last executing test programs:

1m1.78479317s ago: executing program 0 (id=236):
unshare(0x22020600)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20)

1m1.707003954s ago: executing program 0 (id=240):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000500)=0xfffffffc, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10)

1m1.706807641s ago: executing program 0 (id=241):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00?'], 0xb8}, 0x1, 0xfffff000}, 0x0)

1m1.657674041s ago: executing program 0 (id=243):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

1m1.568274859s ago: executing program 0 (id=245):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0)

1m1.209530631s ago: executing program 0 (id=252):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0xfb, 0x0, @remote}, 0x10)

1m1.016421568s ago: executing program 32 (id=252):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0xfb, 0x0, @remote}, 0x10)

3.517640125s ago: executing program 1 (id=826):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="110000001d00070f000000000000000007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

3.517271862s ago: executing program 1 (id=827):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)={0x20, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
read(r1, 0x0, 0x0)

2.639163905s ago: executing program 3 (id=829):
syz_emit_ethernet(0x4e, &(0x7f0000001500)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f9edff", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xfff, 0xfff8, "e169018abf3bba16f1cc4357d84e73a4"}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

2.112963467s ago: executing program 3 (id=830):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x20, r2, 0x501, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000054}, 0x0)

2.014956964s ago: executing program 3 (id=831):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x44}}, 0x1040)

2.014528392s ago: executing program 3 (id=832):
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080), 0x8)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x14, 0x1, 0x3d, 0x800000000}}, @mark={{0x10, 0x1, 0x24, 0xffffff1f}}], 0x24}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0x7, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000180)=""/110, &(0x7f00000002c0)=0x6e)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000000080))

1.26077933s ago: executing program 1 (id=839):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0x200000000000024f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.185623692s ago: executing program 1 (id=840):
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)

1.007294523s ago: executing program 3 (id=841):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
read$qrtrtun(0xffffffffffffffff, 0x0, 0x0)
fsopen(&(0x7f0000000000)='msdos\x00', 0x1)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x1000)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r5 = creat(0x0, 0x0)
r6 = fanotify_init(0xf00, 0x1)
fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0)
shmctl$IPC_RMID(r4, 0x0)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)

650.348899ms ago: executing program 1 (id=842):
semtimedop(0x0, 0x0, 0x0, 0x0)
semop(0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x564, &(0x7f0000000b00)="$eJzs3d9rW+UbAPDnpE33+7sOxvgqIoVdOJlL19YfE7yYl6LDgd7P0mZlNFlGk461Dtwu3I03MgQRB8Nr9d7L4T/gXzHQwZBRFPEmctKTmK3JmnXZmprPB872vjkne8+T9zzv3jcnIQEMrYn0j1zECxHxZRJxsG3faGQ7J9aPW3twdS7dkqjXP/o9iSR7rHl8kv29L6v8PyJ+/jzieG5ju9WV1cXZUqm4lNUna+VLk9WV1RMXyrMLxYXixemZmVNvzEy//dabfYv11bN/fvPhnfdOfXF07esf7x26mcTp2J/ta4/jKVxrr0zERPaa5OP0IwdO9aGxQZJs9wmwJSNZnucjHQMOxkiW9cB/32cRUQeGVCL/YUg15wHNtX2f1sE7xv131xdAG+MfXX9vJHY31kZ715KHVkbpene8D+2nbfz0262b6Rb9ex8CYFPXrkfEydHRjeNfko1/W3eyh2MebcP4B8/PnXT+81qn+U+uNf+JDvOffR1ydys2z//cvT4001U6/3un4/y3ddNqfCSrHWjM+fLJ+QulYjq2/S8ijkV+V1p/3P2cU2t36932tc//0i1tvzkXzM7j3uiuh58zP1ubfZqY292/HvFix/lv0ur/pEP/p6/H2R7bOFK89XK3fZvH/2zVv4t4pWP/51vHJI+/PznZuB4mm1fFRn/cOPJLt/a3O/60//eux/9XtiRs9X9mPGm/X1t98jZu7/672G3fVq//seTjRnkse+zKbK22NBUxlnyw8fHpf5/brDePT+M/dvTx41+n639PRHzSY/w3Dv/w0tbjf7bS+Oc7Xv/d+v/JC3ff//Tbzq3f7rH/X4+k7QZzL+Nfryf4VC8eAAAAAAAADJhcROyPJFdolXO5QmH98x2HY2+uVKnWjp+vLF+cj8Z3Zccjn2ve6T7Y9nmIqezzsM369CP1mYg4FBFfjexp1AtzldL8dgcPAAAAAAAAAAAAAAAAAAAAA2Jfl+//p34d2e6zA545P/kNw2vT/O/HLz0BA8n//zC85D8ML/kPw0v+w/CS/zC85D8ML/kPw0v+AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dPXMm3eprD67OpfX5yyvLi5XLJ+aL1cVCeXmuMFdZulRYqFQWSsXCXKW82b9XqlQuTU3H8pXJWrFam6yurJ4rV5Yv1s5dKH9/IKKYfy5RAQAAAAAAAAAAAAAAAAAAwM5SXVldnC2ViksKjcKuGIjT2EGF0cE4DYU+FzoMFmPbMEABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQET8EwAA//+ndDnV")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0)

276.943132ms ago: executing program 2 (id=845):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0)

276.677129ms ago: executing program 2 (id=846):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x0, 0x15555555555556d9}]}, {0x0, [0x5f, 0x2e, 0x61, 0x61, 0x2e]}}, 0x0, 0x2b}, 0x28)

205.885251ms ago: executing program 2 (id=847):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0)
renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0)

205.702706ms ago: executing program 2 (id=848):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0)

118.299747ms ago: executing program 2 (id=849):
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x2404c004)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r1)
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000005c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000003c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000002c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000000c0)='!+-^}\'\x00', &(0x7f0000000000)='!+-^}\'\x00', &(0x7f00000004c0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000002680)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f00000001c0)='!+-^}\'\x00', &(0x7f0000002780)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']})

98.016787ms ago: executing program 3 (id=850):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2d04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8845bc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x0, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)

22.190994ms ago: executing program 2 (id=851):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xf0}}, 0x0)

