last executing test programs:

3m19.021045843s ago: executing program 1 (id=426):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x40, r2, 0x1, 0x70bd2c, 0x1, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x5, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x976}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8801}, 0x4040000)

3m18.824364988s ago: executing program 1 (id=428):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xabc, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20)

3m18.717355146s ago: executing program 1 (id=431):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000780)='\v', 0x1}, {&(0x7f0000000740)='&', 0x1}], 0x2)

3m18.636398201s ago: executing program 1 (id=432):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

3m18.251437328s ago: executing program 1 (id=436):
io_setup(0x8, &(0x7f0000000600)=<r0=>0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000713000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x8, 0x0, r1, &(0x7f00000000c0)="01", 0x1}])

3m17.729935459s ago: executing program 1 (id=446):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001380))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0)

3m17.552111411s ago: executing program 32 (id=446):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001380))
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0)

2m27.185800851s ago: executing program 0 (id=952):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
open$dir(&(0x7f0000000200)='./sys/class/net/bonding_masters\x00', 0x40, 0x80)

2m26.949205282s ago: executing program 0 (id=956):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000300)={0xd0, 0x2, 0x0, 0x40000008})
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000140)={0x0, 0x0, 0x0, @lost_msgs})

2m26.811794436s ago: executing program 0 (id=959):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./proc/sys/net/mpls/conf/lo/input\x00', 0x80000, 0x84)
read$rfkill(r0, 0x0, 0x0)

2m26.795753749s ago: executing program 0 (id=960):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8)

2m26.665055702s ago: executing program 0 (id=962):
pipe2$9p(&(0x7f00000027c0)={<r0=>0xffffffffffffffff}, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x8001}], 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

2m26.38757885s ago: executing program 0 (id=968):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810)

2m26.091176302s ago: executing program 33 (id=968):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810)

2m9.985105235s ago: executing program 3 (id=1097):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x4, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x14, 0x0, 0x4, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0)

2m9.877167604s ago: executing program 3 (id=1099):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0xd, 0xfffffffc, 0x6, 0x1040000, 0xfff, 0x7ff, 0xcf}]})

2m9.740997128s ago: executing program 3 (id=1101):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x5, 0x4)
recvfrom$inet(r0, &(0x7f0000000140)=""/145, 0x91, 0x40008140, 0x0, 0x0)

2m9.545070732s ago: executing program 3 (id=1103):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e24, 0x40, @loopback, 0x2392}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7}], 0x1c)

2m9.425635693s ago: executing program 3 (id=1105):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000019080)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ac, 0x8, 0x9, 0x4, 0xf1d, 0x7ff, 0x2, 0xc98]}}]}]}]}, 0x38}}, 0x0)

2m9.182616235s ago: executing program 3 (id=1109):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xaa, 0x0, &(0x7f0000000480)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef852506b41edcd3beef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed54aba245e80eab18bc6f632251fac4000000000020008163063239d18657d8f6f274d1347d38650608e39d2f8e61c96bbe67808cf339089d46844de51517a756705ab535c084ee3da160dffccc6ecbc13290b3080000000000005ae73940dfd53875423d82d19a37", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x403}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1m54.111307258s ago: executing program 34 (id=1109):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8087, 0x6, 0xd})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xaa, 0x0, &(0x7f0000000480)="b461802305624431ed337301000000010000986919d5d5fe00c6fc6ef852506b41edcd3beef9757a601bee936390009c5bbd000000003632b69f0eb2062818f298ed54aba245e80eab18bc6f632251fac4000000000020008163063239d18657d8f6f274d1347d38650608e39d2f8e61c96bbe67808cf339089d46844de51517a756705ab535c084ee3da160dffccc6ecbc13290b3080000000000005ae73940dfd53875423d82d19a37", 0x0, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x403}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

47.430229805s ago: executing program 2 (id=1795):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
read(r1, &(0x7f0000000100)=""/134, 0x86)

47.260158785s ago: executing program 2 (id=1802):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00001a2000/0x1000)=nil, 0x1000, 0x0, 0x9, 0x1)
mbind(&(0x7f0000590000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000080)=0x9, 0x28, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x6, 0x0)

46.405095905s ago: executing program 2 (id=1806):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/ima/policy\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='measure uid>+', 0xd)

46.31703371s ago: executing program 2 (id=1807):
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000013c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='./file0\x00')

45.930568177s ago: executing program 2 (id=1809):
r0 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x4)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000000)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'pim6reg0\x00', 0x7fffffff})

44.053230045s ago: executing program 2 (id=1824):
r0 = msgget$private(0x0, 0x3ac)
msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x1fa, 0x800)
msgsnd(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="01"], 0x8, 0x800)
msgrcv(r0, &(0x7f0000002fc0)={0x0, ""/108}, 0xffffff4e, 0x1, 0x4800)

43.771006014s ago: executing program 35 (id=1824):
r0 = msgget$private(0x0, 0x3ac)
msgsnd(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="02"], 0x1fa, 0x800)
msgsnd(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="01"], 0x8, 0x800)
msgrcv(r0, &(0x7f0000002fc0)={0x0, ""/108}, 0xffffff4e, 0x1, 0x4800)

24.783015671s ago: executing program 6 (id=1974):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000002180)="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", 0x1000, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={r1, 0x1000, &(0x7f0000001180)=""/4096})

24.441222041s ago: executing program 6 (id=1979):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

24.339959299s ago: executing program 6 (id=1981):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)

24.167372709s ago: executing program 6 (id=1983):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000440)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2e, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_a, @device_b, @random="ed0b94fe5dfe", {0xe, 0x6}, @value=@ver_80211n={0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x4202, 0x4, {0x0, 0x6, @default_ap_ssid}, @val, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20009804)

24.016083305s ago: executing program 6 (id=1984):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='bRequestType=', 0xd)

23.870874741s ago: executing program 6 (id=1986):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0)
write(r0, &(0x7f0000000300)="8781126b976ba8ce6a5722b18045d8fce8c854a5c40b0192d4c65cf92326a2b4578fd861bfc894ff2c5df1b756153e927ccd2cb3815285ca328cea050bf6187c874822035e655e734d9018dc7866ac91b4989a506c22be87197d72f81164b15f6fcb0e743f5eb69e0cd6a669c270a6c0c431ba832ccc03f88b5c333a8ff7276734c3e75276a746afebc34bde7511e426ea7262dbea1c81b903e3763fe9e2fb5857b9c7fd88515cfcb411f7380e2c239b5f886b4ba760b6bb2746461660855f5c1bf404d104d9b0a823b3400ed20f224853debd6a23f82cb88a54d74aa16908b463e0bd240a1244c1bfeebfe928648483578d72346b390a07b369521fcee1a265800415880ebce359564ee10a7d23d8b7371b0e20397cf876a8429c72ee604bde91ffd11a7ab579ffb552c8122b80d01879f3bdc5ac063f792cc96aa15a2d78f6bf73313d6116b4ab6d6dbe1e24ffbbd6d9cf77c78349019b62b6b6cccded8454482023dea98aaed95e21441e150062c10366ff20737468ef662930b1598ea2870aeab95a572473471eeb48dd8aabab8e634838ad139e9d4c67a41d7ccbcac15662a066f6472138cf2143878f7a2d29297f0f6d0c39b6eff84c64225fa54d71475970ef4c2a83a31cddeff8a9312300e37f17bd7e3fd66ee5063c8e9c5f1bc07b1b719662ec44406cff639487bb0c5066f04dbdf6853ca43959783429e5a4e61c", 0x200)

8.455954123s ago: executing program 36 (id=1986):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x4d802, 0x0)
write(r0, &(0x7f0000000300)="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", 0x200)

4.927360629s ago: executing program 4 (id=2037):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000000)={[{@errors_remount}]}, 0x80, 0x64a, &(0x7f00000001c0)="$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")
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1)
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0xa4, 0x0, 0xe2, 0x36, @mcast2, @dev, 0x7800, 0x0, 0x6, 0xfffffffe}})

4.431011956s ago: executing program 4 (id=2041):
r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZH\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\xea\x82\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\x0f\x8eS\xaeX\x93\x7f\xd3\xb9a\xe4\xe0\xbd\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x84\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1#\xe7N\x89\xf8\xe8+\xa1\x82\x13\xb2\xa9\xef\xa5\xf8\x8b \x00\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)2\xe2\xd6\x81\x00b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|&k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc2Ru2Ht\re\xa1\xf6\xbd\xaa\xb0\x83}i\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf\xa4O\xb4\xed\xc8\xccH\xd1=\x81\x00\x00\x00\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xd6\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\x86C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17U\xf0\x16K\xf9&@\xb1[\xe2j$F1n@\xde\n%t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5#\x7f\xa8\x1f\x14\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebk\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x850\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96\x87\xc0e\xab\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!\xec\xf7$\xc2\xbaU \x98\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\"k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xec\x01\'\t\x89(\xf9\x98B\xaf\xde*\x91\xd5k\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\xdfC\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84\x0e\xa7U\xc7}\xea.U`\x1b*\xcep\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xc9\xcfw\xf3\x02\x1b\xde\xc3\x86\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x13\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcdQ\xdf\x83\xbdjp,\xe8\xbb\xe6\xc6Db\xb8\xd6\xcd\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd4k7L\x8a\xa3Z\xf9%{\xfax\x9a\x04\'/\x90\xe6\xe2\xe9\xf1@o\x0ez\xb8\xce\xbeF\x0fkE\xf4ry\x92n\xff\xcb\xf8e\xf3j\xc5[wK\x91\xdb\xf7-r\xd3\x1bx\x9b$\x91\x03q~@\xd8R\x11\x05|\x8f\xb4\xc9\x16\x87C\xab\x96\xc4\xef\xea\xb9\r\xf5\xf3\xbe\x8a\t\xc7\x88\xc0sL;.\xcf\x1d\xc4^\xb0l\xbb\x97\xc5\xf6n\xca\x18M\xb8\x81\xff\xa9~\xf7\xa3\xa6\xd3\x15I\xecXG\x89\xa8\b\x8b\xcc\xe8\x88\xa07Z\x03\xff14\x87I\xc7\\vK<m2\x16\x03\xcd\xc1\xa8.\x7f\x16qlk\xf1\xf1y\x8c\xde\xd6|\xa1(\xf4\x12O\xca3\xf8%1\x8d\xd7\a\xfeJ\xe6\x8bc\xb3\x1bKC.\xafB\x8d\xdd\xf9\x1e\x9d\xa7\x13\x00\x14\xc7\xa1\xf3\x1e\xcb\x19\x13z`\xac\xf3\xd1x\x1b#}\xfaYR\xc5#Zoag@\x18\xfa*\xb4\xc4\x04\x03V\x87\xc5\xe7\xb5\x9bJ\x85-\x7f\xfe\xc0\xb7g\xe8\'`\x96q\x88[\xf8\xe8L\x12\x85\xf5t\x99\x0e}\xd3H\xed\xda\xf3>\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14<B\x91\xc0{{\x9d@\xb3a\xad\x14\xe9\xcc|\xd7\xa1\xc6\xb9F\x04\xce]\xb9Y\xbd\xbd\f\xa4F;q\xec\x83\x9bM\x93\xa4\x9c\xdd\x93\xa0\x82E\x02d\xd4RAI\xd9O\x17\xa6P#\xa35\a\xf6\xbb\t>p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x10012, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
read(r0, &(0x7f0000000000)=""/269, 0xfffffdef)

4.23277352s ago: executing program 7 (id=2042):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0)
ioctl$TCFLSH(r0, 0x800455c9, 0x0)

4.173215601s ago: executing program 4 (id=2043):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x34, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcb}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)

3.909528627s ago: executing program 4 (id=2044):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24001090}, 0x80d4)

3.779307s ago: executing program 4 (id=2045):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x658, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x0, 0x1}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x62c, 0x2, [@TCA_BPF_ACT={0x628, 0x1, [@m_xt={0xdc, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb1, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa22015"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x1c8, 0x0, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x3, 0x20000000, 0x3, 0x9}, 0xf}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xf9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee81ecbc147aa5d146be79432192fc1574145998b7d3b55d80dd7464335395b4f37be9047482b255b6f0dec2c748724aa49cbfa5ba9725d35fc7540b4a32031dc5"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xf4, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x101, 0xfffffff7, 0xffffffffcffffffd, 0x1, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xa6, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x1e8, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x1, 0x3, 0xfd30, 0x1}, @dev={0xac, 0x14, 0x14, 0x41}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @local, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x1, 0x3be6f802}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x6, 0xd}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0x2d, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e572"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xa4, 0x9, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1001}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x1, 0x6, 0x6a}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x658}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3.631130616s ago: executing program 4 (id=2046):
capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x35, 0x0, &(0x7f0000000200)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd873094563683b788a1e78b46a2599f69c84033e65c1d6a", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

