.821491][T15701] bridge_slave_0: entered allmulticast mode
[  671.864153][T15701] bridge_slave_0: entered promiscuous mode
[  671.898585][T15701] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.927508][T15701] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.947524][T15701] bridge_slave_1: entered allmulticast mode
[  671.958696][T15701] bridge_slave_1: entered promiscuous mode
[  672.048740][T15701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  672.093058][T15701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  672.157858][T15701] team0: Port device team_slave_0 added
[  672.187991][T15701] team0: Port device team_slave_1 added
[  672.237458][T15701] batman_adv: batadv0: Adding interface: batadv_slave_0
[  672.251166][T15701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  672.282852][T15701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  673.096389][T15701] batman_adv: batadv0: Adding interface: batadv_slave_1
[  673.103387][T15701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  673.124185][ T5778] Bluetooth: hci4: command tx timeout
[  673.144906][T15701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  673.264636][T15701] hsr_slave_0: entered promiscuous mode
[  673.293884][T15701] hsr_slave_1: entered promiscuous mode
[  673.317417][T15701] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  673.337959][T15701] Cannot create hsr debugfs directory
[  674.316378][T15701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.671500][T15701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.802227][T15701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.970692][T15701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.204162][ T5778] Bluetooth: hci4: command tx timeout
[  676.215673][T15701] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  676.248775][T15701] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  676.275178][T15701] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  676.311787][T15701] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  676.552130][T15701] 8021q: adding VLAN 0 to HW filter on device bond0
[  676.616784][T15701] 8021q: adding VLAN 0 to HW filter on device team0
[  676.659997][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.667187][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.708665][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.715876][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  677.290577][T15767] Bluetooth: hci4: command tx timeout
[  677.989449][T15701] 8021q: adding VLAN 0 to HW filter on device batadv0
[  678.032027][T15767] Bluetooth: hci3: command 0x0406 tx timeout
[  678.235187][T15701] veth0_vlan: entered promiscuous mode
[  678.293113][T15701] veth1_vlan: entered promiscuous mode
[  678.356690][T15701] veth0_macvtap: entered promiscuous mode
[  678.379972][T15701] veth1_macvtap: entered promiscuous mode
[  678.436257][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.455185][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.469814][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.481869][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.500796][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.511983][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.532505][T15701] batman_adv: batadv0: Interface activated: batadv_slave_0
[  678.557570][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.579916][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.590683][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.611626][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.654423][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.318237][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.396032][T14234] Bluetooth: hci4: command tx timeout
[  679.403069][T15701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  679.464793][T15701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  679.476887][T15701] batman_adv: batadv0: Interface activated: batadv_slave_1
[  679.487858][T15701] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  679.496991][T15701] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  679.505928][T15701] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  679.514687][T15701] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  679.737131][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  679.797374][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  680.317406][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  680.330055][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.599017][T15825] loop0: detected capacity change from 0 to 32768
[  682.637499][T15825] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  682.901402][T14149] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  686.044497][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  686.050865][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  687.776479][T15877] loop3: detected capacity change from 0 to 32768
[  687.935277][T15877] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  687.964207][T15877] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  688.013163][T15877] BTRFS info (device loop3): setting nodatacow, compression disabled
[  688.160851][T15877] BTRFS info (device loop3): enabling auto defrag
[  688.223896][T15877] BTRFS info (device loop3): max_inline at 0
[  688.341807][T15877] BTRFS info (device loop3): using free space tree
[  688.872186][T15877] BTRFS info (device loop3): auto enabling async discard
[  689.006329][T15701] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  690.537945][T15940] netlink: 'syz.2.2367': attribute type 10 has an invalid length.
[  690.603255][T15940] team0: Device vxcan1 is of different type
[  692.547075][T15967] loop0: detected capacity change from 0 to 164
[  692.593301][T15967] Unable to read rock-ridge attributes
[  692.680996][T15967] Unable to read rock-ridge attributes
[  694.581534][T15991] netlink: 'syz.0.2385': attribute type 10 has an invalid length.
[  694.608476][T15991] team0: Device vxcan1 is of different type
[  695.444692][T15999] netlink: 'syz.0.2391': attribute type 10 has an invalid length.
[  695.486314][T15999] team0: Device vxcan1 is of different type
[  701.389569][T16076] syz.1.2419 uses obsolete (PF_INET,SOCK_PACKET)
[  702.854164][   T27] audit: type=1326 audit(1775198103.374:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.1.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58bb9c819 code=0x7ffc0000
[  702.929283][   T27] audit: type=1326 audit(1775198103.374:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.1.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58bb9c819 code=0x7ffc0000
[  703.006671][   T27] audit: type=1326 audit(1775198103.374:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.1.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58bb9c819 code=0x7ffc0000
[  703.050798][   T27] audit: type=1326 audit(1775198103.374:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.1.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7ff58bb9c819 code=0x7ffc0000
[  703.122392][   T27] audit: type=1326 audit(1775198103.374:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.1.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58bb9c819 code=0x7ffc0000
[  703.192408][   T27] audit: type=1326 audit(1775198103.374:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.1.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff58bb9c819 code=0x7ffc0000
[  703.235198][   T27] audit: type=1326 audit(1775198103.374:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.1.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff58bb9c819 code=0x7ffc0000
[  703.282802][   T27] audit: type=1326 audit(1775198103.374:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16097 comm="syz.1.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff58bb9c819 code=0x7ffc0000
[  706.748114][T15767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  706.763350][T15767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  706.785986][T15767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  706.813582][T15767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  706.821605][T15767] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  706.834257][T15767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  708.059055][T16136] chnl_net:caif_netlink_parms(): no params data found
[  708.885141][T14234] Bluetooth: hci0: command tx timeout
[  709.250162][T16136] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.296881][T16136] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.314327][T16136] bridge_slave_0: entered allmulticast mode
[  709.324686][T16136] bridge_slave_0: entered promiscuous mode
[  709.784905][   T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  709.828518][T16136] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.841396][T16136] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.862459][T16136] bridge_slave_1: entered allmulticast mode
[  709.875843][T16136] bridge_slave_1: entered promiscuous mode
[  709.989870][   T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.288125][   T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.320472][T16136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  710.342736][T16136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.397531][   T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  710.501403][T16136] team0: Port device team_slave_0 added
[  710.522539][T16136] team0: Port device team_slave_1 added
[  710.589315][T16136] batman_adv: batadv0: Adding interface: batadv_slave_0
[  710.604376][T16136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  710.638681][T16136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  710.653733][T16136] batman_adv: batadv0: Adding interface: batadv_slave_1
[  710.669725][T16136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  710.706961][T16136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  710.971612][T14234] Bluetooth: hci0: command tx timeout
[  711.804362][T16136] hsr_slave_0: entered promiscuous mode
[  711.821244][T16136] hsr_slave_1: entered promiscuous mode
[  711.828775][T16136] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  711.838245][T16136] Cannot create hsr debugfs directory
[  713.044709][T14234] Bluetooth: hci0: command tx timeout
[  715.477139][T14234] Bluetooth: hci0: command tx timeout
[  716.099388][T16238] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000
[  718.049575][T16266] netlink: 'syz.0.2476': attribute type 10 has an invalid length.
