last executing test programs:

3m13.172209981s ago: executing program 3 (id=789):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9)
getdents(r0, &(0x7f0000000080)=""/58, 0x3a)
getdents(r0, 0xfffffffffffffffd, 0xbb)

3m11.85952889s ago: executing program 3 (id=801):
syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x5e)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2)

3m10.57225721s ago: executing program 3 (id=813):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))

3m9.593401732s ago: executing program 3 (id=820):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m8.688357182s ago: executing program 3 (id=835):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000980)=[@tclass={{0x14, 0x29, 0x43, 0xfffffff9}}], 0x18}, 0x0)

3m7.840234932s ago: executing program 3 (id=831):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')

3m7.647758216s ago: executing program 32 (id=831):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')

2m9.136370319s ago: executing program 2 (id=1673):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="016fbfbd7000fedbdf250900000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x48440}, 0x4040000)

2m9.054110191s ago: executing program 2 (id=1674):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x201, 0x2)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0)

2m8.767663207s ago: executing program 2 (id=1677):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac", 0x48, 0x5, 0xffffffff}], 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48)
connect$netrom(r0, &(0x7f0000000140)={{0x6, @rose, 0xfffffffd}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

2m8.579326241s ago: executing program 2 (id=1680):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000008040)=ANY=[@ANYBLOB='volume=00000000000000000062,gid=', @ANYRESDEC=0x0, @ANYBLOB="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"], 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2m8.19061151s ago: executing program 2 (id=1685):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x30}, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140), 0x300)

2m7.520484245s ago: executing program 2 (id=1692):
io_setup(0x4, &(0x7f00000014c0)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0)

2m7.257578941s ago: executing program 33 (id=1692):
io_setup(0x4, &(0x7f00000014c0)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00')
io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}])
io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0)

57.767179777s ago: executing program 4 (id=2343):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)

56.856000908s ago: executing program 4 (id=2350):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1)
ioctl$TCSETS(r0, 0x89f2, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"})
socket$packet(0x11, 0x3, 0x300)

55.831552612s ago: executing program 4 (id=2355):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x1, 0xfd, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r1, 0x3, 0x1, "da"}, 0x9)

55.639197945s ago: executing program 4 (id=2358):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1000608, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000140)='./file0\x00')
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)

53.945918923s ago: executing program 4 (id=2368):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x1})

53.705155659s ago: executing program 6 (id=2371):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
write(r0, 0x0, 0x0)

53.438914435s ago: executing program 6 (id=2377):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000000000000000000020000100000004000200040001"], 0x40}}, 0x0)

53.414706126s ago: executing program 4 (id=2379):
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a9c1, 0x6)
r0 = socket(0x11, 0x3, 0x8000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
mount$bpf(0x0, 0x0, 0x0, 0x5015062, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r1}}]})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

53.322247698s ago: executing program 6 (id=2380):
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x83)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94)

53.145194362s ago: executing program 34 (id=2379):
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4a9c1, 0x6)
r0 = socket(0x11, 0x3, 0x8000)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
mount$bpf(0x0, 0x0, 0x0, 0x5015062, &(0x7f0000000100)={[{@uid={'uid', 0x3d, r1}}]})
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

53.106735642s ago: executing program 6 (id=2384):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x7ae, &(0x7f0000000ec0)="$eJzs3c9rG1ceAPDvyD/XySZeWNhkYYlPu4EQOcl6k11YiPe0LGwgsHtuYmTFuJatYMkhNj40lEKhFNrQQ6G99Nwf6a23Utpz/4ZeSikJaeuEpvRQVEYa2XJkK45jW0n8+cDY7808zZuvRvPek+YhBbBvjaR/chFHI+KNJOJwtj6JiL56qjdivFHuwcpyIV2SqNX+931SL3N/ZbkQLY9JHcgyRyLi81ciTuTa660sLs1MlErF+Sw/Wp29OlpZXDo5PTsxVZwqzp09PTZ25tzfzp3duVh//HLp4J03//2Xj8Z/fvkPt17/IonxOJhta41jp4zESPac9KVPYcOnO13L0yHp9gGwLeml2dO4yuNoHI6eegoAeJ6l/X8NANhnEv0/AOwzzc8B7q8sF7JlsLufSOytu/+KiMFG/M37m40tvdk9u8H6fdCh+8m6OyNJRAzvQP1HIuLdT174IF1il+5DAmzkpRsRcXl4pKX9z9qfZG3Owjad2kKZkYfy2j/YO5+l45+/rxv/ZddfbnX8ExuMfwY2uHa3YySiP9tdXfv1n7u9rtKm8ztQeTb++2djblsaaMv4b3XS2nBPlvttmjkWEdOlYtq2HYqI49E3cGW6VDzdoY7j9365t9m2kZbx3w83X3w/rT/9v1Yid7t3YP1jJieqE08Sc6u7NyL+2Ls2t+9BW/vfPOvt49+LnXZ8rDGvKPWff7z6zmbF0vjTeJtLe/y7q/ZexJ9j4/ibko7zE0fT03+q8XfjOj7++u2hzepvPf/pktbffC+wF9LzP9Q5/uGkdb5mZWfrf3T8q6//1QNKX//9yf/r6f5s3fWJanX+dER/8t/29WfW9tbMN8un8Td2vNwf6+Jfa/+SDdq/9D3h5S3G2Hvnuw87xf+nLN2t8z/5WOf/8RO3Hsz0bFb/1s7/WD11PFuzlfZvqwf4JM8dAAAAAAAAAAAAAAAAAAAAAAAAAGxVLiIORpLLr6ZzuXy+8Rvev4+hXKlcqZ64Ul6Ym4z6b2UPR1+u+VWXhxv5pPn9p8Mt+TMP5f8aEb+LiLcGflPP5wvl0mS3gwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzIFNfv8/9e1At48OANg1g21rarVarTV/r9hxMwDwzGnv/wGA553+HwD2H/0/AOw/+n8A2H/0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyyixcupEvtp5XlQpqfvLa4MFO+dnKyWJnJzy4U8oXy/NX8VLk8VSrmC+XZR+2vVC5fHYu5heuj1WKlOlpZXLo0W16Yq16anp04H5eKfXsSFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8nsri0sxEqVScfy4Sr0VExzKHun2EEttIfHPyqyOdytx8xMt4fAt1DWYXxFMScvcTXW6YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4RvwYAAP//riYfdQ==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x80000034)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x12a0c99, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

52.534056235s ago: executing program 6 (id=2390):
r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc2)
close(r0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

48.751798571s ago: executing program 6 (id=2427):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000a80)=ANY=[], 0xff, 0x291, &(0x7f0000000280)="$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")
mkdir(&(0x7f0000000280)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x88)
getdents(r0, 0xfffffffffffffffd, 0x58)

48.453358587s ago: executing program 35 (id=2427):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000a80)=ANY=[], 0xff, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h")
mkdir(&(0x7f0000000280)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x88)
getdents(r0, 0xfffffffffffffffd, 0x58)

4.222733495s ago: executing program 7 (id=2838):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$unix(r0, &(0x7f00000001c0)=@abs, &(0x7f0000000280)=0x6e)
openat$procfs(0xffffffffffffff9c, &(0x7f0000002b40)='/proc/tty/ldiscs\x00', 0x0, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f014, 0x6})

4.097270907s ago: executing program 7 (id=2839):
r0 = socket$netlink(0x10, 0x3, 0x0)
futex(0x0, 0x6, 0x2, 0x0, 0x0, 0xfffffffe)
syz_usb_connect$midi(0x5, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000109058e0b20000fd702052501012709058c0200f46cb780052501013a0037bda7eddedbe0f8d46be130dfa4dfa8a7f067"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x9, 0xe, 0x40, 0x40}, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x60})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.880296022s ago: executing program 1 (id=2842):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

3.402824193s ago: executing program 0 (id=2850):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000005900)='./file1\x00', 0x8, &(0x7f0000005b40)=ANY=[], 0x5, 0x5505, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
fallocate(r1, 0x0, 0x0, 0x1001f0)
fallocate(r0, 0x8, 0x2000, 0x8000)

3.382928714s ago: executing program 1 (id=2851):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x8, 0x0, 0x0}}, 0x10)

3.136377599s ago: executing program 1 (id=2854):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
pipe2(&(0x7f0000000000)={<r1=>0x0, 0x0}, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)

2.848264115s ago: executing program 1 (id=2858):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0xda, 0x45, 0xa1, 0x40, 0x424, 0x12c, 0x4e40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x8a, 0x0, 0x3, 0xf5, 0x81, 0x89, 0x2c, [], [{{0x9, 0x5, 0xf, 0x2, 0x200, 0x8, 0x1, 0x8}}, {{0x9, 0x5, 0x9, 0x2, 0x28, 0xfe, 0x77, 0xfc}}, {{0x9, 0x5, 0xc, 0x2, 0x400, 0x7, 0x7, 0xa}}]}}]}}]}}, 0x0)
fanotify_init(0x20, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.607660983s ago: executing program 0 (id=2864):
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x18)
symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00')
openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18)

1.532898205s ago: executing program 7 (id=2865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd25, 0x25dfdc01, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004881}, 0x3400c012)

1.295270741s ago: executing program 7 (id=2866):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {0x8}, {0x2, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x0, 0x5, 0xfff, 0x0, 0x9, 0x18, 0x1, 0x80, 0x7000000, 0x5, 0x8, 0x9, 0x8, 0xd8c, 0x10f8000, 0x1, 0x4, 0x6, 0xf, 0x7ff, 0x1, 0x88d, 0x8, 0xfffffff9, 0x7, 0x6, 0x7f, 0x8, 0xc824, 0x4, 0xe3, 0x6, 0x0, 0x7, 0x7, 0xe, 0x101, 0xf, 0x0, 0x7, 0x8, 0x6, 0x4, 0x3, 0x6, 0xe55, 0x5, 0x4b19, 0x8, 0x8, 0xc5c, 0x9, 0x3, 0x5, 0x8001, 0xfffffff8, 0x9, 0x5, 0x9, 0xc, 0x8, 0xfffffffa, 0xfffffff7, 0x3, 0x6a41, 0xffffffff, 0xf, 0x4, 0x3ff, 0x7f, 0x3, 0x81, 0x10, 0x3, 0x400, 0x9, 0x7ff, 0x5, 0x40, 0x2, 0x2e, 0x0, 0x1, 0x5, 0xcf9, 0x2, 0x0, 0x4, 0x4, 0x4, 0x4, 0x3, 0x7ff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x5, 0xfffff000, 0x2, 0x6, 0x1, 0x8, 0x80000000, 0x800, 0x9, 0x6, 0x2, 0x0, 0x80, 0x3, 0xfffffffd, 0xfff, 0x7f, 0x7, 0x2, 0x7, 0x1, 0x89c, 0x9fae562, 0x6, 0x5, 0xff, 0x7, 0x401, 0x800, 0x6, 0x9, 0x7, 0x3ff, 0x800, 0x2, 0x3, 0x6, 0xc71, 0x81, 0x80000000, 0x3ff, 0x8, 0x7, 0x0, 0x7, 0x200, 0x12, 0x7, 0x8000, 0xe265, 0x7fffffff, 0x0, 0x0, 0x2e, 0xc, 0x6, 0x20, 0xc88f, 0x2, 0xffffffff, 0x6, 0x5, 0x8000, 0xe, 0x1, 0x6, 0x8, 0x990, 0x800, 0x5, 0x7, 0x1, 0xfffffffa, 0xb, 0x9, 0x2, 0x7ff, 0x8000, 0x5, 0x6, 0x10000, 0xd41b, 0x7, 0xf, 0x40004, 0xf918, 0x7f, 0x3, 0x8, 0x2, 0x140, 0x0, 0xff, 0xb, 0x4, 0x96a3, 0x1, 0x8001, 0x7, 0x4, 0x4000001, 0xfffffffe, 0x6, 0x9, 0x3, 0x5, 0x631, 0x8001, 0x3, 0x10001, 0x44c, 0x5827, 0xa99, 0x3, 0x400, 0x5, 0x8, 0x7, 0x10000000, 0x3, 0x3, 0x0, 0x1d99, 0x3, 0x4, 0x0, 0x4ebe3ccc, 0x1, 0x3, 0x10000000, 0x7, 0x8, 0x4, 0x9, 0x7, 0x4, 0x5, 0x7, 0x0, 0xfffffff9, 0xffff, 0x81, 0x9, 0x6, 0x3, 0x19f2, 0x3, 0xe, 0x4259, 0x7, 0x4, 0x81, 0x58783dd6, 0xed2, 0x5, 0x5, 0x9]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x800, 0x2, 0xa, 0xbc2, 0x1ff, 0x10, 0x4, 0x8, 0x4, 0x4, 0x6, 0xff, 0x2b45, 0x1, 0x0, 0x6, 0x1, 0x5, 0x552a, 0x9, 0x1, 0x8, 0x3ff, 0x9, 0x9, 0x1000, 0x4, 0x5fdb, 0x1ff, 0x2, 0x10000, 0x7, 0x4, 0x9, 0xfff, 0x10000, 0x10000, 0xd6, 0xfffffff8, 0x8, 0x8001, 0x80000000, 0x32, 0xe, 0x3, 0x0, 0x0, 0x1, 0x10001, 0x481, 0x9, 0xffffff46, 0x8, 0x9, 0x90d3, 0xffff177f, 0x7, 0x0, 0xb099, 0x3, 0xff, 0xff, 0xfffffff2, 0x10, 0xc, 0xfd, 0x101, 0x7, 0x0, 0x0, 0x2, 0x0, 0x3, 0x81, 0xd, 0x3, 0x3, 0x6, 0x6e, 0x90, 0x3, 0x8000, 0xe, 0x9, 0x401, 0xb879, 0x8, 0x8, 0x1, 0x2, 0x80000001, 0xbb4f, 0x2, 0x1, 0x5, 0x1b2, 0xbc, 0x2, 0x2, 0x44bd, 0x2, 0x5, 0x3, 0x8, 0x57e, 0x3, 0x5c5, 0x7, 0x10000, 0x8000009, 0x1, 0x5, 0x1, 0xc9f, 0x8, 0xd, 0x7, 0x6, 0x34, 0x400, 0x2, 0x0, 0x3, 0x4, 0x9, 0x9, 0xb7, 0xfffffffb, 0x7fffffff, 0x401, 0x6, 0x0, 0xb, 0x5, 0xfffffffa, 0x6, 0xf8d, 0xfffff907, 0x5d54156, 0x6, 0x2, 0x40, 0x101, 0x3, 0x1, 0x10001, 0xd141, 0x9, 0x2, 0x2, 0x8, 0x5, 0x5, 0x7, 0xb2, 0x50a6c46e, 0x3, 0x10004, 0x5, 0x1, 0x816, 0x6, 0xbdf2, 0x5, 0x2, 0x5, 0x8, 0x9, 0x8, 0xffffffff, 0x6, 0x484, 0xa24, 0xffffffa1, 0x4a, 0x3, 0x5, 0x7fffffff, 0x1, 0x7, 0x6, 0x1, 0x80000000, 0x3, 0x3, 0x9, 0x854, 0x3ff, 0x56, 0x3, 0x1, 0xf, 0xfd0, 0x7, 0x40, 0x4fb, 0x8, 0x5, 0x80, 0xb36, 0x1, 0x3, 0x5, 0x2, 0x4, 0x8, 0xffffffff, 0x2, 0x4, 0x9, 0xb, 0xccf1, 0x4902, 0x6, 0x7, 0x4, 0x7a, 0x7, 0xfffffffa, 0x8e1, 0x0, 0x0, 0x2aeb00d5, 0x7fffffff, 0x60000000, 0x9, 0x9ec, 0x8, 0x2, 0x1, 0x0, 0x1, 0x7, 0x1, 0x8, 0x101, 0xfffffffd, 0x1, 0x1, 0x4, 0x1000000, 0x10000, 0xffff, 0x5, 0xffffffff, 0x6, 0x4, 0x0, 0x3, 0x3, 0x4, 0x0, 0x9, 0x400, 0x9]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000)