0s ago: executing program 1 (id=852):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x3}]}, 0x10)
syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @random="06ac0100", @void, {@mpls_mc={0x8848, {[], @ipv6=@tcp={0x9, 0x6, "6780a3", 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x8, 0x0, 0x9}}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36886' (ED25519) to the list of known hosts.
syzkaller login: [   56.056506][ T5829] cgroup: Unknown subsys name 'net'
[   56.182986][ T5829] cgroup: Unknown subsys name 'cpuset'
[   56.188535][ T5829] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.593661][ T5829] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   61.602035][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   61.606095][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   61.609448][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   61.613563][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   61.617122][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   61.657603][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   61.672852][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   61.676380][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.679341][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   61.685888][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.689868][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   61.693014][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.715186][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.721419][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   61.725040][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.903548][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   62.020473][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.023522][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.026990][ T5845] bridge_slave_0: entered allmulticast mode
[   62.029953][ T5845] bridge_slave_0: entered promiscuous mode
[   62.041637][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.044158][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.047435][ T5845] bridge_slave_1: entered allmulticast mode
[   62.050458][ T5845] bridge_slave_1: entered promiscuous mode
[   62.077354][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   62.099392][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.118391][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.159185][ T5845] team0: Port device team_slave_0 added
[   62.162844][ T5845] team0: Port device team_slave_1 added
[   62.210703][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   62.233889][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.236558][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.245314][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.268008][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.270401][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.279615][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.295376][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.298072][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.300662][ T5849] bridge_slave_0: entered allmulticast mode
[   62.303891][ T5849] bridge_slave_0: entered promiscuous mode
[   62.307761][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.310240][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.312709][ T5849] bridge_slave_1: entered allmulticast mode
[   62.316179][ T5849] bridge_slave_1: entered promiscuous mode
[   62.375208][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.407553][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.416517][ T5845] hsr_slave_0: entered promiscuous mode
[   62.420008][ T5845] hsr_slave_1: entered promiscuous mode
[   62.462718][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.466220][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.469508][ T5851] bridge_slave_0: entered allmulticast mode
[   62.473068][ T5851] bridge_slave_0: entered promiscuous mode
[   62.478466][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.481561][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.486065][ T5851] bridge_slave_1: entered allmulticast mode
[   62.490194][ T5851] bridge_slave_1: entered promiscuous mode
[   62.495230][ T5849] team0: Port device team_slave_0 added
[   62.519813][ T5849] team0: Port device team_slave_1 added
[   62.585942][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.591656][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.594688][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.606365][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.620043][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.631424][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.634501][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.645914][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.696304][ T5851] team0: Port device team_slave_0 added
[   62.728036][ T5851] team0: Port device team_slave_1 added
[   62.757022][ T5849] hsr_slave_0: entered promiscuous mode
[   62.759575][ T5849] hsr_slave_1: entered promiscuous mode
[   62.762445][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   62.764701][ T5849] Cannot create hsr debugfs directory
[   62.810378][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.813120][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.822316][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   62.847663][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   62.849896][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   62.859122][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   62.971911][ T5851] hsr_slave_0: entered promiscuous mode
[   62.976586][ T5851] hsr_slave_1: entered promiscuous mode
[   62.979521][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   62.981786][ T5851] Cannot create hsr debugfs directory
[   63.033772][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   63.059322][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   63.071803][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   63.076864][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   63.144492][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   63.166126][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   63.189141][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   63.200161][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   63.254656][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   63.263625][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   63.269914][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   63.280108][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   63.317080][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.360674][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   63.375201][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.377807][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.387727][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.390155][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.404309][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.443659][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   63.463896][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.467034][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.481425][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.487771][  T786] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.490845][  T786] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.531739][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   63.547316][  T786] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.549917][  T786] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.560526][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.577123][  T786] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.579567][  T786] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.600270][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   63.603972][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   63.644387][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.704818][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.715396][ T5854] Bluetooth: hci0: command tx timeout
[   63.719984][ T5845] veth0_vlan: entered promiscuous mode
[   63.730962][ T5845] veth1_vlan: entered promiscuous mode
[   63.779848][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.785953][ T5849] veth0_vlan: entered promiscuous mode
[   63.788770][ T5854] Bluetooth: hci2: command tx timeout
[   63.795058][ T5854] Bluetooth: hci1: command tx timeout
[   63.802561][ T5845] veth0_macvtap: entered promiscuous mode
[   63.810601][ T5849] veth1_vlan: entered promiscuous mode
[   63.818470][ T5845] veth1_macvtap: entered promiscuous mode
[   63.862444][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.883004][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.891351][ T5851] veth0_vlan: entered promiscuous mode
[   63.904161][ T5858] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.912994][ T5858] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.918817][ T5858] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.928186][ T5851] veth1_vlan: entered promiscuous mode
[   63.933765][ T5849] veth0_macvtap: entered promiscuous mode
[   63.938642][ T5858] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.951383][ T5849] veth1_macvtap: entered promiscuous mode
[   64.001445][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.011793][ T5851] veth0_macvtap: entered promiscuous mode
[   64.023151][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.030081][ T5851] veth1_macvtap: entered promiscuous mode
[   64.036981][ T5858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.065141][ T5858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.070798][ T5858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.089594][ T5858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.100068][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.108692][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.123831][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.150291][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.179829][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.180024][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.189075][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.192274][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.207030][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.211637][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.244812][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.251562][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.273688][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   64.316800][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.320135][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.336698][ T5912] loop2: detected capacity change from 0 to 1764
[   64.354014][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.357764][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.409609][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.423492][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.605334][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   64.668425][ T5920] evm: overlay not supported
[   64.714973][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   64.738395][   T33] audit: type=1804 audit(1758861279.584:2): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0
[   64.756133][   T33] audit: type=1804 audit(1758861279.604:3): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0
[   64.774964][    T9] usb 3-1: Using ep0 maxpacket: 16
[   64.783853][   T33] audit: type=1800 audit(1758861279.614:4): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="bus" dev="overlay" ino=26 res=0 errno=0
[   64.794934][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   64.799865][    T9] usb 3-1: config 13 has an invalid interface number: 50 but max is 0
[   64.802692][    T9] usb 3-1: config 13 has no interface number 0
[   64.804813][    T9] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16
[   64.808314][    T9] usb 3-1: config 13 interface 50 has no altsetting 0
[   64.833942][    T9] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[   64.837122][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.839881][    T9] usb 3-1: Product: syz
[   64.841314][    T9] usb 3-1: Manufacturer: syz
[   64.842980][    T9] usb 3-1: SerialNumber: syz
[   64.857283][ T5912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   64.875257][ T5896] usb 2-1: Using ep0 maxpacket: 8
[   64.886964][ T5896] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[   64.890830][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.893897][ T5896] usb 2-1: Product: syz
[   64.901689][ T5896] usb 2-1: Manufacturer: syz
[   64.903714][ T5896] usb 2-1: SerialNumber: syz
[   64.926185][ T5896] usb 2-1: config 0 descriptor??
[   65.100328][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   65.103481][    T9] usb 3-1: MIDIStreaming interface descriptor not found
[   65.140512][ T5896] gspca_main: sunplus-2.14.0 probing 04a5:3003
[   65.161619][    T9] usb 3-1: USB disconnect, device number 2
[   65.795498][ T5854] Bluetooth: hci0: command tx timeout
[   65.865667][ T5848] Bluetooth: hci2: command tx timeout
[   65.868694][ T5854] Bluetooth: hci1: command tx timeout