[  718.065974][T16266] team0: Device vxcan1 is of different type
[  718.560147][T16136] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  718.626575][T16136] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  718.764003][T16136] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  718.800735][T16136] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  719.235735][   T59] hsr_slave_0: left promiscuous mode
[  719.242117][   T59] hsr_slave_1: left promiscuous mode
[  719.260349][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  719.274157][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  719.289859][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  719.313397][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  719.332000][   T59] bridge_slave_1: left allmulticast mode
[  719.338300][   T59] bridge_slave_1: left promiscuous mode
[  719.354525][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.365277][   T59] bridge_slave_0: left allmulticast mode
[  719.370958][   T59] bridge_slave_0: left promiscuous mode
[  719.394545][   T59] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.471398][   T59] veth1_macvtap: left promiscuous mode
[  719.478350][   T59] veth0_macvtap: left promiscuous mode
[  719.494109][   T59] veth1_vlan: left promiscuous mode
[  719.499470][   T59] veth0_vlan: left promiscuous mode
[  720.347738][   T59] bond1 (unregistering): Released all slaves
[  724.172365][   T59] team0 (unregistering): Port device team_slave_1 removed
[  724.337465][   T59] team0 (unregistering): Port device team_slave_0 removed
[  724.488273][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  724.775284][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  726.127663][   T59] bond0 (unregistering): Released all slaves
[  726.488027][T16352] dvmrp0: entered allmulticast mode
[  726.493677][T16355] netlink: 'syz.3.2503': attribute type 10 has an invalid length.
[  726.601587][T16355] team0: Device vxcan1 is of different type
[  726.851527][T16375] 9pnet: p9_errstr2errno: server reported unknown error 0x000
[  726.896462][T16136] 8021q: adding VLAN 0 to HW filter on device bond0
[  727.032459][T16136] 8021q: adding VLAN 0 to HW filter on device team0
[  727.079238][T16164] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.086406][T16164] bridge0: port 1(bridge_slave_0) entered forwarding state
[  727.308544][T16164] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.315802][T16164] bridge0: port 2(bridge_slave_1) entered forwarding state
[  727.483282][T16136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  727.934915][T16136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  728.099411][T16136] veth0_vlan: entered promiscuous mode
[  728.119166][T16136] veth1_vlan: entered promiscuous mode
[  728.180944][T16136] veth0_macvtap: entered promiscuous mode
[  728.202656][T16136] veth1_macvtap: entered promiscuous mode
[  728.238632][T16136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.252431][T16136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.267498][T16136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.278655][T16136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.291555][T16136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.303706][T16136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.316607][T16136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  728.327889][T16136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.338571][T16136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.349070][T16136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.359680][T16136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.369637][T16136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.391803][T16136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.404295][T16136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.416536][T16136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.428232][T16136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  728.443083][T16136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  728.452074][T16136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  728.460987][T16136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  728.478988][T16136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  728.786413][T16405] netlink: 'syz.0.2519': attribute type 10 has an invalid length.
[  728.802077][T16405] team0: Device vxcan1 is of different type
[  729.443320][ T4527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.498298][ T4527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.593646][ T4494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.604963][ T4494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.656013][T14234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  731.668655][T14234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  731.677756][T14234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  731.687783][T14234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  731.699928][T14234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  731.707583][T14234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  732.427482][T16430] chnl_net:caif_netlink_parms(): no params data found
[  733.067358][ T4527] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.170495][T16430] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.214276][T16430] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.254344][T16430] bridge_slave_0: entered allmulticast mode
[  733.261681][T16430] bridge_slave_0: entered promiscuous mode
[  733.354271][ T4527] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.390542][T16430] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.413208][T16430] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.441675][T16430] bridge_slave_1: entered allmulticast mode
[  733.481160][T16430] bridge_slave_1: entered promiscuous mode
[  733.575048][ T4527] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.685724][T16430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  733.764965][T15767] Bluetooth: hci2: command tx timeout
[  733.777074][ T4527] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.826961][T16430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  734.306633][T16475] netlink: 'syz.1.2541': attribute type 10 has an invalid length.
[  734.318295][T16475] team0: Device vxcan1 is of different type
[  734.829609][T16430] team0: Port device team_slave_0 added
[  734.850592][T16430] team0: Port device team_slave_1 added
[  734.987694][T16430] batman_adv: batadv0: Adding interface: batadv_slave_0
[  735.012150][T16430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  735.050116][T16430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  735.063008][T16430] batman_adv: batadv0: Adding interface: batadv_slave_1
[  735.071362][T16430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  735.125659][T16430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  735.195086][T16484] netlink: 'syz.1.2546': attribute type 1 has an invalid length.
[  735.454785][T16430] hsr_slave_0: entered promiscuous mode
[  735.474701][T16430] hsr_slave_1: entered promiscuous mode
[  735.524190][T16430] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  735.542520][T16430] Cannot create hsr debugfs directory
[  735.870585][T15767] Bluetooth: hci2: command tx timeout
[  736.636516][T16500] xt_hashlimit: size too large, truncated to 1048576
[  737.335367][T16517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2554'.
[  737.685654][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  737.924382][T15767] Bluetooth: hci2: command tx timeout
[  738.242361][ T4527] dvmrp0 (unregistering): left allmulticast mode
[  738.650161][T16430] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  738.857116][T16430] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  738.897918][T16430] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  739.017686][ T4527] hsr_slave_0: left promiscuous mode
[  739.035763][ T4527] hsr_slave_1: left promiscuous mode
[  739.054627][ T4527] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  739.081632][ T4527] batman_adv: batadv0: Removing interface: batadv_slave_1
[  739.099945][ T4527] bridge_slave_1: left allmulticast mode
[  739.121047][ T4527] bridge_slave_1: left promiscuous mode
[  739.144795][ T4527] bridge0: port 2(bridge_slave_1) entered disabled state
[  739.171056][ T4527] bridge_slave_0: left allmulticast mode
[  739.187143][ T4527] bridge_slave_0: left promiscuous mode
[  739.204291][ T4527] bridge0: port 1(bridge_slave_0) entered disabled state
[  739.300821][ T4527] team_slave_0: left promiscuous mode
[  739.306381][ T4527] team_slave_1: left promiscuous mode
[  739.360028][ T4527] veth1_macvtap: left promiscuous mode
[  739.373940][ T4527] veth0_macvtap: left promiscuous mode
[  739.386259][ T4527] veth1_vlan: left promiscuous mode
[  739.405808][ T4527] veth0_vlan: left promiscuous mode
[  740.004257][T15767] Bluetooth: hci2: command tx timeout
[  741.325696][ T4527] team0 (unregistering): Port device team_slave_1 removed
[  741.434669][ T4527] team0 (unregistering): Port device team_slave_0 removed
[  741.506908][ T4527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  741.642342][ T4527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  742.524389][ T4527] bond0 (unregistering): Released all slaves
[  742.754761][T16430] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  742.786756][T16593] netlink: 'syz.3.2577': attribute type 10 has an invalid length.
