last executing test programs:

5m6.160683402s ago: executing program 3 (id=258):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000))

5m6.052878105s ago: executing program 3 (id=259):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x88, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480), 0xb7)

5m5.855901529s ago: executing program 3 (id=260):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40800)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011)

5m5.783707811s ago: executing program 3 (id=262):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x48082)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000c00)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=r0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030362c626172726965722c6e6f626172726965722c736d61636b66737472616e736d7574653d55dac73dddd1aa0ff491f57216572f1e671a989f42c64dc0b65d67d4250567573bb5e8d8c2d916d55de0fad0693e50202f126e0e71e930d123c47bc4a1d2ab46e52a07fd8ca501f330abb8b07d3a5364154ec1faf99b6a9779abe230ce8f5a290ef9442c7569643c", @ANYRES32, @ANYBLOB="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", @ANYRES8, @ANYBLOB="069a8d832cbb2aa0e92a5d6083319d9fc77f6d6f182e2a5415c2f49ae5e513f0723ec491ea310f2bb11284da5060cf06", @ANYRES64], 0x1, 0x6f8, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)

5m5.455291969s ago: executing program 3 (id=264):
r0 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)

5m4.888796432s ago: executing program 3 (id=265):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x2b, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)

5m4.410729423s ago: executing program 32 (id=265):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5ec800000000000000fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x0, 0x2b, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11cc6437caa2dc891b724181fb42d00e3cefe6630aadee9a73a7095657dfccc791536fe9c5268be2bdd7a74"}, 0xd8)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)

4m14.383875873s ago: executing program 1 (id=618):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/45, 0x2d}, {0x0}], 0x2)

4m14.244021996s ago: executing program 1 (id=619):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r1=>0x0], 0x0, 0x0, 0x59, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r1, 0xff, 0x7, 0x2000, 0x201, 0x1})

4m14.208970487s ago: executing program 1 (id=620):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00')
read$FUSE(r1, &(0x7f0000002dc0)={0x2020}, 0x2020)

4m14.126440179s ago: executing program 1 (id=621):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9reWxDXbuxef4AhvdZi4qMTsQkFo5tuFMQ/UfBP6ELQvQsRwY0uFHRRcaVI5Mycmd48MPeKj818EM53vjmPmbmZmSv6po4B/DjYbWMRBoQG3hBBAVgiq32rWftF7EjwQVk/Ef2x2PdidX/w8r6lg6utTifb1v1fkxgEzIkZJ9PSuScPjhXPnyAv7o0rhCJZpEr2GpWemCU4VHoVu7PTwQ/HlHhWjORiskVy4Tcn9u9JfWryjnxtAHnl4x/sXuXdrGJmDFGp//oMwgUMAfzQ98b0Z5okrx/ZzjNjKpJex/i2zCV8iv/3V2bCd5EhUYksBQ35Hvr83QifCaji1cFum9VLcovx8Ib9uSNhsth5los5roAhQBWMTFGuoyR2CcBKr3tjRfcHp7a6rc1sM7uWpmtnVp8flSM6ugNsdbJVMtOw6RETBQ8+p/XcOP/T3h6OD5ED5aYGXhe7VvYl3eW8fMKFmAaIcrm5GlL3qe8fi3ZLd3ERJ7EA4PaQh1PZoCa4msJlXto6CBVxEjeHyD4fiLBgBk63r3c29kAgl7YP5Wsk71D1TioON8rWzvrl74ltil0Xu+/2ReDeLvcmKVPhk3jLQ6CGnRYvkqWdVq+3nTCv+QpGSxd950i6utfQNWvGKIgjRQMDAgICAgICAv4SfgYAAP//SqQ9DQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000180)=""/42, 0x2a)

4m13.831883066s ago: executing program 1 (id=627):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x3f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000)

4m13.378416106s ago: executing program 1 (id=635):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x2ea}, &(0x7f0000000240)=0x8)

4m13.135243932s ago: executing program 33 (id=635):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x2ea}, &(0x7f0000000240)=0x8)

2m58.521542092s ago: executing program 2 (id=1331):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @local, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x5, 0x0, 0xf500, {[@mptcp=@add_addr={0x1e, 0x12, 0x0, 0x12, 0x5, @loopback, 0x1, "45673d923b56653c"}]}}}}}}}}, 0x0)

2m58.425339063s ago: executing program 2 (id=1333):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
fchdir(r0)
close(r0)
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)

2m58.316190026s ago: executing program 2 (id=1334):
mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10)
write(r0, &(0x7f0000000800)='file d*vio.c +', 0xe)

2m58.110559431s ago: executing program 2 (id=1335):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9reWxDXbuxef4AhvdZi4qMTsQkFo5tuFMQ/UfBP6ELQvQsRwY0uFHRRcaVI5Mycmd48MPeKj818EM53vjmPmbmZmSv6po4B/DjYbWMRBoQG3hBBAVgiq32rWftF7EjwQVk/Ef2x2PdidX/w8r6lg6utTifb1v1fkxgEzIkZJ9PSuScPjhXPnyAv7o0rhCJZpEr2GpWemCU4VHoVu7PTwQ/HlHhWjORiskVy4Tcn9u9JfWryjnxtAHnl4x/sXuXdrGJmDFGp//oMwgUMAfzQ98b0Z5okrx/ZzjNjKpJex/i2zCV8iv/3V2bCd5EhUYksBQ35Hvr83QifCaji1cFum9VLcovx8Ib9uSNhsth5los5roAhQBWMTFGuoyR2CcBKr3tjRfcHp7a6rc1sM7uWpmtnVp8flSM6ugNsdbJVMtOw6RETBQ8+p/XcOP/T3h6OD5ED5aYGXhe7VvYl3eW8fMKFmAaIcrm5GlL3qe8fi3ZLd3ERJ7EA4PaQh1PZoCa4msJlXto6CBVxEjeHyD4fiLBgBk63r3c29kAgl7YP5Wsk71D1TioON8rWzvrl74ltil0Xu+/2ReDeLvcmKVPhk3jLQ6CGnRYvkqWdVq+3nTCv+QpGSxd950i6utfQNWvGKIgjRQMDAgICAgICAv4SfgYAAP//SqQ9DQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000180)=""/42, 0x2a)

2m57.634983482s ago: executing program 2 (id=1338):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/153, 0x99}], 0x2}, 0x20000000)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

2m57.31200049s ago: executing program 2 (id=1343):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1600bd7e, 0x0, 0x0)

2m56.935230968s ago: executing program 34 (id=1343):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x3)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1600bd7e, 0x0, 0x0)

1m1.580889543s ago: executing program 5 (id=2252):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0)
pwritev(r0, &(0x7f0000001180)=[{&(0x7f0000000140)='<', 0xfdef}], 0x1, 0x8, 0x3)

1m1.281838919s ago: executing program 5 (id=2255):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000080)="f4416eb4e859495d589fefa788a8", 0xe, 0x24004080, &(0x7f0000002780)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

1m0.974570496s ago: executing program 5 (id=2259):
openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x800, 0x0)
unshare(0x22020600)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfdffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x3, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x7, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x0, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x7, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x81, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0x80ffff, 0x10, 0x7f, 0x104, 0x9606, 0x4, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m0.616071415s ago: executing program 5 (id=2263):
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x191a461, &(0x7f0000000140)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]})

59.991303499s ago: executing program 5 (id=2268):
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @mcast2, 0x9}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000002c0)={0x62}, 0x8)

59.258624796s ago: executing program 5 (id=2271):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0)

58.440157375s ago: executing program 35 (id=2271):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0)

4.935671596s ago: executing program 6 (id=2656):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
close(0x3)

4.653477752s ago: executing program 6 (id=2659):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@nogrpid}, {@nogrpid}, {@nomblk_io_submit}]}, 0x1, 0x51d, &(0x7f0000000200)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef)
fallocate(r0, 0x20, 0x4000, 0x8000)

3.940097299s ago: executing program 6 (id=2664):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
syz_usb_disconnect(r0)
ioctl$XFS_IOC_RTGROUP_GEOMETRY(r1, 0xc0805841, 0x0)

2.494120282s ago: executing program 4 (id=2673):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0)

1.989064894s ago: executing program 6 (id=2680):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001200)='./sys\x00', &(0x7f0000001300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/protocol\x00', 0x2, 0x0)
write(r0, &(0x7f0000000800)='cypress', 0x7)

1.851550977s ago: executing program 4 (id=2682):
setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f00000020c0)='./file0\x00', 0x0, &(0x7f0000002300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)

1.850953227s ago: executing program 7 (id=2683):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0)

1.72956643s ago: executing program 0 (id=2684):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

1.668045001s ago: executing program 7 (id=2685):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffb, 0x9, 0x0, 0x0)

1.583450533s ago: executing program 4 (id=2686):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d220906e9a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e8062892d06cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1530, &(0x7f0000002f80)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140))
rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./bus\x00')

1.542440244s ago: executing program 0 (id=2687):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0xfff, 0x4, 0x4, 0x8007, 0x7, "ea710000000000f9000000024200000200", 0x4000000, 0x8000400})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xb)

1.436072156s ago: executing program 7 (id=2688):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000400)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="59003300d0080e00ffffffffffff080211000000505050505050380001"], 0x78}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)

1.351492319s ago: executing program 6 (id=2689):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000002740)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
truncate(&(0x7f0000000040)='./file1\x00', 0x8800000)
pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)

1.350203959s ago: executing program 0 (id=2690):
mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000000a80)=[{&(0x7f0000000400)=""/223, 0xdf}], 0x1, 0xaa06, 0x9)

1.27363177s ago: executing program 7 (id=2691):
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="c4050000", @ANYRES16=r1, @ANYBLOB="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"], 0x5c4}, 0x1, 0x0, 0x0, 0x40840}, 0x4c044)

1.092139765s ago: executing program 0 (id=2692):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0xb, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004)

1.006631667s ago: executing program 7 (id=2693):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802)
write$evdev(r0, &(0x7f0000000000), 0x3f5aa546)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r0, 0x0)

861.21761ms ago: executing program 0 (id=2694):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x104020, 0x0)

692.476323ms ago: executing program 4 (id=2695):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
ioctl$TIOCMGET(r0, 0x5415, 0x0)

691.781994ms ago: executing program 0 (id=2696):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = io_uring_setup(0x4514, &(0x7f0000000080)={0x0, 0x1945, 0x1, 0x3, 0x13a})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)

579.869006ms ago: executing program 7 (id=2697):
r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904010000ff00000009040101"], 0x0)
syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)={0x0, 0x0, 0x2, {0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

438.43554ms ago: executing program 4 (id=2698):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})

116.106257ms ago: executing program 4 (id=2699):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