[   66.014063][ T5932] loop2: detected capacity change from 0 to 32768
[   66.154098][ T5896] gspca_sunplus: reg_w_riv err -71
[   66.161263][ T5896] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[   66.174548][ T5896] usb 2-1: USB disconnect, device number 2
[   66.245158][   T33] audit: type=1326 audit(1758861281.174:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5941 comm="syz.2.11" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c4978ec29 code=0x0
[   67.232308][ T5959] loop1: detected capacity change from 0 to 32768
[   67.242942][ T5959] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.17 (5959)
[   67.323302][ T5959] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   67.327876][ T5959] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   67.506389][ T5959] BTRFS info (device loop1): enabling ssd optimizations
[   67.509275][ T5959] BTRFS info (device loop1): enabling free space tree
[   67.588937][ T5988] loop0: detected capacity change from 0 to 512
[   67.668159][ T5988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.672643][ T5988] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.757593][ T5980] loop2: detected capacity change from 0 to 32768
[   67.790868][ T5980] =======================================================
[   67.790868][ T5980] WARNING: The mand mount option has been deprecated and
[   67.790868][ T5980]          and is ignored by this kernel. Remove the mand
[   67.790868][ T5980]          option from the mount to silence this warning.
[   67.790868][ T5980] =======================================================
[   67.855078][ T5980] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   67.869028][ T5851] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   67.883281][ T5848] Bluetooth: hci0: command tx timeout
[   67.941352][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.944371][   T33] audit: type=1804 audit(1758861282.854:6): pid=5980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.22" name="/newroot/11/file1/bus" dev="loop2" ino=9553 res=1 errno=0
[   67.951987][ T5848] Bluetooth: hci2: command tx timeout
[   67.952027][ T5848] Bluetooth: hci1: command tx timeout
[   67.999753][ T5845] ocfs2: Unmounting device (7,2) on (node local)
[   68.031220][ T5997] loop0: detected capacity change from 0 to 1024
[   68.044206][ T5997] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   68.066507][ T5997] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   68.070234][ T5997] EXT4-fs (loop0): orphan cleanup on readonly fs
[   68.087125][ T5997] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.26: Invalid inode table block 0 in block_group 0
[   68.107252][ T5997] EXT4-fs (loop0): Remounting filesystem read-only
[   68.109573][ T5997] Quota error (device loop0): write_blk: dquota write failed
[   68.112206][ T5997] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   68.126239][ T5997] EXT4-fs (loop0): 1 truncate cleaned up
[   68.142268][ T5997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   68.173542][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.287728][ T6008] loop1: detected capacity change from 0 to 128
[   68.411409][ T6015] loop2: detected capacity change from 0 to 2048
[   68.440263][ T6015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.497847][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.503268][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'.
[   68.556235][ T6024] loop2: detected capacity change from 0 to 256
[   68.571341][ T6024] vfat: Bad value for 'utf8'
[   68.659041][ T6028] loop0: detected capacity change from 0 to 4096
[   68.675561][ T6028] ntfs3(loop0): ino=0, mi_enum_attr
[   68.677550][ T6028] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   68.690780][ T6028] ntfs3(loop0): mft corrupted
[   68.692486][ T6028] ntfs3(loop0): Failed to load $MFT.
[   68.889427][ T6037] loop2: detected capacity change from 0 to 8192
[   69.133893][ T6042] loop1: detected capacity change from 0 to 32768
[   69.163324][ T6042] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   69.169485][ T6042] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   69.212787][ T6061] loop0: detected capacity change from 0 to 512
[   69.260483][ T6061] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   69.263231][ T6061] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   69.274136][ T6061] System zones: 0-1, 15-15, 18-18, 34-34
[   69.276790][ T6042] syz.1.46 (6042) used greatest stack depth: 19464 bytes left
[   69.276847][ T6061] EXT4-fs (loop0): orphan cleanup on readonly fs
[   69.281458][ T6061] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[   69.303796][ T6061] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   69.311832][ T6061] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   69.318587][ T6061] EXT4-fs (loop0): 1 truncate cleaned up
[   69.321802][ T6061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   69.338602][ T5851] ocfs2: Unmounting device (7,1) on (node local)
[   69.392282][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.403147][ T6071] netlink: 72 bytes leftover after parsing attributes in process `syz.2.59'.
[   69.481575][ T6077] tap0: tun_chr_ioctl cmd 1074025677
[   69.483556][ T6077] tap0: linktype set to 825
[   69.807217][ T6098] netlink: 830 bytes leftover after parsing attributes in process `syz.1.70'.
[   69.947242][ T5854] Bluetooth: hci0: command tx timeout
[   70.025776][ T5848] Bluetooth: hci2: command tx timeout
[   70.027765][ T5854] Bluetooth: hci1: command tx timeout
[   70.082616][ T6122] netlink: 'syz.0.77': attribute type 1 has an invalid length.
[   70.284985][   T51] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   70.415038][  T794] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   70.444947][   T51] usb 3-1: Using ep0 maxpacket: 8
[   70.449657][   T51] usb 3-1: unable to get BOS descriptor or descriptor too short
[   70.453530][   T51] usb 3-1: config 7 has an invalid interface number: 67 but max is 0
[   70.456356][   T51] usb 3-1: config 7 has no interface number 0
[   70.460605][   T51] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[   70.464084][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.467886][   T51] usb 3-1: Product: syz
[   70.469386][   T51] usb 3-1: Manufacturer: syz
[   70.471027][   T51] usb 3-1: SerialNumber: syz
[   70.565051][  T794] usb 1-1: Using ep0 maxpacket: 8
[   70.569628][  T794] usb 1-1: config 6 has an invalid interface number: 64 but max is 0
[   70.573435][  T794] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[   70.579018][  T794] usb 1-1: config 6 has no interface number 0
[   70.581910][  T794] usb 1-1: too many endpoints for config 6 interface 64 altsetting 21: 207, using maximum allowed: 30
[   70.587295][  T794] usb 1-1: config 6 interface 64 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[   70.592834][  T794] usb 1-1: config 6 interface 64 has no altsetting 0
[   70.598727][  T794] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   70.602684][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.606688][  T794] usb 1-1: Product: syz
[   70.608701][  T794] usb 1-1: Manufacturer: syz
[   70.610698][  T794] usb 1-1: SerialNumber: syz
[   70.691601][   T51] usb 3-1: USB disconnect, device number 3
[   70.827313][  T794] usb 1-1: USB disconnect, device number 2
[   71.152178][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.155046][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.422037][ T6134] IPVS: length: 187 != 24
[   71.460100][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.83'.
[   71.497397][ T6139] loop2: detected capacity change from 0 to 1024
[   71.500926][ T6139] ext4: Unknown parameter 'smackfstransmute'
[   71.745148][  T794] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   71.897058][  T794] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   71.899688][  T794] usb 3-1: config 0 has no interface number 0
[   71.901898][  T794] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.906552][  T794] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.910038][  T794] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   71.913445][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.917787][  T794] usb 3-1: config 0 descriptor??
[   72.330451][  T794] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[   72.333576][  T794] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[   72.336237][  T794] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[   72.338706][  T794] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[   72.340980][  T794] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[   72.343890][  T794] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[   72.351654][  T794] prodikeys 0003:041E:2801.0001: unknown main item tag 0x0
[   72.360780][  T794] prodikeys 0003:041E:2801.0001: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1
[   72.367243][  T794] hid_prodikeys: hid-prodikeys: failed to find output report
[   72.367243][  T794] 
[   72.412342][ T6149] netlink: 'syz.0.89': attribute type 1 has an invalid length.
[   72.453597][ T6151] loop0: detected capacity change from 0 to 16
[   72.465373][ T6151] erofs (device loop0): mounted with root inode @ nid 36.
[   72.528160][ T6153] netlink: 'syz.0.91': attribute type 5 has an invalid length.
[   72.532783][   T51] usb 3-1: USB disconnect, device number 4
[   72.660180][ T6158] process 'syz.0.93' launched './file2' with NULL argv: empty string added
[   74.656754][ T6194] loop2: detected capacity change from 0 to 16
[   74.666541][ T6194] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 25144)
[   74.969646][ T6203] Illegal XDP return value 4294967282 on prog  (id 12) dev N/A, expect packet loss!
[   75.206568][ T6212] netlink: 132 bytes leftover after parsing attributes in process `syz.2.109'.
[   75.658681][ T6263] loop2: detected capacity change from 0 to 1024
[   75.664552][ T6263] EXT4-fs: Ignoring removed orlov option
[   75.690945][ T6263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.717747][   T33] audit: type=1800 audit(1758861290.644:7): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.114" name="file1" dev="loop2" ino=15 res=0 errno=0
[   75.764473][ T6263] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt.
[   75.825974][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.981809][ T6277] loop0: detected capacity change from 0 to 32768
[   76.012993][ T6277] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   76.057702][ T6277] XFS (loop0): Ending clean mount
[   76.096279][ T5849] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   76.179220][ T6299] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.450902][ T6302] loop0: detected capacity change from 0 to 32768
[   76.505934][ T6302] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[   76.531652][ T6302] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   76.633298][ T6302] XFS (loop0): Ending clean mount
[   76.645510][ T6302] XFS (loop0): Quotacheck needed: Please wait.
[   76.706884][ T6302] XFS (loop0): Quotacheck: Done.
[   76.708690][ T6302] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   77.028984][ T6316] batadv_slave_1: entered promiscuous mode
[   77.040546][ T6315] batadv_slave_1: left promiscuous mode
[   77.598624][ T6321] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   77.600856][ T6321] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   77.603120][ T6321] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   77.616293][ T6321] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[   77.619417][ T6321] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   77.622487][ T6321] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[   78.415156][ T5850] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   78.558517][ T6341] netlink: 'syz.2.140': attribute type 5 has an invalid length.
[   78.593901][ T6343] netlink: 'syz.2.141': attribute type 29 has an invalid length.
[   78.599132][ T6343] netlink: 'syz.2.141': attribute type 29 has an invalid length.
[   78.602540][ T6343] netlink: 44 bytes leftover after parsing attributes in process `syz.2.141'.
[   78.606438][ T5850] usb 1-1: Using ep0 maxpacket: 32
[   78.611596][ T5850] usb 1-1: unable to get BOS descriptor or descriptor too short
[   78.616364][ T5850] usb 1-1: config 7 has an invalid interface number: 112 but max is 1
[   78.620019][ T5850] usb 1-1: config 7 has no interface number 1
[   78.625154][ T5850] usb 1-1: config 7 interface 112 has no altsetting 0
[   78.633329][ T5850] usb 1-1: config 7 interface 0 has no altsetting 0
[   78.642727][ T5850] usb 1-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=b5.bb
[   78.646872][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.650804][ T5850] usb 1-1: Product: syz
[   78.654810][ T5850] usb 1-1: Manufacturer: syz
[   78.657934][ T5850] usb 1-1: SerialNumber: syz
[   78.978244][ T5850] xr_serial 1-1:7.112: xr_serial converter detected
[   78.992789][ T5850] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[   78.995964][ T5850] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[   79.008453][ T5850] usb 1-1: USB disconnect, device number 3
[   79.019759][ T5850] xr_serial 1-1:7.112: device disconnected
[   79.274965][ T5313] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   79.424950][ T5313] usb 2-1: Using ep0 maxpacket: 32
