last executing test programs:

54.141670727s ago: executing program 1 (id=10):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

54.008530933s ago: executing program 1 (id=12):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x00', &(0x7f00000004c0)='!', 0x1)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1)
tkill(r1, 0xb)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2200110, &(0x7f0000000180)=ANY=[@ANYBLOB='iocharset=macromanian,dmask=00000000000000000000000,errors=remount-ro,errors=continue,fmask=00000000000000000122753,uid=', @ANYRESOCT=0x0, @ANYRES64=0x0], 0x4, 0x1539, &(0x7f0000000c80)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x60, 0xbb, 0x41, 0x8, 0xc2e, 0x700, 0xe13b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x1, 0x2, 0x23, 0x53, 0x83, 0x3, [], [{{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0)

52.34608174s ago: executing program 1 (id=19):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101})
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000000))

51.391570608s ago: executing program 1 (id=24):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvTLulwI9fK+ILCFJFI/GlpeVFDl40mnDQxEQPGE+1LaRSqKE1EUK0esCjIfFu/C+MJ70Y9aKJV70bEmK4gHpZMzsztLS77ZZud4H9fJLZfZ6Z2X2e78w8O8/Ms7sBdK2h7CGJ+F9E/B4RA3n29hWG8qeb1y9N/H390kQS1epbfyW19W5cvzRRrlq+bnueqVaL/JY65V5+N2J8ZmbqfJEfmT/7wcjchYsvTJ8dPz11eurc2PHjRw7v6zs2drQlcWZx3djz8eze3SfeufLGxMkr7/2UpJHHHcviaJWhfOvW9XSrC+uwHUvSSW/22F/k9v+yuKTekUAn9UREtrsqtfY/ED2x9daygXjts45WDthU1Wq1usqn8kIVuI8l0ekaAJ1Rnuiz699yalPX465w7eX8AiiL+2Yx5Ut6I80T+yvLrm9baSgiTi7881U2xSbdhwAAWOq7rP/zfL3+XxoP54m+7OH/xRjKYEQ8EBE7I+LBiNgVEQ9F1NZ9JCIeXWf5y0dIVvZ/0qt3HFwTsv7fS8XY1u39v7RcZbCnyO2oxV9JTk3PTB0qtsnBqGw5NZ1Mja5Sxvev/vZFo2VL+3/ZlJVf9gWLelztXXaDbnJ8fnwjMS917dOIPb314k9q4wJRjOvtjog9d1jG9LO9DZetHf8qGr9t06pfRzyT7/+FWBZ/KWk4Pjn64rGxoyP9MTN1aKQ8Klb6+dfLbzYqf0Pxt0C2/7fVPf5vxT+Y9EfMXbh4pjZeO7f+Mi7/8XnDa5p1Hv8ndhTHf1/ydm1GX7Hgo/H5+fOjEX3J6yvnjy2+W5kv18/iP3igfvvfGYtb4rGI2BsR+yLi8eyisKj7ExHxZEQcWCX+H1956v31x9+esdIs/sm19n8s3f/rT/Sc+eHbtePvj4hG+/9ILXWwmNPM51+zFdzItgMAAIB7Rf4d+CQdXkwnw8P5d/h3xbZ0ZnZu/rlTsx+em8y/Kz8YlbS80zWw5H7oaHFvuMyPLcsfLu4bf9mztZYfnpidmex08NDltq9o/2matf/Mnz2drh2w6Vowjgbco7R/6F7aP3SnZM32X2lbXYD2c/6H7lWv/X/ScO3hbza1MkBbOf9D92qi/S/kT417BcC9yfkfupf2D12p4W/j0w395L/tiX+L/zO8W+pz/ycivSuqcf8nepv+M4tGicrKtlwdyNt/NmdL3Vd1+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4LAAD///R05PQ=")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c})

51.268892976s ago: executing program 1 (id=25):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b0001000310030904"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

50.921391294s ago: executing program 1 (id=28):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000300), 0x4)
sendmmsg$inet_sctp(r0, &(0x7f0000003780)=[{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x643, @loopback, 0x7}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x0)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000)

50.871813348s ago: executing program 32 (id=28):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000300), 0x4)
sendmmsg$inet_sctp(r0, &(0x7f0000003780)=[{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x643, @loopback, 0x7}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x0)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000)

45.668852729s ago: executing program 0 (id=74):
syz_usb_connect$uac1(0x1, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12014103000000086b1d01014000010203030902720003010110b8090400000001"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

44.151680807s ago: executing program 0 (id=83):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584", @ANYBLOB="f327"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0xff, 0x0}, {0x0, 0x0}]})

42.860224235s ago: executing program 0 (id=87):
setpriority(0x3, 0x0, 0xfffffffd)

42.781893956s ago: executing program 0 (id=88):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd8880291"], 0x1, 0x5504, &(0x7f000000c0c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00')

41.885315548s ago: executing program 0 (id=91):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013c030000000000009500000000000000bc26000000000000bf67000000000000150200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050800000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)

41.158903775s ago: executing program 0 (id=96):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580))
ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0)

41.005311092s ago: executing program 33 (id=96):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580))
ioctl$PPPIOCSMRU1(r0, 0x40047452, 0x0)

19.955584935s ago: executing program 4 (id=245):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e24}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x4c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

19.582646918s ago: executing program 4 (id=247):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000380)={[{@coherency_buffered}, {@heartbeat_none}, {@user_xattr}, {@err_cont}, {@resv_level={'resv_level', 0x3d, 0x5}}, {@localflocks}, {@localflocks}, {@dir_resv_level}]}, 0x9, 0x4436, &(0x7f0000004480)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10000)

18.99134172s ago: executing program 4 (id=250):
syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000001880)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090285000301bbd0080904000000010100000a24017f0200030201020b24050600bf9b5ab6dc3e0c240202010202090800f701090401000001020000090401010101020000090501092000000180072501039a8556090402000001020000090402010101020000082402010101080a072401010203000905820920"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})

17.580937103s ago: executing program 4 (id=253):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48c5, &(0x7f0000000340)={[{@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@fat=@flush}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

17.387927252s ago: executing program 4 (id=255):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000480)="e4b5eea546a2", 0x6, 0x494}])

16.958172104s ago: executing program 4 (id=259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x4008800)

16.576920527s ago: executing program 34 (id=259):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x4008800)

2.360194464s ago: executing program 5 (id=347):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f0000000180)={0x20, 0x10, 0xc, {0xc, 0x21, "0d438966c5d2551cbe15"}}, 0x0, 0x0, 0x0}, 0x0)

550.032388ms ago: executing program 2 (id=374):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x808001, 0x0, 0x100000, 0x2080, 0x6add})

450.213741ms ago: executing program 2 (id=376):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

403.312515ms ago: executing program 5 (id=377):
keyctl$clear(0x5, 0xfffffffffffffffd)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0)

397.683588ms ago: executing program 3 (id=378):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a84000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000024000128014000180090001006c617374000000000400028014000180090001006c6173740000000004000280330001800a00010072656469720000000400028008000340000001"], 0xac}}, 0x40)

310.222353ms ago: executing program 3 (id=379):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f00000002c0)='./file1\x00', 0x842, &(0x7f0000000580)=ANY=[@ANYBLOB='iocharset=cp1250,discard,dmask=00000000000000000000002,time_offset=0x000000000000001e,umask=00000000000015761052113,umask=00000000000000000000174,dmask=000000000000006010,fmask=00000000000000000000000,allow_utime=00000000000000000000064,sys_tz,\x00\x00\x00\x00\x00\x00', @ANYRESDEC], 0x1, 0x1524, &(0x7f0000005340)="$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")
creat(&(0x7f0000000040)='./file1\x00', 0x5e)
rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00')
creat(&(0x7f0000000400)='./bus\x00', 0x0)

309.761096ms ago: executing program 2 (id=380):
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x24040040)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
rt_tgsigqueueinfo(0x0, 0x0, 0x2b, &(0x7f0000000240)={0x3f, 0x800, 0x5092})

229.515576ms ago: executing program 5 (id=381):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
listen(r0, 0x9)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)

229.200486ms ago: executing program 2 (id=382):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001880)="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", 0x410}], 0x1, &(0x7f0000000280)=[@assoc={0x18, 0x117, 0x4, 0x400}], 0x18, 0x200040d0}], 0x1, 0x840)
recvmsg(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000003a00)=""/4109, 0x100d}], 0x1}, 0x40010021)

228.83671ms ago: executing program 3 (id=383):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x36, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f00000001c0), 0x0}, 0x20)

168.496807ms ago: executing program 5 (id=384):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000100)={0x1, 0x2, 0xe9, 0x7fffffff}, 0x10)

168.30713ms ago: executing program 3 (id=385):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x1, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0)

105.795834ms ago: executing program 2 (id=386):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "8ecfed76987804355eef1c96d0a5dc8088d51fab38199181318a235d5e232022", "546475c16cfd5057fcd998a0b1c69a001ffb58270e704d67f90644fa4f31f3a9", "eb156683a9a0652b1b78d76a998fca545dc26f798111617387cd9dddd6c98f7d", "a7253723611295846d73f3da6103f71d00", "59e91335ba6d96215dd0eab058b3bcd8466b561000edb1ba95c57a83bfb3965e", "7a154e63370f1eb7a4c523d6", 0x7, 0x5, 0x1, 0x46, 0x20000000}})

105.406886ms ago: executing program 5 (id=387):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f2, 0x1)

50.727663ms ago: executing program 3 (id=388):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"})
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0})

50.290046ms ago: executing program 5 (id=389):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x44f, 0xb323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0xc5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x50, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)={0x40, 0xc, 0x8, {0x8, 0x22, "5f5503ea4785"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

261.209µs ago: executing program 2 (id=390):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=ANY=[@ANYBLOB="84010000100001000000000000000000ff020000000000000000000000000001ac1e010100000000000000000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc010000000000000000000000000000000000033c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000b0df000000008000fdffffff0a0000000000000000000000480001"], 0x184}}, 0x0)