0s ago: executing program 6 (id=2700):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

kernel console output (not intermixed with test programs):

 attributes in process `syz.0.1786'.
[  284.497432][T11188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1786'.
[  284.600663][T11194] loop6: detected capacity change from 0 to 512
[  284.629148][T11195] syz.4.1788 uses obsolete (PF_INET,SOCK_PACKET)
[  284.663527][T11194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002]
[  284.677909][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  284.709402][T11194] System zones: 1-12
[  284.745530][T11194] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1789: error while reading EA inode 32 err=-116
[  284.795110][T11194] EXT4-fs (loop6): Remounting filesystem read-only
[  284.868525][T11194] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -5)
[  284.898050][T11194] EXT4-fs (loop6): 1 orphan inode deleted
[  284.927280][T11194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.084576][ T9779] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.096540][T11211] loop4: detected capacity change from 0 to 512
[  285.164426][T11211] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1795: corrupted inode contents
[  285.245697][T11211] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  285.297854][T11211] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1795: corrupted inode contents
[  285.326567][T11211] EXT4-fs error (device loop4): ext4_evict_inode:302: inode #15: comm syz.4.1795: mark_inode_dirty error
[  285.386444][T11211] EXT4-fs (loop4): 1 orphan inode deleted
[  285.409071][T11211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.564869][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.033883][T11237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1807'.
[  286.153876][T11239] loop5: detected capacity change from 0 to 256
[  286.346246][T11241] loop0: detected capacity change from 0 to 4096
[  286.389310][T11241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.528226][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1810'.
[  286.538608][T11241] EXT4-fs (loop0): Online defrag not supported with bigalloc
[  286.663937][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.188138][ T5812] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  287.388100][ T5812] usb 7-1: Using ep0 maxpacket: 32
[  287.400907][ T5812] usb 7-1: config index 0 descriptor too short (expected 27632, got 27)
[  287.424075][ T5812] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  287.446422][ T5812] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  287.459913][ T5812] usb 7-1: config 1 has no interface number 0
[  287.469936][ T5812] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  287.484624][ T5812] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  287.502845][ T5812] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  287.514262][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.553584][ T5812] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  287.745760][T11268] loop5: detected capacity change from 0 to 32768
[  287.757641][ T5812] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached
[  287.798279][T11268] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1820 (11268)
[  287.870878][T11268] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  287.892051][T11268] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  287.928194][T11268] BTRFS info (device loop5): force clearing of disk cache
[  287.935398][T11268] BTRFS info (device loop5): setting nodatacow, compression disabled
[  287.968457][T11268] BTRFS info (device loop5): enabling auto defrag
[  287.974987][T11268] BTRFS info (device loop5): max_inline at 0
[  288.008079][T11268] BTRFS info (device loop5): enabling disk space caching
[  288.013203][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'.
[  288.024022][T11268] BTRFS info (device loop5): disk space caching is enabled
[  288.037326][T11279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1825'.
[  288.185006][ T5812] usb 7-1: USB disconnect, device number 6
[  288.219291][ T5812] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  288.258408][T11268] BTRFS info (device loop5): enabling ssd optimizations
[  288.288853][T11268] BTRFS info (device loop5): rebuilding free space tree
[  288.436594][T11268] BTRFS info (device loop5): disabling free space tree
[  288.454036][T11268] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  288.476614][T11268] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  289.206982][ T7736] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  289.665584][T11315] loop0: detected capacity change from 0 to 32768
[  289.738109][T11315] ERROR: (device loop0): diAllocAG: numfree > numinos
[  289.738109][T11315] 
[  289.754559][T11315] ERROR: (device loop0): remounting filesystem as read-only
[  289.762462][T11315] ialloc: diAlloc returned -5!
[  289.769908][T11315] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  289.769908][T11315] 
[  290.042335][T11332] loop5: detected capacity change from 0 to 1024
[  290.290180][ T1120] hfsplus: bad catalog file entry
[  290.633164][T11354] netem: change failed
[  290.668641][T11356] program syz.4.1851 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  290.717858][    T8] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  290.923813][    T8] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  290.950028][    T8] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  290.974816][    T8] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  290.987237][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.015120][    T8] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  291.048222][    T8] usb 6-1: invalid MIDI out EP 0
[  291.186646][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  291.213362][    T8] snd-usb-audio: probe of 6-1:27.0 failed with error -22
[  291.233541][    T8] usb 6-1: USB disconnect, device number 10
[  291.444250][T11362] loop4: detected capacity change from 0 to 32768
[  291.465227][T11362] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  291.476689][T11362] JBD2: Ignoring recovery information on journal
[  291.517147][T11362] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  291.579807][T11362] overlayfs: upper fs does not support tmpfile.
[  291.587624][T11362] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  291.595949][T11362] overlayfs: failed to set xattr on upper
[  291.601956][T11362] overlayfs: ...falling back to redirect_dir=nofollow.
[  291.608846][T11362] overlayfs: ...falling back to index=off.
[  291.614647][T11362] overlayfs: ...falling back to uuid=null.
[  291.620517][T11362] overlayfs: upper fs missing required features.
[  291.682246][ T6503] ocfs2: Unmounting device (7,4) on (node local)
[  292.432077][T11389] loop5: detected capacity change from 0 to 4096
[  292.467576][T11389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.544165][T11389] EXT4-fs (loop5): Online defrag not supported with bigalloc
[  292.573418][T11393] ipvlan0: entered promiscuous mode
[  292.578847][ T5761] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  292.588999][T11393] ipvlan0: left promiscuous mode
[  292.622006][ T7736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.757853][ T5761] usb 5-1: Using ep0 maxpacket: 8
[  292.776763][ T5761] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  292.802189][ T5761] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  292.842442][T11399] loop0: detected capacity change from 0 to 256
[  292.857440][ T5761] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  292.882067][ T5761] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  292.916843][ T5761] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  292.958435][ T5761] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  292.992396][ T5761] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  293.022700][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.269957][ T5761] usb 5-1: GET_CAPABILITIES returned 0
[  293.279632][ T5761] usbtmc 5-1:16.0: can't read capabilities
[  293.333553][T11411] MTRR 1 not used
[  293.480694][T11415] loop6: detected capacity change from 0 to 4096
[  293.499593][ T5761] usb 5-1: USB disconnect, device number 16
[  293.573981][T11415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.667917][T11415] EXT4-fs (loop6): Online defrag not supported with bigalloc
[  293.732057][ T9779] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.880741][T11427] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  294.411615][T11448] input: syz0 as /devices/virtual/input/input29
[  294.632555][T11456] loop5: detected capacity change from 0 to 512
[  294.660158][T11456] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0022]
[  294.672000][T11456] System zones: 1-12
[  294.677663][T11456] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1899: Directory hole found for htree index block 0
[  294.747769][T11456] EXT4-fs (loop5): Remounting filesystem read-only
[  294.754477][T11456] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[  294.777285][T11456] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  294.805388][T11456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.913332][ T7736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.221184][T11470] loop5: detected capacity change from 0 to 4096
[  295.252355][T11470] EXT4-fs (loop5): Test dummy encryption mode enabled
[  295.266006][T11470] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003]
[  295.303344][T11470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.461047][T11470] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  295.613316][T11470] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  295.635794][T11470] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  295.658039][T11470] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003]
[  295.668060][T11470] System zones: 0-5
[  295.676463][T11470] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  295.772391][ T7736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.180913][ T5761] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[  296.258408][T11493] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  296.269217][T11492] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  296.371179][T11495] loop6: detected capacity change from 0 to 1024
[  296.416816][ T5761] usb 1-1: unable to get BOS descriptor or descriptor too short
[  296.427654][ T5761] usb 1-1: config 8 has an invalid interface number: 109 but max is 0
[  296.436636][ T5761] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  296.457393][ T5761] usb 1-1: config 8 has no interface number 0
[  296.469090][ T5761] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[  296.500809][ T5761] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  296.535409][ T5761] usb 1-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8
[  296.571653][ T5761] usb 1-1: string descriptor 0 read error: -22
[  296.588591][ T5761] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[  296.606692][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.634271][T11481] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  296.660635][ T5761] metro_usb 1-1:8.109: Metrologic USB to Serial converter detected
[  296.689803][ T5761] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  296.698788][   T11] hfsplus: bad catalog file entry
[  296.930862][    C0] metro-usb ttyUSB0: metrousb_read_int_callback - failed submitting interrupt in urb, error code=-1
[  296.943176][ T5761] usb 1-1: USB disconnect, device number 20
[  296.954961][ T5761] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  296.965687][ T5761] metro_usb 1-1:8.109: device disconnected
[  298.085709][T11532] loop5: detected capacity change from 0 to 512
[  298.187169][T11532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.248416][T11532] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  298.763859][ T7736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  299.001912][T11557] loop4: detected capacity change from 0 to 256
[  299.383928][T11569] loop4: detected capacity change from 0 to 256
[  299.398901][ T5830] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  299.611280][ T5830] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.625492][ T5830] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01
[  299.635574][ T5830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.655985][ T5830] as10x_usb: device has been detected
[  299.670521][ T5830] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  299.711697][ T5830] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  299.750307][ T5830] as10x_usb: error during firmware upload part1
[  299.771033][ T5830] Registered device Abilis Systems DVB-Titan
[  300.019856][T11576] loop6: detected capacity change from 0 to 32768
[  300.051315][T11576] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1950 (11576)
[  300.095198][T11576] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  300.106170][T11576] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  300.121144][T11576] BTRFS info (device loop6): force clearing of disk cache
[  300.129771][T11576] BTRFS info (device loop6): setting nodatacow, compression disabled
[  300.139145][T11576] BTRFS info (device loop6): enabling auto defrag
[  300.145648][T11576] BTRFS info (device loop6): max_inline at 0
[  300.161986][T11576] BTRFS info (device loop6): enabling disk space caching
[  300.177813][T11576] BTRFS info (device loop6): disk space caching is enabled
[  300.348242][T11576] BTRFS info (device loop6): enabling ssd optimizations
[  300.387409][T11576] BTRFS info (device loop6): rebuilding free space tree
[  300.422066][T11576] BTRFS info (device loop6): disabling free space tree
[  300.439504][T11576] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  300.458890][T11576] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  300.513188][ T5761] usb 6-1: USB disconnect, device number 11
[  300.567423][ T5761] Unregistered device Abilis Systems DVB-Titan
[  300.573415][ T5761] as10x_usb: device has been disconnected
[  300.805007][T11582] loop4: detected capacity change from 0 to 40427
[  300.832974][T11582] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  300.857774][T11582] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  300.894192][T11582] F2FS-fs (loop4): invalid crc value
[  300.905103][ T9779] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  301.058442][T11593] loop0: detected capacity change from 0 to 32768
[  301.172372][T11582] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  301.187853][T11582] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  301.195587][T11593] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  301.308176][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  301.466466][T11593] XFS (loop0): Ending clean mount
[  301.700582][ T5771] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  302.194156][T11618] loop6: detected capacity change from 0 to 32768
[  302.296017][T11618] ERROR: (device loop6): diAllocAG: numfree > numinos
[  302.296017][T11618] 
[  302.328021][T11618] ERROR: (device loop6): remounting filesystem as read-only
[  302.335606][T11618] ialloc: diAlloc returned -5!
[  302.386259][T11618] ERROR: (device loop6): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  302.386259][T11618] 
[  302.506976][T11628] loop0: detected capacity change from 0 to 2048
[  302.591319][T11629] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  303.276765][T11652] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1967'.
[  303.298291][T11651] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1968'.
[  303.307414][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1967'.
[  303.324317][T11652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1967'.
[  304.521349][T11688] loop6: detected capacity change from 0 to 256
[  304.587235][T11688] FAT-fs (loop6): Directory bread(block 64) failed
[  304.594600][T11688] FAT-fs (loop6): Directory bread(block 65) failed
