last executing test programs:

23.368309819s ago: executing program 3 (id=700):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6c733d63703132353500747970653d98ac303030303030303030303030642c63726561746f723de22ad8a42c51023edf55d0ea80339a6e6f6400"/71], 0x1, 0x60e, &(0x7f0000002600)="$eJzs3U1vXFcdB+DfndiTOIjUbZO2IBBWsgA1IvF42tQLJAJCyIsKVWLTTRdW4iRWxm5lu8itEDi8bvkGLULOmhULxCISrPkIWGLRBRJ774zunTvxJHadmcTJjMXzSGfOOXPuPefcf+4943sdawL831p4P5MPUmTh8rubZX1nu93Z2W6v9MpJTidpJBPdLMVqUkwm19NN+Vr5Zt1d8WXjfPDZO/NftO7f69Ym6lRt3zhqv8Fs1SkzSU7V+XH1d+MZ+zvdVy4DdqkXOBi1vQO2htn9Ga9bYBwU3c/NA6aTs0nO9D7H6tWh8WJnd/yGWuUAAADghHppN7vZzLlRzwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOkvr7/4s6NXrlmRS97/9v1u+lLp9oD0Y9AQAAAAAAAAA4Bt/azW42c65X3yuq3/lfrCrnq9ev5OOsZylruZLNLGYjG1lLK8l0X0fNzcWNjbXWAHvOHbrn3HDzPvH/8QAAAAAAAAAAjtevsrD/+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgHRXKqm1XpfK88ncZEkjNJmuV2W8nfeuWT7MGoJwAAAAAvwEu72c1mzvXqe0V1z/9add9/Jh9nNRtZzkY6WcrN6llA966/sVOW9/b29rbbKwf7/cF/h5pG1WO6zx4OH3m22uJC1f6nZrKQH+enuZyZvJe1LOdnWcxGljKTH1WlxRSZrp9eTO9st1f606ODX3+k9t6T5vpGNZOp3MpyNbcruZEP08nNNKpjqLY5esR7ZXSK79cGfIhys87LI/pDnb94W4e8N11FZPJhRGbr2JfRePnoSAx5njw+UiuNh8+gzg8T8wHHO1vnZax/N7KYH+bxSMz1nX2vHR2J5OK/v/mXO53Vu3durV8en0N6So9Hot0XidefcyR2j2H+x6dZR6O7ivZWy9KTV8uL1b7nspyf5MPczFLeznzezlzeyluZzXyu9cX1wpOvtdtJhrnWLn2nLkwl+X2dj4cyri/3xbV/pZuu2vrf6UXpl3lliBXp64NNZaK3XTnGr+t8PDweiVbf+fLq0ZH44175ut5Zvbt2Z/GjAcf7dp2Xl+1vx2ptLs+XV8p/rKr26NlRtr16aFurajv/sK1xoO3Cv75atz3pSm3WP8Md7Gmuanv90LZ21fZGX9thP+UAMPbOvnm2OfWfqX9OfT71m6k7U++e+eHp+dPfaGbyHxN/PfXnxv3G94o383l+sX//DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPL31Tz69u9jpLK0pKJzYwkSSySTjMp/nU2gmeXGDjnplAp63qxsrH11d/+TT7y6vLN5eur202m63rs3NX5ufu3b11nJnabb7OuppAs/B/of+qGcCAAAAAAAAAAAADGr4PwzI0H9OMOpjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE62hfcz+SBFWrNXZsv6zna7U6ZeeX/LiSSNJMXPk+LvyfV0U6b7uiu+bJwPPntn/ovW/Xv7fU30tm8ctd9gtuqUmSSn6vy4+rvxzP0VD4+wDNilXuBg1P4XAAD///6hC0A=")
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x17f18a1, 0x0, 0x83, 0x0, &(0x7f0000000480))
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/214, 0xd6)

22.949882036s ago: executing program 3 (id=705):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
sendmsg$NFT_BATCH(r0, &(0x7f0000004780)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)

22.78917028s ago: executing program 3 (id=708):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xfffb, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

22.531320326s ago: executing program 3 (id=713):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000000040)=ANY=[], 0xfe, 0xc24, &(0x7f0000001480)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x11a)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

21.828640504s ago: executing program 3 (id=722):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000140)=""/42, 0x2a}], 0x2}, 0x8000}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

21.124349679s ago: executing program 3 (id=727):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff03fd600d698cff9e13f008004de7f9c764360000ff8800132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

20.794144325s ago: executing program 32 (id=727):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r1 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff03fd600d698cff9e13f008004de7f9c764360000ff8800132001000000000000", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.393021191s ago: executing program 4 (id=865):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mremap(&(0x7f00001c7000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

4.239533597s ago: executing program 0 (id=867):
r0 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$setperm(0x5, r1, 0x20d0814)
keyctl$search(0xa, r1, &(0x7f0000000300)='keyring\x00', &(0x7f0000000f40)={'syz', 0x0}, r0)

4.004558804s ago: executing program 0 (id=871):
pipe2$watch_queue(&(0x7f0000000100), 0x80)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

3.768238681s ago: executing program 0 (id=873):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x88, 0x29, 0xec, 0x10, 0x93a, 0x260e, 0x1885, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xb0, 0x8, "", [{{0x9, 0x4, 0x97, 0x6, 0x0, 0x10, 0x11, 0x2c, 0xd2}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

3.109529534s ago: executing program 4 (id=878):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000000)={{r1}, 0x0, 0x0, 0x2, 0xc, 0x1})

3.027960026s ago: executing program 5 (id=879):
r0 = eventfd(0x4)
write$eventfd(r0, &(0x7f0000000000)=0x8, 0x8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x40, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xbd65}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0)

2.592360057s ago: executing program 5 (id=881):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7)

2.083294475s ago: executing program 0 (id=885):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
userfaultfd(0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x20, 0x13, 0x2, "bfb1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

1.942805452s ago: executing program 2 (id=887):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8000)

1.899222163s ago: executing program 1 (id=888):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c)
listen(r0, 0x5)
syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x8, {[@sack_perm={0x4, 0x2}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0)

1.669500038s ago: executing program 2 (id=889):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x40000000, 0x0, 0x7, 0x40000001, 0x4b4d564b, 0x564b4d56, 0x4d}, {0x40000001, 0x3, 0x428f3360c45c63a9, 0x5, 0x7, 0x4, 0xfffffff7}]})

1.656379482s ago: executing program 1 (id=890):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x130, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'geneve0\x00'}, 0x287, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a3ec, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)

1.329970274s ago: executing program 1 (id=891):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

1.059742242s ago: executing program 2 (id=892):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x22)

1.059112981s ago: executing program 5 (id=893):
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000001180)={[{@shortname_lower}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@uni_xlateno}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlate}]}, 0x1, 0x2d4, &(0x7f0000001340)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

982.796712ms ago: executing program 1 (id=894):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1)
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000140)=0xc0)

980.60689ms ago: executing program 4 (id=895):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f00000002c0)="dcd8a7", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004)

842.271116ms ago: executing program 5 (id=896):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000011c0)='./security\x00', 0x100c444, &(0x7f0000000480)=ANY=[@ANYBLOB='nodots,fmask=00000000000000000006675,nfs=stale_rw,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,time_offset=0x00000000000003cc,errors=continue,nodots,dots,nodots,nodots,usefree,check=relaxed,nodots,nfs,nodots,showexec,nodots,umask=00000000000000000000007,nodots,nodots,dont_hash,seclabel,func=FILE_MMAP,subj_user=-+]^(-%*@@k+,:@{^[^@,uid>', @ANYRESOCT, @ANYBLOB="2c617564692c0093591481b2dac6c586482df1499a5d110264abd884a04c3c17f1c678294ba89de3d86c0645512aed6d9103b453b32fcb38ac88ec9428d5c7acbe688a00d3f7ef8e62ee05f019c1f7fd56a6ffbf9af11e85ba202f6f3745d3"], 0x1, 0x1ff, &(0x7f0000000800)="$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")
r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r0, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

715.944571ms ago: executing program 4 (id=897):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x5, 0x4, 0xc0000000, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x2, @can={{0x1, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "68a11ae0b47b865f"}}, 0x48}, 0x300}, 0x8040)

660.02697ms ago: executing program 2 (id=898):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8)
getdents(r0, &(0x7f0000000080)=""/43, 0x2b)
getdents(r0, 0x0, 0xbb)

462.155758ms ago: executing program 4 (id=899):
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000a00)='./proc\x00', &(0x7f0000000b00)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rxrpc/conns\x00', 0x0, 0x0)
lseek(r0, 0x4, 0x1)

405.053053ms ago: executing program 5 (id=900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0xf3cd}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x2000c000)

327.931881ms ago: executing program 2 (id=901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

316.742903ms ago: executing program 1 (id=902):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x4, 0x2, 0xa, 0x401, 0x0, 0xfffffffc, 0x40, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffab, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x6, 0x200, 0x2a14, 0x9, 0x4, 0x29, 0x7, 0xe, 0x4]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x34, 0x0, 0x1, 0x80000000})

269.064535ms ago: executing program 0 (id=903):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x68200, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002"])

160.80293ms ago: executing program 4 (id=904):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

107.509884ms ago: executing program 2 (id=905):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x10000258}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)

60.951648ms ago: executing program 5 (id=906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88c7}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x4c}}, 0x800)

54.85324ms ago: executing program 1 (id=907):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000)
mremap(&(0x7f0000d5c000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x3)

0s ago: executing program 0 (id=908):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)

kernel console output (not intermixed with test programs):

