last executing test programs:

4.747955909s ago: executing program 0 (id=1026):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8)
listen(r0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r1, 0x4)

4.635195602s ago: executing program 0 (id=1027):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.396981538s ago: executing program 2 (id=1029):
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x700, 0x4, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @broadcast, @rand_addr=0x64010100}}}})
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

3.879154604s ago: executing program 2 (id=1034):
syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000340)={[{@nojournal_checksum}, {@usrjquota}, {@errors_remount}, {@discard}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7d2, &(0x7f0000001940)="$eJzs3c9vG1kdAPDvOM7PFhIkJCinSAioVNUhJbQgIRHEASFRqRKcONBGjhuVOHEVO1UTRbQVQuKCBIgbXHqBA7C7l9Ve98dhL7v/x6pVdzettqs9rLwae5w4iZ112sTpj89Hmua9mTd+8533/OY1M7EDeGlNpv/kIk5FxF+TiPFsfRIRg41UPmK2We7x5kYxXZKo13/9UdIo82hzoxht+6ROZJlvRsTbf4o4k9tbb3VtfXGuXC6tZPmp2tL1qera+tlrS3MLpYXS8vnpmZlzF3544fzhxfrJ++sn7//tF997ZfazP37j1b+8k8RsnMy2tcdxWCZjMjsng+kp3OHnh13ZsXn9Dz0UausB+aM8GA4obZiBrFVOxXgM7Nc+o/08MgDgqNyKiHo3A123AADPtaR5/f9p5637TgGS7lMHAODZ1fo9wKPNjWJrOd7fSPTXg59FxEgz/tb9zeaWfHbPbqRxH3TsUbLjzkgSEROHUP9kRPzrjd/9L13iiO5DAnRy+05EXJmY3Dv+J3ueWTio73devdCemdy10fgH/fNmOv/5Uaf5X25r/hMd5j/DHd67T+LL3/+5e4dQTVfp/O8nbc+2PW6LPzMxkOW+0pjzDSZXr5VL6dj21Yg4HYPDaX56nzpOP/z84d6162Oxa/738d9//9+0/vTndrncvfzwzj3n52pzTx145sGdiG/lO8Wfjv/DjfZPusx/L/VYxy9//Od/dtuWxp/G21r2xn+06ncjvtux/ZOtMsm+zydONbrDVKtTdPDabIx1q38yv93+6ZLW3/q/QD+k7T+2f/wTSfvzmtWeX3rrabH37o6/1a1Qe//vHH/n/j+U/KaRHsrW3Zyr1VamI4aSX+1df2573yz/n8jKp/Gf/nbn939r/OvQ/3+bvv6VHk9E/v6H/3/y+I9WGv/8gdr/wIkYebw40K3+3tp/Zsc++45/Wa/r9QCf5twBAAAAAAAAAAAAAAAAAAAAAAAAQK9yEXEyklxhK53LFQrN7/D+eozlypVq7czVyuryfDS+K3siBnOtj7ocb/s81Ons8/Bb+XO78j+IiK9FxD+GRxv5QrFSnj/u4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgc6LL9/+nPhjeVXjgOI4QADgSIy7sAPCySfL54z4EAKDfRg5UevTIjgMA6J+DXf8BgBeB6z8AvHy6Xv+/8+96PWL3nwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQV26eDFd6p9ubhTT/PyNtdXFyo2z86XqYmFptVgoVlauFxYqlYVyqVCsLHV9odvNH+VK5fpMLK/enKqVqrWp6tr65aXK6nLt8rWluYXS5dJg3yIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN5V19YX58rl0sr+iXrTrZ4KS/SeWHy32Q7PyvG8OIk7fTmrcbvZfs9EyIeaiKHtUWL0eAYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOfAFwEAAP//+3Mm3w==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

3.711307703s ago: executing program 1 (id=1036):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2d4, 0x65, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x6}, {0x0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8c}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x244, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0xb8, 0x6, [@m_nat={0x88, 0x0, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @loopback}}]}, {0x36, 0x6, "17a3a496e0b06ed4b17c112d919b00b3961dacbd47d9dd716cb9e3eeb2118c01ec30dc86f8f94756684ff97abdf1a26ea483"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x16c, 0x6, [@m_ife={0x120, 0x1c, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x9, 0x5, 0x7, 0x800}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0x4a}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0xa9, 0x6, "d1fa1ebabd59dac57c3f4f987b849f785e10fdab8b4dc99bb8466700a9582e178588217a21824843bcd1f5b9926267c876426cdc7149922d858ee547f1c28ef2b9b9bddd6e20e1b704f0936ac62ddad67451d8061e7cef95d4eaaf767c9523e63a5f3a3e24ac2cbc8f4f1e56738dc54a428a6a61742624073aaf8330db82148be426798979a73b3ece152cdd964c9213363960d1795540a2d9862d6845c8a389f0e70b6eca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_tunnel_key={0x48, 0x1b, 0x0, 0x0, {{0xf}, {0x4}, {0x16, 0x6, "afd0211766c2316c3c88cdb9f03cbafcec72"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

3.430150718s ago: executing program 1 (id=1037):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}})

3.399948707s ago: executing program 4 (id=1038):
unshare(0x20040600)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r1 = dup(r0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x701003, 0x0)
r3 = dup(r2)
sendfile(r3, r1, 0x0, 0x89ffc)

3.265184796s ago: executing program 4 (id=1039):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
r0 = syz_open_dev$evdev(0x0, 0x9, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/175)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7)

3.066003817s ago: executing program 2 (id=1040):
prlimit64(0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="90", 0x1}], 0x1}, 0x0)
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000000), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80809440, &(0x7f0000000180))

2.920080569s ago: executing program 1 (id=1042):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0x1000}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, '\x00', "15ce0457497df05a6d2fdb8d0f302c82", "36a38b8f", "a3fcdcf2f741031e"}, 0x28)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0)

2.271736878s ago: executing program 3 (id=1044):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x203}, 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x9bb0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

2.153005593s ago: executing program 1 (id=1045):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000280)=""/32, 0x68)
getdents64(r1, 0xfffffffffffffffe, 0x29)

2.089972042s ago: executing program 0 (id=1046):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000000)={[{@filestreams}, {@noquota}, {@discard}, {@pquota}, {@dax}, {@dax}, {@gqnoenforce}, {@bsdgroups}, {@gquota}]}, 0x1, 0x979e, &(0x7f0000009780)="$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")
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r1, 0x0)
removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00')

2.080367239s ago: executing program 3 (id=1047):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000010000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a00000020006500b000000005000000080000000030000000000000000100000001"], 0x88}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
timer_create(0x0, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

1.923228608s ago: executing program 1 (id=1048):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f000001fb00), 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f0000000280)='./file1\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20009})
fallocate(r1, 0x10, 0x0, 0x969f)

1.2157673s ago: executing program 4 (id=1049):
r0 = syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x1, 0x206, &(0x7f0000002040)="$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")
syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES16, @ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64], 0x5, 0x35a, &(0x7f0000000b00)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002300)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000b80), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0)

1.08952974s ago: executing program 3 (id=1050):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x23, 0x0, "093f38050b94725997f7ff898a3f9ab16a8731bf2ce9e46bca4cef5a7c35015b7a97f697e89d86377518bf274943a186c89a051c531b5ad251ff1e26b7fe42b3eb4ddd4dc049ad87c56cd0c3628976cc"}, 0xd8)
close_range(r0, 0xffffffffffffffff, 0x0)

1.04216778s ago: executing program 0 (id=1051):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x2, 0x0, 0x4}], 0x10)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x6000001d})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)

993.169912ms ago: executing program 2 (id=1052):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCGFLAGS1(r1, 0x80047458, &(0x7f0000000100))

868.781371ms ago: executing program 3 (id=1053):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
write$binfmt_elf32(r0, 0x0, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100))

826.024938ms ago: executing program 4 (id=1054):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

699.049319ms ago: executing program 4 (id=1055):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="7fb664af0a000200aaaaaaaaaa0c"], 0x28}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

541.27939ms ago: executing program 3 (id=1056):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f00000000c0)={'tunl0\x00', r4, 0x7808, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private}}}})

427.677497ms ago: executing program 1 (id=1057):
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0xfff, @remote, 0x40}}, 0x9, 0x2ad, 0x9, 0x8001, 0x81, 0x5, 0x5}, &(0x7f0000000080)=0x9c)

330.550701ms ago: executing program 0 (id=1058):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}}, 0x0)

182.031956ms ago: executing program 2 (id=1059):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000003140)=""/1, 0x1}, {&(0x7f0000003180)=""/242, 0xf}], 0x2}}], 0x1, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

181.645216ms ago: executing program 3 (id=1060):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0)
acct(&(0x7f0000000140)='./file0\x00')
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

154.878586ms ago: executing program 4 (id=1061):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004480)={0x2020}, 0x2020)

93.018408ms ago: executing program 0 (id=1062):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01"])
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080))

0s ago: executing program 2 (id=1063):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000058, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0x0)

kernel console output (not intermixed with test programs):

