last executing test programs:

1.649161881s ago: executing program 0 (id=771):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000000)=0x9, 0x8, 0x0)
set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0)

1.648909529s ago: executing program 0 (id=772):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="6b0033008000de00ffffffffffff080211000000505050505050000007000000000000006400824403010e0503ff4f063c040180a91c2d1a02000c0200000000000000000001000f0003030303037107fffeff0002fb"], 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0)

1.507711009s ago: executing program 0 (id=773):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000000c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44d57ecc7d80c5ce0c6769643d", @ANYRESOCT, @ANYRES8, @ANYRES64=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="4599"], 0x1, 0x702, &(0x7f0000000280)="$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")

1.505945673s ago: executing program 0 (id=774):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r2 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x10000, &(0x7f0000000240)=ANY=[@ANYBLOB="64697361626c655f726f6c6c5f666f72776172642c71756f74612c6772706a71756f74613d06bb8dda88c6b810723db4f81c1258d8d63ba020d1b5a390ff5e08451bfcf713e4123513083063d1a6348e838d9528c380ed63c7e825b53c1672748b808b924f19ccddbafbe0210fa3dde3ad5a2bc72c6e6f71756f74612c66617374626f6f742c6e6f757365725f78617474722c70726a6a71756f74613d2d8b91d2cea119d7c4187a2c6a71666d743d7666737631000000000000000565722c636865636b706f696e743d656e61626c652c00"], 0x1, 0x5504, &(0x7f0000002340)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
sendfile(r2, r3, 0x0, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x3, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194)
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_io_uring_setup(0x6f28, &(0x7f0000000300)={0x0, 0x7156, 0x800, 0x1, 0x159, 0x0, r0}, &(0x7f00000001c0), &(0x7f0000000280))
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
dup(r7)
write$6lowpan_enable(r3, &(0x7f0000000400)='0', 0x57)

918.792027ms ago: executing program 2 (id=782):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x4, 0x2, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffff, 0x7}]}}}}}}}, 0x0)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001f00))
r1 = socket$kcm(0x21, 0x2, 0xa)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0xa4}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc"}, {0x10, 0x113}, {0x10, 0x117}], 0x38}, 0x404f444)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r3, 0xf517, 0x0)

728.262682ms ago: executing program 2 (id=786):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa1080a, &(0x7f0000000300)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRES32=0x0, @ANYBLOB="64426712f6332e6dd9cb0c57614b21fa1bb9e2d8a7060e6fc4afb485e6a2e14249b9ce7bf222959ce2ac129b6a989c7f12d5966ba26791", @ANYRESDEC, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32, @ANYRESDEC], 0x21, 0x150d, &(0x7f0000001f80)="$eJzs3AvUTdX6MPDnmXMuXpJ2ksvLfOaz2OnFJElySZJLkiRHktwSkiRJksr9loQk5J7kHpJbSO73W+5JcqQ3SUJCkvkN5zinOud8X//z/5//MMb3Pr8x1tjz2Ws/c8+5nne8a821x97fdhxctX61SnWZGf5H8K8P3QAgBQD6AcA1ABABQKkcpXJc2p9FY7f/2ZuI/6wHp13pEYgrSeqfsUn9Mzapf8Ym9c/YpP4Zm9Q/Y5P6Z2xSfyEysm3T814rW8bd5P5/Ribn//+PpBcb8+WGYtd3+jdSpP4Zm9Q/Y5P6Z2xS/4wp0+VHqX/GJvXP2KT+GZvUX4iM7L9/7/jfzTUAcOXvd8v2++1K//0JIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMgYzoVfGQD4W/tKj0sIIYQQQgghhBD/OSHzlR6BEEIIIYQQQggh/vchKNBgIIJMkBlSIAtkhasgG1wN2eEaSMC1kAOug5xwPeSC3JAH8kIq5IP8YIHAAUMMBaAgJOEGKAQ3QhoUhiJQFDwUg+JwE5SAm6Ek3AKl4FYoDbdBGSgL5aA83A4V4A6oCHdCJbgLKkMVqArV4G6oDvdADbgXasJ9UAvuh9rwANSBP0FdeBDqwUNQHx6GBvAINIRG0BiaQNP/Vv6L8BK8DF2gK3SD7tADekIv6A19oC/0g1egP6RcPjaDYDC8DkPgDRgKb8IwGA4j4C0YCaNgNIyBsTAOxsPbMAHegYnwLkyCyTAFpsI0mA4z4D2YCbNgNrwPc+ADmAvzYD4sgIXwISyCxbAEPoKl8DEsg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yDT2A77ICdsAt2wx7YC5/CPvgM9sPncAC++Dfzz/5DficEBFSo0KDBTJgJUzAFs2JWzIbZMDtmxwQmMAfmwJyYE3NhrhvzYB5MxVTMj/mRkJCRsQAWwCQmsRAWwjRMwyJYBD16LI7FsQTejCWxJJbCUlgaS2MZLItlsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHqyBNbAm1sRaWAtrY21Mz1cH62JdrIf1sD7WxwbYABtiQ2yMjbEpNsVm2AybY3NsiS2xFbbC1tga22AbbIttsR22w/bYHjtgB+yIHbETvoAv4Iv4Ir6ML2NXrKy6Yw/sgb2wF/bBvtgXX8H++Cq+iq/hQByEg/F1fB3fwKF4BofhcByBI7CCGoWjcQyyGofjcTxOwAk4ESfiJJyMk3EqTsPpOANn4EychbPwfZyDH+AHOA/n4QJciAtxES7GJbgEl+JZXIbLcQWuxFW4GlfhWlyHa3EDbsQNuBk341bcip/gJ7gDd+Au3IV70ADgp/gZfoYD8QAewIN4EA/hITyMhzEd0/EIHsGjeBSP4TE8jsfxBJ7EU3gST+NpPINn8Ryew/N4Hi/gc6lf19tTeP1AUJcYZVQmlUmlqBSVVWVV2VQ2lV1lVwmVUDlUDpVT5VS5VC6VR+VRqSpV5Vc/KVKkWMWqgCqgkiqpCqlCKk2lqSKqiPLKq+KquCqhSqiSqqQqpW5VpdVtqowqq1r48qq8qqBa+orqTlVJVVKVVRVVVVVT1VR1VV3VUDVUTVVT1VK1VG31gKqjumMffFBdqkx9NQgbqMHYUDVSjVUT9QY+qpqpodhctVAt1eNqOA7D1qqZb6OeUm3VaGynnlFj8FnVQY3Djup51Um9oDqrF9VLqrnvorqqSdhd9VBTsZfqrfqovmomVlGXKlZVvaYGqkFqsHpdLcA31FD1phqmhqsR6i01Uo1So9UYNVaNU+PV22qCekdNVO+qSWqymqKmqmlqupqh3lMz1Sw1W72v5qgP1Fw1T81XC9RC9aFapBarJeojtVR9rJap5WqFWqlWqdVqjVqr1qn1aoPaqDapzWqL2qq2qU/UdrVD7VS71G61R+1Vn6p96jO1X32uDqgv1EH1Z3VIfakOq69UuvpaHVHfqKPqW3VMfaeOq+/VCXVSnVI/qNPqR3VGnVXn1E/qvPpZXVC/qIsqKNColdba6Ehn0pl1is6is+qrdDZ9tc6ur9EJfa3Ooa/TOfX1OpfOrfPovDpV59P5tdWknWYd6wK6oE7qG3QhfaNO04V1EV1Ue11MF9c36RL6Zl1S36JL6Vt1aX2bLqPL6nK6vL5dV9B36Ir6Tl1J36Ur6yq6qq6m79bV9T26hr5X19T36Vr6fl1bP6Dr6D/puvpBXU8/pOvrh3UD/YhuqBvpxrqJbqof1c30Y7q5bqFb6sd1K/2Ebq2f1G30U7qtflq308/o9vpZ3UE/pzvq53Un/YLurH/RF3XQXXRX3U131z10T91L99Z9dF/dT7+i++tX9QD9mh6oB+nB+nU9RL+hh+o39TA9XI/Qb+mRepQercfosXqcHq/f1hP0O3qifldP0pP1FD1VT9PTdZ/LPc3+L+S/8y/yB2QGAL1Vb9Of6O16h96pd+ndeo/eq/fqfXqf3q/36wP6gD6oD+pD+pA+rA/rdJ2uj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WXX5xKYvXD4GYNAoo40xkclkMpsUk8VkNVeZbOZqk91cYxLmWpPDXGdymutNLpPb5DF5TarJZ/Iba8g4wyY2BUxBkzQ34OW+TRFT1HhTzBQ3N/07+aaQudGkmcK/y/+j8TU1TU0z08w0N81NS9PStDKtTGvT2rQxbUxb09a0M+1Me9PedDAdTEfT0XQynUxn09m8ZF4yXUwX0810Mz1MT9PL9DZ9TF/Tz7xi+pv+ZoAZYAaagWawGWyGmCFmqBlqhplhZoQZYUaakWa0GW3GmrFmvBlvJpgJZqKZaCaZSWaKmWKmmWlmhplhZpqZZraZbeaYOWaumWvmm/lmoVloFplFZolZYpaapWaZWW6Wm5VmpVltVpu1Zq1Zb9abjWaj2Ww2m2WZt5ltZrvZbnaanWa32W32mr1mn9ln9pv95oA5YA6ag+aQOWQOm8Mm3aSbI+aIOWqOmmPmmDlujpsT5oQ5ZU6Z0+a0OWPOmHPmnDlvzpsL5oK5aC5euuyLVKQiE5koU5QpSolSoqxR1ihblC3KHmWPElEiyhHliHJG10e5otxRnihvlBrli/JHNqLIRRzFUYGoYJSMbogKRTdGaVHhqEhUNPJRsah4dFNUIro5KhndEpWKbo1KR7dFZaKyUbmofHR7VCG6I6oY3RlViu6KKkdVoqpRtejuqHp0T1QjujeqGd0X1Yruj2pHD0R1oj9FdaMHo3rRQ1H96OGoQfRI1DBqFDWOmkRN/6P9h3Am92O+i+1qu9nutoftaXvZ3raP7Wv72Vdsf/uqHWBfswPtIDvYvm6H2DfsUPumHWaH2xH2LTvSjrKj7Rg71o6z4+3bdoJ9x06079pJdrKdYqfaaXa6nWHfszPtLDvbvm/n2A/sXDvPzrcL7EL7oV1kF9sl9iO71H5sl9nldoVdaVfZ1XaNXWvX2fV2g91oN9nNdovdarfZT+x2u8PutLvsbrvH7rWf2n32M7vffm4P2C/sQftne8h+aQ/br2y6/doesd/Yo/Zbe8x+Z4/b7+0Je9Kesj/Y0/ZHe8aetefsT/a8/dlesL/YizZcuri/dHonQ4YyUSZKoRTKSlkpG2Wj7JSdEpSgHJSDclJOykW5KA/loVRKpfyUny5hYipABShJSSpEhSiN0qgIFSFPnopTcSpBJagklaRSVIpKU2kqQ2WoHJWj2+l2uoPuoDvpTrqL7qIqVIWqUTWqTtWpBtWgmlSTalEtqk21qQ7VobpUl+pRPapP9akBNaCG1JAaU2NqSk2pGTWj5tScWlJLakWtqDW1pjbUhtpSW2pH7ag9tacO1IE6UkfqRJ2oM3Wml+gl6kJdqBt1ox7Ug3pRL+pDfagf9aP+1J8G0AAaSANpMA2mITSEhtJQGkbDaQS9RSNpFI2mMTSWxtF4Gk8TaAJNpIk0iSbRFJpC02gazaAZNJNm0myaTXNoDs2luTSf5tNCWkiLaBEtoSW0lJbSMlpGK2gFraJVtIbW0DpaRxtoA22iTbSFttA22kbbaTvtpJ20m3bTXtpL+2gf7af9dIAO0EE6SIfoEB2mw5RO6XSEjtBROkrH6Bgdp+N0gk7QKTpFp+k0naEzdI7O0Xn6mS7QL3SRAqW4LC6ru8plc1e77O4a949xHpfXpbp8Lr+zLpfL/buYnHNprrAr4oo674q54u4ml3ZpSfWbuIwr68q58u52V8Hd4Sr+U1zd3eNquHtdTXefq+bu/l1cy93varuHXR33iKvrGrl6romr7x52DdwjrqFr5Bq7Jq6Ve8K1dk+6Nu4p19Y9Hf1D7Ba5xW6dW+82uI1un/vMnXM/uaPuW3fe/ey6uK6un3vF9XevugHuNTfQDfqneIR7y410o9xoN8aNdeP+KZ7iprppbrqb4d5zM92sf4oXug/dHLfEzXXz3Hy34C/xpTEtcR+5pe5jt8wtdyvcSrfKrXZr3Nq/j3Wl2+y2uK1ur/vUbXc73E63y+12e/4SX5rHfve5O+C+cEfcN+6Q+9Iddsdcuvv6L/Gl+R1z37nj7nt3wp10p9wP7rT70Z1xZ/8y/0tz/8H94i664ICRFWs2HHEmzswpnIWz8lWcja/m7HwNJ/hazsHXcU6+nnNxbs7DeTmV83F+tkzsmDnmAlyQk3wDF+IbOY0LcxEuyp6LcXG+iUvwzVySb+FSfCuX5tu4DJflclyeb+cKfAdX5Du5Et/FlbkKV+VqfDdX53u4Bt/LNfk+rsX3c21+gOvwn7guP8j1+CGuzw9zA36EG3IjbsxNuCk/ys34MW7OLbglP86t+AluzU9yG36K2/LT3I6f4fb8LHfg57gjP8+d+AXuzC/yS/wyd+Gu3I27cw/uyb24N/fhvtyPX+H+/CoP4Nd4IA/iwfw6D+E3eCi/ycN4OI/gt3gkj+LRPIbH8jgez2/zBH6HJ/K7PIkn8xSeytN4Os/g93gmz+LZ/D7P4Q94Ls/j+byAF/KHvIgX8xL+iJfyx7yMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+GtvI0/4e28g3fyLt7Ne3gvf8r7+DPez5/zAf6CD/Kf+RB/yYf5K07nr/kIf8NH+Vs+xt/xcf6eT/BJPsU/8Gn+kc/wWT7HP/F5/pkv8C98kQNDjLGKdWziKM4UZ45T4ixx1viqOFt8dZw9viZOxNfGOeLr4pzx9XGuOHecJ84bp8b54vyxjSl2McdxXCAuGCfjG+JC8Y1xWlw4LhIXjX1cLC4e3xSXiG+OS8a3xKXiW+PS8W1xmbhs/PB95ePb4wrxHXHF+M64UnxXXDmuEleNq8V3x9Xje+Ia8b1xzfi+uGR8f1w7fiCGy99XqRc/FNePH44bxI/EDeNGceO4Sdw0fjRuFj8WN49bxC3jx+NW8RNx6/jJuE38VNw2fvoP93eLu8c94p5xzziEe/X85ILkwuSHyUXJxcklyY+SS5MfJ5cllydXJFcmVyVXJ9ck1ybXJdcnNyQ3JjclNye3JLcmQ6iWGTx65bU3PvKZfGaf4rP4rP4qn81f7bP7a3zCX+tz+Ot8Tn+9z+Vz+zw+r0/1+Xx+bz1559nHvoAv6JP+Bl/I3+jTfGFfxBf13hfzxX0T39Q39c38Y765b+Fb+sf94/4J/4R/0j/pn/Jt/dO+nX/Gt/fP+g7+Of+cf9538i/4zv5F/5J/2XfxXX0338338D18L9/L9/F9fD/fz/f3/f0AP8AP9AP9YD/YD/FD/FA/1A/zw/wIP8KP9CP9aD/aj/Vj/Xg/3k/wE/xEP9FP8pP8FD/FT/PT/Aw/w8/0M/1sP9vPSZvj5/q5fr6f7xf6hX6RX+SX+CV+qV/ql/llfoVf4Vf5VX6NX+PX+XV+g9/gN/lNfovf4rf5bX673+53+p1+t9/t9/q9fp/f5/f7/f6AP+AP+oP+kD/kD/uvfLr/2h/x3/ij/lt/zH/nj/vv/Ql/0p/yP/jT/kd/xp/15/xP/rz/2V/wv/iLPvjxibcTExLvJCYm3k1MSkxOTElMTUxLTE/MSLyXmJmYlZideD8xJ/FBYm5iXmJ+YkFiYeLDxKLE4sSSxEeJpYmPE8sSyxMrEisTqxKrEyHk2x6HAqFgSIYbQqFwY0gLhUORUDT4UCwUDzeFEuHmUDLcEkqFW0PpcFsoE8qGcuGR0DA0Co1Dk9A0PBqahcdC89AitAyPh1bhidA6PBnahKdC2/B0aBeeCe3Ds6FDeC50DM+HTn9bcYWXQ5fQNXQL3UOP0DP0Cr1Dn9A39AuvhP7h1TAgvBYGhkFhcHg9DAlvhKHhzTAsDA8jwlthZBgVRocxYWwYF8aHt8OE8E6YGN4Nk8LkMCVMDdPC9DAjvBdmhllhdng/zAkfhLlhXpgfFoSF4cOwKCwOS8JHYWn4OCwLy8OKsDKsCqvDmrA2rAvrw4awMWwKm8OWsDVsC5+E7WFH2Bl2hd1hT9gbPg37wmdhf/g8HAhfhIPhz+FQ+DIcDl+F9PB1OBK+CUfDt+FY+C4cD9+HE+FkOBV+CKfDj+FMOBvOhZ/C+fBzuBB+CRflO2tCCCGEEP8lPf9gf/d/8ZwBgL99kNADAK7ekTf9t/s1AGzK9dd2b5XaKgEAT3Xt+ODftsqVu3Xrdvm1yzREBecBQOIf3uByvBxawhPQBlpAiX85vt7qhfP8B/0nbwXI+pucFPg1/nv/+K/n31s9+viIRaXjczn+H/3PA0gr+GtOFvg1Xg4tL80GWkDJ/0v/uZv9wfizfDkeoPlvcrLBr/Gvx6c4PAZPQ5vfvVIIIYQQQgghhPir3qpc+z9aP19an6cC/H2FnBkAUs1f23+0PhdCCCGEEEIIIcSV9+wLnZ98tE2bFu2lIQ1pSOPvjSv9n0kIIYQQQgjxn/brRf+vz2W5kgMSQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCEyoN/86FcWAPhf+TmxKz1HIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4kr7PwEAAP//lOcr+A==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)