1.235946662s ago: executing program 5 (id=2868):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.112531215s ago: executing program 7 (id=2869):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000021c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
lchown(&(0x7f0000000040)='./file0\x00', r2, r3)
write$FUSE_INIT(r0, &(0x7f0000002240)={0x50, 0x0, r1, {0x7, 0x8, 0x274acb0c, 0x0, 0x401, 0x5, 0x83, 0x0, 0xc00, 0x0, 0x0, 0x5}}, 0x50)

1.034619716s ago: executing program 5 (id=2870):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
read$FUSE(r3, 0x0, 0x0)

952.021908ms ago: executing program 5 (id=2871):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

759.333342ms ago: executing program 8 (id=2872):
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xffffffffffffffff)
keyctl$get_persistent(0x16, 0x0, r0)

635.731175ms ago: executing program 0 (id=2873):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x9c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x8, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0xa, 0xf, [@ibss={0x6, 0x2, 0x7}, @supported_rates]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x9c}}, 0x20000014)

635.487675ms ago: executing program 8 (id=2874):
fanotify_init(0x1, 0x1)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

521.423818ms ago: executing program 0 (id=2875):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfd}, 0x18)
connect$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x2, {0x0, 0xf1, 0xa8fe8ad4eea2351f}, 0xff}, 0x18)
sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)

480.227499ms ago: executing program 8 (id=2876):
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008809c000780080077144ebb0000080006"], 0xd0}}, 0x571f68543cec8180)

468.923919ms ago: executing program 8 (id=2877):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x23, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@rr={0x7, 0x3, 0xe6}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x6071, 0x0, 0x1e7}}}}}}, 0x0)

418.913221ms ago: executing program 1 (id=2878):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8)

335.002702ms ago: executing program 5 (id=2879):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
syz_emit_ethernet(0x33, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @opaque="e10da20aa83be11498"}}}}}, 0x0)

250.478404ms ago: executing program 1 (id=2880):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf1b, &(0x7f0000001e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x5b)
pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
flock(0xffffffffffffffff, 0x6)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180))

250.291744ms ago: executing program 8 (id=2881):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa0000004})
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d4e9f3570a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c1, &(0x7f0000001880)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x119)
setresuid(0x0, 0xee00, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040))

198.050655ms ago: executing program 5 (id=2882):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x38, r2, 0x5, 0x1000000, 0xff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x10}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000840)

153.436206ms ago: executing program 0 (id=2883):
r0 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x40, 0x2, 0x296})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x3)

98.614708ms ago: executing program 7 (id=2884):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x3f00000000000000)

84.233028ms ago: executing program 5 (id=2885):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x48000}, 0x0)
recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10000)

77.322018ms ago: executing program 0 (id=2886):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

0s ago: executing program 8 (id=2887):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0)
recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)

kernel console output (not intermixed with test programs):