gly recommended to keep mac addresses unique to avoid problems!
[  171.941258][ T6699] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  171.958588][ T6699] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  171.964318][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.014955][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.034359][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.064506][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.076480][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.087584][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.152114][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.194796][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.234525][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.264352][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.278874][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.299004][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.311836][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.321773][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.332560][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.344684][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.354923][ T7101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.363651][ T7101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.372685][ T7101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.381695][ T7101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.719634][ T3942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.765395][ T3942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.791371][ T7305] loop1: detected capacity change from 0 to 32768
[  172.850798][ T3942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.880412][ T3942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.932286][ T7305] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.083625][ T7338] loop4: detected capacity change from 0 to 512
[  173.086608][ T7305] XFS (loop1): Ending clean mount
[  173.117771][ T7338] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  173.155739][   T29] audit: type=1326 audit(1729068239.489:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.2.542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b7fd7dff9 code=0x0
[  173.200537][ T7338] EXT4-fs (loop4): 1 orphan inode deleted
[  173.202730][ T5705] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.242684][ T7338] EXT4-fs (loop4): 1 truncate cleaned up
[  173.251282][ T7338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.407672][ T7101] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.682443][ T7333] loop3: detected capacity change from 0 to 40427
[  173.693996][ T7333] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  173.701967][ T7333] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  173.754701][ T7351] loop4: detected capacity change from 0 to 128
[  173.778612][ T7333] F2FS-fs (loop3): Found nat_bits in checkpoint
[  173.870287][ T7331] loop0: detected capacity change from 0 to 32768
[  173.901015][ T7333] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  173.909247][ T7333] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  173.918050][ T7331] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.947557][ T7333] syz.3.541: attempt to access beyond end of device
[  173.947557][ T7333] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.050738][ T7331] XFS (loop0): Ending clean mount
[  174.087656][ T7333] syz.3.541: attempt to access beyond end of device
[  174.087656][ T7333] loop3: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  174.597123][ T5368] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.162338][ T7384] loop0: detected capacity change from 0 to 1024
[  175.294165][ T7370] loop4: detected capacity change from 0 to 32768
[  175.348426][ T7370] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.419982][ T7394] loop2: detected capacity change from 0 to 4096
[  175.427999][ T7384] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  175.454076][ T7392] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  175.464883][ T7392] hfsplus: xattr search failed
[  175.525143][ T7370] XFS (loop4): Ending clean mount
[  175.634199][ T7394] ntfs3(loop2): failed to convert "0080" to macinuit
[  175.644894][ T7394] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  175.674932][ T7394] ntfs3(loop2): failed to convert name for inode 1e.
[  175.725766][ T7101] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.823756][   T35] tipc: Subscription rejected, illegal request
[  176.498053][ T7420] loop0: detected capacity change from 0 to 1024
[  176.715223][   T55] hfsplus: b-tree write err: -5, ino 4
[  176.850794][ T7425] loop0: detected capacity change from 0 to 256
[  176.885646][ T7425] exfat: Deprecated parameter 'utf8'
[  176.969044][ T7425] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d)
[  177.300503][ T7418] loop4: detected capacity change from 0 to 32768
[  177.301148][ T7418] XFS: ikeep mount option is deprecated.
[  177.360687][ T7418] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.488920][ T7418] XFS (loop4): Ending clean mount
[  177.514146][ T7418] XFS (loop4): Quotacheck needed: Please wait.
[  177.596425][ T7418] XFS (loop4): Quotacheck: Done.
[  177.652937][   T29] audit: type=1800 audit(1729068243.979:93): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.561" name="bus" dev="loop4" ino=6154 res=0 errno=0
[  177.864834][ T7101] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.950728][ T7474] loop0: detected capacity change from 0 to 1024
[  177.972905][ T7474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.136457][ T7480] loop3: detected capacity change from 0 to 4096
[  178.152407][ T7480] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  178.170435][ T7480] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  178.199976][ T7480] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  178.468685][ T7486] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  178.492569][ T7486] overlayfs: failed to set xattr on upper
[  178.506922][ T7486] overlayfs: ...falling back to redirect_dir=nofollow.
[  178.521654][ T7486] overlayfs: ...falling back to index=off.
[  178.531841][ T7486] overlayfs: ...falling back to uuid=null.
[  178.544366][ T7486] overlayfs: ...falling back to xino=off.
[  178.558973][ T7486] overlayfs: maximum fs stacking depth exceeded
[  178.795742][ T7494] warning: `syz.2.593' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  178.903560][   T55] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  178.924650][   T55] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  178.949870][ T7499] loop5: detected capacity change from 0 to 16384
[  178.950630][   T55] EXT4-fs (loop0): This should not happen!! Data will be lost
[  178.950630][   T55] 
[  178.963249][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.589'.
[  178.969208][   T55] EXT4-fs (loop0): Total free blocks count 0
[  178.982676][   T55] EXT4-fs (loop0): Free/Dirty block details
[  179.039647][ T7499] I/O error, dev loop5, sector 32 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0
[  179.049433][   T55] EXT4-fs (loop0): free_blocks=68451041280
[  179.053394][ T7499] I/O error, dev loop5, sector 32 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 0
[  179.073436][   T55] EXT4-fs (loop0): dirty_blocks=11856
[  179.097156][   T55] EXT4-fs (loop0): Block reservation details
[  179.124375][   T55] EXT4-fs (loop0): i_reserved_data_blocks=741
[  179.150625][ T5289] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  179.264666][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'.
[  179.282296][   T35] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  179.334716][ T5289] usb 3-1: Using ep0 maxpacket: 16
[  179.357799][ T5289] usb 3-1: config 0 has an invalid interface number: 26 but max is 0
[  179.366536][ T5289] usb 3-1: config 0 has no interface number 0
[  179.375578][ T5289] usb 3-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=a7.1c
[  179.400008][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.408255][ T5289] usb 3-1: Product: syz
[  179.412539][ T5289] usb 3-1: Manufacturer: syz
[  179.430232][ T5289] usb 3-1: SerialNumber: syz
[  179.440696][ T5289] usb 3-1: config 0 descriptor??
[  179.469072][ T5289] gspca_main: spca508-2.14.0 probing 0130:0130
[  179.512399][ T7508] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.522329][ T7508] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.542026][ T7508] bridge0: entered allmulticast mode
[  179.606234][ T7511] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.682517][ T5289] gspca_spca508: reg_read err -32
[  179.705137][ T5289] gspca_spca508: reg_read err -32
[  179.735315][ T5289] gspca_spca508: reg_read err -32
[  179.749579][ T7513] loop3: detected capacity change from 0 to 2048
[  179.764463][ T5289] gspca_spca508: reg_read err -32
[  179.820803][ T7510] loop1: detected capacity change from 0 to 32768
[  179.838686][ T7510] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.600 (7510)
[  179.873437][ T7513] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  179.901880][ T7510] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.915104][   T29] audit: type=1800 audit(1729068246.249:94): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.601" name="bus" dev="loop3" ino=1367 res=0 errno=0
[  179.932637][ T7510] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  179.984494][ T7510] BTRFS info (device loop1): using free-space-tree
[  180.008531][ T5289] gspca_spca508: reg write: error -71
[  180.013950][ T5289] spca508 3-1:0.26: probe with driver spca508 failed with error -71
[  180.047398][ T5289] usb 3-1: USB disconnect, device number 6
[  180.120942][ T7529] loop0: detected capacity change from 0 to 64
[  180.375191][ T7510] BTRFS info (device loop1 state M): max_inline set to 0
[  180.460880][ T5705] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.505667][ T5632] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.636436][ T7543] loop0: detected capacity change from 0 to 64
[  180.885067][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  180.902776][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  180.915178][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  180.928607][ T5368] hfs: request for non-existent node 131072 in B*Tree
[  180.988815][ T5632] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.995293][ T7560] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  181.023848][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  181.035220][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  181.045511][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  181.217728][ T5632] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.340003][ T5632] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.374750][ T5319] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  181.486604][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.621'.
[  181.583954][ T5319] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  181.627544][ T5319] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  181.680704][ T5319] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  181.727398][ T7583] loop3: detected capacity change from 0 to 16
[  181.727638][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.757805][ T7550] chnl_net:caif_netlink_parms(): no params data found
[  181.760575][ T7583] erofs: (device loop3): mounted with root inode @ nid 36.
[  181.777298][ T7563] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  181.812473][ T5632] bridge_slave_1: left promiscuous mode
[  181.818856][ T7567] loop2: detected capacity change from 0 to 32768
[  181.819013][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.840719][ T5319] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  181.882152][ T5632] bridge_slave_0: left allmulticast mode
[  181.888037][ T5632] bridge_slave_0: left promiscuous mode
[  181.894032][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.044731][ T7567] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  182.215827][   T29] audit: type=1804 audit(1729068248.529:95): pid=7567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.619" name="/newroot/46/file1/bus" dev="loop2" ino=17058 res=1 errno=0
[  182.252268][    T8] usb 1-1: USB disconnect, device number 5
[  182.280840][ T7567] syz.2.619 (7567) used greatest stack depth: 15592 bytes left
[  182.469593][ T6699] ocfs2: Unmounting device (7,2) on (node local)
[  182.831452][ T7615] loop2: detected capacity change from 0 to 1024
[  183.012619][ T7625] 9pnet: p9_errstr2errno: server reported unknown error �����sł�m���6�'�t�T	�#>��r�[�5�ۭ
[  183.101743][ T5239] Bluetooth: hci2: command tx timeout
[  183.124396][    T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  183.334968][    T8] usb 3-1: Using ep0 maxpacket: 16
[  183.367161][    T8] usb 3-1: config 0 has no interfaces?
[  183.372695][    T8] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00
[  183.462280][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.504046][    T8] usb 3-1: config 0 descriptor??
[  183.592773][ T7663] loop0: detected capacity change from 0 to 2048
[  183.618898][ T5632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.627072][ T7663] udf: Bad value for 'lastblock'
[  183.643017][ T5632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.655044][ T7665] loop3: detected capacity change from 0 to 2048
[  183.686262][ T5632] bond0 (unregistering): Released all slaves
[  183.725598][ T7615] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  183.794557][ T5349] usb 3-1: USB disconnect, device number 7
[  183.798623][ T7669] loop0: detected capacity change from 0 to 512
[  183.852657][ T7665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.865618][ T7665] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.901071][ T7669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.933601][ T7669] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.013340][ T6814] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.056505][ T7550] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.063706][ T7550] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.098687][ T7550] bridge_slave_0: entered allmulticast mode
[  184.112748][ T7550] bridge_slave_0: entered promiscuous mode
[  184.145558][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.152693][ T7550] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.169434][ T5368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.170140][ T7550] bridge_slave_1: entered allmulticast mode
[  184.189060][ T7550] bridge_slave_1: entered promiscuous mode
[  184.367023][ T7550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.429904][ T5632] hsr_slave_0: left promiscuous mode
[  184.474028][ T5632] hsr_slave_1: left promiscuous mode
[  184.501413][ T5632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.510074][ T7692] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  184.527697][ T5632] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.554940][ T5632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.573495][ T5632] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.625165][ T5632] veth1_macvtap: left promiscuous mode
[  184.630745][ T5632] veth0_macvtap: left promiscuous mode
[  184.654540][ T5632] veth1_vlan: left promiscuous mode
[  184.659889][ T5632] veth0_vlan: left promiscuous mode
[  184.757443][ T7682] loop1: detected capacity change from 0 to 32768
[  184.771645][ T7682] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.641 (7682)
[  184.786947][ T7682] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.801006][ T7682] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  184.810192][ T7682] BTRFS info (device loop1): using free-space-tree
[  185.176600][ T5239] Bluetooth: hci2: command tx timeout
[  185.262250][ T5705] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.415659][ T4651] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  185.625339][ T4651] usb 1-1: Using ep0 maxpacket: 32
[  185.647336][ T4651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.658839][ T4651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.679698][ T4651] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  185.704231][ T4651] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  185.713447][ T4651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.748151][ T4651] usb 1-1: config 0 descriptor??
[  185.852239][ T5632] team0 (unregistering): Port device team_slave_1 removed
[  185.910867][ T5632] team0 (unregistering): Port device team_slave_0 removed
[  186.212835][ T4651] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0007/input/input11
[  186.310919][ T4651] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0007/input/input12
[  186.359117][ T4651] kye 0003:0458:5011.0007: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0