01][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.465316][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.465425][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.467979][ T5620] bridge_slave_1: entered allmulticast mode
[   84.469871][ T5620] bridge_slave_1: entered promiscuous mode
[   84.474058][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.525344][ T5622] team0: Port device team_slave_1 added
[   84.593805][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.640232][ T5625] team0: Port device team_slave_0 added
[   84.642701][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.656844][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.656861][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.656881][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.661725][ T5619] team0: Port device team_slave_0 added
[   84.666697][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   84.670250][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   84.672571][ T5625] team0: Port device team_slave_1 added
[   84.687800][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.687816][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.687837][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.692666][ T5619] team0: Port device team_slave_1 added
[   84.724836][ T5630] team0: Port device team_slave_0 added
[   84.795128][ T5630] team0: Port device team_slave_1 added
[   84.812190][ T5620] team0: Port device team_slave_0 added
[   84.813016][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.813030][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.813073][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.816263][ T5620] team0: Port device team_slave_1 added
[   84.845005][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.845021][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.845041][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.893749][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.893766][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.893787][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.895244][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.895255][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.895275][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.901307][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.901323][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.901344][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.956603][ T5622] hsr_slave_0: entered promiscuous mode
[   84.957848][ T5622] hsr_slave_1: entered promiscuous mode
[   84.979417][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.979433][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.979454][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.028046][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.028064][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.028085][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.070095][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.070112][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   85.070133][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   85.148831][ T5625] hsr_slave_0: entered promiscuous mode
[   85.151338][ T5625] hsr_slave_1: entered promiscuous mode
[   85.152174][ T5625] debugfs: 'hsr0' already exists in 'hsr'
[   85.152253][ T5625] Cannot create hsr debugfs directory
[   85.229720][ T5630] hsr_slave_0: entered promiscuous mode
[   85.230607][ T5630] hsr_slave_1: entered promiscuous mode
[   85.231054][ T5630] debugfs: 'hsr0' already exists in 'hsr'
[   85.231073][ T5630] Cannot create hsr debugfs directory
[   85.238649][ T5619] hsr_slave_0: entered promiscuous mode
[   85.239724][ T5619] hsr_slave_1: entered promiscuous mode
[   85.240473][ T5619] debugfs: 'hsr0' already exists in 'hsr'
[   85.240490][ T5619] Cannot create hsr debugfs directory
[   85.366721][ T5620] hsr_slave_0: entered promiscuous mode
[   85.367414][ T5620] hsr_slave_1: entered promiscuous mode
[   85.367887][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   85.367907][ T5620] Cannot create hsr debugfs directory
[   85.828154][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.835378][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.850721][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.858389][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.866276][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.875078][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.877656][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.889247][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.952823][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.960117][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.972858][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.976276][ T5629] Bluetooth: hci0: command tx timeout
[   85.989906][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.992491][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.999940][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.000738][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   86.006955][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.046664][ T5629] Bluetooth: hci3: command tx timeout
[   86.046676][ T4933] Bluetooth: hci1: command tx timeout
[   86.126405][ T4933] Bluetooth: hci2: command tx timeout
[   86.126441][ T4933] Bluetooth: hci4: command tx timeout
[   86.135103][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.147319][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.150862][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.159817][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.176793][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.187015][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.190674][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.194523][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.282977][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   86.296814][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.298004][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   86.301018][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.340212][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.340509][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   86.343334][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.345126][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   86.356805][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.446569][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   86.449278][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   86.450138][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   86.452696][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   86.453904][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   86.459677][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   86.484575][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   86.504944][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   86.517536][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   86.567555][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.567727][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.569427][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.569486][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.591363][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.681751][ T5625] 8021q: adding VLAN 0 to HW filter on device team0
[   86.717451][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.717835][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.742546][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.742642][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.797929][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.828416][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.904978][ T5619] 8021q: adding VLAN 0 to HW filter on device team0
[   86.932331][ T5630] 8021q: adding VLAN 0 to HW filter on device team0
[   86.934049][   T27] cfg80211: failed to load regulatory.db
[   86.960187][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.960302][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.000185][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.024889][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.025010][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.052376][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.052505][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.074281][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.074412][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.193546][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   87.282324][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.282448][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.347770][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.347924][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.846503][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.045727][ T5629] Bluetooth: hci0: command tx timeout
[   88.091804][ T5622] veth0_vlan: entered promiscuous mode
[   88.126994][ T5629] Bluetooth: hci3: command tx timeout
[   88.127032][ T5629] Bluetooth: hci1: command tx timeout
[   88.147224][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.167692][ T5622] veth1_vlan: entered promiscuous mode
[   88.207090][ T4933] Bluetooth: hci4: command tx timeout
[   88.207144][ T4933] Bluetooth: hci2: command tx timeout
[   88.360731][ T5622] veth0_macvtap: entered promiscuous mode
[   88.408517][ T5625] veth0_vlan: entered promiscuous mode
[   88.413216][ T5622] veth1_macvtap: entered promiscuous mode
[   88.469156][ T5625] veth1_vlan: entered promiscuous mode
[   88.500696][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.549123][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.564159][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.629684][ T1009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.629861][ T1009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.629902][ T1009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.629938][ T1009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.651123][ T5625] veth0_macvtap: entered promiscuous mode
[   88.719851][ T5625] veth1_macvtap: entered promiscuous mode
[   88.808389][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.832056][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.874905][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.971580][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.971649][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.971685][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.973195][ T5630] veth0_vlan: entered promiscuous mode
[   89.045610][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.066073][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.066094][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.066302][ T1009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.080789][ T5630] veth1_vlan: entered promiscuous mode
[   89.237271][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.237292][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.327484][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.327506][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.371935][ T5622] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   89.404248][ T5630] veth0_macvtap: entered promiscuous mode
[   89.434727][ T5620] veth0_vlan: entered promiscuous mode
[   89.444083][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.444104][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.455554][ T5630] veth1_macvtap: entered promiscuous mode
[   89.542688][ T5620] veth1_vlan: entered promiscuous mode
[   89.557620][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.588984][ T5619] veth0_vlan: entered promiscuous mode
[   89.593352][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.661025][   T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.683420][ T5619] veth1_vlan: entered promiscuous mode
[   89.727120][ T1009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.727171][ T1009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.727207][ T1009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.818172][ T5620] veth0_macvtap: entered promiscuous mode
[   89.882319][ T5620] veth1_macvtap: entered promiscuous mode
[   89.973389][ T5619] veth0_macvtap: entered promiscuous mode
[   90.054419][ T5619] veth1_macvtap: entered promiscuous mode
[   90.080821][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.092143][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.092166][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.127923][ T5629] Bluetooth: hci0: command tx timeout
[   90.137729][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.202531][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.205862][ T5629] Bluetooth: hci1: command tx timeout
[   90.205898][ T5629] Bluetooth: hci3: command tx timeout
[   90.241195][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.241228][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.257188][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.286206][ T4933] Bluetooth: hci2: command tx timeout
[   90.286245][ T4933] Bluetooth: hci4: command tx timeout
[   90.288227][   T61] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.288883][   T61] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.288922][   T61] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.288958][   T61] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.311143][ T5807] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   90.312648][  T144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.313755][  T144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.313790][  T144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.313847][  T144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.468151][ T5807] usb 4-1: Using ep0 maxpacket: 8
[   90.472938][ T5807] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   90.495792][ T5807] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   90.495828][ T5807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   90.495852][ T5807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   90.495872][ T5807] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   90.495915][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.567551][ T5813] loop1: detected capacity change from 0 to 40427
[   90.605400][ T5813] F2FS-fs (loop1): invalid crc value
[   90.710374][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.710397][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.769234][ T5807] usb 4-1: GET_CAPABILITIES returned 0
[   90.769292][ T5807] usbtmc 4-1:16.0: can't read capabilities
[   90.823818][ T5813] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   90.841125][ T5813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   91.035373][ T5818] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32
[   91.047053][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.047075][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.048978][ T5735] usb 4-1: USB disconnect, device number 2
[   91.101361][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.101382][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.172662][ T5622] syz-executor: attempt to access beyond end of device
[   91.172662][ T5622] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   91.173229][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   91.173273][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   91.173285][ T5622] Call Trace:
[   91.173293][ T5622]  <TASK>
[   91.173303][ T5622]  dump_stack_lvl+0xe8/0x150
[   91.173340][ T5622]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   91.173373][ T5622]  f2fs_write_end_bio+0x1211/0x16e0
[   91.173403][ T5622]  ? blkg_put+0x22/0x240
[   91.173447][ T5622]  __submit_merged_bio+0x258/0x6a0