2.839434154s ago: executing program 5 (id=2056):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x1, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2.756313089s ago: executing program 5 (id=2057):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="2bfec5b767e1765b2521ccf9b041b3ef0892e45f553fdca39be2beb45f2057425c36c8e110b82acae41459b3221e0092a08fa0c057f5881937210fd270b9d03b2bfc77704b8e1073837ea1a783e33907d195a295966c138e8a778ff4fd6155d5f522fcceabca971112d7b94ea32ad0de3b9859befbfe638e9510fcfe566e1ae698dfac8933d19089f795e9d0df08fd52d22b55c769ca3f603ae1568a0fac0e59222906f7c6de40dae5f683ad6fbcfbda34c9d5fdefcff1a89d10a0976a7308ccd116e4601113ce267743db2326ef49a9221518ff6cf6c491c1", @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESOCT], 0x41, 0x5eda, &(0x7f000005eb40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)

2.174021131s ago: executing program 5 (id=2063):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0)
ppoll(&(0x7f0000000200)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0)

1.94810291s ago: executing program 7 (id=2065):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/mapper/control\x00', 0x2002, 0xf0)
ioctl(r0, 0xc138fd0a, &(0x7f0000000100)="04000000000000000000000000020000380100000100000000000000000000000000000000000000000000000000000074")

1.89012918s ago: executing program 7 (id=2066):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000005c0)={0x44, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

1.77725716s ago: executing program 7 (id=2067):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000100), 0x4)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4)

1.703236473s ago: executing program 7 (id=2068):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000004340)={0x2020}, 0x2020)

1.677073127s ago: executing program 5 (id=2069):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000004c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0})

1.627836935s ago: executing program 7 (id=2070):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x400000009)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4)

1.405417604s ago: executing program 5 (id=2071):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000f7000010"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0xfffffd83, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000ffff080001000100000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

1.351514614s ago: executing program 5 (id=2072):
syz_usb_connect$midi(0x2, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000106d04ae0840000102039b09022f00010108b0e8090400000101"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_usb_connect$uac3(0x0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

730.676623ms ago: executing program 8 (id=2077):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)

607.639954ms ago: executing program 8 (id=2078):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x48, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xfa}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)

509.305731ms ago: executing program 8 (id=2079):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="080000009c004662", 0x8}], 0x1}}], 0x1, 0x4800)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10020)

434.483304ms ago: executing program 8 (id=2080):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000000, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x4028071, 0xffffffffffffffff, 0xf7b6e000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setns(0xc9, 0x0)

57.29283ms ago: executing program 8 (id=2081):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4})
r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4})

0s ago: executing program 8 (id=2082):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
socket$inet6(0xa, 0x3, 0x88)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="1201020079db8540da0b77010b7d000000010902120004000000000904", @ANYRES32=r0, @ANYRES16=r0], 0x0)

kernel console output (not intermixed with test programs):