[  186.544529][ T7550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.565924][ T7704] netlink: 'syz.3.648': attribute type 4 has an invalid length.
[  186.643465][ T7550] team0: Port device team_slave_0 added
[  186.654643][ T5235] usb 1-1: USB disconnect, device number 6
[  186.707940][ T7550] team0: Port device team_slave_1 added
[  186.776308][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.786237][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.819333][ T7550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.836826][ T7550] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.869409][ T7550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.906581][ T7550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.996240][ T7550] hsr_slave_0: entered promiscuous mode
[  186.997174][ T7743] overlayfs: failed to set uuid (118/file1, err=-1); falling back to uuid=null.
[  187.011376][ T7550] hsr_slave_1: entered promiscuous mode
[  187.011825][ T7743] overlayfs: failed to verify upper root origin
[  187.026562][ T7550] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.034156][ T7550] Cannot create hsr debugfs directory
[  187.261797][ T5239] Bluetooth: hci2: command tx timeout
[  187.356467][ T7756] loop0: detected capacity change from 0 to 512
[  187.378926][ T7756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  187.430350][ T7756] EXT4-fs (loop0): 1 truncate cleaned up
[  187.439337][ T7756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.547791][ T5368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.731459][ T7550] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  187.753434][ T7550] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  187.779873][ T7550] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  187.801686][ T7550] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  187.836391][ T7748] loop3: detected capacity change from 0 to 32768
[  187.924469][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.938879][ T7748] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  187.945391][ T7550] 8021q: adding VLAN 0 to HW filter on device team0
[  187.967489][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.974675][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.997044][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.004174][ T7600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.038842][   T29] audit: type=1800 audit(1729068254.359:96): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.662" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  188.071129][ T7754] loop2: detected capacity change from 0 to 40427
[  188.093938][ T7754] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  188.102280][ T7754] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  188.133177][ T7754] F2FS-fs (loop2): Found nat_bits in checkpoint
[  188.163753][ T6814] ocfs2: Unmounting device (7,3) on (node local)
[  188.233241][ T7754] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  188.254423][ T7754] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  188.371436][ T7754] syz.2.664: attempt to access beyond end of device
[  188.371436][ T7754] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  188.419246][ T7754] syz.2.664: attempt to access beyond end of device
[  188.419246][ T7754] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  188.553628][ T7782] loop3: detected capacity change from 0 to 512
[  188.568772][ T7782] EXT4-fs (loop3): blocks per group (64) and clusters per group (20800) inconsistent
[  188.621906][ T7550] 8021q: adding VLAN 0 to HW filter on device batadv0
[  188.956267][ T7550] veth0_vlan: entered promiscuous mode
[  188.968865][ T7550] veth1_vlan: entered promiscuous mode
[  189.009915][ T7550] veth0_macvtap: entered promiscuous mode
[  189.022954][ T7550] veth1_macvtap: entered promiscuous mode
[  189.049364][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.070984][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.091450][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.114377][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  189.134350][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.147503][   T29] audit: type=1326 audit(1729068255.479:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.2.674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b7fd7dff9 code=0x0
[  189.154361][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.180081][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.190342][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.201161][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.212822][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.222737][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.233287][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.243511][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.254418][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.264475][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.274953][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.284928][ T7550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.295483][ T7550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.307179][ T7550] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.351443][ T5239] Bluetooth: hci2: command tx timeout
[  189.388244][ T7550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  189.397593][ T7550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  189.407530][ T7550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  189.416687][ T7550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  189.427156][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.439138][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.482340][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  189.496163][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  189.506336][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.518242][    T8] usb 1-1: config 0 descriptor??
[  189.609059][ T7600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.627996][ T7600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.674825][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.683033][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.694660][ T4651] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  189.924709][ T4651] usb 2-1: Using ep0 maxpacket: 8
[  189.934194][ T4651] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  189.943537][ T4651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.957641][ T4651] usb 2-1: Product: syz
[  189.958655][    T8] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  189.961818][ T4651] usb 2-1: Manufacturer: syz
[  189.961837][ T4651] usb 2-1: SerialNumber: syz
[  189.975940][ T4651] usb 2-1: config 0 descriptor??
[  190.000153][    T8] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  190.050026][    T8] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  190.208695][ T4651] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  190.304654][ T5349] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  190.410574][ T7818] loop4: detected capacity change from 0 to 32768
[  190.455394][ T7818] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  190.477768][ T5349] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  190.486809][ T5349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.506262][ T5349] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  190.516620][ T5349] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  190.525424][ T5349] usb 4-1: Manufacturer: syz
[  190.539565][ T5349] usb 4-1: config 0 descriptor??
[  190.664616][ T5349] rc_core: IR keymap rc-hauppauge not found
[  190.674048][ T5349] Registered IR keymap rc-empty
[  190.698053][ T5349] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  190.719183][ T5349] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13
[  190.799614][ T5349] usb 4-1: USB disconnect, device number 4
[  190.988326][ T7550] ocfs2: Unmounting device (7,4) on (node local)
[  191.015980][ T7831] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode
[  191.039278][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.051717][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.285136][ T7837] loop4: detected capacity change from 0 to 1024
[  191.319759][ T7837] hfsplus: xattr searching failed
[  191.359276][ T7837] hfsplus: request for non-existent node 62977 in B*Tree
[  191.370641][ T7837] hfsplus: request for non-existent node 62977 in B*Tree
[  191.379531][ T7837] hfsplus: request for non-existent node 62977 in B*Tree
[  191.391933][ T7837] hfsplus: request for non-existent node 62977 in B*Tree
[  191.424421][ T5239] Bluetooth: hci0: command 0x0406 tx timeout
[  191.445075][ T4651] usb write operation failed. (-71)
[  191.463652][ T7591] hfsplus: b-tree write err: -5, ino 3
[  191.470327][ T4651] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  191.503369][ T4651] dvbdev: DVB: registering new adapter (Terratec H7)
[  191.520135][ T4651] usb 2-1: media controller created
[  191.540423][ T4651] usb read operation failed. (-71)
[  191.546311][ T4651] usb write operation failed. (-71)
[  191.565501][ T4651] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  191.596666][ T4651] usb 2-1: USB disconnect, device number 11
[  191.650817][ T7833] loop2: detected capacity change from 0 to 32768
[  191.662440][ T7833] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.687 (7833)
[  191.680298][ T7833] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  191.690577][ T7833] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  191.699572][ T7833] BTRFS info (device loop2): using free-space-tree
[  191.814421][    T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  191.917498][ T7859] kvm_intel: kvm [7858]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xee
[  192.004663][    T8] usb 5-1: Using ep0 maxpacket: 8
[  192.013216][ T6699] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  192.027621][    T8] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  192.046782][    T8] usb 5-1: config 179 has no interface number 0
[  192.082073][    T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  192.109181][    T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  192.132124][   T46] usb 1-1: USB disconnect, device number 7
[  192.137589][    T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  192.168884][    T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  192.191967][    T8] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  192.244796][    T8] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  192.264175][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.302861][ T7842] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  192.599003][    T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input14
[  193.012961][   T95] usb 5-1: USB disconnect, device number 5
[  193.018923][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  193.018974][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  193.325564][ T7887] loop1: detected capacity change from 0 to 1024
[  193.422504][ T7874] loop0: detected capacity change from 0 to 32768
[  193.432943][ T7874] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.697 (7874)
[  193.435897][ T7875] loop3: detected capacity change from 0 to 32768
[  193.473147][   T35] hfsplus: b-tree write err: -5, ino 4
[  193.486335][ T7875] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.698 (7875)
[  193.487724][ T7874] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.515032][ T7874] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  193.524151][ T7874] BTRFS info (device loop0): using free-space-tree
[  193.534323][ T7875] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  193.544538][ T7883] loop2: detected capacity change from 0 to 32768
[  193.551441][ T7883] BTRFS: device /dev/loop2 (7:2) using temp-fsid bed5ac74-0c2e-4839-9615-853c3392dc1d
[  193.562418][ T7883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.702 (7883)
[  193.580743][ T7875] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  193.592421][ T7883] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.603073][ T7875] BTRFS info (device loop3): using free-space-tree
[  193.612280][ T7883] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  193.613890][ T7892] loop1: detected capacity change from 0 to 24
[  193.621093][ T7883] BTRFS info (device loop2): using free-space-tree
[  193.851094][ T5368] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.896602][ T7941] loop1: detected capacity change from 0 to 256
[  193.926906][ T7941] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  194.056782][ T7875] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  194.161671][ T6699] BTRFS info (device loop2): last unmount of filesystem bed5ac74-0c2e-4839-9615-853c3392dc1d
[  194.456704][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  194.478225][ T7948] syz.1.712 (7948): drop_caches: 2
[  194.483930][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  194.537356][ T7948] syz.1.712 (7948): drop_caches: 2
[  194.960721][ T7954] loop4: detected capacity change from 0 to 512
[  194.975129][ T7954] EXT4-fs: Ignoring removed orlov option
[  195.014761][ T7954] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  195.220670][ T7944] loop0: detected capacity change from 0 to 32768
[  195.222012][ T7954] EXT4-fs (loop4): 1 truncate cleaned up
[  195.261827][ T7954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.508726][ T7550] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.525556][ T6814] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.035883][ T7955] loop2: detected capacity change from 0 to 40427
[  196.071465][ T7955] F2FS-fs (loop2): invalid crc value
[  196.103592][ T7955] F2FS-fs (loop2): Found nat_bits in checkpoint
[  196.244521][ T7955] F2FS-fs (loop2): Start checkpoint disabled!
[  196.269161][ T7955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  196.303434][ T7961] loop1: detected capacity change from 0 to 32768
[  196.361150][ T7986] loop3: detected capacity change from 0 to 128
[  196.374093][ T7986] EXT4-fs: Ignoring removed orlov option
[  196.404572][ T7986] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  196.567187][ T7986] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  196.616614][ T7961] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  196.759531][ T7983] loop0: detected capacity change from 0 to 40427
[  196.777552][ T7591] kworker/u8:11: attempt to access beyond end of device
[  196.777552][ T7591] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  196.791670][ T7591] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  196.801220][ T7983] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  196.809379][ T7983] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  196.821091][ T7983] F2FS-fs (loop0): invalid crc value
[  196.833033][ T6814] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.886560][   T29] audit: type=1800 audit(1729068263.059:98): pid=7961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.717" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  196.894086][ T7983] F2FS-fs (loop0): Found nat_bits in checkpoint
[  196.950465][ T5705] ocfs2: Unmounting device (7,1) on (node local)
[  197.073703][ T7983] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  197.094766][ T7983] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  197.279627][ T8000] loop1: detected capacity change from 0 to 16
[  197.331175][ T8000] erofs: (device loop1): mounted with root inode @ nid 36.
[  197.454837][ T5632] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  197.486570][ T5632] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  197.879384][ T8007] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  197.914571][ T8007] overlayfs: failed to set xattr on upper
[  197.936304][ T8007] overlayfs: ...falling back to redirect_dir=nofollow.
[  197.953461][ T8007] overlayfs: ...falling back to index=off.
[  197.989566][ T8007] overlayfs: ...falling back to uuid=null.
[  198.017703][ T8007] overlayfs: ...falling back to xino=off.
[  198.036196][ T8007] overlayfs: maximum fs stacking depth exceeded
[  198.232437][ T8011] sctp: [Deprecated]: syz.0.736 (pid 8011) Use of struct sctp_assoc_value in delayed_ack socket option.
[  198.232437][ T8011] Use struct sctp_sack_info instead
[  198.330090][ T8013] loop1: detected capacity change from 0 to 2048
[  198.360093][ T8015] loop0: detected capacity change from 0 to 512
[  198.365489][ T8013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.376263][ T8015] EXT4-fs: Ignoring removed orlov option
[  198.385798][ T8015] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  198.421968][ T8015] EXT4-fs (loop0): 1 truncate cleaned up
[  198.434837][ T8015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.576503][ T8002] loop2: detected capacity change from 0 to 40427
[  198.655977][ T8002] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  198.661734][ T8009] loop3: detected capacity change from 0 to 32768