[   91.173470][ T5622]  ? rcu_is_watching+0x16/0xb0
[   91.173504][ T5622]  __submit_merged_write_cond+0x3c9/0x4e0
[   91.173539][ T5622]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   91.173593][ T5622]  f2fs_write_data_pages+0x2a1d/0x36f0
[   91.173619][ T5622]  ? __lock_acquire+0x747/0x2de0
[   91.173687][ T5622]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   91.173711][ T5622]  ? is_bpf_text_address+0x26/0x2b0
[   91.173753][ T5622]  ? arch_stack_walk+0xfb/0x150
[   91.173813][ T5622]  ? add_lock_to_list+0xc7/0x100
[   91.173843][ T5622]  ? lockdep_unlock+0x5c/0xd0
[   91.173862][ T5622]  ? __lock_acquire+0x1511/0x2de0
[   91.173920][ T5622]  ? do_raw_spin_lock+0x12b/0x2f0
[   91.173965][ T5622]  ? do_raw_spin_unlock+0xf5/0x200
[   91.173995][ T5622]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   91.174023][ T5622]  do_writepages+0x338/0x560
[   91.174062][ T5622]  ? do_raw_spin_unlock+0xf5/0x200
[   91.174097][ T5622]  filemap_fdatawrite+0x1e9/0x2f0
[   91.174127][ T5622]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   91.174211][ T5622]  ? do_raw_spin_unlock+0xf5/0x200
[   91.174255][ T5622]  f2fs_sync_dirty_inodes+0x30e/0x830
[   91.174303][ T5622]  f2fs_write_checkpoint+0xa38/0x2710
[   91.174330][ T5622]  ? __lock_acquire+0x747/0x2de0
[   91.174393][ T5622]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   91.174490][ T5622]  kill_f2fs_super+0x2dd/0x700
[   91.174530][ T5622]  ? __pfx_kill_f2fs_super+0x10/0x10
[   91.174572][ T5622]  ? call_rcu+0x64d/0x8b0
[   91.174598][ T5622]  ? lockdep_hardirqs_on+0x7b/0x110
[   91.174638][ T5622]  deactivate_locked_super+0xbc/0x110
[   91.174664][ T5622]  cleanup_mnt+0x3d3/0x460
[   91.174696][ T5622]  task_work_run+0x1d9/0x260
[   91.174725][ T5622]  ? __pfx_task_work_run+0x10/0x10
[   91.174761][ T5622]  exit_to_user_mode_loop+0x204/0x770
[   91.174785][ T5622]  ? rcu_is_watching+0x16/0xb0
[   91.174817][ T5622]  do_syscall_64+0x328/0x520
[   91.174838][ T5622]  ? trace_irq_disable+0x3b/0x140
[   91.174859][ T5622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.174880][ T5622]  ? clear_bhb_loop+0x70/0xc0
[   91.174906][ T5622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.174926][ T5622] RIP: 0033:0x7f9dd899f397
[   91.174947][ T5622] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   91.174963][ T5622] RSP: 002b:00007ffef0c28fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   91.174986][ T5622] RAX: 0000000000000000 RBX: 00007f9dd8a3448b RCX: 00007f9dd899f397
[   91.175000][ T5622] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef0c29090
[   91.175011][ T5622] RBP: 00007ffef0c29090 R08: 00007ffef0c2a090 R09: 00000000ffffffff
[   91.175024][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef0c2a120
[   91.175036][ T5622] R13: 00007f9dd8a3448b R14: 000000000001637c R15: 00007ffef0c2a160
[   91.175073][ T5622]  </TASK>
[   91.211890][ T5622] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   91.358945][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.358966][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.015943][ T1009] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.025664][  T144] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   92.025710][  T144] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.025744][  T144] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.151128][ T5839] netlink: 'syz.3.14': attribute type 3 has an invalid length.
[   92.151160][ T5839] netlink: 'syz.3.14': attribute type 3 has an invalid length.
[   92.154323][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14'.
[   92.697489][  T144] bond0: (slave bond_slave_0): interface is now down
[   92.697517][  T144] bond0: (slave bond_slave_1): interface is now down
[   92.729697][  T144] bond0: (slave bond_slave_0): interface is now down
[   92.729722][  T144] bond0: (slave bond_slave_1): interface is now down
[   92.733345][  T144] bond0: now running without any active interface!
[   92.863436][ T5857] loop1: detected capacity change from 0 to 256
[   92.866230][   T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   92.943737][ T5857] FAT-fs (loop1): Directory bread(block 1285) failed
[   92.943777][ T5857] FAT-fs (loop1): Directory bread(block 1286) failed
[   92.943800][ T5857] FAT-fs (loop1): Directory bread(block 1287) failed
[   92.964288][ T5857] FAT-fs (loop1): Directory bread(block 1288) failed
[   93.017800][   T32] usb 5-1: Using ep0 maxpacket: 32
[   93.028373][   T32] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   93.029938][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.029964][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.029998][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.043322][ T5857] FAT-fs (loop1): FAT read failed (blocknr 1281)
[   93.055397][   T32] usb 5-1: config 0 descriptor??
[   93.101794][   T32] hub 5-1:0.0: USB hub found
[   93.299800][   T32] hub 5-1:0.0: 1 port detected
[   93.510097][   T32] hub 5-1:0.0: config failed, can't get hub status (err -71)
[   93.525301][   T32] usbhid 5-1:0.0: can't add hid device: -71
[   93.525410][   T32] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   93.574268][   T32] usb 5-1: USB disconnect, device number 2
[   94.072853][ T5866] loop1: detected capacity change from 0 to 32768
[   94.082203][ T5866] =======================================================
[   94.082203][ T5866] WARNING: The mand mount option has been deprecated and
[   94.082203][ T5866]          and is ignored by this kernel. Remove the mand
[   94.082203][ T5866]          option from the mount to silence this warning.
[   94.082203][ T5866] =======================================================
[   94.332577][ T5866] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   94.815189][ T5622] ocfs2: Unmounting device (7,1) on (node local)
[   94.863822][ T5896] loop0: detected capacity change from 0 to 512
[   95.151480][ T5896] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.39: corrupted in-inode xattr: invalid ea_ino
[   95.151651][ T5896] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   95.153190][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   95.154229][ T5896] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.39: couldn't read orphan inode 15 (err -117)
[   95.154351][ T5896] loop0: lost filesystem error report for type 5 error -117
[   95.195162][ T5896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.293457][ T5923] mmap: syz.3.43 (5923) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   95.304144][ T5921] loop2: detected capacity change from 0 to 64
[   95.305341][ T5896] fscrypt (loop0, inode 18): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[   95.438622][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.581394][  T144] IPVS: starting estimator thread 0...
[   95.667405][ T5926] IPVS: using max 32 ests per chain, 76800 per kthread
[   95.820845][ T5934] loop0: detected capacity change from 0 to 2048
[   95.917612][ T5934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.026213][ T5748] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.027619][ T5934] EXT4-fs (loop0): shut down requested (2)
[   96.167240][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.168954][ T5948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.53'.
[   96.188942][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'.
[   96.209052][ T5748] usb 2-1: Using ep0 maxpacket: 32
[   96.213999][ T5748] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   96.233896][ T5748] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[   96.233937][ T5748] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   96.233956][ T5748] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[   96.233976][ T5748] usb 2-1: config 1 has no interface number 0
[   96.234037][ T5748] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   96.234061][ T5748] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[   96.234104][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.335731][ T5748] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[   96.509200][ T5957] loop0: detected capacity change from 0 to 256
[   96.518777][ T5957] exfat: Deprecated parameter 'utf8'
[   96.518797][ T5957] exfat: Deprecated parameter 'utf8'
[   96.518864][ T5957] exfat: Deprecated parameter 'utf8'
[   96.623490][ T5937] loop1: detected capacity change from 0 to 512
[   96.696093][ T5937] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.49: bg 0: block 16: invalid block bitmap
[   96.696129][ T5937] loop1: lost filesystem error report for type 5 error -117
[   96.700376][ T5957] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d)
[   96.706200][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   96.706225][    C1] EXT4-fs (loop1): initial error at time 1788909491: ext4_validate_block_bitmap:436
[   96.706552][    C1] EXT4-fs (loop1): last error at time 1788909491: ext4_validate_block_bitmap:436
[   96.709393][ T5937] EXT4-fs (loop1): Remounting filesystem read-only
[   96.710060][ T5937] EXT4-fs (loop1): 1 truncate cleaned up
[   96.712469][ T5937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.804481][ T5748] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[   97.227388][ T2244] usb 2-1: USB disconnect, device number 2
[   97.261693][ T2244] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[   97.674030][ T5986] loop4: detected capacity change from 0 to 256
[   97.712969][ T5986] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   97.720364][ T5986] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[   97.727777][ T5980] loop0: detected capacity change from 0 to 32768
[   97.770539][ T5986] exFAT-fs (loop4): valid_size(150994954) is greater than size(10)
[   97.848727][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.876589][ T5980] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   98.020064][ T5980] XFS (loop0): Ending clean mount
[   98.033986][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'.
[   98.226244][ T5988] loop2: detected capacity change from 0 to 32768
[   98.276008][ T5988] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   98.322976][ T6006] veth1_macvtap: left promiscuous mode
[   98.323136][ T6006] macsec0: entered promiscuous mode
[   98.384398][ T5630] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   98.395225][ T6009] veth1_macvtap: entered promiscuous mode
[   98.398215][ T6009] macsec0: left promiscuous mode
[   98.591520][ T5620] ocfs2: Unmounting device (7,2) on (node local)
[   99.133449][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'.
[   99.640062][ T6041] netlink: 'syz.0.88': attribute type 4 has an invalid length.
[   99.663891][ T6013] loop4: detected capacity change from 0 to 40427
[   99.681772][ T6013] F2FS-fs (loop4): Image doesn't support compression
[   99.681798][ T6013] F2FS-fs (loop4): build fault injection rate: 690
[   99.706447][ T6013] F2FS-fs (loop4): invalid crc value
[   99.724591][ T6039] warning: `syz.1.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.026839][ T6013] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  100.052582][ T6013] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  100.065743][ T5735] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  100.218574][ T5735] usb 4-1: Using ep0 maxpacket: 8
[  100.222144][ T5735] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  100.226290][ T5735] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[  100.226314][ T5735] usb 4-1: config 0 has no interface number 0
[  100.226350][ T5735] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  100.226370][ T5735] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  100.226389][ T5735] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  100.226411][ T5735] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  100.226431][ T5735] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  100.240818][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.240842][ T5735] usb 4-1: Product: syz
[  100.240854][ T5735] usb 4-1: Manufacturer: syz
[  100.240867][ T5735] usb 4-1: SerialNumber: syz
[  100.257631][ T5735] usb 4-1: config 0 descriptor??
[  100.333418][ T5619] syz-executor: attempt to access beyond end of device
[  100.333418][ T5619] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  100.341681][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  100.341725][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  100.341735][ T5619] Call Trace:
[  100.341743][ T5619]  <TASK>
[  100.341751][ T5619]  dump_stack_lvl+0xe8/0x150
[  100.341784][ T5619]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  100.341814][ T5619]  f2fs_write_end_bio+0x1211/0x16e0
[  100.341839][ T5619]  ? blkg_put+0x22/0x240
[  100.341873][ T5619]  __submit_merged_bio+0x258/0x6a0
[  100.341893][ T5619]  ? rcu_is_watching+0x16/0xb0
[  100.341920][ T5619]  __submit_merged_write_cond+0x3c9/0x4e0
[  100.341949][ T5619]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  100.341991][ T5619]  f2fs_write_data_pages+0x2a1d/0x36f0
[  100.342049][ T5619]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.342068][ T5619]  ? is_bpf_text_address+0x26/0x2b0
[  100.342102][ T5619]  ? arch_stack_walk+0xfb/0x150
[  100.342151][ T5619]  ? add_lock_to_list+0xc7/0x100
[  100.342175][ T5619]  ? lockdep_unlock+0x5c/0xd0
[  100.342191][ T5619]  ? __lock_acquire+0x1511/0x2de0
[  100.342236][ T5619]  ? do_raw_spin_lock+0x12b/0x2f0
[  100.342274][ T5619]  ? do_raw_spin_unlock+0xf5/0x200
[  100.342299][ T5619]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.342322][ T5619]  do_writepages+0x338/0x560
[  100.342353][ T5619]  ? do_raw_spin_unlock+0xf5/0x200
[  100.342382][ T5619]  filemap_fdatawrite+0x1e9/0x2f0
[  100.342407][ T5619]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  100.342471][ T5619]  ? do_raw_spin_unlock+0xf5/0x200
[  100.342500][ T5619]  f2fs_sync_dirty_inodes+0x30e/0x830
[  100.342538][ T5619]  f2fs_write_checkpoint+0xa38/0x2710
[  100.342560][ T5619]  ? __lock_acquire+0x747/0x2de0
[  100.342610][ T5619]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  100.342684][ T5619]  kill_f2fs_super+0x2dd/0x700
[  100.342724][ T5619]  ? __pfx_kill_f2fs_super+0x10/0x10
[  100.342758][ T5619]  ? call_rcu+0x64d/0x8b0
[  100.342779][ T5619]  ? lockdep_hardirqs_on+0x7b/0x110
[  100.342811][ T5619]  deactivate_locked_super+0xbc/0x110
[  100.342833][ T5619]  cleanup_mnt+0x3d3/0x460
[  100.342859][ T5619]  task_work_run+0x1d9/0x260
[  100.342883][ T5619]  ? __pfx_task_work_run+0x10/0x10
[  100.342913][ T5619]  exit_to_user_mode_loop+0x204/0x770
[  100.342933][ T5619]  ? rcu_is_watching+0x16/0xb0
[  100.342959][ T5619]  do_syscall_64+0x328/0x520
[  100.342976][ T5619]  ? trace_irq_disable+0x3b/0x140
[  100.342995][ T5619]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.343012][ T5619]  ? clear_bhb_loop+0x70/0xc0
[  100.343035][ T5619]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.343052][ T5619] RIP: 0033:0x7f8a8a99f397
[  100.343069][ T5619] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  100.343082][ T5619] RSP: 002b:00007ffe16e19ad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  100.343102][ T5619] RAX: 0000000000000000 RBX: 00007f8a8aa3448b RCX: 00007f8a8a99f397
[  100.343113][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe16e19b90
[  100.343123][ T5619] RBP: 00007ffe16e19b90 R08: 00007ffe16e1ab90 R09: 00000000ffffffff
[  100.343135][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe16e1ac20
[  100.343145][ T5619] R13: 00007f8a8aa3448b R14: 0000000000018737 R15: 00007ffe16e1ac60
[  100.343175][ T5619]  </TASK>
[  100.358678][ T5619] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  100.555880][ T5735] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  100.933441][ T5735] usb 4-1: USB disconnect, device number 3
[  101.784399][ T6084] tap0: tun_chr_ioctl cmd 2147767521
[  102.189290][ T6098] loop2: detected capacity change from 0 to 1024
[  103.058326][ T6131] loop4: detected capacity change from 0 to 512