[  742.797130][T16593] team0: Device vxcan1 is of different type
[  743.192916][T16430] 8021q: adding VLAN 0 to HW filter on device bond0
[  743.238682][T16430] 8021q: adding VLAN 0 to HW filter on device team0
[  743.277908][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.285094][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state
[  743.304223][T16622] netlink: 'syz.1.2588': attribute type 10 has an invalid length.
[  743.335840][T16622] team0: Device vxcan1 is of different type
[  743.387710][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state
[  743.394932][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state
[  743.860414][T16638] netlink: 'syz.2.2593': attribute type 10 has an invalid length.
[  743.873589][T16638] team0: Device vxcan1 is of different type
[  744.073628][T16430] 8021q: adding VLAN 0 to HW filter on device batadv0
[  744.163539][T16430] veth0_vlan: entered promiscuous mode
[  744.196451][T16430] veth1_vlan: entered promiscuous mode
[  744.261921][T16430] veth0_macvtap: entered promiscuous mode
[  744.290015][T16430] veth1_macvtap: entered promiscuous mode
[  744.319997][T16430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  744.331221][T16430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.341611][T16430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  744.357802][T16430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.373235][T16430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  744.386366][T16430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.424010][T16430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  744.504119][T16430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.547610][T16430] batman_adv: batadv0: Interface activated: batadv_slave_0
[  744.573178][T16430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  744.592126][T16430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.606168][T16430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  744.636524][T16430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.676799][T16430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  744.703636][T16430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.769935][T16430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  744.823092][T16430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.866432][T16430] batman_adv: batadv0: Interface activated: batadv_slave_1
[  744.935004][T16430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  744.970825][T16430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  745.023639][T16430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  745.087533][T16430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  745.365053][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  745.393659][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.484459][ T4527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  745.492345][ T4527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  746.721500][T16703] loop0: detected capacity change from 0 to 2048
[  746.927152][T16703] GPT:first_usable_lbas don't match.
[  746.932495][T16703] GPT:34 != 290
[  746.954224][T16703] GPT: Use GNU Parted to correct GPT errors.
[  746.960711][T16703]  loop0: p1 p2 p3
[  747.099625][T16486] udevd[16486]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  747.112852][T16487] udevd[16487]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  747.192097][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2624'.
[  747.219240][T16713] veth1_to_bridge: entered promiscuous mode
[  747.288771][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.299854][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  748.086496][T16722] netlink: 'syz.0.2627': attribute type 10 has an invalid length.
[  748.098436][T16722] team0: Device vxcan1 is of different type
[  748.271257][T16728] loop2: detected capacity change from 0 to 512
[  748.295477][T16728] EXT4-fs (loop2): 1 truncate cleaned up
[  748.303162][T16728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  748.491742][T16136] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  748.875371][    T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  749.235048][    T8] usb 3-1: Using ep0 maxpacket: 8
[  749.252506][    T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  749.278054][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.331112][    T8] usb 3-1: Product: syz
[  749.360556][    T8] usb 3-1: Manufacturer: syz
[  749.371603][    T8] usb 3-1: SerialNumber: syz
[  749.386554][    T8] usb 3-1: config 0 descriptor??
[  749.602586][    T8] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  750.255550][    T8] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32
[  750.285979][    T8] usb 3-1: USB disconnect, device number 19
[  750.961553][T16787] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2654'.
[  751.155102][T16792] capability: warning: `syz.2.2656' uses 32-bit capabilities (legacy support in use)
[  759.680429][T16928] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  761.481376][T16955] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  764.345670][T16990] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  766.049392][T17018] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  768.193511][T17040] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2744'.
[  768.214547][T17040] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  768.795732][T17051] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  771.490214][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'.
[  771.870056][T17082] 9pnet: p9_errstr2errno: server reported unknown error 0x000000
[  772.053932][T17087] loop0: detected capacity change from 0 to 764
[  772.083790][T17087] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  772.113374][T17087] Symlink component flag not implemented
[  772.129649][T17087] Symlink component flag not implemented (7)
[  772.152669][T17087] Symlink component flag not implemented (7)
[  774.729366][T17127] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  777.328748][T17153] loop2: detected capacity change from 0 to 1024
[  777.363598][T17153] EXT4-fs: Ignoring removed orlov option
[  777.400819][T17153] EXT4-fs: inline encryption not supported
[  777.433899][T17153] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  777.453158][T17153] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  777.510025][T17153] EXT4-fs error (device loop2): ext4_get_journal_inode:5816: inode #8: comm syz.2.2786: iget: special inode unallocated
[  777.535778][T17153] EXT4-fs (loop2): no journal found
[  777.541040][T17153] EXT4-fs (loop2): can't get journal size
[  777.553340][T17153] EXT4-fs error (device loop2): ext4_protect_reserved_inode:160: inode #8: comm syz.2.2786: iget: special inode unallocated
[  777.569632][T17153] EXT4-fs (loop2): failed to initialize system zone (-117)
[  777.591586][T17153] EXT4-fs (loop2): mount failed
[  781.329222][T17211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  783.989378][T17294] loop0: detected capacity change from 0 to 512
[  784.041409][T17294] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  784.106543][T17294] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  785.316785][T16430] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  787.575055][T17356] netlink: 'syz.3.2863': attribute type 10 has an invalid length.
[  787.585467][T17356] team0: Device vxcan1 is of different type
[  788.297782][T17367] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  788.321786][T17367] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  788.521689][T17372] 9pnet_fd: Insufficient options for proto=fd
[  789.728572][T17396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2880'.
[  789.829535][T17405] 9pnet_fd: Insufficient options for proto=fd
[  790.064472][ T5869] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  790.284147][ T5869] usb 1-1: Using ep0 maxpacket: 32
[  790.300690][ T5869] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  790.311347][ T5869] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  790.324448][ T5869] usb 1-1: config 0 interface 0 has no altsetting 0
[  790.343337][ T5869] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  790.353008][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  790.363676][ T5869] usb 1-1: Product: syz
[  790.370446][ T5869] usb 1-1: Manufacturer: syz
[  790.376766][ T5869] usb 1-1: SerialNumber: syz
[  790.412382][ T5869] usb 1-1: config 0 descriptor??
[  790.527936][T17416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2887'.