[  304.606404][T11688] FAT-fs (loop6): Directory bread(block 66) failed
[  304.613736][T11688] FAT-fs (loop6): Directory bread(block 67) failed
[  304.630233][T11688] FAT-fs (loop6): Directory bread(block 68) failed
[  304.636944][T11688] FAT-fs (loop6): Directory bread(block 69) failed
[  304.653612][T11677] loop0: detected capacity change from 0 to 32768
[  304.668244][T11688] FAT-fs (loop6): Directory bread(block 70) failed
[  304.690663][T11688] FAT-fs (loop6): Directory bread(block 71) failed
[  304.697335][T11688] FAT-fs (loop6): Directory bread(block 72) failed
[  304.714026][T11677] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1979 (11677)
[  304.727553][T11688] FAT-fs (loop6): Directory bread(block 73) failed
[  304.770179][T11677] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  304.817896][T11677] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  304.842974][T11677] BTRFS info (device loop0): force clearing of disk cache
[  304.866173][T11677] BTRFS info (device loop0): setting nodatacow, compression disabled
[  304.899396][T11677] BTRFS info (device loop0): enabling auto defrag
[  304.929345][T11688] syz.6.1984: attempt to access beyond end of device
[  304.929345][T11688] loop6: rw=2049, sector=1224, nr_sectors = 4 limit=256
[  304.944252][T11677] BTRFS info (device loop0): max_inline at 0
[  304.965187][T11677] BTRFS info (device loop0): enabling disk space caching
[  305.007860][T11677] BTRFS info (device loop0): disk space caching is enabled
[  305.208612][T11677] BTRFS info (device loop0): enabling ssd optimizations
[  305.267508][T11677] BTRFS info (device loop0): rebuilding free space tree
[  305.342180][T11677] BTRFS info (device loop0): disabling free space tree
[  305.362224][T11677] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  305.403425][T11677] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  305.636843][T11728] loop6: detected capacity change from 0 to 512
[  305.681090][T11728] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  305.767692][T11728] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.1993: bad orphan inode 131083
[  305.816557][T11728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.950161][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  306.022773][ T9779] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.204743][T11720] loop4: detected capacity change from 0 to 32768
[  306.237032][T11737] ima: policy update completed
[  306.251278][   T28] audit: type=1807 audit(1788933802.594:61): action=measure uid>1 res=1
[  306.287308][T11720] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  306.291865][   T28] audit: type=1802 audit(1788933802.604:62): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.1996" res=1 errno=0
[  306.488274][T11720] XFS (loop4): Ending clean mount
[  306.682769][ T6503] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  306.878020][    T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  307.110451][    T8] usb 6-1: Using ep0 maxpacket: 32
[  307.117689][    T8] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 77, changing to 10
[  307.148850][    T8] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  307.196264][    T8] usb 6-1: config 0 interface 0 has no altsetting 0
[  307.217395][    T8] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[  307.242408][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.260094][    T8] usb 6-1: config 0 descriptor??
[  307.797162][T11763] loop0: detected capacity change from 0 to 40427
[  307.820521][T11763] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  307.834579][T11763] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  307.865713][T11763] F2FS-fs (loop0): Found nat_bits in checkpoint
[  307.916692][    T8] sony 0003:1345:3008.000F: failed to retrieve feature report 0xf2 with the Sixaxis MAC address
[  307.956241][    T8] sony 0003:1345:3008.000F: hiddev0,hidraw0: USB HID v80.04 Joystick [HID 1345:3008] on usb-dummy_hcd.5-1/input0
[  307.990212][    T8] sony 0003:1345:3008.000F: failed to claim input
[  307.990511][T11763] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  308.024416][    T8] usb 6-1: USB disconnect, device number 12
[  308.058828][T11763] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  308.149481][T11782] fido_id[11782]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  308.225793][T11763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  308.244267][T11763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  308.259842][T11763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  308.267450][T11763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  308.275431][T11763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  308.283141][T11763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  308.291233][T11763] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  308.813614][T11794] program syz.0.2019 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  309.285755][T11811] loop6: detected capacity change from 0 to 1024
[  309.496580][T11813] loop4: detected capacity change from 0 to 1024
[  309.529606][T11813] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  309.656602][T11802] loop0: detected capacity change from 0 to 32768
[  309.745193][T11802] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  309.784785][T11802] JBD2: Ignoring recovery information on journal
[  309.957705][T11802] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  309.982651][T11823] loop5: detected capacity change from 0 to 256
[  310.001448][T11821] loop6: detected capacity change from 0 to 4096
[  310.044906][T11821] EXT4-fs (loop6): Test dummy encryption mode enabled
[  310.090657][T11821] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003]
[  310.124650][T11821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.163517][T11823] FAT-fs (loop5): Directory bread(block 64) failed
[  310.192786][T11823] FAT-fs (loop5): Directory bread(block 65) failed
[  310.217072][T11823] FAT-fs (loop5): Directory bread(block 66) failed
[  310.244623][T11823] FAT-fs (loop5): Directory bread(block 67) failed
[  310.261455][T11802] overlayfs: upper fs does not support tmpfile.
[  310.265025][T11823] FAT-fs (loop5): Directory bread(block 68) failed
[  310.275379][T11821] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  310.286192][T11802] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  310.313238][T11802] overlayfs: failed to set xattr on upper
[  310.325559][T11823] FAT-fs (loop5): Directory bread(block 69) failed
[  310.343014][T11802] overlayfs: ...falling back to redirect_dir=nofollow.
[  310.358343][T11823] FAT-fs (loop5): Directory bread(block 70) failed
[  310.374126][T11818] loop4: detected capacity change from 0 to 32768
[  310.377895][T11802] overlayfs: ...falling back to index=off.
[  310.388485][T11802] overlayfs: ...falling back to uuid=null.
[  310.394434][T11823] FAT-fs (loop5): Directory bread(block 71) failed
[  310.404559][T11802] overlayfs: upper fs missing required features.
[  310.414763][T11823] FAT-fs (loop5): Directory bread(block 72) failed
[  310.426587][T11821] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  310.448023][T11821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  310.466102][T11823] FAT-fs (loop5): Directory bread(block 73) failed
[  310.483319][T11818] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  310.486047][T11821] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003]
[  310.505538][T11821] System zones: 0-5
[  310.511768][T11821] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  310.657608][T11818] XFS (loop4): Ending clean mount
[  310.710159][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[  310.720071][ T9779] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.766482][T11823] syz.5.2026: attempt to access beyond end of device
[  310.766482][T11823] loop5: rw=2049, sector=1224, nr_sectors = 4 limit=256
[  310.952036][T11838] netlink: 'syz.6.2030': attribute type 1 has an invalid length.
[  310.970685][ T6503] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  311.579104][T11846] loop5: detected capacity change from 0 to 32768
[  311.608025][T11846] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.2034 (11846)
[  311.635922][T11846] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  311.658582][T11846] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  311.678397][T11846] BTRFS info (device loop5): using free space tree
[  311.798068][T11846] BTRFS info (device loop5): enabling ssd optimizations
[  311.820042][T11846] BTRFS info (device loop5): auto enabling async discard
[  311.943686][ T7736] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  312.016763][T11854] loop6: detected capacity change from 0 to 32768
[  312.090744][T11854] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  312.135886][T11854] JBD2: Ignoring recovery information on journal
[  312.374188][T11854] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  312.713712][T11854] overlayfs: upper fs does not support tmpfile.
[  312.741986][T11883] loop4: detected capacity change from 0 to 256
[  312.766785][T11854] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  312.817065][T11883] FAT-fs (loop4): Directory bread(block 64) failed
[  312.837209][T11854] overlayfs: failed to set xattr on upper
[  312.848352][T11883] FAT-fs (loop4): Directory bread(block 65) failed
[  312.855026][T11883] FAT-fs (loop4): Directory bread(block 66) failed
[  312.866042][T11854] overlayfs: ...falling back to redirect_dir=nofollow.
[  312.873641][T11883] FAT-fs (loop4): Directory bread(block 67) failed
[  312.880963][T11854] overlayfs: ...falling back to index=off.
[  312.887692][T11883] FAT-fs (loop4): Directory bread(block 68) failed
[  312.907887][T11854] overlayfs: ...falling back to uuid=null.
[  312.913744][T11854] overlayfs: upper fs missing required features.
[  312.920759][T11883] FAT-fs (loop4): Directory bread(block 69) failed
[  312.941129][T11883] FAT-fs (loop4): Directory bread(block 70) failed
[  312.947697][T11883] FAT-fs (loop4): Directory bread(block 71) failed
[  313.008986][T11883] FAT-fs (loop4): Directory bread(block 72) failed
[  313.036268][T11883] FAT-fs (loop4): Directory bread(block 73) failed
[  313.131823][ T9779] ocfs2: Unmounting device (7,6) on (node local)
[  313.280016][T11883] syz.4.2040: attempt to access beyond end of device
[  313.280016][T11883] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256
[  313.743454][T11887] loop0: detected capacity change from 0 to 32768
[  313.768563][T11887] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2041 (11887)
[  313.811214][T11887] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  313.847871][T11887] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  313.874962][T11887] BTRFS info (device loop0): turning off barriers
[  313.893250][T11887] BTRFS info (device loop0): turning on async discard
[  313.917859][ T5831] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  313.928111][T11887] BTRFS info (device loop0): doing ref verification
[  313.946720][T11887] BTRFS info (device loop0): using free space tree
[  314.093460][T11887] BTRFS info (device loop0): enabling ssd optimizations
[  314.108051][ T5831] usb 5-1: Using ep0 maxpacket: 32
[  314.163396][ T5831] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  314.180622][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.204666][T11923] loop5: detected capacity change from 0 to 2048
[  314.218897][ T5831] usb 5-1: Product: syz
[  314.223112][ T5831] usb 5-1: Manufacturer: syz
[  314.254999][ T5831] usb 5-1: SerialNumber: syz
[  314.255117][T11923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  314.279539][ T5831] usb 5-1: config 0 descriptor??
[  314.334831][T11923] CacheFiles: Failed to register: -95
[  314.570638][T11897] loop6: detected capacity change from 0 to 32768
[  314.659494][T11897] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  314.740331][ T5831] airspy 5-1:0.0: Board ID: 00
[  314.745375][ T5831] airspy 5-1:0.0: Firmware version: 
[  314.812219][ T5771] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  314.816449][T11897] XFS (loop6): Ending clean mount
[  315.152856][ T5831] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e
[  315.175872][ T5831] airspy 5-1:0.0: Registered as swradio24
[  315.186544][T11943] loop5: detected capacity change from 0 to 256
[  315.194359][ T5831] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  315.217426][ T5831] usb 5-1: USB disconnect, device number 17
[  315.224499][ T9779] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  315.325800][T11943] FAT-fs (loop5): Directory bread(block 64) failed
[  315.362420][T11943] FAT-fs (loop5): Directory bread(block 65) failed
[  315.382963][T11943] FAT-fs (loop5): Directory bread(block 66) failed
[  315.410823][T11943] FAT-fs (loop5): Directory bread(block 67) failed
[  315.417482][T11943] FAT-fs (loop5): Directory bread(block 68) failed
[  315.427836][T11943] FAT-fs (loop5): Directory bread(block 69) failed
[  315.434582][T11943] FAT-fs (loop5): Directory bread(block 70) failed
[  315.455298][T11943] FAT-fs (loop5): Directory bread(block 71) failed
[  315.462635][T11943] FAT-fs (loop5): Directory bread(block 72) failed
[  315.485168][T11943] FAT-fs (loop5): Directory bread(block 73) failed
[  315.691452][T11943] syz.5.2057: attempt to access beyond end of device
[  315.691452][T11943] loop5: rw=2049, sector=1224, nr_sectors = 4 limit=256
[  315.744276][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'.
[  315.754946][T11950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2060'.
[  316.154570][T11948] loop0: detected capacity change from 0 to 40427
[  316.190841][T11948] F2FS-fs (loop0): invalid crc value
[  316.204172][T11948] F2FS-fs (loop0): Found nat_bits in checkpoint
[  316.294249][T11952] loop4: detected capacity change from 0 to 32768
[  316.308870][T11948] F2FS-fs (loop0): Start checkpoint disabled!
[  316.311467][T11952] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2061 (11952)
[  316.360269][T11948] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  316.363753][T11952] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  316.386640][T11952] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  316.396480][T11952] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  316.409153][T11952] BTRFS info (device loop4): use zstd compression, level 3
[  316.416390][T11952] BTRFS info (device loop4): using free space tree
[  316.602932][T11952] BTRFS info (device loop4): enabling ssd optimizations
[  316.647947][T11952] BTRFS info (device loop4): auto enabling async discard
[  316.718443][   T59] kworker/u4:4: attempt to access beyond end of device
[  316.718443][   T59] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  316.758085][   T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  316.765270][   T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  316.871823][T11976] loop6: detected capacity change from 0 to 2048
[  316.957286][T11977] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  317.033848][ T6503] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  317.047623][T11979] loop5: detected capacity change from 0 to 1024
[  317.149620][T11979] hfsplus: xattr search failed
[  317.324101][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  317.330732][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  317.829205][T11986] loop0: detected capacity change from 0 to 4096
[  317.850042][T11986] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  317.971766][T11986] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  318.004800][T11986] ntfs3: loop0: Failed to load $Extend (-22).
[  318.026312][T11986] ntfs3: loop0: Failed to initialize $Extend.
[  318.156853][T11986] overlayfs: upper fs does not support tmpfile.
[  318.163306][T12000] loop5: detected capacity change from 0 to 4096
[  318.220730][T11986] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  318.276232][T12000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.306330][T11986] ntfs3: loop0: ino=1b, "file0" attr_set_size