[  103.078797][ T6131] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (27202!=33349)
[  103.089550][ T6134] netlink: 104 bytes leftover after parsing attributes in process `syz.0.118'.
[  103.124614][ T6131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  103.189170][ T6131] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (27202!=33349)
[  103.260350][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.423359][ T6144] block2mtd: illegal erase size
[  103.694452][ T6155] use of bytesused == 0 is deprecated and will be removed in the future,
[  103.694471][ T6155] use the actual size instead.
[  104.089110][ T6170] openvswitch: netlink: IPv4 tunnel dst address is zero
[  104.089152][ T6170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  104.183683][ T6174] loop1: detected capacity change from 0 to 512
[  104.232144][ T6176] block2mtd: device name too long
[  104.259992][ T6174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  104.335835][ T6174] EXT4-fs warning (device loop1): dx_probe:837: inode #2: comm syz.1.132: Unimplemented hash flags: 0x0001
[  104.335881][ T6174] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.132: Corrupt directory, running e2fsck is recommended
[  104.491346][ T6186] loop4: detected capacity change from 0 to 128
[  104.667656][ T6153] loop0: detected capacity change from 0 to 32768
[  104.668893][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.748700][ T6153] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.125 (6153)
[  104.940360][ T6153] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.940397][ T6153] BTRFS info (device loop0): using crc32c checksum algorithm
[  105.169489][ T6153] BTRFS info (device loop0): rebuilding free space tree
[  105.265673][ T6153] BTRFS info (device loop0): setting nodatasum
[  105.265701][ T6153] BTRFS info (device loop0): setting nodatacow
[  105.265716][ T6153] BTRFS info (device loop0): enabling ssd optimizations
[  105.265729][ T6153] BTRFS info (device loop0): turning off barriers
[  105.265744][ T6153] BTRFS info (device loop0): turning on flush-on-commit
[  105.265759][ T6153] BTRFS info (device loop0): enabling free space tree
[  105.265775][ T6153] BTRFS info (device loop0): force clearing of disk cache
[  105.346667][ T5735] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  105.479839][ T6220] process 'syz.4.141' launched './file0' with NULL argv: empty string added
[  105.515649][ T5735] usb 4-1: Using ep0 maxpacket: 16
[  105.532136][ T5735] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  105.546189][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.546218][ T5735] usb 4-1: Product: syz
[  105.546232][ T5735] usb 4-1: Manufacturer: syz
[  105.546246][ T5735] usb 4-1: SerialNumber: syz
[  105.782289][ T5630] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.832249][ T5735] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  105.912424][ T5735] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  105.912882][ T5735] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  105.912934][ T5735] usb 4-1: media controller created
[  105.997351][ T5735] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  106.052349][ T5735] zl10353_read_register: readreg error (reg=127, ret==-71)
[  106.151817][ T5735] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  106.171882][ T5735] usb 4-1: USB disconnect, device number 4
[  106.503186][ T6219] loop1: detected capacity change from 0 to 32768
[  106.562853][ T6219] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  106.599321][ T6245] loop4: detected capacity change from 0 to 16
[  106.637702][ T6245] erofs (device loop4): mounted with root inode @ nid 36.
[  106.645928][ T6219] XFS (loop1): Ending clean mount
[  106.707909][ T6245] erofs (device loop4): bogus dirent @ nid 36
[  106.795613][ T3105] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  106.967656][ T3105] usb 1-1: Using ep0 maxpacket: 16
[  106.972257][ T3105] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  106.975055][ T3105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.045610][ T3105] usb 1-1: config 0 descriptor??
[  107.063875][ T3105] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  107.169329][ T5622] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  107.278856][ T3105] usb 1-1: Detected FT232B
[  107.488522][ T3105] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  107.515178][ T3105] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  107.743472][ T5735] usb 1-1: USB disconnect, device number 2
[  107.817792][ T5735] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  107.818495][ T5735] ftdi_sio 1-1:0.0: device disconnected
[  108.157033][ T6281] loop1: detected capacity change from 0 to 64
[  108.542894][ T6293] i2c i2c-0: delete_device: Can't find device in list
[  109.185746][ T6311] loop4: detected capacity change from 0 to 128
[  109.193403][ T6311] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  109.214213][ T6278] loop3: detected capacity change from 0 to 32768
[  109.230031][ T6311] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  109.240761][ T6278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.152 (6278)
[  109.278221][ T6278] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.278258][ T6278] BTRFS info (device loop3): using crc32c checksum algorithm
[  109.471551][  T144] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  109.502184][ T6278] BTRFS info (device loop3): enabling ssd optimizations
[  109.502216][ T6278] BTRFS info (device loop3): turning on flush-on-commit
[  109.502233][ T6278] BTRFS info (device loop3): enabling free space tree
[  109.502249][ T6278] BTRFS info (device loop3): enabling auto defrag
[  109.502267][ T6278] BTRFS info (device loop3): use lzo compression, level 1
[  109.502286][ T6278] BTRFS info (device loop3): max_inline set to 4096
[  110.115242][ T6299] loop1: detected capacity change from 0 to 32768
[  110.181919][ T6299] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  110.187003][ T5625] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  110.310816][ T6299] XFS (loop1): Ending clean mount
[  110.415288][ T6355] loop0: detected capacity change from 0 to 256
[  110.499675][ T6355] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  110.600987][ T5622] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  112.387643][ T6368] loop3: detected capacity change from 0 to 4096
[  112.532618][ T6374] loop1: detected capacity change from 0 to 131072
[  112.561367][ T6374] F2FS-fs (loop1): Invalid segment/section count (458783, 24 x 150994945)
[  112.561401][ T6374] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  112.596254][ T6374] F2FS-fs (loop1): invalid crc value
[  112.691570][ T6374] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.717556][ T6374] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  112.717590][ T6374] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  113.030533][ T6368] ntfs3(loop3): Failed to load $Extend (-22).
[  113.030562][ T6368] ntfs3(loop3): Failed to initialize $Extend.
[  113.338893][ T5735] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  113.485677][ T5735] usb 3-1: Using ep0 maxpacket: 8
[  113.488461][ T5735] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  113.491395][ T5735] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.497103][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  113.497127][ T5735] usb 3-1: Product: syz
[  113.497141][ T5735] usb 3-1: Manufacturer: syz
[  113.497153][ T5735] usb 3-1: SerialNumber: syz
[  113.503065][ T5735] usb 3-1: config 0 descriptor??
[  113.516822][ T5735] imon_raw 3-1:0.0: IR endpoint missing
[  113.797664][ T2244] usb 3-1: USB disconnect, device number 2
[  113.949534][ T6394] loop3: detected capacity change from 0 to 32768
[  113.985408][ T6394] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.131474][ T6394] XFS (loop3): Ending clean mount
[  114.289602][ T6394] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  114.289663][ T6394] XFS (loop3): Unmount and run xfs_repair
[  114.289676][ T6394] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  114.289694][ T6394] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  114.289720][ T6394] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  114.289734][ T6394] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  114.289748][ T6394] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  114.289762][ T6394] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  114.289777][ T6394] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  114.289791][ T6394] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  114.289803][ T6394] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  114.290009][ T6394] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74
[  114.430193][ T6394] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  114.430265][ T6394] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  115.171147][ T6410] loop4: detected capacity change from 0 to 32768
[  115.244091][ T6410] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.321938][ T6410] XFS (loop4): Ending clean mount
[  115.468561][ T5625] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  115.469608][ T5619] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  115.851037][ T6437] Illegal XDP return value 4294967274 on prog  (id 10) dev N/A, expect packet loss!
[  116.456358][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.199'.
[  116.520538][ T6444] loop1: detected capacity change from 0 to 4096
[  116.535454][ T6444] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  116.725426][ T6444] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  117.057577][ T6444] ntfs3(loop1): ino=1e, mi_enum_attr
[  117.439013][ T6483] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  117.517618][ T6486] loop1: detected capacity change from 0 to 256
[  117.551337][ T6482] loop4: detected capacity change from 0 to 4096
[  117.569987][ T6486] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  117.600691][ T6487] loop0: detected capacity change from 0 to 1024
[  117.763174][ T6487] hfsplus: bad catalog entry type
[  117.923111][ T6482] ntfs3(loop4): failed to convert "0080" to macinuit
[  118.053668][ T6498] loop1: detected capacity change from 0 to 2048
[  118.129198][ T6500] loop3: detected capacity change from 0 to 4096
[  118.141038][ T6498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.256429][ T6500] ntfs3(loop3): Failed to load $Extend (-22).
[  118.256457][ T6500] ntfs3(loop3): Failed to initialize $Extend.
[  118.487311][ T5715] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  118.668351][ T5715] usb 3-1: unable to get BOS descriptor or descriptor too short
[  118.668414][ T5715] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  118.669326][ T5715] usb 3-1: unable to read config index 0 descriptor/start: -71
[  118.669371][ T5715] usb 3-1: can't read configurations, error -71
[  118.758239][ T6519] loop1: detected capacity change from 0 to 512
[  118.772644][ T6519] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  118.772664][ T6519] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  118.849520][ T6519] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.230: invalid indirect mapped block 4294967295 (level 0)
[  118.849565][ T6519] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  118.851598][ T6519] EXT4-fs (loop1): Remounting filesystem read-only
[  118.852404][ T6519] EXT4-fs (loop1): 1 orphan inode deleted
[  118.852423][ T6519] EXT4-fs (loop1): 1 truncate cleaned up
[  118.860430][ T6519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.873659][ T6519] EXT4-fs (loop1): shut down requested (1)
[  118.962654][ T6526] loop3: detected capacity change from 0 to 256
[  119.009251][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.595377][ T6546] netlink: 52 bytes leftover after parsing attributes in process `syz.3.243'.
[  119.796660][ T6530] loop0: detected capacity change from 0 to 32768
[  119.802331][ T6530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.235 (6530)
[  119.811323][ T6530] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.811353][ T6530] BTRFS info (device loop0): using crc32c checksum algorithm
[  119.933232][ T6530] BTRFS info (device loop0): enabling ssd optimizations
[  119.933261][ T6530] BTRFS info (device loop0): turning on flush-on-commit
[  119.933277][ T6530] BTRFS info (device loop0): enabling free space tree
[  119.933292][ T6530] BTRFS info (device loop0): enabling auto defrag
[  119.933309][ T6530] BTRFS info (device loop0): use lzo compression, level 1
[  119.933327][ T6530] BTRFS info (device loop0): max_inline set to 4096
[  120.157991][   T33] audit: type=1800 audit(1788909515.189:2): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.235" name="file1" dev="loop0" ino=260 res=0 errno=0
[  120.341398][ T5630] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.623400][ T6586] loop1: detected capacity change from 0 to 256
[  120.739723][ T6586] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  121.067419][ T6598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'.
[  121.145278][ T6600] loop1: detected capacity change from 0 to 1024
[  121.175625][   T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  121.291273][ T6600] hfsplus: xattr search failed
[  121.348037][   T32] usb 5-1: Using ep0 maxpacket: 16
[  121.348824][   T32] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  121.350085][   T32] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.350130][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  121.350157][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  121.350177][   T32] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  121.350198][   T32] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  121.354075][   T32] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  121.354101][   T32] usb 5-1: Manufacturer: syz
[  121.442072][   T32] usb 5-1: config 0 descriptor??
[  121.742442][   T32] rc_core: IR keymap rc-hauppauge not found
[  121.742462][   T32] Registered IR keymap rc-empty
[  121.742875][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  121.758412][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  121.794507][   T32] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  121.811440][   T32] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5
[  121.818117][ T2244] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  121.861241][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.861897][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.883832][ T6621] loop3: detected capacity change from 0 to 2048
[  121.892562][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  121.913397][ T6621] udf: Unknown parameter 'shorta�'
[  121.919505][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  121.935780][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  121.961759][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  121.971577][ T2244] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  121.976167][ T2244] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  121.976195][ T2244] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  121.978262][ T2244] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  121.978287][ T2244] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  121.982328][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  121.985389][ T2244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.985410][ T2244] usb 1-1: Product: syz
[  121.985421][ T2244] usb 1-1: Manufacturer: syz
[  121.985434][ T2244] usb 1-1: SerialNumber: syz