ut,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.6-1/input1
[  212.326983][    T8] usb 7-1: USB disconnect, device number 2
[  212.504132][ T9900] fido_id[9900]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  212.540738][ T9904] loop2: detected capacity change from 0 to 512
[  212.860860][ T9915] tipc: Started in network mode
[  212.876015][ T9915] tipc: Node identity ac14140f, cluster identity 4711
[  212.883071][ T9915] tipc: New replicast peer: 255.255.255.255
[  212.890347][ T9915] tipc: Enabled bearer <udp:syz2>, priority 10
[  213.071244][ T9929] loop6: detected capacity change from 0 to 256
[  213.073649][   T28] audit: type=1400 audit(1790911213.722:53): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9927 comm="syz.2.1390" name="unknown" offset=16
[  213.118834][ T9929] exFAT-fs (loop6): error, The cluster chain has a loop
[  213.141395][ T9929] exFAT-fs (loop6): Filesystem has been set read-only
[  213.167467][ T9929] exFAT-fs (loop6): failed to count the number of clusters in root
[  213.175502][ T5782] Bluetooth: hci2: unexpected event for opcode 0x041b
[  213.185438][ T9929] exFAT-fs (loop6): failed to recognize exfat type
[  213.445543][ T9940] netlink: 'syz.6.1395': attribute type 39 has an invalid length.
[  213.786391][ T9952] loop4: detected capacity change from 0 to 1024
[  213.786548][ T9951] netlink: 'syz.2.1409': attribute type 39 has an invalid length.
[  213.812796][ T9952] hfsplus: request for non-existent node 3 in B*Tree
[  213.821178][ T9952] hfsplus: request for non-existent node 3 in B*Tree
[  213.830769][ T9952] hfsplus: invalid length 28418 has been corrected to 255
[  213.842513][ T9952] hfsplus: invalid length 28418 has been corrected to 255
[  214.016117][    T8] tipc: Node number set to 2886997007
[  214.530704][ T9968] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd
[  214.697190][ T9977] loop5: detected capacity change from 0 to 256
[  214.727908][ T9977] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[  214.756131][ T9979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1413'.
[  214.782081][ T9979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1413'.
[  214.814162][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1413'.
[  214.848727][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1413'.
[  215.115857][ T9989] loop4: detected capacity change from 0 to 256
[  215.329468][ T9982] loop5: detected capacity change from 0 to 32768
[  215.375168][ T9982] JBD2: Ignoring recovery information on journal
[  215.433712][ T9982] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  215.843764][ T8909] ocfs2: Unmounting device (7,5) on (node local)
[  215.927351][T10013] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  216.039947][T10015] loop6: detected capacity change from 0 to 128
[  216.106479][T10015] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  216.146095][ T5818] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  216.151825][T10015] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  216.346742][ T9475] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  216.347892][ T5818] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  216.375890][ T5818] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  216.396394][ T5818] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.422028][ T5818] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  216.438088][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  216.456297][ T5818] usb 5-1: Product: syz
[  216.469132][ T5818] usb 5-1: Manufacturer: syz
[  216.480108][ T5818] usb 5-1: SerialNumber: syz
[  216.625920][ T5915] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  216.630681][T10035] loop6: detected capacity change from 0 to 128
[  216.688224][T10035] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  216.714401][T10035] hpfs: filesystem error: improperly stopped
[  216.723414][T10035] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  216.737175][ T5818] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  216.737211][T10035] hpfs: You really don't want any checks? You are crazy...
[  216.737227][T10035] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  216.775594][T10035] hpfs: code page support is disabled
[  216.785373][T10035] hpfs: hpfs_map_4sectors(): unaligned read
[  216.807587][ T5915] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  216.810241][T10035] hpfs: hpfs_map_4sectors(): unaligned read
[  216.823702][ T5915] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  216.843787][ T5915] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.845994][T10035] hpfs: filesystem error: unable to find root dir
[  216.881895][ T5915] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  216.895106][T10025] loop2: detected capacity change from 0 to 40427
[  216.902472][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  216.908976][T10035] hpfs: hpfs_map_4sectors(): unaligned read
[  216.911489][ T5915] usb 6-1: Product: syz
[  216.940759][ T5915] usb 6-1: Manufacturer: syz
[  216.945400][ T5915] usb 6-1: SerialNumber: syz
[  216.952135][T10035] hpfs: hpfs_map_sector(): read error
[  216.960873][T10025] F2FS-fs (loop2): invalid crc value
[  216.986383][ T5783] usb 5-1: USB disconnect, device number 10
[  217.000343][T10025] F2FS-fs (loop2): Found nat_bits in checkpoint
[  217.016379][ T5783] usblp0: removed
[  217.135537][T10025] F2FS-fs (loop2): Start checkpoint disabled!
[  217.165387][T10038] loop6: detected capacity change from 0 to 16
[  217.196750][T10038] erofs: (device loop6): mounted with root inode @ nid 36.
[  217.197515][T10025] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  217.232915][ T5915] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  217.382510][T10040] overlayfs: conflicting lowerdir path
[  217.414397][ T3517] kworker/u4:12: attempt to access beyond end of device
[  217.414397][ T3517] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  217.446033][ T3517] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  217.453332][ T3517] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  217.478638][ T5915] usb 6-1: USB disconnect, device number 4
[  217.497314][ T5915] usblp0: removed
[  217.761660][T10049] loop4: detected capacity change from 0 to 2048
[  217.819559][T10049] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.984523][T10053] loop2: detected capacity change from 0 to 4096
[  218.505988][ T5783] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  218.569066][T10065] loop6: detected capacity change from 0 to 32768
[  218.602679][T10065] JBD2: Ignoring recovery information on journal
[  218.634041][T10065] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  218.645914][    T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  218.706141][ T5783] usb 5-1: Using ep0 maxpacket: 16
[  218.723556][ T5783] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  218.735825][ T5783] usb 5-1: config 0 has no interface number 0
[  218.754969][ T5783] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.772817][ T5783] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.785212][ T5783] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  218.794499][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.818954][ T5783] usb 5-1: config 0 descriptor??
[  218.828610][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  218.857961][    T8] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  218.868718][ T9475] ocfs2: Unmounting device (7,6) on (node local)
[  218.888220][    T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.904375][    T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  218.915568][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  218.923936][    T8] usb 3-1: Product: syz
[  218.928965][    T8] usb 3-1: Manufacturer: syz
[  218.933598][    T8] usb 3-1: SerialNumber: syz
[  219.214504][    T8] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  219.295641][T10083] tipc: Started in network mode
[  219.314090][T10083] tipc: Node identity ac14140f, cluster identity 4711
[  219.322887][T10083] tipc: New replicast peer: 255.255.255.255
[  219.334252][T10083] tipc: Enabled bearer <udp:syz2>, priority 10
[  219.459098][ T5783] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000C/input/input35
[  219.467972][    T8] usb 3-1: USB disconnect, device number 12
[  219.518516][    T8] usblp0: removed
[  219.600000][ T5783] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0071.000C/input/input36
[  219.644499][ T5783] uclogic 0003:28BD:0071.000C: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.4-1/input1
[  219.686388][ T5783] usb 5-1: USB disconnect, device number 11
[  219.802703][T10086] fido_id[10086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  220.104928][T10100] loop6: detected capacity change from 0 to 1024
[  220.163899][T10100] hfsplus: request for non-existent node 3 in B*Tree
[  220.179278][T10100] hfsplus: request for non-existent node 3 in B*Tree
[  220.187759][T10100] hfsplus: invalid length 28418 has been corrected to 255
[  220.194919][T10100] hfsplus: invalid length 28418 has been corrected to 255
[  220.396879][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'.
[  220.418249][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'.
[  220.446105][ T9613] tipc: Node number set to 2886997007
[  220.457788][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'.
[  220.469567][T10114] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd
[  220.473135][T10112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1473'.
[  220.633057][T10120] loop2: detected capacity change from 0 to 256
[  220.876185][ T9613] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  220.912190][T10117] loop4: detected capacity change from 0 to 32768
[  220.980644][T10117] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  220.994433][T10129] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  221.066001][ T9613] usb 7-1: Using ep0 maxpacket: 8
[  221.083185][ T9613] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[  221.087476][T10117] XFS (loop4): Ending clean mount
[  221.101852][ T9613] usb 7-1: config 0 has no interface number 0
[  221.114663][ T9613] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  221.138178][ T9613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.155849][ T9613] usb 7-1: Product: syz
[  221.166132][T10117] XFS (loop4): Quotacheck needed: Please wait.
[  221.170277][ T9613] usb 7-1: Manufacturer: syz
[  221.205618][ T9613] usb 7-1: SerialNumber: syz
[  221.230517][ T9613] usb 7-1: config 0 descriptor??
[  221.318725][T10117] XFS (loop4): Quotacheck: Done.
[  221.354651][ T5915] IPVS: starting estimator thread 0...
[  221.453885][T10143] IPVS: using max 26 ests per chain, 62400 per kthread
[  221.477934][ T9613] usb 7-1: USB disconnect, device number 3
[  221.501328][ T6952] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  221.700518][T10158] loop5: detected capacity change from 0 to 128
[  221.850060][T10162] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  222.328634][T10164] loop2: detected capacity change from 0 to 40427
[  222.349244][T10164] F2FS-fs (loop2): invalid crc value
[  222.369734][T10164] F2FS-fs (loop2): Found nat_bits in checkpoint
[  222.502628][T10164] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  222.668663][ T5779] syz-executor: attempt to access beyond end of device
[  222.668663][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  222.689017][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  223.175723][T10197] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  223.287767][T10198] loop5: detected capacity change from 0 to 4096
[  223.347168][T10205] loop4: detected capacity change from 0 to 16
[  223.361346][T10205] erofs: (device loop4): mounted with root inode @ nid 36.
[  223.398496][T10206] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1508'.
[  223.947498][T10227] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1521'.
[  223.959329][T10227] netlink: 'syz.6.1521': attribute type 12 has an invalid length.
[  223.968511][T10227] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1521'.
[  224.006189][T10229] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1520'.
[  224.022153][T10229] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.029570][T10229] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.186285][T10240] loop6: detected capacity change from 0 to 8
[  224.246805][T10240] SQUASHFS error: Unable to read directory block [629:fe]
[  224.378350][T10248] loop2: detected capacity change from 0 to 128
[  224.489507][T10248] syz.2.1530: attempt to access beyond end of device
[  224.489507][T10248] loop2: rw=2049, sector=154, nr_sectors = 96 limit=128
[  224.528537][T10248] syz.2.1530: attempt to access beyond end of device
[  224.528537][T10248] loop2: rw=2049, sector=138, nr_sectors = 16 limit=128
[  224.731224][T10261] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1533'.
[  224.754147][T10260] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1534'.
[  224.802074][T10257] loop4: detected capacity change from 0 to 8192
[  224.811338][T10260] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.818457][T10257] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  224.818754][T10260] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.835931][T10257] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  224.853043][T10257] REISERFS (device loop4): using ordered data mode
[  224.859930][T10257] reiserfs: using flush barriers
[  224.875746][T10257] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  224.919966][T10257] REISERFS (device loop4): checking transaction log (loop4)
[  225.110542][T10268] loop2: detected capacity change from 0 to 512
[  225.177629][T10268] EXT4-fs (loop2): bad s_want_extra_isize: 192
[  225.185767][T10257] REISERFS (device loop4): Using tea hash to sort names
[  225.210968][T10257] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  225.245921][T10257] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  225.389581][T10257] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2)
[  225.500678][T10274] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.877412][T10266] set_capacity_and_notify: 1 callbacks suppressed
[  225.877430][T10266] loop5: detected capacity change from 0 to 40427
[  225.892888][T10266] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  225.927659][T10266] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  225.954212][T10266] F2FS-fs (loop5): invalid crc value
[  225.979929][T10266] F2FS-fs (loop5): Found nat_bits in checkpoint
[  226.153218][T10266] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  226.179080][T10266] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  226.258745][T10299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1549'.
[  226.350020][ T8909] syz-executor: attempt to access beyond end of device
[  226.350020][ T8909] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  226.388671][ T8909] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  226.640115][T10311] loop4: detected capacity change from 0 to 512
[  226.661218][T10311] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.1557: inode has both inline data and extents flags
[  226.680027][T10311] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1557: couldn't read orphan inode 15 (err -117)
[  226.708810][T10311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.927570][ T6952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.446594][   T28] audit: type=1400 audit(1790911228.102:54): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10336 comm="syz.4.1565" name="unknown" offset=16
[  227.516321][ T5783] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  227.538896][T10341] loop2: detected capacity change from 0 to 128
[  227.705940][ T5783] usb 6-1: Using ep0 maxpacket: 8
[  227.713269][ T5783] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  227.722190][ T5783] usb 6-1: config 0 has no interface number 0
[  227.732063][ T5783] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  227.741822][ T5783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.750155][ T5783] usb 6-1: Product: syz
[  227.755054][ T5783] usb 6-1: Manufacturer: syz
[  227.756013][   T51] Bluetooth: hci0: command 0x0c24 tx timeout
[  227.765486][ T5783] usb 6-1: SerialNumber: syz
[  227.765760][ T5782] Bluetooth: hci0: Opcode 0x0c24 failed: -110
[  227.786882][ T5783] usb 6-1: config 0 descriptor??
[  227.927262][T10340] loop6: detected capacity change from 0 to 32768
[  227.957640][T10340] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.010329][ T5783] usb 6-1: USB disconnect, device number 5
[  228.068055][T10340] XFS (loop6): Ending clean mount
[  228.095596][T10340] XFS (loop6): Quotacheck needed: Please wait.
[  228.169122][T10340] XFS (loop6): Quotacheck: Done.
[  228.224295][ T9475] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.650365][T10364] loop2: detected capacity change from 0 to 256
[  228.712195][T10364] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  228.780910][T10366] hub 1-0:1.0: USB hub found
[  228.829637][T10366] hub 1-0:1.0: 1 port detected
[  229.232353][T10391] cgroup: fork rejected by pids controller in /syz4
[  229.320271][T10389] loop2: detected capacity change from 0 to 4096
[  229.457541][T10389] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[  229.464094][T10389] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  229.545943][ T5783] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  229.666328][T10389] ntfs3: loop2: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  229.744523][   T11] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22.
[  229.754255][ T5779] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[  229.767121][ T5779] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  229.774538][ T5783] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  229.784030][ T5779] ntfs3: loop2: ino=3, ntfs_set_state failed, -22.
[  229.785828][ T5783] usb 6-1: config 0 has no interface number 0
[  229.799229][   T12] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22.
[  229.829227][ T5783] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  229.848839][ T5783] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.880940][ T5783] usb 6-1: Product: syz
[  229.896092][ T5783] usb 6-1: Manufacturer: syz
[  229.900756][ T5783] usb 6-1: SerialNumber: syz
[  229.937225][ T5783] usb 6-1: config 0 descriptor??
[  229.973943][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.122927][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.171496][ T5783] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  230.191499][ T5783] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  230.226586][ T5783] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  230.234674][ T5783] usb 6-1: media controller created
[  230.304709][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.305250][T10408] loop2: detected capacity change from 0 to 64
[  230.335708][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  230.426252][ T5783] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  230.449470][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.556754][ T5783] usb 6-1: USB disconnect, device number 6
[  230.821195][T10417] loop2: detected capacity change from 0 to 256
[  230.865164][   T11] tipc: Disabling bearer <udp:syz2>
[  230.903239][   T11] tipc: Left network mode
[  231.006233][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  231.061112][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  231.075898][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  231.090294][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  231.112705][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  231.126441][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  231.135228][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  231.227814][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.249474][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  231.269284][    T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  231.282817][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.301262][    T9] usb 7-1: Product: syz