[  318.310444][T11988] loop4: detected capacity change from 0 to 32768
[  318.328267][T11988] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2064 (11988)
[  318.357009][T11986] overlayfs: failed to set uuid (/file0, err=-2); falling back to uuid=null.
[  318.390579][T11986] overlayfs: failed to get origin (-5)
[  318.404209][T11988] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  318.406670][T12000] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2073: corrupted inode contents
[  318.437389][T11986] overlayfs: failed to verify origin (/, ino=5, err=-5)
[  318.455152][T12000] EXT4-fs error (device loop5): ext4_dirty_inode:6144: inode #15: comm syz.5.2073: mark_inode_dirty error
[  318.458459][T11988] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  318.486315][T11986] overlayfs: failed to verify upper root origin
[  318.499293][T12000] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2073: corrupted inode contents
[  318.531889][T11988] BTRFS info (device loop4): turning off barriers
[  318.542419][T12000] EXT4-fs error (device loop5): __ext4_ext_dirty:208: inode #15: comm syz.5.2073: mark_inode_dirty error
[  318.557904][T11988] BTRFS info (device loop4): turning on async discard
[  318.564718][T11988] BTRFS info (device loop4): doing ref verification
[  318.594704][T12000] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2073: corrupted inode contents
[  318.598731][T11988] BTRFS info (device loop4): using free space tree
[  318.641147][T12000] EXT4-fs error (device loop5): __ext4_ext_dirty:208: inode #15: comm syz.5.2073: mark_inode_dirty error
[  318.705216][T12000] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2073: corrupted inode contents
[  318.783774][T12000] EXT4-fs error (device loop5): ext4_truncate:4302: inode #15: comm syz.5.2073: mark_inode_dirty error
[  318.814372][T12000] EXT4-fs error (device loop5) in ext4_setattr:5683: Corrupt filesystem
[  318.841933][T11988] BTRFS info (device loop4): enabling ssd optimizations
[  318.902110][T12025] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  318.911324][T12025] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  318.918154][T12005] EXT4-fs error (device loop5): ext4_do_update_inode:5256: inode #15: comm syz.5.2073: corrupted inode contents
[  318.920228][T12025] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  318.940959][T12025] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  319.129419][ T7736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.354127][ T6503] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  319.475619][T12004] loop6: detected capacity change from 0 to 32768
[  319.568360][T12004] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  319.806838][T12004] XFS (loop6): Ending clean mount
[  320.058759][ T9779] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  320.502331][T12057] loop6: detected capacity change from 0 to 256
[  320.518758][T12057] exfat: Deprecated parameter 'namecase'
[  320.527311][T12057] exfat: Deprecated parameter 'namecase'
[  320.530994][T12047] loop4: detected capacity change from 0 to 32768
[  320.534350][T12057] exfat: Deprecated parameter 'namecase'
[  320.577639][T12057] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  320.612701][T12047] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  320.685118][T12047] (syz.4.2080,12047,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  320.799386][ T6503] ocfs2: Unmounting device (7,4) on (node local)
[  320.803862][T12062] program syz.5.2097 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  321.016053][T12069] loop5: detected capacity change from 0 to 512
[  321.108404][T12069] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 33619980: comm syz.5.2093: invalid block
[  321.161297][T12074] loop0: detected capacity change from 0 to 256
[  321.212312][T12069] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.2093: Invalid block bitmap block 0 in block_group 0
[  321.215982][T12074] exFAT-fs (loop0): error, The cluster chain has a loop
[  321.248099][T12074] exFAT-fs (loop0): Filesystem has been set read-only
[  321.254913][T12074] exFAT-fs (loop0): failed to count the number of clusters in root
[  321.267229][T12069] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  321.304501][T12069] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.2093: attempt to clear invalid blocks 983261 len 1
[  321.310531][T12074] exFAT-fs (loop0): failed to recognize exfat type
[  321.342132][T12069] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2093: invalid indirect mapped block 2683928664 (level 0)
[  321.380280][T12069] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.2093: Invalid inode table block 0 in block_group 0
[  321.412468][T12069] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  321.441003][T12069] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  321.452374][T12069] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.2093: Invalid inode table block 0 in block_group 0
[  321.472492][T12069] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem
[  321.486060][T12069] EXT4-fs error (device loop5): ext4_truncate:4302: inode #13: comm syz.5.2093: mark_inode_dirty error
[  321.497907][T12069] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  321.518021][T12069] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.2093: Invalid inode table block 0 in block_group 0
[  321.548665][T12069] EXT4-fs (loop5): 1 truncate cleaned up
[  321.559569][T12069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.685901][ T7736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.706362][T12065] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.2089 (12065)
[  321.730472][T12065] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  321.741752][T12065] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  321.796339][T12065] BTRFS info (device loop6): turning off barriers
[  321.828330][T12065] BTRFS info (device loop6): turning on async discard
[  321.837158][T12065] BTRFS info (device loop6): doing ref verification
[  321.845133][T12065] BTRFS info (device loop6): using free space tree
[  321.860866][T12083] program syz.5.2099 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  321.913126][T12065] BTRFS info (device loop6): enabling ssd optimizations
[  322.226638][ T9779] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  322.554955][T12114] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  322.594529][T12114] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  322.998357][ T5830] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  323.167041][T12126] set_capacity_and_notify: 1 callbacks suppressed
[  323.167051][T12126] loop0: detected capacity change from 0 to 32768
[  323.184638][T12126] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2111 (12126)
[  323.194790][ T5830] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.224916][T12126] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  323.235802][T12126] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  323.236678][ T5830] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.245998][T12126] BTRFS info (device loop0): turning off barriers
[  323.255910][ T5830] usb 7-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  323.273195][T12126] BTRFS info (device loop0): turning on async discard
[  323.280287][ T5830] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.280625][T12126] BTRFS info (device loop0): doing ref verification
[  323.307260][T12126] BTRFS info (device loop0): using free space tree
[  323.396007][T12126] BTRFS info (device loop0): enabling ssd optimizations
[  323.569490][ T5771] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  323.735048][ T6039] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop0 scanned by udevd (6039)
[  323.754154][ T5830] wacom 0003:056A:033B.0010: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  323.800069][ T5830] wacom 0003:056A:033B.0010: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.6-1/input0
[  323.844514][ T5830] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/0003:056A:033B.0010/input/input31
[  324.037706][ T5830] usb 7-1: USB disconnect, device number 7
[  324.050825][ T5831] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  324.290345][ T5831] usb 1-1: Using ep0 maxpacket: 32
[  324.317077][ T5831] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  324.326483][ T5831] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  324.358171][ T5831] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  324.389267][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  324.407938][ T5831] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  324.416546][T12145] loop4: detected capacity change from 0 to 32768
[  324.448205][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  324.472318][ T5831] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  324.505659][ T5831] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  324.507914][T12145] JBD2: Ignoring recovery information on journal
[  324.568440][ T5831] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  324.588725][T12145] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  324.628686][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.668681][ T5831] usb 1-1: config 0 descriptor??
[  324.823379][T12151] loop5: detected capacity change from 0 to 32768
[  324.848351][ T6503] ocfs2: Unmounting device (7,4) on (node local)
[  324.858168][T12151] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.2114 (12151)
[  324.904934][T12151] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  324.921398][ T5831] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  324.942541][T12151] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  324.972889][T12151] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  324.997704][T12151] BTRFS info (device loop5): use zstd compression, level 3
[  325.013719][T12151] BTRFS info (device loop5): using free space tree
[  325.143557][ T5831] usb 1-1: USB disconnect, device number 21
[  325.171385][ T5831] usblp0: removed
[  325.201467][T12151] BTRFS info (device loop5): enabling ssd optimizations
[  325.244603][T12151] BTRFS info (device loop5): auto enabling async discard
[  325.470773][ T7736] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  325.606237][ T6039] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop5 scanned by udevd (6039)
[  325.915299][T12187] kAFS: Invalid Command on /proc/fs/afs/cells file
[  326.082305][    T9] smpboot: CPU 1 is now offline
[  326.118171][T12189] loop5: detected capacity change from 0 to 2048
[  326.266109][T12189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.964550][ T7736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.987269][T12203] loop6: detected capacity change from 0 to 16384
[  327.124508][T12208] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  327.360797][T12201] loop0: detected capacity change from 0 to 32768
[  327.457793][T12201] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  327.514588][T12201] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  327.596621][T12201] BTRFS info (device loop0): turning off barriers
[  327.637898][T12201] BTRFS info (device loop0): turning on async discard
[  327.644708][T12201] BTRFS info (device loop0): doing ref verification
[  327.737982][T12201] BTRFS info (device loop0): using free space tree
[  327.747855][ T5835] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  327.896943][T12201] BTRFS info (device loop0): enabling ssd optimizations
[  327.948486][ T5835] usb 7-1: Using ep0 maxpacket: 32
[  327.968303][ T5835] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  327.998154][ T5835] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  328.006778][ T5835] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  328.091201][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  328.135312][ T5835] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  328.188499][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  328.230582][ T5835] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  328.278130][ T5835] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  328.340814][ T5771] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  328.353854][ T5835] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  328.399088][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.442077][ T5835] usb 7-1: config 0 descriptor??
[  328.721128][ T5835] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  328.925203][T12213] loop4: detected capacity change from 0 to 40427
[  329.014833][    T9] usb 7-1: USB disconnect, device number 8
[  329.063728][    T9] usblp0: removed
[  329.075370][T12213] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  329.139012][T12245] sd 0:0:1:0: PR command failed: 1026
[  329.152129][T12213] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  329.183457][T12245] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  329.223943][T12245] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  329.243218][T12213] F2FS-fs (loop4): invalid crc value
[  329.322727][T12213] F2FS-fs (loop4): Found nat_bits in checkpoint
[  329.480070][T12253] loop0: detected capacity change from 0 to 1024
[  329.772037][T12213] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  329.837676][T12213] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  330.052764][T12264] Bluetooth: MGMT ver 1.22
[  330.287694][T12270] loop0: detected capacity change from 0 to 2048
[  330.370701][T12270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.543778][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.138532][    T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  331.210834][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.292988][T12289] netlink: 'syz.4.2151': attribute type 1 has an invalid length.
[  331.341858][    T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  331.379288][    T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  331.427898][    T8] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  331.437586][    T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  331.475463][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.536444][    T8] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  331.592900][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.627271][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.826665][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.247864][ T5835] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  332.352699][    T8] gud 6-1:1.0: Failed to get properties (error=-5)
[  332.401980][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  332.414256][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  332.424666][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  332.432577][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  332.440745][    T8] gud: probe of 6-1:1.0 failed with error -5
[  332.447234][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  332.454599][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  332.467895][ T5835] usb 1-1: Using ep0 maxpacket: 32
[  332.519842][ T5835] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  332.578930][ T5835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.598193][    T8] usb 6-1: USB disconnect, device number 13
[  332.621169][ T5835] usb 1-1: Product: syz
[  332.625362][ T5835] usb 1-1: Manufacturer: syz
[  332.676763][ T5835] usb 1-1: SerialNumber: syz
[  332.729657][ T5835] usb 1-1: config 0 descriptor??
[  333.184853][ T5835] airspy 1-1:0.0: Board ID: 00
[  333.206787][ T5835] airspy 1-1:0.0: Firmware version: 
[  333.234723][T12321] loop9: detected capacity change from 0 to 7
[  333.285441][T12321] Dev loop9: unable to read RDB block 7
[  333.334662][T12321]  loop9: unable to read partition table
[  333.368427][T12321] loop9: partition table beyond EOD, truncated
[  333.433272][T12321] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  333.587385][ T5835] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e