[   79.429819][ T5313] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   79.433736][ T5313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.488517][ T5313] usb 2-1: config 0 descriptor??
[   79.544414][ T6363] sctp: [Deprecated]: syz.0.149 (pid 6363) Use of int in maxseg socket option.
[   79.544414][ T6363] Use struct sctp_assoc_value instead
[   79.722293][ T5313] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   79.738877][ T5313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   79.747093][ T5313] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   79.753257][ T5313] usb 2-1: media controller created
[   79.779443][ T5313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   79.933533][ T5313] az6027: usb out operation failed. (-71)
[   79.940801][ T5313] az6027: usb out operation failed. (-71)
[   79.943171][ T5313] stb0899_attach: Driver disabled by Kconfig
[   79.946344][ T5313] az6027: no front-end attached
[   79.946344][ T5313] 
[   79.949799][ T5313] az6027: usb out operation failed. (-71)
[   79.952335][ T5313] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   79.958072][ T5313] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input4
[   79.971554][ T5313] dvb-usb: schedule remote query interval to 400 msecs.
[   79.974726][ T5313] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   79.981599][ T5313] usb 2-1: USB disconnect, device number 3
[   80.031880][ T5313] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   80.164466][   T33] audit: type=1326 audit(1758861295.084:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4978ec29 code=0x7ffc0000
[   80.185397][   T33] audit: type=1326 audit(1758861295.084:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4978ec29 code=0x7ffc0000
[   80.186216][ T6387] loop2: detected capacity change from 0 to 2048
[   80.194080][   T33] audit: type=1326 audit(1758861295.094:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0c4978ec29 code=0x7ffc0000
[   80.194119][   T33] audit: type=1326 audit(1758861295.104:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c4978ec63 code=0x7ffc0000
[   80.194148][   T33] audit: type=1326 audit(1758861295.104:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c4978d6df code=0x7ffc0000
[   80.223961][   T33] audit: type=1326 audit(1758861295.104:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0c4978ecb7 code=0x7ffc0000
[   80.232981][   T33] audit: type=1326 audit(1758861295.104:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c4978d590 code=0x7ffc0000
[   80.236270][ T6387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.242070][   T33] audit: type=1326 audit(1758861295.104:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c4978e82b code=0x7ffc0000
[   80.256931][   T33] audit: type=1326 audit(1758861295.124:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6386 comm="syz.2.159" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0c4978d88a code=0x7ffc0000
[   80.310086][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.413228][ T6393] ubi31: attaching mtd0
[   80.433310][ T6393] ubi31: scanning is finished
[   80.435838][ T6393] ubi31: empty MTD device detected
[   80.609174][ T6393] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[   80.612374][ T6393] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[   80.615334][ T6393] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[   80.618309][ T6393] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[   80.620756][ T6393] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[   80.623348][ T6393] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[   80.627242][ T6393] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1810851090
[   80.631565][ T6393] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[   80.637591][ T6396] ubi31: background thread "ubi_bgt31d" started, PID 6396
[   81.894246][ T6412] loop1: detected capacity change from 0 to 32768
[   82.191196][ T6412] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[   82.191214][ T6412]   allowing incompatible features above 0.0: (unknown version)
[   82.191223][ T6412]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   82.208573][ T6412] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   82.213083][ T6412] bcachefs (loop1): initializing new filesystem
[   82.242593][ T6412] bcachefs (loop1): going read-write
[   82.281214][ T6412] bcachefs (loop1): marking superblocks
[   82.320442][ T6429] loop0: detected capacity change from 0 to 2048
[   82.336607][ T6429] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   82.337944][ T6412] bcachefs (loop1): initializing freespace
[   82.341174][ T6429] NILFS (loop0): mounting unchecked fs
[   82.382125][ T5914] udevd[5914]: incorrect nilfs2 checksum on /dev/loop0
[   82.413564][ T6412] bcachefs (loop1): done initializing freespace
[   82.432118][ T5914] udevd[5914]: incorrect nilfs2 checksum on /dev/loop0
[   82.434336][ T6412] bcachefs (loop1): reading snapshots table
[   82.437948][ T6412] bcachefs (loop1): reading snapshots done
[   82.452572][ T6429] NILFS (loop0): recovery complete
[   82.463021][ T6430] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.493789][ T6412] bcachefs (loop1):  loop1: Superblock write was silently dropped! (seq 0 expected 42)
[   82.506556][ T6412] bcachefs (loop1): done starting filesystem
[   82.745842][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   82.768243][   T33] kauditd_printk_skb: 18 callbacks suppressed
[   82.768424][   T33] audit: type=1800 audit(1758861297.694:35): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.168" name="file1" dev="loop1" ino=4098 res=0 errno=0
[   82.789496][   T33] audit: type=1800 audit(1758861297.714:36): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.168" name="file1" dev="loop1" ino=4098 res=0 errno=0
[   82.913824][    T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   82.922541][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.931393][    T9] usb 1-1: config 0 descriptor??
[   82.954158][    T9] cp210x 1-1:0.0: cp210x converter detected
[   83.110413][ T6412] syz.1.168 (6412) used greatest stack depth: 16200 bytes left
[   83.168821][ T5851] bcachefs (loop1): shutting down
[   83.171661][ T5851] bcachefs (loop1): going read-only
[   83.195081][ T5851] bcachefs (loop1): finished waiting for writes to stop
[   83.205172][ T5851] bcachefs (loop1): flushing journal and stopping allocators, journal seq 25
[   83.332662][ T5851] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 25
[   83.354693][ T5851] bcachefs (loop1): clean shutdown complete, journal seq 26
[   83.362273][ T5851] bcachefs (loop1): marking filesystem clean
[   83.485187][ T5851] bcachefs (loop1): shutdown complete
[   83.614557][    T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[   83.619453][    T9] cp210x 1-1:0.0: GPIO initialisation failed: -71
[   83.632860][    T9] usb 1-1: cp210x converter now attached to ttyUSB0
[   83.645763][    T9] usb 1-1: USB disconnect, device number 4
[   83.661165][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   83.676357][    T9] cp210x 1-1:0.0: device disconnected
[   83.687273][ T6436] netlink: 104 bytes leftover after parsing attributes in process `syz.2.173'.
[   83.747868][ T6438] loop2: detected capacity change from 0 to 512
[   83.793233][ T6438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.798009][ T6438] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.833950][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.734577][ T6453] loop0: detected capacity change from 0 to 32768
[   85.527135][ T6459] loop0: detected capacity change from 0 to 64
[   85.549628][ T6459] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[   86.542609][   T93] cfg80211: failed to load regulatory.db
[   89.050012][ T6515] loop0: detected capacity change from 0 to 8192
[   90.065053][ T5313] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   90.112597][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.211'.
[   90.229192][ T6540] tipc: Started in network mode
[   90.231501][ T6540] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[   90.241053][ T5313] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   90.247041][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34151, setting to 64
[   90.247292][ T6540] tipc: Enabled bearer <udp:syz0>, priority 10
[   90.253529][ T5313] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=d4.aa
[   90.258467][ T5313] usb 3-1: New USB device strings: Mfr=16, Product=150, SerialNumber=0
[   90.261818][ T5313] usb 3-1: Product: syz
[   90.263528][ T5313] usb 3-1: Manufacturer: syz
[   90.273966][ T5313] usb 3-1: config 0 descriptor??
[   90.282135][ T6534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   90.294770][ T5313] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5
[   90.320660][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.323945][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.328326][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.331636][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.334964][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.338376][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.341713][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.345775][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.349156][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.352317][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.355706][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.358952][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.362264][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.365545][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.368804][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.372096][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.375452][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.378844][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.382162][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.385458][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.388738][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.391979][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.395248][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.398481][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.401764][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.404973][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.408199][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.411444][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.425471][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.428866][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.432146][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.435508][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.441616][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.446811][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.450033][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.453514][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.456782][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.460062][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.464661][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.468018][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.472572][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.480249][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.483770][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.492800][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.496514][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.499732][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.502858][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.506691][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.509923][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.513139][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.516321][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.525351][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.529863][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.533247][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.536400][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.539453][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.542730][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.546763][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.549961][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.553184][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.556899][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.560469][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.563848][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.567207][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.571710][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.575161][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[   90.575835][ T5909] usb 3-1: USB disconnect, device number 5
[   90.578092][    C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -19
[   90.578172][ T5279] usb 3-1: control msg error: -71
[   90.669709][ T6552] loop0: detected capacity change from 0 to 16
[   90.705327][ T6552] erofs (device loop0): mounted with root inode @ nid 36.
[   90.839749][ T6558] loop0: detected capacity change from 0 to 2048