ce loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  212.575890][ T9926] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  212.624357][ T4554] zl10353_read_register: readreg error (reg=127, ret==0)
[  212.631461][ T4554] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  212.651812][ T9926] ntfs: volume version 3.1.
[  212.655038][ T4554] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  212.713721][ T4554] usb 1-1: USB disconnect, device number 21
[  212.731421][ T9926] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  212.738659][ T4552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.762468][ T9926] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  212.815432][ T4554] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  212.820576][ T9937] sctp: [Deprecated]: syz.6.2085 (pid 9937) Use of struct sctp_assoc_value in delayed_ack socket option.
[  212.820576][ T9937] Use struct sctp_sack_info instead
[  212.865128][ T9926] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  212.891326][ T9926] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  213.420455][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.494512][ T9957] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2
[  213.681555][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2096'.
[  213.833225][ T4552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.860851][ T9967] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2098'.
[  214.120678][ T9975] loop6: detected capacity change from 0 to 1024
[  214.543336][ T9794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.560632][ T9987] tipc: Started in network mode
[  214.589860][ T9987] tipc: Node identity ac1414aa, cluster identity 4711
[  214.638011][ T9987] tipc: New replicast peer: 19.84.139.1
[  214.675615][ T9987] tipc: Enabled bearer <udp:s>, priority 10
[  214.873103][T10005] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2117'.
[  214.932007][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'.
[  215.105906][T10009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.153291][T10009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.195507][T10009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.265162][T10009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.600086][ T9996] loop6: detected capacity change from 0 to 40427
[  215.671457][ T9996] F2FS-fs (loop6): invalid crc value
[  215.713226][ T9996] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  215.770097][ T4915] tipc: Node number set to 2886997162
[  215.787872][T10017] loop0: detected capacity change from 0 to 256
[  215.907969][T10017] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  216.019102][ T9996] F2FS-fs (loop6): Start checkpoint disabled!
[  216.129043][ T9996] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  216.355291][  T154] attempt to access beyond end of device
[  216.355291][  T154] loop6: rw=2049, want=45112, limit=40427
[  216.456565][ T4915] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  216.809421][ T4915] usb 1-1: Using ep0 maxpacket: 32
[  217.044749][ T4915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.061132][ T4915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.173660][ T4554] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  217.383210][ T4915] usb 1-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37
[  217.393117][ T4915] usb 1-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0
[  217.399298][T10044] loop6: detected capacity change from 0 to 1024
[  217.401293][ T4915] usb 1-1: Product: syz
[  217.422938][ T4915] usb 1-1: Manufacturer: syz
[  217.463305][ T4915] usb 1-1: config 0 descriptor??
[  217.504945][T10044] EXT4-fs (loop6): Ignoring removed oldalloc option
[  217.514544][ T4554] usb 2-1: Using ep0 maxpacket: 8
[  217.520560][T10044] EXT4-fs (loop6): Ignoring removed oldalloc option
[  217.538222][T10044] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  217.606646][T10044] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,min_batch_time=0x0000000000000003,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[  217.696941][ T4554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.713074][ T4554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.722879][ T4554] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  217.757893][ T4554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.796033][ T4554] usb 2-1: config 0 descriptor??
[  217.852312][ T4230] net_ratelimit: 100 callbacks suppressed
[  217.852329][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.866798][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.078351][ T4915] hid-generic 0003:25DD:F3D2.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0
[  218.320426][ T4554] sunplus 0003:04FC:05D8.000F: unknown global tag 0xe
[  218.323638][T10057] loop9: detected capacity change from 0 to 7
[  218.327737][ T4554] sunplus 0003:04FC:05D8.000F: item 0 4 1 14 parsing failed
[  218.355850][ T4554] sunplus: probe of 0003:04FC:05D8.000F failed with error -22
[  218.361108][ T4467] Dev loop9: unable to read RDB block 7
[  218.377568][ T4467]  loop9: AHDI p1 p2 p3
[  218.381924][ T4467] loop9: partition table partially beyond EOD, truncated
[  218.395521][ T4467] loop9: p1 start 1920169572 is beyond EOD, truncated
[  218.403364][ T4467] loop9: p2 start 1851744889 is beyond EOD, truncated
[  218.426673][ T4230] usb 1-1: USB disconnect, device number 22
[  218.463179][T10057] Dev loop9: unable to read RDB block 7
[  218.470492][T10057]  loop9: AHDI p1 p2 p3
[  218.481643][T10057] loop9: partition table partially beyond EOD, truncated
[  218.510773][T10057] loop9: p1 start 1920169572 is beyond EOD, truncated
[  218.518149][T10057] loop9: p2 start 1851744889 is beyond EOD, truncated
[  218.535313][ T5614] usb 2-1: USB disconnect, device number 19
[  218.964285][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.972623][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.242964][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.739446][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  219.749301][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  219.758333][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  219.767324][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  219.776309][    C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  219.793592][T10089] loop6: detected capacity change from 0 to 32768
[  219.936540][T10089] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.2149 (10089)
[  220.045372][T10089] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  220.054113][T10089] BTRFS info (device loop6): setting nodatacow, compression disabled
[  220.062195][T10089] BTRFS info (device loop6): setting datasum, datacow enabled
[  220.069774][T10089] BTRFS info (device loop6): force clearing of disk cache
[  220.077399][T10089] BTRFS info (device loop6): enabling ssd optimizations
[  220.084356][T10089] BTRFS info (device loop6): using spread ssd allocation scheme
[  220.092069][T10089] BTRFS info (device loop6): turning on sync discard
[  220.098813][T10089] BTRFS info (device loop6): turning off barriers
[  220.105290][T10089] BTRFS info (device loop6): setting nodatacow, compression disabled
[  220.113730][T10089] BTRFS info (device loop6): not using ssd optimizations
[  220.120992][T10089] BTRFS info (device loop6): not using spread ssd allocation scheme
[  220.129507][T10089] BTRFS info (device loop6): using free space tree
[  220.136027][T10089] BTRFS info (device loop6): has skinny extents
[  220.782383][T10089] BTRFS info (device loop6): clearing free space tree
[  220.790635][T10089] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  220.800989][T10089] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  220.826899][T10133] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000040x0000000000000003.c�,i���	
[  220.862740][T10089] BTRFS info (device loop6): creating free space tree
[  220.871942][T10089] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  220.881675][T10089] BTRFS info (device loop6): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  221.165504][   T25] kauditd_printk_skb: 6 callbacks suppressed
[  221.165518][   T25] audit: type=1800 audit(1783649941.337:34): pid=10089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2149" name="file1" dev="loop6" ino=260 res=0 errno=0
[  221.298530][T10089] BTRFS info (device loop6): balance: start -sconvert=raid0,soft,limit=0
[  221.309637][T10089] BTRFS info (device loop6): balance: ended with status: 0
[  221.876344][T10136] loop0: detected capacity change from 0 to 32768
[  222.028136][T10136] XFS (loop0): Mounting V5 Filesystem
[  222.282077][T10136] XFS (loop0): Ending clean mount
[  222.336778][ T4230] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 
[  222.381746][ T4230] XFS (loop0): Unmount and run xfs_repair
[  222.391432][T10175] smc: net device team0 applied user defined pnetid SYZ2
[  222.409751][ T4230] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  222.432766][T10175] smc: net device team0 erased user defined pnetid SYZ2
[  222.443067][ T4230] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  222.467380][ T4230] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  222.527834][ T4230] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  222.587418][ T4230] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37  ..............@7
[  222.622072][ T4230] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  222.647925][ T4230] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  222.686994][ T4230] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00  ................
[  222.718170][ T4230] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  222.751657][T10136] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74
[  222.786663][T10136] XFS (loop0): Failed to initialize disk quotas.
[  222.976787][ T4188] XFS (loop0): Unmounting Filesystem
[  223.313854][T10205] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2180'.
[  223.511174][   T13] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  223.560762][   T13] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  223.632568][   T13] net_ratelimit: 267 callbacks suppressed
[  223.632584][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.924614][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.933101][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  223.963603][T10183] loop6: detected capacity change from 0 to 32768
[  224.141716][T10233] loop0: detected capacity change from 0 to 1024
[  224.226310][T10183] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  224.288956][T10183] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  224.329979][T10233] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  224.474447][T10183] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  224.489578][  T154] hfsplus: b-tree write err: -5, ino 25
[  224.511169][  T154] hfsplus: b-tree write err: -5, ino 4
[  224.545192][  T154] hfsplus: b-tree write err: -5, ino 2
[  224.657366][T10183] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  224.699405][T10239] loop0: detected capacity change from 0 to 1024
[  224.814771][T10239] EXT4-fs (loop0): Ignoring removed oldalloc option
[  224.821573][T10239] EXT4-fs (loop0): Ignoring removed oldalloc option
[  224.864864][T10239] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  225.050939][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.069966][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.095605][T10239] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,min_batch_time=0x0000000000000003,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[  225.347212][T10254] Bluetooth: hci1: unsupported parameter 65535
[  225.378070][T10254] Bluetooth: hci1: invalid length 0, exp 2 for type 5
[  225.565722][T10260] loop6: detected capacity change from 0 to 256
[  225.743212][ T4915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.751337][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.808076][  T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.821593][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.834535][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  225.946529][T10260] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d)
[  226.356517][T10261] loop1: detected capacity change from 0 to 32768
[  226.397704][T10265] overlayfs: missing 'lowerdir'
[  226.582716][T10271] all (unregistering): Released all slaves
[  226.656017][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2201'.
[  226.806195][ T4179]  loop1: p1 p3 < >
[  226.855814][T10280] loop0: detected capacity change from 0 to 1024
[  226.897154][T10282] loop6: detected capacity change from 0 to 2048
[  226.906937][T10261]  loop1: p1 p3 < >
[  227.147395][T10289] loop4: detected capacity change from 0 to 64
[  227.330518][T10282] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  227.387476][T10292] loop0: detected capacity change from 0 to 2048
[  227.572719][T10292] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  227.669303][T10292] ext4 filesystem being mounted at /377/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.693170][ T4557] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  227.729130][T10292] EXT4-fs (loop0): shut down requested (2)
[  228.160243][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  228.169033][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  228.293870][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  228.337385][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  228.601235][T10319] loop1: detected capacity change from 0 to 1024
[  228.639297][T10317] loop4: detected capacity change from 0 to 4096
[  228.786083][T10319] EXT4-fs (loop1): Invalid want_extra_isize 9
[  228.826133][T10331] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2218'.
[  228.846201][T10330] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.880562][T10331] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2218'.
[  228.982587][   T13] net_ratelimit: 8 callbacks suppressed
[  228.982602][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.397852][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.522622][T10345] loop4: detected capacity change from 0 to 4096
[  229.577601][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.188282][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.200105][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.382402][ T4197] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  230.388874][ T4197] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  230.510805][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.625574][T10364] loop0: detected capacity change from 0 to 40427
[  230.700515][T10384] loop6: detected capacity change from 0 to 128
[  230.713400][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.812651][T10364] F2FS-fs (loop0): invalid crc value
[  230.880452][T10364] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  230.910011][T10373] loop1: detected capacity change from 0 to 32768
[  230.953088][T10384] EXT4-fs (loop6): Test dummy encryption mode enabled
[  231.050246][T10364] F2FS-fs (loop0): Start checkpoint disabled!
[  231.064548][T10384] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  231.112928][T10384] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  231.150723][T10364] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  231.227735][T10373] XFS (loop1): Mounting V5 Filesystem
[  231.442115][ T4557] attempt to access beyond end of device
[  231.442115][ T4557] loop0: rw=2049, want=45112, limit=40427
[  231.552775][T10373] XFS (loop1): Ending clean mount
[  231.603702][T10413] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2249'.
[  231.621482][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.825078][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.928099][T10423] loop6: detected capacity change from 0 to 16
[  231.951535][ T4187] XFS (loop1): Unmounting Filesystem
[  231.980811][T10423] erofs: (device loop6): mounted with root inode @ nid 36.
[  232.088893][T10423] attempt to access beyond end of device
[  232.088893][T10423] loop6: rw=524288, want=32, limit=16
[  232.112306][T10425] netlink: 'syz.0.2247': attribute type 29 has an invalid length.
[  232.138950][T10425] netlink: 'syz.0.2247': attribute type 29 has an invalid length.
[  232.171617][T10423] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096]
[  232.198436][T10427] netlink: 'syz.0.2247': attribute type 29 has an invalid length.
[  232.240920][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.262521][T10425] netlink: 'syz.0.2247': attribute type 29 has an invalid length.
[  232.294517][   T25] audit: type=1800 audit(1783649951.739:35): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2251" name="file2" dev="loop6" ino=89 res=0 errno=0
[  232.320621][T10425] netlink: 'syz.0.2247': attribute type 29 has an invalid length.
[  232.562657][ T9795] kernel write not supported for file /232/comm (pid: 9795 comm: kworker/1:21)
[  233.640730][T10463] loop0: detected capacity change from 0 to 64
[  233.775642][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2269'.
[  234.095658][T10474] loop6: detected capacity change from 0 to 128
[  234.338433][T10474] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  234.362499][T10487] net_ratelimit: 8 callbacks suppressed
[  234.362514][T10487] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.402247][T10474] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  234.506416][   T25] audit: type=1326 audit(1783649953.815:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.0.2278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd340e59 code=0x7ffc0000
[  234.585239][   T25] audit: type=1326 audit(1783649953.843:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.0.2278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd340e59 code=0x7ffc0000
[  234.745874][   T25] audit: type=1326 audit(1783649953.843:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.0.2278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd340e59 code=0x7ffc0000
[  234.837803][   T25] audit: type=1326 audit(1783649953.843:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.0.2278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd340e59 code=0x7ffc0000
[  234.879876][ T4552] Bluetooth: hci0: command 0x0405 tx timeout
[  234.956948][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.979316][   T25] audit: type=1326 audit(1783649953.843:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.0.2278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff0bd340e59 code=0x7ffc0000
[  235.074165][   T25] audit: type=1326 audit(1783649953.843:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.0.2278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd340e59 code=0x7ffc0000
[  235.128380][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.169726][   T25] audit: type=1326 audit(1783649953.843:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.0.2278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd340e59 code=0x7ffc0000
[  235.248787][ T9795] kernel read not supported for file /input/mouse0 (pid: 9795 comm: kworker/1:21)
[  235.269684][   T25] audit: type=1326 audit(1783649953.843:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.0.2278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd340e59 code=0x7ffc0000
[  235.307234][   T25] audit: type=1326 audit(1783649953.843:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10486 comm="syz.0.2278" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0bd340e59 code=0x7ffc0000
[  235.497897][ T4552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.871412][T10543] loop4: detected capacity change from 0 to 256
[  235.880835][T10544] loop6: detected capacity change from 0 to 1024
[  235.970841][T10543] FAT-fs (loop4): Directory bread(block 64) failed
[  236.022626][T10543] FAT-fs (loop4): Directory bread(block 65) failed
[  236.029303][T10543] FAT-fs (loop4): Directory bread(block 66) failed