[  333.658139][ T5835] airspy 1-1:0.0: Registered as swradio24
[  333.690866][ T5835] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  333.770518][ T5835] usb 1-1: USB disconnect, device number 22
[  333.872909][T12328] loop5: detected capacity change from 0 to 8192
[  333.883017][T12303] chnl_net:caif_netlink_parms(): no params data found
[  333.923743][T12328] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  334.046172][T12328] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  334.103596][T12328] REISERFS (device loop5): using ordered data mode
[  334.142712][T12328] reiserfs: using flush barriers
[  334.210696][T12328] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  334.338413][T12328] REISERFS (device loop5): checking transaction log (loop5)
[  334.507920][ T5776] Bluetooth: hci3: command tx timeout
[  334.631565][T12328] REISERFS (device loop5): Using tea hash to sort names
[  334.719463][T12328] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  334.789597][   T11] hsr_slave_0: left promiscuous mode
[  334.821567][   T11] hsr_slave_1: left promiscuous mode
[  334.866340][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  334.917841][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  335.006985][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  335.056006][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  335.081322][T12358] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  335.088397][T12358] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  335.105032][   T11] bridge_slave_1: left allmulticast mode
[  335.131899][   T11] bridge_slave_1: left promiscuous mode
[  335.137603][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  335.209254][   T11] bridge_slave_0: left allmulticast mode
[  335.214925][   T11] bridge_slave_0: left promiscuous mode
[  335.297995][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.578036][   T11] veth1_macvtap: left promiscuous mode
[  335.583574][   T11] veth0_macvtap: left promiscuous mode
[  335.637276][   T11] veth1_vlan: left promiscuous mode
[  335.687199][   T11] veth0_vlan: left promiscuous mode
[  335.711490][T12373] loop4: detected capacity change from 0 to 2048
[  335.791238][T12373] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  335.973011][T12373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  336.227483][T12367] loop0: detected capacity change from 0 to 32768
[  336.306851][T12367] JBD2: Ignoring recovery information on journal
[  336.423836][T12367] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  336.588128][ T5776] Bluetooth: hci3: command tx timeout
[  336.747587][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[  336.771040][ T5835] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  336.990285][ T5835] usb 6-1: config 1 has an invalid interface number: 36 but max is 1
[  337.016406][ T5835] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  337.053659][ T5835] usb 6-1: config 1 has no interface number 1
[  337.084101][ T5835] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  337.145486][ T5835] usb 6-1: config 1 interface 36 has no altsetting 0
[  337.168802][ T5835] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  337.200694][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.244590][ T5835] usb 6-1: Product: syz
[  337.261068][ T5835] usb 6-1: Manufacturer: syz
[  337.283990][ T5835] usb 6-1: SerialNumber: syz
[  337.305627][ T5835] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  337.337240][ T5835] cdc_ncm 6-1:1.0: bind() failure
[  337.744797][ T5835] usb 6-1: USB disconnect, device number 14
[  337.820493][T12404] nbd0: detected capacity change from 0 to 63
[  337.881423][ T5776] block nbd0: Receive control failed (result -104)
[  338.297108][T12414] loop0: detected capacity change from 0 to 512
[  338.405503][T12414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.499525][   T11] team0 (unregistering): Port device team_slave_1 removed
[  338.554543][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.653464][   T11] team0 (unregistering): Port device team_slave_0 removed
[  338.668126][ T5776] Bluetooth: hci3: command tx timeout
[  338.786469][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  338.853814][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.412672][   T11] bond0 (unregistering): Released all slaves
[  339.441764][T12428] loop5: detected capacity change from 0 to 64
[  339.505572][T12428] hfs: request for non-existent node 131072 in B*Tree
[  339.546171][T12428] hfs: request for non-existent node 131072 in B*Tree
[  339.773797][T12303] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.811382][T12303] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.838914][T12303] bridge_slave_0: entered allmulticast mode
[  339.878571][T12303] bridge_slave_0: entered promiscuous mode
[  339.917963][T12303] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.925070][T12303] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.984304][T12303] bridge_slave_1: entered allmulticast mode
[  340.027149][T12303] bridge_slave_1: entered promiscuous mode
[  340.081132][T12438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2208'.
[  340.177191][T12438] ipvlan2: entered allmulticast mode
[  340.186419][T12438] syz_tun: entered allmulticast mode
[  340.208875][   T28] audit: type=1326 audit(1788933836.574:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.2212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3782d9e159 code=0x7ffc0000
[  340.325274][   T28] audit: type=1326 audit(1788933836.604:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.2212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3782d9e159 code=0x7ffc0000
[  340.420705][T12303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.461282][   T28] audit: type=1326 audit(1788933836.604:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.2212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3782d9e159 code=0x7ffc0000
[  340.550224][T12303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.657949][   T28] audit: type=1326 audit(1788933836.614:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.2212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3782d9e159 code=0x7ffc0000
[  340.713165][   T11] IPVS: stop unused estimator thread 0...
[  340.781920][ T5776] Bluetooth: hci3: command tx timeout
[  340.798704][T12303] team0: Port device team_slave_0 added
[  340.866487][T12303] team0: Port device team_slave_1 added
[  340.881617][   T28] audit: type=1326 audit(1788933836.624:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.2212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3782d9e159 code=0x7ffc0000
[  340.993042][T12303] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.049603][T12303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.091776][   T28] audit: type=1326 audit(1788933836.624:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.2212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3782d9e159 code=0x7ffc0000
[  341.151584][ T5810] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  341.225975][T12303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  341.240486][   T28] audit: type=1326 audit(1788933836.624:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.0.2212" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3782d9e159 code=0x7ffc0000
[  341.329750][T12303] batman_adv: batadv0: Adding interface: batadv_slave_1
[  341.336730][T12303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  341.407918][ T5810] usb 5-1: Using ep0 maxpacket: 8
[  341.457839][ T5810] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  341.487364][ T5810] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  341.560841][ T5810] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  341.575287][T12303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  341.623324][ T5810] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  341.710179][ T5810] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  341.793464][ T5810] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  341.808239][T12303] hsr_slave_0: entered promiscuous mode
[  341.840069][T12303] hsr_slave_1: entered promiscuous mode
[  341.849800][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.882636][T12303] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  341.923364][T12303] Cannot create hsr debugfs directory
[  342.056746][T12486] loop0: detected capacity change from 0 to 256
[  342.147816][ T5810] usb 5-1: GET_CAPABILITIES returned 0
[  342.200694][ T5810] usbtmc 5-1:16.0: can't read capabilities
[  342.509250][ T5810] usb 5-1: USB disconnect, device number 18
[  342.932821][T12480] loop5: detected capacity change from 0 to 32768
[  343.066292][T12480] JBD2: Ignoring recovery information on journal
[  343.240377][T12480] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  343.371774][T12480] (syz.5.2224,12480,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1
[  343.451289][T12504] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2231'.
[  343.800443][ T7736] ocfs2: Unmounting device (7,5) on (node local)
[  343.902246][T12497] loop0: detected capacity change from 0 to 32768
[  343.989631][T12511] loop4: detected capacity change from 0 to 4096
[  343.996643][T12511] EXT4-fs: inline encryption not supported
[  344.006033][T12303] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  344.155492][T12303] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  344.177522][T12511] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  344.242221][T12511] EXT4-fs (loop4): Test dummy encryption mode enabled
[  344.284061][T12303] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  344.322377][T12511] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  344.342419][T12303] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  344.388761][T12511] System zones: 0-5
[  344.462548][T12511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.616229][T12303] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.715775][T12303] 8021q: adding VLAN 0 to HW filter on device team0
[  344.780159][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.787269][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.828190][ T5835] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  344.850587][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.857696][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.028614][T12303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  345.066612][T12303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  345.086861][ T5835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  345.123154][ T5835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  345.171727][ T5835] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  345.218212][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  345.269828][ T5835] usb 5-1: SerialNumber: syz
[  345.440980][T12537] Bluetooth: hci0: unsupported parameter 5135
[  345.499559][T12537] Bluetooth: hci0: unsupported parameter 8192
[  345.505738][T12537] Bluetooth: hci0: unsupported parameter 5135
[  345.530932][ T5835] usb 5-1: 0:2 : does not exist
[  345.581346][T12537] Bluetooth: hci0: unsupported parameter 8192
[  345.599648][ T5835] usb 5-1: USB disconnect, device number 19
[  345.810883][T12303] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.087912][    T8] usb 1-1: new low-speed USB device number 23 using dummy_hcd
[  346.131028][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.281753][T12567] loop5: detected capacity change from 0 to 512
[  346.335276][    T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  346.360168][T12567] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  346.395295][    T8] usb 1-1: config 0 has no interface number 0
[  346.426241][    T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  346.490714][    T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  346.535977][T12567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.582436][    T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  346.630699][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.648644][T12303] veth0_vlan: entered promiscuous mode
[  346.654556][T12567] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.711206][    T8] usb 1-1: config 0 descriptor??
[  346.718123][T12549] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  346.731097][T12303] veth1_vlan: entered promiscuous mode
[  346.772899][    T8] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  346.866882][T12303] veth0_macvtap: entered promiscuous mode
[  346.926489][T12303] veth1_macvtap: entered promiscuous mode
[  346.966881][ T7736] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.984003][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.032500][    T8] usb 1-1: USB disconnect, device number 23
[  347.081822][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.146792][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.207218][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.261187][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.306299][T12585] loop5: detected capacity change from 0 to 2048
[  347.327125][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.364631][T12303] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.382615][T12585] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  347.442908][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.486269][T12585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  347.497846][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.507696][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.609011][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.666129][T12303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  347.702721][T12303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.767470][T12303] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.830572][T12303] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.889912][T12303] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.943079][T12303] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.993845][T12303] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.394914][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.454840][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.556512][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.602249][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.119282][T12636] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2261'.
[  349.181985][T12636] netlink: zone id is out of range
[  349.298169][T12643] loop5: detected capacity change from 0 to 2048
[  349.370347][T12643] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  349.479428][T12643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  349.594248][T12643] UDF-fs: bad mount option "fscontext=system_u" or missing value
[  349.726291][T12654] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0)
[  349.768009][ T7736] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh
[  349.823970][ T7736] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh
[  349.841957][T12654] rtrs_client L2075: <s1>: Failed to resolve address, err: -19
[  349.896018][T12654] rtrs_client L2618: <s1>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  350.287845][   T28] audit: type=1400 audit(1788933846.644:70): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="//o" pid=12660 comm="syz.6.2269" name="//o" offset=81
[  350.506754][T12645] loop4: detected capacity change from 0 to 32768
[  350.521735][T12650] loop0: detected capacity change from 0 to 40427
[  350.594278][T12650] F2FS-fs (loop0): invalid crc value
[  350.627695][T12650] F2FS-fs (loop0): Found nat_bits in checkpoint
[  350.706791][T12645] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2262 (12645)
[  350.853706][   T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.925299][T12645] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  350.963297][T12650] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  351.006268][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2270'.