[  790.761005][T17421] loop2: detected capacity change from 0 to 128
[  790.987931][ T5869] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  791.042138][T17428] 9pnet_fd: Insufficient options for proto=fd
[  791.384390][ T5869] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[  791.393882][ T5869] gs_usb: probe of 1-1:0.0 failed with error -121
[  791.407046][ T5869] usb 1-1: USB disconnect, device number 27
[  791.522188][T17436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'.
[  791.865683][T17450] 9pnet_fd: Insufficient options for proto=fd
[  791.980068][T17453] loop0: detected capacity change from 0 to 128
[  792.007260][T17453] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  792.059408][T17453] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  792.236055][   T49] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  792.652647][T17466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'.
[  793.013846][T17474] loop0: detected capacity change from 0 to 2048
[  793.119324][T17474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  793.329889][T16430] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  793.793368][T17491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'.
[  794.480877][T17507] loop0: detected capacity change from 0 to 128
[  794.588711][   T27] audit: type=1326 audit(1775198451.112:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac39c819 code=0x7ffc0000
[  794.646880][   T27] audit: type=1326 audit(1775198451.112:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa4ac39c819 code=0x7ffc0000
[  794.680442][   T27] audit: type=1326 audit(1775198451.112:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac39c819 code=0x7ffc0000
[  794.703452][   T27] audit: type=1326 audit(1775198451.112:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac39c819 code=0x7ffc0000
[  794.782174][   T27] audit: type=1326 audit(1775198451.112:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fa4ac39c819 code=0x7ffc0000
[  794.840465][   T27] audit: type=1326 audit(1775198451.112:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac39c819 code=0x7ffc0000
[  794.878075][   T27] audit: type=1326 audit(1775198451.112:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17506 comm="syz.0.2923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4ac39c819 code=0x7ffc0000
[  795.444056][T14234] Bluetooth: hci4: command 0x0406 tx timeout
[  795.892920][T17525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2929'.
[  797.909967][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'.
[  799.273323][T17595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2957'.
[  801.014135][   T27] audit: type=1326 audit(1775198457.512:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17637 comm="syz.3.2972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb16279c819 code=0x0
[  802.254068][T14030] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  802.261788][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2972'.
[  802.275558][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2972'.
[  802.302434][T17657] netlink: 'syz.3.2972': attribute type 13 has an invalid length.
[  802.312021][T17657] netlink: 'syz.3.2972': attribute type 14 has an invalid length.
[  802.444031][T14030] usb 1-1: Using ep0 maxpacket: 32
[  802.459639][T14030] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  802.477362][T14030] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  802.508890][T14030] usb 1-1: config 0 interface 0 has no altsetting 0
[  802.544616][T14030] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  802.564046][T14030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  802.574522][T14030] usb 1-1: Product: syz
[  802.578719][T14030] usb 1-1: Manufacturer: syz
[  802.593860][T14030] usb 1-1: SerialNumber: syz
[  802.607018][T14030] usb 1-1: config 0 descriptor??
[  803.032076][T14030] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  803.233009][T14030] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[  803.254691][T14030] gs_usb: probe of 1-1:0.0 failed with error -121
[  803.490524][T14030] usb 1-1: USB disconnect, device number 28
[  803.608313][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  804.060596][T17696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2992'.
[  806.233391][T17735] netlink: 'syz.2.3007': attribute type 10 has an invalid length.
[  806.244909][T17735] team0: Device vxcan1 is of different type
[  807.284157][ T5869] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  807.464186][ T5869] usb 3-1: Using ep0 maxpacket: 32
[  807.481222][ T5869] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  807.501333][ T5869] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  807.524663][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0
[  807.533920][ T5869] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  807.543507][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  807.563869][ T5869] usb 3-1: Product: syz
[  807.585115][ T5869] usb 3-1: Manufacturer: syz
[  807.591290][ T5869] usb 3-1: SerialNumber: syz
[  807.607625][ T5869] usb 3-1: config 0 descriptor??
[  808.034056][ T5869] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  808.235772][ T5869] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  808.263127][ T5869] gs_usb: probe of 3-1:0.0 failed with error -22
[  808.440890][T14030] usb 3-1: USB disconnect, device number 20
[  808.731995][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.738540][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  810.135357][ T5869] IPVS: starting estimator thread 0...
[  810.234261][T17818] IPVS: using max 21 ests per chain, 50400 per kthread
[  810.249547][T17813] loop2: detected capacity change from 0 to 4096
[  810.353287][T17813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  810.959908][T16136] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.721276][T17893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'.
[  820.444777][T17969] netlink: 'syz.3.3090': attribute type 10 has an invalid length.
[  820.487940][T17969] team0: Device vxcan1 is of different type
[  822.648029][   T27] audit: type=1326 audit(1775198479.162:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18001 comm="syz.3.3106" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb16279c819 code=0x0
[  823.806102][T18020] netlink: 'syz.2.3111': attribute type 10 has an invalid length.
[  823.949916][T18020] team0: Device vxcan1 is of different type
[  826.045806][T18046] netlink: 'syz.2.3121': attribute type 10 has an invalid length.
[  826.061093][T18046] team0: Device vxcan1 is of different type
[  829.005614][T18077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3131'.
[  830.893345][T18112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3145'.
[  831.289407][T15767] Bluetooth: hci0: command 0x0406 tx timeout
[  841.099141][T18268] netlink: 'syz.2.3200': attribute type 10 has an invalid length.
[  841.117451][T18268] team0: Device vxcan1 is of different type
[  841.744912][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3201'.
[  843.457262][T18300] netlink: 'syz.2.3211': attribute type 10 has an invalid length.
[  843.472886][T18300] team0: Device vxcan1 is of different type
[  844.868341][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3222'.
[  844.959461][T18325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3223'.
[  844.974742][T18325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3223'.
[  844.990076][T18325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3223'.
[  845.000512][T18325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3223'.
[  845.017193][T18325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3223'.
[  845.031499][T18325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3223'.
[  845.048967][T18325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3223'.
[  845.063102][T18325] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3223'.
[  845.820368][T18329] netlink: 'syz.0.3224': attribute type 10 has an invalid length.
[  845.830234][T18329] team0: Device vxcan1 is of different type
[  847.753638][T18367] netlink: 'syz.1.3236': attribute type 10 has an invalid length.
[  847.763059][T18367] team0: Device vxcan1 is of different type
[  849.710465][T18373] loop2: detected capacity change from 0 to 512
[  849.754221][T18373] EXT4-fs: Ignoring removed bh option
[  849.812710][T18373] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  849.855948][T18373] EXT4-fs (loop2): Test dummy encryption mode enabled
[  849.899017][T18383] overlayfs: failed to resolve './cgroup': -2
[  849.912205][T18373] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.3241: inode has both inline data and extents flags
[  849.974349][T18373] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.3241: couldn't read orphan inode 15 (err -117)
[  850.013840][T18373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  850.597981][T18405] netlink: 'syz.1.3251': attribute type 10 has an invalid length.