0s ago: executing program 3 (id=391):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x1}, 0x18)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:42040' (ED25519) to the list of known hosts.
syzkaller login: [   56.220157][ T5817] cgroup: Unknown subsys name 'net'
[   56.311066][ T5817] cgroup: Unknown subsys name 'cpuset'
[   56.315900][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.285445][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.445313][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.466187][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.474541][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.495922][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.513036][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.515706][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.520790][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.523396][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.527652][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.530965][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.538725][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.546396][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.550755][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.554005][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.557562][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.902229][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   63.952641][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   63.992013][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.090915][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.093804][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.100212][ T5843] bridge_slave_0: entered allmulticast mode
[   64.105368][ T5843] bridge_slave_0: entered promiscuous mode
[   64.147630][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.150811][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.154526][ T5843] bridge_slave_1: entered allmulticast mode
[   64.159497][ T5843] bridge_slave_1: entered promiscuous mode
[   64.169428][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.172364][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.176318][ T5847] bridge_slave_0: entered allmulticast mode
[   64.179276][ T5847] bridge_slave_0: entered promiscuous mode
[   64.224655][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.227914][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.231172][ T5847] bridge_slave_1: entered allmulticast mode
[   64.235835][ T5847] bridge_slave_1: entered promiscuous mode
[   64.241325][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.277593][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.280775][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.283671][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.286932][ T5850] bridge_slave_0: entered allmulticast mode
[   64.290328][ T5850] bridge_slave_0: entered promiscuous mode
[   64.298395][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.302842][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.307066][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.309661][ T5850] bridge_slave_1: entered allmulticast mode
[   64.313168][ T5850] bridge_slave_1: entered promiscuous mode
[   64.328489][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.360454][ T5843] team0: Port device team_slave_0 added
[   64.384717][ T5847] team0: Port device team_slave_0 added
[   64.388999][ T5843] team0: Port device team_slave_1 added
[   64.393032][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.414637][ T5847] team0: Port device team_slave_1 added
[   64.431190][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.435406][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.438581][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.447863][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.464163][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.467406][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.480671][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.494208][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.499708][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.512350][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.519806][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.522664][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.533588][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.558155][ T5850] team0: Port device team_slave_0 added
[   64.563406][ T5850] team0: Port device team_slave_1 added
[   64.642085][ T5847] hsr_slave_0: entered promiscuous mode
[   64.646218][ T5847] hsr_slave_1: entered promiscuous mode
[   64.663964][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.669393][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.681725][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.706875][ T5843] hsr_slave_0: entered promiscuous mode
[   64.711083][ T5843] hsr_slave_1: entered promiscuous mode
[   64.714882][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   64.720429][ T5843] Cannot create hsr debugfs directory
[   64.723985][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.727734][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.740176][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.873205][ T5850] hsr_slave_0: entered promiscuous mode
[   64.877993][ T5850] hsr_slave_1: entered promiscuous mode
[   64.881151][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   64.883766][ T5850] Cannot create hsr debugfs directory
[   65.165981][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.177482][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.184246][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.201415][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.248092][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.261568][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.272537][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.290512][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.380258][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.392164][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.409030][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.422436][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.507261][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.548883][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   65.567324][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.570649][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.587244][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.590353][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.609726][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.616818][ T5853] Bluetooth: hci1: command tx timeout
[   65.619860][ T5853] Bluetooth: hci2: command tx timeout
[   65.622727][ T5853] Bluetooth: hci0: command tx timeout
[   65.671999][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   65.693255][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.696590][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.709911][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.722642][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.726067][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.778070][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   65.818718][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.821741][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.843628][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.846897][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.927507][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.947996][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.053361][ T5843] veth0_vlan: entered promiscuous mode
[   66.087753][ T5843] veth1_vlan: entered promiscuous mode
[   66.094843][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.132439][ T5843] veth0_macvtap: entered promiscuous mode
[   66.144966][ T5843] veth1_macvtap: entered promiscuous mode
[   66.181252][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.190348][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.208824][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.217865][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.226424][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.230965][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.246529][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.260741][ T5847] veth0_vlan: entered promiscuous mode
[   66.305139][ T5847] veth1_vlan: entered promiscuous mode
[   66.369570][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.377826][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.388317][ T5847] veth0_macvtap: entered promiscuous mode
[   66.402538][ T5847] veth1_macvtap: entered promiscuous mode
[   66.433310][ T5850] veth0_vlan: entered promiscuous mode
[   66.438708][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.442575][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.454002][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.467734][ T5850] veth1_vlan: entered promiscuous mode
[   66.478239][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.489924][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.493892][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.500850][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.517406][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.544715][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.567385][ T5850] veth0_macvtap: entered promiscuous mode
[   66.590709][ T5850] veth1_macvtap: entered promiscuous mode
[   66.609718][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.622317][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.633781][ T5912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.657180][ T5912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.662479][ T5912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.667891][ T5912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.677927][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.681595][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.731532][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.747724][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.767718][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.774422][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.794155][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.800133][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.956684][ T5922] loop1: detected capacity change from 0 to 4096
[   66.960156][ T5922] =======================================================
[   66.960156][ T5922] WARNING: The mand mount option has been deprecated and
[   66.960156][ T5922]          and is ignored by this kernel. Remove the mand
[   66.960156][ T5922]          option from the mount to silence this warning.
[   66.960156][ T5922] =======================================================
[   66.992717][ T5923] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   67.127604][ T5927] Bluetooth: MGMT ver 1.23
[   67.181617][ T5920] loop2: detected capacity change from 0 to 32768
[   67.201893][ T5920] JBD2: Ignoring recovery information on journal
[   67.253437][ T5920] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   67.320187][ T5920] (syz.2.3,5920,1):ocfs2_get_suballoc_slot_bit:2819 ERROR: invalid inode 8192 requested
[   67.333899][ T5920] (syz.2.3,5920,1):ocfs2_get_suballoc_slot_bit:2844 ERROR: status = -22
[   67.347010][ T5920] (syz.2.3,5920,1):ocfs2_test_inode_bit:2926 ERROR: get alloc slot and bit failed -22
[   67.356907][ T5920] (syz.2.3,5920,1):ocfs2_test_inode_bit:2967 ERROR: status = -22
[   67.363130][ T5925] loop0: detected capacity change from 0 to 40427
[   67.417435][ T5925] F2FS-fs (loop0): invalid crc value
[   67.433126][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[   67.567636][ T5925] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   67.571921][ T5884] libceph: connect (1)[c::]:6789 error -101
[   67.574631][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[   67.587386][ T5925] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   67.658333][ T5843] syz-executor: attempt to access beyond end of device
[   67.658333][ T5843] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   67.664305][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   67.664319][ T5843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.664324][ T5843] Call Trace:
[   67.664328][ T5843]  <TASK>
[   67.664331][ T5843]  dump_stack_lvl+0x189/0x250
[   67.664347][ T5843]  ? __pfx_dump_stack_lvl+0x10/0x10
[   67.664355][ T5843]  ? __pfx_queue_work_on+0x10/0x10
[   67.664363][ T5843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   67.664372][ T5843]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   67.664386][ T5843]  f2fs_handle_critical_error+0x37c/0x540
[   67.664401][ T5843]  f2fs_write_end_io+0x886/0xb60
[   67.664416][ T5843]  __submit_merged_bio+0x27a/0x6a0
[   67.664429][ T5843]  __submit_merged_write_cond+0x255/0x530
[   67.664450][ T5843]  f2fs_write_data_pages+0x261d/0x3000
[   67.664477][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   67.664523][ T5843]  ? __lock_acquire+0xab9/0xd20
[   67.664539][ T5843]  ? do_raw_spin_lock+0x121/0x290
[   67.664553][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   67.664562][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   67.664573][ T5843]  do_writepages+0x32e/0x550
[   67.664590][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   67.664601][ T5843]  filemap_fdatawrite+0x199/0x240
[   67.664612][ T5843]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   67.664645][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[   67.664656][ T5843]  f2fs_sync_dirty_inodes+0x31f/0x830
[   67.664671][ T5843]  f2fs_write_checkpoint+0x95a/0x1df0
[   67.664691][ T5843]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   67.664722][ T5843]  ? kill_f2fs_super+0x298/0x6c0
[   67.664733][ T5843]  kill_f2fs_super+0x2c3/0x6c0
[   67.664744][ T5843]  ? __pfx_kill_f2fs_super+0x10/0x10
[   67.664750][ T5843]  ? radix_tree_delete_item+0x2b6/0x400
[   67.664763][ T5843]  ? shrinker_free+0x2ce/0x3e0
[   67.664774][ T5843]  deactivate_locked_super+0xbc/0x130
[   67.664784][ T5843]  cleanup_mnt+0x425/0x4c0
[   67.664793][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.664805][ T5843]  task_work_run+0x1d4/0x260