640.461364ms ago: executing program 2 (id=789):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

589.403732ms ago: executing program 1 (id=790):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

589.287571ms ago: executing program 2 (id=791):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

589.159924ms ago: executing program 0 (id=792):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00')
unshare(0x26020480)
listen(r0, 0x2)

437.716372ms ago: executing program 1 (id=793):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}]}}]}, 0xac}, 0x1, 0x7a00}, 0x0)

437.601788ms ago: executing program 2 (id=794):
mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb7020000feffffffb703000064000003850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94)

336.543504ms ago: executing program 2 (id=795):
connect$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

247.379931ms ago: executing program 1 (id=796):
syz_mount_image$bcachefs(&(0x7f0000006600), &(0x7f0000006640)='./file0\x00', 0x0, &(0x7f0000006680), 0x1, 0x65f7, &(0x7f00000066c0)="$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")

140.687322ms ago: executing program 0 (id=797):
openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
r0 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0)

441.378µs ago: executing program 1 (id=798):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10)

190.783µs ago: executing program 1 (id=799):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x2, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x41, 0x2e, 0xe]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28)

0s ago: executing program 1 (id=800):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000100), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:48382' (ED25519) to the list of known hosts.
syzkaller login: [   49.489926][ T5829] cgroup: Unknown subsys name 'net'
[   49.676956][ T5829] cgroup: Unknown subsys name 'cpuset'
[   49.682569][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.344902][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.369903][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.381744][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.394649][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.398792][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.402601][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.426993][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.434941][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.438493][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.441242][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.444693][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.447226][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.451860][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.454700][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.457301][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.460410][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.646955][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   55.714940][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.749243][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.752824][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.757447][ T5842] bridge_slave_0: entered allmulticast mode
[   55.760787][ T5842] bridge_slave_0: entered promiscuous mode
[   55.788170][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.790743][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.793203][ T5842] bridge_slave_1: entered allmulticast mode
[   55.796087][ T5842] bridge_slave_1: entered promiscuous mode
[   55.826027][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.834019][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.841167][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.905943][ T5842] team0: Port device team_slave_0 added
[   55.928214][ T5842] team0: Port device team_slave_1 added
[   55.936429][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.938712][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.941334][ T5851] bridge_slave_0: entered allmulticast mode
[   55.944712][ T5851] bridge_slave_0: entered promiscuous mode
[   55.984774][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.987729][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.999720][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.005853][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.008322][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.011207][ T5851] bridge_slave_1: entered allmulticast mode
[   56.014607][ T5851] bridge_slave_1: entered promiscuous mode
[   56.041997][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.045243][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.055624][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.078204][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.082985][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.133021][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.137672][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.140687][ T5846] bridge_slave_0: entered allmulticast mode
[   56.144929][ T5846] bridge_slave_0: entered promiscuous mode
[   56.149357][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.152337][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.155426][ T5846] bridge_slave_1: entered allmulticast mode
[   56.159412][ T5846] bridge_slave_1: entered promiscuous mode
[   56.187144][ T5851] team0: Port device team_slave_0 added
[   56.219202][ T5842] hsr_slave_0: entered promiscuous mode
[   56.222296][ T5842] hsr_slave_1: entered promiscuous mode
[   56.228547][ T5851] team0: Port device team_slave_1 added
[   56.233235][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.239998][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.292536][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.296128][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.307030][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.326168][ T5846] team0: Port device team_slave_0 added
[   56.335192][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.338025][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.349082][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.360623][ T5846] team0: Port device team_slave_1 added
[   56.426796][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.429631][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.440774][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.461081][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.465478][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.475704][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.485474][ T5851] hsr_slave_0: entered promiscuous mode
[   56.488438][ T5851] hsr_slave_1: entered promiscuous mode
[   56.491229][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   56.495670][ T5851] Cannot create hsr debugfs directory
[   56.611547][ T5846] hsr_slave_0: entered promiscuous mode
[   56.615316][ T5846] hsr_slave_1: entered promiscuous mode
[   56.618144][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   56.620472][ T5846] Cannot create hsr debugfs directory
[   56.777588][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.788845][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.820423][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.837042][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.878647][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.899744][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.905961][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.915846][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.956228][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.966595][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.974464][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.987848][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.071837][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.089770][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.122627][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   57.130897][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   57.146630][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.149645][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.155990][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.158617][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.175164][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.182465][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.185428][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.202183][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.205096][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.256577][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   57.269663][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.286715][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.289568][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.315209][  T603] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.318102][  T603] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.416833][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.475681][ T5844] Bluetooth: hci2: command tx timeout
[   57.476730][ T5235] Bluetooth: hci1: command tx timeout
[   57.478018][ T5844] Bluetooth: hci0: command tx timeout
[   57.526713][ T5851] veth0_vlan: entered promiscuous mode
[   57.535437][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.542673][ T5851] veth1_vlan: entered promiscuous mode
[   57.572094][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.608852][ T5851] veth0_macvtap: entered promiscuous mode
[   57.627079][ T5851] veth1_macvtap: entered promiscuous mode
[   57.631846][ T5842] veth0_vlan: entered promiscuous mode
[   57.651564][ T5842] veth1_vlan: entered promiscuous mode
[   57.655807][ T5846] veth0_vlan: entered promiscuous mode
[   57.659626][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.675022][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.690106][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.702008][ T5846] veth1_vlan: entered promiscuous mode
[   57.710491][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.714948][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.718570][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.729108][ T5842] veth0_macvtap: entered promiscuous mode
[   57.749968][ T5842] veth1_macvtap: entered promiscuous mode
[   57.780648][ T5846] veth0_macvtap: entered promiscuous mode
[   57.788667][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.796549][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.821526][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.825355][ T5846] veth1_macvtap: entered promiscuous mode
[   57.827757][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.830573][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.852482][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.860113][  T603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.868726][  T603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.890674][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.926635][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.935327][  T603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.943388][  T603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.951052][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.957306][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.960589][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.964231][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.967653][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.970973][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.000448][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.048177][  T603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.055080][  T603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.068231][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.077236][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.119412][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.132224][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.210887][ T5918] loop1: detected capacity change from 0 to 512
[   58.254613][ T5918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.259164][ T5918] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   58.296780][ T5918] EXT4-fs (loop1): shut down requested (2)
[   58.534835][ T5921] loop2: detected capacity change from 0 to 32768
[   58.538063][ T5921] XFS: noikeep mount option is deprecated.
[   58.574085][ T5921] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   58.627645][ T5921] XFS (loop2): Ending clean mount
[   58.642388][ T5921] XFS (loop2): Quotacheck needed: Please wait.
[   58.666511][ T5921] XFS (loop2): Quotacheck: Done.
[   58.721846][ T5846] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   59.329890][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.555188][ T5844] Bluetooth: hci1: command tx timeout
[   59.555807][   T54] Bluetooth: hci2: command tx timeout
[   59.558099][ T5844] Bluetooth: hci0: command tx timeout
[   59.720260][ T5961] loop0: detected capacity change from 0 to 128
[   59.724190][ T5961] EXT4-fs: Ignoring removed nobh option
[   59.737808][ T5961] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   59.742650][ T5961] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   60.045290][ T5842] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   60.737090][   T33] audit: type=1326 audit(1755341094.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.1.26" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[   60.745514][   T33] audit: type=1326 audit(1755341094.650:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.1.26" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[   60.754827][   T33] audit: type=1326 audit(1755341094.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.1.26" exe="/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[   60.764764][   T33] audit: type=1326 audit(1755341094.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.1.26" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[   60.772330][   T33] audit: type=1326 audit(1755341094.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5985 comm="syz.1.26" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[   61.455776][ T6005] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   61.519077][ T6010] vlan2: entered allmulticast mode
[   61.521092][ T6010] veth0_to_bond: entered allmulticast mode
[   61.632288][ T6017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.637417][ T5844] Bluetooth: hci2: command tx timeout
[   61.643664][ T5844] Bluetooth: hci0: command tx timeout
[   61.954007][ T5844] Bluetooth: hci1: command tx timeout
[   62.447470][ T6042] netlink: 20 bytes leftover after parsing attributes in process `syz.1.50'.