[  236.035837][T10543] FAT-fs (loop4): Directory bread(block 67) failed
[  236.069078][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.078368][T10543] FAT-fs (loop4): Directory bread(block 68) failed
[  236.111347][T10543] FAT-fs (loop4): Directory bread(block 69) failed
[  236.118311][T10543] FAT-fs (loop4): Directory bread(block 70) failed
[  236.132727][T10543] FAT-fs (loop4): Directory bread(block 71) failed
[  236.139347][T10543] FAT-fs (loop4): Directory bread(block 72) failed
[  236.164976][ T5614] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  236.165874][T10543] FAT-fs (loop4): Directory bread(block 73) failed
[  236.244112][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.259625][T10543] attempt to access beyond end of device
[  236.259625][T10543] loop4: rw=2049, want=1228, limit=256
[  236.300984][T10534] loop0: detected capacity change from 0 to 32768
[  236.350822][T10544] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none.
[  236.375502][T10544] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.421449][ T5614] usb 2-1: Using ep0 maxpacket: 16
[  236.549967][ T5614] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  236.558180][ T5614] usb 2-1: config 1 has no interface number 0
[  236.599404][ T5614] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  236.626882][ T5614] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  236.674944][ T5614] usb 2-1: config 1 interface 105 has no altsetting 0
[  236.698104][T10559] netlink: 'syz.5.2308': attribute type 10 has an invalid length.
[  236.711732][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.724191][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.784653][T10561] loop4: detected capacity change from 0 to 1024
[  236.833541][T10559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.870867][ T5614] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  236.894828][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  236.917249][ T5614] usb 2-1: Product: syz
[  236.928464][T10559] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  236.932133][ T5614] usb 2-1: Manufacturer: syz
[  237.005073][ T5614] usb 2-1: SerialNumber: syz
[  237.040954][T10546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  237.059261][T10546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  237.180661][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.355832][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  237.563617][T10546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  237.612658][T10546] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  237.653872][T10563] loop0: detected capacity change from 0 to 40427
[  237.714261][T10563] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff
[  237.743561][T10563] F2FS-fs (loop0): invalid crc value
[  237.777051][T10563] F2FS-fs (loop0): Found nat_bits in checkpoint
[  237.907467][T10563] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  237.927940][ T4557] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm kworker/u4:6: bg 0: block 112: padding at end of block bitmap is not set
[  238.032268][ T4557] EXT4-fs (loop6): Remounting filesystem read-only
[  238.059450][T10563] attempt to access beyond end of device
[  238.059450][T10563] loop0: rw=524288, want=45072, limit=40427
[  238.129742][T10563] attempt to access beyond end of device
[  238.129742][T10563] loop0: rw=0, want=45072, limit=40427
[  238.170499][T10577] loop4: detected capacity change from 0 to 32768
[  238.175354][T10563] attempt to access beyond end of device
[  238.175354][T10563] loop0: rw=0, want=45072, limit=40427
[  238.281053][T10577] JBD2: Ignoring recovery information on journal
[  238.346865][ T4188] attempt to access beyond end of device
[  238.346865][ T4188] loop0: rw=2049, want=45104, limit=40427
[  238.393402][ T5614] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  238.420659][ T5614] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  238.470700][ T5614] aqc111 2-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a4:b1:e1:10:b6:e9
[  238.519294][ T5614] usb 2-1: USB disconnect, device number 20
[  238.548029][T10577] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  238.554364][ T5614] aqc111 2-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  238.636843][T10577] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  238.655402][T10577] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  238.665285][T10577] OCFS2: Returning error to the calling process.
[  238.671665][T10577] (syz.4.2316,10577,0):ocfs2_search_chain:1783 ERROR: status = -5
[  238.680469][T10577] (syz.4.2316,10577,0):ocfs2_search_chain:1893 ERROR: status = -5
[  238.688340][T10577] (syz.4.2316,10577,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5
[  238.696765][T10577] (syz.4.2316,10577,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  238.705209][T10577] (syz.4.2316,10577,0):ocfs2_claim_new_inode:2248 ERROR: status = -5
[  238.713309][T10577] (syz.4.2316,10577,0):ocfs2_claim_new_inode:2263 ERROR: status = -5
[  238.721427][T10577] (syz.4.2316,10577,0):ocfs2_mknod_locked:639 ERROR: status = -5
[  238.729156][T10577] (syz.4.2316,10577,0):ocfs2_mknod:385 ERROR: status = -5
[  238.736732][T10577] (syz.4.2316,10577,0):ocfs2_mknod:502 ERROR: status = -5
[  239.438121][ T4197] ocfs2: Unmounting device (7,4) on (node local)
[  239.582670][T10593] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  239.762768][T10594] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  239.861298][T10594] net_ratelimit: 10 callbacks suppressed
[  239.861306][T10594] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  239.921196][ T5614] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  239.938447][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  239.948670][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  239.956243][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  239.966309][ T4200] Workqueue: hci0 hci_rx_work
[  239.968811][ T5614] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  239.971020][ T4200] Call Trace:
[  239.971082][ T4200]  <TASK>
[  239.971091][ T4200]  dump_stack_lvl+0x188/0x250
[  239.971116][ T4200]  ? show_regs_print_info+0x20/0x20
[  239.971135][ T4200]  ? load_image+0x410/0x410
[  239.971166][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  239.971187][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  239.971199][ T4200]  ? kthread+0x42e/0x520
[  239.971216][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  239.971234][ T4200]  kobject_add_internal+0x5ba/0xcd0
[  239.971259][ T4200]  kobject_add+0x160/0x230
[  239.971280][ T4200]  ? kobject_init+0x1c0/0x1c0
[  240.033677][ T5614] aqc111 2-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  240.034465][ T4200]  ? __raw_spin_lock_init+0x41/0x100
[  240.034490][ T4200]  ? klist_children_get+0x50/0x50
[  240.054128][ T4200]  ? get_device_parent+0x121/0x3e0
[  240.059256][ T4200]  device_add+0x470/0x1050
[  240.063695][ T4200]  ? device_initialize+0x2a5/0x4d0
[  240.068818][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  240.070240][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2330'.
[  240.073764][ T4200]  le_conn_complete_evt+0xc2e/0x14d0
[  240.073797][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  240.093000][ T4200]  ? __mutex_trylock_common+0x15c/0x260
[  240.098566][ T4200]  hci_le_meta_evt+0x285/0x3ca0
[  240.103439][ T4200]  ? hci_event_packet+0x363/0x1310
[  240.108564][ T4200]  ? __lock_acquire+0x7b50/0x7b50
[  240.113607][ T4200]  ? hci_remote_host_features_evt+0x240/0x240
[  240.119688][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  240.125334][ T4200]  ? mark_lock+0x94/0x320
[  240.129680][ T4200]  ? mutex_unlock+0x10/0x10
[  240.134296][ T4200]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  240.140407][ T4200]  ? lock_chain_count+0x20/0x20
[  240.145287][ T4200]  ? __rwlock_init+0x140/0x140
[  240.147116][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2330'.
[  240.150059][ T4200]  hci_event_packet+0xe0b/0x1310
[  240.150091][ T4200]  ? _raw_spin_unlock+0x40/0x40
[  240.150111][ T4200]  ? rcu_lock_release+0x20/0x20
[  240.150134][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  240.178757][ T4200]  hci_rx_work+0x255/0xa10
[  240.183203][ T4200]  process_one_work+0x867/0xff0
[  240.188086][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  240.190463][T10614] netlink: 'syz.5.2330': attribute type 13 has an invalid length.
[  240.193723][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  240.193749][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  240.193769][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  240.193790][ T4200]  ? wq_worker_running+0x97/0x170
[  240.220987][T10614] netlink: 'syz.5.2330': attribute type 14 has an invalid length.
[  240.222392][ T4200]  worker_thread+0xad7/0x12a0
[  240.222442][ T4200]  kthread+0x42e/0x520
[  240.238929][ T4200]  ? rcu_lock_release+0x20/0x20
[  240.243787][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  240.248396][ T4200]  ret_from_fork+0x1f/0x30
[  240.252831][ T4200]  </TASK>
[  240.255940][ T4200] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  240.269182][ T4200] Bluetooth: hci0: failed to register connection device
[  240.312216][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.320775][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.544548][   T13] usb 1-1: new low-speed USB device number 23 using dummy_hcd
[  240.580891][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2333'.
[  240.604236][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.606811][T10623] IPVS: Error joining to the multicast group
[  240.777329][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.874353][T10631] loop1: detected capacity change from 0 to 256
[  240.949876][   T25] kauditd_printk_skb: 6 callbacks suppressed
[  240.949889][   T25] audit: type=1800 audit(1783649959.849:51): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2337" name=FFFFFFFF dev="loop1" ino=1048646 res=0 errno=0
[  241.132548][T10612] loop4: detected capacity change from 0 to 40427
[  241.146067][   T13] usb 1-1: unable to get BOS descriptor or descriptor too short
[  241.261451][   T13] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0
[  241.291330][   T13] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0
[  241.325466][T10612] F2FS-fs (loop4): invalid crc value
[  241.389176][T10612] F2FS-fs (loop4): Found nat_bits in checkpoint
[  241.528756][ T4552] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  241.553499][T10640] device syzkaller1 entered promiscuous mode
[  241.601926][T10612] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  241.658395][   T25] audit: type=1800 audit(1783649960.503:52): pid=10612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2323" name="bus" dev="loop4" ino=10 res=0 errno=0
[  241.706457][T10612] attempt to access beyond end of device
[  241.706457][T10612] loop4: rw=34817, want=77952, limit=40427
[  241.713564][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.782794][T10645] loop6: detected capacity change from 0 to 128
[  241.820929][ T4197] attempt to access beyond end of device
[  241.820929][ T4197] loop4: rw=2049, want=45104, limit=40427
[  241.886363][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.889618][ T4552] usb 2-1: Using ep0 maxpacket: 16
[  242.079778][ T4552] usb 2-1: config 6 has an invalid interface number: 221 but max is 0
[  242.093474][ T4552] usb 2-1: config 6 has no interface number 0
[  242.114569][ T4552] usb 2-1: config 6 interface 221 has no altsetting 0
[  242.127191][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.161727][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.218245][   T13] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[  242.242345][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.273378][   T13] usb 1-1: SerialNumber: ␊
[  242.339084][ T4552] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=12.92
[  242.375256][ T4552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.399758][ T4552] usb 2-1: Product: syz
[  242.403975][ T4552] usb 2-1: Manufacturer: syz
[  242.431306][ T4552] usb 2-1: SerialNumber: syz
[  242.786906][T10661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  242.824568][T10661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  242.851480][   T13] usb 1-1: low speed audio streaming not supported
[  242.864813][   T13] usb 1-1: unit 6 not found!
[  242.879496][   T13] usb 1-1: unit 16 not found!
[  242.947674][T10662] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  243.091667][ T4552] f81534a_ctrl 2-1:6.221: failed to set register 0x116: -5
[  243.099097][   T13] usb 1-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8212 device_setup=1 to enable and report any issues to g@b4.vu
[  243.125402][ T4552] f81534a_ctrl 2-1:6.221: failed to enable ports: -5
[  243.175438][ T4552] f81534a_ctrl: probe of 2-1:6.221 failed with error -5
[  243.252965][ T4552] usb 2-1: USB disconnect, device number 21
[  243.259053][   T13] usb 1-1: USB disconnect, device number 23
[  243.301947][T10670] loop6: detected capacity change from 0 to 128
[  243.453573][T10670] EXT4-fs (loop6): Test dummy encryption mode enabled
[  243.565597][T10670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  243.573873][T10670] System zones: 1-3, 19-19, 35-36
[  243.580319][T10670] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,nolazytime,dax=inode,jqfmt=vfsv0,dioread_lock,usrjquota=.,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  243.624707][T10670] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.704140][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  244.030641][T10692] loop4: detected capacity change from 0 to 512
[  244.128528][T10695] loop0: detected capacity change from 0 to 1024
[  244.268415][T10692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  244.364647][ T4552] Bluetooth: hci3: command 0x0406 tx timeout
[  244.404269][T10695] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,grpid,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  244.415560][T10713] loop6: detected capacity change from 0 to 128
[  244.467603][T10692] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.2358: bad orphan inode 131083
[  244.515544][T10692] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  244.700060][T10692] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.2358: bad entry in directory: rec_len % 4 != 0 - offset=16, inode=1560281102, rec_len=65535, size=56 fake=0
[  244.905076][ T4197] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  245.672949][ T4552] net_ratelimit: 11 callbacks suppressed
[  245.672966][ T4552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.686807][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.695146][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.716900][T10713] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  245.739342][T10713] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  246.046713][T10751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.055500][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.532057][T10773] loop6: detected capacity change from 0 to 2048
[  246.592551][T10773] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  246.744198][T10773] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000000,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x0000000000000814,. Quota mode: writeback.
[  246.774723][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.777371][T10782] loop1: detected capacity change from 0 to 4096
[  246.854683][   T13] Bluetooth: hci0: command 0x0406 tx timeout
[  246.870225][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.927216][T10788] loop0: detected capacity change from 0 to 512
[  246.945445][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.953770][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.967171][T10782] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  247.075144][ T8704] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz-executor: bg 0: block 2: invalid block bitmap
[  247.133686][T10782] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback.
[  247.146031][ T8704] EXT4-fs (loop6): Remounting filesystem read-only
[  247.163595][ T8704] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  247.211358][T10795] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000040x0000000000000003.c�,i�
[  247.224858][T10785] chnl_net:caif_netlink_parms(): no params data found
[  247.229555][ T8704] EXT4-fs (loop6): Remounting filesystem read-only
[  247.253000][ T8704] EXT4-fs error (device loop6): ext4_read_inline_dir:1626: inode #12: block 5: comm syz-executor: path /129/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0
[  247.310470][T10788] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  247.328237][ T8704] EXT4-fs (loop6): Remounting filesystem read-only
[  247.335650][ T8704] EXT4-fs error (device loop6): ext4_read_inline_dir:1626: inode #12: block 5: comm syz-executor: path /129/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0
[  247.393850][T10788] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  247.410657][T10785] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.421421][T10785] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.430017][T10785] device bridge_slave_0 entered promiscuous mode
[  247.459081][T10785] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.466321][T10785] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.474616][T10785] device bridge_slave_1 entered promiscuous mode
[  247.495897][ T8704] EXT4-fs (loop6): Remounting filesystem read-only
[  247.509409][ T8704] EXT4-fs error (device loop6): empty_inline_dir:1881: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0
[  247.580357][ T8704] EXT4-fs (loop6): Remounting filesystem read-only
[  247.611864][T10785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.617543][ T8704] EXT4-fs warning (device loop6): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  247.653165][ T8704] EXT4-fs error (device loop6): ext4_read_inline_dir:1626: inode #12: block 5: comm syz-executor: path /129/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0
[  247.714147][T10785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.763041][ T8704] EXT4-fs (loop6): Remounting filesystem read-only
[  247.769766][ T8704] EXT4-fs error (device loop6): ext4_read_inline_dir:1626: inode #12: block 5: comm syz-executor: path /129/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0
[  247.882292][ T9794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.887799][T10785] team0: Port device team_slave_0 added
[  247.906098][ T8704] EXT4-fs (loop6): Remounting filesystem read-only
[  247.912840][ T8704] EXT4-fs error (device loop6): empty_inline_dir:1881: inode #12: block 5: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=7952, size=60 fake=0
[  247.944785][T10785] team0: Port device team_slave_1 added
[  248.005336][T10785] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.015424][ T8704] EXT4-fs (loop6): Remounting filesystem read-only
[  248.040801][ T8704] EXT4-fs warning (device loop6): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  248.048908][T10818] loop0: detected capacity change from 0 to 128
[  248.064116][T10785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.097232][ T8704] EXT4-fs error (device loop6): ext4_read_inline_dir:1626: inode #12: block 5: comm syz-executor: path /129/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0
[  248.179458][T10818] EXT4-fs (loop0): Ignoring removed orlov option
[  248.191858][T10785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.212150][ T8704] EXT4-fs (loop6): Remounting filesystem read-only
[  248.244015][T10818] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: none.
[  248.304791][ T8704] EXT4-fs error (device loop6): ext4_read_inline_dir:1626: inode #12: block 5: comm syz-executor: path /129/file1/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0