[  351.065522][T12645] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  351.120036][T12665] ipvlan2: entered allmulticast mode
[  351.141696][T12665] syz_tun: entered allmulticast mode
[  351.147244][T12650] syz.0.2266: attempt to access beyond end of device
[  351.147244][T12650] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  351.192043][T12645] BTRFS info (device loop4): turning off barriers
[  351.256745][T12645] BTRFS info (device loop4): turning on async discard
[  351.349571][T12645] BTRFS info (device loop4): doing ref verification
[  351.356202][T12645] BTRFS info (device loop4): using free space tree
[  351.391901][ T5771] syz-executor: attempt to access beyond end of device
[  351.391901][ T5771] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  351.504769][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  351.641892][   T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.721915][T12645] BTRFS info (device loop4): enabling ssd optimizations
[  351.969754][   T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.255883][T12705] loop6: detected capacity change from 0 to 256
[  352.321982][   T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.584849][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  352.600265][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  352.609287][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  352.617166][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  352.628233][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  352.635425][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  352.748180][ T6503] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  352.864182][T12715] loop6: detected capacity change from 0 to 512
[  352.993160][T12715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.103571][T12715] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  353.189103][T12717] loop0: detected capacity change from 0 to 4096
[  353.532982][T12709] chnl_net:caif_netlink_parms(): no params data found
[  353.560795][T12303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.418831][T12709] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.425964][T12709] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.520738][T12709] bridge_slave_0: entered allmulticast mode
[  354.559456][T12709] bridge_slave_0: entered promiscuous mode
[  354.613021][T12709] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.677608][ T5780] Bluetooth: hci2: command tx timeout
[  354.687878][T12709] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.695122][T12709] bridge_slave_1: entered allmulticast mode
[  354.822805][T12764] loop0: detected capacity change from 0 to 8
[  354.834500][T12709] bridge_slave_1: entered promiscuous mode
[  354.846136][    T9] hid-generic 0005:0B57:05DF.0011: item fetching failed at offset 0/1
[  354.916256][    T9] hid-generic: probe of 0005:0B57:05DF.0011 failed with error -22
[  355.201428][T12773] loop0: detected capacity change from 0 to 128
[  355.281089][T12709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.291266][T12776] netlink: 'syz.6.2292': attribute type 29 has an invalid length.
[  355.307624][T12773] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  355.360043][T12709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.391779][T12773] ext4 filesystem being mounted at /622/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  355.506238][T12776] netlink: 'syz.6.2292': attribute type 29 has an invalid length.
[  355.554647][T12778] netlink: 'syz.6.2292': attribute type 29 has an invalid length.
[  355.582792][T12773] overlayfs: upper fs needs to support d_type.
[  355.694366][ T5771] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  355.715798][T12779] netlink: 'syz.6.2292': attribute type 29 has an invalid length.
[  355.911981][T12709] team0: Port device team_slave_0 added
[  355.972212][T12709] team0: Port device team_slave_1 added
[  356.110871][   T12] batman_adv: batadv0: Interface deactivated: gretap1
[  356.392514][   T12] batman_adv: batadv0: Removing interface: gretap1
[  356.532511][T12709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.580537][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.748610][ T5780] Bluetooth: hci2: command tx timeout
[  356.754162][T12709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.836345][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2301'.
[  356.874475][T12804] vlan2: entered promiscuous mode
[  356.900217][T12804] dummy0: entered promiscuous mode
[  357.015618][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2302'.
[  357.036474][T12816] loop4: detected capacity change from 0 to 8
[  357.051105][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'.
[  357.092441][T12808] netlink: 'syz.0.2302': attribute type 6 has an invalid length.
[  357.149627][T12709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.211585][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.382956][T12709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.685361][T12709] hsr_slave_0: entered promiscuous mode
[  357.712550][T12709] hsr_slave_1: entered promiscuous mode
[  357.727378][T12709] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  357.763311][T12709] Cannot create hsr debugfs directory
[  358.173737][   T12] hsr_slave_0: left promiscuous mode
[  358.203998][   T12] hsr_slave_1: left promiscuous mode
[  358.233767][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  358.270920][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  358.310751][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  358.330915][T12826] loop0: detected capacity change from 0 to 32768
[  358.363346][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  358.468292][   T12] bridge_slave_1: left allmulticast mode
[  358.473968][   T12] bridge_slave_1: left promiscuous mode
[  358.538996][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.647238][   T12] bridge_slave_0: left allmulticast mode
[  358.694425][   T12] bridge_slave_0: left promiscuous mode
[  358.713990][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.829025][ T5780] Bluetooth: hci2: command tx timeout
[  358.957354][   T12] veth1_macvtap: left promiscuous mode
[  359.018143][   T12] veth0_macvtap: left promiscuous mode
[  359.023746][   T12] veth1_vlan: left promiscuous mode
[  359.086238][   T12] veth0_vlan: left promiscuous mode
[  359.565873][T12861] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0)
[  359.607243][T12861] rtrs_client L2075: <s1>: Failed to resolve address, err: -19
[  359.639371][T12861] rtrs_client L2618: <s1>: init_conns() failed: err=-19 path=<invalid address family>@ip:127.0.0.1 [:0]
[  359.833977][T12865] loop0: detected capacity change from 0 to 256
[  359.860025][T12865] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  360.633697][T12882] loop0: detected capacity change from 0 to 512
[  360.660104][T12882] EXT4-fs: Ignoring removed nobh option
[  360.722117][T12882] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.2326: corrupted inode contents
[  360.817911][T12882] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #3: comm syz.0.2326: mark_inode_dirty error
[  360.836739][T12887] loop4: detected capacity change from 0 to 512
[  360.905821][T12882] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.2326: corrupted inode contents
[  360.924641][ T5780] Bluetooth: hci2: command tx timeout
[  360.971642][T12882] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #3: comm syz.0.2326: mark_inode_dirty error
[  361.014373][T12882] Quota error (device loop0): write_blk: dquota write failed
[  361.053997][T12882] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  361.110759][T12882] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2326: Failed to acquire dquot type 0
[  361.161338][T12882] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.2326: corrupted inode contents
[  361.203868][T12882] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #16: comm syz.0.2326: mark_inode_dirty error
[  361.237177][T12882] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.2326: corrupted inode contents
[  361.266922][T12882] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #16: comm syz.0.2326: mark_inode_dirty error
[  361.295317][T12882] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.2326: corrupted inode contents
[  361.325197][T12882] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  361.353857][T12882] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #16: comm syz.0.2326: corrupted inode contents
[  361.383977][T12882] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.2326: mark_inode_dirty error
[  361.412511][T12882] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  361.437925][ T5835] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  361.458792][T12882] EXT4-fs (loop0): 1 truncate cleaned up
[  361.478557][T12882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.510951][T12882] ext4 filesystem being mounted at /636/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  361.606553][T12882] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #3: comm syz.0.2326: corrupted inode contents
[  361.644560][T12882] EXT4-fs error (device loop0): ext4_quota_write:7342: inode #3: comm syz.0.2326: mark_inode_dirty error
[  361.675539][ T5835] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  361.693053][T12882] Quota error (device loop0): write_blk: dquota write failed
[  361.701358][ T5835] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  361.724824][T12882] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  361.737785][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.778755][T12882] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.2326: Failed to acquire dquot type 0
[  361.870931][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.888378][   T59] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  361.916230][   T59] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:4: Failed to release dquot type 1
[  362.093162][   T12] team0 (unregistering): Port device team_slave_1 removed
[  362.223035][ T5835] lg-g15 0003:046D:C222.0012: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0
[  362.368511][T12896] loop0: detected capacity change from 0 to 512
[  362.375412][   T12] team0 (unregistering): Port device team_slave_0 removed
[  362.399075][T12896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  362.413594][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  362.433629][ T5835] lg-g15 0003:046D:C222.0012: Error getting LED brightness: -32
[  362.470275][ T5835] lg-g15: probe of 0003:046D:C222.0012 failed with error -32
[  362.531248][ T5835] usb 5-1: USB disconnect, device number 20
[  362.562469][T12896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.617216][T12896] ext4 filesystem being mounted at /639/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  362.632874][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.782886][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.846360][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  363.217114][T12906] loop0: detected capacity change from 0 to 4096
[  363.290031][T12906] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  363.417093][T12906] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  363.467675][T12910] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  363.493214][T12910] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  363.503729][T12910] ntfs3: loop0: ino=3, ntfs_set_state failed, -22.
[  363.580877][ T3513] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22.
[  363.782494][T12917] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  363.782494][T12917] The task syz.0.2338 (12917) triggered the difference, watch for misbehavior.
[  364.014744][   T12] bond0 (unregistering): Released all slaves
[  364.523122][   T12] IPVS: stop unused estimator thread 0...
[  364.856369][T12709] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  365.005237][T12709] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  365.047504][T12934] loop0: detected capacity change from 0 to 512
[  365.088713][T12709] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  365.146920][T12934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.203458][T12709] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  365.219919][T12934] ext4 filesystem being mounted at /645/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  365.395065][T12934] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.2345: Directory block failed checksum
[  365.486445][T12709] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.526611][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.565046][T12709] 8021q: adding VLAN 0 to HW filter on device team0
[  365.684330][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.691501][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.756027][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.763189][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.613185][T12709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.453461][T12998] loop6: detected capacity change from 0 to 4096
[  367.523537][T12709] veth0_vlan: entered promiscuous mode
[  367.546737][T13003] loop0: detected capacity change from 0 to 512
[  367.590757][T12709] veth1_vlan: entered promiscuous mode
[  367.596450][T13004] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  367.741650][T13003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.797216][T12709] veth0_macvtap: entered promiscuous mode
[  367.860598][T13003] ext4 filesystem being mounted at /654/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  367.890454][T12709] veth1_macvtap: entered promiscuous mode
[  367.904102][   T55] block nbd0: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 30 seconds
[  367.917353][   T55] block nbd0: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 30 seconds
[  367.931962][   T55] block nbd0: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 30 seconds
[  367.943216][   T55] block nbd0: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 30 seconds
[  368.041053][T13003] EXT4-fs (loop0): shut down requested (2)
[  368.052000][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  368.118977][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.158015][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  368.190754][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.211433][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  368.230637][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.255992][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.269331][T12709] batman_adv: batadv0: Interface activated: batadv_slave_0
[  368.362752][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.482442][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.535890][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.558505][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.578243][T12709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  368.603088][T12709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  368.659048][T12709] batman_adv: batadv0: Interface activated: batadv_slave_1
[  368.741195][T12709] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.812300][T12709] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.860275][T12709] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.893795][T12709] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  368.920536][T13025] syz.6.2366 (13025) used greatest stack depth: 20312 bytes left
[  369.185041][T13033] loop6: detected capacity change from 0 to 512
[  369.323159][T13033] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.372080][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.449760][T13033] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  369.464955][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.472856][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'.