[  122.014627][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  122.040361][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  122.069664][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  122.085822][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  122.105707][   T32] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  122.131745][   T32] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[  122.131769][   T32] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  122.201607][ T5735] usb 5-1: USB disconnect, device number 3
[  122.980421][ T2244] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected
[  122.995674][ T2244] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  123.002086][ T2244] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  123.009262][ T2244] usb 1-1: USB disconnect, device number 3
[  123.155217][ T6626] loop1: detected capacity change from 0 to 131072
[  123.161327][ T2244] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[  123.162998][ T6626] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0)
[  123.163023][ T6626] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  123.170281][ T2244] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[  123.171357][ T2244] ti_usb_3410_5052 1-1:2.0: device disconnected
[  123.189373][ T6626] F2FS-fs (loop1): invalid crc value
[  123.278058][ T6626] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  123.285363][ T6626] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  123.285392][ T6626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  123.738034][ T6648] erspan0: entered promiscuous mode
[  123.760088][ T6652] CacheFiles: Failed to register: -95
[  123.763400][   T33] audit: type=1400 audit(1788909518.789:3): apparmor="STATUS" info="missing required dfa" error=-71 profile="unconfined" name="p" pid=6649 comm="syz.2.282" name="p" offset=92
[  123.825298][ T6648] erspan0: left promiscuous mode
[  124.023791][ T6656] loop1: detected capacity change from 0 to 128
[  124.102832][ T6656] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  124.103779][ T6656] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.391778][ T5622] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.593307][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'.
[  124.597467][ T5807] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  124.654586][ T6675] vlan2: entered allmulticast mode
[  124.654612][ T6675] macsec0: entered allmulticast mode
[  124.654627][ T6675] veth1_macvtap: entered allmulticast mode
[  124.675236][ T6675] batman_adv: batadv0: Adding interface: vlan2
[  124.675301][ T6675] batman_adv: batadv0: The MTU of interface vlan2 is too small (1464) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.675327][ T6675] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active
[  124.750271][ T6681] loop3: detected capacity change from 0 to 2048
[  124.758314][ T5807] usb 5-1: Using ep0 maxpacket: 32
[  124.759172][ T5807] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  124.760125][ T5807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  124.762349][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.762370][ T5807] usb 5-1: Product: syz
[  124.762382][ T5807] usb 5-1: Manufacturer: syz
[  124.762394][ T5807] usb 5-1: SerialNumber: syz
[  124.772093][ T5807] usb 5-1: config 0 descriptor??
[  124.775450][ T6667] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  124.778996][ T5807] hub 5-1:0.0: bad descriptor, ignoring hub
[  124.779019][ T5807] hub 5-1:0.0: probe with driver hub failed with error -5
[  124.843076][ T6681]  loop3: p3 < >
[  124.859338][ T5807] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6
[  125.144181][ T5748] usb 5-1: USB disconnect, device number 4
[  125.144341][    C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  125.360909][   T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  125.364398][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'.
[  125.364426][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'.
[  125.506111][   T32] usb 3-1: Using ep0 maxpacket: 32
[  125.506951][   T32] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  125.508268][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.511977][   T32] usb 3-1: config 0 descriptor??
[  125.569973][ T6698] input: syz0 as /devices/virtual/input/input7
[  125.696062][ T5735] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  125.723617][   T32] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  125.735711][   T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  125.737093][   T32] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  125.737152][   T32] usb 3-1: media controller created
[  125.791764][   T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  125.845714][ T5735] usb 1-1: Using ep0 maxpacket: 8
[  125.849065][ T5735] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  125.878176][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.878206][ T5735] usb 1-1: Product: syz
[  125.878259][ T5735] usb 1-1: Manufacturer: syz
[  125.878274][ T5735] usb 1-1: SerialNumber: syz
[  125.884102][ T5735] usb 1-1: config 0 descriptor??
[  125.929442][ T5735] gspca_main: se401-2.14.0 probing 047d:5003
[  125.931546][   T32] az6027: usb out operation failed. (-71)
[  125.933632][   T32] az6027: usb out operation failed. (-71)
[  125.933650][   T32] stb0899_attach: Driver disabled by Kconfig
[  125.933745][   T32] az6027: no front-end attached
[  125.933745][   T32] 
[  125.935071][   T32] az6027: usb out operation failed. (-71)
[  125.935087][   T32] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  125.993943][   T32] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  126.015267][   T32] dvb-usb: schedule remote query interval to 400 msecs.
[  126.015320][   T32] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  126.034933][   T32] usb 3-1: USB disconnect, device number 5
[  126.048471][ T5748] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  126.140180][   T32] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  126.157460][ T6709] loop4: detected capacity change from 0 to 16
[  126.165647][ T3105] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  126.196475][ T6709] erofs (device loop4): mounted with root inode @ nid 36.
[  126.205717][ T5748] usb 2-1: Using ep0 maxpacket: 32
[  126.218785][ T5748] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  126.223249][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.223278][ T5748] usb 2-1: Product: syz
[  126.223293][ T5748] usb 2-1: Manufacturer: syz
[  126.223306][ T5748] usb 2-1: SerialNumber: syz
[  126.248506][ T5748] usb 2-1: config 0 descriptor??
[  126.292371][ T5735] gspca_se401: ExtraFeatures: 255
[  126.317399][ T3105] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00
[  126.318657][ T3105] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  126.318681][ T3105] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  126.320462][ T3105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  126.320509][ T3105] usb 4-1: Product: syz
[  126.320522][ T3105] usb 4-1: Manufacturer: syz
[  126.338193][ T3105] iuu_phoenix 4-1:1.0: iuu_phoenix converter detected
[  126.355224][ T3105] usb 4-1: iuu_phoenix converter now attached to ttyUSB0
[  126.458488][ T6713] loop4: detected capacity change from 0 to 256
[  126.512575][ T5735] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9
[  126.705228][ T5735] usb 1-1: USB disconnect, device number 4
[  126.884724][ T5748] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  126.884762][ T5748] peak_usb 2-1:0.0 can0: sending command failure: -22
[  126.884871][ T5748] peak_usb 2-1:0.0 can0: sending command failure: -22
[  126.936896][ T2244] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  126.971238][ T5748] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22
[  127.058277][ T6726] netlink: 88 bytes leftover after parsing attributes in process `syz.4.316'.
[  127.085829][ T2244] usb 3-1: Using ep0 maxpacket: 8
[  127.087361][ T2244] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  127.088806][ T2244] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 34, using maximum allowed: 30
[  127.088850][ T2244] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.088905][ T2244] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[  127.088930][ T2244] usb 3-1: config 0 interface 0 has no altsetting 0
[  127.088960][ T2244] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.100495][ T5735] usb 2-1: USB disconnect, device number 3
[  127.124625][ T2244] usb 3-1: config 0 descriptor??
[  127.579404][ T6702] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90
[  127.597269][   T32] usb 4-1: USB disconnect, device number 5
[  127.642584][   T32] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  127.652844][   T32] iuu_phoenix 4-1:1.0: device disconnected
[  127.970793][ T2244] hid-alps 0003:044E:120C.0001: failed read register (-71)
[  127.970910][ T2244] hid-alps 0003:044E:120C.0001: failed T4_PRM_ID_CONFIG_3 (-71)
[  128.020376][ T2244] hid-alps 0003:044E:120C.0001: hidraw0: USB HID v0.00 Joystick [HID 044e:120c] on usb-dummy_hcd.2-1/input0
[  128.049981][ T2244] usb 3-1: USB disconnect, device number 6
[  128.273557][ T6747] fido_id[6747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  128.513565][   T33] audit: type=1400 audit(1788909523.539:4): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6752 comm="syz.4.328" name="unknown" offset=16
[  128.539238][ T6746] loop0: detected capacity change from 0 to 32768
[  128.548625][ T6746] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.325 (6746)
[  128.605795][ T6746] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.605833][ T6746] BTRFS info (device loop0): using sha256 checksum algorithm
[  128.864466][ T6746] BTRFS info (device loop0): enabling ssd optimizations
[  128.864495][ T6746] BTRFS info (device loop0): turning on async discard
[  128.864511][ T6746] BTRFS info (device loop0): enabling free space tree
[  129.077672][ T5630] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.645810][ T5735] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  129.806053][ T5735] usb 3-1: Using ep0 maxpacket: 32
[  129.806698][ T5735] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  129.809051][ T5735] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  129.809086][ T5735] usb 3-1: config 0 interface 0 has no altsetting 0
[  129.809121][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.860975][ T6775] loop4: detected capacity change from 0 to 32768
[  129.883722][ T5735] usb 3-1: config 0 descriptor??
[  129.939269][ T6775] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  130.088419][ T6775] XFS (loop4): Ending clean mount
[  130.205858][ T5619] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  130.726867][ T5735] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0
[  130.726913][ T5735] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0
[  130.726935][ T5735] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0
[  130.726956][ T5735] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0
[  130.726977][ T5735] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0
[  130.814815][ T5735] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0
[  131.047712][ T6819] loop4: detected capacity change from 0 to 32768
[  131.076684][ T6819] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.346 (6819)
[  131.092963][ T6833] loop1: detected capacity change from 0 to 128
[  131.112311][ T6831] loop3: detected capacity change from 0 to 512
[  131.132866][ T6819] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.132904][ T6819] BTRFS info (device loop4): using crc32c checksum algorithm
[  131.191966][ T5735] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -110
[  131.216624][ T5735] usb 3-1: USB disconnect, device number 7
[  131.244716][ T6833] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.278290][ T6833] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  131.329313][ T6819] BTRFS info (device loop4): enabling ssd optimizations
[  131.329344][ T6819] BTRFS info (device loop4): turning on flush-on-commit
[  131.329359][ T6819] BTRFS info (device loop4): enabling free space tree
[  131.329374][ T6819] BTRFS info (device loop4): enabling auto defrag
[  131.329390][ T6819] BTRFS info (device loop4): use lzo compression, level 1
[  131.329409][ T6819] BTRFS info (device loop4): max_inline set to 4096
[  131.430566][ T5622] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.493366][ T5619] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.107764][ T6871] Zero length message leads to an empty skb
[  132.123133][ T6868] loop4: detected capacity change from 0 to 2048
[  132.215797][   T32] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  132.324155][ T6876] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  132.367370][   T32] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  132.368490][   T32] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  132.368516][   T32] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  132.373376][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.373403][   T32] usb 3-1: Product: syz
[  132.373416][   T32] usb 3-1: Manufacturer: syz
[  132.373429][   T32] usb 3-1: SerialNumber: syz
[  132.434789][   T32] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  132.459280][   T32] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  132.459280][   T32]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  133.011342][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  133.013234][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  133.254581][   T32] scsi host1: usb-storage 3-1:1.0
[  133.291819][   T32] usb 3-1: USB disconnect, device number 8
[  133.939409][ T6895] loop1: detected capacity change from 0 to 32768
[  133.977343][ T6902] loop3: detected capacity change from 0 to 32768
[  134.000388][ T6895] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.056183][ T6902] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  134.175221][ T6902] XFS (loop3): Ending clean mount
[  134.249758][ T6895] XFS (loop1): Ending clean mount
[  134.378676][ T6895] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  134.378740][ T6895] XFS (loop1): Unmount and run xfs_repair
[  134.378753][ T6895] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  134.378771][ T6895] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  134.378786][ T6895] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  134.378800][ T6895] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  134.378813][ T6895] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  134.378827][ T6895] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  134.378841][ T6895] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  134.378855][ T6895] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  134.378868][ T6895] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  134.378884][ T6895] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74
[  134.522479][ T6895] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  134.522538][ T6895] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  134.591747][ T5625] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  134.922895][ T6956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.393'.
[  135.136460][ T5622] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.222371][ T6952] loop4: detected capacity change from 0 to 40427
[  135.233669][ T6952] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  135.233697][ T6952] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  135.284840][ T6952] F2FS-fs (loop4): invalid crc value
[  135.488911][ T6952] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  135.533066][ T6952] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  135.533107][ T6952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  135.854683][ T6985] xt_hashlimit: size too large, truncated to 1048576
[  136.826461][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.421'.
[  137.958954][ T7069] loop4: detected capacity change from 0 to 64
[  138.222744][ T7071] loop3: detected capacity change from 0 to 8192