[   62.612231][ T6030] loop2: detected capacity change from 0 to 262144
[   62.626326][ T6030] F2FS-fs (loop2): invalid crc value
[   62.661911][ T6030] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   62.666884][ T6030] F2FS-fs (loop2): Start checkpoint disabled!
[   62.672152][ T6030] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   63.140211][ T6057] loop0: detected capacity change from 0 to 1764
[   63.725320][ T5844] Bluetooth: hci0: command tx timeout
[   63.725410][   T54] Bluetooth: hci2: command tx timeout
[   63.978776][ T6071] loop2: detected capacity change from 0 to 256
[   63.981685][ T6071] exfat: Deprecated parameter 'utf8'
[   63.983592][ T6071] exfat: Deprecated parameter 'namecase'
[   63.985811][ T6071] exfat: Deprecated parameter 'namecase'
[   63.988082][ T6071] exfat: Deprecated parameter 'utf8'
[   63.996958][ T6071] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   64.109422][ T6077] loop2: detected capacity change from 0 to 4096
[   64.113385][ T6077] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   64.126128][ T6077] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   64.136980][ T6077] ntfs3(loop2): ino=1e, mi_enum_attr
[   64.138906][ T6077] ntfs3(loop2): ino=1e, mi_enum_attr
[   64.250821][ T6083] loop0: detected capacity change from 0 to 8
[   64.257435][ T6083] SQUASHFS error: zlib decompression failed, data probably corrupt
[   64.260226][ T6083] SQUASHFS error: Failed to read block 0x9b: -5
[   64.262630][ T6083] SQUASHFS error: Unable to read metadata cache entry [99]
[   64.266474][ T6083] SQUASHFS error: Unable to read inode 0x127
[   64.491202][ T6089] loop0: detected capacity change from 0 to 32768
[   64.500618][ T6089] 
[   64.500618][ T6089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.500618][ T6089] 
[   64.525164][ T5842] 
[   64.525164][ T5842]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.525164][ T5842] 
[   64.535211][ T5842] 
[   64.535211][ T5842]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   64.535211][ T5842] 
[   64.655733][ T6095] loop2: detected capacity change from 0 to 32768
[   64.660793][ T6095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.72 (6095)
[   64.683533][ T6095] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   64.687414][ T6095] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   64.696836][ T6095] BTRFS info (device loop2): disk space caching is enabled
[   64.699770][ T6095] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   64.790575][ T6095] BTRFS info (device loop2): rebuilding free space tree
[   64.857892][ T6095] BTRFS info (device loop2): disabling free space tree
[   64.860900][ T6095] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   64.874827][ T6095] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   65.078737][ T5846] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   65.091890][ T6142] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   65.099099][   T33] audit: type=1800 audit(1755341099.010:7): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.88" name="file1" dev="tmpfs" ino=165 res=0 errno=0
[   65.540527][ T6152] loop2: detected capacity change from 0 to 32768
[   65.544221][ T6152] =======================================================
[   65.544221][ T6152] WARNING: The mand mount option has been deprecated and
[   65.544221][ T6152]          and is ignored by this kernel. Remove the mand
[   65.544221][ T6152]          option from the mount to silence this warning.
[   65.544221][ T6152] =======================================================
[   65.580240][ T6152] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   65.604636][ T6152] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[   65.609519][ T6152] XFS (loop2): Tail block (0x29) overwrite detected. Updated to 0x30
[   65.617053][ T6152] XFS (loop2): Ending clean mount
[   65.628264][ T6152] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1803 dinode
[   65.632189][ T6152] XFS (loop2): Unmount and run xfs_repair
[   65.634764][ T6152] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   65.637996][ T6152] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[   65.641448][ T6152] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   65.645481][ T6152] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[   65.648361][ T6152] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[   65.651515][ T6152] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   65.654823][ T6152] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[   65.657825][ T6152] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[   65.661296][ T6152] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[   65.681240][ T5846] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   66.015965][ T6170] loop2: detected capacity change from 0 to 128
[   66.021386][ T6170] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   66.047628][ T6170] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   66.292392][ T5852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   66.296693][ T5852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   66.299799][ T5852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   66.302912][ T5852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   66.311805][ T5852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   66.318949][ T5852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   66.322623][ T5852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   66.326228][ T5852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   66.329414][ T5852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   66.332708][ T5852] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   66.342560][ T5852] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[   66.388075][ T6194] loop0: detected capacity change from 0 to 128
[   66.392330][ T6194] befs: (loop0): No write support. Marking filesystem read-only
[   66.415018][ T6194] befs: (loop0): invalid magic header
[   66.480570][ T6200] loop0: detected capacity change from 0 to 512
[   66.522753][ T6200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   66.530715][ T6200] EXT4-fs (loop0): shut down requested (2)
[   66.564152][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.672084][ T6216] loop2: detected capacity change from 0 to 256
[   66.688298][   T33] audit: type=1326 audit(1755341100.590:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.0.120" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba73b8ebe9 code=0x7ffc0000
[   66.717690][   T33] audit: type=1326 audit(1755341100.610:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.0.120" exe="/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fba73b8ebe9 code=0x7ffc0000
[   66.748407][   T33] audit: type=1326 audit(1755341100.610:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.0.120" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba73b8ebe9 code=0x7ffc0000
[   66.782710][   T33] audit: type=1326 audit(1755341100.610:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6217 comm="syz.0.120" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba73b8ebe9 code=0x7ffc0000
[   67.778355][ T6234] netlink: 92 bytes leftover after parsing attributes in process `syz.2.126'.
[   67.786173][ T6234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.126'.
[   67.951143][ T6244] netlink: 'syz.2.131': attribute type 2 has an invalid length.
[   68.534385][ T5852] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   68.734881][ T5852] usb 1-1: Using ep0 maxpacket: 8
[   68.741204][ T5852] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   68.745061][ T5852] usb 1-1: config 0 has no interface number 0
[   68.747614][ T5852] usb 1-1: config 0 interface 1 has no altsetting 0
[   68.752912][ T5852] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[   68.759653][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.762963][ T5852] usb 1-1: Product: syz
[   68.764924][ T5852] usb 1-1: Manufacturer: syz
[   68.766998][ T5852] usb 1-1: SerialNumber: syz
[   68.777059][ T5852] usb 1-1: config 0 descriptor??
[   68.989359][ T5852] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22
[   69.087303][ T6265] loop2: detected capacity change from 0 to 256
[   69.091460][ T6265] FAT-fs (loop2): bogus sectors per cluster 0
[   69.097439][ T6265] FAT-fs (loop2): Can't find a valid FAT filesystem
[   69.192302][   T51] usb 1-1: USB disconnect, device number 2
[   69.373596][ T5894] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   69.523644][ T5894] usb 3-1: Using ep0 maxpacket: 16
[   69.530634][ T5894] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30
[   69.535782][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.540305][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[   69.551371][ T5894] usb 3-1: New USB device found, idVendor=1e71, idProduct=2006, bcdDevice= 0.00
[   69.557310][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.572217][ T5894] usb 3-1: config 0 descriptor??
[   69.996842][ T5894] nzxt-smart2 0003:1E71:2006.0002: item fetching failed at offset 10/11
[   70.001360][ T5894] nzxt-smart2 0003:1E71:2006.0002: probe with driver nzxt-smart2 failed with error -22
[   70.200512][ T5894] usb 3-1: USB disconnect, device number 2
[   70.569834][ T6303] capability: warning: `syz.1.153' uses deprecated v2 capabilities in a way that may be insecure
[   71.087420][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.089834][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.275842][ T6315] loop2: detected capacity change from 0 to 32768
[   71.282601][ T6315] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.157 (6315)
[   71.317363][ T6315] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   71.331971][ T6315] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   71.427112][ T6315] BTRFS info (device loop2): rebuilding free space tree
[   71.443599][ T6315] BTRFS info (device loop2): disabling free space tree
[   71.449867][ T6315] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   71.454023][ T6315] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   71.618126][ T5846] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   72.011883][ T6378] loop0: detected capacity change from 0 to 8
[   72.031588][ T6378] SQUASHFS error: xz decompression failed, data probably corrupt
[   72.038990][ T6378] SQUASHFS error: Failed to read block 0x108: -5
[   72.041097][ T6378] SQUASHFS error: Unable to read metadata cache entry [106]
[   72.045624][ T6378] SQUASHFS error: Unable to read inode 0x11f
[   72.137113][ T6386] loop0: detected capacity change from 0 to 256
[   72.152164][ T6386] exfat: Deprecated parameter 'utf8'
[   72.260841][ T6377] loop2: detected capacity change from 0 to 32768
[   72.284576][ T6377] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   72.339287][ T5846] ocfs2: Unmounting device (7,2) on (node local)
[   72.493988][ T6402] loop2: detected capacity change from 0 to 2048
[   72.506654][ T6402] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.535310][ T5852] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   72.559277][ T6406] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   72.693915][ T5852] usb 1-1: Using ep0 maxpacket: 16
[   72.697941][ T5852] usb 1-1: config 252 has an invalid interface number: 165 but max is 0
[   72.701214][ T5852] usb 1-1: config 252 has no interface number 0
[   72.704608][ T5852] usb 1-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd
[   72.708999][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.722946][ T5852] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[   72.732349][ T5852] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[   72.928518][ T5894] usb 1-1: USB disconnect, device number 3
[   73.111505][ T6423] loop2: detected capacity change from 0 to 32768
[   73.150302][ T6423] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[   73.150314][ T6423]   allowing incompatible features above 0.0: (unknown version)
[   73.150318][ T6423]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   73.167451][ T6423] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   73.170803][ T6423] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[   73.174062][ T6423] bcachefs (loop2): Version upgrade required:
[   73.174062][ T6423] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   73.174062][ T6423] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   73.174062][ T6423]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   73.205469][ T6423] bcachefs (loop2): dropping and reconstructing all alloc info
[   73.219509][ T6423] bcachefs (loop2): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0: (unpack error)
[   73.219550][ T6423]   invalid variable length fields, deleting
[   73.231555][ T6423] bcachefs (loop2): accounting_read... done
[   73.236173][ T6423] bcachefs (loop2): alloc_read... done
[   73.238904][ T6423] bcachefs (loop2): snapshots_read... done
[   73.241776][ T6423] bcachefs (loop2): check_allocations... done
[   73.259836][ T6423] bcachefs (loop2): going read-write
[   73.284550][ T6423] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[   73.289432][ T6423] bcachefs (loop2): done starting filesystem
[   73.302194][ T6423] bcachefs (loop2): dirent to missing inode:
[   73.302227][ T6423]   u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir
[   73.302235][ T6423]   emergency read only at seq 11
[   73.311569][ T5894] bcachefs (loop2): going read-only
[   73.327123][ T5894] bcachefs (loop2): finished waiting for writes to stop
[   73.336286][ T5894] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11
[   73.339987][ T5894] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11
[   73.340084][ T5846] bcachefs (loop2): shutting down
[   73.346697][ T5894] bcachefs (loop2): unclean shutdown complete, journal seq 11
[   73.352210][ T5894] bcachefs (loop2): done going read-only, filesystem not clean
[   73.376843][ T5846] bcachefs (loop2): shutdown complete
[   74.686212][ T6476] loop2: detected capacity change from 0 to 4096
[   74.701177][ T6476] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   74.735218][ T6476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.778349][ T6480] gtp0: entered promiscuous mode
[   74.780491][ T6480] gtp0: entered allmulticast mode
[   74.851745][ T6483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.215'.
[   74.855197][ T6483] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[   75.068722][   T33] audit: type=1326 audit(1755341108.980:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.0.221" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba73b8ebe9 code=0x0
[   75.510920][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.723124][ T6508] netlink: 'syz.2.227': attribute type 11 has an invalid length.
[   76.219996][ T6517] [U] Y
[   76.954624][ T5894] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   77.103770][ T5894] usb 3-1: Using ep0 maxpacket: 8