[   67.664818][ T5843]  ? __pfx_task_work_run+0x10/0x10
[   67.664826][ T5843]  ? __x64_sys_umount+0x122/0x160
[   67.664838][ T5843]  ? exit_to_user_mode_loop+0x40/0x110
[   67.664852][ T5843]  exit_to_user_mode_loop+0xec/0x110
[   67.664862][ T5843]  do_syscall_64+0x2bd/0x3b0
[   67.664871][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[   67.664880][ T5843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.664887][ T5843]  ? exc_page_fault+0x9f/0xf0
[   67.664898][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.664905][ T5843] RIP: 0033:0x7fbdd178ff17
[   67.664914][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   67.664920][ T5843] RSP: 002b:00007ffecda35918 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   67.664929][ T5843] RAX: 0000000000000000 RBX: 00007fbdd1811c05 RCX: 00007fbdd178ff17
[   67.664935][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecda359d0
[   67.664939][ T5843] RBP: 00007ffecda359d0 R08: 0000000000000000 R09: 0000000000000000
[   67.664944][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffecda36a60
[   67.664948][ T5843] R13: 00007fbdd1811c05 R14: 00000000000107b9 R15: 00007ffecda36aa0
[   67.664963][ T5843]  </TASK>
[   67.664966][ T5843] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   67.690972][ T5955] netlink: 'syz.2.16': attribute type 7 has an invalid length.
[   67.699477][ T5854] Bluetooth: hci0: command tx timeout
[   67.699517][ T5854] Bluetooth: hci2: command tx timeout
[   67.699534][ T5854] Bluetooth: hci1: command tx timeout
[   67.820420][ T5942] ceph: No mds server is up or the cluster is laggy
[   67.828741][ T5955] : entered promiscuous mode
[   67.836540][ T5884] libceph: connect (1)[c::]:6789 error -101
[   67.839310][ T5884] libceph: mon0 (1)[c::]:6789 connect error
[   67.870337][ T5956] loop1: detected capacity change from 0 to 256
[   67.882477][ T5956] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d)
[   68.166873][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   68.225809][  T791] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   68.295342][ T5898] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   68.316266][ T5884] usb 3-1: Using ep0 maxpacket: 8
[   68.322020][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   68.327142][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[   68.332674][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[   68.338995][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[   68.343865][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   68.352917][ T5884] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[   68.357752][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.361372][ T5884] usb 3-1: Product: syz
[   68.363222][ T5884] usb 3-1: Manufacturer: syz
[   68.366351][ T5884] usb 3-1: SerialNumber: syz
[   68.373443][ T5884] usb 3-1: config 0 descriptor??
[   68.385528][  T791] usb 2-1: Using ep0 maxpacket: 8
[   68.389910][  T791] usb 2-1: config 162 has an invalid interface number: 97 but max is 0
[   68.393117][  T791] usb 2-1: config 162 has no interface number 0
[   68.395993][  T791] usb 2-1: config 162 interface 97 has no altsetting 0
[   68.400978][  T791] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[   68.404910][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.410052][  T791] usb 2-1: Product: syz
[   68.411705][  T791] usb 2-1: Manufacturer: syz
[   68.413453][  T791] usb 2-1: SerialNumber: syz
[   68.438314][ T5884] rc_core: IR keymap rc-imon-rsc not found
[   68.441400][ T5884] Registered IR keymap rc-empty
[   68.445468][ T5898] usb 1-1: Using ep0 maxpacket: 16
[   68.449370][ T5884] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   68.459194][ T5884] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input4
[   68.468140][ T5898] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[   68.474382][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.487715][ T5898] usb 1-1: Product: syz
[   68.489747][ T5898] usb 1-1: Manufacturer: syz
[   68.491891][ T5898] usb 1-1: SerialNumber: syz
[   68.506174][ T5898] usb 1-1: config 0 descriptor??
[   68.600134][ T5897] usb 3-1: USB disconnect, device number 2
[   68.624204][  T791] metro_usb 2-1:162.97: Metrologic USB to Serial converter detected
[   68.640802][  T791] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0
[   68.658388][  T791] usb 2-1: USB disconnect, device number 2
[   68.664674][  T791] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[   68.672052][  T791] metro_usb 2-1:162.97: device disconnected
[   68.918559][ T5898] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[   68.924595][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   68.929040][ T5898] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[   68.932501][ T5898] usb 1-1: media controller created
[   68.947124][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   69.122898][ T5898] zl10353_read_register: readreg error (reg=127, ret==0)
[   69.125527][ T5898] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[   69.128920][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[   69.146323][ T5898] usb 1-1: USB disconnect, device number 2
[   69.215914][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[   69.293029][ T5970] wg1: entered promiscuous mode
[   69.298229][ T5970] wg1: entered allmulticast mode
[   69.376715][ T5973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.448375][ T5973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.522892][ T5973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.579956][ T5973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.669265][ T5912] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.690822][ T5912] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.732839][ T5912] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.755444][ T5912] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.776401][ T5853] Bluetooth: hci1: command tx timeout
[   69.780420][ T5854] Bluetooth: hci2: command tx timeout
[   69.782971][ T5854] Bluetooth: hci0: command tx timeout
[   69.993353][ T5976] loop0: detected capacity change from 0 to 32768
[   70.071272][ T5978] loop2: detected capacity change from 0 to 40427
[   70.071875][ T5976] overlayfs: upper fs needs to support d_type.
[   70.082160][ T5978] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   70.087615][ T5978] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   70.094986][ T5976] overlayfs: upper fs does not support tmpfile.
[   70.097625][ T5978] F2FS-fs (loop2): invalid crc value
[   70.127233][ T5976] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   70.146825][ T5976] ERROR: (device loop0): dbAlloc: the hint is outside the map
[   70.146825][ T5976] 
[   70.149559][ T5984] loop1: detected capacity change from 0 to 512
[   70.164655][ T5976] ERROR: (device loop0): remounting filesystem as read-only
[   70.169902][ T5984] EXT4-fs: Ignoring removed orlov option
[   70.173430][ T5984] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   70.177142][ T5976] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[   70.189364][ T5978] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   70.201179][ T5978] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   70.205086][ T5984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   70.217045][ T5978] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   70.221471][ T5984] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.24: corrupted in-inode xattr: e_value size too large
[   70.228361][ T5984] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.24: couldn't read orphan inode 15 (err -117)
[   70.234580][ T5984] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.248882][ T5984] overlayfs: upper fs needs to support d_type.
[   70.305698][ T5847] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[   70.313200][ T5847] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[   70.543871][ T5847] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.570617][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.664365][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.691949][ T5994] loop2: detected capacity change from 0 to 128
[   70.701270][ T5994] EXT4-fs: Ignoring removed nobh option
[   70.742584][ T5994] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   70.764861][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.766349][ T5994] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   70.812828][ T5994] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.31: bg 0: bad block bitmap checksum
[   70.871831][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.876436][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.880619][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.884644][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.888538][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.889669][ T5850] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   70.932299][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.941049][ T6001] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   71.022293][   T33] audit: type=1326 audit(1755554347.208:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.0.33" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdd178ebe9 code=0x0
[   71.143784][   T13] bridge_slave_1: left allmulticast mode
[   71.147037][   T13] bridge_slave_1: left promiscuous mode
[   71.150299][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.160213][   T13] bridge_slave_0: left allmulticast mode
[   71.167226][   T13] bridge_slave_0: left promiscuous mode
[   71.170001][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.302802][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.306030][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.319620][ T6020] loop0: detected capacity change from 0 to 512
[   71.345045][ T6020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.356755][ T6020] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.414875][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.500403][ T6026] delete_channel: no stack
[   71.560671][ T6030] loop0: detected capacity change from 0 to 164
[   71.583812][ T6030] iso9660: Corrupted directory entry in block 0 of inode 1792
[   71.686655][ T6036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.47'.
[   71.721078][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   71.727797][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.732313][   T13] bond0 (unregistering): Released all slaves
[   71.818749][ T5996] chnl_net:caif_netlink_parms(): no params data found
[   71.857192][ T5845] Bluetooth: hci0: command tx timeout
[   71.860020][ T5845] Bluetooth: hci2: command tx timeout
[   71.862502][ T6041] loop0: detected capacity change from 0 to 16
[   71.881349][ T6041] erofs (device loop0): mounted with root inode @ nid 36.
[   71.903387][ T6041] erofs (device loop0): readahead error at folio 2 @ nid 89
[   71.921961][ T6041] erofs (device loop0): readahead error at folio 1 @ nid 89
[   71.942935][ T6041] erofs (device loop0): read error -117 @ 1 of nid 89
[   71.949003][ T6041] erofs (device loop0): read error -117 @ 1 of nid 89
[   71.952736][ T6041] erofs (device loop0): read error -117 @ 1 of nid 89
[   71.955994][   T33] audit: type=1800 audit(1755554348.148:3): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.48" name="file3" dev="loop0" ino=89 res=0 errno=0
[   72.184597][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.193168][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.197605][ T5996] bridge_slave_0: entered allmulticast mode
[   72.201734][ T5996] bridge_slave_0: entered promiscuous mode
[   72.217205][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.220463][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.223215][ T5996] bridge_slave_1: entered allmulticast mode
[   72.230855][ T5996] bridge_slave_1: entered promiscuous mode
[   72.292214][ T5996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.300182][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.317431][ T5897] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   72.331293][ T5996] team0: Port device team_slave_0 added
[   72.335006][ T5996] team0: Port device team_slave_1 added
[   72.374595][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.377770][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.388328][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.400718][   T13] hsr_slave_0: left promiscuous mode
[   72.404217][   T13] hsr_slave_1: left promiscuous mode
[   72.409671][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   72.412912][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   72.422897][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   72.428888][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   72.448161][   T13] veth1_macvtap: left promiscuous mode
[   72.450653][   T13] veth0_macvtap: left promiscuous mode
[   72.455094][   T13] veth1_vlan: left promiscuous mode
[   72.459187][   T13] veth0_vlan: left promiscuous mode
[   72.478067][ T5897] usb 3-1: config 129 has an invalid interface number: 180 but max is 0
[   72.481902][ T5897] usb 3-1: config 129 has no interface number 0
[   72.484854][ T5897] usb 3-1: config 129 interface 180 has no altsetting 0
[   72.488967][ T5897] usb 3-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=9a.87
[   72.493299][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.715161][ T5897] usb 3-1: string descriptor 0 read error: -71
[   72.725810][ T5897] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251
[   72.731990][ T5897] gspca_sn9c20x: Write register 1000 failed -71
[   72.737579][ T5897] gspca_sn9c20x: Device initialization failed
[   72.740859][ T5897] gspca_sn9c20x 3-1:129.180: probe with driver gspca_sn9c20x failed with error -71
[   72.754534][ T5897] usb 3-1: USB disconnect, device number 3
[   72.799290][   T13] team0 (unregistering): Port device team_slave_1 removed
[   72.833893][   T13] team0 (unregistering): Port device team_slave_0 removed
[   72.976278][ T5853] Bluetooth: hci1: command tx timeout
[   73.247830][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.250863][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.272141][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.391425][ T5996] hsr_slave_0: entered promiscuous mode
[   73.394633][ T5996] hsr_slave_1: entered promiscuous mode
[   73.843008][ T5996] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.848195][ T6089] loop2: detected capacity change from 0 to 32768