[  138.239037][ T7071] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  138.319256][ T7051] loop0: detected capacity change from 0 to 32768
[  138.482828][ T7051] JBD2: Ignoring recovery information on journal
[  138.693686][ T7051] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  139.018308][ T7088] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  139.018580][ T7088] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  139.227195][ T5630] ocfs2: Unmounting device (7,0) on (node local)
[  139.478314][ T7075] loop1: detected capacity change from 0 to 40427
[  139.491854][ T7075] F2FS-fs: heap/no_heap options were deprecated
[  139.504579][ T7075] F2FS-fs (loop1): build fault injection rate: 19
[  139.504605][ T7075] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  139.522329][ T7075] F2FS-fs (loop1): invalid crc value
[  139.572003][ T7075] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa62/0x1940
[  139.831084][ T7112] nvme_fcloop: unknown parameter or missing value 'ww'
[  139.929884][ T7075] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  139.960369][ T7075] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  139.998414][ T7075] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  140.024912][ T7075] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  140.054679][ T7075] F2FS-fs (loop1): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8ba/0xd90
[  140.054727][ T7075] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:14, node_footer[nid:14,ino:14,ofs:0,cpver:0,blkaddr:0]
[  140.213627][ T5622] syz-executor: attempt to access beyond end of device
[  140.213627][ T5622] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  140.213665][ T5622] F2FS-fs (loop1): inject write IO error in f2fs_write_end_bio of __submit_merged_bio+0x258/0x6a0
[  140.242923][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  140.242952][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  140.242964][ T5622] Call Trace:
[  140.242972][ T5622]  <TASK>
[  140.242980][ T5622]  dump_stack_lvl+0xe8/0x150
[  140.243015][ T5622]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  140.243043][ T5622]  f2fs_write_end_bio+0x1211/0x16e0
[  140.243085][ T5622]  ? blkg_put+0x22/0x240
[  140.243126][ T5622]  __submit_merged_bio+0x258/0x6a0
[  140.243147][ T5622]  ? rcu_is_watching+0x16/0xb0
[  140.243177][ T5622]  f2fs_submit_merged_write+0x27d/0x380
[  140.243206][ T5622]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  140.243246][ T5622]  f2fs_sync_node_pages+0x104b/0x1200
[  140.243288][ T5622]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  140.243361][ T5622]  f2fs_write_checkpoint+0xf8c/0x2710
[  140.243387][ T5622]  ? __lock_acquire+0x747/0x2de0
[  140.243448][ T5622]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  140.243540][ T5622]  kill_f2fs_super+0x2dd/0x700
[  140.243582][ T5622]  ? __pfx_kill_f2fs_super+0x10/0x10
[  140.243623][ T5622]  ? call_rcu+0x64d/0x8b0
[  140.243648][ T5622]  ? lockdep_hardirqs_on+0x7b/0x110
[  140.243687][ T5622]  deactivate_locked_super+0xbc/0x110
[  140.243712][ T5622]  cleanup_mnt+0x3d3/0x460
[  140.243743][ T5622]  task_work_run+0x1d9/0x260
[  140.243771][ T5622]  ? __pfx_task_work_run+0x10/0x10
[  140.243829][ T5622]  exit_to_user_mode_loop+0x204/0x770
[  140.243853][ T5622]  ? rcu_is_watching+0x16/0xb0
[  140.243884][ T5622]  do_syscall_64+0x328/0x520
[  140.243905][ T5622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.243926][ T5622]  ? clear_bhb_loop+0x70/0xc0
[  140.243951][ T5622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.243970][ T5622] RIP: 0033:0x7f9dd899f397
[  140.243990][ T5622] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  140.244004][ T5622] RSP: 002b:00007ffef0c28fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  140.244026][ T5622] RAX: 0000000000000000 RBX: 00007f9dd8a3448b RCX: 00007f9dd899f397
[  140.244039][ T5622] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef0c29090
[  140.244060][ T5622] RBP: 00007ffef0c29090 R08: 00007ffef0c2a090 R09: 00000000ffffffff
[  140.244073][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef0c2a120
[  140.244085][ T5622] R13: 00007f9dd8a3448b R14: 0000000000022304 R15: 00007ffef0c2a160
[  140.244121][ T5622]  </TASK>
[  140.244144][ T5622] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  140.244244][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  140.244266][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  140.244277][ T5622] Call Trace:
[  140.244284][ T5622]  <TASK>
[  140.244292][ T5622]  dump_stack_lvl+0xe8/0x150
[  140.244327][ T5622]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  140.244357][ T5622]  f2fs_write_end_bio+0x1211/0x16e0
[  140.244415][ T5622]  __submit_merged_bio+0x258/0x6a0
[  140.244437][ T5622]  ? rcu_is_watching+0x16/0xb0
[  140.244471][ T5622]  f2fs_submit_merged_write+0x27d/0x380
[  140.244503][ T5622]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  140.244549][ T5622]  f2fs_sync_node_pages+0x104b/0x1200
[  140.244599][ T5622]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  140.244683][ T5622]  f2fs_write_checkpoint+0xf8c/0x2710
[  140.244708][ T5622]  ? __lock_acquire+0x747/0x2de0
[  140.244774][ T5622]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  140.244877][ T5622]  kill_f2fs_super+0x2dd/0x700
[  140.244917][ T5622]  ? __pfx_kill_f2fs_super+0x10/0x10
[  140.244962][ T5622]  ? call_rcu+0x64d/0x8b0
[  140.244987][ T5622]  ? lockdep_hardirqs_on+0x7b/0x110
[  140.245028][ T5622]  deactivate_locked_super+0xbc/0x110
[  140.245081][ T5622]  cleanup_mnt+0x3d3/0x460
[  140.245114][ T5622]  task_work_run+0x1d9/0x260
[  140.245143][ T5622]  ? __pfx_task_work_run+0x10/0x10
[  140.245181][ T5622]  exit_to_user_mode_loop+0x204/0x770
[  140.245204][ T5622]  ? rcu_is_watching+0x16/0xb0
[  140.245236][ T5622]  do_syscall_64+0x328/0x520
[  140.245257][ T5622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.245277][ T5622]  ? clear_bhb_loop+0x70/0xc0
[  140.245304][ T5622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.245324][ T5622] RIP: 0033:0x7f9dd899f397
[  140.245343][ T5622] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  140.245358][ T5622] RSP: 002b:00007ffef0c28fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  140.245378][ T5622] RAX: 0000000000000000 RBX: 00007f9dd8a3448b RCX: 00007f9dd899f397
[  140.245391][ T5622] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef0c29090
[  140.245403][ T5622] RBP: 00007ffef0c29090 R08: 00007ffef0c2a090 R09: 00000000ffffffff
[  140.245416][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef0c2a120
[  140.245427][ T5622] R13: 00007f9dd8a3448b R14: 0000000000022304 R15: 00007ffef0c2a160
[  140.245466][ T5622]  </TASK>
[  140.280198][ T5622] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  140.827683][ T7126] cifs: Unknown parameter '��f#%�#�H����a�~��a;M)��Z��ʧu��g��Φ�R�3IN����c���4q��G�[SvNLh�/Ѣ�Q�.'
[  141.202255][ T7100] loop3: detected capacity change from 0 to 32768
[  141.259606][ T7100] 
[  141.259606][ T7100]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  141.259606][ T7100] 
[  141.316783][ T7100] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  141.316783][ T7100] 
[  141.345585][ T7100] ERROR: (device loop3): remounting filesystem as read-only
[  141.765725][ T5748] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  141.916686][ T5748] usb 2-1: Using ep0 maxpacket: 16
[  141.918924][ T5748] usb 2-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[  141.951993][ T5748] usb 2-1: config 0 interface 0 has no altsetting 0
[  141.952038][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.972266][ T5748] usb 2-1: config 0 descriptor??
[  142.018644][ T7152] loop3: detected capacity change from 0 to 512
[  142.028509][ T7152] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  142.085786][ T7152] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  142.161919][ T7160] loop4: detected capacity change from 0 to 512
[  142.284588][ T7160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.284740][ T7160] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.290371][ T7165] loop0: detected capacity change from 0 to 1024
[  142.291097][ T7165] EXT4-fs: Ignoring removed bh option
[  142.322496][ T7165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.322592][ T7165] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.338747][ T7165] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 3: comm syz.0.485: lblock 3 mapped to illegal pblock 3 (length 3)
[  142.341551][ T7165] EXT4-fs (loop0): Remounting filesystem read-only
[  142.373124][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  142.397326][ T5748] hid (null): bogus close delimiter
[  142.397445][ T5748] hid (null): nested delimiters
[  142.401650][ T5748] logitech-djreceiver 0003:046D:C51B.0003: unknown main item tag 0x0
[  142.401711][ T5748] logitech-djreceiver 0003:046D:C51B.0003: collection stack underflow
[  142.401735][ T5748] logitech-djreceiver 0003:046D:C51B.0003: item 0 2 0 12 parsing failed
[  142.402473][ T5748] logitech-djreceiver 0003:046D:C51B.0003: logi_dj_probe: parse failed
[  142.402549][ T5748] logitech-djreceiver 0003:046D:C51B.0003: probe with driver logitech-djreceiver failed with error -22
[  142.580656][ T7173] loop0: detected capacity change from 0 to 128
[  142.607485][ T7173] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  142.608380][ T7173] hpfs: filesystem error: improperly stopped
[  142.608402][ T7173] hpfs: You really don't want any checks? You are crazy...
[  142.610929][ T3105] usb 2-1: USB disconnect, device number 4
[  142.614822][ T7173] hpfs: hpfs_map_sector(): read error
[  142.614837][ T7173] hpfs: code page support is disabled
[  142.652067][ T7173] hpfs: hpfs_map_4sectors(): unaligned read
[  142.652369][ T7173] hpfs: hpfs_map_4sectors(): unaligned read
[  142.652380][ T7173] hpfs: filesystem error: unable to find root dir
[  142.734792][ T7175] loop3: detected capacity change from 0 to 512
[  142.825010][ T7179] loop0: detected capacity change from 0 to 256
[  142.908159][ T5619] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.983719][ T7179] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  142.983739][ T7179] FAT-fs (loop0): Filesystem has been set read-only
[  143.470028][ T7189] loop0: detected capacity change from 0 to 4096
[  143.524510][ T7189] ntfs3(loop0): ino=3, mi_enum_attr
[  143.746947][ T7189] ntfs3(loop0): ino=9, attr_set_size_ex
[  144.808858][ T7204] loop4: detected capacity change from 0 to 32768
[  144.815908][ T7204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.503 (7204)
[  144.877245][ T7204] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  144.877282][ T7204] BTRFS info (device loop4): using sha256 checksum algorithm
[  145.073336][ T7204] BTRFS info (device loop4): enabling ssd optimizations
[  145.073371][ T7204] BTRFS info (device loop4): turning on async discard
[  145.073387][ T7204] BTRFS info (device loop4): enabling free space tree
[  145.185754][ T7204] capability: warning: `syz.4.503' uses 32-bit capabilities (legacy support in use)
[  145.263660][ T5619] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.602853][ T7279] loop4: detected capacity change from 0 to 128
[  145.699558][ T7279] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  145.707350][ T7279] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  145.779453][ T5619] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  146.023447][ T7294] netlink: 40 bytes leftover after parsing attributes in process `syz.4.534'.
[  147.016066][ T3105] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  147.047550][ T7315] loop0: detected capacity change from 0 to 128
[  147.109144][ T7315] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.115172][ T7315] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  147.137464][ T7315] fscrypt (loop0, inode 12): Unsupported encryption flags (0x7b)
[  147.178003][ T3105] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  147.179188][ T3105] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  147.179213][ T3105] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  147.179231][ T3105] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  147.179250][ T3105] usb 2-1: config 220 has no interface number 2
[  147.179320][ T3105] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  147.179346][ T3105] usb 2-1: config 220 interface 0 has no altsetting 0
[  147.179364][ T3105] usb 2-1: config 220 interface 76 has no altsetting 0
[  147.179381][ T3105] usb 2-1: config 220 interface 1 has no altsetting 0
[  147.182959][ T3105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.182985][ T3105] usb 2-1: Product: syz
[  147.182998][ T3105] usb 2-1: Manufacturer: syz
[  147.183012][ T3105] usb 2-1: SerialNumber: syz
[  147.286999][ T5630] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.288174][ T7320] loop3: detected capacity change from 0 to 128
[  147.470179][ T7320] qnx6: superblock #1 checksum error
[  147.497284][ T3105] uvcvideo 2-1:220.1: Unknown video format 56000000-0000-0000-0000-000000000000
[  147.497355][ T3105] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  147.497382][ T3105] uvcvideo 2-1:220.0: No valid video chain found.
[  147.497439][ T3105] usb 2-1: selecting invalid altsetting 0
[  147.551055][   T33] audit: type=1326 audit(1788909542.579:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7325 comm="syz.4.549" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8a8a99e159 code=0x0
[  147.571459][ T3105] usb 2-1: selecting invalid altsetting 0
[  147.571487][ T3105] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  147.602205][ T3105] usb 2-1: USB disconnect, device number 5
[  148.430612][ T7357] netlink: 68 bytes leftover after parsing attributes in process `syz.0.563'.
[  148.430639][ T7357] netlink: 48 bytes leftover after parsing attributes in process `syz.0.563'.
[  148.594724][ T7363] loop4: detected capacity change from 0 to 512
[  148.594767][ T7366] program syz.3.566 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.769321][   T33] audit: type=1804 audit(1788909543.799:6): pid=7363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.567" name="/newroot/135/file0/memory.numa_stat" dev="loop4" ino=1048634 res=1 errno=0
[  149.275171][ T7398] netlink: 27 bytes leftover after parsing attributes in process `syz.0.581'.
[  149.284940][ T7392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.579'.
[  149.300963][ T7399] Bluetooth: MGMT ver 1.23
[  149.547019][ T7408] syz.0.587 uses obsolete (PF_INET,SOCK_PACKET)
[  149.640747][ T7412] loop1: detected capacity change from 0 to 164
[  150.260855][ T7413] loop4: detected capacity change from 0 to 32768
[  150.523040][ T7429] loop1: detected capacity change from 0 to 32768
[  150.567845][ T7429] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  150.567874][ T7429] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  150.604822][ T7413] XFS (loop4): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  150.699645][ T7429] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  150.704785][ T7413] XFS (loop4): ro->rw transition prohibited on norecovery mount
[  150.724495][ T5735] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  150.724517][ T5735] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  150.749860][ T5619] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  151.000909][ T5735] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 276ms
[  151.014691][ T5735] gfs2: fsid=syz:syz.0: jid=0: Done
[  151.016016][ T7429] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  151.027967][ T7450] netlink: 'syz.0.604': attribute type 5 has an invalid length.
[  151.714929][ T7472] loop4: detected capacity change from 0 to 256
[  151.716012][ T7472] exfat: Deprecated parameter 'utf8'
[  151.716073][ T7472] exfat: Deprecated parameter 'namecase'
[  151.716125][ T7472] exfat: Deprecated parameter 'namecase'