[  248.336752][T10785] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.357503][T10785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.405399][ T8704] EXT4-fs (loop6): Remounting filesystem read-only
[  248.412680][T10818] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.433456][ T8704] EXT4-fs warning (device loop6): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  248.466111][T10785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.518639][ T8704] EXT4-fs warning (device loop6): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  248.581392][ T8704] EXT4-fs warning (device loop6): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  248.617308][T10785] device hsr_slave_0 entered promiscuous mode
[  248.636812][T10785] device hsr_slave_1 entered promiscuous mode
[  248.656370][T10785] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.672817][T10785] Cannot create hsr debugfs directory
[  248.698158][ T8704] EXT4-fs warning (device loop6): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  248.765334][ T8704] EXT4-fs warning (device loop6): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  248.836574][T10827] device syzkaller1 entered promiscuous mode
[  248.840826][ T8704] EXT4-fs warning (device loop6): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  248.896194][T10812] loop1: detected capacity change from 0 to 32768
[  248.952075][ T8704] EXT4-fs warning (device loop6): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  249.061715][T10812] XFS (loop1): Mounting V5 Filesystem
[  249.115942][ T8704] EXT4-fs warning (device loop6): empty_inline_dir:1888: bad inline directory (dir #12) - inode 13, rec_len 7952, name_len 0inline size 60
[  249.148328][T10785] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  249.164885][ T4916] Bluetooth: hci4: command 0x0409 tx timeout
[  249.220239][T10812] XFS (loop1): Ending clean mount
[  249.252088][T10785] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  249.318481][T10785] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  249.381970][T10785] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  249.470078][ T4187] XFS (loop1): Unmounting Filesystem
[  249.577376][T10785] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.699702][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  249.707738][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  249.735425][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  249.787410][T10785] 8021q: adding VLAN 0 to HW filter on device team0
[  249.812045][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  249.837083][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  249.860948][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.868088][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.898043][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  249.907347][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  249.916079][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.923213][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.932316][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  249.948404][T10861] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  250.032919][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  250.065731][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  250.133280][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  250.174143][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  250.221698][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  250.255655][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  250.283279][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  250.307885][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  250.318706][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  250.332626][T10785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  250.388682][T10785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  250.477243][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  250.500167][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  250.755758][T10886] loop0: detected capacity change from 0 to 512
[  250.856616][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  250.866420][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  250.907511][ T4915] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  250.929923][T10886] EXT4-fs (loop0): Ignoring removed bh option
[  250.985910][T10785] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.997260][T10886] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.2425: corrupted in-inode xattr
[  251.021208][T10886] EXT4-fs (loop0): Remounting filesystem read-only
[  251.029430][T10886] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2425: couldn't read orphan inode 15 (err -117)
[  251.076099][T10886] EXT4-fs (loop0): Remounting filesystem read-only
[  251.104749][T10886] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,init_itable=0x0000000000000009,init_itable=0x0000000000000004,init_itable,errors=remount-ro,nolazytime,norecovery,resgid=0x0000000000000000,. Quota mode: none.
[  251.217457][ T4915] usb 2-1: Using ep0 maxpacket: 16
[  251.231541][ T4231] net_ratelimit: 13 callbacks suppressed
[  251.231557][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.378009][   T13] Bluetooth: hci4: command 0x041b tx timeout
[  251.399242][ T4915] usb 2-1: unable to get BOS descriptor or descriptor too short
[  251.461192][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  251.493313][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.506320][ T4915] usb 2-1: config 1 has an invalid interface number: 206 but max is 0
[  251.514530][ T4915] usb 2-1: config 1 has no interface number 0
[  251.522313][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  251.623885][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  251.633326][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  251.678845][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  251.687382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  251.700106][T10785] device veth0_vlan entered promiscuous mode
[  251.741483][ T4915] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a
[  251.750568][ T4915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.758865][ T4915] usb 2-1: Product: syz
[  251.761099][T10785] device veth1_vlan entered promiscuous mode
[  251.763514][ T4915] usb 2-1: Manufacturer: syz
[  251.773761][ T4915] usb 2-1: SerialNumber: syz
[  251.830617][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  251.847842][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  251.867855][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  251.892547][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  251.922008][T10785] device veth0_macvtap entered promiscuous mode
[  251.949123][T10785] device veth1_macvtap entered promiscuous mode
[  252.042347][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.084952][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.121441][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.132218][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.159714][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.172057][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.193394][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.211369][ T4915] usb 2-1: USB disconnect, device number 22
[  252.230089][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.254136][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.286509][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2
[  252.307719][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.327041][T10911] loop0: detected capacity change from 0 to 32768
[  252.331800][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.333849][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.380164][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.391565][T10911] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2433 (10911)
[  252.408716][T10785] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.475443][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  252.482453][T10911] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  252.491346][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  252.492943][T10911] BTRFS info (device loop0): using free space tree
[  252.507612][T10911] BTRFS info (device loop0): has skinny extents
[  252.515231][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  252.529586][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.571817][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.583469][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.583891][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.599841][T10911] BTRFS info (device loop0): enabling ssd optimizations
[  252.602209][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.619487][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.638999][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.682412][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.696508][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.706469][T10785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.716964][T10785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.736133][T10785] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.773315][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  252.781974][   T25] audit: type=1800 audit(1783649970.924:53): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2433" name="file1" dev="loop0" ino=260 res=0 errno=0
[  252.826469][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  252.841711][T10785] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.902222][T10785] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.921858][T10785] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.964745][T10785] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.144034][T10905] chnl_net:caif_netlink_parms(): no params data found
[  253.393511][T10957] fuse: Bad value for 'fd'
[  253.455547][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.697246][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.725382][   T13] Bluetooth: hci4: command 0x040f tx timeout
[  253.746968][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.797898][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.858180][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[  253.939991][T10905] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.005832][T10905] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.024112][T10977] loop0: detected capacity change from 0 to 256
[  254.104609][T10977] FAT-fs (loop0): Directory bread(block 64) failed
[  254.111195][T10977] FAT-fs (loop0): Directory bread(block 65) failed
[  254.114939][T10905] device bridge_slave_0 entered promiscuous mode
[  254.167515][ T5329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.176388][T10905] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.189756][T10977] FAT-fs (loop0): Directory bread(block 66) failed
[  254.196321][T10977] FAT-fs (loop0): Directory bread(block 67) failed
[  254.220169][T10905] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.221295][ T5329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.245312][T10905] device bridge_slave_1 entered promiscuous mode
[  254.269043][T10977] FAT-fs (loop0): Directory bread(block 68) failed
[  254.303363][T10977] FAT-fs (loop0): Directory bread(block 69) failed
[  254.311350][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  254.342344][T10977] FAT-fs (loop0): Directory bread(block 70) failed
[  254.361317][T10977] FAT-fs (loop0): Directory bread(block 71) failed
[  254.379108][T10977] FAT-fs (loop0): Directory bread(block 72) failed
[  254.384900][T10905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.386206][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.431448][T10977] FAT-fs (loop0): Directory bread(block 73) failed
[  254.435709][T10905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.447150][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.460122][ T5329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.496653][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  254.605776][T10905] team0: Port device team_slave_0 added
[  254.654980][T10905] team0: Port device team_slave_1 added
[  254.693238][ T4230] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  254.721876][T10985] loop7: detected capacity change from 0 to 256
[  254.769923][T10905] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.776922][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.896073][T10905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.928170][T10905] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.935152][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.027842][T10905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.045013][ T4916] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  255.081971][ T4230] usb 2-1: Using ep0 maxpacket: 8
[  255.106197][T10996] fuse: Bad value for 'fd'
[  255.193819][T10996] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'gid'
[  255.193819][T10996] 
[  255.216492][T10905] device hsr_slave_0 entered promiscuous mode
[  255.227777][T10998] loop7: detected capacity change from 0 to 64
[  255.244801][T10905] device hsr_slave_1 entered promiscuous mode
[  255.258508][T10905] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  255.294684][T10905] Cannot create hsr debugfs directory
[  255.332063][T10998] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  255.414843][ T4230] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  255.457886][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.466440][ T4230] usb 2-1: Product: syz
[  255.470622][ T4230] usb 2-1: Manufacturer: syz
[  255.497905][ T4230] usb 2-1: SerialNumber: syz
[  255.511838][ T4230] usb 2-1: config 0 descriptor??
[  255.522792][T10785] attempt to access beyond end of device
[  255.522792][T10785] loop7: rw=0, want=268435470, limit=64
[  255.542984][ T4916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  255.553610][T10785] Buffer I/O error on dev loop7, logical block 134217734, async page read
[  255.562769][ T4916] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  255.594549][ T4916] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  255.598292][T10785] attempt to access beyond end of device
[  255.598292][T10785] loop7: rw=0, want=268435470, limit=64
[  255.656870][T10785] Buffer I/O error on dev loop7, logical block 134217734, async page read
[  255.661932][T10905] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  255.692433][T10785] Trying to free block not in datazone
[  255.704177][T10905] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  255.723933][T10905] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  255.758112][T10905] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  255.788463][ T4230] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  255.839952][ T4916] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  255.871691][ T4916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  255.927199][ T4916] usb 1-1: Product: syz
[  255.935476][ T4916] usb 1-1: Manufacturer: syz
[  255.940337][ T4916] usb 1-1: SerialNumber: syz
[  255.966475][ T4552] Bluetooth: hci4: command 0x0419 tx timeout
[  256.007870][T10905] 8021q: adding VLAN 0 to HW filter on device bond0
[  256.026284][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  256.035653][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  256.069628][T10905] 8021q: adding VLAN 0 to HW filter on device team0
[  256.092652][   T13] Bluetooth: hci0: command 0x041b tx timeout
[  256.113822][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  256.123605][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  256.146063][ T1433] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.153167][ T1433] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.190206][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  256.198837][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  256.211139][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  256.219813][ T1433] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.226942][ T1433] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.256178][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  256.278600][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  256.293561][ T4916] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  256.350498][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  256.379305][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  256.436968][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  256.454843][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  256.472960][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  256.487957][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  256.529552][ T4918] usb 1-1: USB disconnect, device number 24
[  256.540101][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  256.553525][ T4918] usblp0: removed
[  256.563594][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  256.587444][T10905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  256.614813][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  256.778131][ T5614] net_ratelimit: 7 callbacks suppressed
[  256.778148][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  256.802513][ T4230] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  256.848075][ T4230] usb 2-1: USB disconnect, device number 23
[  257.015870][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  257.033111][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.054897][ T5329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  257.054904][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.091819][T10905] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.209514][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.324734][T11049] netlink: 'syz.0.2477': attribute type 12 has an invalid length.
[  257.378268][T11049] netlink: 'syz.0.2477': attribute type 29 has an invalid length.
[  257.421404][T11049] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2477'.
[  257.441190][T11049] netlink: 'syz.0.2477': attribute type 1 has an invalid length.
[  257.472431][T11054] loop7: detected capacity change from 0 to 16
[  257.600763][T11059] loop0: detected capacity change from 0 to 16
[  257.635706][T11054] erofs: (device loop7): mounted with root inode @ nid 36.
[  257.674574][ T4918] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  257.750054][T11059] erofs: (device loop0): mounted with root inode @ nid 36.
[  257.782578][T11059] overlayfs: failed to get metacopy (-117)
[  257.813507][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  257.835123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  257.894162][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  257.920467][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.932911][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  257.952242][ T4918] usb 2-1: Using ep0 maxpacket: 16
[  257.955237][T10905] device veth0_vlan entered promiscuous mode
[  257.988930][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  257.997587][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  258.026747][T11067] loop7: detected capacity change from 0 to 128
[  258.071047][T10905] device veth1_vlan entered promiscuous mode
[  258.102392][ T4918] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  258.126982][ T4918] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.133032][T10905] device veth0_macvtap entered promiscuous mode
[  258.157589][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.180817][T10905] device veth1_macvtap entered promiscuous mode
[  258.204773][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  258.241137][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  258.287432][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  258.308619][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  258.347572][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  258.358740][ T4918] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  258.368839][ T4918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.389568][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  258.402062][ T4918] usb 2-1: Product: syz