[   73.858925][ T5996] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.869921][ T6089] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.61 (6089)
[   73.880333][ T5996] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.899216][ T5996] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.921860][ T6089] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   73.936650][ T6089] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   73.965888][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   74.055594][ T6089] BTRFS info (device loop2): rebuilding free space tree
[   74.070679][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.106426][ T6089] BTRFS info (device loop2): disabling free space tree
[   74.112740][ T5996] 8021q: adding VLAN 0 to HW filter on device team0
[   74.113958][ T6089] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   74.124323][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.126130][   T24] usb 1-1: Using ep0 maxpacket: 16
[   74.127984][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.156932][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   74.158974][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.163588][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.170924][ T6089] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   74.178523][   T24] usb 1-1: config 1 has an invalid interface number: 231 but max is 0
[   74.190186][   T24] usb 1-1: config 1 has no interface number 0
[   74.193014][   T24] usb 1-1: config 1 interface 231 has no altsetting 0
[   74.219141][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5
[   74.228197][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.242556][   T24] usb 1-1: Product: syz
[   74.251396][   T24] usb 1-1: Manufacturer: syz
[   74.253463][   T24] usb 1-1: SerialNumber: syz
[   74.333441][   T33] audit: type=1800 audit(1755554350.528:4): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.61" name="bus" dev="loop2" ino=263 res=0 errno=0
[   74.384250][   T33] audit: type=1800 audit(1755554350.578:5): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.61" name="bus" dev="loop2" ino=263 res=0 errno=0
[   74.517764][   T24] usbtest 1-1:1.231: couldn't get endpoints, -71
[   74.530813][   T24] usbtest 1-1:1.231: probe with driver usbtest failed with error -71
[   74.545568][   T24] usb 1-1: USB disconnect, device number 3
[   74.590467][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.632960][ T5996] veth0_vlan: entered promiscuous mode
[   74.665182][ T5996] veth1_vlan: entered promiscuous mode
[   74.702441][ T5996] veth0_macvtap: entered promiscuous mode
[   74.715486][ T5996] veth1_macvtap: entered promiscuous mode
[   74.721275][ T5850] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   74.727206][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.734913][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.771932][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.778444][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.781562][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.784460][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.893571][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.900511][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.931620][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.934315][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.984057][ T6146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.30'.
[   75.055370][ T5853] Bluetooth: hci1: command tx timeout
[   75.196449][ T6157] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   76.298112][   T10] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[   76.480783][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   76.501096][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.510891][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   76.528817][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.533600][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   76.547917][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   76.551745][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   76.563500][   T10] usb 1-1: string descriptor 0 read error: -22
[   76.575350][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   76.585610][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.593285][ T6170] loop2: detected capacity change from 0 to 32768
[   76.627956][ T6170] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   76.661822][ T6170] XFS (loop2): Ending clean mount
[   76.780576][ T5850] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   76.819896][   T10] usb 1-1: USB disconnect, device number 4
[   77.036652][ T5884] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   77.135734][ T5853] Bluetooth: hci1: command tx timeout
[   77.197127][ T5884] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   77.203835][ T5884] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   77.208407][ T5884] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[   77.213096][ T5884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   77.218076][ T5884] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   77.223806][ T5884] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   77.229653][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   77.234648][ T5884] usb 4-1: Product: syz
[   77.236984][ T5884] usb 4-1: Manufacturer: syz
[   77.247930][ T5884] cdc_wdm 4-1:1.0: skipping garbage
[   77.250107][ T5884] cdc_wdm 4-1:1.0: skipping garbage
[   77.258803][ T5884] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[   77.261073][ T5884] cdc_wdm 4-1:1.0: Unknown control protocol
[   77.625331][ T5884] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[   77.741033][ T6218] loop2: detected capacity change from 0 to 131072
[   77.746748][ T6218] F2FS-fs (loop2): Invalid log sectors per block(570425347) log sectorsize(9)
[   77.750483][ T6218] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   77.758836][ T6218] F2FS-fs (loop2): invalid crc value
[   77.778634][ T5884] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[   77.782423][ T5884] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[   77.795849][ T5884] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[   77.800155][ T5884] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[   77.804845][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[   77.816712][ T6218] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[   77.817343][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8
[   77.826048][ T6218] F2FS-fs (loop2): Bad quota inode 2:50331648
[   77.826072][ T6218] F2FS-fs (loop2): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[   77.833692][ T6218] F2FS-fs (loop2): Cannot turn on quotas: error -22
[   77.835155][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[   77.837325][ T6218] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   77.852831][ T6218] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   77.855850][ T6218] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[   77.858319][ T5884] usb 1-1: string descriptor 0 read error: -22
[   77.875656][ T5884] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[   77.880958][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.888133][ T5884] usb 1-1: config 0 descriptor??
[   77.892514][ T6220] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   77.902380][ T5884] hub 1-1:0.0: bad descriptor, ignoring hub
[   77.907563][ T5884] hub 1-1:0.0: probe with driver hub failed with error -5
[   77.919837][ T5884] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[   77.948403][    C1] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1
[   78.077915][ T5884] usb 4-1: USB disconnect, device number 2
[   78.140939][ T5898] usb 1-1: USB disconnect, device number 5
[   78.595356][ T5898] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   78.778810][ T5898] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[   78.781881][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.796782][ T5898] ums-cypress 3-1:1.0: USB Mass Storage device detected
[   79.049667][ T6243] loop0: detected capacity change from 0 to 40427
[   79.072306][ T6243] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[   79.079577][ T6243] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   79.172546][ T6243] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   79.180088][ T6243] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   79.182866][ T6243] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   79.215554][ T5853] Bluetooth: hci1: command tx timeout
[   79.219122][ T5897] usb 3-1: USB disconnect, device number 4
[   79.257589][ T6248] f2fs_ckpt-7:0: attempt to access beyond end of device
[   79.257589][ T6248] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[   79.265067][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: f2fs_ckpt-7:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   79.265085][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.265092][ T6248] Call Trace:
[   79.265097][ T6248]  <TASK>
[   79.265103][ T6248]  dump_stack_lvl+0x189/0x250
[   79.265122][ T6248]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.265134][ T6248]  ? __pfx_queue_work_on+0x10/0x10
[   79.265144][ T6248]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   79.265157][ T6248]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.265178][ T6248]  f2fs_handle_critical_error+0x37c/0x540
[   79.265217][ T6248]  f2fs_write_end_io+0x886/0xb60
[   79.265241][ T6248]  __submit_merged_bio+0x27a/0x6a0
[   79.265259][ T6248]  __submit_merged_write_cond+0x255/0x530
[   79.265278][ T6248]  f2fs_write_data_pages+0x261d/0x3000
[   79.265317][ T6248]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.265383][ T6248]  ? __lock_acquire+0xab9/0xd20
[   79.265403][ T6248]  ? do_raw_spin_lock+0x121/0x290
[   79.265424][ T6248]  ? do_raw_spin_unlock+0x4d/0x240
[   79.265435][ T6248]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.265450][ T6248]  do_writepages+0x32e/0x550
[   79.265473][ T6248]  ? do_raw_spin_unlock+0x4d/0x240
[   79.265487][ T6248]  filemap_fdatawrite+0x199/0x240
[   79.265501][ T6248]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   79.265548][ T6248]  ? do_raw_spin_unlock+0x4d/0x240
[   79.265563][ T6248]  f2fs_sync_dirty_inodes+0x31f/0x830
[   79.265584][ T6248]  f2fs_write_checkpoint+0x95a/0x1df0
[   79.265611][ T6248]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   79.265649][ T6248]  ? down_write+0x162/0x1f0
[   79.265658][ T6248]  ? __pfx_down_write+0x10/0x10
[   79.265672][ T6248]  ? __pfx___schedule+0x10/0x10
[   79.265690][ T6248]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[   79.265703][ T6248]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[   79.265725][ T6248]  issue_checkpoint_thread+0xd9/0x260
[   79.265738][ T6248]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[   79.265749][ T6248]  ? __pfx_autoremove_wake_function+0x10/0x10
[   79.265762][ T6248]  ? __kthread_parkme+0x7b/0x200
[   79.265773][ T6248]  ? __kthread_parkme+0x1a1/0x200
[   79.265789][ T6248]  kthread+0x711/0x8a0
[   79.265804][ T6248]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[   79.265814][ T6248]  ? __pfx_kthread+0x10/0x10
[   79.265827][ T6248]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.265838][ T6248]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.265850][ T6248]  ? __pfx_kthread+0x10/0x10
[   79.265862][ T6248]  ret_from_fork+0x3fc/0x770
[   79.265876][ T6248]  ? __pfx_ret_from_fork+0x10/0x10
[   79.265891][ T6248]  ? __switch_to_asm+0x39/0x70
[   79.265902][ T6248]  ? __switch_to_asm+0x33/0x70
[   79.265913][ T6248]  ? __pfx_kthread+0x10/0x10
[   79.265925][ T6248]  ret_from_fork_asm+0x1a/0x30
[   79.265950][ T6248]  </TASK>
[   79.380679][ T6248] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   79.383285][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: f2fs_ckpt-7:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   79.383297][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.383302][ T6248] Call Trace:
[   79.383306][ T6248]  <TASK>
[   79.383310][ T6248]  dump_stack_lvl+0x189/0x250
[   79.383325][ T6248]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.383334][ T6248]  ? __pfx_queue_work_on+0x10/0x10
[   79.383342][ T6248]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   79.383414][ T6248]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.383439][ T6248]  f2fs_handle_critical_error+0x37c/0x540
[   79.383455][ T6248]  f2fs_write_end_io+0x886/0xb60
[   79.383473][ T6248]  __submit_merged_bio+0x27a/0x6a0
[   79.383487][ T6248]  __submit_merged_write_cond+0x255/0x530
[   79.383500][ T6248]  f2fs_write_data_pages+0x261d/0x3000
[   79.383564][ T6248]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.383612][ T6248]  ? __lock_acquire+0xab9/0xd20
[   79.383628][ T6248]  ? do_raw_spin_lock+0x121/0x290
[   79.383643][ T6248]  ? do_raw_spin_unlock+0x4d/0x240
[   79.383652][ T6248]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.383663][ T6248]  do_writepages+0x32e/0x550
[   79.383680][ T6248]  ? do_raw_spin_unlock+0x4d/0x240
[   79.383691][ T6248]  filemap_fdatawrite+0x199/0x240
[   79.383702][ T6248]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   79.383736][ T6248]  ? do_raw_spin_unlock+0x4d/0x240
[   79.383747][ T6248]  f2fs_sync_dirty_inodes+0x31f/0x830
[   79.383763][ T6248]  f2fs_write_checkpoint+0x95a/0x1df0
[   79.383783][ T6248]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   79.383811][ T6248]  ? down_write+0x162/0x1f0
[   79.383817][ T6248]  ? __pfx_down_write+0x10/0x10
[   79.383828][ T6248]  ? __pfx___schedule+0x10/0x10
[   79.383841][ T6248]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[   79.383852][ T6248]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[   79.383868][ T6248]  issue_checkpoint_thread+0xd9/0x260
[   79.383877][ T6248]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[   79.383886][ T6248]  ? __pfx_autoremove_wake_function+0x10/0x10
[   79.383896][ T6248]  ? __kthread_parkme+0x7b/0x200
[   79.383905][ T6248]  ? __kthread_parkme+0x1a1/0x200
[   79.383916][ T6248]  kthread+0x711/0x8a0
[   79.383928][ T6248]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[   79.383936][ T6248]  ? __pfx_kthread+0x10/0x10
[   79.383946][ T6248]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.383954][ T6248]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.383964][ T6248]  ? __pfx_kthread+0x10/0x10