[  198.663847][ T8002] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  198.679627][ T8009] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.728 (8009)
[  198.739321][ T8009] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  198.743358][ T8002] F2FS-fs (loop2): invalid crc value
[  198.749794][ T8009] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  198.763744][ T8009] BTRFS info (device loop3): using free-space-tree
[  198.781862][ T5368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.793058][ T8002] F2FS-fs (loop2): Found nat_bits in checkpoint
[  198.958931][ T8002] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  198.966675][ T8002] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  199.013722][ T8002] syz.2.723: attempt to access beyond end of device
[  199.013722][ T8002] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  199.084395][   T29] audit: type=1804 audit(1729068265.389:99): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.728" name="/newroot/74/bus/bus" dev="loop3" ino=263 res=1 errno=0
[  199.173704][   T29] audit: type=1804 audit(1729068265.439:100): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.728" name="/newroot/74/bus/bus" dev="loop3" ino=263 res=1 errno=0
[  199.215758][ T7600] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  199.238695][ T7600] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  199.264469][    T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  199.463284][ T6814] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  199.526999][ T8045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.734'.
[  199.734471][    T8] usb 2-1: Using ep0 maxpacket: 8
[  199.742835][    T8] usb 2-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c
[  199.763784][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.822908][    T8] usb 2-1: Product: syz
[  199.841251][    T8] usb 2-1: Manufacturer: syz
[  199.866386][    T8] usb 2-1: SerialNumber: syz
[  199.899277][    T8] usb 2-1: config 0 descriptor??
[  199.930349][    T8] usb 2-1: bad CDC descriptors
[  200.174518][ T5349] usb 2-1: USB disconnect, device number 12
[  200.181869][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'.
[  200.222940][ T8064] loop2: detected capacity change from 0 to 128
[  200.263285][ T8066] loop0: detected capacity change from 0 to 2048
[  200.289610][ T8066] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.418411][ T8070] bridge0: port 3(vlan2) entered blocking state
[  200.422393][ T8071] loop2: detected capacity change from 0 to 512
[  200.440577][ T8070] bridge0: port 3(vlan2) entered disabled state
[  200.452495][ T8071] EXT4-fs: Ignoring removed i_version option
[  200.460898][ T8070] vlan2: entered allmulticast mode
[  200.481973][ T8070] vlan2: left allmulticast mode
[  200.487424][ T8071] EXT4-fs (loop2): orphan cleanup on readonly fs
[  200.509989][ T8071] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.745: bad orphan inode 1
[  200.557253][ T8071] EXT4-fs (loop2): Remounting filesystem read-only
[  200.584501][ T8071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  201.429729][ T8088] loop1: detected capacity change from 0 to 65536
[  201.677621][ T6699] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.770285][ T8088] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  201.917413][ T8088] XFS (loop1): Ending clean mount
[  201.934670][ T8088] XFS (loop1): Quotacheck needed: Please wait.
[  202.118531][ T7597] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.168550][ T8088] XFS (loop1): Quotacheck: Done.
[  202.277582][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  202.287893][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  202.298803][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  202.332056][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  202.340111][ T5239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  202.347540][ T5239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  202.517947][ T7597] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.539776][ T8097] loop3: detected capacity change from 0 to 32768
[  202.552234][ T8097] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.753 (8097)
[  202.568021][ T8111] loop0: detected capacity change from 0 to 256
[  202.582880][ T8097] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.609991][ T8097] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  202.627599][ T8111] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d)
[  202.639843][ T8097] BTRFS info (device loop3): using free-space-tree
[  202.734435][ T7597] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.826102][ T5705] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  203.175297][ T7597] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.331234][ T8120] loop0: detected capacity change from 0 to 32768
[  203.501962][ T8120] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  203.535242][ T8105] chnl_net:caif_netlink_parms(): no params data found
[  203.621717][ T6814] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.642410][ T8120] XFS (loop0): Ending clean mount
[  203.774184][ T5368] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  203.811855][ T7597] bridge_slave_1: left allmulticast mode
[  203.827584][ T7597] bridge_slave_1: left promiscuous mode
[  203.865035][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.882175][ T7597] bridge_slave_0: left allmulticast mode
[  203.906838][ T7597] bridge_slave_0: left promiscuous mode
[  203.912604][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.222414][ T8154] kvm: vcpu 2046: requested lapic timer restore with starting count register 0x390=2927474123 (5854948246 ns) > initial count (1287066782 ns). Using initial count to start timer.
[  204.233347][ T8159] loop0: detected capacity change from 0 to 256
[  204.262343][ T8159] exfat: Deprecated parameter 'namecase'
[  204.268204][ T8159] exfat: Deprecated parameter 'utf8'
[  204.330928][ T8159] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  204.463445][ T5239] Bluetooth: hci3: command tx timeout
[  204.638963][ T5235] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  204.813782][ T5235] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  204.830134][ T5235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.840520][ T5235] usb 1-1: config 0 descriptor??
[  204.867669][ T5235] cp210x 1-1:0.0: cp210x converter detected
[  204.943897][ T7597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  204.964697][ T7597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  204.990797][ T7597] bond0 (unregistering): Released all slaves
[  205.072527][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.082463][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.090104][ T8105] bridge_slave_0: entered allmulticast mode
[  205.097925][ T8105] bridge_slave_0: entered promiscuous mode
[  205.123956][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.140164][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.154594][ T8105] bridge_slave_1: entered allmulticast mode
[  205.176948][ T8105] bridge_slave_1: entered promiscuous mode
[  205.283048][ T5235] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  205.294981][ T5235] usb 1-1: cp210x converter now attached to ttyUSB0
[  205.379753][ T8105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.398640][ T8165] netlink: 'syz.1.767': attribute type 16 has an invalid length.
[  205.406587][ T8165] netlink: 'syz.1.767': attribute type 17 has an invalid length.
[  205.434650][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  205.436112][ T8105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.494961][ T4651] usb 1-1: USB disconnect, device number 8
[  205.512880][ T4651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  205.593655][ T4651] cp210x 1-1:0.0: device disconnected
[  205.617428][    T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.638473][    T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  205.647714][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.652775][ T8105] team0: Port device team_slave_0 added
[  205.664334][    T8] usb 4-1: Product: syz
[  205.668532][    T8] usb 4-1: Manufacturer: syz
[  205.673143][    T8] usb 4-1: SerialNumber: syz
[  205.676343][ T8105] team0: Port device team_slave_1 added
[  205.702669][ T8169] loop1: detected capacity change from 0 to 164
[  205.743785][ T7597] hsr_slave_0: left promiscuous mode
[  205.761596][ T7597] hsr_slave_1: left promiscuous mode
[  205.780168][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.791721][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.805324][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.813689][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.890685][ T7597] veth1_macvtap: left promiscuous mode
[  205.927038][ T7597] veth0_macvtap: left promiscuous mode
[  205.929356][ T8172] loop1: detected capacity change from 0 to 512
[  205.932699][ T7597] veth1_vlan: left promiscuous mode
[  205.964866][ T7597] veth0_vlan: left promiscuous mode
[  205.970224][ T8172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  206.017682][ T8172] EXT4-fs (loop1): 1 orphan inode deleted
[  206.037189][ T8172] EXT4-fs (loop1): 1 truncate cleaned up
[  206.043727][ T8172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.328315][ T5705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.452662][ T5248] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  206.463148][ T5248] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  206.471720][ T5248] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  206.481164][ T5248] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  206.489731][ T5248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  206.498999][ T5248] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  206.527128][ T8182] netlink: 104 bytes leftover after parsing attributes in process `syz.1.773'.
[  206.536840][ T5239] Bluetooth: hci3: command tx timeout
[  206.756929][    T8] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  206.783264][    T8] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  206.801627][    T8] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  206.957663][    T8] cdc_ncm 4-1:1.0: setting tx_max = 16384
[  207.395086][ T7597] team0 (unregistering): Port device team_slave_1 removed
[  207.507588][ T7597] team0 (unregistering): Port device team_slave_0 removed
[  207.683575][ T8201] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  208.614715][ T5239] Bluetooth: hci3: command tx timeout
[  208.620208][ T5248] Bluetooth: hci5: command tx timeout
[  208.634441][    T8] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  208.635220][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'.
[  208.655386][ T8197] netlink: 36 bytes leftover after parsing attributes in process `syz.1.778'.
[  208.668387][ T8197] vlan2: entered allmulticast mode
[  208.670655][    T8] usb 4-1: USB disconnect, device number 5
[  208.673519][ T8197] macvlan0: entered allmulticast mode
[  208.673538][ T8197] veth1_vlan: entered allmulticast mode
[  208.735054][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.750595][    T8] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  208.755439][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.834388][ T8105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.891147][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.903882][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.974428][ T8105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.113974][ T8105] hsr_slave_0: entered promiscuous mode
[  209.183453][ T8105] hsr_slave_1: entered promiscuous mode
[  209.234194][ T8105] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.254379][ T4651] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  209.271637][ T8105] Cannot create hsr debugfs directory
[  209.311420][   T29] audit: type=1326 audit(1729068275.629:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573b77dff9 code=0x7ffc0000
[  209.354712][   T29] audit: type=1326 audit(1729068275.629:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573b77dff9 code=0x7ffc0000
[  209.406986][ T4651] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4
[  209.416799][ T4651] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0
[  209.444043][   T29] audit: type=1326 audit(1729068275.629:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f573b77c897 code=0x7ffc0000
[  209.480533][ T4651] usb 2-1: Manufacturer: syz
[  209.498138][ T4651] usb 2-1: config 0 descriptor??
[  209.551463][   T29] audit: type=1326 audit(1729068275.629:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573b77dff9 code=0x7ffc0000
[  209.620603][ T8226] loop3: detected capacity change from 0 to 1024
[  209.646723][ T8219] loop0: detected capacity change from 0 to 32768
[  209.654865][   T29] audit: type=1326 audit(1729068275.639:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573b77dff9 code=0x7ffc0000
[  209.677300][   T29] audit: type=1326 audit(1729068275.639:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f573b77dff9 code=0x7ffc0000
[  209.699829][ T8219] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.790 (8219)
[  209.720458][ T8219] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  209.728091][   T29] audit: type=1326 audit(1729068275.639:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573b77dff9 code=0x7ffc0000
[  209.753129][   T29] audit: type=1326 audit(1729068275.639:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573b77dff9 code=0x7ffc0000
[  209.767792][ T8219] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  209.776001][   T29] audit: type=1326 audit(1729068275.639:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f573b77dff9 code=0x7ffc0000
[  209.835971][ T8226] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  209.856493][   T29] audit: type=1326 audit(1729068275.709:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8223 comm="syz.3.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573b77dff9 code=0x7ffc0000
[  209.870290][ T8219] BTRFS info (device loop0): using free-space-tree
[  209.879566][ T8226] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  209.897071][ T8226] hfsplus: xattr search failed
[  209.905018][ T8179] chnl_net:caif_netlink_parms(): no params data found
[  209.922023][ T4651] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  210.215739][ T5368] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  210.348286][ T8252] loop3: detected capacity change from 0 to 256
[  210.355488][ T8252] exfat: Deprecated parameter 'utf8'
[  210.373537][ T8252] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d)
[  210.552467][ T5235] usb 2-1: USB disconnect, device number 13
[  210.558706][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.575913][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.605540][ T8179] bridge_slave_0: entered allmulticast mode
[  210.637341][ T8179] bridge_slave_0: entered promiscuous mode
[  210.667983][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.694675][ T5248] Bluetooth: hci3: command tx timeout
[  210.700153][ T5239] Bluetooth: hci5: command tx timeout
[  210.704598][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.727966][ T8179] bridge_slave_1: entered allmulticast mode
[  210.792836][ T8179] bridge_slave_1: entered promiscuous mode
[  210.982998][ T8179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.027220][ T8179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.199585][ T8179] team0: Port device team_slave_0 added
[  211.246588][ T8179] team0: Port device team_slave_1 added
[  211.267877][ T8105] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  211.361461][ T8105] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  211.440471][ T8105] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  211.634152][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.662622][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.725777][ T8179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.740710][ T8179] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.747833][ T8179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.774354][    C0] vkms_vblank_simulate: vblank timer overrun
[  211.780518][ T8179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.794455][ T8105] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  211.895621][ T8179] hsr_slave_0: entered promiscuous mode
[  211.916113][ T8179] hsr_slave_1: entered promiscuous mode
[  211.938678][ T8179] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.953487][ T8179] Cannot create hsr debugfs directory
[  212.391606][ T8268] loop0: detected capacity change from 0 to 2048
[  212.435145][ T8268] EXT4-fs: Ignoring removed orlov option
[  212.453563][ T8264] loop1: detected capacity change from 0 to 40427
[  212.462662][ T8179] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.513468][ T8268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.566806][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.580569][ T8264] F2FS-fs (loop1): Found nat_bits in checkpoint