[  231.305564][    T9] usb 7-1: Manufacturer: syz
[  231.326887][    T9] usb 7-1: SerialNumber: syz
[  231.340200][    T9] usb 7-1: selecting invalid altsetting 1
[  231.717695][T10420] chnl_net:caif_netlink_parms(): no params data found
[  231.884246][T10420] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.891845][T10420] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.899177][T10420] bridge_slave_0: entered allmulticast mode
[  231.906276][T10420] bridge_slave_0: entered promiscuous mode
[  231.938466][T10420] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.945621][T10420] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.954289][T10420] bridge_slave_1: entered allmulticast mode
[  231.961574][T10420] bridge_slave_1: entered promiscuous mode
[  232.029697][T10420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.048103][T10420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.169572][T10420] team0: Port device team_slave_0 added
[  232.179921][T10420] team0: Port device team_slave_1 added
[  232.185696][    T9] cdc_ncm 7-1:1.0: SET_NTB_FORMAT failed
[  232.216040][    T9] usb 7-1: selecting invalid altsetting 1
[  232.246032][    T9] cdc_ncm 7-1:1.0: bind() failure
[  232.267585][    T9] usb 7-1: USB disconnect, device number 4
[  232.276587][T10420] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.283575][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.313828][T10420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.349284][   T11] hsr_slave_0: left promiscuous mode
[  232.355401][   T11] hsr_slave_1: left promiscuous mode
[  232.364889][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.373158][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.382125][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.390320][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.398691][   T11] batman_adv: batadv0: Interface deactivated: ipvlan2
[  232.405487][   T11] batman_adv: batadv0: Removing interface: ipvlan2
[  232.415385][   T11] bridge_slave_1: left allmulticast mode
[  232.421728][   T11] bridge_slave_1: left promiscuous mode
[  232.427880][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.437187][   T11] bridge_slave_0: left allmulticast mode
[  232.442943][   T11] bridge_slave_0: left promiscuous mode
[  232.449292][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.491465][   T11] veth1_macvtap: left promiscuous mode
[  232.502483][   T11] veth0_macvtap: left promiscuous mode
[  232.509923][   T11] veth1_vlan: left promiscuous mode
[  232.515267][   T11] veth0_vlan: left promiscuous mode
[  232.859664][T10458] loop6: detected capacity change from 0 to 128
[  232.893290][T10461] loop5: detected capacity change from 0 to 256
[  232.948413][T10461] FAT-fs (loop5): Directory bread(block 64) failed
[  232.982249][T10461] FAT-fs (loop5): Directory bread(block 65) failed
[  233.001145][T10461] FAT-fs (loop5): Directory bread(block 66) failed
[  233.015911][T10461] FAT-fs (loop5): Directory bread(block 67) failed
[  233.039864][T10461] FAT-fs (loop5): Directory bread(block 68) failed
[  233.075861][T10461] FAT-fs (loop5): Directory bread(block 69) failed
[  233.082557][T10461] FAT-fs (loop5): Directory bread(block 70) failed
[  233.091736][T10461] FAT-fs (loop5): Directory bread(block 71) failed
[  233.117109][T10461] FAT-fs (loop5): Directory bread(block 72) failed
[  233.123786][T10461] FAT-fs (loop5): Directory bread(block 73) failed
[  233.196007][   T51] Bluetooth: hci0: command tx timeout
[  233.918090][T10473] loop6: detected capacity change from 0 to 40427
[  233.938812][T10473] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  233.946634][T10473] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  233.959390][T10473] F2FS-fs (loop6): invalid crc value
[  234.012257][   T11] team0 (unregistering): Port device team_slave_1 removed
[  234.013575][T10473] F2FS-fs (loop6): Found nat_bits in checkpoint
[  234.094842][   T11] team0 (unregistering): Port device team_slave_0 removed
[  234.158349][T10473] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  234.165473][T10473] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  234.239410][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.262064][ T9475] syz-executor: attempt to access beyond end of device
[  234.262064][ T9475] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  234.322306][ T9475] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  234.340540][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.775364][T10488] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1616'.
[  235.030393][   T11] bond0 (unregistering): Released all slaves
[  235.094205][T10497] loop6: detected capacity change from 0 to 128
[  235.159946][T10497] syz.6.1619: attempt to access beyond end of device
[  235.159946][T10497] loop6: rw=2049, sector=154, nr_sectors = 96 limit=128
[  235.173986][T10497] syz.6.1619: attempt to access beyond end of device
[  235.173986][T10497] loop6: rw=2049, sector=138, nr_sectors = 16 limit=128
[  235.210555][T10420] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.217808][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.244510][T10420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.278106][   T51] Bluetooth: hci0: command tx timeout
[  235.359860][T10420] hsr_slave_0: entered promiscuous mode
[  235.417551][T10420] hsr_slave_1: entered promiscuous mode
[  235.445688][T10420] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.472874][T10420] Cannot create hsr debugfs directory
[  235.691401][T10511] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1626'.
[  235.991027][   T11] IPVS: stop unused estimator thread 0...
[  236.196192][ T5783] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  236.372403][T10420] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  236.382301][T10420] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  236.392733][T10420] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  236.402329][T10420] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  236.410050][ T5783] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  236.427410][ T5783] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  236.448333][ T5783] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  236.462473][ T5783] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  236.473648][ T5783] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  236.486942][ T5783] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  236.498460][ T5783] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  236.506687][ T5783] usb 6-1: Product: syz
[  236.521546][ T5783] usb 6-1: Manufacturer: syz
[  236.539261][ T5783] cdc_wdm 6-1:1.0: skipping garbage
[  236.551914][ T5783] cdc_wdm 6-1:1.0: skipping garbage
[  236.568304][ T5783] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  236.574230][ T5783] cdc_wdm 6-1:1.0: Unknown control protocol
[  236.611695][T10420] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.654565][T10420] 8021q: adding VLAN 0 to HW filter on device team0
[  236.683146][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.690323][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.714524][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.721724][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.849733][    C0] wdm_int_callback: 75 callbacks suppressed
[  236.849753][    C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  236.850730][ T5783] usb 6-1: USB disconnect, device number 7
[  236.855686][    C0] wdm_int_callback: 75 callbacks suppressed
[  236.855704][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  236.880042][    C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  237.166470][T10420] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.361609][   T51] Bluetooth: hci0: command tx timeout
[  237.539055][T10420] veth0_vlan: entered promiscuous mode
[  237.565616][T10420] veth1_vlan: entered promiscuous mode
[  237.654357][T10420] veth0_macvtap: entered promiscuous mode
[  237.668771][T10420] veth1_macvtap: entered promiscuous mode
[  237.690107][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.718360][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.752316][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.776104][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.798970][T10573] loop5: detected capacity change from 0 to 8
[  237.805948][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.822216][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.856872][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.860113][T10573] SQUASHFS error: Unable to read directory block [629:fe]
[  237.876342][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.899250][T10420] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.914835][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.946574][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.956754][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.980838][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.005432][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.016885][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.027410][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  238.043149][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  238.079383][T10420] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.122505][T10420] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.140597][T10420] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.153020][T10420] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.164478][T10420] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.194934][T10580] loop5: detected capacity change from 0 to 512
[  238.221521][T10580] EXT4-fs (loop5): bad s_want_extra_isize: 192
[  238.403152][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.447039][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.451014][T10589] loop5: detected capacity change from 0 to 256
[  238.524507][T10589] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x024dac45, utbl_chksum : 0xe619d30d)
[  238.538006][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.568089][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.005343][T10607] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1639'.
[  239.345278][T10598] loop4: detected capacity change from 0 to 40427
[  239.359763][T10598] F2FS-fs (loop4): invalid crc value
[  239.377368][T10598] F2FS-fs (loop4): Found nat_bits in checkpoint
[  239.436938][   T51] Bluetooth: hci0: command tx timeout
[  239.453342][T10598] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  239.544618][T10420] syz-executor: attempt to access beyond end of device
[  239.544618][T10420] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  239.565764][T10420] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  239.803110][T10630] loop2: detected capacity change from 0 to 512
[  239.874610][T10630] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.1645: iget: bad extended attribute block 134217728
[  239.977690][T10630] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1645: couldn't read orphan inode 15 (err -117)
[  240.067488][T10630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.105081][T10642] hub 1-0:1.0: USB hub found
[  240.127439][T10642] hub 1-0:1.0: 1 port detected
[  240.163934][T10630] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1645: invalid indirect mapped block 234881024 (level 0)
[  240.165372][   T28] audit: type=1800 audit(1790911240.812:55): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1645" name="file0" dev="loop2" ino=13 res=0 errno=0
[  240.217648][T10630] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1645: invalid indirect mapped block 768 (level 1)
[  240.311684][T10647] loop4: detected capacity change from 0 to 8
[  240.323521][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.414216][T10647] SQUASHFS error: Unable to read directory block [629:fe]
[  240.574936][T10658] loop5: detected capacity change from 0 to 64
[  240.699868][ T8909] hfs: node 4:3 still has 1 user(s)!
[  240.776012][ T5783] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  240.881344][T10661] loop2: detected capacity change from 0 to 32768
[  240.896746][T10661] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1660 (10661)
[  240.926719][T10661] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  240.937084][T10661] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  240.947420][T10661] BTRFS info (device loop2): using free space tree
[  240.956106][ T5783] usb 7-1: Using ep0 maxpacket: 8
[  240.968546][ T5783] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  240.982595][ T5783] usb 7-1: config 179 has no interface number 0
[  240.990480][ T5783] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  241.005993][ T5783] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  241.022570][ T5783] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  241.044683][ T5783] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  241.064815][ T5783] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  241.084223][ T5783] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  241.094534][ T5783] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.105910][T10661] BTRFS info (device loop2): enabling ssd optimizations
[  241.112891][T10661] BTRFS info (device loop2): auto enabling async discard
[  241.139956][T10655] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  241.241779][   T28] audit: type=1800 audit(1790911241.892:56): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1660" name="file1" dev="loop2" ino=260 res=0 errno=0
[  241.416892][ T5779] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  241.672778][   T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input37
[  242.037367][T10691] cgroup: fork rejected by pids controller in /syz2
[  242.070571][   T23] usb 7-1: USB disconnect, device number 5
[  242.070630][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  242.084806][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  242.098866][   T23] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  242.099773][T10692] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input38
[  242.331285][T10698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1667'.
[  242.346043][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1667'.
[  242.354959][T10698] netlink: 'syz.5.1667': attribute type 18 has an invalid length.
[  242.776015][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  242.836661][T10715] cgroup: fork rejected by pids controller in /syz6
[  242.847979][   T60] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.947663][   T60] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.977616][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  242.995896][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  243.014208][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  243.016721][   T60] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.034185][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  243.065908][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  243.078913][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  243.088454][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  243.096531][    T9] usb 5-1: Product: syz
[  243.100877][    T9] usb 5-1: Manufacturer: syz
[  243.133645][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  243.142267][   T60] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.145874][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  243.179599][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  243.200836][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  243.501186][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  243.507856][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  243.514187][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  243.520813][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  243.537058][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  243.543718][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  243.550549][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  243.557191][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  243.563581][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  243.570213][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  243.576540][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  243.583177][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  243.589568][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  243.596191][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  243.602290][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  243.611109][    T9] usb 5-1: USB disconnect, device number 12
[  243.755180][   T60] tipc: Disabling bearer <udp:syz2>
[  243.761106][   T60] tipc: Left network mode
[  243.777890][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  243.790686][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  243.800243][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  243.813294][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  243.821399][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  243.830126][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  244.503481][T10745] loop5: detected capacity change from 0 to 4096
[  244.669947][T10726] chnl_net:caif_netlink_parms(): no params data found
[  244.692414][T10745] ntfs3: loop5: ino=b, Correct links count -> 1.
[  244.723715][T10745] ntfs3: loop5: ino=18, mi_enum_attr
[  244.730835][T10745] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  244.917375][T10757] loop4: detected capacity change from 0 to 764
[  245.065155][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  245.083072][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  245.091288][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  245.102938][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  245.110879][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  245.119501][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  245.236026][T10726] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.243219][T10726] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.304209][T10726] bridge_slave_0: entered allmulticast mode
[  245.327483][T10726] bridge_slave_0: entered promiscuous mode
[  245.357433][T10726] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.365569][T10726] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.386158][T10726] bridge_slave_1: entered allmulticast mode
[  245.393496][T10726] bridge_slave_1: entered promiscuous mode
[  245.564790][T10726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.634117][T10726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  245.679864][   T60] IPVS: stopping backup sync thread 8981 ...
[  245.917131][   T51] Bluetooth: hci2: command tx timeout
[  245.945075][T10784] loop4: detected capacity change from 0 to 512
[  245.948275][T10726] team0: Port device team_slave_0 added
[  245.966952][T10784] EXT4-fs: Ignoring removed oldalloc option
[  245.995486][T10784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  246.085732][T10784] EXT4-fs (loop4): 1 truncate cleaned up
[  246.109784][T10784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.123666][T10726] team0: Port device team_slave_1 added
[  246.204449][T10784] overlayfs: invalid origin (0000007900ecdbcb6f1b451800f06fd7494a5fc494f2e803081444c42369d2023d700181c401242438946348d2aad46d5013245a55b420548ea81277c4810312)