[   79.383973][ T6248]  ret_from_fork+0x3fc/0x770
[   79.383983][ T6248]  ? __pfx_ret_from_fork+0x10/0x10
[   79.384025][ T6248]  ? __switch_to_asm+0x39/0x70
[   79.384034][ T6248]  ? __switch_to_asm+0x33/0x70
[   79.384042][ T6248]  ? __pfx_kthread+0x10/0x10
[   79.384052][ T6248]  ret_from_fork_asm+0x1a/0x30
[   79.384072][ T6248]  </TASK>
[   79.384790][ T6248] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   79.511073][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: f2fs_ckpt-7:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   79.511086][ T6248] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   79.511091][ T6248] Call Trace:
[   79.511094][ T6248]  <TASK>
[   79.511097][ T6248]  dump_stack_lvl+0x189/0x250
[   79.511111][ T6248]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.511119][ T6248]  ? __pfx_queue_work_on+0x10/0x10
[   79.511127][ T6248]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   79.511137][ T6248]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.511150][ T6248]  f2fs_handle_critical_error+0x37c/0x540
[   79.511163][ T6248]  f2fs_write_end_io+0x886/0xb60
[   79.511177][ T6248]  __submit_merged_bio+0x27a/0x6a0
[   79.511189][ T6248]  __submit_merged_write_cond+0x255/0x530
[   79.511201][ T6248]  f2fs_write_data_pages+0x261d/0x3000
[   79.511225][ T6248]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.511265][ T6248]  ? __lock_acquire+0xab9/0xd20
[   79.511279][ T6248]  ? do_raw_spin_lock+0x121/0x290
[   79.511292][ T6248]  ? do_raw_spin_unlock+0x4d/0x240
[   79.511299][ T6248]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   79.511309][ T6248]  do_writepages+0x32e/0x550
[   79.511324][ T6248]  ? do_raw_spin_unlock+0x4d/0x240
[   79.511333][ T6248]  filemap_fdatawrite+0x199/0x240
[   79.511343][ T6248]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   79.511391][ T6248]  ? do_raw_spin_unlock+0x4d/0x240
[   79.511402][ T6248]  f2fs_sync_dirty_inodes+0x31f/0x830
[   79.511416][ T6248]  f2fs_write_checkpoint+0x95a/0x1df0
[   79.511433][ T6248]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   79.511457][ T6248]  ? down_write+0x162/0x1f0
[   79.511463][ T6248]  ? __pfx_down_write+0x10/0x10
[   79.511473][ T6248]  ? __pfx___schedule+0x10/0x10
[   79.511485][ T6248]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[   79.511494][ T6248]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[   79.511508][ T6248]  issue_checkpoint_thread+0xd9/0x260
[   79.511517][ T6248]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[   79.511524][ T6248]  ? __pfx_autoremove_wake_function+0x10/0x10
[   79.511533][ T6248]  ? __kthread_parkme+0x7b/0x200
[   79.511541][ T6248]  ? __kthread_parkme+0x1a1/0x200
[   79.511551][ T6248]  kthread+0x711/0x8a0
[   79.511560][ T6248]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[   79.511567][ T6248]  ? __pfx_kthread+0x10/0x10
[   79.511576][ T6248]  ? _raw_spin_unlock_irq+0x23/0x50
[   79.511583][ T6248]  ? lockdep_hardirqs_on+0x9c/0x150
[   79.511591][ T6248]  ? __pfx_kthread+0x10/0x10
[   79.511600][ T6248]  ret_from_fork+0x3fc/0x770
[   79.511609][ T6248]  ? __pfx_ret_from_fork+0x10/0x10
[   79.511619][ T6248]  ? __switch_to_asm+0x39/0x70
[   79.511626][ T6248]  ? __switch_to_asm+0x33/0x70
[   79.511633][ T6248]  ? __pfx_kthread+0x10/0x10
[   79.511641][ T6248]  ret_from_fork_asm+0x1a/0x30
[   79.511657][ T6248]  </TASK>
[   79.513098][ T6248] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   79.627811][ T5843] syz-executor: attempt to access beyond end of device
[   79.627811][ T5843] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   79.634776][ T6253] loop2: detected capacity change from 0 to 512
[   79.658141][ T6253] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   79.667408][ T6253] EXT4-fs (loop2): orphan cleanup on readonly fs
[   79.669485][ T6253] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.90: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[   79.671669][ T5843] syz-executor: attempt to access beyond end of device
[   79.671669][ T5843] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   79.676551][ T6253] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.90: Bad quota inode: 3, type: 0
[   79.703657][ T6253] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[   79.718493][ T6253] EXT4-fs (loop2): Cannot turn on quotas: error -117
[   79.721685][ T6253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   79.744146][ T6253] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.90: bg 0: block 64: padding at end of block bitmap is not set
[   79.775031][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.958857][ T6266] overlayfs: missing 'lowerdir'
[   80.259439][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.397239][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.526936][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.637408][ T6271] loop3: detected capacity change from 0 to 256
[   80.651199][ T6271] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x0aeab83c, utbl_chksum : 0xe619d30d)
[   80.663547][ T6271] exFAT-fs (loop3): valid_size(10) is greater than size(0)
[   80.668461][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.789891][   T12] bridge_slave_1: left allmulticast mode
[   80.792021][   T12] bridge_slave_1: left promiscuous mode
[   80.797822][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.803806][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   80.807814][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   80.810920][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   80.818809][   T12] bridge_slave_0: left allmulticast mode
[   80.820752][   T12] bridge_slave_0: left promiscuous mode
[   80.823124][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   80.826198][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.829327][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.064263][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.070489][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.074210][   T12] bond0 (unregistering): Released all slaves
[   81.459550][   T12] hsr_slave_0: left promiscuous mode
[   81.462850][   T12] hsr_slave_1: left promiscuous mode
[   81.466690][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   81.469848][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   81.476780][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   81.480595][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   81.508469][   T12] veth1_macvtap: left promiscuous mode
[   81.510997][   T12] veth0_macvtap: left promiscuous mode
[   81.513938][   T12] veth1_vlan: left promiscuous mode
[   81.517563][   T12] veth0_vlan: left promiscuous mode
[   82.089461][   T12] team0 (unregistering): Port device team_slave_1 removed
[   82.126879][   T12] team0 (unregistering): Port device team_slave_0 removed
[   82.715083][ T6276] chnl_net:caif_netlink_parms(): no params data found
[   82.905350][ T5845] Bluetooth: hci0: command tx timeout
[   83.003226][ T6306] loop3: detected capacity change from 0 to 512
[   83.010933][ T6306] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   83.017262][ T6306] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   83.027775][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.030298][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.032794][ T6276] bridge_slave_0: entered allmulticast mode
[   83.062006][ T6306] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #17: comm syz.3.102: iget: bad extra_isize 1568 (inode size 256)
[   83.067799][ T6306] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.102: couldn't read orphan inode 17 (err -117)
[   83.097404][ T6276] bridge_slave_0: entered promiscuous mode
[   83.098776][ T6306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.108667][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.110652][   T33] audit: type=1326 audit(1755554359.308:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e3f8ebe9 code=0x7ffc0000
[   83.115325][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.140530][   T33] audit: type=1326 audit(1755554359.318:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e3f8ebe9 code=0x7ffc0000
[   83.142264][ T5996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.147771][   T33] audit: type=1326 audit(1755554359.318:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa8e3f8ebe9 code=0x7ffc0000
[   83.147797][   T33] audit: type=1326 audit(1755554359.318:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e3f8ebe9 code=0x7ffc0000
[   83.147813][   T33] audit: type=1326 audit(1755554359.318:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e3f8ebe9 code=0x7ffc0000
[   83.147829][   T33] audit: type=1326 audit(1755554359.318:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8e3f8ebe9 code=0x7ffc0000
[   83.165421][ T6276] bridge_slave_1: entered allmulticast mode
[   83.170382][   T33] audit: type=1326 audit(1755554359.318:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e3f8ebe9 code=0x7ffc0000
[   83.186389][ T6276] bridge_slave_1: entered promiscuous mode
[   83.202633][   T33] audit: type=1326 audit(1755554359.318:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.102" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e3f8ebe9 code=0x7ffc0000
[   83.346398][ T6313] loop2: detected capacity change from 0 to 64
[   83.423781][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.445098][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.535825][ T6321] loop2: detected capacity change from 0 to 256
[   83.560206][ T6276] team0: Port device team_slave_0 added
[   83.576520][ T6276] team0: Port device team_slave_1 added
[   83.618900][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.621359][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.650724][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.668833][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.671432][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.692635][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.836932][ T6276] hsr_slave_0: entered promiscuous mode
[   83.848387][ T6276] hsr_slave_1: entered promiscuous mode
[   83.858691][ T6276] debugfs: 'hsr0' already exists in 'hsr'
[   83.861347][ T6276] Cannot create hsr debugfs directory
[   84.114107][ T6311] loop3: detected capacity change from 0 to 262144
[   84.120298][ T6311] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.103 (6311)
[   84.129668][ T6311] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   84.134012][ T6311] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[   84.138325][ T6311] BTRFS info (device loop3): using free-space-tree
[   84.183520][ T1234] BTRFS warning (device loop3): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[   84.201249][ T6311] BTRFS info (device loop3): read error corrected: ino 0 off 22036480 (dev /dev/loop3 sector 43040)
[   84.208160][ T6311] BTRFS info (device loop3): read error corrected: ino 0 off 22040576 (dev /dev/loop3 sector 43048)
[   84.213068][ T6311] BTRFS info (device loop3): read error corrected: ino 0 off 22044672 (dev /dev/loop3 sector 43056)
[   84.220276][ T6311] BTRFS info (device loop3): read error corrected: ino 0 off 22048768 (dev /dev/loop3 sector 43064)
[   84.270024][ T6311] BTRFS info (device loop3): balance: start -dstripes=0..0 -mstripes=0..0 -sstripes=0..0
[   84.282821][ T6311] BTRFS info (device loop3): relocating block group 30408704 flags metadata|dup
[   84.315526][ T6311] BTRFS info (device loop3): found 3 extents, stage: move data extents
[   84.338169][ T6311] BTRFS info (device loop3): relocating block group 22020096 flags system|dup
[   84.360628][ T6311] BTRFS info (device loop3): found 1 extents, stage: move data extents
[   84.370084][ T6276] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   84.386792][ T6311] BTRFS info (device loop3): balance: ended with status: 0
[   84.387766][ T6276] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   84.403537][ T6276] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   84.426145][ T6276] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   84.462948][ T5996] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   84.587233][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.638978][ T6276] 8021q: adding VLAN 0 to HW filter on device team0
[   84.657244][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.659831][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.671645][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.676137][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.811448][ T6276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.985346][ T5845] Bluetooth: hci0: command tx timeout
[   85.060805][ T6276] veth0_vlan: entered promiscuous mode
[   85.079210][ T6276] veth1_vlan: entered promiscuous mode
[   85.103252][ T6276] veth0_macvtap: entered promiscuous mode
[   85.112214][ T6276] veth1_macvtap: entered promiscuous mode
[   85.123608][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.134160][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.176758][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.185755][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.189623][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.193440][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.270228][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.272895][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.306636][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.309861][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.359281][ T6403] loop3: detected capacity change from 0 to 1024
[   85.363094][ T6403] EXT4-fs: Ignoring removed bh option
[   85.387409][ T6403] EXT4-fs: inline encryption not supported
[   85.401889][ T6403] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   85.416550][ T6403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[   85.434232][ T6403] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.109: lblock 2 mapped to illegal pblock 2 (length 1)
[   85.441649][ T6403] Quota error (device loop3): qtree_write_dquot: dquota write failed
[   85.444853][ T6403] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.109: lblock 0 mapped to illegal pblock 48 (length 1)
[   85.452826][ T6403] Quota error (device loop3): v2_write_file_info: Can't write info structure
[   85.458275][ T6403] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.109: Failed to acquire dquot type 0