[  212.583204][ T8105] 8021q: adding VLAN 0 to HW filter on device team0
[  212.692650][ T5368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.692757][ T8179] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.784404][ T5239] Bluetooth: hci5: command tx timeout
[  212.796922][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.799316][ T8264] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  212.804017][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.885889][ T7600] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.893048][ T7600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.086522][ T8179] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.332794][ T8179] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.310682][ T8264] syz.1.799: attempt to access beyond end of device
[  214.310682][ T8264] loop1: rw=2049, sector=77824, nr_sectors = 104 limit=40427
[  214.342225][ T8179] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  214.425420][ T8179] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  214.436059][ T8179] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  214.479792][ T8287] loop3: detected capacity change from 0 to 256
[  214.497327][ T5705] syz-executor: attempt to access beyond end of device
[  214.497327][ T5705] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  214.536027][ T5705] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  214.536135][ T8179] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  214.553309][ T5705] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  214.587222][ T8287] syz.3.807: attempt to access beyond end of device
[  214.587222][ T8287] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256
[  214.613563][ T8289] syz.3.807: attempt to access beyond end of device
[  214.613563][ T8289] loop3: rw=2049, sector=256, nr_sectors = 8 limit=256
[  214.671475][ T8105] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.797314][ T8179] 8021q: adding VLAN 0 to HW filter on device bond0
[  214.854800][ T5239] Bluetooth: hci5: command tx timeout
[  214.872026][ T8179] 8021q: adding VLAN 0 to HW filter on device team0
[  214.908056][ T8179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  214.919611][ T8179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  214.945911][ T7593] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.953020][ T7593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.012794][ T7593] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.019951][ T7593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.133825][ T8105] veth0_vlan: entered promiscuous mode
[  215.250604][ T8105] veth1_vlan: entered promiscuous mode
[  215.396584][ T8105] veth0_macvtap: entered promiscuous mode
[  215.435372][ T8105] veth1_macvtap: entered promiscuous mode
[  215.472595][ T8179] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.522682][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.541073][ T8281] loop0: detected capacity change from 0 to 40427
[  215.564644][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.584345][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.596035][ T8281] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  215.603880][ T8281] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  215.617887][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.638314][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.652917][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.676953][ T8281] F2FS-fs (loop0): Found nat_bits in checkpoint
[  215.684608][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.704409][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.737625][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_0
[  215.788651][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.825288][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.856208][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.891091][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.923283][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  215.948441][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.975107][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.003391][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.058475][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.096469][ T8105] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.124366][ T8105] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.154482][ T8105] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.163420][ T8105] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.395555][ T8316] loop3: detected capacity change from 0 to 32768
[  216.411051][ T8316] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.812 (8316)
[  216.440435][ T8316] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  216.450879][ T8316] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  216.456927][ T8179] veth0_vlan: entered promiscuous mode
[  216.460238][ T8316] BTRFS info (device loop3): using free-space-tree
[  216.497836][ T7597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.519037][ T8179] veth1_vlan: entered promiscuous mode
[  216.527260][ T7597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.657780][ T7593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.685951][ T8179] veth0_macvtap: entered promiscuous mode
[  216.734445][ T7593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.771899][ T8179] veth1_macvtap: entered promiscuous mode
[  216.813466][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.832090][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.842628][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.860797][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.870715][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.881395][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.891311][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.901910][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.911835][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.922665][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.949359][ T8339] loop1: detected capacity change from 0 to 8192
[  216.968292][ T8179] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.978577][ T8339] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  217.009877][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.031322][ T6814] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  217.044394][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.069896][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.116139][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.143670][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.169885][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.190234][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.210949][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.231237][ T8179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.251799][ T8179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.288896][ T8179] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.301407][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'.
[  217.339640][ T8343] loop0: detected capacity change from 0 to 32768
[  217.375700][ T8179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.386237][ T8179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.404415][ T8179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.425333][ T8343] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.816 (8343)
[  217.450200][ T8179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.464004][ T8343] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  217.496023][ T8343] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  217.532151][ T8343] BTRFS info (device loop0): using free-space-tree
[  217.647228][ T7593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.774226][ T7593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.894613][   T29] kauditd_printk_skb: 2 callbacks suppressed
[  217.894629][   T29] audit: type=1804 audit(1729068284.219:113): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.816" name="/newroot/210/bus/bus" dev="loop0" ino=263 res=1 errno=0
[  217.927137][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.941868][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.021225][   T29] audit: type=1804 audit(1729068284.219:114): pid=8343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.816" name="/newroot/210/bus/bus" dev="loop0" ino=263 res=1 errno=0
[  218.042307][ T5289] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  218.215356][ T5289] usb 4-1: Using ep0 maxpacket: 8
[  218.225859][ T5289] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  218.234080][ T5289] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  218.240644][ T5368] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  218.274774][ T5289] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  218.314216][ T5289] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  218.342964][ T5289] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  218.364501][ T5289] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  218.373760][ T5289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.694680][ T5289] usb 4-1: usb_control_msg returned -32
[  218.700309][ T5289] usbtmc 4-1:16.0: can't read capabilities
[  218.817755][ T8396] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  218.845028][ T8396] overlayfs: failed to set xattr on upper
[  218.850783][ T8396] overlayfs: ...falling back to redirect_dir=nofollow.
[  218.877979][ T8385] loop2: detected capacity change from 0 to 40427
[  218.904528][ T8396] overlayfs: ...falling back to uuid=null.
[  218.915885][ T8385] F2FS-fs (loop2): invalid crc value
[  218.924984][ T8396] overlayfs: maximum fs stacking depth exceeded
[  218.932432][ T8398] loop1: detected capacity change from 0 to 2048
[  218.940188][ T8398] EXT4-fs: Ignoring removed mblk_io_submit option
[  218.947587][ T8398] EXT4-fs: Ignoring removed nobh option
[  218.956346][ T8385] F2FS-fs (loop2): Found nat_bits in checkpoint
[  218.983867][ T8403] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  219.033953][ T8385] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  219.065812][ T8398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.112491][ T8398] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.829: bg 0: block 234: padding at end of block bitmap is not set
[  219.133375][ T8398] EXT4-fs (loop1): Remounting filesystem read-only
[  219.198326][ T5705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.255463][ T8105] syz-executor: attempt to access beyond end of device
[  219.255463][ T8105] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  219.306406][ T8105] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.339571][ T8416] loop4: detected capacity change from 0 to 2048
[  219.363785][ T8416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.365403][ T8418] bond0: entered promiscuous mode
[  219.441445][ T8418] bond_slave_0: entered promiscuous mode
[  219.488637][ T8418] bond_slave_1: entered promiscuous mode
[  219.498717][ T8418] bond0: left promiscuous mode
[  219.503927][ T8418] bond_slave_0: left promiscuous mode
[  219.524703][ T8418] bond_slave_1: left promiscuous mode
[  219.718367][ T8179] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.140644][ T8443] netdevsim netdevsim1: Direct firmware load for .cpu/syz1 failed with error -2
[  220.157343][ T8443] netdevsim netdevsim1: Falling back to sysfs fallback for: .cpu/syz1
[  220.296761][ T8447] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  220.469096][ T8436] loop2: detected capacity change from 0 to 32768
[  220.485539][ T8436] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.837 (8436)
[  220.501673][ T8436] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.512041][ T8436] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  220.520864][ T8436] BTRFS info (device loop2): using free-space-tree
[  220.676092][   T29] audit: type=1804 audit(1729068287.009:115): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.837" name="/newroot/4/bus/bus" dev="loop2" ino=263 res=1 errno=0
[  220.686062][   T95] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  220.715627][   T29] audit: type=1804 audit(1729068287.009:116): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.837" name="/newroot/4/bus/bus" dev="loop2" ino=263 res=1 errno=0
[  220.764365][ T5235] usb 4-1: USB disconnect, device number 6
[  220.864503][ T5289] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  220.882809][ T8105] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.894833][   T95] usb 1-1: Using ep0 maxpacket: 16
[  220.902891][   T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.931438][   T95] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  220.957301][   T95] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  220.997681][   T95] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  221.020657][   T95] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.082560][   T95] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  221.123874][   T95] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  221.134364][ T5289] usb 5-1: Using ep0 maxpacket: 32
[  221.160755][   T95] usb 1-1: Manufacturer: syz
[  221.166982][ T5289] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  221.168897][   T95] usb 1-1: config 0 descriptor??
[  221.183199][ T5289] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.214645][ T5289] usb 5-1: config 0 interface 0 has no altsetting 0
[  221.241617][ T5289] usb 5-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00
[  221.268547][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.289650][ T5289] usb 5-1: config 0 descriptor??
[  221.354485][ T5235] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  221.483268][   T95] rc_core: IR keymap rc-hauppauge not found
[  221.501439][   T95] Registered IR keymap rc-empty
[  221.507938][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.537386][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.547550][ T5235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.559783][ T5235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.575520][   T95] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  221.594394][ T5235] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  221.598855][   T95] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15
[  221.616925][ T5235] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  221.628735][ T5235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.641248][ T5235] usb 3-1: config 0 descriptor??
[  221.666811][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.704451][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.734709][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.736389][ T5289] wacom 0003:056A:00C4.0009: unknown main item tag 0x0
[  221.762461][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.779799][ T5289] wacom 0003:056A:00C4.0009: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.4-1/input0
[  221.795044][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.812638][ T8490] batman_adv: batadv0: Adding interface: macsec1
[  221.820683][ T8490] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  221.848221][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.855838][ T8490] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active
[  221.884431][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.914713][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.955155][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.974967][   T95] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  221.996749][ T8492] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  222.015934][   T95] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  222.044337][   T95] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  222.068104][   T95] usb 1-1: USB disconnect, device number 9
[  222.098040][ T5235] acrux 0003:1A34:0802.000A: hidraw1: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0
[  222.121714][ T5235] acrux 0003:1A34:0802.000A: no inputs found
[  222.133929][ T5235] acrux 0003:1A34:0802.000A: Failed to enable force feedback support, error: -19
[  222.144743][ T5239] Bluetooth: hci4: command 0x0406 tx timeout
[  222.553426][ T8500] loop0: detected capacity change from 0 to 1024
[  222.633701][ T8497] loop1: detected capacity change from 0 to 32768
[  222.657010][ T8497] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.858 (8497)
[  222.677979][ T8497] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  222.692522][ T8497] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  222.705090][ T8497] BTRFS info (device loop1): using free-space-tree
[  222.844914][   T29] audit: type=1800 audit(1729068289.179:117): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.858" name="file1" dev="loop1" ino=260 res=0 errno=0