[  850.613521][T18405] team0: Device vxcan1 is of different type
[  851.616778][T18373] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  851.876109][T16136] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  856.578279][T18463] loop2: detected capacity change from 0 to 256
[  856.743440][T18463] FAT-fs (loop2): Directory bread(block 64) failed
[  856.758090][T18463] FAT-fs (loop2): Directory bread(block 65) failed
[  856.782979][T18463] FAT-fs (loop2): Directory bread(block 66) failed
[  856.808986][T18463] FAT-fs (loop2): Directory bread(block 67) failed
[  856.819467][T18463] FAT-fs (loop2): Directory bread(block 68) failed
[  856.839916][T18463] FAT-fs (loop2): Directory bread(block 69) failed
[  856.855016][T18463] FAT-fs (loop2): Directory bread(block 70) failed
[  856.861591][T18463] FAT-fs (loop2): Directory bread(block 71) failed
[  856.884215][T15767] Bluetooth: hci2: command 0x0406 tx timeout
[  856.907072][T18463] FAT-fs (loop2): Directory bread(block 72) failed
[  856.913653][T18463] FAT-fs (loop2): Directory bread(block 73) failed
[  857.119299][T18480] 9pnet_fd: Insufficient options for proto=fd
[  860.236478][T18521] loop2: detected capacity change from 0 to 16
[  860.271054][T18521] erofs: (device loop2): mounted with root inode @ nid 36.
[  860.352756][T18521] syz.2.3295: attempt to access beyond end of device
[  860.352756][T18521] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16
[  860.381866][T18521] syz.2.3295: attempt to access beyond end of device
[  860.381866][T18521] loop2: rw=524288, sector=16, nr_sectors = 8 limit=16
[  860.420327][T18521] ==================================================================
[  860.428439][T18521] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x38c/0x460
[  860.436809][T18521] Read of size 4096 at addr ffff88805eed2000 by task syz.2.3295/18521
[  860.444981][T18521] 
[  860.447320][T18521] CPU: 1 PID: 18521 Comm: syz.2.3295 Not tainted syzkaller #0
[  860.454791][T18521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  860.464881][T18521] Call Trace:
[  860.468173][T18521]  <TASK>
[  860.471116][T18521]  dump_stack_lvl+0x18c/0x250
[  860.475823][T18521]  ? __lock_acquire+0x7d40/0x7d40
[  860.480874][T18521]  ? show_regs_print_info+0x20/0x20
[  860.486101][T18521]  ? load_image+0x400/0x400
[  860.490633][T18521]  ? __virt_addr_valid+0x469/0x540
[  860.495771][T18521]  print_report+0xa8/0x210
[  860.500207][T18521]  ? z_erofs_transform_plain+0x38c/0x460
[  860.505855][T18521]  kasan_report+0x117/0x150
[  860.510388][T18521]  ? trace_contention_end+0x39/0xe0
[  860.515603][T18521]  ? z_erofs_transform_plain+0x38c/0x460
[  860.521257][T18521]  kasan_check_range+0x241/0x290
[  860.526217][T18521]  ? z_erofs_transform_plain+0x38c/0x460
[  860.531870][T18521]  __asan_memcpy+0x29/0x70
[  860.536309][T18521]  z_erofs_transform_plain+0x38c/0x460
[  860.541795][T18521]  ? z_erofs_lz4_decompress+0x1740/0x1740
[  860.547540][T18521]  z_erofs_decompress_queue+0x1780/0x26f0
[  860.553302][T18521]  ? z_erofs_onlinepage_end+0x360/0x360
[  860.558875][T18521]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  860.564876][T18521]  ? lock_chain_count+0x20/0x20
[  860.569757][T18521]  ? z_erofs_decompressqueue_endio+0x5a0/0x5a0
[  860.575934][T18521]  ? erofs_map_blocks+0x17b0/0x17b0
[  860.581152][T18521]  ? folio_unlock+0x118/0x2e0
[  860.585848][T18521]  z_erofs_runqueue+0x1913/0x1aa0
[  860.590907][T18521]  ? z_erofs_do_read_page+0x36b0/0x36b0
[  860.596490][T18521]  ? __lock_acquire+0x7d40/0x7d40
[  860.601547][T18521]  ? put_page+0xea/0x260
[  860.605812][T18521]  ? z_erofs_pcluster_readmore+0x39e/0x450
[  860.611638][T18521]  z_erofs_read_folio+0x323/0x5c0
[  860.616686][T18521]  ? z_erofs_rcu_callback+0x1b0/0x1b0
[  860.622096][T18521]  filemap_read_folio+0x172/0x760
[  860.627144][T18521]  ? z_erofs_rcu_callback+0x1b0/0x1b0
[  860.632540][T18521]  ? maybe_unlock_mmap_for_io+0xf0/0xf0
[  860.638118][T18521]  ? down_read+0x1ac/0x2e0
[  860.642564][T18521]  filemap_get_pages+0x13c7/0x1e90
[  860.647714][T18521]  ? filemap_read+0xf00/0xf00
[  860.652416][T18521]  ? __might_sleep+0xe0/0xe0
[  860.657032][T18521]  ? folio_mark_accessed+0x201/0x1420
[  860.662431][T18521]  ? folio_activate_fn+0x1f30/0x1f30
[  860.667740][T18521]  filemap_read+0x402/0xf00
[  860.672261][T18521]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  860.678362][T18521]  ? filemap_get_folios_tag+0x830/0x830
[  860.683931][T18521]  ? generic_file_read_iter+0x90/0x4f0
[  860.689407][T18521]  ? __asan_memset+0x22/0x40
[  860.694034][T18521]  ? iov_iter_kvec+0xd4/0x1b0
[  860.698743][T18521]  __kernel_read+0x2f3/0x710
[  860.703366][T18521]  ? rw_verify_area+0x1b0/0x1b0
[  860.708249][T18521]  integrity_kernel_read+0x8a/0xd0
[  860.713378][T18521]  ? integrity_inode_free+0x170/0x170
[  860.718769][T18521]  ? kernel_fpu_end+0x51/0x70
[  860.723472][T18521]  ? _sha256_update+0x129/0x1f0
[  860.728346][T18521]  ? sha256_transform_avx+0xcc0/0xcc0
[  860.733739][T18521]  ima_calc_file_hash+0x91d/0x1910
[  860.738878][T18521]  ? is_bpf_text_address+0x28f/0x2a0
[  860.744182][T18521]  ? is_bpf_text_address+0x26/0x2a0
[  860.749409][T18521]  ? kernel_text_address+0xa0/0xd0
[  860.754543][T18521]  ? __kernel_text_address+0xd/0x30
[  860.759767][T18521]  ? unwind_get_return_address+0x91/0xc0
[  860.765414][T18521]  ? look_up_lock_class+0x75/0x140