[   85.463490][ T6403] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   85.473319][ T6403] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.109: mark_inode_dirty error
[   85.479996][ T6403] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   85.484155][ T6403] EXT4-fs (loop3): 1 orphan inode deleted
[   85.490285][ T6403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.496727][   T53] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:2: lblock 1 mapped to illegal pblock 1 (length 1)
[   85.504264][   T53] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u10:2: Failed to release dquot type 0
[   85.544186][ T5996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.548390][ T5996] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[   85.558460][ T5996] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   85.562014][ T5996] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[   85.905585][ T5897] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   86.205565][ T5897] usb 4-1: Using ep0 maxpacket: 32
[   86.217068][ T5897] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[   86.222580][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.229820][ T5897] usb 4-1: config 0 has no interface number 0
[   86.233674][ T5897] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[   86.243629][ T5897] usb 4-1: config 0 interface 133 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   86.301446][ T5897] usb 4-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   86.371727][ T5897] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[   86.385056][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.389152][ T5897] usb 4-1: Product: syz
[   86.390902][ T5897] usb 4-1: Manufacturer: syz
[   86.393205][ T5897] usb 4-1: SerialNumber: syz
[   86.404010][ T5897] usb 4-1: config 0 descriptor??
[   86.411844][ T6420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   86.637982][ T5897] usb 4-1: probing VID:PID(0424:012C)   
[   86.641109][ T5897] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B
[   86.643359][ T5897] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[   86.646172][ T5897] vub300 4-1:0.133: probe with driver vub300 failed with error -22
[   86.650166][ T5897] usb 4-1: USB disconnect, device number 3
[   86.660421][  T972] cfg80211: failed to load regulatory.db
[   86.882051][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'.
[   86.886354][ T6441] netlink: 'syz.4.113': attribute type 20 has an invalid length.
[   86.899543][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.900839][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'.
[   86.903069][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.906648][ T6441] netlink: 'syz.4.113': attribute type 20 has an invalid length.
[   86.910066][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.915840][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.919256][ T6441] Zero length message leads to an empty skb
[   86.953639][ T6443] loop4: detected capacity change from 0 to 256
[   87.012126][ T6447] loop2: detected capacity change from 0 to 512
[   87.017856][ T6447] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   87.030219][ T6447] EXT4-fs (loop2): 1 truncate cleaned up
[   87.034040][ T6447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.065821][ T5845] Bluetooth: hci0: command tx timeout
[   87.077702][ T6447] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.117: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   87.095119][ T6447] EXT4-fs (loop2): Remounting filesystem read-only
[   87.102620][ T6447] EXT4-fs warning (device loop2): ext4_rename_delete:3735: inode #2: comm syz.2.117: Deleting old file: nlink 5, error=-117
[   87.131840][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.183039][ T6458] syz_tun: entered allmulticast mode
[   87.186385][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'.
[   87.212143][ T6458] syz_tun (unregistering): left allmulticast mode
[   87.456354][  T972] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   87.615688][  T972] usb 5-1: Using ep0 maxpacket: 16
[   87.620018][  T972] usb 5-1: config index 0 descriptor too short (expected 292, got 36)
[   87.622993][  T972] usb 5-1: config 0 has an invalid interface number: 161 but max is 0
[   87.639865][ T6466] loop2: detected capacity change from 0 to 32768
[   87.648745][ T6466] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.122 (6466)
[   87.777666][  T972] usb 5-1: config 0 has no interface number 0
[   87.779793][  T972] usb 5-1: config 0 interface 161 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.784107][  T972] usb 5-1: config 0 interface 161 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.787955][  T972] usb 5-1: config 0 interface 161 has no altsetting 0
[   87.790227][  T972] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[   87.792847][ T6466] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   87.793214][  T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.801987][  T972] usb 5-1: config 0 descriptor??
[   87.806182][ T6466] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   87.809225][ T6466] BTRFS info (device loop2): disk space caching is enabled
[   87.822273][ T6466] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   87.863553][ T6466] BTRFS info (device loop2): rebuilding free space tree
[   87.871624][ T6466] BTRFS info (device loop2): disabling free space tree
[   87.874206][ T6466] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   87.878213][ T6466] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   87.959622][ T5850] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.219738][  T972] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[   88.222038][  T972] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[   88.224246][  T972] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[   88.239379][  T972] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[   88.242055][  T972] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[   88.248019][  T972] corsair 0003:1B1C:1B34.0001: failed to start in urb: -90
[   88.265435][  T972] corsair 0003:1B1C:1B34.0001: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.4-1/input161
[   88.425126][  T972] usb 5-1: USB disconnect, device number 2
[   88.454824][ T6489] loop3: detected capacity change from 0 to 32768
[   88.510641][ T5963]  loop3: p9 p11 p16
[   88.529588][ T6489]  loop3: p9 p11 p16
[   88.570214][ T6500] loop2: detected capacity change from 0 to 32768
[   88.580578][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory
[   88.593659][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[   88.597843][ T6500] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   88.608263][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[   88.655169][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[   88.656967][ T5963] udevd[5963]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[   88.662253][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory
[   88.677749][ T6500] XFS (loop2): Ending clean mount
[   88.731486][ T5850] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   88.887785][ T6527] loop3: detected capacity change from 0 to 128
[   88.912215][ T6527] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   88.926071][ T6527] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   88.953841][ T5996] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   89.135604][ T5853] Bluetooth: hci0: command tx timeout
[   89.210375][ T6551] netlink: 27 bytes leftover after parsing attributes in process `syz.4.138'.
[   89.784983][ T6571] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[   89.784983][ T6571]    program syz.4.142 not setting count and/or reply_len properly
[   90.500235][ T6587] loop3: detected capacity change from 0 to 32768
[   90.585987][  T972] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   90.820629][  T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.824627][  T972] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[   90.829215][  T972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.836762][  T972] usb 5-1: config 0 descriptor??
[   91.136763][ T5853] Bluetooth: hci3: command 0x1003 tx timeout
[   91.151784][ T5845] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   91.425066][  T972] nintendo 0003:057E:200E.0002: unbalanced delimiter at end of report description
[   91.428559][  T972] nintendo 0003:057E:200E.0002: HID parse failed
[   91.432527][  T972] nintendo 0003:057E:200E.0002: probe - fail = -22
[   91.435592][  T972] nintendo 0003:057E:200E.0002: probe with driver nintendo failed with error -22
[   91.565408][ T5898] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   91.626475][  T972] usb 5-1: USB disconnect, device number 3
[   91.727003][ T5898] usb 3-1: config 7 has an invalid interface number: 101 but max is 0
[   91.729622][ T5898] usb 3-1: config 7 has no interface number 0
[   91.734470][ T5898] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[   91.739289][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.742139][ T5898] usb 3-1: Product: syz
[   91.744026][ T5898] usb 3-1: Manufacturer: syz
[   91.746964][ T5898] usb 3-1: SerialNumber: syz
[   91.809228][ T6604] loop3: detected capacity change from 0 to 32768
[   91.907220][ T6604] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[   91.907243][ T6604]   allowing incompatible features above 0.0: (unknown version)
[   91.907250][ T6604]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   91.928365][ T6604] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[   91.932004][ T6604] bcachefs (loop3): initializing new filesystem
[   91.945561][ T6604] bcachefs (loop3): going read-write
[   91.956085][ T6604] bcachefs (loop3): marking superblocks
[   91.971106][ T5898] as10x_usb: device has been detected
[   91.973553][ T5898] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[   91.990779][ T5898] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[   92.008696][ T6604] bcachefs (loop3): initializing freespace
[   92.014122][ T5898] as10x_usb: error during firmware upload part1
[   92.019859][ T5898] Registered device Elgato EyeTV DTT Deluxe
[   92.021554][ T5898] usb 3-1: USB disconnect, device number 5
[   92.038985][ T5898] Unregistered device Elgato EyeTV DTT Deluxe
[   92.039511][ T6604] bcachefs (loop3): done initializing freespace
[   92.040217][ T5898] as10x_usb: device has been disconnected
[   92.046942][ T6604] bcachefs (loop3): reading snapshots table
[   92.049599][ T6604] bcachefs (loop3): reading snapshots done
[   92.114080][ T6604] bcachefs (loop3): done starting filesystem
[   92.192889][ T6621] loop4: detected capacity change from 0 to 256
[   92.193715][ T6604] syz.3.151 (6604) used greatest stack depth: 16984 bytes left
[   92.219563][ T6621] MINIX-fs: mounting file system with errors, running fsck is recommended
[   92.230065][ T6621] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[   92.243459][ T6621] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[   92.256751][ T5996] bcachefs (loop3): shutting down
[   92.259081][ T5996] bcachefs (loop3): going read-only
[   92.261604][ T5996] bcachefs (loop3): finished waiting for writes to stop
[   92.272188][ T5996] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[   92.323591][ T5996] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[   92.333865][ T5996] bcachefs (loop3): clean shutdown complete, journal seq 4
[   92.337539][ T5996] bcachefs (loop3): marking filesystem clean
[   92.364188][ T5996] bcachefs (loop3): shutdown complete
[   93.029733][ T6649] loop2: detected capacity change from 0 to 256
[   93.145094][ T6653] loop2: detected capacity change from 0 to 4096
[   93.152591][ T6653] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   93.866252][   T33] kauditd_printk_skb: 1 callbacks suppressed
[   93.866266][   T33] audit: type=1326 audit(1755554370.058:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.3.153" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8e3f8ebe9 code=0x0
[   93.932590][ T6671] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   94.085329][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   94.216012][ T6673] loop4: detected capacity change from 0 to 512
[   94.229835][ T6673] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   94.236373][ T6673] EXT4-fs (loop4): 1 truncate cleaned up
[   94.240627][ T6673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.265748][   T10] usb 3-1: Using ep0 maxpacket: 16
[   94.273814][   T10] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[   94.278112][   T10] usb 3-1: config 0 has no interface number 0
[   94.280711][   T10] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[   94.298777][ T6276] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.302965][   T10] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[   94.313737][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.317042][   T10] usb 3-1: Product: syz
[   94.318740][   T10] usb 3-1: Manufacturer: syz
[   94.320673][   T10] usb 3-1: SerialNumber: syz
[   94.332253][   T10] usb 3-1: config 0 descriptor??
[   94.470011][ T6681] syz.4.175 uses obsolete (PF_INET,SOCK_PACKET)
[   94.808561][ T6690] nfs4: Bad value for 'source'
[   94.933321][ T6696] netlink: 36 bytes leftover after parsing attributes in process `syz.3.182'.
[   94.977069][   T10] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71
[   95.001380][   T10] usb 3-1: USB disconnect, device number 6
[   95.049041][ T6700] ieee802154 phy0 wpan0: encryption failed: -22
[   95.198275][ T6708] loop3: detected capacity change from 0 to 1024
[   95.221426][ T6708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.233997][   T33] audit: type=1800 audit(1755554371.428:15): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.188" name="bus" dev="loop3" ino=18 res=0 errno=0
[   95.245708][ T6708] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.188: Allocating blocks 385-513 which overlap fs metadata
[   95.251756][ T6708] EXT4-fs (loop3): pa ffff8880298fa910: logic 16, phys. 129, len 24
[   95.254750][ T6708] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[   95.261473][ T6708] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 1
[   95.266539][ T6708] EXT4-fs (loop3): This should not happen!! Data will be lost
[   95.266539][ T6708] 
[   95.316348][ T5996] Trying to write to read-only block-device loop3