[   90.859294][ T6558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.999668][ T6558] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   91.003898][ T6558] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   91.008804][ T6558] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   91.012825][ T6558] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   91.017460][ T6558] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   91.021495][ T6558] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   91.025973][ T6558] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256
[   91.030711][ T6558] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512
[   91.136338][    T9] IPVS: starting estimator thread 0...
[   91.205393][   T33] audit: type=1804 audit(1758861306.124:37): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.221" name="/newroot/75/bus/file1" dev="loop0" ino=1367 res=1 errno=0
[   91.243432][ T6565] IPVS: using max 41 ests per chain, 98400 per kthread
[   91.370689][    T9] tipc: Node number set to 4269801491
[   91.371477][ T6558] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1)
[   91.722235][ T6573] loop2: detected capacity change from 0 to 32768
[   91.756380][ T6573] 
[   91.756380][ T6573]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   91.756380][ T6573] 
[   91.870446][ T5845] 
[   91.870446][ T5845]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   91.870446][ T5845] 
[   91.881404][ T5845] 
[   91.881404][ T5845]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   91.881404][ T5845] 
[   92.006477][ T6583] netlink: 'syz.0.232': attribute type 6 has an invalid length.
[   92.009999][ T6583] netlink: 176 bytes leftover after parsing attributes in process `syz.0.232'.
[   92.262107][ T6604] netlink: 104 bytes leftover after parsing attributes in process `syz.0.241'.
[   92.272587][ T6602] overlay: filesystem on ./bus not supported
[   92.878988][ T5858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.981644][ T6630] netlink: 'syz.2.255': attribute type 1 has an invalid length.
[   92.989353][ T6632] snd_dummy snd_dummy.0: control 4:4:4:syz0:4096 is already present
[   93.038350][ T5858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.168641][ T5858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.271359][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   93.278032][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   93.284163][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   93.289523][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   93.293239][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   93.323704][ T5858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.126905][ T6656] cgroup: name respecified
[   94.138326][ T5858] bridge_slave_1: left allmulticast mode
[   94.140778][ T5858] bridge_slave_1: left promiscuous mode
[   94.145393][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.165737][ T5858] bridge_slave_0: left allmulticast mode
[   94.168161][ T5858] bridge_slave_0: left promiscuous mode
[   94.170706][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.827949][ T6658] loop2: detected capacity change from 0 to 32768
[   94.831742][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.840500][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.848400][ T5858] bond0 (unregistering): Released all slaves
[   94.870037][ T6658] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.263 (6658)
[   94.903219][ T6658] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   94.955301][ T6658] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   94.961135][ T6638] chnl_net:caif_netlink_parms(): no params data found
[   95.255299][ T6658] BTRFS info (device loop2): allowing degraded mounts
[   95.258165][ T6658] BTRFS info (device loop2): enabling ssd optimizations
[   95.262293][ T6658] BTRFS info (device loop2): enabling free space tree
[   95.278883][ T6658] BTRFS info (device loop2): force zlib compression, level 3
[   95.386799][ T5848] Bluetooth: hci1: command tx timeout
[   95.427756][ T5845] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.780084][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.783202][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.793536][ T6638] bridge_slave_0: entered allmulticast mode
[   95.801002][ T6638] bridge_slave_0: entered promiscuous mode
[   95.825242][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.828459][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.831567][ T6638] bridge_slave_1: entered allmulticast mode
[   95.839776][ T6638] bridge_slave_1: entered promiscuous mode
[   95.895189][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   95.904568][ T5858] hsr_slave_0: left promiscuous mode
[   95.920369][ T5858] hsr_slave_1: left promiscuous mode
[   95.926480][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.929564][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.941461][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.953933][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.005110][ T5858] veth1_macvtap: left promiscuous mode
[   96.009351][ T5858] veth0_macvtap: left promiscuous mode
[   96.012188][ T5858] veth1_vlan: left promiscuous mode
[   96.014632][ T5858] veth0_vlan: left promiscuous mode
[   96.024908][ T6709] loop2: detected capacity change from 0 to 512
[   96.028716][ T6709] EXT4-fs: Ignoring removed bh option
[   96.034166][ T6709] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   96.040320][ T6709] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   96.044942][ T6709] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   96.058543][    T9] usb 2-1: config 0 has an invalid interface number: 73 but max is 0
[   96.061918][    T9] usb 2-1: config 0 has no interface number 0
[   96.066771][    T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64
[   96.070519][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.073697][    T9] usb 2-1: Product: syz
[   96.078898][ T6709] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[   96.082635][    T9] usb 2-1: Manufacturer: syz
[   96.084639][    T9] usb 2-1: SerialNumber: syz
[   96.101560][    T9] usb 2-1: config 0 descriptor??
[   96.109296][    T9] uvcvideo 2-1:0.73: Found Unit with invalid ID 0
[   96.113340][ T6709] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[   96.137492][ T6709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.234492][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.315518][    T9] uvcvideo 2-1:0.73: probe with driver uvcvideo failed with error -22
[   96.334176][    T9] usb 2-1: USB disconnect, device number 4
[   96.803838][ T5858] team0 (unregistering): Port device team_slave_1 removed
[   97.062940][ T5858] team0 (unregistering): Port device team_slave_0 removed
[   97.475251][ T5848] Bluetooth: hci1: command tx timeout
[   97.653890][ T6638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.661106][ T6638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.702483][ T6638] team0: Port device team_slave_0 added
[   97.728190][ T6638] team0: Port device team_slave_1 added
[   97.801151][ T6638] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.809814][ T6638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.837147][ T6638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.847882][ T6638] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.850889][ T6638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.999540][ T6638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.180265][ T6743] capability: warning: `syz.2.280' uses deprecated v2 capabilities in a way that may be insecure
[   98.512862][ T6638] hsr_slave_0: entered promiscuous mode
[   98.516730][ T6638] hsr_slave_1: entered promiscuous mode
[   98.520146][ T6638] debugfs: 'hsr0' already exists in 'hsr'
[   98.522881][ T6638] Cannot create hsr debugfs directory
[   98.909643][ T6750] loop2: detected capacity change from 0 to 4096
[   98.953659][ T6751] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.984368][ T6750] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   98.998598][ T6750] Remounting filesystem read-only
[   99.035932][ T5845] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[   99.089320][ T6638] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   99.121568][ T6638] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   99.150279][ T6638] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   99.174988][ T6638] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   99.293095][ T6770] loop2: detected capacity change from 0 to 1024
[   99.379303][ T6638] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.406616][   T27] hfsplus: b-tree write err: -5, ino 4
[   99.459437][ T6638] 8021q: adding VLAN 0 to HW filter on device team0
[   99.500271][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.503507][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.512706][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.516363][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.546489][ T5848] Bluetooth: hci1: command tx timeout
[   99.582786][ T6638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   99.592079][ T6638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  100.046826][ T6638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.149855][ T6638] veth0_vlan: entered promiscuous mode
[  100.157872][ T6638] veth1_vlan: entered promiscuous mode
[  100.179424][ T6638] veth0_macvtap: entered promiscuous mode
[  100.184440][ T6638] veth1_macvtap: entered promiscuous mode
[  100.201410][ T6638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.221046][ T6638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.239716][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.248440][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.260575][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.278043][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.318324][ T6806] loop2: detected capacity change from 0 to 128
[  100.339099][ T6806] EXT4-fs (loop2): Test dummy encryption mode enabled
[  100.348198][ T6239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.351448][ T6239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.352824][ T6806] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  100.373153][ T6806] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  100.378987][ T6239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.382031][ T6239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.443469][ T5845] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.763625][ T6826] netlink: 'syz.3.306': attribute type 1 has an invalid length.
[  100.768375][ T6826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.306'.
[  100.774512][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.795327][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.798581][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.909678][ T6821] loop2: detected capacity change from 0 to 32768
[  100.923801][ T6821] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  100.990334][ T6821] XFS (loop2): Ending clean mount
[  100.992703][ T6850] wg1: entered promiscuous mode
[  101.001971][ T6850] wg1: entered allmulticast mode
[  101.058789][ T5845] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  101.162541][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'.
[  101.163291][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'.
[  101.195779][ T6859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.318'.
[  101.637438][ T5848] Bluetooth: hci1: command tx timeout
[  101.842885][ T6865] loop3: detected capacity change from 0 to 32768
[  101.846986][ T6865] xfs: Unknown parameter 'ikeep'
[  102.386033][ T6885] loop2: detected capacity change from 0 to 32768
[  102.420036][ T6885] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  102.518821][ T6894] binder: BINDER_SET_CONTEXT_MGR already set
[  102.522506][ T6894] binder: 6893:6894 ioctl 4018620d 2000000002c0 returned -16
[  102.641378][ T5845] ocfs2: Unmounting device (7,2) on (node local)
[  103.763403][ T6926] tmpfs: Cannot retroactively limit inodes
[  104.178721][ T6941] loop3: detected capacity change from 0 to 1024
[  104.218878][ T6941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.232791][ T6941] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  104.294353][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.309889][ T6933] loop2: detected capacity change from 0 to 32768
[  104.317021][ T6933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.345 (6933)
[  104.327453][ T6933] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.331834][ T6933] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  104.479716][ T6933] BTRFS info (device loop2): enabling ssd optimizations
[  104.488802][ T6933] BTRFS info (device loop2): enabling free space tree
[  104.627900][ T5845] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.741775][ T6961] loop3: detected capacity change from 0 to 32768
[  104.776746][ T6961] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.350 (6961)
[  104.802140][ T6961] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.814358][ T6961] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  104.865987][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  105.027071][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  105.063288][ T6961] BTRFS info (device loop3): rebuilding free space tree