[  860.770545][T18521]  ? ima_alloc_tfm+0x2f0/0x2f0
[  860.775347][T18521]  ? register_lock_class+0xc4/0x8a0
[  860.780578][T18521]  ? __lock_acquire+0x2b81/0x7d40
[  860.785634][T18521]  ? generic_fillattr+0x312/0x7b0
[  860.790677][T18521]  ? __asan_memcpy+0x40/0x70
[  860.795286][T18521]  ? generic_fillattr+0x4fc/0x7b0
[  860.800351][T18521]  ima_collect_measurement+0x4d4/0xa20
[  860.805834][T18521]  ? ima_get_action+0xb0/0xb0
[  860.810527][T18521]  ? erofs_getxattr+0x13e/0x460
[  860.815392][T18521]  ? rcu_is_watching+0x15/0xb0
[  860.820183][T18521]  ? ima_get_hash_algo+0x91/0x4a0
[  860.825233][T18521]  ? ima_get_cache_status+0x1e0/0x1e0
[  860.830634][T18521]  process_measurement+0x128e/0x1d70
[  860.835950][T18521]  ? ima_file_mmap+0x1d0/0x1d0
[  860.840730][T18521]  ? tomoyo_check_open_permission+0x1cf/0x460
[  860.846823][T18521]  ? tomoyo_check_path_number_acl+0x280/0x280
[  860.852930][T18521]  ? apparmor_inode_getattr+0x2d0/0x2d0
[  860.858502][T18521]  ? apparmor_current_getsecid_subj+0xb5/0x120
[  860.864830][T18521]  ima_file_check+0xcc/0x110
[  860.869449][T18521]  ? ima_bprm_check+0x200/0x200
[  860.874328][T18521]  path_openat+0x28b7/0x3230
[  860.878947][T18521]  ? do_filp_open+0x430/0x430
[  860.883650][T18521]  ? __virt_addr_valid+0x18c/0x540
[  860.888789][T18521]  do_filp_open+0x1f5/0x430
[  860.893322][T18521]  ? vfs_tmpfile+0x490/0x490
[  860.898028][T18521]  ? _raw_spin_unlock+0x28/0x40
[  860.902900][T18521]  ? alloc_fd+0x58f/0x630
[  860.907254][T18521]  do_sys_openat2+0x134/0x1d0
[  860.912039][T18521]  ? do_sys_open+0xe0/0xe0
[  860.916469][T18521]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  860.922469][T18521]  ? lock_chain_count+0x20/0x20
[  860.927343][T18521]  __x64_sys_openat+0x139/0x160
[  860.932216][T18521]  do_syscall_64+0x55/0xa0
[  860.936677][T18521]  ? clear_bhb_loop+0x40/0x90
[  860.941371][T18521]  ? clear_bhb_loop+0x40/0x90
[  860.946070][T18521]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  860.951983][T18521] RIP: 0033:0x7f30f519c819
[  860.956420][T18521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  860.976046][T18521] RSP: 002b:00007f30f6039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  860.984482][T18521] RAX: ffffffffffffffda RBX: 00007f30f5415fa0 RCX: 00007f30f519c819
[  860.992479][T18521] RDX: 0000000000080000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  861.000472][T18521] RBP: 00007f30f5232c91 R08: 0000000000000000 R09: 0000000000000000
[  861.008470][T18521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  861.016467][T18521] R13: 00007f30f5416038 R14: 00007f30f5415fa0 R15: 00007ffff7032748
[  861.024468][T18521]  </TASK>
[  861.027499][T18521] 
[  861.029828][T18521] Allocated by task 17416:
[  861.034245][T18521]  kasan_set_track+0x4e/0x70
[  861.038856][T18521]  __kasan_slab_alloc+0x6c/0x80
[  861.043722][T18521]  slab_post_alloc_hook+0x6e/0x4b0
[  861.048860][T18521]  kmem_cache_alloc+0x11a/0x2d0
[  861.053729][T18521]  __kernfs_new_node+0xe5/0x810
[  861.058597][T18521]  kernfs_new_node+0x14c/0x260
[  861.063376][T18521]  __kernfs_create_file+0x4b/0x2e0
[  861.068509][T18521]  sysfs_add_file_mode_ns+0x238/0x300
[  861.073901][T18521]  internal_create_group+0x434/0xd10
[  861.079204][T18521]  sysfs_create_groups+0x59/0x120
[  861.084242][T18521]  device_add_attrs+0xdf/0x830
[  861.089023][T18521]  device_add+0x528/0xc20
[  861.093365][T18521]  netdev_register_kobject+0x188/0x320
[  861.098841][T18521]  register_netdevice+0x12ee/0x1bb0
[  861.104050][T18521]  br_dev_newlink+0x27/0x100
[  861.108661][T18521]  rtnl_newlink+0x1542/0x20a0
[  861.113366][T18521]  rtnetlink_rcv_msg+0x869/0xfa0
[  861.118313][T18521]  netlink_rcv_skb+0x241/0x4d0
[  861.123093][T18521]  netlink_unicast+0x751/0x8d0
[  861.127875][T18521]  netlink_sendmsg+0x8d0/0xbf0
[  861.132664][T18521]  ____sys_sendmsg+0x5ba/0x960
[  861.137457][T18521]  ___sys_sendmsg+0x2a6/0x360
[  861.142145][T18521]  __se_sys_sendmsg+0x1c2/0x2b0
[  861.147006][T18521]  do_syscall_64+0x55/0xa0
[  861.151439][T18521]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  861.157347][T18521] 
[  861.159675][T18521] Last potentially related work creation:
[  861.165397][T18521]  kasan_save_stack+0x3e/0x60
[  861.170093][T18521]  __kasan_record_aux_stack+0xaf/0xc0
[  861.175494][T18521]  call_rcu+0x153/0x950
[  861.179673][T18521]  kernfs_put+0x1d3/0x360
[  861.184015][T18521]  __kobject_del+0xe9/0x2f0
[  861.188531][T18521]  kobject_put+0x239/0x460
[  861.192981][T18521]  netdev_queue_update_kobjects+0x3ed/0x480
[  861.198897][T18521]  netdev_unregister_kobject+0x121/0x250
[  861.204547][T18521]  unregister_netdevice_many_notify+0x143f/0x1900
[  861.210971][T18521]  ip_tunnel_delete_nets+0x324/0x370
[  861.216267][T18521]  cleanup_net+0x795/0xbb0
[  861.220702][T18521]  process_scheduled_works+0xa5d/0x15d0
[  861.226258][T18521]  worker_thread+0xa55/0xfc0
[  861.230864][T18521]  kthread+0x2fa/0x390
[  861.234940][T18521]  ret_from_fork+0x48/0x80
[  861.239366][T18521]  ret_from_fork_asm+0x11/0x20
[  861.244141][T18521] 
[  861.246465][T18521] Second to last potentially related work creation:
[  861.253045][T18521]  kasan_save_stack+0x3e/0x60
[  861.257732][T18521]  __kasan_record_aux_stack+0xaf/0xc0
[  861.263118][T18521]  call_rcu+0x153/0x950
[  861.267289][T18521]  kernfs_put+0x1d3/0x360
[  861.271637][T18521]  kernfs_remove_by_name_ns+0xe4/0x150