[  258.406259][ T4918] usb 2-1: Manufacturer: syz
[  258.410855][ T4918] usb 2-1: SerialNumber: syz
[  258.442723][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.462953][ T4918] usb 2-1: config 0 descriptor??
[  258.509314][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.553018][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.585995][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.604967][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.654244][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.665074][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.684702][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.716613][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.737676][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.773964][ T4918] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input20
[  258.791900][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: ipvlan2
[  258.813602][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.844628][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.885030][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.906773][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.925642][T11071] loop0: detected capacity change from 0 to 40427
[  258.932229][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.961268][T11071] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  258.974347][T10905] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.015782][T11075] netlink: 27 bytes leftover after parsing attributes in process `syz.7.2487'.
[  259.036407][T11071] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  259.049491][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  259.071816][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  259.080451][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.116596][T11071] F2FS-fs (loop0): invalid crc value
[  259.130069][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.161824][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.189046][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.208834][T11071] F2FS-fs (loop0): Found nat_bits in checkpoint
[  259.219467][ T4918] rc_core: IR keymap rc-imon-pad not found
[  259.228576][ T4918] Registered IR keymap rc-empty
[  259.237223][ T4918] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  259.243992][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.266976][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.270058][ T4918] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  259.302411][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.369288][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.388579][ T4918] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  259.414184][T11071] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  259.432640][ T4918] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21
[  259.443850][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.454322][T11071] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  259.498026][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.510530][ T4918] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:24> initialized
[  259.534494][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.569795][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.632314][T10905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.676448][T10905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.712691][T10905] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.787021][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  259.820786][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  259.837493][T10905] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.914152][T10905] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.941050][    C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  259.951897][ T4230] usb 2-1: USB disconnect, device number 24
[  259.975379][T10905] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  260.019038][T10905] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  260.249021][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.269462][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.375073][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  260.412608][ T4557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.420466][ T4557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.545217][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  260.804613][T11108] loop8: detected capacity change from 0 to 512
[  261.015882][T11108] EXT4-fs (loop8): Ignoring removed oldalloc option
[  261.031499][T11108] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  261.159501][T11108] EXT4-fs (loop8): 1 truncate cleaned up
[  261.172992][T11108] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000eb0,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,noload,oldalloc,,errors=continue. Quota mode: none.
[  261.739311][T11110] loop1: detected capacity change from 0 to 40427
[  261.772902][T11110] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  261.794380][T11110] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  261.846725][T11110] F2FS-fs (loop1): invalid crc_offset: 1
[  262.081545][T11126] loop0: detected capacity change from 0 to 131072
[  262.129671][T11110] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  262.194033][T11126] F2FS-fs (loop0): invalid crc value
[  262.261804][T11126] F2FS-fs (loop0): Found nat_bits in checkpoint
[  262.300272][T11126] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  262.334435][T11126] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  262.373025][T11110] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  262.412877][T11110] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  262.424450][ T9795] net_ratelimit: 8 callbacks suppressed
[  262.424464][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.431645][ T4918] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  262.596690][ T4187] attempt to access beyond end of device
[  262.596690][ T4187] loop1: rw=2049, want=45104, limit=40427
[  262.912993][ T4918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  262.943632][ T4918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  262.978154][ T4918] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  263.004999][ T4918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.046494][ T4918] usb 8-1: config 0 descriptor??
[  263.314472][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.343680][T11163] loop1: detected capacity change from 0 to 4096
[  263.426378][ T4918] usbhid 8-1:0.0: can't add hid device: -71
[  263.433313][ T4918] usbhid: probe of 8-1:0.0 failed with error -71
[  263.476634][T11167] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.506633][ T4918] usb 8-1: USB disconnect, device number 2
[  263.533075][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.546673][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.945472][T11181] loop0: detected capacity change from 0 to 512
[  264.014016][ T4918] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  264.042826][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  264.049315][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  264.071614][T10965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.163050][T11181] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  264.321079][   T25] audit: type=1800 audit(1783649981.709:54): pid=11181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2515" name="file1" dev="loop0" ino=26 res=0 errno=0
[  264.345358][ T4918] usb 8-1: Using ep0 maxpacket: 8
[  264.477580][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.495471][ T4918] usb 8-1: config 0 has an invalid interface number: 52 but max is 0
[  264.511506][ T4918] usb 8-1: config 0 has no interface number 0
[  264.531723][ T4918] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.553614][ T4918] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.574107][ T4918] usb 8-1: config 0 interface 52 has no altsetting 0
[  264.588139][ T4918] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  264.606767][ T4918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.636103][ T4918] usb 8-1: config 0 descriptor??
[  264.671268][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.725184][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.759058][T11197] input: syz0 as /devices/virtual/input/input22
[  264.945752][ T4918] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input23
[  264.981760][ T3544] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  265.034262][ T3544] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  265.091257][ T3544] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  265.155543][ T4467] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  265.187065][ T3544] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  265.215930][ T3544] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  265.281443][T11141] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  265.318680][ T3544] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  265.344353][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.382398][T10965] usb 8-1: USB disconnect, device number 3
[  265.439530][T11211] sctp: [Deprecated]: syz.8.2534 (pid 11211) Use of int in maxseg socket option.
[  265.439530][T11211] Use struct sctp_assoc_value instead
[  265.586215][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.040378][T11231] loop8: detected capacity change from 0 to 512
[  266.116346][T11233] loop1: detected capacity change from 0 to 1024
[  266.361743][T11231] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #15: comm syz.8.2543: iget: bad i_size value: 38620345925642
[  266.391277][T11231] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.2543: couldn't read orphan inode 15 (err -117)
[  266.434890][T11231] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  266.478679][T11231] EXT4-fs (loop8): shut down requested (2)
[  266.490854][T11233] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  266.521222][T11233] hfsplus: xattr search failed
[  266.550749][T11233] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  266.578465][T11233] hfsplus: xattr search failed
[  266.653280][T11233] hfsplus: b-tree write err: -5, ino 2
[  266.773175][ T1433] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  266.815780][ T4263] hfsplus: b-tree write err: -5, ino 25
[  266.821631][ T4263] hfsplus: b-tree write err: -5, ino 4
[  266.845021][ T4263] hfsplus: b-tree write err: -5, ino 2
[  266.881449][ T4263] hfsplus: b-tree write err: -5, ino 29
[  267.083082][T11250] 9pnet: Insufficient options for proto=fd
[  267.419740][T11266] loop0: detected capacity change from 0 to 128
[  267.512935][T11270] loop8: detected capacity change from 0 to 1024
[  267.825168][ T9795] net_ratelimit: 5 callbacks suppressed
[  267.825185][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.839142][T11266] affs: No valid root block on device loop0
[  267.914382][T11270] hfsplus: walked past end of dir
[  267.978797][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.032789][  T144] hfsplus: bad catalog file entry
[  268.150309][  T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.384505][T11286] loop1: detected capacity change from 0 to 2048
[  268.444505][T11292] loop0: detected capacity change from 0 to 128
[  268.459562][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2568'.
[  268.546760][T11293] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.587675][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.605103][T11268] loop7: detected capacity change from 0 to 32768
[  268.730344][T11296] device macvtap1 entered promiscuous mode
[  268.825555][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.932154][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.090436][T11268] XFS (loop7): Mounting V5 Filesystem
[  269.118236][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.128318][T11311] loop8: detected capacity change from 0 to 1024
[  269.308240][T11268] XFS (loop7): Ending clean mount
[  269.436186][T11311] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  269.442576][T11311] hfsplus: xattr search failed
[  269.519115][T11325] netlink: 'syz.5.2580': attribute type 2 has an invalid length.
[  269.530380][T11311] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  269.536758][T11311] hfsplus: xattr search failed
[  269.558429][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2580'.
[  269.573032][ T4918] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  269.621479][T11311] hfsplus: b-tree write err: -5, ino 2
[  269.666825][T11328] loop1: detected capacity change from 0 to 4096
[  269.742372][  T144] hfsplus: b-tree write err: -5, ino 25
[  269.759282][  T144] hfsplus: b-tree write err: -5, ino 4
[  269.770023][T10785] XFS (loop7): Unmounting Filesystem
[  269.797653][  T144] hfsplus: b-tree write err: -5, ino 2
[  269.809313][T11331] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  269.820961][  T144] hfsplus: b-tree write err: -5, ino 29
[  270.075730][ T4918] usb 1-1: unable to get BOS descriptor or descriptor too short
[  270.127251][T10965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.161158][ T4918] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  270.182407][ T4918] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  270.191421][ T4918] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  270.207148][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.221769][ T4918] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  270.242686][ T4918] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  270.275027][ T4918] usb 1-1: config 1 interface 1 has no altsetting 0
[  270.288643][T11336] loop8: detected capacity change from 0 to 4096
[  270.295340][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  270.553518][T11343] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.578381][ T4918] usb 1-1: string descriptor 0 read error: -22
[  270.584680][ T4918] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  270.648566][ T4918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.224658][T11356] loop7: detected capacity change from 0 to 4096
[  271.336937][T11356] EXT4-fs (loop7): Ignoring removed bh option
[  271.345161][T11356] EXT4-fs (loop7): Unrecognized mount option "fsuuid=7" or missing value
[  271.679229][ T4552] usb 1-1: USB disconnect, device number 25
[  272.309175][T11362] loop8: detected capacity change from 0 to 131072
[  272.395341][ T4918] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  272.621310][T11362] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0)
[  272.629433][T11362] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  272.638792][T11362] F2FS-fs (loop8): invalid crc value
[  272.712758][T11362] F2FS-fs (loop8): Found nat_bits in checkpoint
[  272.729752][ T4552] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  272.774326][T11362] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  272.781465][T11362] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  272.837763][ T4918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.876659][T11362] F2FS-fs (loop8): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. 7c4dd4cf
[  272.890375][T11386] F2FS-fs (loop8): checksum invalid, nid = 7, ino_of_node = 7, a6222242 vs. 7c4dd4cf
[  272.906464][ T4918] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  272.914936][T11388] loop0: detected capacity change from 0 to 512
[  272.950309][ T4918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.012291][ T4918] usb 8-1: config 0 descriptor??
[  273.017519][ T4552] usb 2-1: Using ep0 maxpacket: 8
[  273.094788][T11388] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.2605: iget: bad i_size value: 38620345925642
[  273.213139][T11388] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.2605: couldn't read orphan inode 15 (err -117)
[  273.262247][T11388] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,delalloc,acl,journal_dev=0x0000000000000011,usrjquota=,bsdgroups,,errors=continue. Quota mode: writeback.
[  273.284341][ T4552] usb 2-1: config 6 has an invalid interface number: 49 but max is 0
[  273.327769][ T4552] usb 2-1: config 6 has no interface number 0
[  273.388493][T10965] net_ratelimit: 7 callbacks suppressed
[  273.388512][T10965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.403695][ T4552] usb 2-1: language id specifier not provided by device, defaulting to English
[  273.561566][ T4918] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor
[  273.582408][ T4552] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9b01, bcdDevice=ec.3a
[  273.591485][ T4552] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.629721][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.630581][ T4918] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0011/input/input24
[  273.667515][ T4552] usb 2-1: Product: syz
[  273.671724][ T4552] usb 2-1: Manufacturer: 㤪⎤๏诶膢❾偤鎘ꠇ엖ᜊ羍⪁ꇪ⏞왞鐳쬒仳ꄴ뾮꒖
[  273.679817][T11394] loop0: detected capacity change from 0 to 1024
[  273.696810][ T4552] usb 2-1: SerialNumber: syz
[  273.742179][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.774974][T11365] udc-core: couldn't find an available UDC or it's busy
[  273.781967][T11365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  274.017432][ T4918] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0
[  274.043483][T11403] hfsplus: xattr search failed
[  274.054511][ T4552] option 2-1:6.49: GSM modem (1-port) converter detected
[  274.119399][ T4552] usb 2-1: USB disconnect, device number 25
[  274.150130][ T4552] option 2-1:6.49: device disconnected
[  274.251068][ T4188] hfsplus: node 4:3 still has 1 user(s)!
[  274.299087][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.314804][ T4263] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.374248][    C0] keytouch 0003:0926:3333.0011: Event data for report 0 was too short (8 vs 7)
[  274.777783][ T9795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.786042][ T5614] usb 8-1: USB disconnect, device number 4
[  274.834219][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.868410][T11426] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.870466][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.957069][T11428] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.479526][T11442] loop8: detected capacity change from 0 to 64
[  275.946166][T11453] loop0: detected capacity change from 0 to 4096
[  276.052606][ T5614] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  276.197730][T11453] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  276.307324][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2635'.
[  276.388318][T11458] device team1 entered promiscuous mode
[  276.391446][T11440] loop1: detected capacity change from 0 to 32768
[  276.419617][ T5614] usb 8-1: Using ep0 maxpacket: 32
[  276.429582][T11458] 8021q: adding VLAN 0 to HW filter on device team1
[  276.466557][T11440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2627 (11440)
[  276.537451][T11440] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  276.557387][T11440] BTRFS info (device loop1): using free space tree
[  276.560061][ T5614] usb 8-1: config 2 has an invalid interface number: 45 but max is 0
[  276.572722][ T5614] usb 8-1: config 2 has no interface number 0
[  276.573531][T11440] BTRFS info (device loop1): has skinny extents
[  276.596223][ T4188] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  276.602993][ T5614] usb 8-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  276.628829][ T5614] usb 8-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  276.809020][ T5614] usb 8-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92
[  276.864907][ T5614] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.872944][ T5614] usb 8-1: Product: syz