[  105.072518][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  105.083472][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  105.094490][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  105.102540][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  105.110735][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.346231][ T6961] BTRFS info (device loop3): enabling ssd optimizations
[  105.348709][ T6961] BTRFS info (device loop3): turning on sync discard
[  105.351034][ T6961] BTRFS info (device loop3): enabling free space tree
[  105.353857][ T6961] BTRFS info (device loop3): force clearing of disk cache
[  105.357152][ T6961] BTRFS info (device loop3): enabling auto defrag
[  105.359793][    T9] usb 2-1: config 0 descriptor??
[  105.362037][ T6961] BTRFS info (device loop3): max_inline set to 0
[  105.392126][ T6638] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.582864][    T9] hdpvr 2-1:0.0: firmware version 0x51 dated 
[  105.585557][    T9] hdpvr 2-1:0.0: untested firmware, the driver might not work.
[  105.784219][    T9] hdpvr 2-1:0.0: device init failed
[  105.855742][    T9] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  105.863036][    T9] usb 2-1: USB disconnect, device number 5
[  105.997746][ T7011] netlink: 'syz.2.360': attribute type 5 has an invalid length.
[  106.604984][ T5909] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  106.658514][ T7013] loop2: detected capacity change from 0 to 131072
[  106.666087][ T7013] F2FS-fs (loop2): Test dummy encryption mode enabled
[  106.672549][ T7013] F2FS-fs (loop2): invalid crc value
[  106.707324][ T7013] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  106.714457][ T7013] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  106.772094][ T5909] usb 2-1: unable to get BOS descriptor or descriptor too short
[  106.789186][ T5909] usb 2-1: not running at top speed; connect to a high speed hub
[  106.793161][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.802306][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.811352][ T5909] usb 2-1: string descriptor 0 read error: -22
[  106.815187][ T5909] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  106.818245][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.829135][ T5909] usb 2-1: 0:2 : does not exist
[  107.469474][ T5909] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  107.475541][ T5909] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  107.483546][ T5909] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  107.507715][ T5909] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  107.518764][ T5909] usb 2-1: USB disconnect, device number 6
[  107.675922][ T7037] loop3: detected capacity change from 0 to 512
[  107.687710][ T7037] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  107.695859][ T7037] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  107.699061][ T7037] EXT4-fs (loop3): group descriptors corrupted!
[  107.753225][ T7039] syz_tun: entered allmulticast mode
[  107.759976][ T7038] syz_tun: left allmulticast mode
[  107.785077][   T93] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  107.906294][ T7041] loop3: detected capacity change from 0 to 32768
[  107.912481][ T7041] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.369 (7041)
[  107.925395][ T7041] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.931044][ T7041] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  107.934999][   T93] usb 3-1: Using ep0 maxpacket: 8
[  107.940657][   T93] usb 3-1: unable to get BOS descriptor or descriptor too short
[  107.944258][   T93] usb 3-1: config 5 has an invalid interface number: 41 but max is 0
[  107.947375][   T93] usb 3-1: config 5 has no interface number 0
[  107.949811][   T93] usb 3-1: config 5 interface 41 altsetting 2 bulk endpoint 0x83 has invalid maxpacket 1023
[  107.954537][   T93] usb 3-1: config 5 interface 41 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 64
[  107.960236][   T93] usb 3-1: config 5 interface 41 altsetting 2 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  107.964968][   T93] usb 3-1: config 5 interface 41 has no altsetting 0
[  107.970680][   T93] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= a.30
[  107.973703][   T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.977019][   T93] usb 3-1: Product: syz
[  107.978658][   T93] usb 3-1: Manufacturer: syz
[  107.980623][   T93] usb 3-1: SerialNumber: syz
[  107.995280][ T7035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.997825][ T7035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  108.025867][ T7041] BTRFS info (device loop3): enabling ssd optimizations
[  108.033306][ T7041] BTRFS info (device loop3): enabling free space tree
[  108.139593][ T6638] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.238452][   T93] qmi_wwan 3-1:5.41: probe with driver qmi_wwan failed with error -71
[  108.252147][   T93] usb 3-1: USB disconnect, device number 6
[  109.182444][ T7090] netlink: 'syz.3.384': attribute type 1 has an invalid length.
[  109.186391][ T7090] netlink: 172 bytes leftover after parsing attributes in process `syz.3.384'.
[  109.250666][ T7094] loop3: detected capacity change from 0 to 512
[  110.147840][   T33] audit: type=1326 audit(1758861325.074:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9bd8ec29 code=0x7fc00000
[  110.159040][   T33] audit: type=1326 audit(1758861325.074:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5b9bd8ec29 code=0x7fc00000
[  110.185888][   T33] audit: type=1326 audit(1758861325.074:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9bd8ec29 code=0x7fc00000
[  110.204470][   T33] audit: type=1326 audit(1758861325.074:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9bd8ec29 code=0x7fc00000
[  110.230000][   T33] audit: type=1326 audit(1758861325.074:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9bd8ec29 code=0x7fc00000
[  110.359305][   T33] audit: type=1326 audit(1758861325.074:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9bd8ec29 code=0x7fc00000
[  110.369461][   T33] audit: type=1326 audit(1758861325.074:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9bd8ec29 code=0x7fc00000
[  110.385281][   T33] audit: type=1326 audit(1758861325.074:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9bd8ec29 code=0x7fc00000
[  110.405331][   T33] audit: type=1326 audit(1758861325.074:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9bd8ec29 code=0x7fc00000
[  110.412384][   T33] audit: type=1326 audit(1758861325.074:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7095 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9bd8ec29 code=0x7fc00000
[  111.140773][ T7160] netlink: 156 bytes leftover after parsing attributes in process `syz.3.403'.
[  111.218781][ T7167] overlayfs: missing 'workdir'
[  111.609817][ T7186] loop2: detected capacity change from 0 to 1764
[  112.081885][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'.
[  112.089626][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'.
[  112.965039][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  113.129104][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.139641][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.152688][    T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  113.160865][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  113.164813][    T9] usb 3-1: SerialNumber: syz
[  113.407092][    T9] usb 3-1: 0:2 : does not exist
[  113.424366][    T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  113.441251][    T9] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[  113.458297][    T9] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5)
[  113.480353][    T9] usb 3-1: USB disconnect, device number 7
[  113.581920][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.021729][ T7238] loop2: detected capacity change from 0 to 256
[  114.111198][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  114.274719][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.281158][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.291214][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  114.298871][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  114.307365][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.323099][    T9] usb 4-1: config 0 descriptor??
[  114.471756][ T7258] loop2: detected capacity change from 0 to 764
[  114.479408][ T7258] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  114.780819][    T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  114.815047][ T5910] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  114.975515][ T5910] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  114.980257][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.995373][ T5910] usb 3-1: config 0 descriptor??
[  115.013710][ T5910] cp210x 3-1:0.0: cp210x converter detected
[  115.037238][ T5896] usb 4-1: USB disconnect, device number 2
[  115.440934][ T5910] usb 3-1: cp210x converter now attached to ttyUSB0
[  115.637673][    T9] usb 3-1: USB disconnect, device number 8
[  115.657949][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  115.688837][    T9] cp210x 3-1:0.0: device disconnected
[  115.855856][ T7269] loop3: detected capacity change from 0 to 64
[  115.870371][ T7269] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  115.980558][ T7279] loop3: detected capacity change from 0 to 128
[  116.002865][ T7279] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  116.007205][ T7279] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  116.015982][ T7279] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 127 (only 1 groups)
[  116.036288][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.456'.
[  116.038021][ T6638] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  116.093612][ T7285] 8021q: adding VLAN 0 to HW filter on device bond1
[  116.231312][ T7300] netlink: 256 bytes leftover after parsing attributes in process `syz.2.463'.
[  116.235473][ T7300] netlink: 72 bytes leftover after parsing attributes in process `syz.2.463'.
[  116.290504][ T7304] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  116.587065][ T7315] loop3: detected capacity change from 0 to 32768
[  116.596705][ T7315] btrfs: Unknown parameter 'ref_verify'
[  116.654980][   T93] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  116.825154][   T93] usb 2-1: Using ep0 maxpacket: 32
[  116.830099][   T93] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  116.834029][   T93] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  116.838264][   T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  116.841985][   T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  116.847060][   T93] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  116.851045][   T93] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  116.856699][   T93] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  116.861116][   T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.101184][   T93] usb 2-1: config 0 descriptor??
[  117.182163][ T7324] loop2: detected capacity change from 0 to 8
[  117.202856][ T7324] SQUASHFS error: lzo decompression failed, data probably corrupt
[  117.206444][ T7324] SQUASHFS error: Failed to read block 0x144: -5
[  117.208841][ T7324] SQUASHFS error: Unable to read metadata cache entry [142]
[  117.211535][ T7324] SQUASHFS error: Unable to read inode 0x11f
[  117.316793][   T93] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  117.328859][   T93] usb 2-1: USB disconnect, device number 7
[  117.345747][   T93] usblp0: removed
[  117.395079][ T7330] loop2: detected capacity change from 0 to 1024
[  117.410030][ T7330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.414254][ T7330] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.445218][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.755240][ T5910] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  117.775075][  T794] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  117.908790][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.913498][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.922679][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  117.935093][ T5910] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  117.937363][  T794] usb 2-1: Using ep0 maxpacket: 32
[  117.942179][  T794] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  117.942600][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.948471][  T794] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  117.951659][  T794] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  117.952150][ T7356] loop3: detected capacity change from 0 to 512
[  117.954693][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  117.954711][  T794] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  117.954723][  T794] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  117.954746][  T794] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  117.957637][ T5910] usb 3-1: config 0 descriptor??
[  117.965763][  T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.984770][  T794] usb 2-1: config 0 descriptor??
[  117.999247][ T7356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.016815][ T7356] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.487: bg 0: bad block bitmap checksum
[  118.040287][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.192044][  T794] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  118.400751][    T9] usb 2-1: USB disconnect, device number 8
[  118.413355][    T9] usblp0: removed