[  223.013818][ T5705] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  223.859431][   T95] usb 5-1: USB disconnect, device number 6
[  223.896086][ T8540] loop0: detected capacity change from 0 to 512
[  223.945147][ T8540] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.871: corrupted xattr block 95: invalid header
[  224.014039][ T8540] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.871: bg 0: block 7: invalid block bitmap
[  224.057275][ T8528] loop1: detected capacity change from 0 to 32768
[  224.066053][ T8528] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.860 (8528)
[  224.070606][ T5289] usb 3-1: USB disconnect, device number 8
[  224.092149][ T8528] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  224.102449][ T8528] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  224.110912][ T8540] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  224.111232][ T8528] BTRFS info (device loop1): using free-space-tree
[  224.131393][ T8540] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.871: corrupted xattr block 95: invalid header
[  224.180526][ T8540] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117)
[  224.193496][ T8540] EXT4-fs (loop0): 1 orphan inode deleted
[  224.203434][ T8540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.300255][   T29] audit: type=1804 audit(1729068290.629:118): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.860" name="/newroot/182/bus/bus" dev="loop1" ino=263 res=1 errno=0
[  224.364941][   T29] audit: type=1804 audit(1729068290.659:119): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.860" name="/newroot/182/bus/bus" dev="loop1" ino=263 res=1 errno=0
[  224.404233][ T5368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.532049][ T8572] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  224.591247][ T5705] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  224.661771][ T8576] loop4: detected capacity change from 0 to 8
[  225.010230][ T8580] loop1: detected capacity change from 0 to 4096
[  225.085371][ T8580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.203762][ T5705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.332288][ T8590] loop1: detected capacity change from 0 to 8
[  225.353229][ T8590] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  225.645377][ T8595] loop4: detected capacity change from 0 to 2048
[  225.703791][ T8595] udf: Unknown parameter '18446744073709551615ȷW%��`��n"���D��c4�m�(�̱�_�н(ܛ��T�"jȮ�(�ش�.m)b2��
�'
[  226.096906][ T8612] loop4: detected capacity change from 0 to 128
[  226.217981][ T8617] loop3: detected capacity change from 0 to 256
[  226.315928][   T29] audit: type=1800 audit(1729068292.649:120): pid=8612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.892" name="file1" dev="loop4" ino=1048689 res=0 errno=0
[  226.526264][ T7593] kworker/u8:13: attempt to access beyond end of device
[  226.526264][ T7593] loop4: rw=1, sector=145, nr_sectors = 36 limit=128
[  226.564802][ T8598] loop1: detected capacity change from 0 to 32768
[  226.629349][ T8598] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  226.638107][   T29] audit: type=1326 audit(1729068292.959:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651197dff9 code=0x7ffc0000
[  226.638149][   T29] audit: type=1326 audit(1729068292.959:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651197dff9 code=0x7ffc0000
[  226.731332][   T29] audit: type=1326 audit(1729068293.059:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f651197dff9 code=0x7ffc0000
[  226.793757][   T29] audit: type=1326 audit(1729068293.059:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651197dff9 code=0x7ffc0000
[  226.874549][   T29] audit: type=1326 audit(1729068293.059:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8626 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f651197dff9 code=0x7ffc0000
[  226.937231][ T8598] XFS (loop1): Ending clean mount
[  227.055271][ T5291] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x4 
[  227.067768][ T5291] XFS (loop1): Unmount and run xfs_repair
[  227.073527][ T5291] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  227.104573][ T5291] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  227.124087][ T5291] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  227.157501][ T5291] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  227.184321][ T5291] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  227.211731][ T5291] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  227.230931][ T5291] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  227.252063][ T5291] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  227.290225][ T5291] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  227.341471][ T8621] loop0: detected capacity change from 0 to 32768
[  227.348424][ T8598] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x4 len 4 error 74
[  227.374633][ T8621] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.896 (8621)
[  227.410999][ T8598] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  227.430281][ T8598] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  227.432147][ T8621] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  227.455700][ T8621] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  227.476799][ T8621] BTRFS info (device loop0): using free-space-tree
[  227.492997][ T8650] netlink: 'syz.3.907': attribute type 1 has an invalid length.
[  227.504534][ T8650] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.907'.
[  227.520663][ T8650] netlink: 3068 bytes leftover after parsing attributes in process `syz.3.907'.
[  227.530605][ T5705] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  227.673865][   T29] audit: type=1326 audit(1729068293.999:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.3.910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f573b77dff9 code=0x0
[  227.835652][ T5368] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  227.867173][ T8678] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  228.773444][ T8698] loop3: detected capacity change from 0 to 4096
[  228.901568][ T8689] loop0: detected capacity change from 0 to 32768
[  228.920060][ T8689] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.913 (8689)
[  228.979227][ T8689] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  228.995128][ T8689] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  229.003963][ T8689] BTRFS info (device loop0): using free-space-tree
[  229.037736][ T8698] loop3: detected capacity change from 4096 to 0
[  229.055275][    C0] I/O error, dev loop3, sector 566 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  229.064983][ T8703] ntfs3(loop3): failed to read volume at offset 0x46c00
[  229.175359][ T6814] syz-executor: attempt to access beyond end of device
[  229.175359][ T6814] loop3: rw=0, sector=552, nr_sectors = 2 limit=0
[  229.199924][ T8718] loop1: detected capacity change from 0 to 8
[  229.237157][ T6814] ntfs3(loop3): failed to read volume at offset 0x45000
[  229.280509][   T75] kworker/u8:5: attempt to access beyond end of device
[  229.280509][   T75] loop3: rw=0, sector=552, nr_sectors = 2 limit=0
[  229.324083][   T75] ntfs3(loop3): failed to read volume at offset 0x45000
[  229.354837][ T6814] syz-executor: attempt to access beyond end of device
[  229.354837][ T6814] loop3: rw=2049, sector=38, nr_sectors = 2 limit=0
[  229.384340][ T6814] Buffer I/O error on dev loop3, logical block 19, lost sync page write
[  229.392964][ T6814] ntfs3(loop3): ino=3, ntfs_set_state failed, -5.
[  229.400395][ T5368] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  229.408755][ T8695] loop4: detected capacity change from 0 to 32768
[  229.422986][ T6814] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  229.434892][ T6814] syz-executor: attempt to access beyond end of device
[  229.434892][ T6814] loop3: rw=2049, sector=38, nr_sectors = 2 limit=0
[  229.450553][ T6814] Buffer I/O error on dev loop3, logical block 19, lost sync page write
[  229.462922][ T8695] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.916 (8695)
[  229.476610][ T6814] ntfs3(loop3): ino=3, ntfs_set_state failed, -5.
[  229.483335][ T6814] syz-executor: attempt to access beyond end of device
[  229.483335][ T6814] loop3: rw=0, sector=38, nr_sectors = 2 limit=0
[  229.582081][   T75] kworker/u8:5: attempt to access beyond end of device
[  229.582081][   T75] loop3: rw=2049, sector=38, nr_sectors = 2 limit=0
[  229.614715][   T75] Buffer I/O error on dev loop3, logical block 19, lost sync page write
[  229.625559][   T75] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -5.
[  229.632500][ T6814] syz-executor: attempt to access beyond end of device
[  229.632500][ T6814] loop3: rw=2049, sector=2046, nr_sectors = 2 limit=0
[  229.647207][ T6814] Buffer I/O error on dev loop3, logical block 1023, lost sync page write
[  229.669219][ T8695] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  229.681520][ T6814] syz-executor: attempt to access beyond end of device
[  229.681520][ T6814] loop3: rw=0, sector=38, nr_sectors = 2 limit=0
[  229.713482][ T8695] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  229.814628][ T5291] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  229.844561][ T8695] BTRFS info (device loop4): using free-space-tree
[  229.978615][ T5291] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.989662][ T5291] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  229.999447][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.010361][ T5291] usb 2-1: config 0 descriptor??
[  230.020254][ T5291] pwc: Askey VC010 type 2 USB webcam detected.
[  230.053014][ T8742] loop2: detected capacity change from 0 to 16
[  230.063198][ T8742] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300)
[  230.174715][   T29] audit: type=1804 audit(1729068296.509:127): pid=8695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.916" name="/newroot/20/bus/bus" dev="loop4" ino=263 res=1 errno=0
[  230.243468][   T29] audit: type=1804 audit(1729068296.549:128): pid=8749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.916" name="/newroot/20/bus/bus" dev="loop4" ino=263 res=1 errno=0
[  230.265056][ T8748] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  230.434045][ T5291] pwc: recv_control_msg error -32 req 02 val 2b00
[  230.451321][ T5291] pwc: recv_control_msg error -32 req 02 val 2700
[  230.628497][ T8179] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  230.671377][ T5291] pwc: recv_control_msg error -71 req 04 val 1000
[  230.691961][ T5291] pwc: recv_control_msg error -71 req 04 val 1300
[  230.728351][ T5291] pwc: recv_control_msg error -71 req 04 val 1400
[  230.735933][ T5291] pwc: recv_control_msg error -71 req 02 val 2000
[  230.766941][ T5291] pwc: recv_control_msg error -71 req 02 val 2100
[  230.777350][ T5291] pwc: recv_control_msg error -71 req 04 val 1500
[  230.810041][ T5291] pwc: recv_control_msg error -71 req 02 val 2500
[  230.837799][ T5291] pwc: recv_control_msg error -71 req 02 val 2400
[  230.846420][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  230.860775][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  230.870897][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  230.885604][ T5291] pwc: recv_control_msg error -71 req 02 val 2600
[  230.892364][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  230.906947][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  230.915038][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  230.923972][ T5291] pwc: recv_control_msg error -71 req 02 val 2900
[  230.930943][ T5291] pwc: recv_control_msg error -71 req 02 val 2800
[  230.940113][ T5291] pwc: recv_control_msg error -71 req 04 val 1100
[  230.947041][ T5291] pwc: recv_control_msg error -71 req 04 val 1200
[  230.961181][ T5291] pwc: Registered as video71.
[  230.967103][ T5291] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19
[  230.980279][ T5291] usb 2-1: USB disconnect, device number 14
[  231.237767][ T8755] chnl_net:caif_netlink_parms(): no params data found
[  231.526398][ T8746] loop2: detected capacity change from 0 to 40427
[  231.576785][ T8746] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff
[  231.589945][ T8776] loop0: detected capacity change from 0 to 512
[  231.617955][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.625504][ T8746] F2FS-fs (loop2): invalid crc value
[  231.652554][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.684521][ T8746] F2FS-fs (loop2): Found nat_bits in checkpoint
[  231.695029][ T8755] bridge_slave_0: entered allmulticast mode
[  231.702085][ T8755] bridge_slave_0: entered promiscuous mode
[  231.984822][ T8746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  233.056962][ T5248] Bluetooth: hci1: command tx timeout
[  233.076259][ T8776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.096756][ T8776] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  235.094898][ T5248] Bluetooth: hci1: command tx timeout
[  235.739047][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.764492][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.771808][ T8755] bridge_slave_1: entered allmulticast mode
[  235.778884][ T8755] bridge_slave_1: entered promiscuous mode
[  235.879314][ T8790] netlink: 104 bytes leftover after parsing attributes in process `syz.4.942'.
[  235.923243][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.954706][ T5368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.965687][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.081763][ T8755] team0: Port device team_slave_0 added
[  236.107082][ T8755] team0: Port device team_slave_1 added
[  236.169881][ T8798] loop0: detected capacity change from 0 to 256
[  236.191076][ T8798] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  236.215576][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.237271][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.312352][ T8755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  236.336259][ T8755] batman_adv: batadv0: Adding interface: batadv_slave_1
[  236.353553][ T8755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  236.414440][ T8755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  236.436349][ T8804] loop2: detected capacity change from 0 to 512
[  236.471623][ T8804] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.947: corrupted in-inode xattr: invalid ea_ino
[  236.530564][ T8804] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.947: couldn't read orphan inode 15 (err -117)
[  236.566573][ T8755] hsr_slave_0: entered promiscuous mode
[  236.587644][ T8755] hsr_slave_1: entered promiscuous mode
[  236.599427][ T8804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.633201][ T8755] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.655732][ T8755] Cannot create hsr debugfs directory
[  236.760976][ T8800] loop0: detected capacity change from 0 to 32768
[  236.769528][ T8800] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.946 (8800)
[  236.798059][ T8800] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.813981][ T8800] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  236.823891][ T8800] BTRFS info (device loop0): using free-space-tree
[  236.831258][ T8105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.868650][ T8811] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  236.905301][ T8819] loop1: detected capacity change from 0 to 64
[  237.101037][ T5368] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  237.181744][ T5248] Bluetooth: hci1: command tx timeout
[  237.228191][ T8755] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.536588][ T8755] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.554670][ T8843] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  237.561911][ T8843] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  237.619974][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'.
[  237.889111][ T8858] loop0: detected capacity change from 0 to 128
[  237.938072][ T8755] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.133050][ T8755] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.299292][   T29] audit: type=1326 audit(1729068304.619:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8871 comm="syz.1.968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77ad77dff9 code=0x0
[  238.332321][ T8874] loop9: detected capacity change from 0 to 7
[  238.347039][    T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  238.371565][ T8874] Dev loop9: unable to read RDB block 7
[  238.389207][ T8874]  loop9: AHDI p3
[  238.392918][ T8874] loop9: partition table partially beyond EOD, truncated