[  246.223573][T10726] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.231224][T10726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.279779][T10726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.316072][T10795] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  246.377454][T10726] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.384643][T10726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.425552][T10726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.445102][   T60] hsr_slave_0: left promiscuous mode
[  246.454112][T10420] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  246.479849][   T60] hsr_slave_1: left promiscuous mode
[  246.491320][T10420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.502886][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.522381][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  246.535361][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.553119][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.563938][   T60] bridge_slave_1: left allmulticast mode
[  246.573071][   T60] bridge_slave_1: left promiscuous mode
[  246.581638][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.599934][   T60] bridge_slave_0: left allmulticast mode
[  246.605708][   T60] bridge_slave_0: left promiscuous mode
[  246.621254][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.674609][   T60] team0: left promiscuous mode
[  246.680936][   T60] team_slave_0: left promiscuous mode
[  246.687181][ T9613] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  246.704128][   T60] team_slave_1: left promiscuous mode
[  246.712220][   T60] veth1_macvtap: left promiscuous mode
[  246.725078][   T60] veth0_macvtap: left promiscuous mode
[  246.731257][   T60] veth1_vlan: left promiscuous mode
[  246.741086][   T60] veth0_vlan: left promiscuous mode
[  246.880715][ T9613] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  246.905863][ T9613] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  246.931436][ T9613] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  246.956040][ T9613] usb 6-1: config 220 has no interface number 2
[  246.962731][ T9613] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  246.976220][ T9613] usb 6-1: config 220 interface 0 has no altsetting 0
[  246.983030][ T9613] usb 6-1: config 220 interface 76 has no altsetting 0
[  246.990846][ T9613] usb 6-1: config 220 interface 1 has no altsetting 0
[  247.001266][ T9613] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  247.014411][ T9613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.030197][ T9613] usb 6-1: Product: syz
[  247.040903][ T9613] usb 6-1: Manufacturer: syz
[  247.045543][ T9613] usb 6-1: SerialNumber: syz
[  247.196257][   T51] Bluetooth: hci4: command tx timeout
[  247.315525][ T9613] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  247.330052][ T9613] usb 6-1: No valid video chain found.
[  247.338586][ T9613] usb 6-1: selecting invalid altsetting 0
[  247.370588][ T9613] usb 6-1: selecting invalid altsetting 0
[  247.378402][ T9613] usbtest: probe of 6-1:220.1 failed with error -22
[  247.390256][ T9613] usb 6-1: USB disconnect, device number 8
[  247.667225][   T60] team0 (unregistering): Port device team_slave_1 removed
[  247.721018][   T60] team0 (unregistering): Port device team_slave_0 removed
[  247.769511][   T60] bond0 (unregistering): (slave 
c
@0�): Releasing backup interface
[  247.820205][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.006363][   T51] Bluetooth: hci2: command tx timeout
[  248.465298][   T60] bond0 (unregistering): Released all slaves
[  248.812491][T10726] hsr_slave_0: entered promiscuous mode
[  248.847814][T10726] hsr_slave_1: entered promiscuous mode
[  248.854538][T10726] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  248.862504][T10726] Cannot create hsr debugfs directory
[  248.875451][T10758] chnl_net:caif_netlink_parms(): no params data found
[  248.984582][T10822] loop4: detected capacity change from 0 to 40427
[  248.998671][T10822] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  249.019954][T10822] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  249.067252][T10822] F2FS-fs (loop4): invalid crc value
[  249.263058][T10758] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.270632][T10758] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.278470][T10758] bridge_slave_0: entered allmulticast mode
[  249.286381][   T51] Bluetooth: hci4: command tx timeout
[  249.286892][T10758] bridge_slave_0: entered promiscuous mode
[  249.312716][T10758] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.325532][T10758] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.333659][T10758] bridge_slave_1: entered allmulticast mode
[  249.345020][T10758] bridge_slave_1: entered promiscuous mode
[  249.433204][T10822] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  249.442496][T10758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.477229][T10822] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  249.508114][T10758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.706521][T10420] syz-executor: attempt to access beyond end of device
[  249.706521][T10420] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  249.724466][T10758] team0: Port device team_slave_0 added
[  249.734671][T10758] team0: Port device team_slave_1 added
[  249.745348][T10420] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  250.089666][   T51] Bluetooth: hci2: command tx timeout
[  250.151828][   T60] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.186936][T10758] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.193929][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.231760][T10758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.252876][T10758] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.261171][T10758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.297743][T10758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.379880][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'.
[  250.390816][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1708'.
[  250.405855][T10860] netlink: 'syz.4.1708': attribute type 18 has an invalid length.
[  250.448093][   T60] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.573917][   T60] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.595935][T10758] hsr_slave_0: entered promiscuous mode
[  250.602866][T10758] hsr_slave_1: entered promiscuous mode
[  250.612814][T10758] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  250.620475][T10758] Cannot create hsr debugfs directory
[  250.667187][   T60] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.929669][T10726] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  250.945293][T10726] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  250.954912][T10726] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  250.979354][T10726] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  251.072069][   T60] tipc: Disabling bearer <udp:syz2>
[  251.078766][   T60] tipc: Left network mode
[  251.359888][   T51] Bluetooth: hci4: command tx timeout
[  251.409103][T10726] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.504263][T10726] 8021q: adding VLAN 0 to HW filter on device team0
[  251.557375][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.564546][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.595114][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.602364][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.095138][T10726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.164619][   T51] Bluetooth: hci2: command tx timeout
[  252.205038][T10726] veth0_vlan: entered promiscuous mode
[  252.231058][T10726] veth1_vlan: entered promiscuous mode
[  252.310951][T10726] veth0_macvtap: entered promiscuous mode
[  252.346985][   T60] hsr_slave_0: left promiscuous mode
[  252.353328][   T60] hsr_slave_1: left promiscuous mode
[  252.370597][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.378136][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.387997][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.395434][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.405257][   T60] bridge_slave_1: left allmulticast mode
[  252.411694][   T60] bridge_slave_1: left promiscuous mode
[  252.426959][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.444936][   T60] bridge_slave_0: left allmulticast mode
[  252.451056][   T60] bridge_slave_0: left promiscuous mode
[  252.456942][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.495611][   T60] veth1_macvtap: left promiscuous mode
[  252.501281][   T60] veth0_macvtap: left promiscuous mode
[  252.507421][   T60] veth1_vlan: left promiscuous mode
[  252.512750][   T60] veth0_vlan: left promiscuous mode
[  253.173623][   T60] team0 (unregistering): Port device team_slave_1 removed
[  253.232492][   T60] team0 (unregistering): Port device team_slave_0 removed
[  253.283820][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.338171][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  253.445904][   T51] Bluetooth: hci4: command tx timeout
[  253.696078][   T60] bond0 (unregistering): Released all slaves
[  253.817587][T10726] veth1_macvtap: entered promiscuous mode
[  253.854484][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.885394][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.905896][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.917194][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.927198][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.937761][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.949248][T10726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.014446][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.025328][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.043041][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.053573][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.073131][T10726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.084996][T10726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.116526][T10726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.174670][T10726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.191869][T10726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.201026][T10726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.212158][T10726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.289679][T10758] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  254.322098][T10758] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  254.354469][T10758] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  254.376449][T10758] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  254.464115][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.492987][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.546618][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.554474][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.633315][T10758] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.680520][T10758] 8021q: adding VLAN 0 to HW filter on device team0
[  254.701435][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.708628][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.777941][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.785113][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.902353][T10758] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  255.208420][T10929] loop2: detected capacity change from 0 to 64
[  255.378028][T10758] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.447936][T10726] hfs: node 4:3 still has 1 user(s)!
[  255.843313][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  255.849801][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  255.942071][T10956] loop2: detected capacity change from 0 to 4096
[  256.001260][T10758] veth0_vlan: entered promiscuous mode
[  256.058003][T10758] veth1_vlan: entered promiscuous mode
[  256.074486][T10956] ntfs3: loop2: ino=b, Correct links count -> 1.
[  256.107615][T10956] ntfs3: loop2: ino=18, mi_enum_attr
[  256.116779][T10956] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  256.162205][T10758] veth0_macvtap: entered promiscuous mode
[  256.207534][T10758] veth1_macvtap: entered promiscuous mode
[  256.254592][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.271848][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.282683][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.297006][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.307676][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.355886][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.366189][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.382369][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.394459][T10758] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.439692][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.465556][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.505967][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.533515][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.545765][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.562428][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.575866][T10758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.592290][T10758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.604156][T10758] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.620116][T10758] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.637684][T10758] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.647230][T10758] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.657856][T10758] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.771571][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.784776][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.819121][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.834249][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  257.008239][T10979] Failed to get privilege flags for destination (handle=0x2:0x0)
[  257.035009][T10982] loop2: detected capacity change from 0 to 256
[  257.126814][T10982] overlayfs: failed to resolve './file1': -2
[  257.484972][T11000] loop2: detected capacity change from 0 to 764
[  257.745467][T11014] loop6: detected capacity change from 0 to 256
[  257.768510][T11012] loop2: detected capacity change from 0 to 4096
[  257.793809][T11014] overlayfs: failed to resolve './file1': -2
[  257.805483][T11015] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  258.055273][T11021] netlink: 'syz.4.1749': attribute type 3 has an invalid length.
[  258.082729][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'.
[  258.293816][T11033] loop6: detected capacity change from 0 to 764
[  258.437507][T11038] loop2: detected capacity change from 0 to 1024
[  258.464872][T11041] loop5: detected capacity change from 0 to 256
[  258.501803][T11038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  258.554666][T11038] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.601075][T11041] overlayfs: failed to resolve './file1': -2
[  258.683656][T11038] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.1747: lblock 0 mapped to illegal pblock 0 (length 6)
[  258.707330][T11038] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  258.724637][T11038] EXT4-fs (loop2): This should not happen!! Data will be lost
[  258.724637][T11038] 
[  258.761154][T11038] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1747: lblock 0 mapped to illegal pblock 0 (length 4)
[  258.782228][T11038] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1747: lblock 0 mapped to illegal pblock 0 (length 4)
[  258.807924][T11038] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1747: lblock 0 mapped to illegal pblock 0 (length 4)
[  258.836887][T11038] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1747: lblock 0 mapped to illegal pblock 0 (length 4)
[  258.862309][T11038] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1747: lblock 0 mapped to illegal pblock 0 (length 4)
[  258.865250][T11053] loop5: detected capacity change from 0 to 128
[  258.884844][T11038] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1747: lblock 0 mapped to illegal pblock 0 (length 4)
[  258.893648][T11054] netlink: 'syz.6.1753': attribute type 3 has an invalid length.
[  258.919812][T11053] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  258.921021][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1753'.
[  258.942576][T11038] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1747: lblock 0 mapped to illegal pblock 0 (length 4)
[  258.985657][T11038] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1747: lblock 0 mapped to illegal pblock 0 (length 4)
[  258.996422][T11053] ext4 filesystem being mounted at /183/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  259.005016][    T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  259.043176][T11038] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1747: lblock 0 mapped to illegal pblock 0 (length 4)
[  259.098178][ T8909] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  259.216351][    T8] usb 5-1: Using ep0 maxpacket: 8
[  259.225000][    T8] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  259.233579][    T8] usb 5-1: config 179 has no interface number 0
[  259.240836][    T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  259.252312][    T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  259.272128][    T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  259.283903][    T8] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  259.297793][    T8] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  259.311843][    T8] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  259.321933][   T60] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  259.346777][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.376083][   T60] EXT4-fs (loop2): This should not happen!! Data will be lost
[  259.376083][   T60] 
[  259.397234][T11050] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  259.426742][T10726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  259.567036][T11063] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  259.686050][T11063] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.782874][T11073] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  259.786368][T11063] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm syz.5.1765: lblock 0 mapped to illegal pblock 0 (length 6)
[  259.867523][T11063] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  259.928153][ T9613] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input39
[  259.941466][T11063] EXT4-fs (loop5): This should not happen!! Data will be lost
[  259.941466][T11063] 
[  259.975048][T11074] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.1765: lblock 0 mapped to illegal pblock 0 (length 4)
[  260.026031][T11074] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.1765: lblock 0 mapped to illegal pblock 0 (length 4)
[  260.078678][T11074] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.1765: lblock 0 mapped to illegal pblock 0 (length 4)
[  260.100849][T11074] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.1765: lblock 0 mapped to illegal pblock 0 (length 4)
[  260.198346][T11074] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.1765: lblock 0 mapped to illegal pblock 0 (length 4)
[  260.221310][T11074] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.1765: lblock 0 mapped to illegal pblock 0 (length 4)
[  260.244495][T11074] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.1765: lblock 0 mapped to illegal pblock 0 (length 4)
[  260.264526][T11074] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.1765: lblock 0 mapped to illegal pblock 0 (length 4)
[  260.290023][ T9613] usb 5-1: USB disconnect, device number 13