[  369.533682][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  369.596531][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  369.787655][T12303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.835675][T13047] loop4: detected capacity change from 0 to 512
[  369.962815][T13047] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.2372: bg 0: block 5: invalid block bitmap
[  370.165733][T13047] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  370.299876][T13047] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.2372: invalid indirect mapped block 3 (level 2)
[  370.366748][T13064] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2378'.
[  370.417396][T13047] EXT4-fs (loop4): 1 orphan inode deleted
[  370.438933][T13064] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.448258][T13064] bridge0: port 1(bridge_slave_0) entered disabled state
[  370.481600][T13047] EXT4-fs (loop4): 1 truncate cleaned up
[  370.516090][T13047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.548093][T13064] bridge0: entered allmulticast mode
[  370.881075][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.021990][T13070] loop6: detected capacity change from 0 to 4096
[  371.111167][T13070] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  371.389166][T13070] ntfs3: loop6: ino=3, ntfs_set_state failed, -22.
[  371.458102][T13070] ntfs3: loop6: ino=3, ntfs_set_state failed, -22.
[  371.520536][T13058] loop0: detected capacity change from 0 to 40427
[  371.527158][T13070] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  371.545447][T13061] loop7: detected capacity change from 0 to 40427
[  371.567484][T13070] ntfs3: loop6: ino=3, ntfs_set_state failed, -22.
[  371.586561][T13058] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff
[  371.636811][T13058] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x30e4
[  371.713512][T13061] F2FS-fs (loop7): invalid crc value
[  371.726830][T13058] F2FS-fs (loop0): invalid crc value
[  371.781494][T13061] F2FS-fs (loop7): Found nat_bits in checkpoint
[  371.799313][T13058] F2FS-fs (loop0): Found nat_bits in checkpoint
[  371.805833][ T3513] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22.
[  371.980895][T13058] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  372.086172][T13061] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  372.274549][T13058] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  372.357181][T13092] syz.7.2376: attempt to access beyond end of device
[  372.357181][T13092] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  372.374555][T13058] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  372.463224][T13058] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0
[  372.564502][T12709] syz-executor: attempt to access beyond end of device
[  372.564502][T12709] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  372.591793][T13099] loop6: detected capacity change from 0 to 512
[  372.622989][ T5771] syz-executor: attempt to access beyond end of device
[  372.622989][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  372.682659][T13099] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  372.694338][T12709] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  372.731480][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  372.823148][T13099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.910607][T13099] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  373.012974][T13099] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.2383: bg 0: block 217: padding at end of block bitmap is not set
[  373.147133][T13099] EXT4-fs (loop6): Remounting filesystem read-only
[  373.293070][T12303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.426031][T13110] loop4: detected capacity change from 0 to 512
[  373.559402][T13110] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.2386: bad orphan inode 15
[  373.702743][T13110] ext4_test_bit(bit=14, block=5) = 0
[  373.770238][T13110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  373.924480][T13110] EXT4-fs error (device loop4): __ext4_new_inode:1083: comm syz.4.2386: reserved inode found cleared - inode=1
[  373.997400][T13125] sd 0:0:1:0: PR command failed: 1026
[  374.029192][T13125] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  374.053640][T13110] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  374.094642][T13125] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  374.188718][T13117] ftl_cs: FTL header not found.
[  374.391027][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.460329][T13117] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096]
[  374.695374][T13134] loop7: detected capacity change from 0 to 4096
[  374.803748][T13134] ntfs3: loop7: Different NTFS sector size (4096) and media sector size (512).
[  375.013209][T13146] netlink: 'syz.0.2394': attribute type 11 has an invalid length.
[  375.083552][T13134] ntfs3: loop7: ino=3, ntfs_set_state failed, -22.
[  375.104915][T13146] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2394'.
[  375.177526][T13134] ntfs3: loop7: ino=3, ntfs_set_state failed, -22.
[  375.226480][T13134] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  375.296291][T13153] loop6: detected capacity change from 0 to 1024
[  375.302966][T13134] ntfs3: loop7: ino=3, ntfs_set_state failed, -22.
[  375.504379][ T3513] ntfs3: loop7: ino=3, ntfs3_write_inode failed, -22.
[  375.885389][T13168] e1000e: probe of 0000:00:00.0 failed with error -5
[  375.958813][   T28] audit: type=1400 audit(1788933872.324:71): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=13169 comm="syz.0.2402" name="unknown" offset=16
[  376.251077][T13180] loop6: detected capacity change from 0 to 256
[  376.334486][T13180] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  376.677993][    T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  376.908102][    T9] usb 1-1: Using ep0 maxpacket: 8
[  376.929783][    T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  376.961785][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.996971][T13205] netlink: 'syz.7.2414': attribute type 1 has an invalid length.
[  377.008409][    T9] usb 1-1: Product: syz
[  377.020471][    T9] usb 1-1: Manufacturer: syz
[  377.039694][    T9] usb 1-1: SerialNumber: syz
[  377.065187][    T9] usb 1-1: config 0 descriptor??
[  377.071105][ T5809] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  377.104658][    T9] gspca_main: se401-2.14.0 probing 047d:5003
[  377.278114][ T5809] usb 7-1: Using ep0 maxpacket: 16
[  377.304106][ T5809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  377.340992][ T5809] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  377.377496][ T5809] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  377.421025][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.466782][ T5809] usb 7-1: Product: syz
[  377.494032][ T5809] usb 7-1: Manufacturer: syz
[  377.505650][    T9] gspca_se401: ExtraFeatures: 86
[  377.520761][ T5809] usb 7-1: SerialNumber: syz
[  377.531034][    T9] gspca_se401: Too many frame sizes
[  377.587140][T13216] nbd1: detected capacity change from 0 to 127
[  377.615443][ T5780] block nbd1: Receive control failed (result -104)
[  377.707583][    T9] usb 1-1: USB disconnect, device number 24
[  377.759571][ T5809] usb 7-1: 0:2 : does not exist
[  377.823700][ T5809] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  377.904545][ T5809] usb 7-1: USB disconnect, device number 9
[  378.277887][    T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  378.508152][    T8] usb 8-1: Using ep0 maxpacket: 8
[  378.543755][    T8] usb 8-1: config index 0 descriptor too short (expected 74, got 45)
[  378.572421][    T8] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  378.645544][    T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  378.701862][    T8] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  378.718527][T13246] netlink: 'syz.6.2426': attribute type 11 has an invalid length.
[  378.731970][T13239] loop4: detected capacity change from 0 to 8192
[  378.762551][ T1284] ieee802154 phy0 wpan0: encryption failed: -22
[  378.770592][    T8] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  378.785221][ T1284] ieee802154 phy1 wpan1: encryption failed: -22
[  378.826359][T13239] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  378.871863][    T8] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  378.947158][    T8] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  378.979242][T13239] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  379.030830][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.054454][T13239] REISERFS (device loop4): using ordered data mode
[  379.144028][T13239] reiserfs: using flush barriers
[  379.197195][T13239] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  379.259441][T13260] loop6: detected capacity change from 0 to 512
[  379.297364][    T8] usb 8-1: GET_CAPABILITIES returned 0
[  379.334545][T13260] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  379.353841][    T8] usbtmc 8-1:16.0: can't read capabilities
[  379.366306][T13239] REISERFS (device loop4): checking transaction log (loop4)
[  379.394182][T13239] REISERFS (device loop4): Using r5 hash to sort names
[  379.416005][T13260] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.443273][T13239] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  379.509897][    T8] usb 8-1: USB disconnect, device number 2
[  379.543281][T13260] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  379.601764][T13260] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  379.637660][T13260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  379.676090][T13260] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000d40000.
[  379.709272][T13260] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000d40000 ro.
[  379.784972][T12303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  380.609280][T13291] tap0: tun_chr_ioctl cmd 1074025677
[  380.640695][T13291] tap0: linktype set to 6
[  380.915039][   T55] block nbd1: Connection timed out, retrying (0/1 alive)
[  380.923700][   T55] block nbd1: Connection timed out, retrying (0/1 alive)
[  380.931976][   T55] block nbd1: Connection timed out, retrying (0/1 alive)
[  380.939240][   T55] block nbd1: Connection timed out, retrying (0/1 alive)
[  380.946773][   T55] block nbd1: Dead connection, failed to find a fallback
[  380.956102][   T55] block nbd1: shutting down sockets
[  380.962887][   T55] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.974091][   T55] Buffer I/O error on dev nbd1, logical block 3, async page read
[  380.982649][   T55] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  380.992295][   T55] Buffer I/O error on dev nbd1, logical block 2, async page read
[  381.000428][   T55] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  381.009792][   T55] Buffer I/O error on dev nbd1, logical block 1, async page read
[  381.017534][   T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  381.030106][   T55] Buffer I/O error on dev nbd1, logical block 0, async page read
[  381.050386][   T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  381.061779][   T55] Buffer I/O error on dev nbd1, logical block 0, async page read
[  381.069940][   T55] Buffer I/O error on dev nbd1, logical block 1, async page read
[  381.077820][   T55] Buffer I/O error on dev nbd1, logical block 2, async page read
[  381.087894][   T55] Buffer I/O error on dev nbd1, logical block 3, async page read
[  381.099248][   T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  381.109678][   T55] Buffer I/O error on dev nbd1, logical block 0, async page read
[  381.117533][   T55] Buffer I/O error on dev nbd1, logical block 1, async page read
[  381.125773][   T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  381.136692][   T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  381.146809][   T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  381.168115][   T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  381.186777][ T6038] ldm_validate_partition_table(): Disk read failed.
[  381.213614][ T6038] Dev nbd1: unable to read RDB block 0
[  381.237258][ T6038]  nbd1: unable to read partition table
[  381.287349][ T6038] ldm_validate_partition_table(): Disk read failed.
[  381.337275][ T6038] Dev nbd1: unable to read RDB block 0
[  381.392325][ T6038]  nbd1: unable to read partition table
[  381.497897][T13283] loop7: detected capacity change from 0 to 32768
[  381.546630][T13283] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  381.588127][T13306] clocksource: Switched to clocksource acpi_pm
[  381.626332][T13313] loop4: detected capacity change from 0 to 512
[  381.685346][T13283] XFS (loop7): Ending clean mount
[  381.718646][T13313] EXT4-fs: Ignoring removed oldalloc option
[  381.802089][T13313] EXT4-fs error (device loop4): ext4_orphan_get:1434: comm syz.4.2448: bad orphan inode 15
[  381.923654][T13313] ext4_test_bit(bit=14, block=5) = 0
[  381.977065][T12709] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  381.989222][T13313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.350653][T13313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.372291][T13328] Bluetooth: MGMT ver 1.22
[  382.376747][T13328] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  382.602030][T13333] loop7: detected capacity change from 0 to 256
[  382.707119][T13333] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  383.990867][T13369] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.042141][T13369] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.990694][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2483'.
[  385.504838][T13392] loop6: detected capacity change from 0 to 32768
[  386.031270][T13418] loop4: detected capacity change from 0 to 4096
[  386.125730][T13418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  386.300813][T13418] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.2491: corrupted inode contents
[  386.389280][T13418] EXT4-fs error (device loop4): ext4_dirty_inode:6144: inode #15: comm syz.4.2491: mark_inode_dirty error
[  386.492230][T13418] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.2491: corrupted inode contents
[  386.532639][T13435] loop6: detected capacity change from 0 to 64
[  386.581281][T13418] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #15: comm syz.4.2491: mark_inode_dirty error
[  386.693968][T13418] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.2491: corrupted inode contents
[  386.788345][T13418] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #15: comm syz.4.2491: mark_inode_dirty error
[  386.884232][T13418] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.2491: corrupted inode contents
[  386.993009][T13418] EXT4-fs error (device loop4): ext4_truncate:4302: inode #15: comm syz.4.2491: mark_inode_dirty error
[  387.043743][T13446] loop6: detected capacity change from 0 to 1024
[  387.061266][T13418] EXT4-fs error (device loop4) in ext4_setattr:5683: Corrupt filesystem
[  387.128616][T13431] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.2491: corrupted inode contents
[  387.341519][T13448] loop7: detected capacity change from 0 to 4096
[  387.465787][T13448] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  387.963046][ T6503] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  388.110439][ T6503] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.216077][T13466] IPv6: NLM_F_CREATE should be specified when creating new route
[  388.255876][T13466] IPv6: Can't replace route, no match found
[  388.519525][T13474] jffs2: notice: (13474) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  388.783529][T13487] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  389.750914][T13479] loop7: detected capacity change from 0 to 40427
[  389.834537][T13479] F2FS-fs (loop7): build fault injection attr: rate: 14, type: 0x7ffff
[  389.910805][T13479] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x30e4
[  389.998154][T13479] F2FS-fs (loop7): invalid crc value
[  390.057733][T13479] F2FS-fs (loop7): Found nat_bits in checkpoint