[  238.456910][ T8755] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  238.488240][ T8755] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  238.503571][ T8755] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  238.520850][ T8755] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  238.533752][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.545616][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.569409][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  238.604367][    T8] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  238.613464][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.652623][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.669685][ T8755] 8021q: adding VLAN 0 to HW filter on device team0
[  238.706483][    T8] usb 1-1: config 0 descriptor??
[  238.715349][ T7593] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.722498][ T7593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.740624][ T7593] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.747770][ T7593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.022430][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.110933][ T8755] veth0_vlan: entered promiscuous mode
[  239.126878][    T8] acrux 0003:1A34:0802.000B: unknown main item tag 0x0
[  239.133799][    T8] acrux 0003:1A34:0802.000B: unknown main item tag 0x0
[  239.144349][    T8] acrux 0003:1A34:0802.000B: unknown main item tag 0x0
[  239.151256][    T8] acrux 0003:1A34:0802.000B: unknown main item tag 0x0
[  239.171371][ T8755] veth1_vlan: entered promiscuous mode
[  239.187027][    T8] acrux 0003:1A34:0802.000B: unknown main item tag 0x0
[  239.229743][ T8755] veth0_macvtap: entered promiscuous mode
[  239.235936][    T8] acrux 0003:1A34:0802.000B: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0
[  239.258873][ T5248] Bluetooth: hci1: command tx timeout
[  239.273501][ T8755] veth1_macvtap: entered promiscuous mode
[  239.284534][    T8] acrux 0003:1A34:0802.000B: no inputs found
[  239.310526][    T8] acrux 0003:1A34:0802.000B: Failed to enable force feedback support, error: -19
[  239.345913][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.383305][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.403603][    T8] usb 1-1: USB disconnect, device number 10
[  239.436374][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.444197][ T8893] loop4: detected capacity change from 0 to 4096
[  239.462030][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.482400][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.495718][ T8893] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  239.513436][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.525474][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.543232][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.553682][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.564575][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.583127][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.596347][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.608563][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.642193][ T8893] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  239.648857][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.674181][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.676423][ T8891] loop2: detected capacity change from 0 to 32768
[  239.684869][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.701534][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.709972][ T8891] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.974 (8891)
[  239.722932][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.735730][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.757212][ T8891] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  239.766008][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.779505][ T8891] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  239.782108][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.795806][ T8891] BTRFS info (device loop2): using free-space-tree
[  239.798682][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.815436][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.825288][ T8755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.835790][ T8755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.846102][ T8893] ntfs3(loop4): ino=1b, "file0" failed to parse mft record
[  239.847084][ T8755] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.872422][ T8755] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.878446][ T8893] ntfs3(loop4): ino=1b, "file0" attr_set_size
[  239.881310][ T8755] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.897364][ T8755] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.906118][ T8755] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.988418][ T7593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.003953][ T7593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.069857][   T29] audit: type=1800 audit(1729068306.399:130): pid=8891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.974" name="bus" dev="loop2" ino=263 res=0 errno=0
[  240.093387][ T7606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.126256][ T7606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.127782][ T8105] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  240.294239][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'.
[  240.501171][ T8921] Process accounting resumed
[  240.561379][ T8925] loop2: detected capacity change from 0 to 2048
[  240.618847][ T8925] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  240.648243][ T8925] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  240.653293][ T8923] loop4: detected capacity change from 0 to 2048
[  240.690302][ T8925] UDF-fs: Scanning with blocksize 512 failed
[  240.739688][ T8925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.789922][ T8925] capability: warning: `syz.2.978' uses 32-bit capabilities (legacy support in use)
[  240.893542][ T8923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.005501][ T8944] loop3: detected capacity change from 0 to 24
[  241.103440][ T8950] loop1: detected capacity change from 0 to 256
[  241.145520][ T8947] loop2: detected capacity change from 0 to 2048
[  241.180811][ T8947] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  241.204857][ T8947] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.378566][ T8105] UDF-fs: warning (device loop2): udf_evict_inode: Inode 1367 (mode 100000) has inode size 4102 different from extent length 4608. Filesystem need not be standards compliant.
[  241.519270][ T8962] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  241.644754][ T8966] netlink: 'syz.1.1000': attribute type 28 has an invalid length.
[  241.665314][ T8966] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1000'.
[  241.764437][ T5287] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  241.914496][ T5287] usb 3-1: Using ep0 maxpacket: 16
[  241.942278][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11
[  241.986488][ T8968] loop3: detected capacity change from 0 to 32768
[  242.018497][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[  242.093527][ T5287] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  242.117136][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.136663][ T5287] usb 3-1: Product: syz
[  242.141847][ T5287] usb 3-1: Manufacturer: syz
[  242.159062][ T5287] usb 3-1: SerialNumber: syz
[  242.173294][ T5287] usb 3-1: config 0 descriptor??
[  242.185726][ T8963] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  242.193851][ T5287] hub 3-1:0.0: bad descriptor, ignoring hub
[  242.213229][ T5287] hub 3-1:0.0: probe with driver hub failed with error -5
[  242.222756][ T5287] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20
[  242.265757][    C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1
[  242.401431][ T8963] loop2: detected capacity change from 0 to 128
[  242.425091][ T8963] vfat: Bad value for 'gid'
[  242.429669][ T8963] vfat: Bad value for 'gid'
[  242.449752][ T5289] usb 3-1: USB disconnect, device number 9
[  242.449893][    C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  242.489377][ T8958] loop0: detected capacity change from 0 to 40427
[  242.506184][ T8958] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  242.513883][ T8958] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  242.533543][ T8958] F2FS-fs (loop0): invalid crc value
[  242.553272][ T8958] F2FS-fs (loop0): Found nat_bits in checkpoint
[  242.588181][ T5287] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  242.632157][ T8958] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  242.660424][ T8958] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  242.746036][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.772267][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.798801][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  242.822118][ T5287] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  242.838125][ T5368] syz-executor: attempt to access beyond end of device
[  242.838125][ T5368] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  242.855010][ T5368] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  242.857148][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.900495][ T5287] usb 2-1: config 0 descriptor??
[  243.379452][ T5287] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max
[  243.411085][ T5287] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving
[  243.443533][ T5287] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  243.532610][ T9006] loop2: detected capacity change from 0 to 1024
[  243.616986][ T9008] input: syz1 as /devices/virtual/input/input21
[  243.655111][ T7596] hfsplus: b-tree write err: -5, ino 4
[  243.853373][ T9015] loop3: detected capacity change from 0 to 2048
[  243.916734][ T9015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.941789][ T9015] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  244.060137][ T9020] loop0: detected capacity change from 0 to 2048
[  244.076739][ T8755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.112839][ T9020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  244.382528][ T5368] UDF-fs: warning (device loop0): udf_evict_inode: Inode 1346 (mode 100755) has inode size 4097 different from extent length 4608. Filesystem need not be standards compliant.
[  244.438522][ T8985] loop4: detected capacity change from 0 to 40427
[  244.486673][ T8985] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  244.493376][ T8985] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  244.565928][ T8985] F2FS-fs (loop4): Found nat_bits in checkpoint
[  244.671065][ T9012] loop2: detected capacity change from 0 to 32768
[  244.687917][ T9012] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1019 (9012)
[  244.716089][ T9012] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  244.726726][ T9012] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  244.736856][ T9012] BTRFS info (device loop2): using free-space-tree
[  244.806450][ T8985] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  244.813585][ T8985] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  244.840364][ T8985] syz.4.1008: attempt to access beyond end of device
[  244.840364][ T8985] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  244.902949][ T8179] syz-executor: attempt to access beyond end of device
[  244.902949][ T8179] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  244.918448][ T8179] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  245.034074][ T8105] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.064572][ T5289] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  245.224610][ T5289] usb 1-1: Using ep0 maxpacket: 32
[  245.295053][ T5289] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  245.317064][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.334430][ T5289] usb 1-1: Product: syz
[  245.338713][ T5289] usb 1-1: Manufacturer: syz
[  245.363513][ T5289] usb 1-1: SerialNumber: syz
[  245.381951][ T5289] usb 1-1: config 0 descriptor??
[  245.389018][ T9057] loop1: detected capacity change from 0 to 64
[  245.528590][ T5349] usb 2-1: USB disconnect, device number 15
[  245.707427][ T9065] loop2: detected capacity change from 0 to 2048
[  245.714962][ T9065] EXT4-fs: Ignoring removed mblk_io_submit option
[  245.784051][ T9065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.826954][ T5289] airspy 1-1:0.0: Board ID: 00
[  245.831760][ T5289] airspy 1-1:0.0: Firmware version: 
[  245.925851][ T9065] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1034: bg 0: block 234: padding at end of block bitmap is not set
[  245.982971][ T9065] EXT4-fs (loop2): Remounting filesystem read-only
[  246.345798][ T8105] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.454480][ T5349] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  246.644377][ T5349] usb 5-1: Using ep0 maxpacket: 16
[  246.665739][ T5289] airspy 1-1:0.0: usb_control_msg() failed -71 request 0f
[  246.680910][ T5349] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  246.699823][ T5289] airspy 1-1:0.0: Registered as swradio16
[  246.704304][ T5349] usb 5-1: config 0 has no interface number 0
[  246.718412][ T5289] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  246.730073][ T5349] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  246.756665][ T9091] loop3: detected capacity change from 0 to 1024
[  246.759847][ T5349] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  246.784392][ T5289] usb 1-1: USB disconnect, device number 11
[  246.791901][ T5349] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  246.815122][ T9091] EXT4-fs: Ignoring removed oldalloc option
[  246.821124][ T5349] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  246.841146][ T5349] usb 5-1: Product: syz
[  246.855604][ T5349] usb 5-1: SerialNumber: syz
[  246.865376][ T9091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.880928][ T5349] usb 5-1: config 0 descriptor??
[  246.895368][ T5349] cm109 5-1:0.8: invalid payload size 0, expected 4
[  246.903426][ T5349] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input22
[  246.958678][   T29] audit: type=1800 audit(1729068313.279:131): pid=9091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1043" name="bus" dev="loop3" ino=18 res=0 errno=0
[  247.161872][ T8755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.479709][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  247.479845][   T46] usb 5-1: USB disconnect, device number 7
[  247.486692][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  247.514519][   T29] audit: type=1326 audit(1729068313.839:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.1047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d3ad7dff9 code=0x0
[  247.560721][   T46] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  247.596276][ T9085] loop2: detected capacity change from 0 to 32768
[  247.732574][ T9085] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1040 (9085)
[  248.011173][ T9105] loop0: detected capacity change from 0 to 32768
[  248.023064][ T9085] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.026660][ T9105] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  248.034300][ T9085] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  248.041900][ T9105] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  248.074634][ T9085] BTRFS info (device loop2): using free-space-tree
[  248.128472][ T9105] XFS (loop0): Ending clean mount
[  248.191080][ T9105] XFS (loop0): Quotacheck needed: Please wait.
[  248.253333][ T9111] loop1: detected capacity change from 0 to 32768
[  248.262482][ T9111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1048 (9111)
[  248.282262][ T9105] XFS (loop0): Quotacheck: Done.
[  248.344330][ T9137] loop4: detected capacity change from 0 to 256
[  248.344504][ T9111] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  248.366400][ T5368] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  248.403048][ T9111] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  248.407023][ T9137] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  248.423236][ T9111] BTRFS info (device loop1): using free-space-tree
[  248.436549][ T8105] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.838593][ T9160] netlink: 'syz.4.1055': attribute type 10 has an invalid length.
[  248.981244][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.988702][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.064971][ T5705] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  249.125032][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.132431][ T9160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.141278][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.148456][ T9160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.167810][ T9160] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  255.914885][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  255.921206][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  293.850519][ T7600] bridge_slave_1: left allmulticast mode
[  293.884338][ T7600] bridge_slave_1: left promiscuous mode