[   95.322317][ T5996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.544770][ T6714] loop3: detected capacity change from 0 to 32768
[   95.722861][ T6723] loop4: detected capacity change from 0 to 128
[   95.756460][ T6723] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   95.760458][ T6727] loop3: detected capacity change from 0 to 512
[   95.770838][ T6723] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.786266][ T6723] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full
[   95.839630][ T6276] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.128332][ T6759] ucma_write: process 128 (syz.3.207) changed security contexts after opening file descriptor, this is not allowed.
[   97.383207][ T6767] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.900118][ T6766] loop3: detected capacity change from 0 to 40427
[   97.986355][ T5897] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   98.055436][ T6795] netlink: 108 bytes leftover after parsing attributes in process `syz.3.218'.
[   98.059083][ T6795] netlink: 108 bytes leftover after parsing attributes in process `syz.3.218'.
[   98.062657][ T6795] netlink: 48 bytes leftover after parsing attributes in process `syz.3.218'.
[   98.087465][ T6795] netlink: 108 bytes leftover after parsing attributes in process `syz.3.218'.
[   98.091414][ T6795] netlink: 108 bytes leftover after parsing attributes in process `syz.3.218'.
[   98.115547][ T6795] netlink: 48 bytes leftover after parsing attributes in process `syz.3.218'.
[   98.176272][ T5897] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[   98.179973][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.183168][ T5897] usb 5-1: Product: syz
[   98.184893][ T5897] usb 5-1: Manufacturer: syz
[   98.209032][ T5897] usb 5-1: SerialNumber: syz
[   98.233491][ T5897] usb 5-1: config 0 descriptor??
[   98.259926][ T5897] cypress_m8 5-1:0.0: Nokia CA-42 V2 Adapter converter detected
[   98.286800][ T5897] nokiaca42v2 ttyUSB0: required endpoint is missing
[   98.472395][ T5897] usb 5-1: USB disconnect, device number 4
[   98.484923][ T5897] cypress_m8 5-1:0.0: device disconnected
[   99.695778][ T5853] Bluetooth: hci0: command 0x0405 tx timeout
[   99.971273][ T6866] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  100.177302][ T6868] loop3: detected capacity change from 0 to 32768
[  100.180580][ T6868] XFS: ikeep mount option is deprecated.
[  100.815331][ T6882] loop4: detected capacity change from 0 to 32768
[  100.827495][ T6882] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.243 (6882)
[  100.908208][ T6878] loop2: detected capacity change from 0 to 32768
[  100.916139][ T6878] XFS: noikeep mount option is deprecated.
[  100.922499][ T6882] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  100.935112][ T6882] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  100.949596][ T6882] BTRFS info (device loop4): using free-space-tree
[  100.953396][ T6878] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  100.963699][ T6878] XFS (loop2): cannot change alignment: superblock does not support data alignment
[  101.593612][ T6276] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  102.213683][ T6921] loop2: detected capacity change from 0 to 8192
[  102.401709][ T6916] loop4: detected capacity change from 0 to 32768
[  102.424365][ T6916] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  102.441841][   T13] (kworker/u8:1,13,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  102.448358][   T24] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  102.529850][ T6276] ocfs2: Unmounting device (7,4) on (node local)
[  102.606976][   T24] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  102.615331][   T24] usb 4-1: config 0 has no interface number 0
[  102.620403][   T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  102.623701][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.634110][   T24] usb 4-1: Product: syz
[  102.636392][   T24] usb 4-1: Manufacturer: syz
[  102.638167][   T24] usb 4-1: SerialNumber: syz
[  102.641613][   T24] usb 4-1: config 0 descriptor??
[  102.895477][  T972] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  103.070088][   T24] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  103.079734][   T24] usb 4-1: Firmware version (0.0) predates our first public release.
[  103.084107][   T24] usb 4-1: Please update to version 0.2 or newer
[  103.090138][  T972] usb 5-1: unable to get BOS descriptor or descriptor too short
[  103.094793][  T972] usb 5-1: not running at top speed; connect to a high speed hub
[  103.102393][  T972] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.107301][  T972] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  103.112491][  T972] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  103.125511][  T972] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  103.129634][  T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.133278][  T972] usb 5-1: Product: syz
[  103.135686][  T972] usb 5-1: Manufacturer: syz
[  103.138309][  T972] usb 5-1: SerialNumber: syz
[  103.392616][   T24] usb 4-1: USB disconnect, device number 4
[  103.422673][  T972] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  103.438521][  T972] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  103.444649][  T972] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  103.538932][  T972] usb 5-1: USB disconnect, device number 5
[  103.691760][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.040065][ T6938] loop4: detected capacity change from 0 to 128
[  104.678013][ T5860] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.692478][ T5860] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.869529][ T5860] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.873388][ T5860] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.938353][ T5860] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  104.942860][ T5860] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.069874][ T5860] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  105.074088][ T5860] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.117047][ T6957] warning: `syz.3.263' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  105.341976][ T5860] bridge_slave_1: left allmulticast mode
[  105.352914][ T5860] bridge_slave_1: left promiscuous mode
[  105.359865][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.386524][ T5860] bridge_slave_0: left allmulticast mode
[  105.388624][ T5860] bridge_slave_0: left promiscuous mode
[  105.390913][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.447183][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  105.452321][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  105.460374][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  105.467457][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  105.471917][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  105.766580][ T6969] loop2: detected capacity change from 0 to 32768
[  105.773933][ T6969] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.268 (6969)
[  105.802934][ T6969] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  105.808742][ T6969] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  105.813870][ T6969] BTRFS info (device loop2): using free-space-tree
[  105.982011][ T5850] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  106.064552][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.121059][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.132441][ T5860] bond0 (unregistering): Released all slaves
[  106.375490][ T5898] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  106.541273][ T5898] usb 3-1: Using ep0 maxpacket: 16
[  106.559074][ T5898] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  106.565911][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.568734][ T5898] usb 3-1: Product: syz
[  106.570385][ T5898] usb 3-1: Manufacturer: syz
[  106.571928][ T5860] hsr_slave_0: left promiscuous mode
[  106.574678][ T5860] hsr_slave_1: left promiscuous mode
[  106.580863][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.583601][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  106.585767][ T5898] usb 3-1: SerialNumber: syz
[  106.593445][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.596473][ T5898] usb 3-1: config 0 descriptor??
[  106.600403][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.619246][ T5860] veth1_macvtap: left promiscuous mode
[  106.621637][ T5860] veth0_macvtap: left promiscuous mode
[  106.623826][ T5860] veth1_vlan: left promiscuous mode
[  106.625933][ T5860] veth0_vlan: left promiscuous mode
[  106.794911][ T7003] loop3: detected capacity change from 0 to 32768
[  107.141703][ T5898] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  107.149309][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  107.154374][ T5898] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  107.158753][ T5898] usb 3-1: media controller created
[  107.178101][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  107.303574][ T7015] process 'syz.3.274' launched './file0' with NULL argv: empty string added
[  107.513584][ T5898] zl10353_read_register: readreg error (reg=127, ret==0)
[  107.517832][ T5898] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  107.520705][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  107.531823][ T5898] usb 3-1: USB disconnect, device number 7
[  107.539536][ T5853] Bluetooth: hci0: command tx timeout
[  107.573634][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  107.620074][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  107.664634][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  107.961096][ T7017] loop3: detected capacity change from 0 to 4096
[  108.252103][ T7024] tc_dump_action: action bad kind
[  108.508756][ T6970] chnl_net:caif_netlink_parms(): no params data found
[  108.534205][ T7040] loop3: detected capacity change from 0 to 256
[  109.270630][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.279542][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.282744][ T6970] bridge_slave_0: entered allmulticast mode
[  109.291563][ T6970] bridge_slave_0: entered promiscuous mode
[  109.308357][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.314659][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.328406][ T6970] bridge_slave_1: entered allmulticast mode
[  109.333984][ T6970] bridge_slave_1: entered promiscuous mode
[  109.534658][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.561087][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.690711][ T6970] team0: Port device team_slave_0 added
[  109.699242][ T6970] team0: Port device team_slave_1 added
[  109.739553][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.741700][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.762740][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.774532][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.783123][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  109.807595][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.898244][ T6970] hsr_slave_0: entered promiscuous mode
[  109.905851][ T6970] hsr_slave_1: entered promiscuous mode
[  109.908554][ T6970] debugfs: 'hsr0' already exists in 'hsr'
[  109.910549][ T6970] Cannot create hsr debugfs directory
[  109.935516][  T972] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  110.107626][  T972] usb 3-1: Using ep0 maxpacket: 16
[  110.118968][  T972] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  110.122631][  T972] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  110.142126][  T972] usb 3-1: Product: syz
[  110.143799][  T972] usb 3-1: Manufacturer: syz
[  110.163180][  T972] usb 3-1: SerialNumber: syz
[  110.169315][  T972] usb 3-1: config 0 descriptor??
[  110.381132][ T6970] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  110.397612][   T24] usb 3-1: USB disconnect, device number 8
[  110.446034][ T6970] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  110.470631][ T6970] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  110.490557][ T6970] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  110.622094][ T7057] loop3: detected capacity change from 0 to 262144
[  110.628451][ T7057] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.286 (7057)
[  110.635399][ T7057] BTRFS error: failed to open device for path /dev/loop3 with flags 0x23: -13
[  110.982252][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.088637][ T6970] 8021q: adding VLAN 0 to HW filter on device team0
[  111.143164][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.146670][ T5974] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.211738][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.215425][ T5974] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.404951][ T6970] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  112.419051][ T6970] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  112.566153][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.291'.
[  112.948831][ T7105] loop3: detected capacity change from 0 to 64
[  113.162501][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.793894][ T5897] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  113.968894][ T5897] usb 4-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[  113.973518][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.992237][ T5897] usb 4-1: config 0 descriptor??
[  114.010241][ T5897] usb-storage 4-1:0.0: USB Mass Storage device detected
[  114.039886][ T6970] veth0_vlan: entered promiscuous mode
[  114.055125][ T5897] usb-storage 4-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty)
[  114.055125][ T5897]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  114.061662][ T6970] veth1_vlan: entered promiscuous mode
[  114.091928][ T6970] veth0_macvtap: entered promiscuous mode
[  114.113906][ T6970] veth1_macvtap: entered promiscuous mode
[  114.148279][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  114.173678][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  114.213191][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.234424][ T5897] usb 4-1: USB disconnect, device number 5
[  114.239441][ T5912] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.257901][ T5912] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.283483][ T5912] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  114.434964][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.439802][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.502222][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  114.506988][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  114.619084][ T7143] veth0_to_bridge: entered promiscuous mode