[  861.277115][T18521]  sysfs_remove_group+0xfc/0x2a0
[  861.282067][T18521]  sysfs_remove_groups+0x54/0xa0
[  861.287019][T18521]  __kobject_del+0x84/0x2f0
[  861.291539][T18521]  kobject_put+0x239/0x460
[  861.295967][T18521]  netdev_queue_update_kobjects+0x3ed/0x480
[  861.301882][T18521]  netdev_unregister_kobject+0x121/0x250
[  861.307532][T18521]  unregister_netdevice_many_notify+0x143f/0x1900
[  861.313959][T18521]  default_device_exit_batch+0x9ee/0xa80
[  861.319607][T18521]  cleanup_net+0x795/0xbb0
[  861.324040][T18521]  process_scheduled_works+0xa5d/0x15d0
[  861.329604][T18521]  worker_thread+0xa55/0xfc0
[  861.334209][T18521]  kthread+0x2fa/0x390
[  861.338286][T18521]  ret_from_fork+0x48/0x80
[  861.342717][T18521]  ret_from_fork_asm+0x11/0x20
[  861.347494][T18521] 
[  861.349822][T18521] The buggy address belongs to the object at ffff88805eed2000
[  861.349822][T18521]  which belongs to the cache kernfs_node_cache of size 184
[  861.364404][T18521] The buggy address is located 0 bytes inside of
[  861.364404][T18521]  allocated 184-byte region [ffff88805eed2000, ffff88805eed20b8)
[  861.378387][T18521] 
[  861.380718][T18521] The buggy address belongs to the physical page:
[  861.387142][T18521] page:ffffea00017bb480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5eed2
[  861.397305][T18521] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[  861.404871][T18521] page_type: 0xffffffff()
[  861.409209][T18521] raw: 00fff00000000800 ffff888019e4ddc0 ffffea00017a1740 dead000000000002
[  861.417802][T18521] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  861.426389][T18521] page dumped because: kasan: bad access detected
[  861.432812][T18521] page_owner tracks the page as allocated
[  861.438537][T18521] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 5767, tgid 5767 (syz-executor), ts 62639054166, free_ts 15496554086
[  861.456875][T18521]  post_alloc_hook+0x1c1/0x200
[  861.461663][T18521]  get_page_from_freelist+0x1951/0x19e0
[  861.467219][T18521]  __alloc_pages+0x1f0/0x460
[  861.471816][T18521]  alloc_slab_page+0x5d/0x160
[  861.476511][T18521]  new_slab+0x87/0x2d0
[  861.480593][T18521]  ___slab_alloc+0xc5d/0x12f0
[  861.485280][T18521]  kmem_cache_alloc+0x1b3/0x2d0
[  861.490146][T18521]  __kernfs_new_node+0xe5/0x810
[  861.495015][T18521]  kernfs_new_node+0x14c/0x260
[  861.499813][T18521]  __kernfs_create_file+0x4b/0x2e0
[  861.504952][T18521]  sysfs_add_file_mode_ns+0x238/0x300
[  861.510349][T18521]  internal_create_group+0x434/0xd10
[  861.515645][T18521]  sysfs_create_groups+0x59/0x120
[  861.520685][T18521]  kobject_add_internal+0x663/0xcc0
[  861.525902][T18521]  kobject_init_and_add+0x12c/0x1a0
[  861.531117][T18521]  netdev_queue_update_kobjects+0x204/0x480
[  861.537023][T18521] page last free stack trace:
[  861.541703][T18521]  free_unref_page_prepare+0x7b2/0x8c0
[  861.547183][T18521]  free_unref_page+0x32/0x2e0
[  861.551881][T18521]  free_contig_range+0xa1/0x150
[  861.556743][T18521]  destroy_args+0x80/0x850
[  861.561172][T18521]  debug_vm_pgtable+0x411/0x440
[  861.566046][T18521]  do_one_initcall+0x242/0x790
[  861.570827][T18521]  do_initcall_level+0x137/0x1f0
[  861.575775][T18521]  do_initcalls+0x69/0xd0
[  861.580115][T18521]  kernel_init_freeable+0x3ed/0x580
[  861.585328][T18521]  kernel_init+0x1d/0x1c0
[  861.589669][T18521]  ret_from_fork+0x48/0x80
[  861.594098][T18521]  ret_from_fork_asm+0x11/0x20
[  861.598875][T18521] 
[  861.601202][T18521] Memory state around the buggy address:
[  861.606840][T18521]  ffff88805eed1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  861.614911][T18521]  ffff88805eed2000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  861.622988][T18521] >ffff88805eed2080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00
[  861.631058][T18521]                                         ^
[  861.636962][T18521]  ffff88805eed2100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  861.645033][T18521]  ffff88805eed2180: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00
[  861.653096][T18521] ==================================================================
[  861.665645][T18521] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  861.672872][T18521] CPU: 1 PID: 18521 Comm: syz.2.3295 Not tainted syzkaller #0
[  861.680339][T18521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  861.690401][T18521] Call Trace:
[  861.693688][T18521]  <TASK>
[  861.696626][T18521]  dump_stack_lvl+0x18c/0x250
[  861.701326][T18521]  ? show_regs_print_info+0x20/0x20
[  861.706548][T18521]  ? load_image+0x400/0x400
[  861.711072][T18521]  panic+0x2dc/0x730
[  861.714987][T18521]  ? bpf_jit_dump+0xd0/0xd0
[  861.719505][T18521]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  861.725504][T18521]  ? _raw_spin_unlock+0x40/0x40
[  861.730369][T18521]  ? print_memory_metadata+0x314/0x400
[  861.735848][T18521]  ? z_erofs_transform_plain+0x38c/0x460
[  861.741506][T18521]  check_panic_on_warn+0x84/0xa0
[  861.746466][T18521]  ? z_erofs_transform_plain+0x38c/0x460
[  861.752121][T18521]  end_report+0x6f/0x130
[  861.756379][T18521]  kasan_report+0x128/0x150
[  861.760895][T18521]  ? trace_contention_end+0x39/0xe0
[  861.766100][T18521]  ? z_erofs_transform_plain+0x38c/0x460
[  861.771730][T18521]  kasan_check_range+0x241/0x290
[  861.776660][T18521]  ? z_erofs_transform_plain+0x38c/0x460