[   77.121525][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short
[   77.134924][ T5894] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[   77.138472][ T5894] usb 3-1: config 0 has no interface number 0
[   77.141124][ T5894] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   77.159375][ T5894] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[   77.176727][ T5894] usb 3-1: config 0 interface 88 has no altsetting 0
[   77.191711][ T5894] usb 3-1: string descriptor 0 read error: -22
[   77.196595][ T5894] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   77.203620][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   77.214615][ T5894] usb 3-1: config 0 descriptor??
[   77.226960][ T5894] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input4
[   77.236227][ T6537] fuse: Bad value for 'fd'
[   77.318464][ T5854] udevd[5854]: Error opening device "/dev/input/event3": Input/output error
[   77.322286][ T5854] udevd[5854]: Unable to EVIOCGABS device "/dev/input/event3"
[   77.328955][ T6539] syz.1.241 uses obsolete (PF_INET,SOCK_PACKET)
[   77.329038][ T5854] udevd[5854]: Unable to EVIOCGABS device "/dev/input/event3"
[   77.351838][ T6535] loop0: detected capacity change from 0 to 32768
[   77.360872][ T6535] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type clock overruns end of section
[   77.360872][ T6535] clean (size 2912):
[   77.360872][ T6535] flags:          0
[   77.360872][ T6535] journal_seq:    10
[   77.360872][ T6535] dev_usage: 
[   77.360872][ T6535] usage: type=key_version v=0
[   77.360872][ T6535] (unknown jset_entry_type 255)
[   77.360872][ T6535] usage: type=reserved v=0
[   77.360872][ T6535] usage: type=reserved v=0
[   77.360872][ T6535] usage: type=reserved v=0
[   77.360872][ T6535] data_usage: btree: 1/1 [0]=2816
[   77.360872][ T6535] data_usage: journal: 1/1 [0]=0
[   77.360872][ T6535] data_usage: user: 1/1 [0]=16
[   77.360872][ T6535] dev_usage: dev=0  
[   77.360872][ T6535]   free: buckets=83 sectors=0 fragmented=0
[   77.360872][ T6535]   sb: buckets=25 sectors=6152 fragmented=248
[   77.360872][ T6535]   journal: buckets=8 sectors=2048 fragmented=0
[   77.360872][ T6535]   btree: buckets=11 sectors=2816 fragmented=0
[   77.360872][ T6535]   user: buckets=1 sectors=16 fragmented=240
[   77.360872][ T6535]   cached: buckets=0 sectors=0 fragmented=0
[   77.360872][ T6535]   parity: buckets=0 sectors=0 fragmented=0
[   77.360872][ T6535]   stripe: buckets=0 sectors=0 fragmented=0
[   77.360872][ T6535]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[   77.360872][ T6535]   need_discard: buckets=0 sectors=0 fragmented=0
[   77.360872][ T6535] 
[   77.408823][ T6535] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[   77.421795][ T5894] usb 3-1: USB disconnect, device number 3
[   78.006452][   T33] audit: type=1326 audit(1755341111.920:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.0.254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba73b8ebe9 code=0x7ffc0000
[   78.024035][   T33] audit: type=1326 audit(1755341111.930:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.0.254" exe="/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fba73b8ebe9 code=0x7ffc0000
[   78.030952][   T33] audit: type=1326 audit(1755341111.930:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.0.254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba73b8ebe9 code=0x7ffc0000
[   78.045454][   T33] audit: type=1326 audit(1755341111.930:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6579 comm="syz.0.254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba73b8ebe9 code=0x7ffc0000
[   78.199679][ T6586] loop2: detected capacity change from 0 to 32768
[   78.579834][ T6596] loop2: detected capacity change from 0 to 1024
[   78.587538][ T6596] EXT4-fs: Ignoring removed bh option
[   78.613199][ T6596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   78.628262][ T6596] EXT4-fs: Ignoring removed orlov option
[   78.631170][ T6596] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.261: Abort forced by user
[   78.637001][ T6596] EXT4-fs (loop2): Remounting filesystem read-only
[   78.639178][ T6596] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-001000000000.
[   78.652791][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   79.378354][ T6614] loop0: detected capacity change from 0 to 128
[   79.385641][ T6614] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.390080][ T6614] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   79.425986][ T5842] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.543114][ T6621] netlink: 'syz.0.270': attribute type 1 has an invalid length.
[   79.641752][ T6625] loop2: detected capacity change from 0 to 2048
[   79.647482][ T6625] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   79.653588][ T6625] EXT4-fs (loop2): group descriptors corrupted!
[   79.983343][ T6637] loop0: detected capacity change from 0 to 32768
[   80.012406][ T6637] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   80.088196][ T5842] ocfs2: Unmounting device (7,0) on (node local)
[   80.129712][ T6645] loop2: detected capacity change from 0 to 32768
[   80.144908][   T33] audit: type=1800 audit(1755341114.050:17): pid=6651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.285" name="bus" dev="tmpfs" ino=601 res=0 errno=0
[   80.186244][ T6645] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   80.202468][ T6645] XFS (loop2): Ending clean mount
[   80.251022][ T5846] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   80.711146][ T6685] loop2: detected capacity change from 0 to 65536
[   80.941555][ T6685] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   80.975484][ T6685] XFS (loop2): Ending clean mount
[   80.980727][ T6685] XFS (loop2): Quotacheck needed: Please wait.
[   81.001166][ T6685] XFS (loop2): Quotacheck: Done.
[   81.020663][ T5846] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   81.333165][   T96] cfg80211: failed to load regulatory.db
[   81.504672][ T6435] block nbd0: Receive control failed (result -32)
[   81.805067][ T5907] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   82.216136][ T5907] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[   82.219069][ T5907] usb 3-1: config 0 has no interface number 0
[   82.221477][ T5907] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[   82.225823][ T5907] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[   82.230190][ T5907] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 43776, setting to 64
[   82.236697][ T5907] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[   82.240236][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.243282][ T5907] usb 3-1: Product: syz
[   82.245253][ T5907] usb 3-1: Manufacturer: syz
[   82.247004][ T5907] usb 3-1: SerialNumber: syz
[   82.251035][ T5907] usb 3-1: config 0 descriptor??
[   82.254038][ T6712] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   82.257978][ T6712] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   82.262407][ T5907] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[   82.270104][ T5907] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[   82.466913][ T2329] usb 3-1: USB disconnect, device number 4
[   82.479236][ T2329] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[   82.492427][ T2329] cyberjack 3-1:0.69: device disconnected
[   83.642043][ T6739] loop0: detected capacity change from 0 to 32768
[   83.646769][ T6739] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.316 (6739)
[   83.654599][ T6739] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   83.659324][ T6739] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   83.667717][ T6739] BTRFS info (device loop0): using free-space-tree
[   83.801288][ T5842] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   84.850275][ T6786] loop2: detected capacity change from 0 to 128
[   84.874172][ T6786] hpfs: hpfs_map_sector(): read error
[   85.143554][ T2329] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   85.313787][ T2329] usb 3-1: Using ep0 maxpacket: 16
[   85.317767][ T2329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.322084][ T2329] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   85.329445][ T2329] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   85.343523][ T2329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.347008][ T2329] usb 3-1: Product: syz
[   85.348812][ T2329] usb 3-1: Manufacturer: syz
[   85.350808][ T2329] usb 3-1: SerialNumber: syz
[   85.566607][ T2329] usb 3-1: 0:2 : does not exist
[   85.569050][ T2329] usb 3-1: unit 9 not found!
[   85.575626][ T2329] usb 3-1: 4:0: cannot get min/max values for control 1 (id 4)
[   85.582826][ T2329] usb 3-1: 4:0: cannot get min/max values for control 2 (id 4)
[   85.590728][ T2329] usb 3-1: 4:0: cannot get min/max values for control 3 (id 4)
[   85.606271][ T2329] usb 3-1: USB disconnect, device number 5
[   86.122207][ T6796] loop2: detected capacity change from 0 to 7
[   86.126604][ T6796] Dev loop2: unable to read RDB block 7
[   86.128442][ T6796]  loop2: AHDI p2
[   86.129702][ T6796] loop2: partition table partially beyond EOD, truncated
[   86.403566][ T5907] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   86.553552][ T5907] usb 3-1: Using ep0 maxpacket: 16
[   86.558575][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.562785][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.567232][ T5907] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   86.570799][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.576754][ T5907] usb 3-1: config 0 descriptor??
[   87.037412][ T5907] hid_parser_main: 73 callbacks suppressed
[   87.037423][ T5907] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[   87.041669][ T5907] savu 0003:1E7D:2D5A.0003: item fetching failed at offset 3/5
[   87.056569][ T5907] savu 0003:1E7D:2D5A.0003: parse failed
[   87.058476][ T5907] savu 0003:1E7D:2D5A.0003: probe with driver savu failed with error -22
[   87.231013][ T2329] usb 3-1: USB disconnect, device number 6
[   87.262001][ T6815] loop0: detected capacity change from 0 to 32768
[   87.274427][ T6815] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.342 (6815)
[   87.287696][ T6815] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   87.291413][ T6815] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   87.295360][ T6815] BTRFS info (device loop0): disk space caching is enabled
[   87.297731][ T6815] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   87.392601][ T6815] BTRFS info (device loop0): rebuilding free space tree
[   87.413048][ T6815] BTRFS info (device loop0): disabling free space tree
[   87.416412][ T6815] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   87.420140][ T6815] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   87.440187][   T33] audit: type=1800 audit(1755341121.350:18): pid=6815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.342" name="file1" dev="loop0" ino=260 res=0 errno=0
[   87.475556][ T5842] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   87.787330][ T6853] loop0: detected capacity change from 0 to 1024
[   87.791670][ T6853] EXT4-fs: Ignoring removed orlov option
[   87.800195][ T6853] EXT4-fs (loop0): invalid inodes per group: 0
[   87.800195][ T6853] 
[   87.860410][ T6855] loop2: detected capacity change from 0 to 512
[   87.879742][ T6855] EXT4-fs: Ignoring removed mblk_io_submit option
[   87.882684][ T6855] EXT4-fs: inline encryption not supported
[   87.889207][ T6855] EXT4-fs: Ignoring removed mblk_io_submit option
[   87.891859][ T6855] EXT4-fs: Ignoring removed nomblk_io_submit option
[   87.901524][ T6855] EXT4-fs (loop2): Test dummy encryption mode enabled
[   87.907598][ T6855] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   87.912204][ T6855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   87.924985][ T6855] EXT4-fs (loop2): 1 truncate cleaned up
[   87.927943][ T6855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.951954][ T6862] loop0: detected capacity change from 0 to 128
[   87.962920][ T6862] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[   88.077096][ T6855] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[   88.108907][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.178636][ T6874] netlink: 'syz.2.359': attribute type 39 has an invalid length.
[   88.311231][ T6877] loop0: detected capacity change from 0 to 32768
[   88.317416][ T6877] XFS (loop0): invalid logbufsize: 4 [not 16k,32k,64k,128k or 256k]
[   88.883650][ T5852] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   88.956134][ T6893] loop0: detected capacity change from 0 to 32768
[   89.035356][ T5852] usb 3-1: config index 0 descriptor too short (expected 240, got 45)
[   89.038117][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.041588][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.047606][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.051068][ T5852] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.28
[   89.054872][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.058862][ T5852] usb 3-1: config 0 descriptor??
[   89.478871][ T5852] kye 0003:0458:0087.0004: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0
[   89.626206][ T6915] openvswitch: netlink: Message has 4 unknown bytes.
[   89.676464][ T5907] usb 3-1: USB disconnect, device number 7
[   89.741378][ T6919] IPv6: NLM_F_REPLACE set, but no existing node found!
[   90.127698][ T6925] loop0: detected capacity change from 0 to 32768
[   90.131921][ T6925] (syz.0.380,6925,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   90.137074][ T6925] (syz.0.380,6925,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   90.146464][ T6925] JBD2: Ignoring recovery information on journal
[   90.169437][ T6925] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   90.219333][ T5842] ocfs2: Unmounting device (7,0) on (node local)
[   90.331508][ T6935] loop0: detected capacity change from 0 to 128
[   90.347388][ T6935] EXT4-fs (loop0): Test dummy encryption mode enabled
[   90.356693][ T6935] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.361201][ T6935] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.461788][ T6935] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   90.484009][ T6949] loop2: detected capacity change from 0 to 16
[   90.488868][ T6949] erofs (device loop2): unidentified algorithms fff0, please upgrade kernel
[   90.528536][ T5842] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   90.613174][ T6959] tipc: Started in network mode
[   90.616984][ T6959] tipc: Node identity 721ebc9b0265, cluster identity 4711
[   90.620145][ T6959] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.624242][ T6959] syzkaller0: entered promiscuous mode
[   90.626564][ T6959] syzkaller0: entered allmulticast mode
[   90.646962][ T6959] tipc: Resetting bearer <eth:syzkaller0>