[  118.436300][ T5910] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  120.814422][ T7398] netlink: 300 bytes leftover after parsing attributes in process `syz.3.503'.
[  121.005022][   T93] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  121.010614][ T7407] loop3: detected capacity change from 0 to 1024
[  121.021417][ T7407] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  121.218604][  T794] usb 3-1: USB disconnect, device number 9
[  121.279694][ T7407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.300155][ T5896] libceph: connect (1)[c::]:6789 error -101
[  121.309214][ T7407] futex_wake_op: syz.3.507 tries to shift op by 36; fix this program
[  121.318662][ T5896] libceph: mon0 (1)[c::]:6789 connect error
[  121.337361][   T93] usb 2-1: config 0 has an invalid interface number: 83 but max is 0
[  121.340855][   T93] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.344354][   T93] usb 2-1: config 0 has no interface number 0
[  121.346930][   T93] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  121.350013][   T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.357955][   T93] usb 2-1: config 0 descriptor??
[  121.368273][   T93] ttusbir 2-1:0.83: cannot find expected altsetting
[  121.398904][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.571668][   T93] usb 2-1: USB disconnect, device number 9
[  121.587555][  T794] libceph: connect (1)[c::]:6789 error -101
[  121.589672][  T794] libceph: mon0 (1)[c::]:6789 connect error
[  121.659765][ T7423] loop3: detected capacity change from 0 to 32768
[  121.701028][ T7409] ceph: No mds server is up or the cluster is laggy
[  121.740646][ T7423] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  121.807219][ T7423] XFS (loop3): Ending clean mount
[  121.828495][ T7423] XFS (loop3): Quotacheck needed: Please wait.
[  121.868025][ T7423] XFS (loop3): Quotacheck: Done.
[  121.935640][ T6638] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.132925][ T7439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.220913][ T7445] loop3: detected capacity change from 0 to 4096
[  122.287896][ T7451] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.261933][ T7448] loop2: detected capacity change from 0 to 40427
[  123.362022][ T7448] F2FS-fs (loop2): invalid crc value
[  123.450531][ T7448] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  123.464711][ T7448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  123.492733][   T33] kauditd_printk_skb: 16 callbacks suppressed
[  123.492745][   T33] audit: type=1800 audit(1758861338.414:64): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.518" name="bus" dev="loop2" ino=10 res=0 errno=0
[  123.522019][ T5845] syz-executor: attempt to access beyond end of device
[  123.522019][ T5845] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  123.658990][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  123.659034][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.659042][ T5845] Call Trace:
[  123.659049][ T5845]  <TASK>
[  123.659055][ T5845]  dump_stack_lvl+0x189/0x250
[  123.659076][ T5845]  ? preempt_schedule_thunk+0x16/0x30
[  123.659095][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.659107][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  123.659117][ T5845]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  123.659135][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.659156][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  123.659201][ T5845]  f2fs_write_end_io+0x886/0xb60
[  123.659234][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  123.659254][ T5845]  __submit_merged_write_cond+0x255/0x530
[  123.659273][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  123.659307][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.659362][ T5845]  ? __lock_acquire+0xab9/0xd20
[  123.659386][ T5845]  ? do_raw_spin_lock+0x121/0x290
[  123.659408][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  123.659454][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.659472][ T5845]  do_writepages+0x32e/0x550
[  123.659500][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  123.659516][ T5845]  filemap_fdatawrite+0x199/0x240
[  123.659536][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  123.659586][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  123.659602][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  123.659632][ T5845]  f2fs_write_checkpoint+0x93e/0x2440
[  123.659649][ T5845]  ? __lock_acquire+0xab9/0xd20
[  123.659685][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  123.659736][ T5845]  kill_f2fs_super+0x2cc/0x6d0
[  123.659757][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  123.659787][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  123.659807][ T5845]  deactivate_locked_super+0xbc/0x130
[  123.659828][ T5845]  cleanup_mnt+0x425/0x4c0
[  123.659846][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.659865][ T5845]  task_work_run+0x1d4/0x260
[  123.659883][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  123.659902][ T5845]  ? __x64_sys_umount+0x122/0x160
[  123.659916][ T5845]  ? exit_to_user_mode_loop+0x40/0x130
[  123.659936][ T5845]  exit_to_user_mode_loop+0xe9/0x130
[  123.659953][ T5845]  do_syscall_64+0x2bd/0xfa0
[  123.659970][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.659984][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.659997][ T5845]  ? exc_page_fault+0xab/0x100
[  123.660013][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.660025][ T5845] RIP: 0033:0x7f0c4978ff57
[  123.660038][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  123.660048][ T5845] RSP: 002b:00007ffeba4782a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  123.660063][ T5845] RAX: 0000000000000000 RBX: 00007f0c49811c2d RCX: 00007f0c4978ff57
[  123.660071][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeba478360
[  123.660078][ T5845] RBP: 00007ffeba478360 R08: 0000000000000000 R09: 0000000000000000
[  123.660084][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeba4793f0
[  123.660091][ T5845] R13: 00007f0c49811c2d R14: 000000000001e1dd R15: 00007ffeba479430
[  123.660112][ T5845]  </TASK>
[  123.935033][ T5845] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  123.937868][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  123.937882][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.937887][ T5845] Call Trace:
[  123.937891][ T5845]  <TASK>
[  123.937895][ T5845]  dump_stack_lvl+0x189/0x250
[  123.937912][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.937921][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  123.937928][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  123.937939][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.937952][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  123.937966][ T5845]  f2fs_write_end_io+0x886/0xb60
[  123.937984][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  123.937996][ T5845]  __submit_merged_write_cond+0x255/0x530
[  123.938008][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  123.938031][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.938070][ T5845]  ? __lock_acquire+0xab9/0xd20
[  123.938084][ T5845]  ? do_raw_spin_lock+0x121/0x290
[  123.938096][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  123.938105][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.938115][ T5845]  do_writepages+0x32e/0x550
[  123.938132][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  123.938141][ T5845]  filemap_fdatawrite+0x199/0x240
[  123.938154][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  123.938182][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  123.938192][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  123.938209][ T5845]  f2fs_write_checkpoint+0x93e/0x2440
[  123.938219][ T5845]  ? __lock_acquire+0xab9/0xd20
[  123.938239][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  123.938270][ T5845]  kill_f2fs_super+0x2cc/0x6d0
[  123.938283][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  123.938300][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  123.938312][ T5845]  deactivate_locked_super+0xbc/0x130
[  123.938325][ T5845]  cleanup_mnt+0x425/0x4c0
[  123.938336][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.938347][ T5845]  task_work_run+0x1d4/0x260
[  123.938358][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  123.938365][ T5845]  ? __x64_sys_umount+0x122/0x160
[  123.938374][ T5845]  ? exit_to_user_mode_loop+0x40/0x130
[  123.938386][ T5845]  exit_to_user_mode_loop+0xe9/0x130
[  123.938395][ T5845]  do_syscall_64+0x2bd/0xfa0
[  123.938405][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.938413][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.938453][ T5845]  ? exc_page_fault+0xab/0x100
[  123.938470][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.938480][ T5845] RIP: 0033:0x7f0c4978ff57
[  123.938492][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  123.938500][ T5845] RSP: 002b:00007ffeba4782a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  123.938515][ T5845] RAX: 0000000000000000 RBX: 00007f0c49811c2d RCX: 00007f0c4978ff57
[  123.938522][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeba478360
[  123.938529][ T5845] RBP: 00007ffeba478360 R08: 0000000000000000 R09: 0000000000000000
[  123.938535][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeba4793f0
[  123.938542][ T5845] R13: 00007f0c49811c2d R14: 000000000001e1dd R15: 00007ffeba479430
[  123.938555][ T5845]  </TASK>
[  123.938559][ T5845] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  124.406331][ T5896] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  124.658040][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.745971][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'.
[  124.753028][ T5896] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  124.758247][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.768550][ T5896] usb 2-1: config 0 descriptor??
[  125.220736][ T5896] pyra 0003:1E7D:2CF6.0004: item fetching failed at offset 0/3
[  125.224520][ T5896] pyra 0003:1E7D:2CF6.0004: parse failed
[  125.239473][ T5896] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -22
[  125.450516][ T5850] usb 2-1: USB disconnect, device number 10
[  126.126961][   T33] audit: type=1800 audit(1758861341.054:65): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.540" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  126.414957][ T5850] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  126.464964][ T5910] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  126.566527][ T5850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.570813][ T5850] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  126.575665][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  126.580165][ T5850] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  126.588338][ T5850] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  126.591447][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.594361][ T5850] usb 2-1: Product: syz
[  126.596192][ T5850] usb 2-1: Manufacturer: syz
[  126.597817][ T5850] usb 2-1: SerialNumber: syz
[  126.601060][ T5850] usb 2-1: config 0 descriptor??
[  126.607503][ T5850] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected
[  126.611285][ T5850] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  126.615835][ T5850] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  126.620128][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  126.624440][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.629962][ T5910] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  126.633605][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.646034][ T5910] usb 4-1: config 0 descriptor??
[  126.814192][ T5896] usb 2-1: USB disconnect, device number 11
[  126.818608][ T5896] garmin_gps 2-1:0.0: device disconnected
[  127.058285][ T5910] isku 0003:1E7D:319C.0005: item fetching failed at offset 6/7
[  127.062074][ T5910] isku 0003:1E7D:319C.0005: parse failed
[  127.069517][ T5910] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -22
[  127.265363][ T5910] usb 4-1: USB disconnect, device number 3
[  127.299491][ T7533] loop2: detected capacity change from 0 to 512
[  127.308354][ T7533] EXT4-fs (loop2): #clusters per group too big: 65535
[  127.432094][ T7541] loop2: detected capacity change from 0 to 16
[  127.443535][ T7541] erofs (device loop2): mounted with root inode @ nid 36.
[  127.468801][ T7541] erofs (device loop2): inline data across blocks @ nid 36
[  127.472261][ T7541] syz.2.551: attempt to access beyond end of device
[  127.472261][ T7541] loop2: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  128.661836][ T7580] loop3: detected capacity change from 0 to 2048
[  128.721485][ T7567] syz.1.563 (7567): drop_caches: 2
[  128.735153][ T7582] netlink: 87 bytes leftover after parsing attributes in process `syz.2.569'.
[  128.738613][ T5914] udevd[5914]: incorrect nilfs2 checksum on /dev/loop3
[  129.421958][ T7604] kernel profiling enabled (shift: 63)
[  129.433175][ T7604] profiling shift: 63 too large
[  129.834923][ T5910] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  129.985017][ T5910] usb 2-1: Using ep0 maxpacket: 8
[  129.988895][ T5910] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  129.991759][ T5910] usb 2-1: config 0 has no interface number 0