[  260.290079][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  260.296364][T11074] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #15: comm syz.5.1765: lblock 0 mapped to illegal pblock 0 (length 4)
[  260.304310][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  260.355092][   T11] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  260.367663][   T11] EXT4-fs (loop5): This should not happen!! Data will be lost
[  260.367663][   T11] 
[  260.384492][ T9613] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  260.394663][ T8909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  260.692465][T11089] set_capacity_and_notify: 2 callbacks suppressed
[  260.692481][T11089] loop6: detected capacity change from 0 to 8
[  260.722760][T11089] SQUASHFS error: lzo decompression failed, data probably corrupt
[  260.742710][T11089] SQUASHFS error: Failed to read block 0x144: -5
[  260.759560][T11089] SQUASHFS error: Unable to read metadata cache entry [142]
[  260.775967][T11089] SQUASHFS error: Unable to read inode 0x11f
[  260.848422][ T5916] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  260.967118][T11099] loop6: detected capacity change from 0 to 8
[  260.979294][T11099] Major/Minor mismatch, trying to mount newer 4.1792 filesystem
[  260.987083][T11099] Please update your kernel
[  261.124897][T11103] vlan2: entered allmulticast mode
[  261.137266][T11103] macsec0: entered allmulticast mode
[  261.142591][T11103] veth1_macvtap: entered allmulticast mode
[  261.160679][T11107] loop6: detected capacity change from 0 to 1024
[  261.221290][T11107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  261.276102][T11107] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.314059][T11107] EXT4-fs error (device loop6): ext4_map_blocks:720: inode #15: comm syz.6.1773: lblock 0 mapped to illegal pblock 0 (length 6)
[  261.331144][T11112] loop4: detected capacity change from 0 to 164
[  261.341265][T11107] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  261.379092][    T8] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  261.422383][T11107] EXT4-fs (loop6): This should not happen!! Data will be lost
[  261.422383][T11107] 
[  261.456411][T11113] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1773: lblock 0 mapped to illegal pblock 0 (length 4)
[  261.510656][T11113] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1773: lblock 0 mapped to illegal pblock 0 (length 4)
[  261.596219][    T8] usb 6-1: Using ep0 maxpacket: 8
[  261.603401][    T8] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  261.608048][T11113] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1773: lblock 0 mapped to illegal pblock 0 (length 4)
[  261.628551][    T8] usb 6-1: config 179 has no interface number 0
[  261.634948][    T8] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  261.660290][    T8] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  261.688648][    T8] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  261.715405][T11113] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1773: lblock 0 mapped to illegal pblock 0 (length 4)
[  261.728065][    T8] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  261.741214][T11113] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1773: lblock 0 mapped to illegal pblock 0 (length 4)
[  261.757001][    T8] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  261.761285][T11113] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1773: lblock 0 mapped to illegal pblock 0 (length 4)
[  261.785918][    T8] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  261.794387][T11113] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1773: lblock 0 mapped to illegal pblock 0 (length 4)
[  261.805202][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.814751][T11113] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1773: lblock 0 mapped to illegal pblock 0 (length 4)
[  261.834986][T11113] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #15: comm syz.6.1773: lblock 0 mapped to illegal pblock 0 (length 4)
[  261.839602][T11102] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  261.966005][ T5783] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  262.038819][ T3532] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  262.051387][ T3532] EXT4-fs (loop6): This should not happen!! Data will be lost
[  262.051387][ T3532] 
[  262.069106][T10758] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  262.164666][ T5783] usb 5-1: Using ep0 maxpacket: 32
[  262.183416][ T5783] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  262.202949][ T5783] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.225542][ T5783] usb 5-1: config 0 descriptor??
[  262.316913][    T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input40
[  262.389362][T11121] loop2: detected capacity change from 0 to 1024
[  262.460773][ T5783] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  262.493694][ T5783] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  262.509682][ T5783] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  262.523673][T11121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  262.541481][ T5783] usb 5-1: media controller created
[  262.558526][T11123] loop6: detected capacity change from 0 to 4096
[  262.564368][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  262.596830][T11121] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.632561][T11121] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.1791: lblock 0 mapped to illegal pblock 0 (length 6)
[  262.663964][ T5783] az6027: usb out operation failed. (-71)
[  262.672957][T11121] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  262.690444][ T5783] az6027: usb out operation failed. (-71)
[  262.716038][T11044] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  262.722951][ T5783] stb0899_attach: Driver disabled by Kconfig
[  262.744026][T11121] EXT4-fs (loop2): This should not happen!! Data will be lost
[  262.744026][T11121] 
[  262.763522][ T5818] usb 6-1: USB disconnect, device number 9
[  262.763647][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  262.778768][    C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[  262.785104][ T5818] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  262.797471][T11123] ntfs3: loop6: ino=b, Correct links count -> 1.
[  262.805574][T11123] ntfs3: loop6: ino=18, mi_enum_attr
[  262.811246][ T5783] az6027: no front-end attached
[  262.811246][ T5783] 
[  262.812668][T11126] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1791: lblock 0 mapped to illegal pblock 0 (length 4)
[  262.818939][T11123] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  262.845922][ T5783] az6027: usb out operation failed. (-71)
[  262.857554][ T5783] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  262.863899][T11126] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1791: lblock 0 mapped to illegal pblock 0 (length 4)
[  262.877420][ T5783] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41
[  262.916355][ T5783] dvb-usb: schedule remote query interval to 400 msecs.
[  262.941882][ T5783] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  262.955498][T11126] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1791: lblock 0 mapped to illegal pblock 0 (length 4)
[  262.962650][ T5783] usb 5-1: USB disconnect, device number 14
[  263.002242][T11126] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1791: lblock 0 mapped to illegal pblock 0 (length 4)
[  263.052674][T11126] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1791: lblock 0 mapped to illegal pblock 0 (length 4)
[  263.094192][T11126] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1791: lblock 0 mapped to illegal pblock 0 (length 4)
[  263.131507][T11126] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1791: lblock 0 mapped to illegal pblock 0 (length 4)
[  263.152111][T11126] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: comm syz.2.1791: lblock 0 mapped to illegal pblock 0 (length 4)
[  263.177480][ T5783] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  263.259475][   T42] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  263.274210][   T42] EXT4-fs (loop2): This should not happen!! Data will be lost
[  263.274210][   T42] 
[  263.304039][T10726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  263.541285][T11136] loop6: detected capacity change from 0 to 164
[  263.713714][T11146] kAFS: Invalid Command on /proc/fs/afs/cells file
[  263.826438][ T5818] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  264.033758][ T5818] usb 6-1: Using ep0 maxpacket: 32
[  264.048405][ T5818] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  264.058254][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.079966][ T5818] usb 6-1: config 0 descriptor??
[  264.298939][ T5818] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  264.310496][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  264.338626][ T5818] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  264.351323][ T5818] usb 6-1: media controller created
[  264.395052][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  264.503489][ T5818] az6027: usb out operation failed. (-71)
[  264.526485][ T5818] az6027: usb out operation failed. (-71)
[  264.536066][ T5818] stb0899_attach: Driver disabled by Kconfig
[  264.542089][ T5818] az6027: no front-end attached
[  264.542089][ T5818] 
[  264.569672][ T5818] az6027: usb out operation failed. (-71)
[  264.575455][ T5818] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  264.603860][ T5818] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input42
[  264.628367][ T5818] dvb-usb: schedule remote query interval to 400 msecs.
[  264.635382][ T5818] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  264.662552][ T5818] usb 6-1: USB disconnect, device number 10
[  264.712040][T11173] mmap: syz.2.1802 (11173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  264.749718][ T5818] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  264.775932][    T8] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  264.977823][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.977983][T11170] loop4: detected capacity change from 0 to 32768
[  265.007971][    T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.053496][T11170] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.060735][    T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  265.083132][    T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  265.093015][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.119173][    T8] usb 7-1: config 0 descriptor??
[  265.153010][T11182] ima: policy update failed
[  265.160426][   T28] audit: type=1807 audit(1790911265.802:57): action=measure uid>+ res=0
[  265.193812][   T28] audit: type=1802 audit(1790911265.802:58): pid=11183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1806" res=0 errno=0
[  265.231023][T11185] loop2: detected capacity change from 0 to 512
[  265.253306][   T28] audit: type=1802 audit(1790911265.822:59): pid=11182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1806" res=0 errno=0
[  265.293828][T11185] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13
[  265.295413][T11170] XFS (loop4): Ending clean mount
[  265.302552][T11185] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1807: inode #15: comm syz.2.1807: iget: illegal inode #
[  265.328947][T11170] XFS (loop4): Quotacheck needed: Please wait.
[  265.376147][T11185] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1807: couldn't read orphan inode 15 (err -117)
[  265.397595][T11185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.440458][T11170] XFS (loop4): Quotacheck: Done.
[  265.553593][    T8] plantronics 0003:047F:FFFF.000D: unbalanced delimiter at end of report description
[  265.579010][    T8] plantronics 0003:047F:FFFF.000D: parse failed
[  265.593735][    T8] plantronics: probe of 0003:047F:FFFF.000D failed with error -22
[  265.599954][T10726] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  265.662429][T10726] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  265.696916][T10726] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  265.736387][T10726] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  265.780146][    T8] usb 7-1: USB disconnect, device number 6
[  265.807369][T10726] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  265.857679][T10726] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  265.890862][T10726] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  265.949001][T10726] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  265.971224][T10420] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.994980][T10726] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0
[  266.017415][T10726] EXT4-fs error (device loop2): ext4_empty_dir:3179: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0
[  266.760478][   T28] audit: type=1807 audit(1790911267.412:60): action=measure uid>+ res=0
[  266.771937][T11205] ima: policy update failed
[  266.796379][   T28] audit: type=1802 audit(1790911267.412:61): pid=11206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1817" res=0 errno=0
[  266.814697][   T28] audit: type=1802 audit(1790911267.452:62): pid=11205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1817" res=0 errno=0
[  267.024830][T11212] kAFS: Invalid Command on /proc/fs/afs/cells file
[  267.314419][T10726] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.505233][T11226] vlan2: entered promiscuous mode
[  267.545739][T11226] team0: entered promiscuous mode
[  267.551297][T11226] team_slave_0: entered promiscuous mode
[  267.568009][T11226] team_slave_1: entered promiscuous mode
[  267.809171][   T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.846110][ T5818] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  267.988920][   T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.025309][T11238] msr: Write to unrecognized MSR 0x0 by syz.4.1829 (pid: 11238).
[  268.050890][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.072812][T11238] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details.
[  268.093272][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.128842][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  268.157683][   T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.165003][ T5818] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  268.192582][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.196092][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  268.218168][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  268.230348][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  268.247311][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  268.260374][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  268.268072][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  268.270761][ T5818] usb 6-1: config 0 descriptor??
[  268.384375][   T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.829234][ T5818] plantronics 0003:047F:FFFF.000E: unbalanced delimiter at end of report description
[  268.861654][T11254] loop6: detected capacity change from 0 to 256
[  268.872161][ T5818] plantronics 0003:047F:FFFF.000E: parse failed
[  268.926324][ T5818] plantronics: probe of 0003:047F:FFFF.000E failed with error -22
[  268.989963][   T28] audit: type=1800 audit(1790911269.642:63): pid=11254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1833" name="file1" dev="loop6" ino=1048722 res=0 errno=0
[  268.990172][T11254] FAT-fs (loop6): error, clusters badly computed (0 != 128)
[  269.024251][T11254] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  269.144522][ T5768] usb 6-1: USB disconnect, device number 11
[  269.159360][T11254] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  269.381647][T11239] chnl_net:caif_netlink_parms(): no params data found
[  269.554928][T11239] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.564337][T11239] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.582459][T11239] bridge_slave_0: entered allmulticast mode
[  269.591039][T11239] bridge_slave_0: entered promiscuous mode
[  269.634800][T11239] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.642319][T11239] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.651046][T11239] bridge_slave_1: entered allmulticast mode
[  269.661353][T11239] bridge_slave_1: entered promiscuous mode
[  269.804252][T11239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.827244][T11239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.960825][T11239] team0: Port device team_slave_0 added
[  269.972290][T11239] team0: Port device team_slave_1 added
[  270.072722][T11239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.085476][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.120350][T11239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.161468][T11239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.170395][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.196892][T11239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.398017][   T51] Bluetooth: hci2: command tx timeout
[  270.491809][   T60] hsr_slave_0: left promiscuous mode
[  270.509888][   T60] hsr_slave_1: left promiscuous mode
[  270.523287][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  270.536798][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.563092][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.590457][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.617946][   T60] bridge_slave_1: left allmulticast mode
[  270.630859][   T60] bridge_slave_1: left promiscuous mode
[  270.649727][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.679493][   T60] bridge_slave_0: left allmulticast mode
[  270.685194][   T60] bridge_slave_0: left promiscuous mode
[  270.700407][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.813336][   T60] veth1_macvtap: left promiscuous mode
[  270.832750][   T60] veth0_macvtap: left promiscuous mode
[  270.848593][   T60] veth1_vlan: left promiscuous mode
[  270.865895][   T60] veth0_vlan: left promiscuous mode
[  271.126163][ T5768] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  271.362855][ T5768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.393809][ T5768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.404013][ T5768] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  271.425428][ T5768] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  271.454117][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.500068][ T5768] usb 5-1: config 0 descriptor??
[  271.721420][T11331] loop5: detected capacity change from 0 to 32768
[  271.751568][T11331] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  271.841214][T11331] XFS (loop5): Ending clean mount
[  271.890497][T11331] XFS (loop5): Quotacheck needed: Please wait.
[  271.974728][ T5768] plantronics 0003:047F:FFFF.000F: unbalanced delimiter at end of report description
[  272.012772][T11331] XFS (loop5): Quotacheck: Done.
[  272.025050][ T5768] plantronics 0003:047F:FFFF.000F: parse failed
[  272.054371][ T5768] plantronics: probe of 0003:047F:FFFF.000F failed with error -22
[  272.210439][    T8] usb 5-1: USB disconnect, device number 15
[  272.344476][ T8909] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.422043][   T60] team0 (unregistering): Port device team_slave_1 removed
[  272.476287][   T51] Bluetooth: hci2: command tx timeout
[  272.593685][   T60] team0 (unregistering): Port device team_slave_0 removed
[  272.662429][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  272.715038][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  273.132909][   T60] bond0 (unregistering): Released all slaves
[  273.227099][T11239] hsr_slave_0: entered promiscuous mode
[  273.236831][T11239] hsr_slave_1: entered promiscuous mode
[  273.242868][T11239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.250645][T11239] Cannot create hsr debugfs directory