[  276.938765][ T5614] usb 8-1: Manufacturer: syz
[  276.940770][T11440] BTRFS info (device loop1): enabling ssd optimizations
[  276.943419][ T5614] usb 8-1: SerialNumber: syz
[  277.039121][ T5614] kobil_sct 8-1:2.45: KOBIL USB smart card terminal converter detected
[  277.081722][ T5614] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  277.289233][ T5614] usb 8-1: USB disconnect, device number 5
[  277.299866][ T5614] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  277.329239][ T5614] kobil_sct 8-1:2.45: device disconnected
[  277.360477][T10966] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  277.672285][T10966] usb 1-1: Using ep0 maxpacket: 8
[  277.843821][T10966] usb 1-1: config 0 has an invalid interface number: 32 but max is 0
[  277.858848][T10966] usb 1-1: config 0 has no interface number 0
[  277.886404][T10966] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  277.936402][T10966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.005096][T10966] usb 1-1: config 0 descriptor??
[  278.076275][T10966] usb-storage 1-1:0.32: USB Mass Storage device detected
[  278.144154][T10966] usb-storage 1-1:0.32: device ignored
[  278.280517][T11518] loop1: detected capacity change from 0 to 8192
[  278.460320][T10966] usb 1-1: USB disconnect, device number 26
[  278.506961][T11533] loop8: detected capacity change from 0 to 2048
[  278.575789][T11537] loop7: detected capacity change from 0 to 64
[  278.596300][T11533] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  278.617046][T11518] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  278.649562][T11518] REISERFS (device loop1): using ordered data mode
[  278.684947][T11518] reiserfs: using flush barriers
[  278.733278][T11539] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.747997][T11533] attempt to access beyond end of device
[  278.747997][T11533] loop8: rw=524288, want=33554432, limit=2048
[  278.782562][T11518] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  278.827641][T11533] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0
[  278.844609][ T4262] net_ratelimit: 15 callbacks suppressed
[  278.844627][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.883577][T11518] REISERFS (device loop1): checking transaction log (loop1)
[  278.911263][T11533] Remounting filesystem read-only
[  278.937567][T11544] fuse: Bad value for 'fd'
[  279.077828][T11550] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  279.097243][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.103130][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.252029][T11556] loop0: detected capacity change from 0 to 256
[  279.398482][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.406807][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.425345][T11518] REISERFS (device loop1): Using tea hash to sort names
[  279.433908][T11518] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  279.531301][T11566] Invalid argument reading file caps for ./file0
[  279.565836][T11556] FAT-fs (loop0): Directory bread(block 64) failed
[  279.598181][T11556] FAT-fs (loop0): Directory bread(block 65) failed
[  279.632240][T11556] FAT-fs (loop0): Directory bread(block 66) failed
[  279.671618][T11556] FAT-fs (loop0): Directory bread(block 67) failed
[  279.722959][T11556] FAT-fs (loop0): Directory bread(block 68) failed
[  279.746553][T11556] FAT-fs (loop0): Directory bread(block 69) failed
[  279.783131][T11556] FAT-fs (loop0): Directory bread(block 70) failed
[  279.793430][T10966] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  279.814626][T11556] FAT-fs (loop0): Directory bread(block 71) failed
[  279.834745][T11556] FAT-fs (loop0): Directory bread(block 72) failed
[  279.841413][T11556] FAT-fs (loop0): Directory bread(block 73) failed
[  279.872008][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.939984][T11556] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  280.241187][T10966] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  280.275328][T10966] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253
[  280.451770][T11577] loop0: detected capacity change from 0 to 24
[  280.468810][ T1433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.476983][ T1433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.488358][T10966] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  280.518544][T11577] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  280.519085][T10966] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.542809][T11578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2680'.
[  280.557854][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.575671][T10966] usb 9-1: Product: syz
[  280.588686][T10966] usb 9-1: Manufacturer: syz
[  280.615225][T10966] usb 9-1: SerialNumber: syz
[  280.624600][T10966] usb 9-1: config 0 descriptor??
[  280.632400][T11577] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  280.640704][T11568] loop7: detected capacity change from 0 to 32768
[  280.683034][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.717852][T11580] loop1: detected capacity change from 0 to 128
[  280.733127][T10966] gspca_main: sunplus-2.14.0 probing 055f:c630
[  280.826773][   T25] audit: type=1800 audit(1783649997.143:55): pid=11568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2676" name="file1" dev="loop7" ino=4 res=0 errno=0
[  280.887149][T11580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  280.936603][T11580] System zones: 1-3, 19-19, 35-36
[  280.967395][ T4557] read_mapping_page failed!
[  280.976083][ T4557] ERROR: (device loop7): txCommit: 
[  280.976083][ T4557] 
[  281.016738][T11580] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback.
[  281.070506][ T4557] ERROR: (device loop7): remounting filesystem as read-only
[  281.076159][T11580] ext4 filesystem being mounted at /477/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  281.092417][ T4557] jfs_write_inode: jfs_commit_inode failed!
[  281.194504][ T4557] read_mapping_page failed!
[  281.199063][ T4557] ERROR: (device loop7): txCommit: 
[  281.199063][ T4557] 
[  281.257840][ T4557] jfs_write_inode: jfs_commit_inode failed!
[  281.271311][T11585] loop0: detected capacity change from 0 to 256
[  281.315675][T11580] EXT4-fs warning (device loop1): verify_group_input:147: Cannot add at group 131073 (only 1 groups)
[  281.444849][ T4557] read_mapping_page failed!
[  281.449397][ T4557] ERROR: (device loop7): txCommit: 
[  281.449397][ T4557] 
[  281.473796][ T4557] ERROR: (device loop7): remounting filesystem as read-only
[  281.486920][ T4557] jfs_write_inode: jfs_commit_inode failed!
[  281.504202][T11585] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  281.941071][T10966] usb 9-1: USB disconnect, device number 2
[  282.026329][T11590] loop1: detected capacity change from 0 to 4096
[  282.186037][T11591] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.284867][T11590] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 8191 already freed
[  282.434949][T11590] NILFS (loop1): nilfs_sufile_do_free: segment 13 is already clean
[  282.794074][T11607] loop8: detected capacity change from 0 to 256
[  283.733691][T11634] loop0: detected capacity change from 0 to 256
[  284.018133][T11634] FAT-fs (loop0): Directory bread(block 64) failed
[  284.026798][T11634] FAT-fs (loop0): Directory bread(block 65) failed
[  284.055587][T11634] FAT-fs (loop0): Directory bread(block 66) failed
[  284.087218][T11634] FAT-fs (loop0): Directory bread(block 67) failed
[  284.115553][T11634] FAT-fs (loop0): Directory bread(block 68) failed
[  284.146488][T11634] FAT-fs (loop0): Directory bread(block 69) failed
[  284.191217][T11634] FAT-fs (loop0): Directory bread(block 70) failed
[  284.223654][T11634] FAT-fs (loop0): Directory bread(block 71) failed
[  284.242006][T11634] FAT-fs (loop0): Directory bread(block 72) failed
[  284.248585][T11634] FAT-fs (loop0): Directory bread(block 73) failed
[  284.420272][T11634] attempt to access beyond end of device
[  284.420272][T11634] loop0: rw=524288, want=1196, limit=256
[  284.480354][T11610] loop1: detected capacity change from 0 to 40427
[  284.482058][T11634] attempt to access beyond end of device
[  284.482058][T11634] loop0: rw=0, want=1196, limit=256
[  284.518538][T10966] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  284.539036][T11610] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  284.555067][T11610] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  284.579219][ T4916] net_ratelimit: 8 callbacks suppressed
[  284.579237][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.604614][   T25] audit: type=1800 audit(1783650000.679:56): pid=11634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2705" name="file1" dev="loop0" ino=1048675 res=0 errno=0
[  284.620863][T11610] F2FS-fs (loop1): invalid crc value
[  284.728846][T11657] loop7: detected capacity change from 0 to 1024
[  284.755592][T11610] F2FS-fs (loop1): Found nat_bits in checkpoint
[  284.850135][T11634] attempt to access beyond end of device
[  284.850135][T11634] loop0: rw=0, want=1196, limit=256
[  284.924836][T11657] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  284.939154][T11610] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  284.952856][T11610] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  284.978285][T10966] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  284.987282][T10966] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  285.008682][T10966] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  285.018812][T10966] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  285.030206][T10966] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  285.057622][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.066149][T11665] EXT4-fs (loop7): shut down requested (1)
[  285.096821][   T25] audit: type=1800 audit(1783650001.146:57): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2714" name="file1" dev="loop7" ino=15 res=0 errno=0
[  285.204876][T10966] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  285.224369][T10966] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  285.239868][T10966] usb 9-1: Product: syz
[  285.244207][T10966] usb 9-1: Manufacturer: syz
[  285.259422][T11390] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.268004][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.277202][ T1433] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  285.321414][T10966] cdc_wdm 9-1:1.0: skipping garbage
[  285.326661][T10966] cdc_wdm 9-1:1.0: skipping garbage
[  285.333938][ T1433] Quota error (device loop7): write_blk: dquota write failed
[  285.353458][T10966] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  285.359897][ T1433] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries
[  285.383506][T10966] cdc_wdm 9-1:1.0: Unknown control protocol
[  285.390626][ T1433] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  285.432311][T10966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.448749][ T1433] Quota error (device loop7): write_blk: dquota write failed
[  285.486728][ T1433] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list
[  285.557087][ T1433] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started
[  285.648225][ T1433] Quota error (device loop7): v2_write_file_info: Can't write info structure
[  285.680608][ T1433] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  285.726882][T11678] fuse: Bad value for 'fd'
[  285.908577][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  285.915536][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  285.942184][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  285.948849][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  285.960145][   T13] usb 9-1: USB disconnect, device number 3
[  285.969628][T11682] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2719'.
[  285.983027][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  285.989677][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  285.995764][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  286.198928][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.375565][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.384219][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.619662][  T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.682841][T11705] loop8: detected capacity change from 0 to 512
[  286.801745][T11676] loop0: detected capacity change from 0 to 40427
[  286.834026][T11705] EXT4-fs (loop8): Test dummy encryption mode enabled
[  286.870969][T11705] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  286.904031][T11676] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  286.964784][T11676] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  286.975150][T11705] EXT4-fs error (device loop8): ext4_orphan_get:1432: comm syz.8.2734: bad orphan inode 131083
[  287.008853][T11676] F2FS-fs (loop0): invalid crc_offset: 1
[  287.041860][T11705] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[  287.049970][T11696] loop1: detected capacity change from 0 to 32768
[  287.089791][T11676] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  287.261346][T11696] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2730 (11696)
[  287.304821][ T6246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.369330][T11696] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  287.371266][T11676] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  287.384624][T11696] BTRFS info (device loop1): setting nodatasum
[  287.409178][T11696] BTRFS info (device loop1): force zlib compression, level 3
[  287.476239][T11696] BTRFS info (device loop1): metadata ratio 1
[  287.496979][T11676] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  287.505045][T11696] BTRFS info (device loop1): turning on flush-on-commit
[  287.527255][T11696] BTRFS info (device loop1): allowing degraded mounts
[  287.565379][T11696] BTRFS error (device loop1): support for check_integrity* not compiled in!
[  287.626887][T11696] BTRFS error (device loop1): open_ctree failed: -22
[  287.742699][T11696] bridge0: port 3(syz_tun) entered blocking state
[  287.779211][T11696] bridge0: port 3(syz_tun) entered disabled state
[  287.984677][ T4188] attempt to access beyond end of device
[  287.984677][ T4188] loop0: rw=2049, want=45104, limit=40427
[  287.994060][T10966] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  288.313842][T10966] usb 9-1: Using ep0 maxpacket: 16
[  288.467226][T10966] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  288.496411][T10966] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.546655][T10966] usb 9-1: config 0 descriptor??
[  288.551845][   T13] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  288.615008][T10966] gspca_main: sonixj-2.14.0 probing 0471:0327
[  288.665126][T11757] loop7: detected capacity change from 0 to 4096
[  288.726670][T11757] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  288.853823][T11761] loop9: detected capacity change from 0 to 7
[  288.878109][ T4176] Dev loop9: unable to read RDB block 7
[  288.890899][ T4176]  loop9: unable to read partition table
[  288.918538][ T4176] loop9: partition table beyond EOD, truncated
[  288.972274][T11761] Dev loop9: unable to read RDB block 7
[  288.994987][T11761]  loop9: unable to read partition table
[  288.998714][   T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.006861][T11761] loop9: partition table beyond EOD, 
[  289.020977][   T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.021290][T11761] truncated
[  289.053675][   T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  289.070088][T11761] loop_reread_partitions: partition scan of loop9 (��) failed (rc=-5)
[  289.110513][   T13] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  289.143008][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.175996][   T13] usb 2-1: config 0 descriptor??
[  289.217472][ T3559] Dev loop9: unable to read RDB block 7
[  289.227667][ T3559]  loop9: unable to read partition table
[  289.242560][ T3559] loop9: partition table beyond EOD, truncated
[  289.423268][T11764] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2758'.
[  289.553908][T10966] gspca_sonixj: reg_r err -71
[  289.559127][T10966] sonixj: probe of 9-1:0.0 failed with error -71
[  289.602184][T10966] usb 9-1: USB disconnect, device number 4
[  289.721549][   T13] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  289.776641][   T13] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  290.257792][ T4230] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  290.687150][ T5614] net_ratelimit: 9 callbacks suppressed
[  290.687171][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.734530][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.811567][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  290.842320][ T4230] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  290.856860][ T4230] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  290.911392][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0
[  291.114722][ T4230] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  291.140280][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  291.179570][ T4230] usb 1-1: Product: syz
[  291.183773][ T4230] usb 1-1: Manufacturer: syz
[  291.188378][ T4230] usb 1-1: SerialNumber: syz
[  291.244535][ T4230] usb 1-1: config 0 descriptor??
[  291.266389][T11810] 9pnet: p9_errstr2errno: server reported unknown error �0x0000000000000004
[  291.295598][ T4230] hub 1-1:0.0: bad descriptor, ignoring hub
[  291.302127][ T4230] hub: probe of 1-1:0.0 failed with error -5
[  291.321644][ T4230] usb 1-1: selecting invalid altsetting 0
[  291.845276][T11822] loop1: detected capacity change from 0 to 4096
[  291.866547][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.911655][T11822] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  291.921126][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.931511][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.998449][T10966] usb 2-1: USB disconnect, device number 26
[  292.092562][ T4557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.186439][T11771] usb 1-1: reset high-speed USB device number 27 using dummy_hcd
[  292.221008][T11834] device pim6reg1 entered promiscuous mode
[  292.482418][   T13] kernel write not supported for file /input/event1 (pid: 13 comm: kworker/0:1)
[  292.574171][T11850] loop8: detected capacity change from 0 to 512
[  292.679725][   T25] audit: type=1326 audit(1783650008.237:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.5.2800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d2a3be59 code=0x7ffc0000
[  292.717829][   T25] audit: type=1326 audit(1783650008.246:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.5.2800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d2a3be59 code=0x7ffc0000
[  292.743514][    C0] vkms_vblank_simulate: vblank timer overrun
[  292.770367][   T25] audit: type=1326 audit(1783650008.246:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.5.2800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d2a3be59 code=0x7ffc0000
[  292.831209][   T25] audit: type=1326 audit(1783650008.246:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.5.2800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f62d2a3be59 code=0x7ffc0000
[  292.847947][T11864] loop7: detected capacity change from 0 to 16
[  292.855908][    C0] vkms_vblank_simulate: vblank timer overrun
[  292.870255][   T25] audit: type=1326 audit(1783650008.246:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.5.2800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d2a3be59 code=0x7ffc0000
[  292.935435][   T25] audit: type=1326 audit(1783650008.256:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.5.2800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d2a3be59 code=0x7ffc0000
[  292.964319][    C0] vkms_vblank_simulate: vblank timer overrun
[  292.974904][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.986695][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.993162][   T25] audit: type=1326 audit(1783650008.256:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.5.2800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d2a3be59 code=0x7ffc0000