[   90.651864][ T6958] tipc: Resetting bearer <eth:syzkaller0>
[   90.662571][ T6958] tipc: Disabling bearer <eth:syzkaller0>
[   90.920640][ T6979] loop2: detected capacity change from 0 to 512
[   90.949008][ T6979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.952974][ T6979] ext4 filesystem being mounted at /110/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.961011][ T6979] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.403: corrupted xattr block 33: overlapping e_value 
[   90.968059][   T33] audit: type=1800 audit(1755341124.880:19): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.403" name="file1" dev="loop2" ino=15 res=0 errno=0
[   90.977973][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.013163][ T6989] netlink: 676 bytes leftover after parsing attributes in process `syz.2.406'.
[   91.017028][ T6989] netlink: 676 bytes leftover after parsing attributes in process `syz.2.406'.
[   91.068630][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[   91.178165][ T7007] loop2: detected capacity change from 0 to 2048
[   91.185923][ T7007] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   91.190171][ T7007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.095032][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.420'.
[   92.477260][ T7036] fuse: Bad value for 'fd'
[   93.463620][ T5907] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   93.623550][ T5907] usb 3-1: Using ep0 maxpacket: 16
[   93.629584][ T5907] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   93.632806][ T5907] usb 3-1: config 0 has no interface number 0
[   93.638183][ T5907] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   93.641860][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.646770][ T5907] usb 3-1: Product: syz
[   93.648531][ T5907] usb 3-1: Manufacturer: syz
[   93.650440][ T5907] usb 3-1: SerialNumber: syz
[   93.657024][ T5907] usb 3-1: config 0 descriptor??
[   93.667601][ T5907] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   94.768554][ T7075] sctp: [Deprecated]: syz.1.443 (pid 7075) Use of struct sctp_assoc_value in delayed_ack socket option.
[   94.768554][ T7075] Use struct sctp_sack_info instead
[   95.277310][ T5907] gspca_spca1528: reg_r err -71
[   95.280385][ T5907] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[   95.285990][ T5907] usb 3-1: USB disconnect, device number 8
[   95.949703][ T7085] loop2: detected capacity change from 0 to 1024
[   96.250213][ T7095] loop2: detected capacity change from 0 to 32768
[   96.257092][ T7095] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.449 (7095)
[   96.272146][ T7095] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   96.275855][ T7095] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   96.279873][ T7095] BTRFS info (device loop2): using free-space-tree
[   97.098435][ T5846] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   97.201731][ T7137] netlink: 240 bytes leftover after parsing attributes in process `syz.2.459'.
[   97.204793][ T7137] NCSI netlink: No device for ifindex 1024
[   97.255672][ T7139] loop2: detected capacity change from 0 to 8
[   97.275509][ T7139] SQUASHFS error: xz decompression failed, data probably corrupt
[   97.278387][ T7139] SQUASHFS error: Failed to read block 0x108: -5
[   97.280558][ T7139] SQUASHFS error: Unable to read metadata cache entry [106]
[   97.282965][ T7139] SQUASHFS error: Unable to read inode 0x11f
[   97.338939][ T7144] loop2: detected capacity change from 0 to 4096
[   97.362563][ T7145] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.380101][   T33] audit: type=1804 audit(1755341131.290:20): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.461" name="/newroot/131/file0/file1" dev="loop2" ino=15 res=1 errno=0
[   97.633251][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.465'.
[   98.729438][ T7174] loop2: detected capacity change from 0 to 4096
[   98.733151][ T7174] ntfs3(loop2): It is recommened to use chkdsk.
[   98.737406][ T7174] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[   98.740115][ T7174] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[   98.743093][ T7174] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[   98.746281][ T7174] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[   98.749298][ T7174] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00
[   98.752144][ T7174] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00
[   98.756217][ T7174] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00
[   98.759203][ T7174] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00
[   98.761880][ T7174] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00
[   98.822704][ T7182] warning: `syz.1.476' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   98.916632][ T7192] loop2: detected capacity change from 0 to 512
[   98.947954][ T7192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.952248][ T7192] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.036783][ T7196] syz.2.482 (7196) used greatest stack depth: 18520 bytes left
[   99.060062][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.300991][ T7219] netlink: 'syz.2.493': attribute type 1 has an invalid length.
[   99.303567][ T7219] netlink: 144 bytes leftover after parsing attributes in process `syz.2.493'.
[   99.307089][ T7219] netlink: 96 bytes leftover after parsing attributes in process `syz.2.493'.
[   99.584945][ T5852] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   99.866171][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[   99.871322][ T5852] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   99.875500][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.880391][ T5852] usb 3-1: config 0 descriptor??
[   99.884611][ T7221] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  100.011085][ T7233] loop0: detected capacity change from 0 to 40427
[  100.021045][ T7233] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  100.026668][ T7233] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  100.064742][ T7233] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  100.072488][ T7233] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  100.075174][ T7233] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  100.092434][ T5852] ath6kl: Failed to submit usb control message: -71
[  100.095820][ T5852] ath6kl: unable to send the bmi data to the device: -71
[  100.099570][ T5852] ath6kl: Unable to send get target info: -71
[  100.109084][ T5852] ath6kl: Failed to init ath6kl core: -71
[  100.112114][ T5852] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  100.131808][ T5852] usb 3-1: USB disconnect, device number 9
[  100.644074][ T7248] ip6gre1: entered promiscuous mode
[  100.852231][ T7253] process 'syz.1.503' launched './file0' with NULL argv: empty string added
[  101.963597][ T5907] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  102.115429][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.119892][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.124686][ T5907] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  102.128408][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.138532][ T5907] usb 3-1: config 0 descriptor??
[  102.554929][ T5907] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  102.748380][ T5907] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00
[  103.154274][ T5907] cp2112 0003:10C4:EA90.0005: error setting SMBus config
[  103.178292][ T5907] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -71
[  103.264913][ T5907] usb 3-1: USB disconnect, device number 10
[  103.554141][ T7289] loop0: detected capacity change from 0 to 32768
[  103.568068][ T7289] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.519 (7289)
[  103.583123][ T7289] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.588675][ T7289] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  103.592274][ T7289] BTRFS info (device loop0): using free-space-tree
[  103.798750][ T5842] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.109126][ T7325] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  104.109126][ T7325] The task syz.2.527 (7325) triggered the difference, watch for misbehavior.
[  104.329856][ T7335] loop0: detected capacity change from 0 to 2048
[  104.364719][ T7336] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.408653][ T7335] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2097152)
[  104.418841][ T7335] Remounting filesystem read-only
[  104.431994][ T5842] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  104.908570][ T7356] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.542'.
[  105.001553][ T7363] loop2: detected capacity change from 0 to 2048
[  105.022742][ T7363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.164022][ T2329] kernel write not supported for file /media6 (pid: 2329 comm: kworker/0:3)
[  105.406361][ T7382] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.251599][   T33] audit: type=1326 audit(1755341140.160:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.560" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[  106.268371][   T33] audit: type=1326 audit(1755341140.180:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.560" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[  106.291763][   T33] audit: type=1326 audit(1755341140.180:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.560" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[  106.298854][ T7399] vlan2: entered promiscuous mode
[  106.300955][ T7399] macvtap0: entered promiscuous mode
[  106.310797][   T33] audit: type=1326 audit(1755341140.180:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.560" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[  106.319029][   T33] audit: type=1326 audit(1755341140.180:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.560" exe="/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[  106.326531][   T33] audit: type=1326 audit(1755341140.180:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.560" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[  106.335871][   T33] audit: type=1326 audit(1755341140.180:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.1.560" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45aab8ebe9 code=0x7ffc0000
[  106.474794][ T2329] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  106.643717][ T2329] usb 3-1: Using ep0 maxpacket: 8
[  106.648190][ T2329] usb 3-1: config index 0 descriptor too short (expected 1821, got 853)
[  106.651015][ T2329] usb 3-1: config 0 has an invalid interface number: 103 but max is 2
[  106.661907][ T2329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.667967][ T2329] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  106.671587][ T2329] usb 3-1: config 0 has no interface number 1
[  106.678437][ T2329] usb 3-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  106.680287][ T7406] loop0: detected capacity change from 0 to 32768
[  106.682834][ T2329] usb 3-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  106.687068][ T7406] ERROR: (device loop0): xtSearch: xt_getpage: xtree page corrupt
[  106.687068][ T7406] 
[  106.694833][ T7406] xtLookup: xtSearch returned -5
[  106.696879][ T7406] read_mapping_page failed!
[  106.698785][ T7406] jfs_mount: dbMount failed w/rc = -5
[  106.699970][ T2329] usb 3-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[  106.701325][ T7406] Mount JFS Failure: -5
[  106.706427][ T2329] usb 3-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  106.711006][ T2329] usb 3-1: config 0 interface 103 has no altsetting 0
[  106.717320][ T7406] jfs_mount failed w/return code = -5
[  106.721927][ T2329] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4
[  106.731502][ T2329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.736331][ T2329] usb 3-1: Product: syz
[  106.740512][ T2329] usb 3-1: Manufacturer: syz
[  106.742004][ T2329] usb 3-1: SerialNumber: syz
[  106.748691][ T2329] usb 3-1: config 0 descriptor??
[  106.974498][ T2329] videodev: could not get a free minor
[  106.976352][ T2329] dsbr100 3-1:0.0: couldn't register video device
[  106.978429][ T2329] dsbr100 3-1:0.0: probe with driver dsbr100 failed with error -23
[  106.982152][ T2329] usb 3-1: USB disconnect, device number 11
[  107.569484][ T7454] netlink: 76 bytes leftover after parsing attributes in process `syz.1.588'.
[  107.937379][ T7470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.594'.
[  108.911587][ T7479] overlayfs: failed to clone upperpath
[  109.953162][ T7491] syz.1.603: attempt to access beyond end of device
[  109.953162][ T7491] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0
[  109.959530][ T7491] EXT4-fs (loop3): unable to read superblock
[  110.036928][ T7495] netlink: 'syz.1.605': attribute type 34 has an invalid length.
[  110.601646][ T7510] netlink: 52 bytes leftover after parsing attributes in process `syz.0.610'.
[  110.870813][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'.
[  110.883136][ T7516] bond_slave_0: entered promiscuous mode
[  110.885728][ T7516] bond_slave_1: entered promiscuous mode
[  110.892894][ T7516] macvtap1: entered promiscuous mode
[  110.895412][ T7516] bond0: entered promiscuous mode
[  110.898019][ T7516] macvtap1: entered allmulticast mode
[  110.900496][ T7516] bond0: entered allmulticast mode
[  110.902868][ T7516] bond_slave_0: entered allmulticast mode
[  110.907553][ T7516] bond_slave_1: entered allmulticast mode
[  110.912788][ T7516] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  111.003321][ T7518] loop2: detected capacity change from 0 to 16
[  111.008501][ T7518] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  111.105690][ T7522] Illegal XDP return value 1490155124 on prog  (id 64) dev N/A, expect packet loss!
[  112.217736][   T54] Bluetooth: hci2: Malformed Event: 0x2f
[  112.329785][ T7551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.628'.
[  112.387865][ T7554] loop2: detected capacity change from 0 to 1024
[  112.429432][ T7554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.454126][ T7554] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  112.465666][ T7554] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  112.471166][ T7554] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 2 with error 28
[  112.476023][ T7554] EXT4-fs (loop2): This should not happen!! Data will be lost
[  112.476023][ T7554] 
[  112.479163][ T7554] EXT4-fs (loop2): Total free blocks count 0
[  112.481242][ T7554] EXT4-fs (loop2): Free/Dirty block details
[  112.485584][ T7554] EXT4-fs (loop2): free_blocks=20480
[  112.487713][ T7554] EXT4-fs (loop2): dirty_blocks=48
[  112.489590][ T7554] EXT4-fs (loop2): Block reservation details
[  112.491614][ T7554] EXT4-fs (loop2): i_reserved_data_blocks=3
[  112.499078][   T33] audit: type=1804 audit(1755341146.410:28): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.629" name="/newroot/177/file1/file1" dev="loop2" ino=15 res=1 errno=0