[  151.716187][ T7472] exfat: Deprecated parameter 'namecase'
[  151.716198][ T7472] exfat: Bad value for 'namecase'
[  152.141667][   T33] audit: type=1400 audit(1788909547.169:7): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=7485 comm="syz.3.618" name="p" offset=64
[  152.361214][ T7495] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  152.362385][ T5735] team_slave_0: entered promiscuous mode
[  152.362425][ T5735] team_slave_1: entered promiscuous mode
[  152.582738][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.623'.
[  152.582766][ T7499] tipc: Started in network mode
[  152.582781][ T7499] tipc: Node identity 7, cluster identity 4711
[  152.582793][ T7499] tipc: Node number set to 7
[  152.742808][ T7508] loop1: detected capacity change from 0 to 512
[  153.095612][ T3105] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  153.256670][ T3105] usb 1-1: Using ep0 maxpacket: 32
[  153.258309][ T3105] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  153.259489][ T3105] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  153.259515][ T3105] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  153.259539][ T3105] usb 1-1: config 0 interface 0 has no altsetting 0
[  153.291581][ T3105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.291613][ T3105] usb 1-1: Product: syz
[  153.291628][ T3105] usb 1-1: Manufacturer: syz
[  153.291643][ T3105] usb 1-1: SerialNumber: syz
[  153.345691][ T3105] usb 1-1: config 0 descriptor??
[  153.770844][ T3105] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  153.868731][ T7546] loop3: detected capacity change from 0 to 16
[  154.000339][ T3105] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  154.021297][ T3105] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22
[  154.069562][ T7550] loop3: detected capacity change from 0 to 128
[  154.084953][ T7550] EXT4-fs (loop3): Test dummy encryption mode enabled
[  154.100550][ T7550] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  154.100677][ T7550] System zones: 1-3, 19-19, 35-36
[  154.121352][ T7550] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  154.122089][ T7550] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.207073][ T5807] usb 1-1: USB disconnect, device number 5
[  154.338367][ T7550] fscrypt: AES-256-XTS using blk-crypto-fallback
[  154.385603][   T33] audit: type=1800 audit(1788909549.409:8): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.647" name="file3" dev="loop3" ino=12 res=0 errno=0
[  154.389808][ T7556] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  154.555274][ T5625] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  154.608315][ T7541] loop4: detected capacity change from 0 to 512
[  154.778921][ T7573] 0x000000000007-0x000000020000 : ""
[  154.802345][ T7573] ftl_cs: FTL header corrupt!
[  155.120541][ T7585] loop0: detected capacity change from 0 to 512
[  155.580399][ T7601] bonding: m is being created...
[  155.797718][ T7610] loop0: detected capacity change from 0 to 4096
[  155.801864][ T7610] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  155.969149][   T33] audit: type=1800 audit(1788909550.999:9): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.673" name="file1" dev="loop0" ino=30 res=0 errno=0
[  155.995719][ T7610] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  155.995890][ T7610] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex
[  156.006972][ T7609] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex
[  156.109400][ T6382] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  156.118865][ T5630] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  156.118894][ T5630] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  156.118908][ T5630] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  156.119033][ T6382] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  156.327018][ T3105] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  156.372767][   T33] audit: type=1400 audit(1788909551.399:10): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=7627 comm="syz.3.682" name="unknown" offset=16
[  156.475683][ T3105] usb 2-1: Using ep0 maxpacket: 32
[  156.476296][ T3105] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  156.477362][ T3105] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  156.479536][ T3105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.479563][ T3105] usb 2-1: Product: syz
[  156.479576][ T3105] usb 2-1: Manufacturer: syz
[  156.479589][ T3105] usb 2-1: SerialNumber: syz
[  156.485173][ T3105] usb 2-1: config 0 descriptor??
[  156.500788][ T7618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  156.550259][ T3105] hub 2-1:0.0: bad descriptor, ignoring hub
[  156.550290][ T3105] hub 2-1:0.0: probe with driver hub failed with error -5
[  156.570481][ T3105] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11
[  156.887036][ T2244] usb 2-1: USB disconnect, device number 6
[  156.887151][    C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  156.989418][ T7648] loop4: detected capacity change from 0 to 1024
[  157.080069][ T7652] loop3: detected capacity change from 0 to 512
[  157.085039][ T7652] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  157.120806][ T7652] EXT4-fs (loop3): 1 truncate cleaned up
[  157.144027][ T7652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.192180][ T7652] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  157.305794][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.534394][ T7664] loop1: detected capacity change from 0 to 16
[  157.596596][ T7664] erofs (device loop1): mounted with root inode @ nid 36.
[  157.808947][ T7672] loop3: detected capacity change from 0 to 1024
[  158.244220][ T7684] netlink: 'syz.3.708': attribute type 12 has an invalid length.
[  158.244248][ T7684] netlink: 'syz.3.708': attribute type 29 has an invalid length.
[  158.244261][ T7684] netlink: 148 bytes leftover after parsing attributes in process `syz.3.708'.
[  158.244280][ T7684] netlink: 'syz.3.708': attribute type 1 has an invalid length.
[  158.244292][ T7684] netlink: 'syz.3.708': attribute type 2 has an invalid length.
[  158.596976][ T7697] loop3: detected capacity change from 0 to 2048
[  158.632865][ T7697] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  158.633949][ T7697] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  158.679054][ T5715] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  158.691871][ T7697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.726864][ T7701] serio: Serial port ttyS3
[  158.835062][ T7697] overlayfs: upper fs needs to support d_type.
[  158.845552][ T5715] usb 1-1: Using ep0 maxpacket: 8
[  158.846194][ T5715] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  158.847464][ T5715] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  158.847517][ T5715] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.847538][ T5715] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  158.847561][ T5715] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  158.847583][ T5715] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.847636][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.015021][ T7697] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  159.015053][ T7697] overlayfs: failed to set xattr on upper
[  159.015061][ T7697] overlayfs: ...falling back to redirect_dir=nofollow.
[  159.015069][ T7697] overlayfs: ...falling back to index=off.
[  159.015075][ T7697] overlayfs: ...falling back to uuid=null.
[  159.159077][ T5715] usb 1-1: GET_CAPABILITIES returned 0
[  159.159130][ T5715] usbtmc 1-1:16.0: can't read capabilities
[  159.194169][ T5625] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh
[  159.194752][ T5625] UDF-fs: error (device loop3): udf_read_inode: (ino 1345) failed !bh
[  159.347262][ T7718] loop1: detected capacity change from 0 to 4096
[  159.358934][ T7718] EXT4-fs: Ignoring removed mblk_io_submit option
[  159.358956][ T7718] EXT4-fs: Ignoring removed nobh option
[  159.365246][ T7718] EXT4-fs (loop1): Test dummy encryption mode enabled
[  159.384944][ T3105] usb 1-1: USB disconnect, device number 6
[  159.449561][ T7718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.468710][ T5748] kernel read not supported for file / (pid: 5748 comm: kworker/0:5)
[  159.613415][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.091337][ T5901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.241536][ T5901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.449377][   T33] audit: type=1400 audit(1788909555.479:11): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7738 comm="syz.1.733"
[  160.458435][ T5901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.606384][ T7746] loop0: detected capacity change from 0 to 16
[  160.636377][ T7746] erofs (device loop0): mounted with root inode @ nid 36.
[  160.767369][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  160.772512][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  160.773901][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  160.808357][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  160.813152][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  160.817759][ T7746] syz.0.736: attempt to access beyond end of device
[  160.817759][ T7746] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16
[  160.820205][ T7746] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  160.820238][ T7746] erofs (device loop0): read error -117 @ 0 of nid 89
[  160.820432][   T33] audit: type=1800 audit(1788909555.849:12): pid=7746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.736" name="file2" dev="loop0" ino=89 res=0 errno=0
[  160.875286][ T5901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.667934][ T5901] bridge_slave_1: left allmulticast mode
[  161.667985][ T5901] bridge_slave_1: left promiscuous mode
[  161.670870][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.713396][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.744'.
[  161.746050][ T5901] bridge_slave_0: left allmulticast mode
[  161.746081][ T5901] bridge_slave_0: left promiscuous mode
[  161.750026][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.053285][ T5901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  162.068367][ T5901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  162.070926][ T5901] bond0 (unregistering): Released all slaves
[  162.570405][ T7790] ./dev/sda1: Can't open blockdev
[  162.927250][ T4933] Bluetooth: hci3: command tx timeout
[  163.037276][ T7807] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  163.072922][ T2244] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  163.200989][ T7813] loop1: detected capacity change from 0 to 128
[  163.227371][ T2244] usb 3-1: Using ep0 maxpacket: 16
[  163.228710][ T2244] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  163.231372][ T2244] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.231420][ T2244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  163.231446][ T2244] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  163.231464][ T2244] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  163.231484][ T2244] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.240955][ T2244] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  163.240983][ T2244] usb 3-1: Manufacturer: syz
[  163.249588][ T2244] usb 3-1: config 0 descriptor??
[  163.354754][ T7813] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.359729][ T7813] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  163.450761][ T7813] fscrypt (loop1, inode 12): Unsupported encryption flags (0x7b)
[  163.662708][ T5622] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.665429][ T5901] hsr_slave_0: left promiscuous mode
[  163.676614][ T5901] hsr_slave_1: left promiscuous mode
[  163.677640][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.677671][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.683273][ T5901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.683291][ T5901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.695727][ T2244] rc_core: IR keymap rc-hauppauge not found
[  163.695742][ T2244] Registered IR keymap rc-empty
[  163.695880][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.717341][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.744905][ T2244] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  163.759935][ T2244] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12
[  163.774761][ T5901] veth1_macvtap: left promiscuous mode
[  163.774914][ T5901] veth0_macvtap: left promiscuous mode
[  163.775037][ T5901] veth1_vlan: left promiscuous mode
[  163.775137][ T5901] veth0_vlan: left promiscuous mode
[  163.781541][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.798544][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.818649][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.836130][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.856733][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.878755][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.898398][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.916152][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.937752][ T5748] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  163.938154][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.955777][ T2244] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  163.985342][ T2244] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  163.985372][ T2244] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  164.049163][ T2244] usb 3-1: USB disconnect, device number 9
[  164.087254][ T5748] usb 1-1: Using ep0 maxpacket: 8
[  164.088247][ T5748] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  164.094778][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.094806][ T5748] usb 1-1: Product: syz
[  164.094821][ T5748] usb 1-1: Manufacturer: syz
[  164.094835][ T5748] usb 1-1: SerialNumber: syz
[  164.143320][ T5748] usb 1-1: config 0 descriptor??
[  164.351723][ T5748] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  164.519345][ T7842] loop1: detected capacity change from 0 to 764
[  164.591127][ T5901] team0 (unregistering): Port device team_slave_1 removed
[  164.613487][ T5901] team0 (unregistering): Port device team_slave_0 removed
[  164.667394][ T7842] isofs: Unable to find the "." directory for NFS.
[  164.775768][ T5748] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  164.800873][ T5748] usb 1-1: USB disconnect, device number 7
[  164.973558][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  165.005899][ T4933] Bluetooth: hci3: command tx timeout
[  166.051120][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state
[  166.051243][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.074131][ T7749] bridge_slave_0: entered allmulticast mode
[  166.090980][ T7749] bridge_slave_0: entered promiscuous mode
[  166.117516][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state
[  166.117635][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.117799][ T7749] bridge_slave_1: entered allmulticast mode
[  166.119957][ T7749] bridge_slave_1: entered promiscuous mode
[  166.254232][ T7749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  166.277208][ T7749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  166.482303][ T7749] team0: Port device team_slave_0 added
[  166.487570][ T7749] team0: Port device team_slave_1 added
[  166.551384][ T7890] netlink: 72 bytes leftover after parsing attributes in process `syz.0.778'.
[  166.686835][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  166.686856][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.686882][ T7749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.694506][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.694525][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.694550][ T7749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.841196][ T7884] loop1: detected capacity change from 0 to 32768