[  390.236762][T13479] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  390.307150][T13525] program syz.6.2524 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  390.441589][T13479] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  390.452318][T13528] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  390.595052][T13533] loop6: detected capacity change from 0 to 256
[  390.641321][T13479] F2FS-fs (loop7): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  390.705795][T13533] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  390.801166][T13479] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xd7/0x5d0
[  391.033084][T12709] syz-executor: attempt to access beyond end of device
[  391.033084][T12709] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  391.139936][T12709] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  391.569964][T13551] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.364161][T13575] loop4: detected capacity change from 0 to 256
[  392.450633][T13575] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d)
[  394.019443][T13628] loop7: detected capacity change from 0 to 512
[  394.141920][T13628] EXT4-fs error (device loop7): ext4_orphan_get:1408: inode #15: comm syz.7.2558: inode has both inline data and extents flags
[  394.261849][T13628] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.2558: couldn't read orphan inode 15 (err -117)
[  394.376473][T13628] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.563508][T13646] loop6: detected capacity change from 0 to 256
[  394.630946][T12709] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.644382][T13646] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d)
[  395.695081][T13680] vivid-003: disconnect
[  395.721500][T13677] vivid-003: reconnect
[  397.309141][T13725] loop6: detected capacity change from 0 to 512
[  397.450147][T13725] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #2: comm syz.6.2590: corrupted xattr block 255: invalid header
[  397.578707][T13725] EXT4-fs (loop6): Remounting filesystem read-only
[  397.640092][T13725] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  397.701468][T13725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  397.948314][T12303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.958552][   T55] block nbd0: Possible stuck request ffff888021f70000: control (read@0,1024B). Runtime 60 seconds
[  397.972605][   T55] block nbd0: Possible stuck request ffff888021f70200: control (read@1024,1024B). Runtime 60 seconds
[  397.984499][   T55] block nbd0: Possible stuck request ffff888021f70400: control (read@2048,1024B). Runtime 60 seconds
[  397.999972][   T55] block nbd0: Possible stuck request ffff888021f70600: control (read@3072,1024B). Runtime 60 seconds
[  398.226575][  T789] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  398.234864][T13749] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  398.483590][  T789] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  398.513340][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2600'.
[  398.535830][  T789] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  398.575909][  T789] usb 8-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00
[  398.641157][  T789] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.718425][  T789] usb-storage 8-1:1.0: USB Mass Storage device detected
[  399.206376][  T789] usb-storage: probe of 8-1:1.0 failed with error -5
[  399.258851][  T789] usb 8-1: USB disconnect, device number 3
[  399.483294][T13787] loop6: detected capacity change from 0 to 1024
[  399.576855][T13787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  399.687820][T13787] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  399.864409][T13801] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm syz.6.2606: lblock 0 mapped to illegal pblock 0 (length 6)
[  400.107286][T13801] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  400.300791][T13801] EXT4-fs (loop6): This should not happen!! Data will be lost
[  400.300791][T13801] 
[  400.488021][ T3513] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8)
[  400.586542][ T3513] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  400.659089][ T3513] EXT4-fs (loop6): This should not happen!! Data will be lost
[  400.659089][ T3513] 
[  400.781943][T13802] loop7: detected capacity change from 0 to 32768
[  400.820424][T12303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  401.352705][T13828] loop6: detected capacity change from 0 to 512
[  401.440074][T13828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  401.524161][T13828] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  401.663496][T13828] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #2: comm syz.6.2617: corrupted inode contents
[  401.734447][T13812] loop4: detected capacity change from 0 to 32768
[  401.759409][T13828] EXT4-fs (loop6): Remounting filesystem read-only
[  401.776138][T13832] loop7: detected capacity change from 0 to 8192
[  401.801355][T13828] CacheFiles: mkdir cache failed with error -5
[  401.824322][T13832] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  401.864602][T13828] CacheFiles: Failed to register: -5
[  401.874530][T13812] add_index: next_index = 0.  Resetting!
[  401.928576][T13832] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  401.969175][T13812] find_entry called with index >= next_index
[  401.975177][T13812] find_entry called with index >= next_index
[  402.013234][T13832] REISERFS (device loop7): using ordered data mode
[  402.044036][T12303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.054968][T13832] reiserfs: using flush barriers
[  402.088570][T13812] find_entry called with index >= next_index
[  402.103446][T13832] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  402.147487][T13812] find_entry called with index >= next_index
[  402.222097][T13832] REISERFS (device loop7): checking transaction log (loop7)
[  402.232174][T13834] non-latin1 character 0x3ff found in JFS file name
[  402.311872][T13834] mount with iocharset=utf8 to access
[  402.331511][T13832] REISERFS (device loop7): Using r5 hash to sort names
[  402.361027][T13832] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  403.283132][T13861] loop7: detected capacity change from 0 to 4096
[  403.352028][T13861] ntfs3: loop7: Different NTFS sector size (1024) and media sector size (512).
[  403.459926][T13861] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  404.089399][T13888] RDS: rds_bind could not find a transport for a:0:20::, load rds_tcp or rds_rdma?
[  404.117011][T13889] team_slave_0: entered allmulticast mode
[  404.239136][T13891] team_slave_0: entered promiscuous mode
[  404.707460][T13911] batadv_slave_1: entered promiscuous mode
[  404.736746][T13911] macvlan2: entered allmulticast mode
[  404.742130][T13911] batadv_slave_1: entered allmulticast mode
[  404.811656][T13911] batman_adv: batadv0: Adding interface: macvlan2
[  404.855765][T13911] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.952202][T13911] batman_adv: batadv0: Interface activated: macvlan2
[  405.162794][T13925] loop6: detected capacity change from 0 to 512
[  405.190027][T13928] loop7: detected capacity change from 0 to 512
[  405.212690][T13925] EXT4-fs: Ignoring removed nomblk_io_submit option
[  405.266608][T13928] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  405.320561][T13925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.355866][T13928] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  405.405417][T13925] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  405.447817][T13928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  405.546851][T13928] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  405.737511][T12303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.926387][  T789] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  406.084940][T13948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2667'.
[  406.127426][  T789] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  406.162828][  T789] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.189912][ T5810] usb 7-1: new low-speed USB device number 10 using dummy_hcd
[  406.206359][  T789] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.237920][  T789] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  406.281735][  T789] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  406.302444][  T789] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  406.324983][  T789] usb 8-1: Manufacturer: syz
[  406.348764][  T789] usb 8-1: config 0 descriptor??
[  406.417811][ T5810] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  406.447108][ T5810] usb 7-1: config 0 has no interface number 0
[  406.463513][ T5810] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  406.492028][T13955] sctp: [Deprecated]: syz.0.2670 (pid 13955) Use of struct sctp_assoc_value in delayed_ack socket option.
[  406.492028][T13955] Use struct sctp_sack_info instead
[  406.518141][ T5810] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  406.564214][ T5810] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  406.585933][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.621105][ T5810] usb 7-1: config 0 descriptor??
[  406.631424][T13957] loop4: detected capacity change from 0 to 256
[  406.645083][T13944] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  406.660424][T13957] exfat: Deprecated parameter 'namecase'
[  406.679431][ T5810] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  406.726649][T13957] exfat: Deprecated parameter 'namecase'
[  406.789462][  T789] appleir 0003:05AC:8243.0013: No inputs registered, leaving
[  406.811735][T13957] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  406.840531][  T789] appleir 0003:05AC:8243.0013: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  406.968013][    C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  406.977653][  T789] usb 7-1: USB disconnect, device number 10
[  407.030059][ T5810] usb 8-1: USB disconnect, device number 4
[  407.063517][T13958] fido_id[13958]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[  407.563834][T12709] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.728232][T13973] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2678'.
[  408.080271][T13976] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input36
[  408.418290][T13992] loop4: detected capacity change from 0 to 256
[  408.487476][T13992] exfat: Deprecated parameter 'utf8'
[  408.552198][T13998] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2691'.
[  408.597701][T13992] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  409.351950][T13996] loop6: detected capacity change from 0 to 32768
[  409.435681][ T5810] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  409.462422][T13996] ERROR: (device loop6): dbAlloc: the hint is outside the map
[  409.462422][T13996] 
[  409.557292][T13996] ERROR: (device loop6): remounting filesystem as read-only
[  409.670128][ T5810] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  409.698897][T12303] ------------[ cut here ]------------
[  409.704913][T12303] kernel BUG at fs/jfs/inode.c:175!
[  409.740693][ T5810] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  409.769012][ T5810] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.784179][T12303] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  409.790255][T12303] CPU: 0 PID: 12303 Comm: syz-executor Not tainted syzkaller #0
[  409.797868][T12303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  409.807932][T12303] RIP: 0010:jfs_evict_inode+0x424/0x430
[  409.813478][T12303] Code: df fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 86 a6 df fe e9 16 fe ff ff e8 1c 25 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54
[  409.833082][T12303] RSP: 0018:ffffc9000c06fb08 EFLAGS: 00010293
[  409.839148][T12303] RAX: ffffffff83005d54 RBX: ffff88804d801ff0 RCX: ffff888024610000
[  409.847121][T12303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804d801ff0
[  409.855115][T12303] RBP: 0000000000000001 R08: ffffffff911ef687 R09: 1ffffffff223ded0
[  409.863067][T12303] R10: dffffc0000000000 R11: fffffbfff223ded1 R12: dffffc0000000000
[  409.871019][T12303] R13: dffffc0000000000 R14: ffff88804d801c78 R15: ffff88804d802028
[  409.878969][T12303] FS:  000055558ec8f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  409.887967][T12303] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  409.894536][T12303] CR2: 00005555934db9f8 CR3: 000000005be37000 CR4: 00000000003506f0
[  409.902513][T12303] Call Trace:
[  409.905778][T12303]  <TASK>
[  409.908692][T12303]  ? jfs_write_inode+0x220/0x220
[  409.913622][T12303]  evict+0x4b7/0x8a0
[  409.917503][T12303]  ? xa_load+0x64/0x2e0
[  409.921652][T12303]  ? proc_nr_inodes+0x230/0x230
[  409.926502][T12303]  ? do_raw_spin_unlock+0x121/0x230
[  409.931687][T12303]  ? do_raw_spin_unlock+0x121/0x230
[  409.936869][T12303]  evict_inodes+0x64a/0x6e0
[  409.941375][T12303]  ? clear_inode+0x150/0x150
[  409.945954][T12303]  ? dentry_kill+0xb8/0x290
[  409.950445][T12303]  generic_shutdown_super+0x97/0x2b0
[  409.955709][T12303]  kill_block_super+0x44/0x90
[  409.960365][T12303]  deactivate_locked_super+0x97/0x100
[  409.965712][T12303]  cleanup_mnt+0x3d7/0x460
[  409.970108][T12303]  task_work_run+0x1d4/0x260
[  409.974696][T12303]  ? task_work_cancel+0x220/0x220
[  409.979700][T12303]  ? exit_to_user_mode_loop+0x3b/0x110
[  409.985139][T12303]  exit_to_user_mode_loop+0xe6/0x110
[  409.990421][T12303]  exit_to_user_mode_prepare+0xee/0x180
[  409.995950][T12303]  syscall_exit_to_user_mode+0x1a/0x50
[  410.001391][T12303]  do_syscall_64+0x61/0xb0
[  410.005787][T12303]  ? clear_bhb_loop+0x40/0x90
[  410.010443][T12303]  ? clear_bhb_loop+0x40/0x90
[  410.015113][T12303]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  410.020984][T12303] RIP: 0033:0x7f5c0699f397
[  410.025389][T12303] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  410.044996][T12303] RSP: 002b:00007ffdf6c5d658 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  410.053477][T12303] RAX: 0000000000000000 RBX: 00007f5c06a3448b RCX: 00007f5c0699f397
[  410.061429][T12303] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf6c5d710
[  410.069377][T12303] RBP: 00007ffdf6c5d710 R08: 00007ffdf6c5e710 R09: 00000000ffffffff
[  410.077323][T12303] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf6c5e7a0
[  410.085270][T12303] R13: 00007f5c06a3448b R14: 0000000000063fe4 R15: 00007ffdf6c5e7e0
[  410.093226][T12303]  </TASK>
[  410.096240][T12303] Modules linked in:
[  410.113026][ T5810] usb 8-1: Product: syz
[  410.125125][ T5810] usb 8-1: Manufacturer: syz
[  410.129742][ T5810] usb 8-1: SerialNumber: syz
[  410.160529][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2699'.
[  410.179129][T14017] vlan2: entered promiscuous mode
[  410.191597][T14017] syz_tun: entered promiscuous mode
[  410.218372][T12303] ---[ end trace 0000000000000000 ]---
[  410.223947][T12303] RIP: 0010:jfs_evict_inode+0x424/0x430
[  410.230941][T12303] Code: df fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 86 a6 df fe e9 16 fe ff ff e8 1c 25 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 41 57 41 56 41 54
[  410.252176][T12303] RSP: 0018:ffffc9000c06fb08 EFLAGS: 00010293
[  410.260074][T12303] RAX: ffffffff83005d54 RBX: ffff88804d801ff0 RCX: ffff888024610000
[  410.287566][T12303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804d801ff0
[  410.302840][T12303] RBP: 0000000000000001 R08: ffffffff911ef687 R09: 1ffffffff223ded0
[  410.320738][T12303] R10: dffffc0000000000 R11: fffffbfff223ded1 R12: dffffc0000000000
[  410.361340][T12303] R13: dffffc0000000000 R14: ffff88804d801c78 R15: ffff88804d802028
[  410.371239][T12303] FS:  000055558ec8f500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  410.384816][T12303] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  410.392892][T12303] CR2: 00007f4c45ff14b8 CR3: 000000005be37000 CR4: 00000000003506f0
[  410.401150][T12303] Kernel panic - not syncing: Fatal exception
[  410.407264][T12303] Kernel Offset: disabled
[  410.411572][T12303] Rebooting in 86400 seconds..