[  861.782286][T18521]  __asan_memcpy+0x29/0x70
[  861.786708][T18521]  z_erofs_transform_plain+0x38c/0x460
[  861.792177][T18521]  ? z_erofs_lz4_decompress+0x1740/0x1740
[  861.797906][T18521]  z_erofs_decompress_queue+0x1780/0x26f0
[  861.803628][T18521]  ? z_erofs_onlinepage_end+0x360/0x360
[  861.809333][T18521]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  861.815360][T18521]  ? lock_chain_count+0x20/0x20
[  861.820218][T18521]  ? z_erofs_decompressqueue_endio+0x5a0/0x5a0
[  861.826364][T18521]  ? erofs_map_blocks+0x17b0/0x17b0
[  861.831553][T18521]  ? folio_unlock+0x118/0x2e0
[  861.836234][T18521]  z_erofs_runqueue+0x1913/0x1aa0
[  861.841277][T18521]  ? z_erofs_do_read_page+0x36b0/0x36b0
[  861.846828][T18521]  ? __lock_acquire+0x7d40/0x7d40
[  861.851856][T18521]  ? put_page+0xea/0x260
[  861.856094][T18521]  ? z_erofs_pcluster_readmore+0x39e/0x450
[  861.861890][T18521]  z_erofs_read_folio+0x323/0x5c0
[  861.866945][T18521]  ? z_erofs_rcu_callback+0x1b0/0x1b0
[  861.872315][T18521]  filemap_read_folio+0x172/0x760
[  861.877330][T18521]  ? z_erofs_rcu_callback+0x1b0/0x1b0
[  861.882692][T18521]  ? maybe_unlock_mmap_for_io+0xf0/0xf0
[  861.888233][T18521]  ? down_read+0x1ac/0x2e0
[  861.892636][T18521]  filemap_get_pages+0x13c7/0x1e90
[  861.897750][T18521]  ? filemap_read+0xf00/0xf00
[  861.902416][T18521]  ? __might_sleep+0xe0/0xe0
[  861.906995][T18521]  ? folio_mark_accessed+0x201/0x1420
[  861.912358][T18521]  ? folio_activate_fn+0x1f30/0x1f30
[  861.917638][T18521]  filemap_read+0x402/0xf00
[  861.922130][T18521]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  861.928193][T18521]  ? filemap_get_folios_tag+0x830/0x830
[  861.933733][T18521]  ? generic_file_read_iter+0x90/0x4f0
[  861.939178][T18521]  ? __asan_memset+0x22/0x40
[  861.943763][T18521]  ? iov_iter_kvec+0xd4/0x1b0
[  861.948436][T18521]  __kernel_read+0x2f3/0x710
[  861.953025][T18521]  ? rw_verify_area+0x1b0/0x1b0
[  861.957877][T18521]  integrity_kernel_read+0x8a/0xd0
[  861.963003][T18521]  ? integrity_inode_free+0x170/0x170
[  861.968396][T18521]  ? kernel_fpu_end+0x51/0x70
[  861.973087][T18521]  ? _sha256_update+0x129/0x1f0
[  861.977935][T18521]  ? sha256_transform_avx+0xcc0/0xcc0
[  861.983299][T18521]  ima_calc_file_hash+0x91d/0x1910
[  861.988408][T18521]  ? is_bpf_text_address+0x28f/0x2a0
[  861.993691][T18521]  ? is_bpf_text_address+0x26/0x2a0
[  861.998880][T18521]  ? kernel_text_address+0xa0/0xd0
[  862.003987][T18521]  ? __kernel_text_address+0xd/0x30
[  862.009200][T18521]  ? unwind_get_return_address+0x91/0xc0
[  862.014822][T18521]  ? look_up_lock_class+0x75/0x140
[  862.019924][T18521]  ? ima_alloc_tfm+0x2f0/0x2f0
[  862.024680][T18521]  ? register_lock_class+0xc4/0x8a0
[  862.029940][T18521]  ? __lock_acquire+0x2b81/0x7d40
[  862.034973][T18521]  ? generic_fillattr+0x312/0x7b0
[  862.040004][T18521]  ? __asan_memcpy+0x40/0x70
[  862.044605][T18521]  ? generic_fillattr+0x4fc/0x7b0
[  862.049628][T18521]  ima_collect_measurement+0x4d4/0xa20
[  862.055109][T18521]  ? ima_get_action+0xb0/0xb0
[  862.059794][T18521]  ? erofs_getxattr+0x13e/0x460
[  862.064734][T18521]  ? rcu_is_watching+0x15/0xb0
[  862.069502][T18521]  ? ima_get_hash_algo+0x91/0x4a0
[  862.074560][T18521]  ? ima_get_cache_status+0x1e0/0x1e0
[  862.079948][T18521]  process_measurement+0x128e/0x1d70
[  862.085245][T18521]  ? ima_file_mmap+0x1d0/0x1d0
[  862.090002][T18521]  ? tomoyo_check_open_permission+0x1cf/0x460
[  862.096154][T18521]  ? tomoyo_check_path_number_acl+0x280/0x280
[  862.102228][T18521]  ? apparmor_inode_getattr+0x2d0/0x2d0
[  862.107769][T18521]  ? apparmor_current_getsecid_subj+0xb5/0x120
[  862.113916][T18521]  ima_file_check+0xcc/0x110
[  862.118502][T18521]  ? ima_bprm_check+0x200/0x200
[  862.123351][T18521]  path_openat+0x28b7/0x3230
[  862.127939][T18521]  ? do_filp_open+0x430/0x430
[  862.132606][T18521]  ? __virt_addr_valid+0x18c/0x540
[  862.137722][T18521]  do_filp_open+0x1f5/0x430
[  862.142217][T18521]  ? vfs_tmpfile+0x490/0x490
[  862.146804][T18521]  ? _raw_spin_unlock+0x28/0x40
[  862.151648][T18521]  ? alloc_fd+0x58f/0x630
[  862.155977][T18521]  do_sys_openat2+0x134/0x1d0
[  862.160648][T18521]  ? do_sys_open+0xe0/0xe0
[  862.165062][T18521]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  862.171046][T18521]  ? lock_chain_count+0x20/0x20
[  862.175923][T18521]  __x64_sys_openat+0x139/0x160
[  862.180774][T18521]  do_syscall_64+0x55/0xa0
[  862.185192][T18521]  ? clear_bhb_loop+0x40/0x90
[  862.189875][T18521]  ? clear_bhb_loop+0x40/0x90
[  862.194577][T18521]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  862.200478][T18521] RIP: 0033:0x7f30f519c819
[  862.204898][T18521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  862.224499][T18521] RSP: 002b:00007f30f6039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  862.232903][T18521] RAX: ffffffffffffffda RBX: 00007f30f5415fa0 RCX: 00007f30f519c819
[  862.240864][T18521] RDX: 0000000000080000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  862.248914][T18521] RBP: 00007f30f5232c91 R08: 0000000000000000 R09: 0000000000000000
[  862.256882][T18521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  862.264853][T18521] R13: 00007f30f5416038 R14: 00007f30f5415fa0 R15: 00007ffff7032748
[  862.272819][T18521]  </TASK>
[  862.276178][T18521] Kernel Offset: disabled
[  862.280493][T18521] Rebooting in 86400 seconds..