[  166.879104][ T7884] JBD2: Ignoring recovery information on journal
[  166.908299][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  166.989111][ T7749] hsr_slave_0: entered promiscuous mode
[  167.010120][ T7749] hsr_slave_1: entered promiscuous mode
[  167.011013][ T7749] debugfs: 'hsr0' already exists in 'hsr'
[  167.011034][ T7749] Cannot create hsr debugfs directory
[  167.013115][ T7895] loop0: detected capacity change from 0 to 256
[  167.085679][ T4933] Bluetooth: hci3: command tx timeout
[  167.091759][ T7884] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  167.109494][ T7895] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  167.272079][ T7884] (syz.1.779,7884,1):ocfs2_check_set_options:1251 ERROR: Invalid heartbeat mount options
[  167.595673][ T5622] ocfs2: Unmounting device (7,1) on (node local)
[  167.847480][ T7912] loop0: detected capacity change from 0 to 764
[  168.468181][ T7749] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  168.497413][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  168.501353][ T7749] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  168.524164][ T7932] loop0: detected capacity change from 0 to 256
[  168.538805][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  168.539735][ T7749] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  168.563312][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  168.564232][ T7749] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  168.592096][ T7749] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  168.633610][ T7932] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf3df13ec, utbl_chksum : 0xe619d30d)
[  168.659867][ T7932] exFAT-fs (loop0): valid_size(9000) is greater than size(0)
[  168.751168][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3
[  169.052898][ T7749] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.122950][ T7749] 8021q: adding VLAN 0 to HW filter on device team0
[  169.165905][ T4933] Bluetooth: hci3: command tx timeout
[  169.199293][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.199413][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.234816][ T7954] loop0: detected capacity change from 0 to 4096
[  169.253565][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.253693][ T6388] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.386243][ T7954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.630677][ T7949] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.795: corrupted inode contents
[  169.630813][ T7949] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  169.673275][ T7949] EXT4-fs error (device loop0): ext4_dirty_inode:6736: inode #15: comm syz.0.795: mark_inode_dirty error
[  169.673454][ T7949] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  169.678806][ T7949] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.795: corrupted inode contents
[  169.678881][ T7949] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  169.731340][ T7949] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.795: mark_inode_dirty error
[  169.731424][ T7949] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  169.732177][ T7949] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.795: corrupted inode contents
[  169.732249][ T7949] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  169.732857][ T7949] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #15: comm syz.0.795: mark_inode_dirty error
[  169.732928][ T7949] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  169.738630][ T7949] EXT4-fs error (device loop0): ext4_do_update_inode:5801: inode #15: comm syz.0.795: corrupted inode contents
[  169.738698][ T7949] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  169.779673][ T7949] EXT4-fs error (device loop0): ext4_truncate:4721: inode #15: comm syz.0.795: mark_inode_dirty error
[  169.820198][ T7949] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  169.854024][ T7949] EXT4-fs error (device loop0): ext4_evict_inode:280: comm syz.0.795: couldn't truncate inode 15 (err -117)
[  170.080714][ T5630] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.167589][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4
[  170.463614][ T8001] loop0: detected capacity change from 0 to 256
[  170.940145][ T8016] loop0: detected capacity change from 0 to 256
[  171.010924][ T8016] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9435e31, utbl_chksum : 0xe619d30d)
[  171.224685][ T7749] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.880239][ T7749] veth0_vlan: entered promiscuous mode
[  171.914872][ T7749] veth1_vlan: entered promiscuous mode
[  171.994787][ T7749] veth0_macvtap: entered promiscuous mode
[  171.999929][ T8019] loop4: detected capacity change from 0 to 32768
[  172.007641][ T8019] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  172.010094][ T8019] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.814 (8019)
[  172.065286][ T7749] veth1_macvtap: entered promiscuous mode
[  172.074749][ T8019] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  172.074788][ T8019] BTRFS info (device loop4): using sha256 checksum algorithm
[  172.163256][ T7749] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.212786][ T7749] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.265909][  T144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.326356][ T8019] BTRFS info (device loop4): rebuilding free space tree
[  172.422952][ T8019] BTRFS info (device loop4): disabling free space tree
[  172.424717][ T8019] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  172.424748][ T8019] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  172.513453][ T6387] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.513499][ T6387] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.513530][ T6387] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.566738][ T8019] BTRFS info (device loop4): enabling ssd optimizations
[  172.567437][ T8019] BTRFS info (device loop4): force clearing of disk cache
[  172.567458][ T8019] BTRFS info (device loop4): enabling auto defrag
[  172.567476][ T8019] BTRFS info (device loop4): max_inline set to 0
[  172.701505][ T6382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.701532][ T6382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.760974][ T6382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.760996][ T6382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.056083][ T5619] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  173.086672][ T8082] loop5: detected capacity change from 0 to 8
[  173.685805][ T5807] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  173.835691][ T5807] usb 6-1: Using ep0 maxpacket: 32
[  173.836414][ T5807] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  173.837658][ T5807] usb 6-1: config 0 has an invalid interface number: 119 but max is 0
[  173.837682][ T5807] usb 6-1: config 0 has no interface number 0
[  173.837756][ T5807] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  173.837779][ T5807] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  173.837803][ T5807] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 74, changing to 10
[  173.837830][ T5807] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 57855, setting to 1024
[  173.837856][ T5807] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  173.840460][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.840495][ T5807] usb 6-1: Product: syz
[  173.840510][ T5807] usb 6-1: Manufacturer: syz
[  173.840523][ T5807] usb 6-1: SerialNumber: syz
[  173.974629][ T5807] usb 6-1: config 0 descriptor??
[  174.047930][ T5807] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input13
[  174.793366][ T5807] usb 6-1: USB disconnect, device number 2
[  174.793471][    C0] bcm5974 6-1:0.119: trackpad urb failed: -19
[  175.256050][ T5748] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  175.441564][ T5748] usb 1-1: Using ep0 maxpacket: 8
[  175.444578][ T5748] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  175.471934][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.471966][ T5748] usb 1-1: Product: syz
[  175.471981][ T5748] usb 1-1: Manufacturer: syz
[  175.471996][ T5748] usb 1-1: SerialNumber: syz
[  175.519131][ T5748] usb 1-1: config 0 descriptor??
[  175.550141][ T5748] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  176.160329][ T5748] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  176.160805][ T5748] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  176.163141][ T5748] usb 1-1: USB disconnect, device number 8
[  177.189084][   T32] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  177.199872][ T8182] ieee802154 phy0 wpan0: encryption failed: -22
[  177.335808][   T32] usb 3-1: Using ep0 maxpacket: 32
[  177.336766][   T32] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  177.337864][   T32] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  177.337896][   T32] usb 3-1: config 0 has no interface number 0
[  177.341999][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.342026][   T32] usb 3-1: Product: syz
[  177.342040][   T32] usb 3-1: Manufacturer: syz
[  177.342055][   T32] usb 3-1: SerialNumber: syz
[  177.390807][   T32] usb 3-1: config 0 descriptor??
[  177.407220][   T32] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  177.545629][ T5804] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  177.629299][   T32] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  177.661723][   T32] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  177.695601][ T5804] usb 1-1: Using ep0 maxpacket: 16
[  177.699158][ T5804] usb 1-1: unable to get BOS descriptor or descriptor too short
[  177.699213][ T5804] usb 1-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85
[  177.700432][ T5804] usb 1-1: config 1 has an invalid interface number: 151 but max is 0
[  177.700456][ T5804] usb 1-1: config 1 has no interface number 0
[  177.700485][ T5804] usb 1-1: config 1 interface 151 has no altsetting 0
[  177.753248][ T5804] usb 1-1: string descriptor 0 read error: -22
[  177.753398][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.830832][ T5804] gspca_main: pac7311-2.14.0 probing 093a:260e
[  178.094579][ T8205] loop1: detected capacity change from 0 to 128
[  178.156348][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  178.160346][   T32] usb 3-1: USB disconnect, device number 10
[  178.190305][   T32] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  178.212068][   T32] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  178.215184][   T32] quatech2 3-1:0.51: device disconnected
[  178.243596][ T5804] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  178.243711][ T5804] pac7311 1-1:1.151: probe with driver pac7311 failed with error -71
[  178.249940][ T5804] usb 1-1: USB disconnect, device number 9
[  179.090699][ T8204] loop4: detected capacity change from 0 to 32768
[  179.100796][ T8204] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.878 (8204)
[  179.122533][ T8204] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.122578][ T8204] BTRFS info (device loop4): using sha256 checksum algorithm
[  179.215660][ T5748] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  179.321095][ T8204] BTRFS info (device loop4): enabling ssd optimizations
[  179.321130][ T8204] BTRFS info (device loop4): turning on async discard
[  179.321146][ T8204] BTRFS info (device loop4): enabling free space tree
[  179.383898][ T5748] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  179.384999][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.413445][ T5748] usb 1-1: config 0 descriptor??
[  179.426766][ T5748] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  179.838839][ T5748] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  179.838886][ T5748] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  180.001020][ T5619] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.026951][ T8273] loop5: detected capacity change from 0 to 256
[  180.057622][ T5748] usb 1-1: USB disconnect, device number 10
[  180.078062][ T8273] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  180.078093][ T8273] FAT-fs (loop5): Filesystem has been set read-only
[  180.322408][ T8284] loop5: detected capacity change from 0 to 256
[  181.039238][ T8306] BUG: using smp_processor_id() in preemptible [00000000] code: syz.5.906/8306
[  181.039268][ T8306] caller is ieee80211_tx_control_port+0xac7/0x1100
[  181.039306][ T8306] CPU: 1 UID: 0 PID: 8306 Comm: syz.5.906 Not tainted syzkaller #0 PREEMPT(full) 
[  181.039329][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  181.039342][ T8306] Call Trace:
[  181.039350][ T8306]  <TASK>
[  181.039360][ T8306]  dump_stack_lvl+0xe8/0x150
[  181.039393][ T8306]  check_preemption_disabled+0xcd/0xd0
[  181.039421][ T8306]  ieee80211_tx_control_port+0xac7/0x1100
[  181.039448][ T8306]  ? ieee80211_tx_control_port+0x71b/0x1100
[  181.039480][ T8306]  nl80211_tx_control_port+0x624/0x960
[  181.039520][ T8306]  ? __pfx_nl80211_tx_control_port+0x10/0x10
[  181.039551][ T8306]  ? nl80211_pre_doit+0x53d/0x890
[  181.039583][ T8306]  genl_family_rcv_msg_doit+0x233/0x340
[  181.039614][ T8306]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  181.039649][ T8306]  ? bpf_lsm_capable+0x9/0x20
[  181.039671][ T8306]  ? security_capable+0x7e/0x2c0
[  181.039710][ T8306]  genl_rcv_msg+0x614/0x7a0
[  181.039737][ T8306]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.039756][ T8306]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  181.039780][ T8306]  ? __pfx_nl80211_tx_control_port+0x10/0x10
[  181.039805][ T8306]  ? __pfx_nl80211_post_doit+0x10/0x10
[  181.039833][ T8306]  ? __asan_memcpy+0x40/0x70
[  181.039855][ T8306]  ? __skb_clone+0x5c/0x6c0
[  181.039887][ T8306]  netlink_rcv_skb+0x226/0x4a0
[  181.039916][ T8306]  ? __pfx_genl_rcv_msg+0x10/0x10
[  181.039940][ T8306]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  181.039985][ T8306]  ? down_read+0x2b9/0x320
[  181.040010][ T8306]  genl_rcv+0x28/0x40
[  181.040030][ T8306]  netlink_unicast+0x7bd/0x940
[  181.040064][ T8306]  netlink_sendmsg+0x7c3/0xae0
[  181.040095][ T8306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.040130][ T8306]  ? apparmor_socket_sendmsg+0x98/0x360
[  181.040171][ T8306]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.040195][ T8306]  sock_sendmsg_nosec+0x13a/0x180
[  181.040228][ T8306]  ____sys_sendmsg+0x54e/0x850
[  181.040258][ T8306]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.040289][ T8306]  ? import_iovec+0x73/0xa0
[  181.040314][ T8306]  ___sys_sendmsg+0x2a5/0x360
[  181.040341][ T8306]  ? __lock_acquire+0x747/0x2de0
[  181.040368][ T8306]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.040396][ T8306]  ? futex_wait+0x2a2/0x390
[  181.040450][ T8306]  ? __fget_files+0x2a/0x420
[  181.040470][ T8306]  ? __fget_files+0x3a2/0x420
[  181.040504][ T8306]  __x64_sys_sendmsg+0x1b1/0x290
[  181.040531][ T8306]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  181.040578][ T8306]  do_syscall_64+0x166/0x520
[  181.040599][ T8306]  ? trace_irq_disable+0x3b/0x140
[  181.040621][ T8306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.040641][ T8306]  ? clear_bhb_loop+0x70/0xc0
[  181.040665][ T8306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.040686][ T8306] RIP: 0033:0x7f9e1f59e159
[  181.040705][ T8306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.040721][ T8306] RSP: 002b:00007f9e204a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  181.040745][ T8306] RAX: ffffffffffffffda RBX: 00007f9e1f825fa0 RCX: 00007f9e1f59e159
[  181.040760][ T8306] RDX: 0000000000000800 RSI: 0000200000003700 RDI: 0000000000000003
[  181.040772][ T8306] RBP: 00007f9e1f63503b R08: 0000000000000000 R09: 0000000000000000
[  181.040784][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  181.040795][ T8306] R13: 00007f9e1f826038 R14: 00007f9e1f825fa0 R15: 00007ffd2bfe18c8
[  181.040828][ T8306]  </TASK>