[  293.890100][ T7600] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.044941][ T7600] bridge_slave_0: left allmulticast mode
[  294.050635][ T7600] bridge_slave_0: left promiscuous mode
[  294.144481][ T7600] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.154378][ T5239] Bluetooth: hci2: command 0x0406 tx timeout
[  310.248862][ T7600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  311.087447][ T7600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  324.610962][ T7600] bond0 (unregistering): Released all slaves
[  325.424814][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  325.431137][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  328.806611][ T5252] Bluetooth: hci3: command 0x0406 tx timeout
[  330.874475][ T5248] Bluetooth: hci5: command 0x0406 tx timeout
[  337.781891][ T7600] hsr_slave_0: left promiscuous mode
[  338.604387][ T7600] hsr_slave_1: left promiscuous mode
[  339.254440][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  339.261904][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_0
[  339.351880][ T7600] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  339.462616][ T7600] batman_adv: batadv0: Removing interface: batadv_slave_1
[  339.918614][ T7600] veth1_macvtap: left promiscuous mode
[  339.924190][ T7600] veth0_macvtap: left promiscuous mode
[  340.064629][ T7600] veth1_vlan: left promiscuous mode
[  340.069963][ T7600] veth0_vlan: left promiscuous mode
[  344.214518][   T30] INFO: task syz.4.720:7965 blocked for more than 146 seconds.
[  344.222125][   T30]       Not tainted 6.12.0-rc3-next-20241016-syzkaller #0
[  344.294322][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  344.303050][   T30] task:syz.4.720       state:D stack:24064 pid:7965  tgid:7964  ppid:7550   flags:0x00024000
[  344.454596][   T30] Call Trace:
[  344.457938][   T30]  <TASK>
[  344.460887][   T30]  __schedule+0x18af/0x4bd0
[  344.540194][   T30]  ? __pfx___schedule+0x10/0x10
[  344.571670][   T30]  ? __pfx_lock_release+0x10/0x10
[  344.614334][   T30]  ? schedule+0x90/0x320
[  344.618645][   T30]  schedule+0x14b/0x320
[  344.622835][   T30]  schedule_timeout+0xb0/0x290
[  344.724484][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  344.729926][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  344.824348][   T30]  ? wait_for_completion+0x2fe/0x620
[  344.829695][   T30]  ? wait_for_completion+0x2fe/0x620
[  344.924368][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  344.929636][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  345.014334][   T30]  ? wait_for_completion+0x2fe/0x620
[  345.019684][   T30]  wait_for_completion+0x355/0x620
[  345.094627][   T30]  ? __pfx_wait_for_completion+0x10/0x10
[  345.100323][   T30]  ? io_wq_worker_wake+0x90/0xc0
[  345.184566][   T30]  ? io_wq_put_and_exit+0x170/0x720
[  345.189823][   T30]  io_wq_put_and_exit+0x344/0x720
[  345.264306][   T30]  ? io_wq_put_and_exit+0x1b1/0x720
[  345.269571][   T30]  ? __pfx_xa_find_after+0x10/0x10
[  345.344342][   T30]  ? __pfx_io_wq_put_and_exit+0x10/0x10
[  345.349954][   T30]  ? kfree+0x1a0/0x460
[  345.354043][   T30]  ? io_uring_clean_tctx+0x10a/0x1e0
[  345.444305][   T30]  io_uring_clean_tctx+0x168/0x1e0
[  345.449483][   T30]  ? __pfx_io_uring_clean_tctx+0x10/0x10
[  345.544290][   T30]  ? percpu_counter_add_batch+0x1a2/0x1f0
[  345.550086][   T30]  io_uring_cancel_generic+0x76a/0x820
[  345.654343][   T30]  ? __pfx_io_uring_cancel_generic+0x10/0x10
[  345.660383][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  345.754497][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  345.760643][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  345.844588][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  345.849859][   T30]  do_exit+0x6a8/0x28e0
[  345.854042][   T30]  ? __pfx_do_exit+0x10/0x10
[  345.941940][   T30]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  345.994357][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  346.000408][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  346.104310][   T30]  ? _raw_spin_lock_irq+0xdf/0x120
[  346.109497][   T30]  do_group_exit+0x207/0x2c0
[  346.114103][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  346.214360][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  346.219626][   T30]  get_signal+0x16a3/0x1740
[  346.224171][   T30]  ? __pfx_get_signal+0x10/0x10
[  346.324500][   T30]  arch_do_signal_or_restart+0x96/0x860
[  346.330118][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  346.414398][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  346.420455][   T30]  ? syscall_exit_to_user_mode+0xa3/0x370
[  346.514309][   T30]  syscall_exit_to_user_mode+0xc9/0x370
[  346.519926][   T30]  do_syscall_64+0x100/0x230
[  346.584372][   T30]  ? clear_bhb_loop+0x35/0x90
[  346.654318][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.660281][   T30] RIP: 0033:0x7fe8ef37dff9
[  346.724373][   T30] RSP: 002b:00007fe8eedff0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  346.732847][   T30] RAX: fffffffffffffe00 RBX: 00007fe8ef535f88 RCX: 00007fe8ef37dff9
[  346.854325][   T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe8ef535f88
[  346.862359][   T30] RBP: 00007fe8ef535f80 R08: 0000000000000000 R09: 0000000000000000
[  346.971460][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe8ef535f8c
[  347.054330][   T30] R13: 0000000000000000 R14: 00007ffc1cfbf600 R15: 00007ffc1cfbf6e8
[  347.062370][   T30]  </TASK>
[  347.114524][   T30] 
[  347.114524][   T30] Showing all locks held in the system:
[  347.122283][   T30] 1 lock held by khungtaskd/30:
[  347.244352][   T30]  #0: ffffffff8e939e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  347.324321][   T30] 3 locks held by kworker/u8:5/75:
[  347.329478][   T30]  #0: ffff88802e267948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  347.434461][   T30]  #1: ffffc900022cfd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  347.574496][   T30]  #2: ffffffff8fcdca48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  347.584129][   T30] 2 locks held by getty/4991:
[  347.674550][   T30]  #0: ffff88814c1eb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  347.754421][   T30]  #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  347.834443][   T30] 1 lock held by dhcpcd/5033:
[  347.839174][   T30] 1 lock held by syz-executor/5222:
[  347.934387][   T30] 1 lock held by syz-executor/5705:
[  347.939638][   T30] 3 locks held by kworker/u8:13/7593:
[  348.004291][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  348.104322][   T30]  #1: ffffc90003dbfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  348.224446][   T30]  #2: ffffffff8fcdca48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  348.233985][   T30] 5 locks held by kworker/u8:20/7600:
[  348.314330][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  348.404341][   T30]  #1: ffffc90003b4fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  348.514474][   T30]  #2: ffffffff8fccfed0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  348.523979][   T30]  #3: ffffffff8fcdca48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xaa0
[  348.674329][   T30]  #4: ffffffff8e93f3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  348.764310][   T30] 2 locks held by kworker/u8:24/7606:
[  348.769735][   T30] 1 lock held by iou-wrk-7965/7966:
[  348.844307][   T30]  #0: ffff888068dc60a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010
[  348.944306][   T30] 1 lock held by iou-wrk-7965/7969:
[  348.949554][   T30]  #0: ffff888068dc60a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010
[  349.034424][   T30] 1 lock held by iou-wrk-7965/7971:
[  349.039675][   T30] 1 lock held by iou-wrk-7965/7973:
[  349.134347][   T30]  #0: ffff888068dc60a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010
[  349.212797][   T30] 1 lock held by iou-wrk-7965/7974:
[  349.254364][   T30]  #0: ffff888068dc60a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010
[  349.334404][   T30] 1 lock held by iou-wrk-7965/7977:
[  349.339652][   T30]  #0: ffff888068dc60a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010
[  349.464315][   T30] 1 lock held by iou-wrk-7965/7979:
[  349.469566][   T30]  #0: ffff888068dc60a8 (&ctx->uring_lock){+.+.}-{3:3}, at: io_provide_buffers+0xd0b/0x1010
[  349.594311][   T30] 4 locks held by syz-executor/8755:
[  349.599646][   T30] 1 lock held by syz.2.1063/9183:
[  349.684620][   T30] 
[  349.686993][   T30] =============================================
[  349.686993][   T30] 
[  349.774380][   T30] NMI backtrace for cpu 0
[  349.778765][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-next-20241016-syzkaller #0
[  349.788766][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  349.798831][   T30] Call Trace:
[  349.802120][   T30]  <TASK>
[  349.805070][   T30]  dump_stack_lvl+0x241/0x360
[  349.809767][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.814980][   T30]  ? __pfx__printk+0x10/0x10
[  349.819606][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  349.824565][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  349.830040][   T30]  ? _printk+0xd5/0x120
[  349.834213][   T30]  ? __pfx__printk+0x10/0x10
[  349.838822][   T30]  ? __wake_up_klogd+0xcc/0x110
[  349.843692][   T30]  ? __pfx__printk+0x10/0x10
[  349.848304][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  349.853350][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  349.859356][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  349.865365][   T30]  watchdog+0xff4/0x1040
[  349.869631][   T30]  ? watchdog+0x1ea/0x1040
[  349.874071][   T30]  ? __pfx_watchdog+0x10/0x10
[  349.878776][   T30]  kthread+0x2f0/0x390
[  349.882858][   T30]  ? __pfx_watchdog+0x10/0x10
[  349.887555][   T30]  ? __pfx_kthread+0x10/0x10
[  349.892159][   T30]  ret_from_fork+0x4b/0x80
[  349.896587][   T30]  ? __pfx_kthread+0x10/0x10
[  349.901192][   T30]  ret_from_fork_asm+0x1a/0x30
[  349.905990][   T30]  </TASK>
[  349.909905][   T30] Sending NMI from CPU 0 to CPUs 1:
[  349.915513][    C1] NMI backtrace for cpu 1
[  349.915530][    C1] CPU: 1 UID: 0 PID: 8755 Comm: syz-executor Not tainted 6.12.0-rc3-next-20241016-syzkaller #0
[  349.915549][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  349.915558][    C1] RIP: 0010:__rmqueue_pcplist+0x2308/0x2730
[  349.915580][    C1] Code: 4d 40 48 89 c8 48 89 4c 24 30 48 39 8c 24 28 01 00 00 0f 84 81 03 00 00 4b 8d 6c 2c 28 48 89 ef be 04 00 00 00 e8 b8 74 0e 00 <48> 89 e8 48 89 6c 24 38 48 c1 ed 03 48 b8 00 00 00 00 00 fc ff df
[  349.915593][    C1] RSP: 0018:ffffc9000a5173d8 EFLAGS: 00000056
[  349.915608][    C1] RAX: 0000000000000001 RBX: ffffea0000d01300 RCX: ffffffff81f04ea8
[  349.915619][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffea0000d01330
[  349.915629][    C1] RBP: ffffea0000d01330 R08: ffffea0000d01333 R09: 1ffffd40001a0266
[  349.915640][    C1] R10: dffffc0000000000 R11: fffff940001a0267 R12: ffffea0000d01308
[  349.915652][    C1] R13: 0000000000000000 R14: ffff8880b8744760 R15: ffff8880b8744740
[  349.915663][    C1] FS:  000055558011b500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  349.915676][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  349.915687][    C1] CR2: 00007f65126ee040 CR3: 00000000474a0000 CR4: 00000000003526f0
[  349.915701][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  349.915710][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  349.915720][    C1] Call Trace:
[  349.915725][    C1]  <NMI>
[  349.915731][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  349.915749][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  349.915765][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  349.915780][    C1]  ? nmi_handle+0x2a/0x5a0
[  349.915803][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  349.915821][    C1]  ? nmi_handle+0x14f/0x5a0
[  349.915836][    C1]  ? nmi_handle+0x2a/0x5a0
[  349.915852][    C1]  ? __rmqueue_pcplist+0x2308/0x2730
[  349.915868][    C1]  ? default_do_nmi+0x63/0x160
[  349.915885][    C1]  ? exc_nmi+0x123/0x1f0
[  349.915902][    C1]  ? end_repeat_nmi+0xf/0x53
[  349.915921][    C1]  ? __rmqueue_pcplist+0x2308/0x2730
[  349.915937][    C1]  ? __rmqueue_pcplist+0x2308/0x2730
[  349.915953][    C1]  ? __rmqueue_pcplist+0x2308/0x2730
[  349.915970][    C1]  ? __rmqueue_pcplist+0x2308/0x2730
[  349.915986][    C1]  </NMI>
[  349.915991][    C1]  <TASK>
[  349.916001][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  349.916015][    C1]  ? validate_chain+0x11e/0x5920
[  349.916041][    C1]  get_page_from_freelist+0x86f/0x3270
[  349.916066][    C1]  ? __pfx_validate_chain+0x10/0x10
[  349.916093][    C1]  __alloc_pages_noprof+0x292/0x710
[  349.916110][    C1]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  349.916136][    C1]  alloc_pages_mpol_noprof+0x3e8/0x680
[  349.916158][    C1]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  349.916179][    C1]  ? alloc_pages_noprof+0xef/0x170
[  349.916198][    C1]  alloc_slab_page+0x6a/0x120
[  349.916215][    C1]  allocate_slab+0x5a/0x2f0
[  349.916231][    C1]  ___slab_alloc+0xcd1/0x14b0
[  349.916248][    C1]  ? __sigqueue_alloc+0x42e/0x540
[  349.916265][    C1]  ? __sigqueue_alloc+0x2f/0x540
[  349.916283][    C1]  ? __sigqueue_alloc+0x42e/0x540
[  349.916299][    C1]  __slab_alloc+0x58/0xa0
[  349.916314][    C1]  ? __sigqueue_alloc+0x42e/0x540
[  349.916329][    C1]  kmem_cache_alloc_noprof+0x268/0x380
[  349.916351][    C1]  __sigqueue_alloc+0x42e/0x540
[  349.916369][    C1]  __send_signal_locked+0x22f/0xdc0
[  349.916392][    C1]  ? __lock_task_sighand+0x29/0x2d0
[  349.916409][    C1]  group_send_sig_info+0x292/0x310
[  349.916426][    C1]  ? __pfx_group_send_sig_info+0x10/0x10
[  349.916447][    C1]  bpf_send_signal_common+0x2dd/0x430
[  349.916467][    C1]  ? __pfx_bpf_send_signal_common+0x10/0x10
[  349.916485][    C1]  ? __pfx___cant_migrate+0x10/0x10
[  349.916506][    C1]  ? bpf_trace_run2+0x1fc/0x540
[  349.916522][    C1]  bpf_send_signal+0x19/0x30
[  349.916535][    C1]  bpf_prog_7ba5217f62dcd359+0x41/0x45
[  349.916548][    C1]  bpf_trace_run2+0x2ec/0x540
[  349.916565][    C1]  ? arch_do_signal_or_restart+0x51f/0x860
[  349.916585][    C1]  ? __pfx_bpf_trace_run2+0x10/0x10
[  349.916604][    C1]  ? __might_fault+0xc6/0x120
[  349.916617][    C1]  ? trace_sys_enter+0x9d/0x150
[  349.916632][    C1]  __bpf_trace_sys_enter+0x38/0x60
[  349.916646][    C1]  trace_sys_enter+0xd9/0x150
[  349.916660][    C1]  syscall_trace_enter+0xf8/0x150
[  349.916674][    C1]  do_syscall_64+0xcc/0x230
[  349.916688][    C1]  ? clear_bhb_loop+0x35/0x90
[  349.916704][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.916718][    C1] RIP: 0033:0x7f0d3ad19959
[  349.916730][    C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  349.916741][    C1] RSP: 002b:00007fffaf7128c0 EFLAGS: 00000293 ORIG_RAX: 000000000000000f
[  349.916756][    C1] RAX: ffffffffffffffda RBX: 000000000000003a RCX: 00007f0d3ad19959
[  349.916767][    C1] RDX: 00007fffaf7128c0 RSI: 00007fffaf7129f0 RDI: 0000000000000011
[  349.916777][    C1] RBP: 00007fffaf712eac R08: 0000000000000000 R09: 7fffffffffffffff
[  349.916788][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[  349.916797][    C1] R13: 000000000003cde6 R14: 000000000003cd91 R15: 00007fffaf712f00
[  349.916814][    C1]  </TASK>
[  350.784316][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  350.791228][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-next-20241016-syzkaller #0
[  350.801230][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  350.811310][   T30] Call Trace:
[  350.814601][   T30]  <TASK>
[  350.817545][   T30]  dump_stack_lvl+0x241/0x360
[  350.822242][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.827460][   T30]  ? __pfx__printk+0x10/0x10
[  350.832067][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  350.838072][   T30]  ? vscnprintf+0x5d/0x90
[  350.842418][   T30]  panic+0x349/0x880
[  350.846335][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  350.852506][   T30]  ? __pfx_panic+0x10/0x10
[  350.856938][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  350.862324][   T30]  ? __irq_work_queue_local+0x137/0x410
[  350.867886][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  350.873282][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  350.879450][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  350.885621][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  350.891797][   T30]  watchdog+0x1033/0x1040
[  350.896150][   T30]  ? watchdog+0x1ea/0x1040
[  350.900589][   T30]  ? __pfx_watchdog+0x10/0x10
[  350.905285][   T30]  kthread+0x2f0/0x390
[  350.909367][   T30]  ? __pfx_watchdog+0x10/0x10
[  350.914059][   T30]  ? __pfx_kthread+0x10/0x10
[  350.918661][   T30]  ret_from_fork+0x4b/0x80
[  350.923092][   T30]  ? __pfx_kthread+0x10/0x10
[  350.927692][   T30]  ret_from_fork_asm+0x1a/0x30
[  350.932485][   T30]  </TASK>
[  350.935749][   T30] Kernel Offset: disabled
[  350.940069][   T30] Rebooting in 86400 seconds..