[  273.680326][T11239] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  273.717740][T11239] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  273.735151][T11239] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  273.753001][T11239] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  273.876646][T11239] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.904631][T11239] 8021q: adding VLAN 0 to HW filter on device team0
[  273.924981][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.932200][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.960990][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.968162][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.258773][T11239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.556699][   T51] Bluetooth: hci2: command tx timeout
[  274.611611][T11239] veth0_vlan: entered promiscuous mode
[  274.625639][T11239] veth1_vlan: entered promiscuous mode
[  274.671496][T11239] veth0_macvtap: entered promiscuous mode
[  274.682477][T11239] veth1_macvtap: entered promiscuous mode
[  274.702954][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.714022][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.725314][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.740833][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.756103][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.767735][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.777854][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.788415][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.800580][T11239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.812036][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.824294][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.837486][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.849595][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.860418][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.870958][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.881514][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.892170][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.903082][T11239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.940080][T11239] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.950176][T11239] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.961231][T11239] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.970361][T11239] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.085432][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.109236][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.149671][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.172160][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.361728][   T28] audit: type=1807 audit(1790911276.012:64): action=measure uid>+ res=0
[  275.386454][T11386] ima: policy update failed
[  275.401849][   T28] audit: type=1802 audit(1790911276.032:65): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.7.1826" res=0 errno=0
[  275.444770][   T28] audit: type=1802 audit(1790911276.082:66): pid=11386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.1826" res=0 errno=0
[  276.139155][T11391] loop6: detected capacity change from 0 to 32768
[  276.186848][T11391] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  276.363972][T11391] XFS (loop6): Ending clean mount
[  276.426739][T11391] XFS (loop6): Quotacheck needed: Please wait.
[  276.560932][T11391] XFS (loop6): Quotacheck: Done.
[  276.636409][   T51] Bluetooth: hci2: command tx timeout
[  277.197760][T10758] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.857348][T11475] loop7: detected capacity change from 0 to 2048
[  277.879339][T11466] loop4: detected capacity change from 0 to 32768
[  277.921563][T11466] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1872 (11466)
[  277.958642][T11475] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.982953][T11466] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.037964][T11466] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  278.039642][T11475] EXT4-fs error (device loop7): ext4_find_extent:947: inode #2: comm syz.7.1874: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  278.071386][T11466] BTRFS info (device loop4): using free space tree
[  278.078862][T11475] EXT4-fs (loop7): Remounting filesystem read-only
[  278.283269][T11466] BTRFS info (device loop4): enabling ssd optimizations
[  278.297903][T11239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.305954][T11466] BTRFS info (device loop4): auto enabling async discard
[  278.804128][T10420] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.857283][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1889'.
[  278.997653][ T5916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (5916)
[  279.187213][T11533] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  279.194631][T11533] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  279.212189][T11532] loop6: detected capacity change from 0 to 128
[  279.288982][T11537] loop5: detected capacity change from 0 to 64
[  279.296582][T11532] EXT4-fs: Ignoring removed orlov option
[  279.417176][T11532] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  279.499146][T11532] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.638245][T11532] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:406: inode #11: comm syz.6.1885: No space for directory leaf checksum. Please run e2fsck -D.
[  279.706092][T11532] EXT4-fs error (device loop6): __ext4_find_entry:1698: inode #11: comm syz.6.1885: checksumming directory block 0
[  279.932875][T10758] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  280.266921][T11528] loop7: detected capacity change from 0 to 32768
[  280.309951][T11528] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.655504][T11528] XFS (loop7): Ending clean mount
[  280.667254][T11528] XFS (loop7): Quotacheck needed: Please wait.
[  280.807833][T11528] XFS (loop7): Quotacheck: Done.
[  281.173378][T11239] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.361786][T11609] loop5: detected capacity change from 0 to 256
[  281.415762][   T28] audit: type=1800 audit(1790911282.062:67): pid=11609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1909" name="file1" dev="loop5" ino=1048726 res=0 errno=0
[  281.418795][T11609] FAT-fs (loop5): error, clusters badly computed (0 != 128)
[  281.473656][T11609] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  281.543104][T11612] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  281.731856][T11620] loop4: detected capacity change from 0 to 64
[  281.958702][T11625] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  281.965213][T11625] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  282.040468][T11627] loop4: detected capacity change from 0 to 256
[  282.147221][   T28] audit: type=1800 audit(1790911282.802:68): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1921" name="file1" dev="loop4" ino=1048727 res=0 errno=0
[  282.155078][T11627] FAT-fs (loop4): error, clusters badly computed (0 != 128)
[  282.185056][T11627] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.228772][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1916'.
[  282.256799][T11635] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  282.671827][T11654] loop6: detected capacity change from 0 to 64
[  282.701376][T11655] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  282.707944][T11655] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  283.034257][T11662] loop5: detected capacity change from 0 to 2048
[  283.117161][T11662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.258131][T11662] EXT4-fs error (device loop5): ext4_find_extent:947: inode #2: comm syz.5.1934: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  283.299402][T11662] EXT4-fs (loop5): Remounting filesystem read-only
[  283.399360][ T8909] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.510073][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'.
[  283.610447][T11670] loop6: detected capacity change from 0 to 32768
[  283.635488][T11670] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  283.773890][ T5916] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  283.798498][T11690] loop7: detected capacity change from 0 to 64
[  283.850458][T11689] loop4: detected capacity change from 0 to 2048
[  283.967755][T11689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.027656][T11689] EXT4-fs error (device loop4): ext4_find_extent:947: inode #2: comm syz.4.1943: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  284.079055][T11689] EXT4-fs (loop4): Remounting filesystem read-only
[  284.166652][T10420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.574435][T11687] loop5: detected capacity change from 0 to 32768
[  284.584691][T11687] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  284.700233][T11713] loop4: detected capacity change from 0 to 128
[  284.723473][T11713] EXT4-fs: Ignoring removed orlov option
[  284.756517][ T5916] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  284.773151][T11713] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  284.808814][T11713] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.895356][T11713] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz.4.1946: No space for directory leaf checksum. Please run e2fsck -D.
[  284.938495][T11713] EXT4-fs error (device loop4): __ext4_find_entry:1698: inode #11: comm syz.4.1946: checksumming directory block 0
[  285.380915][T10420] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  285.787553][T11752] EXT4-fs: Ignoring removed orlov option
[  285.810780][T11752] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  285.827194][T11752] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.900385][T11752] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #11: comm syz.5.1965: No space for directory leaf checksum. Please run e2fsck -D.
[  285.926843][T11752] EXT4-fs error (device loop5): __ext4_find_entry:1698: inode #11: comm syz.5.1965: checksumming directory block 0
[  286.671621][ T8909] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  287.774183][T11780] set_capacity_and_notify: 1 callbacks suppressed
[  287.774200][T11780] loop7: detected capacity change from 0 to 40427
[  287.815374][T11780] F2FS-fs (loop7): Fix alignment : internally, start(4096) end(16896) block(12288)
[  287.833010][T11780] F2FS-fs (loop7): invalid crc value
[  287.878384][T11780] F2FS-fs (loop7): Found nat_bits in checkpoint
[  287.966978][T11780] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  288.012931][T11780] F2FS-fs (loop7): Try to recover all the superblocks, ret: 0
[  288.060794][T11816] f2fs_ckpt-7:7: attempt to access beyond end of device
[  288.060794][T11816] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  288.129317][T11816] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  288.151087][T11820] F2FS-fs (loop7): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix.
[  288.888442][T11846] loop7: detected capacity change from 0 to 128
[  288.901537][T11846] EXT4-fs: Ignoring removed orlov option
[  288.928951][T11846] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  288.942308][T11846] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.973693][T11846] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz.7.1995: No space for directory leaf checksum. Please run e2fsck -D.
[  288.990580][T11846] EXT4-fs error (device loop7): __ext4_find_entry:1698: inode #11: comm syz.7.1995: checksumming directory block 0
[  289.049608][T11239] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  289.156008][ T5818] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  289.242391][T11857] Bluetooth: ISO socket layer initialized
[  289.348076][ T5818] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  289.366427][ T5818] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  289.383051][ T5818] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  289.392921][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.404917][ T5818] usb 5-1: Product: syz
[  289.412260][ T5818] usb 5-1: Manufacturer: syz
[  289.429886][ T5818] usb 5-1: SerialNumber: syz
[  289.551852][T11869] block2mtd: error: cannot open device ��Ta4G�g��)��_�դ���Evr!4��>=Z{��B�y�<0\��i=�
[  289.551852][T11869] \���!ug�[
[  289.896798][ T9613] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  290.059755][    C1] usb 5-1: received EP1 urb->status = -71
[  290.080150][ T5818] input:  as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43
[  290.090842][ T9613] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  290.104990][ T9613] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  290.124519][ T9613] usb 6-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  290.134276][ T9613] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  290.147916][ T9613] usb 6-1: Product: syz
[  290.152181][ T9613] usb 6-1: Manufacturer: syz
[  290.156705][ T5818] usb 5-1: USB disconnect, device number 16
[  290.171950][ T9613] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[  290.262587][ T5773] udevd[5773]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  290.997376][ T9613] mos7840: probe of ttyUSB0 failed with error -71
[  291.020537][ T9613] usb 6-1: USB disconnect, device number 12
[  291.039182][ T9613] mos7840 6-1:1.0: device disconnected
[  303.230502][ T5792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  303.247304][ T5792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  303.255295][ T5792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  303.264843][ T5792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.274102][ T5792] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  303.281683][ T5792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  303.425113][T11978] chnl_net:caif_netlink_parms(): no params data found
[  303.480453][T11978] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.487838][T11978] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.494996][T11978] bridge_slave_0: entered allmulticast mode
[  303.501927][T11978] bridge_slave_0: entered promiscuous mode
[  303.510857][T11978] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.518621][T11978] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.525768][T11978] bridge_slave_1: entered allmulticast mode
[  303.557484][T11978] bridge_slave_1: entered promiscuous mode
[  303.654779][T11978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.693765][T11978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.772805][T11978] team0: Port device team_slave_0 added
[  303.830891][T11978] team0: Port device team_slave_1 added
[  303.958757][T12006] block2mtd: error: cannot open device ��Ta4G�g��)��_�դ���Evr!4��>=Z{��B�y�<0\��i=�
[  303.958757][T12006] \���!ug�[
[  303.964507][T11978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.996282][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  304.016590][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.042500][    C0] vkms_vblank_simulate: vblank timer overrun
[  304.071956][T12008] loop4: detected capacity change from 0 to 512
[  304.094170][T12011] loop7: detected capacity change from 0 to 256
[  304.107404][T11978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.204313][T12011] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  304.217712][T11978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.235294][T12008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.245960][T11978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  304.276513][T11978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  304.355211][T11978] hsr_slave_0: entered promiscuous mode
[  304.361760][T11978] hsr_slave_1: entered promiscuous mode
[  304.370948][T11978] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  304.378659][T11978] Cannot create hsr debugfs directory
[  304.449585][T10420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.567071][T12018] loop7: detected capacity change from 0 to 512
[  304.639560][T12018] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  304.669472][T12018] EXT4-fs (loop7): orphan cleanup on readonly fs
[  304.679694][T12018] Quota error (device loop7): find_block_dqentry: Quota for id 0 referenced but not present
[  304.692752][T12018] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0
[  304.705695][T12018] EXT4-fs error (device loop7): ext4_acquire_dquot:6953: comm syz.7.2019: Failed to acquire dquot type 1
[  304.723466][T12018] EXT4-fs (loop7): Remounting filesystem read-only
[  304.730252][T12018] EXT4-fs (loop7): 1 truncate cleaned up
[  304.754365][T12018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  304.845162][T11239] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.923779][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2024'.
[  305.150902][T11978] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  305.168046][T12033] use of bytesused == 0 is deprecated and will be removed in the future,
[  305.179818][T12033] use the actual size instead.
[  305.199065][T11978] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  305.239310][T11978] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  305.285021][T11978] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  305.356101][   T51] Bluetooth: hci5: command tx timeout
[  305.380698][T12043] gretap0: entered promiscuous mode
[  305.669412][T11978] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.711089][T11978] 8021q: adding VLAN 0 to HW filter on device team0
[  305.734121][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.734266][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  305.785751][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.785911][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.318951][T11978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.410711][T12052] loop5: detected capacity change from 0 to 32768
[  306.497158][T12052] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  306.619450][T12052] XFS (loop5): Ending clean mount
[  306.700194][T12081] loop4: detected capacity change from 0 to 1024
[  306.750325][T12081] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  306.783154][T12081] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  306.844305][T12081] EXT4-fs (loop4): orphan cleanup on readonly fs
[  306.876603][T12081] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.2037: Freeing blocks not in datazone - block = 0, count = 4096
[  306.904274][T12081] EXT4-fs (loop4): Remounting filesystem read-only
[  306.917447][ T8909] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  306.927260][T12085] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2038'.
[  306.936098][T12081] EXT4-fs (loop4): 1 orphan inode deleted
[  306.942657][T12081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  306.986918][T11978] veth0_vlan: entered promiscuous mode
[  307.018921][T11978] veth1_vlan: entered promiscuous mode
[  307.064674][T10420] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.139445][T11978] veth0_macvtap: entered promiscuous mode
[  307.163093][T11978] veth1_macvtap: entered promiscuous mode
[  307.199402][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.211970][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.235937][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.251825][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.262220][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.273175][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.285695][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.298193][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.309817][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.322250][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.334346][T11978] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.375606][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.401966][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.412415][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.435321][ T3444] Bluetooth: hci6: Frame reassembly failed (-84)