[  293.033978][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.041634][   T25] audit: type=1326 audit(1783650008.274:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.5.2800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f62d2a3be59 code=0x7ffc0000
[  293.067184][    C0] vkms_vblank_simulate: vblank timer overrun
[  293.093105][   T25] audit: type=1326 audit(1783650008.274:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.5.2800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d2a3be59 code=0x7ffc0000
[  293.119984][    C0] vkms_vblank_simulate: vblank timer overrun
[  293.127458][   T25] audit: type=1326 audit(1783650008.274:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11856 comm="syz.5.2800" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62d2a3be59 code=0x7ffc0000
[  293.222674][T11850] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  293.274752][T11850] EXT4-fs error (device loop8): ext4_orphan_get:1432: comm syz.8.2796: bad orphan inode 131083
[  293.301060][T11850] EXT4-fs (loop8): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  293.354990][ T5614] usb 1-1: USB disconnect, device number 27
[  293.442184][T11864] erofs: (device loop7): mounted with root inode @ nid 36.
[  293.542541][T11882] loop1: detected capacity change from 0 to 1024
[  293.611241][T11882] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  293.684446][T11882] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  293.741286][T11882] EXT4-fs (loop1): shut down requested (1)
[  293.771227][T11882] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback.
[  294.310609][T11904] loop1: detected capacity change from 0 to 4096
[  294.659684][T11899] loop0: detected capacity change from 0 to 32768
[  294.733911][T11899] XFS (loop0): Mounting V5 Filesystem
[  294.794783][T11899] XFS (loop0): Ending clean mount
[  294.934828][ T4188] XFS (loop0): Unmounting Filesystem
[  295.702437][ T4187] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  295.743101][ T4187] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  295.945627][T11964] netlink: 'syz.1.2842': attribute type 3 has an invalid length.
[  295.982209][ T4262] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  296.053628][T11964] netlink: 'syz.1.2842': attribute type 7 has an invalid length.
[  296.077788][T11964] netlink: 198628 bytes leftover after parsing attributes in process `syz.1.2842'.
[  296.088686][T11970] netlink: 'syz.8.2846': attribute type 2 has an invalid length.
[  296.128149][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2846'.
[  296.203849][T10966] net_ratelimit: 7 callbacks suppressed
[  296.203864][T10966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.236942][  T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.309600][ T4262] usb 8-1: Using ep0 maxpacket: 32
[  296.364144][ T4231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.376262][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.535198][ T4262] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 62464, setting to 1024
[  296.588107][ T4262] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[  296.919901][ T4262] usb 8-1: string descriptor 0 read error: -22
[  296.926207][ T4262] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  296.958712][ T4262] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.005518][T11952] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  297.030566][ T4262] usb 8-1: MIDIStreaming interface descriptor not found
[  297.123809][T11977] loop0: detected capacity change from 0 to 40427
[  297.163510][T11977] F2FS-fs (loop0): invalid crc value
[  297.169218][T10966] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  297.372612][T11977] F2FS-fs (loop0): Found nat_bits in checkpoint
[  297.428654][T11977] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  297.480717][   T13] usb 8-1: USB disconnect, device number 6
[  297.528844][    C1] sched: RT throttling activated
[  297.564975][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.573425][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.581929][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.604256][T10966] usb 2-1: config 127 has an invalid interface number: 138 but max is 0
[  297.627692][T10966] usb 2-1: config 127 has no interface number 0
[  297.658646][T10966] usb 2-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40
[  297.702789][T10966] usb 2-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  297.857374][T11977] attempt to access beyond end of device
[  297.857374][T11977] loop0: rw=2049, want=55224, limit=40427
[  297.902536][T11977] attempt to access beyond end of device
[  297.902536][T11977] loop0: rw=0, want=55224, limit=40427
[  297.940403][T12012] 9pnet: p9_errstr2errno: server reported unknown error Dfߠ��r
[  297.940403][T12012] ����Ԇ�����
[  297.995822][T10966] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40
[  298.008108][T10966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.084959][T10966] usb 2-1: Product: syz
[  298.111265][T10966] usb 2-1: Manufacturer: syz
[  298.116550][T10966] usb 2-1: SerialNumber: syz
[  298.171118][T11995] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  298.182064][T11995] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  298.247686][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.565969][ T4916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.651709][T10966] usb 2-1: probing VID:PID(0424:012C)   
[  298.663931][T10966] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0F
[  298.679870][ T5614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  298.693234][T10966] usb 2-1: vub300 testing BULK OUT EndPoint(1) 09
[  298.710961][T10966] usb 2-1: vub300 testing BULK OUT EndPoint(2) 0C
[  298.721815][T10966] usb 2-1: ignoring unexpected bulk_out endpoint
[  298.751743][T10966] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  298.793026][T10966] vub300: probe of 2-1:127.138 failed with error -22
[  298.824147][T10966] usb 2-1: USB disconnect, device number 27
[  299.093142][T12044] netlink: 136 bytes leftover after parsing attributes in process `syz.8.2876'.
[  299.353116][T12057] loop8: detected capacity change from 0 to 256
[  299.473399][T12059] loop1: detected capacity change from 0 to 4096
[  299.597066][    C1] ==================================================================
[  299.606709][    C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150
[  299.614284][    C1] Read of size 2 at addr ffff88805e7df300 by task ksoftirqd/1/20
[  299.622016][    C1] 
[  299.624344][    C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0
[  299.631626][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  299.641703][    C1] Call Trace:
[  299.645382][    C1]  <TASK>
[  299.648323][    C1]  dump_stack_lvl+0x188/0x250
[  299.653021][    C1]  ? show_regs_print_info+0x20/0x20
[  299.658285][    C1]  ? _printk+0xda/0x130
[  299.662433][    C1]  ? __nft_trace_packet+0x135/0x150
[  299.667632][    C1]  ? load_image+0x410/0x410
[  299.672131][    C1]  print_address_description+0x60/0x2d0
[  299.677668][    C1]  ? __nft_trace_packet+0x135/0x150
[  299.682862][    C1]  kasan_report+0xdf/0x130
[  299.687346][    C1]  ? __nft_trace_packet+0x135/0x150
[  299.692556][    C1]  __nft_trace_packet+0x135/0x150
[  299.697651][    C1]  nft_do_chain+0x1299/0x14d0
[  299.702341][    C1]  ? mark_lock+0x94/0x320
[  299.706765][    C1]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  299.712851][    C1]  ? lock_chain_count+0x20/0x20
[  299.717732][    C1]  ? nf_nat_inet_fn+0x8a0/0xad0
[  299.722680][    C1]  nft_do_chain_inet+0x25c/0x340
[  299.727793][    C1]  ? nft_do_chain_arp+0xf0/0xf0
[  299.732643][    C1]  ? nf_nat_ipv4_local_in+0x229/0x5d0
[  299.738019][    C1]  ? nft_do_chain_arp+0xf0/0xf0
[  299.743104][    C1]  nf_hook_slow+0xb9/0x200
[  299.747517][    C1]  ? NF_HOOK+0x390/0x390
[  299.752066][    C1]  NF_HOOK+0x1f2/0x390
[  299.756126][    C1]  ? NF_HOOK+0x390/0x390
[  299.760372][    C1]  ? ip_local_deliver+0x180/0x180
[  299.765419][    C1]  ? NF_HOOK+0x390/0x390
[  299.769743][    C1]  ? ip_local_deliver+0x107/0x180
[  299.774848][    C1]  ? ip_rcv_core+0xb30/0xb30
[  299.779865][    C1]  NF_HOOK+0x303/0x390
[  299.784191][    C1]  ? ip_rcv_core+0xb30/0xb30
[  299.788780][    C1]  ? ip_local_deliver+0x180/0x180
[  299.793883][    C1]  ? ip_rcv_core+0xb30/0xb30
[  299.798466][    C1]  ? ip_rcv_core+0x72c/0xb30
[  299.803475][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  299.809452][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  299.815281][    C1]  __netif_receive_skb+0xcc/0x290
[  299.820395][    C1]  process_backlog+0x366/0x770
[  299.825306][    C1]  ? rps_trigger_softirq+0x210/0x210
[  299.830588][    C1]  ? rcu_is_watching+0x11/0xa0
[  299.837082][    C1]  __napi_poll+0xbb/0x430
[  299.842055][    C1]  net_rx_action+0x522/0xa80
[  299.846674][    C1]  ? net_tx_action+0x880/0x880
[  299.851546][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  299.857884][    C1]  ? detach_timer+0x2b0/0x2b0
[  299.862572][    C1]  handle_softirqs+0x336/0x830
[  299.867350][    C1]  ? run_ksoftirqd+0xa4/0x100
[  299.872375][    C1]  ? do_softirq+0x210/0x210
[  299.876882][    C1]  ? run_ksoftirqd+0x81/0x100
[  299.882422][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  299.887708][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  299.893075][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  299.898265][    C1]  run_ksoftirqd+0xa4/0x100
[  299.902771][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  299.907973][    C1]  ? preempt_schedule_thunk+0x16/0x18
[  299.913349][    C1]  smpboot_thread_fn+0x520/0x990
[  299.918320][    C1]  kthread+0x42e/0x520
[  299.922379][    C1]  ? cpu_report_death+0x180/0x180
[  299.927489][    C1]  ? kthread_blkcg+0xd0/0xd0
[  299.932167][    C1]  ret_from_fork+0x1f/0x30
[  299.936590][    C1]  </TASK>
[  299.939597][    C1] 
[  299.941909][    C1] Allocated by task 4173:
[  299.946220][    C1]  __kasan_slab_alloc+0x92/0xc0
[  299.951122][    C1]  slab_post_alloc_hook+0x4c/0x380
[  299.956225][    C1]  kmem_cache_alloc_node+0x184/0x2c0
[  299.961676][    C1]  __alloc_skb+0xf4/0x750
[  299.966265][    C1]  synproxy_send_client_synack+0x16c/0xd90
[  299.972277][    C1]  nft_synproxy_eval_v4+0x378/0x520
[  299.978033][    C1]  nft_synproxy_do_eval+0x32e/0x550
[  299.983687][    C1]  nft_do_chain+0x491/0x14d0
[  299.988504][    C1]  nft_do_chain_inet+0x25c/0x340
[  299.995255][    C1]  nf_hook_slow+0xb9/0x200
[  300.000395][    C1]  NF_HOOK+0x1f2/0x390
[  300.004745][    C1]  NF_HOOK+0x303/0x390
[  300.009125][    C1]  __netif_receive_skb+0xcc/0x290
[  300.014248][    C1]  process_backlog+0x366/0x770
[  300.019364][    C1]  __napi_poll+0xbb/0x430
[  300.023846][    C1]  net_rx_action+0x522/0xa80
[  300.028529][    C1]  handle_softirqs+0x336/0x830
[  300.033388][    C1]  do_softirq+0x142/0x210
[  300.037752][    C1]  __local_bh_enable_ip+0x180/0x1c0
[  300.042946][    C1]  ip_finish_output2+0xd6e/0x10e0
[  300.047961][    C1]  ip_output+0x2ba/0x3e0
[  300.052191][    C1]  __ip_queue_xmit+0x1207/0x1ce0
[  300.057115][    C1]  __tcp_transmit_skb+0x1ca3/0x31e0
[  300.062398][    C1]  tcp_write_xmit+0x1a90/0x65c0
[  300.067244][    C1]  __tcp_push_pending_frames+0x92/0x250
[  300.072873][    C1]  tcp_sendmsg_locked+0x2bdd/0x3330
[  300.078145][    C1]  tcp_sendmsg+0x2b/0x40
[  300.082389][    C1]  sock_write_iter+0x2a6/0x3a0
[  300.087146][    C1]  vfs_write+0x748/0xd70
[  300.091432][    C1]  ksys_write+0x153/0x260
[  300.095749][    C1]  do_syscall_64+0x4c/0xa0
[  300.100339][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  300.106238][    C1] 
[  300.108674][    C1] Freed by task 20:
[  300.112493][    C1]  kasan_set_track+0x4b/0x70
[  300.117116][    C1]  kasan_set_free_info+0x1f/0x40
[  300.122095][    C1]  ____kasan_slab_free+0xd5/0x110
[  300.127335][    C1]  slab_free_freelist_hook+0xec/0x170
[  300.132808][    C1]  kmem_cache_free+0x8f/0x210
[  300.137581][    C1]  nft_synproxy_eval_v4+0x380/0x520
[  300.142785][    C1]  nft_synproxy_do_eval+0x32e/0x550
[  300.147978][    C1]  nft_do_chain+0x491/0x14d0
[  300.152739][    C1]  nft_do_chain_inet+0x25c/0x340
[  300.158539][    C1]  nf_hook_slow+0xb9/0x200
[  300.163044][    C1]  NF_HOOK+0x1f2/0x390
[  300.167476][    C1]  NF_HOOK+0x303/0x390
[  300.171557][    C1]  __netif_receive_skb+0xcc/0x290
[  300.176759][    C1]  process_backlog+0x366/0x770
[  300.181570][    C1]  __napi_poll+0xbb/0x430
[  300.186674][    C1]  net_rx_action+0x522/0xa80
[  300.191646][    C1]  handle_softirqs+0x336/0x830
[  300.196877][    C1]  run_ksoftirqd+0xa4/0x100
[  300.201651][    C1]  smpboot_thread_fn+0x520/0x990
[  300.206620][    C1]  kthread+0x42e/0x520
[  300.210789][    C1]  ret_from_fork+0x1f/0x30
[  300.215198][    C1] 
[  300.217518][    C1] The buggy address belongs to the object at ffff88805e7df280
[  300.217518][    C1]  which belongs to the cache skbuff_head_cache of size 232
[  300.233705][    C1] The buggy address is located 128 bytes inside of
[  300.233705][    C1]  232-byte region [ffff88805e7df280, ffff88805e7df368)
[  300.247330][    C1] The buggy address belongs to the page:
[  300.253160][    C1] page:ffffea000179f7c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e7df
[  300.263413][    C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  300.271136][    C1] raw: 00fff00000000200 0000000000000000 0000000600000001 ffff88801bbe4140
[  300.280256][    C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000
[  300.289069][    C1] page dumped because: kasan: bad access detected
[  300.295477][    C1] page_owner tracks the page as allocated
[  300.301294][    C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 1433, ts 146364183406, free_ts 143854885678
[  300.319377][    C1]  get_page_from_freelist+0x24f6/0x2670
[  300.326304][    C1]  __alloc_pages+0x1ee/0x480
[  300.332120][    C1]  new_slab+0xc0/0x4b0
[  300.337403][    C1]  ___slab_alloc+0x807/0xdd0
[  300.342494][    C1]  kmem_cache_alloc+0xf0/0x280
[  300.347536][    C1]  skb_clone+0x1bd/0x350
[  300.351924][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x5e0/0x800
[  300.359164][    C1]  process_one_work+0x867/0xff0
[  300.364009][    C1]  worker_thread+0xad7/0x12a0
[  300.368720][    C1]  kthread+0x42e/0x520
[  300.372876][    C1]  ret_from_fork+0x1f/0x30
[  300.377333][    C1] page last free stack trace:
[  300.382094][    C1]  free_unref_page_prepare+0x637/0x6c0
[  300.387816][    C1]  free_unref_page+0x8f/0x2a0
[  300.392826][    C1]  kasan_depopulate_vmalloc_pte+0x67/0x80
[  300.399320][    C1]  __apply_to_page_range+0x987/0xd10
[  300.404806][    C1]  kasan_release_vmalloc+0x93/0xb0
[  300.409910][    C1]  __purge_vmap_area_lazy+0xaf6/0x1940
[  300.415883][    C1]  _vm_unmap_aliases+0x40b/0x4a0
[  300.420991][    C1]  change_page_attr_set_clr+0x317/0xc30
[  300.426535][    C1]  set_memory_ro+0x89/0xd0
[  300.431348][    C1]  bpf_int_jit_compile+0xbf27/0xc4d0
[  300.436665][    C1]  bpf_prog_select_runtime+0x46f/0x7b0
[  300.442380][    C1]  bpf_prog_load+0x100a/0x14e0
[  300.447360][    C1]  __sys_bpf+0x532/0x6f0
[  300.451616][    C1]  __x64_sys_bpf+0x78/0x90
[  300.456026][    C1]  do_syscall_64+0x4c/0xa0
[  300.460435][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  300.466528][    C1] 
[  300.468866][    C1] Memory state around the buggy address:
[  300.478659][    C1]  ffff88805e7df200: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[  300.488693][    C1]  ffff88805e7df280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  300.497368][    C1] >ffff88805e7df300: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[  300.505457][    C1]                    ^
[  300.509947][    C1]  ffff88805e7df380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  300.518008][    C1]  ffff88805e7df400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  300.526060][    C1] ==================================================================
[  300.535247][    C1] Disabling lock debugging due to kernel taint
[  300.541612][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  300.549001][    C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G    B             syzkaller #0
[  300.557760][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  300.568169][    C1] Call Trace:
[  300.571463][    C1]  <TASK>
[  300.574597][    C1]  dump_stack_lvl+0x188/0x250
[  300.579297][    C1]  ? show_regs_print_info+0x20/0x20
[  300.584509][    C1]  ? load_image+0x410/0x410
[  300.589423][    C1]  panic+0x2f8/0x850
[  300.593423][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  300.599435][    C1]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  300.605713][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  300.611707][    C1]  ? _raw_spin_unlock+0x40/0x40
[  300.616644][    C1]  ? print_memory_metadata+0x314/0x400
[  300.622385][    C1]  ? __nft_trace_packet+0x135/0x150
[  300.627689][    C1]  check_panic_on_warn+0x80/0xa0
[  300.632648][    C1]  ? __nft_trace_packet+0x135/0x150
[  300.637927][    C1]  end_report+0x6d/0xf0
[  300.642073][    C1]  kasan_report+0x102/0x130
[  300.646567][    C1]  ? __nft_trace_packet+0x135/0x150
[  300.651855][    C1]  __nft_trace_packet+0x135/0x150
[  300.656940][    C1]  nft_do_chain+0x1299/0x14d0
[  300.661709][    C1]  ? mark_lock+0x94/0x320
[  300.666030][    C1]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  300.671915][    C1]  ? lock_chain_count+0x20/0x20
[  300.676786][    C1]  ? nf_nat_inet_fn+0x8a0/0xad0
[  300.681632][    C1]  nft_do_chain_inet+0x25c/0x340
[  300.686560][    C1]  ? nft_do_chain_arp+0xf0/0xf0
[  300.691400][    C1]  ? nf_nat_ipv4_local_in+0x229/0x5d0
[  300.696763][    C1]  ? nft_do_chain_arp+0xf0/0xf0
[  300.701691][    C1]  nf_hook_slow+0xb9/0x200
[  300.706095][    C1]  ? NF_HOOK+0x390/0x390
[  300.710327][    C1]  NF_HOOK+0x1f2/0x390
[  300.714529][    C1]  ? NF_HOOK+0x390/0x390
[  300.718850][    C1]  ? ip_local_deliver+0x180/0x180
[  300.723869][    C1]  ? NF_HOOK+0x390/0x390
[  300.728103][    C1]  ? ip_local_deliver+0x107/0x180
[  300.733116][    C1]  ? ip_rcv_core+0xb30/0xb30
[  300.737696][    C1]  NF_HOOK+0x303/0x390
[  300.741762][    C1]  ? ip_rcv_core+0xb30/0xb30
[  300.746339][    C1]  ? ip_local_deliver+0x180/0x180
[  300.751354][    C1]  ? ip_rcv_core+0xb30/0xb30
[  300.756040][    C1]  ? ip_rcv_core+0x72c/0xb30
[  300.760620][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  300.766674][    C1]  ? ip_local_deliver_finish+0x320/0x320
[  300.772298][    C1]  __netif_receive_skb+0xcc/0x290
[  300.777490][    C1]  process_backlog+0x366/0x770
[  300.782257][    C1]  ? rps_trigger_softirq+0x210/0x210
[  300.787704][    C1]  ? rcu_is_watching+0x11/0xa0
[  300.792455][    C1]  __napi_poll+0xbb/0x430
[  300.796782][    C1]  net_rx_action+0x522/0xa80
[  300.801457][    C1]  ? net_tx_action+0x880/0x880
[  300.806207][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  300.812537][    C1]  ? detach_timer+0x2b0/0x2b0
[  300.817247][    C1]  handle_softirqs+0x336/0x830
[  300.822014][    C1]  ? run_ksoftirqd+0xa4/0x100
[  300.826690][    C1]  ? do_softirq+0x210/0x210
[  300.831266][    C1]  ? run_ksoftirqd+0x81/0x100
[  300.835927][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  300.841123][    C1]  ? lockdep_hardirqs_off+0x70/0x100
[  300.846400][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  300.851589][    C1]  run_ksoftirqd+0xa4/0x100
[  300.856092][    C1]  ? ksoftirqd_should_run+0x20/0x20
[  300.861281][    C1]  ? preempt_schedule_thunk+0x16/0x18
[  300.866638][    C1]  smpboot_thread_fn+0x520/0x990
[  300.871570][    C1]  kthread+0x42e/0x520
[  300.875623][    C1]  ? cpu_report_death+0x180/0x180
[  300.880632][    C1]  ? kthread_blkcg+0xd0/0xd0
[  300.885206][    C1]  ret_from_fork+0x1f/0x30
[  300.889612][    C1]  </TASK>
[  300.892752][    C1] Kernel Offset: disabled
[  300.897076][    C1] Rebooting in 86400 seconds..