[  114.634558][ T7142] veth0_to_bridge: left promiscuous mode
[  114.755623][ T7157] loop5: detected capacity change from 0 to 2048
[  114.838338][ T7157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.890468][   T36] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u10:1: bg 0: block 234: padding at end of block bitmap is not set
[  114.904119][   T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  114.910576][   T36] EXT4-fs (loop5): This should not happen!! Data will be lost
[  114.910576][   T36] 
[  114.914691][   T36] EXT4-fs (loop5): Total free blocks count 0
[  114.921148][   T36] EXT4-fs (loop5): Free/Dirty block details
[  114.923794][   T36] EXT4-fs (loop5): free_blocks=0
[  114.931485][   T36] EXT4-fs (loop5): dirty_blocks=32
[  114.934007][   T36] EXT4-fs (loop5): Block reservation details
[  114.937142][   T36] EXT4-fs (loop5): i_reserved_data_blocks=2
[  114.951471][   T36] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  115.535674][  T972] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  115.539745][ T7183] loop3: detected capacity change from 0 to 512
[  115.558295][ T7183] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  115.564957][ T7183] EXT4-fs (loop3): invalid journal inode
[  115.568866][ T7183] EXT4-fs (loop3): can't get journal size
[  115.574972][ T7183] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup
[  115.585127][ T7183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  115.618884][ T5996] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.731703][  T972] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  115.745426][  T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.757419][  T972] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  115.776388][  T972] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  115.781533][  T972] usb 6-1: Manufacturer: syz
[  115.789957][ T7190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.311'.
[  115.797058][  T972] usb 6-1: config 0 descriptor??
[  115.865659][  T972] rc_core: IR keymap rc-hauppauge not found
[  115.868381][  T972] Registered IR keymap rc-empty
[  115.871682][  T972] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  115.897803][  T972] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7
[  116.034976][    C1] igorplugusb 6-1:0.0: Error: urb status = -32
[  116.039574][ T5897] usb 6-1: USB disconnect, device number 2
[  116.179326][ T7212] loop2: detected capacity change from 0 to 1024
[  116.191491][ T7212] EXT4-fs: Ignoring removed orlov option
[  116.220914][ T7212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.262562][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.414371][ T7216] loop3: detected capacity change from 0 to 32768
[  116.437473][ T7223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'.
[  116.638094][ T7232] loop3: detected capacity change from 0 to 2048
[  116.726956][  T972] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  116.877520][  T972] usb 3-1: config 2 has an invalid interface number: 227 but max is 0
[  116.880918][  T972] usb 3-1: config 2 has no interface number 0
[  116.897636][  T972] usb 3-1: config 2 interface 227 has no altsetting 0
[  116.900635][  T972] usb 3-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=b3.c2
[  116.904117][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.921010][ T7250] loop5: detected capacity change from 0 to 256
[  116.924383][ T7250] exfat: Deprecated parameter 'utf8'
[  116.927122][ T7250] exfat: Deprecated parameter 'utf8'
[  116.929759][ T7250] exfat: Deprecated parameter 'utf8'
[  116.952859][ T7250] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  117.115029][ T7246] loop3: detected capacity change from 0 to 32768
[  117.127805][  T972] usb 3-1: USB disconnect, device number 9
[  117.170766][ T7246]  loop3: p9 p11 p16
[  117.828914][ T7257] can0: slcan on ttyS3.
[  117.908182][ T7257] can0 (unregistered): slcan off ttyS3.
[  118.101517][ T7255] loop2: detected capacity change from 0 to 32768
[  118.178906][ T7255] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.225852][ T7255] XFS (loop2): Ending clean mount
[  118.289438][ T7255] XFS (loop2): Quotacheck needed: Please wait.
[  118.320265][ T7255] XFS (loop2): Quotacheck: Done.
[  118.330391][ T7255] MTD: Couldn't look up './file0': -15
[  118.335480][ T7255] ./file0: Can't lookup blockdev
[  118.374119][ T5850] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  118.644745][ T7291] loop3: detected capacity change from 0 to 32768
[  118.663778][ T7291] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.344 (7291)
[  118.806175][ T7291] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.812841][ T7291] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  118.821259][ T7291] BTRFS info (device loop3): using free-space-tree
[  119.273869][ T5996] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.467661][ T5897] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  119.636330][ T5897] usb 6-1: Using ep0 maxpacket: 32
[  119.644325][ T5897] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[  119.654328][ T5897] usb 6-1: config 0 has no interface number 0
[  119.658176][ T5897] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  119.666178][ T5897] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  119.673524][ T5897] usb 6-1: config 0 interface 126 has no altsetting 0
[  119.688447][ T5897] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  119.696424][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.711512][ T5897] usb 6-1: Product: syz
[  119.712945][ T5897] usb 6-1: Manufacturer: syz
[  119.714996][ T5897] usb 6-1: SerialNumber: syz
[  119.732573][ T5897] usb 6-1: config 0 descriptor??
[  119.735172][ T7318] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  119.743347][ T7334] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  119.748943][ T7318] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  119.754573][ T7332] netlink: 'syz.2.352': attribute type 10 has an invalid length.
[  119.784037][ T7332] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.802506][ T7332] team0: Port device bond0 added
[  120.179860][ T5897] ir_usb 6-1:0.126: IR Dongle converter detected
[  120.202574][ T7353] netlink: 'syz.2.361': attribute type 10 has an invalid length.
[  120.203100][ T7355] netlink: 'syz.3.362': attribute type 1 has an invalid length.
[  120.242245][ T7353] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  120.384327][ T5897] usb 6-1: IR Dongle converter now attached to ttyUSB0
[  120.443777][ T7364] loop3: detected capacity change from 0 to 1764
[  120.560416][ T7367] loop2: detected capacity change from 0 to 1024
[  120.565005][ T7367] EXT4-fs: inline encryption not supported
[  120.574259][ T7367] EXT4-fs: Ignoring removed bh option
[  120.597514][ T7202] usb 6-1: USB disconnect, device number 3
[  120.629337][ T7367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.648228][   T33] audit: type=1804 audit(1755554396.838:16): pid=7369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.368" name="/newroot/124/file0" dev="tmpfs" ino=679 res=1 errno=0
[  120.683947][ T7202] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  120.691771][ T7202] ir_usb 6-1:0.126: device disconnected
[  120.830042][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'.
[  120.837930][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'.
[  120.864409][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.924000][ T7378] loop2: detected capacity change from 0 to 2048
[  120.957188][ T7378] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.078825][ T7388] loop2: detected capacity change from 0 to 512
[  121.102827][ T7389] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  121.110723][ T7388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.124439][ T7388] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.199505][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.209635][ T7398] loop3: detected capacity change from 0 to 256
[  121.409828][ T7410] loop3: detected capacity change from 0 to 65
[  121.565729][ T7420] netlink: 76 bytes leftover after parsing attributes in process `syz.2.390'.
Connection to localhost closed by remote host.
[  121.765624][    T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  122.158151][ T5860] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.262357][ T5996] syz-executor (5996) used greatest stack depth: 16568 bytes left
[  122.282180][ T5860] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.323263][ T5860] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.380796][ T5860] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.501751][ T5860] bridge_slave_1: left allmulticast mode
[  122.504402][ T5860] bridge_slave_1: left promiscuous mode
[  122.516393][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.538286][ T5860] bridge_slave_0: left allmulticast mode
[  122.541076][ T5860] bridge_slave_0: left promiscuous mode
[  122.543694][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.935701][ T5860] team0: Port device bond0 removed
[  122.939502][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.944338][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.949559][ T5860] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  122.957155][ T5860] bond0 (unregistering): Released all slaves
[  123.004811][ T5860] : left promiscuous mode
[  123.233890][ T5860] hsr_slave_0: left promiscuous mode
[  123.238062][ T5860] hsr_slave_1: left promiscuous mode
[  123.240554][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.243460][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.247088][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.249610][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.260830][ T5860] veth1_macvtap: left promiscuous mode
[  123.262947][ T5860] veth0_macvtap: left promiscuous mode
[  123.264890][ T5860] veth1_vlan: left promiscuous mode
[  123.267031][ T5860] veth0_vlan: left promiscuous mode
[  123.679058][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  123.719524][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  124.661122][ T5860] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.753783][ T5860] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.814137][ T5860] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.931745][ T5860] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.065858][ T5860] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.143380][ T5860] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.202471][ T5860] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.257851][ T5860] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.350446][ T5860] bridge_slave_1: left allmulticast mode
[  125.352914][ T5860] bridge_slave_1: left promiscuous mode
[  125.355563][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.359952][ T5860] bridge_slave_0: left allmulticast mode
[  125.361928][ T5860] bridge_slave_0: left promiscuous mode
[  125.363966][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.369500][ T5860] bridge_slave_1: left allmulticast mode
[  125.372072][ T5860] bridge_slave_1: left promiscuous mode
[  125.374465][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.380424][ T5860] bridge_slave_0: left allmulticast mode
[  125.383328][ T5860] bridge_slave_0: left promiscuous mode
[  125.386191][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.761239][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.767912][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.771857][ T5860] bond0 (unregistering): Released all slaves
[  126.115128][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.122162][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.126978][ T5860] bond0 (unregistering): Released all slaves
[  126.231075][ T5860] IPVS: stopping backup sync thread 6157 ...
[  126.503189][ T5860] hsr_slave_0: left promiscuous mode
[  126.507754][ T5860] hsr_slave_1: left promiscuous mode
[  126.510723][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.514178][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.519414][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.522446][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.535137][ T5860] hsr_slave_0: left promiscuous mode
[  126.538438][ T5860] hsr_slave_1: left promiscuous mode
[  126.541121][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.544458][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.551205][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.554901][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.589532][ T5860] veth1_macvtap: left promiscuous mode
[  126.592253][ T5860] veth0_macvtap: left promiscuous mode
[  126.594722][ T5860] veth1_vlan: left promiscuous mode
[  126.598049][ T5860] veth0_vlan: left promiscuous mode
[  126.601542][ T5860] veth1_macvtap: left promiscuous mode
[  126.603944][ T5860] veth0_macvtap: left promiscuous mode
[  126.606934][ T5860] veth1_vlan: left promiscuous mode
[  126.609244][ T5860] veth0_vlan: left promiscuous mode
[  127.029055][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  127.063854][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  127.753759][ T5860] team0 (unregistering): Port device team_slave_1 removed
[  127.789940][ T5860] team0 (unregistering): Port device team_slave_0 removed
[  132.741683][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.744505][ T1364] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
22:00:08  Registers:
info registers vcpu 0

CPU#0
RAX=99bee225f75e2a00 RBX=ffffffff81968308 RCX=99bee225f75e2a00 RDX=0000000000000001
RSI=ffffffff8d9b6d50 RDI=ffffffff8be33280 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37d30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32413ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 ffff000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=2b2552bcb5cba100 RBX=ffffffff81968308 RCX=2b2552bcb5cba100 RDX=0000000000000001
RSI=ffffffff8d9b6d50 RDI=ffffffff8be33280 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37d30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7933f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f33caf74c40 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