[  307.444488][ T5782] Bluetooth: hci5: command tx timeout
[  307.451986][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.462561][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.473211][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.485275][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.496217][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.506117][T11978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.517122][T11978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.529709][T11978] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.544838][T11978] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.554596][T11978] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.563482][T11978] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.572696][T11978] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.759944][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.770114][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.814339][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.826335][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.921556][T12100] program syz.4.2046 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  308.578919][T12120] loop8: detected capacity change from 0 to 128
[  308.603107][T12120] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  308.665067][T12120] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  309.033919][T12132] loop8: detected capacity change from 0 to 128
[  309.059788][T12132] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  309.077853][T12132] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.138465][T11978] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  309.164060][T12126] loop5: detected capacity change from 0 to 32768
[  309.320978][ T8909] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  309.320978][ T8909] 
[  309.362799][ T8909] ERROR: (device loop5): remounting filesystem as read-only
[  309.436869][   T51] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  309.525978][   T51] Bluetooth: hci5: command tx timeout
[  310.021955][ T3532] Bluetooth: hci6: Frame reassembly failed (-84)
[  310.152527][T12141] loop8: detected capacity change from 0 to 40427
[  310.168597][T12141] F2FS-fs (loop8): Fix alignment : internally, start(4096) end(16896) block(12288)
[  310.192542][T12141] F2FS-fs (loop8): invalid crc value
[  310.209020][T12141] F2FS-fs (loop8): Found nat_bits in checkpoint
[  310.314283][T12141] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  310.476287][  T789] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  310.642990][T12170] loop8: detected capacity change from 0 to 164
[  310.656614][  T789] usb 6-1: too many configurations: 155, using maximum allowed: 8
[  310.679055][  T789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.690889][  T789] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.726959][  T789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.739318][  T789] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.774356][  T789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.805302][  T789] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.829746][  T789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.840825][  T789] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.855841][  T789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.866182][  T789] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.887506][  T789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.898361][  T789] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.913781][  T789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.924443][  T789] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.939026][  T789] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  310.949296][  T789] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.966514][  T789] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 0.40
[  310.975623][  T789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.984163][  T789] usb 6-1: Product: syz
[  310.988678][  T789] usb 6-1: Manufacturer: syz
[  310.993307][  T789] usb 6-1: SerialNumber: syz
[  311.253162][  T789] gspca_main: 046d:08ae too many config
[  311.269464][  T789] usb 6-1: USB disconnect, device number 13
[  311.516752][   T29] INFO: task kworker/u4:5:74 blocked for more than 143 seconds.
[  311.525729][   T29]       Tainted: G S                 syzkaller #0
[  311.534329][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  311.546874][   T29] task:kworker/u4:5    state:D stack:21976 pid:74    ppid:2      flags:0x00004000
[  311.556330][   T29] Workqueue: writeback wb_workfn (flush-8:0)
[  311.562410][   T29] Call Trace:
[  311.565692][   T29]  <TASK>
[  311.568963][   T29]  __schedule+0x15ae/0x4660
[  311.573530][   T29]  ? blk_mq_start_stopped_hw_queues+0x260/0x260
[  311.579970][   T29]  ? blk_mq_start_stopped_hw_queues+0x260/0x260
[  311.589369][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  311.595382][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  311.604936][   T29]  ? asan.module_dtor+0x20/0x20
[  311.606258][ T5782] Bluetooth: hci5: command tx timeout
[  311.612818][   T29]  ? blk_check_plugged+0x250/0x250
[  311.622676][   T29]  ? rq_wait_inc_below+0x11f/0x1a0
[  311.628027][   T29]  ? wq_worker_sleeping+0x63/0x240
[  311.633198][   T29]  schedule+0xbd/0x170
[  311.640639][   T29]  io_schedule+0x80/0xd0
[  311.644908][   T29]  rq_qos_wait+0x22b/0x360
[  311.649498][   T29]  ? wbt_inflight_cb+0x2f0/0x2f0
[  311.654473][   T29]  ? rq_depth_scale_down+0x2f0/0x2f0
[  311.660075][   T29]  ? rq_qos_wait+0x360/0x360
[  311.664698][   T29]  ? wbt_exit+0xb0/0xb0
[  311.669087][   T29]  ? blk_bio_list_merge+0xd0/0xd0
[  311.674148][   T29]  wbt_wait+0x34a/0x580
[  311.680415][   T29]  ? rwb_trace_step+0x320/0x320
[  311.685305][   T29]  ? dd_depth_updated+0x110/0x110
[  311.690687][   T29]  ? rwb_trace_step+0x320/0x320
[  311.695562][   T29]  __rq_qos_throttle+0x65/0xb0
[  311.700849][   T29]  blk_mq_submit_bio+0x8fb/0x2220
[  311.707664][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  311.712701][   T29]  ? blk_mq_plug_issue_direct+0x550/0x550
[  311.721139][   T29]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  311.727638][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  311.732858][   T29]  ? ktime_get+0x7f/0x280
[  311.737248][   T29]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  311.743517][   T29]  ? ktime_get_real_ts64+0x440/0x440
[  311.748931][   T29]  __submit_bio+0x12b/0x260
[  311.753459][   T29]  ? blk_free_queue_rcu+0x40/0x40
[  311.758673][   T29]  submit_bio_noacct_nocheck+0x6e8/0x9c0
[  311.764329][   T29]  ? should_fail_request+0x70/0x70
[  311.769539][   T29]  ext4_io_submit+0xdc/0x140
[  311.774183][   T29]  ext4_do_writepages+0xb5f/0x3990
[  311.779430][   T29]  ? ext4_normal_submit_inode_data_buffers+0x240/0x240
[  311.786450][    T8] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  311.794028][   T29]  ? rcu_read_lock_any_held+0xb4/0x140
[  311.799829][   T29]  ? __lock_acquire+0x1336/0x7d80
[  311.805207][   T29]  ext4_writepages+0x1dd/0x350
[  311.810459][   T29]  ? ext4_read_folio+0x2f0/0x2f0
[  311.815440][   T29]  ? reacquire_held_locks+0x31f/0x5c0
[  311.822090][   T29]  ? writeback_sb_inodes+0x35e/0x1020
[  311.827597][   T29]  ? ext4_read_folio+0x2f0/0x2f0
[  311.832559][   T29]  do_writepages+0x351/0x590
[  311.839233][   T29]  ? folio_clear_dirty_for_io+0xca0/0xca0
[  311.845006][   T29]  ? writeback_sb_inodes+0x4bd/0x1020
[  311.850877][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  311.856193][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  311.861257][   T29]  __writeback_single_inode+0x14e/0xee0
[  311.872410][   T29]  writeback_sb_inodes+0x813/0x1020
[  311.877739][   T29]  ? queue_io+0x530/0x530
[  311.882101][   T29]  __writeback_inodes_wb+0x114/0x240
[  311.887837][   T29]  wb_writeback+0x472/0xbe0
[  311.892378][   T29]  ? queue_io+0x2d1/0x530
[  311.896867][   T29]  ? percpu_ref_tryget+0x250/0x250
[  311.902007][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  311.908056][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  311.913107][   T29]  wb_workfn+0xad7/0xe60
[  311.917819][   T29]  ? inode_wait_for_writeback+0x230/0x230
[  311.924747][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  311.930863][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  311.935984][   T29]  ? read_lock_is_recursive+0x20/0x20
[  311.941383][   T29]  ? _raw_spin_unlock_irq+0x23/0x50
[  311.946861][   T29]  ? process_scheduled_works+0x975/0x1600
[  311.952613][   T29]  ? process_scheduled_works+0x975/0x1600
[  311.958400][   T29]  process_scheduled_works+0xa60/0x1600
[  311.963996][   T29]  ? worker_attach_to_pool+0x370/0x370
[  311.969712][   T29]  ? assign_work+0x3cc/0x5d0
[  311.974459][   T29]  worker_thread+0xa5e/0xfe0
[  311.979161][   T29]  kthread+0x2fa/0x390
[  311.983251][   T29]  ? pr_cont_work+0x550/0x550
[  311.988891][   T29]  ? kthread_blkcg+0xd0/0xd0
[  311.993506][   T29]  ret_from_fork+0x48/0x80
[  312.000495][   T29]  ? kthread_blkcg+0xd0/0xd0
[  312.005201][   T29]  ret_from_fork_asm+0x11/0x20
[  312.010640][   T29]  </TASK>
[  312.013854][   T29] INFO: task jbd2/sda1-8:5106 blocked for more than 143 seconds.
[  312.022138][   T29]       Tainted: G S                 syzkaller #0
[  312.030081][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  312.038953][    T8] usb 9-1: config 0 has an invalid interface number: 4 but max is 3
[  312.047120][   T29] task:jbd2/sda1-8     state:D stack:25736 pid:5106  ppid:2      flags:0x00004000
[  312.056473][    T8] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 4
[  312.065343][    T8] usb 9-1: config 0 has no interface number 0
[  312.071573][   T29] Call Trace:
[  312.074957][   T29]  <TASK>
[  312.078403][    T8] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  312.086184][ T5782] Bluetooth: hci6: command 0xfc11 tx timeout
[  312.087559][   T29]  __schedule+0x15ae/0x4660
[  312.094708][   T51] Bluetooth: hci6: Entering manufacturer mode failed (-110)
[  312.098567][    T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.114354][   T29]  ? asan.module_dtor+0x20/0x20
[  312.119296][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  312.124358][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  312.133949][    T8] usb 9-1: config 0 descriptor??
[  312.146119][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  312.151384][   T29]  schedule+0xbd/0x170
[  312.155464][   T29]  io_schedule+0x80/0xd0
[  312.188932][    T8] ums-realtek 9-1:0.4: USB Mass Storage device detected
[  312.199722][   T29]  bit_wait_io+0x11/0xd0
[  312.204121][   T29]  __wait_on_bit+0x9f/0x2c0
[  312.215065][   T29]  ? bit_wait+0xd0/0xd0
[  312.219336][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  312.224800][   T29]  ? bit_wait+0xd0/0xd0
[  312.229028][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  312.234581][   T29]  ? bit_waitqueue+0x30/0x30
[  312.239319][   T29]  jbd2_journal_commit_transaction+0x35bf/0x5ad0
[  312.245683][   T29]  ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0
[  312.252533][   T29]  ? lock_chain_count+0x20/0x20
[  312.257469][   T29]  ? _raw_spin_unlock+0x40/0x40
[  312.262335][   T29]  ? __try_to_del_timer_sync+0x1c2/0x280
[  312.268069][   T29]  ? __timer_delete_sync+0x23d/0x2e0
[  312.273361][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  312.278525][   T29]  ? timer_delete_sync+0x20/0x20
[  312.283477][   T29]  ? do_raw_read_unlock+0x80/0x80
[  312.288799][   T29]  ? prepare_to_wait+0x1aa/0x200
[  312.293757][   T29]  kjournald2+0x40f/0x810
[  312.298163][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  312.303385][   T29]  ? wake_bit_function+0x200/0x200
[  312.308606][   T29]  ? _raw_spin_unlock+0x40/0x40
[  312.313476][   T29]  ? __kthread_parkme+0x71/0x1c0
[  312.318550][   T29]  ? __kthread_parkme+0x15b/0x1c0
[  312.323603][   T29]  kthread+0x2fa/0x390
[  312.327728][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  312.334079][   T29]  ? kthread_blkcg+0xd0/0xd0
[  312.338782][   T29]  ret_from_fork+0x48/0x80
[  312.343216][   T29]  ? kthread_blkcg+0xd0/0xd0
[  312.347893][   T29]  ret_from_fork_asm+0x11/0x20
[  312.352699][   T29]  </TASK>
[  312.355921][   T29] 
[  312.355921][   T29] Showing all locks held in the system:
[  312.363668][   T29] 1 lock held by pool_workqueue_/3:
[  312.369078][   T29]  #0: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  312.380058][   T29] 6 locks held by kworker/0:0/8:
[  312.384996][   T29]  #0: ffff888019ae1538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  312.396983][   T29]  #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  312.410801][   T29]  #2: ffff888143f281d8 (&dev->mutex){....}-{3:3}, at: hub_event+0x188/0x4a80
[  312.419843][   T29]  #3: ffff88805e55c1d8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420
[  312.429171][   T29]  #4: ffff88802b5f61a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x89/0x420
[  312.439339][   T29]  #5: ffffffff8d137980 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530
[  312.449533][   T29] 1 lock held by khungtaskd/29:
[  312.454391][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  312.464301][   T29] 4 locks held by kworker/u4:5/74:
[  312.469457][   T29]  #0: ffff88801d641138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  312.481827][   T29]  #1: ffffc900015c7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  312.494397][   T29]  #2: ffff88802c9100e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0
[  312.505016][   T29]  #3: ffff88802c912c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350
[  312.515683][   T29] 1 lock held by klogd/5133:
[  312.520361][   T29]  #0: ffff8880b8f3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[  312.532875][   T29] 2 locks held by getty/5537:
[  312.538792][   T29]  #0: ffff888031b180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  312.548657][   T29]  #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  312.559564][   T29] 2 locks held by kworker/1:4/5818:
[  312.564778][   T29]  #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  312.579425][   T29]  #1: ffffc900049c7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  312.591675][   T29] 1 lock held by dhcpcd/12187:
[  312.596693][   T29]  #0: ffff88805a642620 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210
[  312.610365][   T29] 
[  312.612712][   T29] =============================================
[  312.612712][   T29] 
[  312.621419][   T29] NMI backtrace for cpu 0
[  312.625794][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G S                 syzkaller #0
[  312.634480][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  312.644529][   T29] Call Trace:
[  312.647801][   T29]  <TASK>
[  312.650723][   T29]  dump_stack_lvl+0x18c/0x250
[  312.655392][   T29]  ? __wake_up_klogd+0xd9/0x100
[  312.660236][   T29]  ? show_regs_print_info+0x20/0x20
[  312.665427][   T29]  ? load_image+0x420/0x420
[  312.669946][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  312.674903][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  312.681051][   T29]  ? load_image+0x420/0x420
[  312.685540][   T29]  ? wq_watchdog_touch+0xef/0x170
[  312.690577][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  312.696650][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  312.702623][   T29]  watchdog+0xf59/0xfa0
[  312.706771][   T29]  ? watchdog+0x1e1/0xfa0
[  312.711091][   T29]  kthread+0x2fa/0x390
[  312.715153][   T29]  ? hungtask_pm_notify+0x50/0x50
[  312.720199][   T29]  ? kthread_blkcg+0xd0/0xd0
[  312.724794][   T29]  ret_from_fork+0x48/0x80
[  312.729219][   T29]  ? kthread_blkcg+0xd0/0xd0
[  312.733814][   T29]  ret_from_fork_asm+0x11/0x20
[  312.738587][   T29]  </TASK>
[  312.743723][   T29] Sending NMI from CPU 0 to CPUs 1:
[  312.749640][    C1] NMI backtrace for cpu 1
[  312.749652][    C1] CPU: 1 PID: 3517 Comm: kworker/u4:12 Tainted: G S                 syzkaller #0
[  312.749668][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  312.749678][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[  312.749710][    C1] RIP: 0010:__lock_acquire+0x6a1/0x7d80
[  312.749730][    C1] Code: 48 89 d8 48 c1 e8 03 42 0f b6 04 00 84 c0 0f 85 f1 13 00 00 45 84 f6 0f 84 72 05 00 00 0f b6 1b 48 8b 44 24 58 42 0f b6 04 00 <84> c0 0f 85 5d 14 00 00 41 f6 47 01 80 0f 85 52 05 00 00 84 db 41
[  312.749743][    C1] RSP: 0018:ffffc9000cf5f6c0 EFLAGS: 00000002
[  312.749756][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8168a1fb
[  312.749766][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911eb510
[  312.749776][    C1] RBP: ffffc9000cf5f908 R08: dffffc0000000000 R09: 1ffffffff223d6a2
[  312.749787][    C1] R10: dffffc0000000000 R11: fffffbfff223d6a3 R12: 0000000000040000
[  312.749798][    C1] R13: ffff88802df91e00 R14: 0000000000000002 R15: ffff88802df92930
[  312.749808][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  312.749821][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  312.749831][    C1] CR2: 000055c3357e9660 CR3: 000000007eafe000 CR4: 00000000003506e0
[  312.749845][    C1] Call Trace:
[  312.749850][    C1]  <TASK>
[  312.749864][    C1]  ? kmem_cache_free+0xf8/0x290
[  312.749888][    C1]  ? verify_lock_unused+0x140/0x140
[  312.749907][    C1]  ? verify_lock_unused+0x140/0x140
[  312.749936][    C1]  ? mark_lock+0x94/0x320
[  312.749951][    C1]  ? verify_lock_unused+0x140/0x140
[  312.749970][    C1]  lock_acquire+0x19e/0x420
[  312.749987][    C1]  ? try_to_wake_up+0x5b/0x10e0
[  312.750006][    C1]  ? read_lock_is_recursive+0x20/0x20
[  312.750027][    C1]  _raw_spin_lock_irqsave+0xb4/0x100
[  312.750045][    C1]  ? try_to_wake_up+0x5b/0x10e0
[  312.750059][    C1]  ? _raw_spin_lock+0x40/0x40
[  312.750079][    C1]  try_to_wake_up+0x5b/0x10e0
[  312.750096][    C1]  kick_pool+0x320/0x420
[  312.750113][    C1]  process_scheduled_works+0x7d7/0x1600
[  312.750143][    C1]  ? worker_attach_to_pool+0x370/0x370
[  312.750163][    C1]  ? assign_work+0x3cc/0x5d0
[  312.750182][    C1]  worker_thread+0xa5e/0xfe0
[  312.750209][    C1]  kthread+0x2fa/0x390
[  312.750224][    C1]  ? pr_cont_work+0x550/0x550
[  312.750241][    C1]  ? kthread_blkcg+0xd0/0xd0
[  312.750256][    C1]  ret_from_fork+0x48/0x80
[  312.750273][    C1]  ? kthread_blkcg+0xd0/0xd0
[  312.750288][    C1]  ret_from_fork_asm+0x11/0x20
[  312.750313][    C1]  </TASK>
[  312.754079][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  313.005841][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G S                 syzkaller #0
[  313.014512][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  313.024563][   T29] Call Trace:
[  313.027854][   T29]  <TASK>
[  313.030775][   T29]  dump_stack_lvl+0x18c/0x250
[  313.035455][   T29]  ? show_regs_print_info+0x20/0x20
[  313.040649][   T29]  ? load_image+0x420/0x420
[  313.045155][   T29]  panic+0x2ca/0x720
[  313.049049][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  313.053720][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  313.059269][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  313.064641][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  313.070794][   T29]  watchdog+0xf98/0xfa0
[  313.074948][   T29]  ? watchdog+0x1e1/0xfa0
[  313.079273][   T29]  kthread+0x2fa/0x390
[  313.083331][   T29]  ? hungtask_pm_notify+0x50/0x50
[  313.088347][   T29]  ? kthread_blkcg+0xd0/0xd0
[  313.092927][   T29]  ret_from_fork+0x48/0x80
[  313.097337][   T29]  ? kthread_blkcg+0xd0/0xd0
[  313.101921][   T29]  ret_from_fork_asm+0x11/0x20
[  313.106687][   T29]  </TASK>
[  313.109954][   T29] Kernel Offset: disabled
[  313.114265][   T29] Rebooting in 86400 seconds..