[  112.507543][ T7554] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  113.397815][   T33] audit: type=1326 audit(1755341147.310:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.2.633" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe890d8ebe9 code=0x7fc00000
[  113.710660][ T7586] bridge_slave_0: default FDB implementation only supports local addresses
[  114.303110][ T7599] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  114.475034][ T7605] loop2: detected capacity change from 0 to 512
[  114.480894][ T7605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  114.519669][ T7605] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.649: corrupted xattr entries
[  114.527143][ T7605] EXT4-fs (loop2): 1 truncate cleaned up
[  114.530484][ T7605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.537498][ T7605] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.649: corrupted in-inode xattr: e_name out of bounds
[  114.561844][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.910914][ T7620] overlayfs: failed to clone upperpath
[  114.957005][ T7603] loop0: detected capacity change from 0 to 131072
[  114.979043][ T7603] F2FS-fs (loop0): invalid crc value
[  115.018054][ T7603] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  115.033403][ T7603] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  115.094511][   T33] audit: type=1800 audit(1755341149.010:30): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.648" name="bus" dev="loop0" ino=10 res=0 errno=0
[  115.518072][ T7642] loop2: detected capacity change from 0 to 32768
[  116.549663][ T7687] loop2: detected capacity change from 0 to 8
[  116.566574][   T33] audit: type=1800 audit(1755341150.480:31): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.686" name="file1" dev="loop2" ino=5 res=0 errno=0
[  116.586609][ T7687] SQUASHFS error: Failed to read block 0x2fc: -5
[  116.589576][ T7687] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  116.593010][ T7687] SQUASHFS error: read_indexes: reading block [2fa:0]
[  116.596607][ T7687] SQUASHFS error: Failed to read block 0xfc: -5
[  116.599133][ T7687] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  116.601998][ T7687] SQUASHFS error: read_indexes: reading block [2fa:0]
[  116.604764][ T7687] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  116.607483][ T7687] SQUASHFS error: read_indexes: reading block [2fa:0]
[  116.610229][ T7687] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  116.613077][ T7687] SQUASHFS error: read_indexes: reading block [2fa:0]
[  116.616396][ T7687] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  116.619106][ T7687] SQUASHFS error: read_indexes: reading block [2fa:0]
[  117.682939][ T7705] loop0: detected capacity change from 0 to 2048
[  117.716451][ T7705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.776447][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.894605][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'.
[  118.798623][ T7754] loop2: detected capacity change from 0 to 512
[  118.836223][ T7754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.896343][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.976540][ T7758] loop2: detected capacity change from 0 to 1024
[  119.009731][ T7758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.111076][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.339344][ T7764] usb usb1: check_ctrlrecip: process 7764 (syz.2.719) requesting ep 01 but needs 81
[  119.351459][ T7764] usb usb1: usbfs: process 7764 (syz.2.719) did not claim interface 0 before use
[  119.479516][   T96] IPVS: starting estimator thread 0...
[  119.482921][ T7770] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  119.603584][ T7773] IPVS: using max 80 ests per chain, 192000 per kthread
[  119.970801][ T7788] loop2: detected capacity change from 0 to 8
[  120.641120][ T7805] loop0: detected capacity change from 0 to 4096
[  120.652443][ T7805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.663575][ T7805] fs-verity (loop0, inode 16): Unknown hash algorithm number: 0
[  120.683906][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.719008][ T7808] netlink: 'syz.0.737': attribute type 3 has an invalid length.
[  120.721647][ T7808] netlink: 'syz.0.737': attribute type 1 has an invalid length.
[  120.724569][ T7808] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.737'.
[  122.936994][ T7842] futex_wake_op: syz.1.749 tries to shift op by 32; fix this program
[  123.036654][ T7850] loop2: detected capacity change from 0 to 256
[  123.053498][ T7850] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  123.176797][ T7841] loop0: detected capacity change from 0 to 32768
[  123.213415][ T7841] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  123.241608][ T5842] ocfs2: Unmounting device (7,0) on (node local)
[  123.277694][ T7867] netlink: 'syz.1.762': attribute type 4 has an invalid length.
[  123.594578][ T7876] loop0: detected capacity change from 0 to 512
[  123.599106][ T7876] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  123.608456][ T7876] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:169: inode #17: comm syz.0.761: inline data xattr refers to an external xattr inode
[  123.615107][ T7876] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.761: couldn't read orphan inode 17 (err -117)
[  123.621818][ T7876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.649345][ T5842] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.813591][ T7887] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  123.818684][ T7887] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  123.916505][ T7891] netlink: 'syz.0.770': attribute type 5 has an invalid length.
[  124.046727][ T7897] loop0: detected capacity change from 0 to 1024
[  124.059364][ T7897] hfsplus: failed to load root directory
[  124.340515][ T7899] loop0: detected capacity change from 0 to 40427
[  124.405823][ T7899] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  124.410431][ T7899] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  124.605767][ T7925] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  124.678723][ T7928] syz.0.774: attempt to access beyond end of device
[  124.678723][ T7928] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  124.687312][ T7928] syz.0.774: attempt to access beyond end of device
[  124.687312][ T7928] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  124.695632][ T7928] syz.0.774: attempt to access beyond end of device
[  124.695632][ T7928] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  124.799613][   T33] audit: type=1326 audit(1755343734.617:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.0.774" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba73b8ebe9 code=0x0
[  124.870036][ T7933] delete_channel: no stack
[  124.887915][ T7936] loop2: detected capacity change from 0 to 256
[  124.890552][ T7936] exfat: Deprecated parameter 'utf8'
[  124.892378][ T7936] exfat: Deprecated parameter 'namecase'
[  124.894805][ T7936] exfat: Deprecated parameter 'namecase'
[  124.897161][ T7936] exfat: Deprecated parameter 'utf8'
[  124.907927][ T7936] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[  124.977924][ T7942] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.984072][ T7942] bond0: (slave rose0): Enslaving as an active interface with an up link
[  125.023315][ T5842] syz-executor: attempt to access beyond end of device
[  125.023315][ T5842] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  125.050658][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  125.050679][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.050685][ T5842] Call Trace:
[  125.050689][ T5842]  <TASK>
[  125.050692][ T5842]  dump_stack_lvl+0x189/0x250
[  125.050707][ T5842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.050715][ T5842]  ? __pfx_queue_work_on+0x10/0x10
[  125.050722][ T5842]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  125.050731][ T5842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  125.050745][ T5842]  f2fs_handle_critical_error+0x37c/0x540
[  125.050758][ T5842]  f2fs_write_end_io+0x886/0xb60
[  125.050772][ T5842]  __submit_merged_bio+0x27a/0x6a0
[  125.050785][ T5842]  __submit_merged_write_cond+0x255/0x530
[  125.050797][ T5842]  f2fs_write_data_pages+0x261d/0x3000
[  125.050821][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  125.050855][ T5842]  ? unwind_next_frame+0xa5/0x2390
[  125.050862][ T5842]  ? rcu_is_watching+0x15/0xb0
[  125.050868][ T5842]  ? __kasan_check_byte+0x12/0x40
[  125.050884][ T5842]  ? __lock_acquire+0xab9/0xd20
[  125.050897][ T5842]  ? do_raw_spin_lock+0x121/0x290
[  125.050910][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  125.050918][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  125.050928][ T5842]  do_writepages+0x32e/0x550
[  125.050942][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  125.050952][ T5842]  filemap_fdatawrite+0x199/0x240
[  125.050961][ T5842]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  125.050969][ T5842]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[  125.050996][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  125.051006][ T5842]  f2fs_sync_dirty_inodes+0x31f/0x830
[  125.051020][ T5842]  f2fs_write_checkpoint+0x95a/0x1df0
[  125.051037][ T5842]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  125.051065][ T5842]  ? kill_f2fs_super+0x298/0x6c0
[  125.051074][ T5842]  kill_f2fs_super+0x2c3/0x6c0
[  125.051083][ T5842]  ? __pfx_kill_f2fs_super+0x10/0x10
[  125.051089][ T5842]  ? radix_tree_delete_item+0x2b6/0x400
[  125.051101][ T5842]  ? shrinker_free+0x2ce/0x3e0
[  125.051110][ T5842]  deactivate_locked_super+0xbc/0x130
[  125.051119][ T5842]  cleanup_mnt+0x425/0x4c0
[  125.051127][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.051137][ T5842]  task_work_run+0x1d4/0x260
[  125.051147][ T5842]  ? __pfx_task_work_run+0x10/0x10
[  125.051154][ T5842]  ? __x64_sys_umount+0x122/0x160
[  125.051165][ T5842]  ? exit_to_user_mode_loop+0x40/0x110
[  125.051177][ T5842]  exit_to_user_mode_loop+0xec/0x110
[  125.051214][ T5842]  do_syscall_64+0x2bd/0x3b0
[  125.051223][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.051231][ T5842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.051238][ T5842]  ? exc_page_fault+0x9f/0xf0
[  125.051247][ T5842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.051253][ T5842] RIP: 0033:0x7fba73b8ff17
[  125.051260][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  125.051266][ T5842] RSP: 002b:00007ffe57745fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  125.051274][ T5842] RAX: 0000000000000000 RBX: 00007fba73c11c05 RCX: 00007fba73b8ff17
[  125.051278][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe57746080
[  125.051282][ T5842] RBP: 00007ffe57746080 R08: 0000000000000000 R09: 0000000000000000
[  125.051286][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe57747110
[  125.051290][ T5842] R13: 00007fba73c11c05 R14: 000000000001e79d R15: 00007ffe57747150
[  125.051303][ T5842]  </TASK>
[  125.051306][ T5842] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  125.502631][ T5907] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  125.652700][ T5907] usb 3-1: Using ep0 maxpacket: 8
[  125.659606][ T5907] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  125.664090][ T5907] usb 3-1: config 179 has no interface number 0
[  125.666316][ T5907] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  125.670865][ T5907] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  125.676516][ T5907] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  125.681384][ T5907] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  125.687565][ T5907] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  125.693347][ T5907] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  125.696759][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.705517][ T7957] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  126.178735][ T7957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.186097][ T7957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.400687][ T2329] usb 3-1: USB disconnect, device number 12
[  126.400832][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  126.406606][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  126.410624][    C1] ==================================================================
[  126.414078][    C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290
[  126.416896][    C1] Read of size 4 at addr ffff88812043e05c by task swapper/1/0
[  126.420291][    C1] 
[  126.421146][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  126.421159][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.421166][    C1] Call Trace:
[  126.421171][    C1]  <IRQ>
[  126.421197][    C1]  dump_stack_lvl+0x189/0x250
[  126.421209][    C1]  ? __kasan_check_byte+0x12/0x40
[  126.421219][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.421226][    C1]  ? lock_release+0x4b/0x3e0
[  126.421236][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  126.421244][    C1]  print_report+0xca/0x240
[  126.421250][    C1]  ? do_raw_spin_lock+0x23d/0x290
[  126.421257][    C1]  kasan_report+0x118/0x150
[  126.421266][    C1]  ? do_raw_spin_lock+0x23d/0x290
[  126.421274][    C1]  do_raw_spin_lock+0x23d/0x290
[  126.421281][    C1]  ? __wake_up_common_lock+0x2f/0x1f0
[  126.421288][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  126.421297][    C1]  _raw_spin_lock_irqsave+0xb3/0xf0
[  126.421305][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  126.421313][    C1]  ? kcov_remote_stop+0x78/0x6d0
[  126.421323][    C1]  __wake_up_common_lock+0x2f/0x1f0
[  126.421331][    C1]  __usb_hcd_giveback_urb+0x4d7/0x690
[  126.421340][    C1]  ? usb_hcd_unlink_urb_from_ep+0x2c/0x110
[  126.421349][    C1]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  126.421358][    C1]  ? usb_hcd_giveback_urb+0x10e/0x420
[  126.421366][    C1]  dummy_timer+0x862/0x4550
[  126.421379][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  126.421390][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  126.421398][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  126.421405][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  126.421413][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  126.421428][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  126.421437][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  126.421448][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  126.421461][    C1]  handle_softirqs+0x286/0x870
[  126.421472][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  126.421483][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  126.421494][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  126.421508][    C1]  __irq_exit_rcu+0xca/0x1f0
[  126.421519][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  126.421541][    C1]  irq_exit_rcu+0x9/0x30
[  126.421551][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  126.421565][    C1]  </IRQ>
[  126.421569][    C1]  <TASK>
[  126.421572][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  126.421583][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  126.421598][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 e7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  126.421608][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  126.421618][    C1] RAX: e7198862595a7e00 RBX: ffffffff81968308 RCX: e7198862595a7e00
[  126.421626][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b6dc6 RDI: ffffffff8be33400
[  126.421634][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  126.421642][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  126.421650][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11020010000
[  126.421658][    C1]  ? do_idle+0x1e8/0x510
[  126.421672][    C1]  default_idle+0x13/0x20
[  126.421681][    C1]  default_idle_call+0x74/0xb0
[  126.421690][    C1]  do_idle+0x1e8/0x510
[  126.421700][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  126.421711][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.421732][    C1]  ? __pfx_do_idle+0x10/0x10
[  126.421744][    C1]  ? do_idle+0x4ef/0x510
[  126.421756][    C1]  cpu_startup_entry+0x44/0x60
[  126.421767][    C1]  start_secondary+0x101/0x110
[  126.421781][    C1]  common_startup_64+0x13e/0x147
[  126.421800][    C1]  </TASK>
[  126.421804][    C1] 
[  126.556481][    C1] Allocated by task 5907:
[  126.558126][    C1]  kasan_save_track+0x3e/0x80
[  126.559940][    C1]  __kasan_kmalloc+0x93/0xb0
[  126.561701][    C1]  __kmalloc_cache_noprof+0x230/0x3d0
[  126.563749][    C1]  xpad_probe+0x428/0x1fc0
[  126.565448][    C1]  usb_probe_interface+0x668/0xc30
[  126.567394][    C1]  really_probe+0x26d/0x9e0
[  126.569127][    C1]  __driver_probe_device+0x18c/0x2f0
[  126.571125][    C1]  driver_probe_device+0x4f/0x430
[  126.573047][    C1]  __device_attach_driver+0x2ce/0x530
[  126.575081][    C1]  bus_for_each_drv+0x251/0x2e0
[  126.576944][    C1]  __device_attach+0x2b8/0x400
[  126.578780][    C1]  bus_probe_device+0x185/0x260
[  126.580615][    C1]  device_add+0x7b6/0xb50
[  126.582283][    C1]  usb_set_configuration+0x1a87/0x20e0
[  126.584364][    C1]  usb_generic_driver_probe+0x8d/0x150
[  126.586422][    C1]  usb_probe_device+0x1c4/0x390
[  126.588298][    C1]  really_probe+0x26d/0x9e0
[  126.590023][    C1]  __driver_probe_device+0x18c/0x2f0
[  126.592016][    C1]  driver_probe_device+0x4f/0x430
[  126.593894][    C1]  __device_attach_driver+0x2ce/0x530
[  126.595817][    C1]  bus_for_each_drv+0x251/0x2e0
[  126.597567][    C1]  __device_attach+0x2b8/0x400
[  126.599368][    C1]  bus_probe_device+0x185/0x260
[  126.601223][    C1]  device_add+0x7b6/0xb50
[  126.602876][    C1]  usb_new_device+0xa39/0x16f0
[  126.604689][    C1]  hub_event+0x2958/0x4a20
[  126.606393][    C1]  process_scheduled_works+0xae1/0x17b0
[  126.608474][    C1]  worker_thread+0x8a0/0xda0
[  126.610241][    C1]  kthread+0x711/0x8a0
[  126.611793][    C1]  ret_from_fork+0x3fc/0x770
[  126.613507][    C1]  ret_from_fork_asm+0x1a/0x30
[  126.615252][    C1] 
[  126.616171][    C1] Freed by task 2329:
[  126.617708][    C1]  kasan_save_track+0x3e/0x80
[  126.619502][    C1]  kasan_save_free_info+0x46/0x50
[  126.621423][    C1]  __kasan_slab_free+0x5b/0x80
[  126.623256][    C1]  kfree+0x18e/0x440
[  126.624745][    C1]  xpad_disconnect+0x350/0x480
[  126.626593][    C1]  usb_unbind_interface+0x26e/0x910
[  126.628569][    C1]  device_release_driver_internal+0x4d9/0x800
[  126.630869][    C1]  bus_remove_device+0x34d/0x410
[  126.632743][    C1]  device_del+0x511/0x8e0
[  126.634396][    C1]  usb_disable_device+0x3e9/0x8a0
[  126.636309][    C1]  usb_disconnect+0x330/0x950
[  126.638091][    C1]  hub_event+0x1cf5/0x4a20
[  126.639806][    C1]  process_scheduled_works+0xae1/0x17b0
[  126.641902][    C1]  worker_thread+0x8a0/0xda0
[  126.643683][    C1]  kthread+0x711/0x8a0
[  126.645223][    C1]  ret_from_fork+0x3fc/0x770
[  126.646885][    C1]  ret_from_fork_asm+0x1a/0x30
[  126.648669][    C1] 
[  126.649579][    C1] Last potentially related work creation:
[  126.651650][    C1]  kasan_save_stack+0x3e/0x60
[  126.653453][    C1]  kasan_record_aux_stack+0xbd/0xd0
[  126.655425][    C1]  insert_work+0x3d/0x330
[  126.657067][    C1]  __queue_work+0xcd2/0xfb0
[  126.658802][    C1]  queue_work_on+0x181/0x270
[  126.660664][    C1]  xpad_irq_in+0xb57/0x2590
[  126.662220][    C1]  __usb_hcd_giveback_urb+0x41a/0x690
[  126.663921][    C1]  dummy_timer+0x862/0x4550
[  126.665383][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  126.667063][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  126.668698][    C1]  handle_softirqs+0x286/0x870
[  126.670261][    C1]  __irq_exit_rcu+0xca/0x1f0
[  126.671890][    C1]  irq_exit_rcu+0x9/0x30
[  126.673465][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  126.675288][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  126.677218][    C1] 
[  126.678006][    C1] The buggy address belongs to the object at ffff88812043e000
[  126.678006][    C1]  which belongs to the cache kmalloc-1k of size 1024
[  126.682379][    C1] The buggy address is located 92 bytes inside of
[  126.682379][    C1]  freed 1024-byte region [ffff88812043e000, ffff88812043e400)
[  126.686773][    C1] 
[  126.687577][    C1] The buggy address belongs to the physical page:
[  126.689614][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120438
[  126.692451][    C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  126.695159][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  126.697629][    C1] page_type: f5(slab)
[  126.698935][    C1] raw: 057ff00000000040 ffff88801a441dc0 dead000000000100 dead000000000122
[  126.701754][    C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  126.704609][    C1] head: 057ff00000000040 ffff88801a441dc0 dead000000000100 dead000000000122
[  126.707371][    C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  126.710114][    C1] head: 057ff00000000003 ffffea0004810e01 00000000ffffffff 00000000ffffffff
[  126.712887][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  126.715862][    C1] page dumped because: kasan: bad access detected
[  126.718041][    C1] page_owner tracks the page as allocated
[  126.719942][    C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 35, tgid 35 (kworker/u10:1), ts 59863384596, free_ts 58082899097
[  126.726079][    C1]  post_alloc_hook+0x240/0x2a0
[  126.727627][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  126.729376][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  126.731260][    C1]  alloc_pages_mpol+0x232/0x4a0
[  126.732863][    C1]  allocate_slab+0x8a/0x370
[  126.734311][    C1]  ___slab_alloc+0xbeb/0x1410
[  126.735807][    C1]  __kmalloc_noprof+0x305/0x4f0
[  126.737383][    C1]  ieee802_11_parse_elems_full+0x152/0x2ab0
[  126.739267][    C1]  ieee80211_inform_bss+0x10c/0x10a0
[  126.741038][    C1]  cfg80211_inform_single_bss_data+0xd05/0x1ac0
[  126.743123][    C1]  cfg80211_inform_bss_data+0x1fb/0x3b30
[  126.745014][    C1]  cfg80211_inform_bss_frame_data+0x3d7/0x730
[  126.747008][    C1]  ieee80211_bss_info_update+0x746/0x9e0
[  126.748842][    C1]  ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0
[  126.750864][    C1]  ieee80211_iface_work+0x85f/0x12d0
[  126.752652][    C1]  cfg80211_wiphy_work+0x2bb/0x470
[  126.754386][    C1] page last free pid 5845 tgid 5845 stack trace:
[  126.756520][    C1]  __free_frozen_pages+0xbc4/0xd30
[  126.758244][    C1]  __slab_free+0x303/0x3c0
[  126.759700][    C1]  qlist_free_all+0x97/0x140
[  126.761199][    C1]  kasan_quarantine_reduce+0x148/0x160
[  126.762990][    C1]  __kasan_slab_alloc+0x22/0x80
[  126.764632][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  126.766482][    C1]  alloc_empty_file+0x55/0x1d0
[  126.768087][    C1]  path_openat+0x107/0x3830
[  126.769630][    C1]  do_filp_open+0x1fa/0x410
[  126.771157][    C1]  do_sys_openat2+0x121/0x1c0
[  126.772754][    C1]  __x64_sys_openat+0x138/0x170
[  126.774410][    C1]  do_syscall_64+0xfa/0x3b0
[  126.775936][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  126.777914][    C1] 
[  126.778752][    C1] Memory state around the buggy address:
[  126.780634][    C1]  ffff88812043df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  126.783282][    C1]  ffff88812043df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  126.785893][    C1] >ffff88812043e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  126.788447][    C1]                                                     ^
[  126.790738][    C1]  ffff88812043e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  126.793399][    C1]  ffff88812043e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  126.796064][    C1] ==================================================================
[  126.798727][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  126.801243][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  126.805257][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  126.808698][    C1] Call Trace:
[  126.809830][    C1]  <IRQ>
[  126.810811][    C1]  dump_stack_lvl+0x99/0x250
[  126.812384][    C1]  ? __asan_memcpy+0x40/0x70
[  126.813958][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  126.815751][    C1]  ? __pfx__printk+0x10/0x10
[  126.817338][    C1]  vpanic+0x281/0x750
[  126.818873][    C1]  ? __pfx_print_hex_dump+0x10/0x10
[  126.821155][    C1]  ? __pfx_vpanic+0x10/0x10
[  126.822837][    C1]  panic+0xb9/0xc0
[  126.824073][    C1]  ? __pfx_panic+0x10/0x10
[  126.825600][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  126.827633][    C1]  ? do_raw_spin_lock+0x23d/0x290
[  126.829422][    C1]  check_panic_on_warn+0x89/0xb0
[  126.831126][    C1]  ? do_raw_spin_lock+0x23d/0x290
[  126.832884][    C1]  end_report+0x78/0x160
[  126.834367][    C1]  kasan_report+0x129/0x150
[  126.835959][    C1]  ? do_raw_spin_lock+0x23d/0x290
[  126.837731][    C1]  do_raw_spin_lock+0x23d/0x290
[  126.839768][    C1]  ? __wake_up_common_lock+0x2f/0x1f0
[  126.841895][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  126.844242][    C1]  _raw_spin_lock_irqsave+0xb3/0xf0
[  126.846523][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  126.849103][    C1]  ? kcov_remote_stop+0x78/0x6d0
[  126.851273][    C1]  __wake_up_common_lock+0x2f/0x1f0
[  126.853531][    C1]  __usb_hcd_giveback_urb+0x4d7/0x690
[  126.855857][    C1]  ? usb_hcd_unlink_urb_from_ep+0x2c/0x110
[  126.858395][    C1]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  126.860995][    C1]  ? usb_hcd_giveback_urb+0x10e/0x420
[  126.863348][    C1]  dummy_timer+0x862/0x4550
[  126.865330][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  126.867641][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  126.869807][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  126.871977][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  126.874153][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  126.876464][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  126.878859][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  126.881383][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  126.883629][    C1]  handle_softirqs+0x286/0x870
[  126.885721][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  126.887815][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  126.890109][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  126.892286][    C1]  __irq_exit_rcu+0xca/0x1f0
[  126.894164][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  126.896454][    C1]  irq_exit_rcu+0x9/0x30
[  126.898230][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  126.900589][    C1]  </IRQ>
[  126.901845][    C1]  <TASK>
[  126.903084][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  126.905683][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  126.908164][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 e7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  126.916196][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  126.918785][    C1] RAX: e7198862595a7e00 RBX: ffffffff81968308 RCX: e7198862595a7e00
[  126.922232][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b6dc6 RDI: ffffffff8be33400
[  126.925508][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  126.928949][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  126.932377][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11020010000
[  126.935794][    C1]  ? do_idle+0x1e8/0x510
[  126.937680][    C1]  default_idle+0x13/0x20
[  126.939588][    C1]  default_idle_call+0x74/0xb0
[  126.941700][    C1]  do_idle+0x1e8/0x510
[  126.943504][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  126.946204][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  126.948468][    C1]  ? __pfx_do_idle+0x10/0x10
[  126.950482][    C1]  ? do_idle+0x4ef/0x510
[  126.952361][    C1]  cpu_startup_entry+0x44/0x60
[  126.954462][    C1]  start_secondary+0x101/0x110
[  126.956580][    C1]  common_startup_64+0x13e/0x147
[  126.958760][    C1]  </TASK>
[  126.960842][    C1] Kernel Offset: disabled
[  126.962759][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:46:00  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000f3d6 RBX=ffff88804b023900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000f3d6 RDI=0000000000000838 RBP=0000000000000001 RSP=ffffc90009c4faf8
R8 =0000000000000000 R9 =ffffffff81ae027e R10=0000000000000003 R11=ffffffff81703490
R12=0000000010000000 R13=dffffc0000000000 R14=000000000000f3d6 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555586666500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe8910e1000 CR3=000000001ea8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0100000000000000 0003010015000000
XMM02=00007f45aad87498 00007f45aad87470 XMM03=00007f45aad874a8 00007f45aad874a0
XMM04=00007f45ab8ed100 00007f45aad87460 XMM05=00007f45aad87478 00007f45aad874c0
XMM06=00007f45aad874b8 00007f45aad874b0 XMM07=00007f45aad874a8 00007f45aad874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f45aac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001dfff0
R8 =ffff888106af0237 R9 =1ffff11020d5e046 R10=dffffc0000000000 R11=ffffffff854effb0
R12=dffffc0000000000 R13=ffffffff99af98ff R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f002c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b73c585d68 CR3=000000001ea8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f45aad87498 00007f45aad87470 XMM03=00007f45aad874a8 00007f45aad874a0
XMM04=00007f45ab8ed100 00007f45aad87460 XMM05=00007f45aad87478 00007f45aad874c0
XMM06=00007f45aad874b8 00007f45aad874b0 XMM07=00007f45aad874a8 00007f45aad874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f45aac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