[  129.994006][ T5910] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  129.998019][ T5910] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  130.002712][ T5910] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  130.006809][ T5910] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  130.011652][ T5910] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  130.014814][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.019234][ T5910] usb 2-1: config 0 descriptor??
[  130.031589][ T5910] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  130.234443][  T794] usb 2-1: USB disconnect, device number 12
[  130.244750][  T794] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  130.403972][ T7624] capability: warning: `syz.2.586' uses 32-bit capabilities (legacy support in use)
[  130.478493][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.588'.
[  131.008970][ T7656] xt_limit: Overflow, try lower: 2498045675/2726951205
[  131.410722][ T7647] loop3: detected capacity change from 0 to 32768
[  131.667445][ T7668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'.
[  132.061876][ T7699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.589348][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.592340][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.231603][ T7733] netlink: 60 bytes leftover after parsing attributes in process `syz.2.635'.
[  133.248533][ T7733] netlink: 35 bytes leftover after parsing attributes in process `syz.2.635'.
[  133.356231][ T7742] loop2: detected capacity change from 0 to 128
[  133.939748][ T7778] loop2: detected capacity change from 0 to 764
[  133.952131][ T7778] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  134.145678][ T7788] loop2: detected capacity change from 0 to 256
[  134.162012][ T7788] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  134.173202][ T7788] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  134.185356][ T7788] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[  134.191216][ T7788] exFAT-fs (loop2): failed to load alloc-bitmap
[  134.193666][ T7788] exFAT-fs (loop2): failed to recognize exfat type
[  134.365001][  T794] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  134.515019][  T794] usb 4-1: Using ep0 maxpacket: 8
[  134.519226][  T794] usb 4-1: config 0 has an invalid interface number: 130 but max is 0
[  134.522668][  T794] usb 4-1: config 0 has no interface number 0
[  134.536678][  T794] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56
[  134.540572][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.543846][  T794] usb 4-1: Product: syz
[  134.545844][  T794] usb 4-1: Manufacturer: syz
[  134.550706][  T794] usb 4-1: SerialNumber: syz
[  134.555237][  T794] usb 4-1: config 0 descriptor??
[  134.571026][  T794] as10x_usb: device has been detected
[  134.573890][  T794] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  134.599022][  T794] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))...
[  134.621740][  T794] as10x_usb: error during firmware upload part1
[  134.624791][  T794] Registered device PCTV Systems picoStick (74e)
[  134.725067][ T5850] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  134.765384][  T794] usb 4-1: USB disconnect, device number 4
[  134.789667][  T794] Unregistered device PCTV Systems picoStick (74e)
[  134.792851][  T794] as10x_usb: device has been disconnected
[  134.889923][ T5850] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  134.893901][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.897536][ T5850] usb 3-1: Product: syz
[  134.900415][ T5850] usb 3-1: Manufacturer: syz
[  134.902369][ T5850] usb 3-1: SerialNumber: syz
[  134.910637][ T5850] usb 3-1: config 0 descriptor??
[  134.919752][ T5850] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  134.923337][ T5850] usb 3-1: setting power ON
[  134.927998][ T5850] dvb-usb: bulk message failed: -22 (2/0)
[  134.933231][ T5850] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  134.941692][ T5850] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  134.948337][ T5850] dvb_usb_cxusb 3-1:0.0: probe with driver dvb_usb_cxusb failed with error -22
[  135.141869][ T5896] usb 3-1: USB disconnect, device number 10
[  135.345070][ T5850] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  135.506893][ T5850] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  135.509564][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.525311][ T5850] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  135.529016][ T5850] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  135.532219][ T5850] usb 2-1: Manufacturer: syz
[  135.539893][ T5850] usb 2-1: config 0 descriptor??
[  135.550901][ T7810] loop3: detected capacity change from 0 to 32768
[  135.554454][ T7810] BTRFS: device label  devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.671 (7810)
[  135.571662][ T7810] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.576652][ T7810] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  135.579758][ T7810] BTRFS error (device loop3): superblock checksum mismatch
[  135.582391][ T7810] BTRFS error (device loop3): open_ctree failed: -22
[  135.616968][ T5850] rc_core: IR keymap rc-hauppauge not found
[  135.620652][ T5850] Registered IR keymap rc-empty
[  135.639016][ T5850] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  135.665187][ T5850] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  135.738743][ T7819] loop2: detected capacity change from 0 to 256
[  135.746462][ T7819] exfat: Deprecated parameter 'utf8'
[  135.776589][ T7819] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  135.956974][ T7816] rc rc0: two consecutive events of type space
[  136.158014][ T5850] usb 2-1: USB disconnect, device number 13
[  136.177897][ T7835] netlink: 80 bytes leftover after parsing attributes in process `syz.3.681'.
[  136.181907][ T7835] netlink: 80 bytes leftover after parsing attributes in process `syz.3.681'.
[  136.311019][ T7843] loop2: detected capacity change from 0 to 4096
[  136.329960][ T7846] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.410982][ T7850] loop2: detected capacity change from 0 to 1024
[  136.420338][ T7850] EXT4-fs: Ignoring removed nomblk_io_submit option
[  136.427374][ T7852] loop3: detected capacity change from 0 to 256
[  136.430826][ T7852] exfat: Deprecated parameter 'utf8'
[  136.432758][ T7852] exfat: Deprecated parameter 'utf8'
[  136.444652][ T7852] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[  136.453136][ T7850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.497357][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.551642][ T7857] Zero length message leads to an empty skb
[  137.113674][ T7899] loop2: detected capacity change from 0 to 512
[  137.135798][ T7899] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.711: invalid block
[  137.150089][ T7899] EXT4-fs (loop2): Remounting filesystem read-only
[  137.153622][ T7899] EXT4-fs (loop2): 1 truncate cleaned up
[  137.158916][ T7899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.211856][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.370477][ T7907] IPv6: Can't replace route, no match found
[  137.616363][ T5850] IPVS: starting estimator thread 0...
[  137.705759][ T7912] IPVS: using max 48 ests per chain, 115200 per kthread
[  138.307965][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'.
[  138.312731][ T7927] netlink: 'syz.2.723': attribute type 3 has an invalid length.
[  138.537025][ T7935] syz_tun: entered allmulticast mode
[  138.555370][ T7934] syz_tun: left allmulticast mode
[  138.798382][ T7948] loop2: detected capacity change from 0 to 24
[  139.672931][ T7964] trusted_key: encrypted_key: insufficient parameters specified
[  140.435273][ T5909] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  140.619579][ T5909] usb 2-1: unable to get BOS descriptor or descriptor too short
[  140.637534][ T5909] usb 2-1: not running at top speed; connect to a high speed hub
[  140.645332][ T5909] usb 2-1: config 6 has an invalid interface number: 30 but max is 0
[  140.655245][ T5909] usb 2-1: config 6 has no interface number 0
[  140.658169][ T5909] usb 2-1: config 6 interface 30 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  140.680289][ T5909] usb 2-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11
[  140.696393][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.699137][ T5909] usb 2-1: Product: syz
[  140.706024][ T5909] usb 2-1: Manufacturer: syz
[  140.707695][ T5909] usb 2-1: SerialNumber: syz
[  140.735402][ T7968] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  140.966064][ T5909] usbtest 2-1:6.30: usb test device
[  140.968547][ T5909] usbtest 2-1:6.30: full-speed {control in/out bulk-out iso-out} tests (+alt)
[  140.977237][ T5909] usb 2-1: USB disconnect, device number 14
[  142.078205][ T8000] loop3: detected capacity change from 0 to 4096
[  142.091569][ T8000] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  142.095148][ T8000] UDF-fs: Scanning with blocksize 512 failed
[  142.113860][ T8000] UDF-fs: error (device loop3): udf_read_inode: (ino 1312) failed !bh
[  142.118170][ T8000] UDF-fs: Scanning with blocksize 1024 failed
[  142.136984][ T8000] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  142.144927][ T8000] UDF-fs: Scanning with blocksize 2048 failed
[  142.165165][ T8000] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  142.169206][ T8000] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  142.172512][ T8000] UDF-fs: Scanning with blocksize 4096 failed
[  142.205254][ T8000] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  142.670848][ T8017] loop3: detected capacity change from 0 to 32768
[  142.674732][ T8017] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  142.984982][ T5909] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  143.145497][ T5909] usb 4-1: Using ep0 maxpacket: 16
[  143.151504][ T5909] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  143.156255][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  143.160531][ T5909] usb 4-1: config 0 has no interface number 0
[  143.163298][ T5909] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b
[  143.166816][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.171227][ T5909] usb 4-1: config 0 descriptor??
[  143.176194][ T5909] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22
[  143.316132][ T8029] netlink: 'syz.1.765': attribute type 5 has an invalid length.
[  143.383648][ T5909] usb 4-1: USB disconnect, device number 5
[  143.553685][ T8041] loop2: detected capacity change from 0 to 512
[  143.585990][ T8041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.627841][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.016389][ T8051] loop2: detected capacity change from 0 to 32768
[  144.022144][ T8051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.775 (8051)
[  144.058444][ T8051] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.062613][ T8051] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  144.070000][ T8051] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  144.187359][ T8051] BTRFS info (device loop2): rebuilding free space tree
[  144.205539][ T8051] BTRFS info (device loop2): disabling free space tree
[  144.208078][ T8051] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  144.212183][ T8051] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  144.233559][ T8051] BTRFS info (device loop2): setting nodatasum
[  144.245333][ T8051] BTRFS info (device loop2): allowing degraded mounts
[  144.248231][ T8051] BTRFS info (device loop2): enabling ssd optimizations
[  144.251127][ T8051] BTRFS info (device loop2): turning off barriers
[  144.253602][ T8051] BTRFS info (device loop2): disabling tree log
[  144.283282][ T8051] BTRFS info (device loop2): turning on flush-on-commit
[  144.565751][ T8051] BTRFS info (device loop2): enabling disk space caching
[  144.573039][ T8081] loop3: detected capacity change from 0 to 4096
[  144.574285][ T8051] BTRFS info (device loop2): force clearing of disk cache
[  144.577015][ T8081] ntfs3: Unknown parameter 'nohide_dot_files'
[  144.629304][  T794] IPVS: starting estimator thread 0...
[  144.725740][ T8083] IPVS: using max 46 ests per chain, 110400 per kthread
[  144.753472][ T5845] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.294996][ T5896] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  147.467190][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  147.471906][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  147.487959][ T5896] usb 3-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18
[  147.494195][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.499190][ T5896] usb 3-1: Product: syz
[  147.500638][ T5896] usb 3-1: Manufacturer: syz
[  147.502516][ T5896] usb 3-1: SerialNumber: syz
[  147.507667][ T5896] usb 3-1: config 0 descriptor??
[  147.727231][ T5896] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  147.732816][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'.
[  147.749196][ T5896] usb 3-1: USB disconnect, device number 11
[  147.801612][ T8128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'.
[  149.056748][ T8148] syz_tun: entered allmulticast mode
[  149.098651][ T8147] syz_tun: left allmulticast mode
[  149.316349][ T8154] loop3: detected capacity change from 0 to 32768
[  149.423168][ T8154] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  149.423192][ T8154]   allowing incompatible features above 0.0: (unknown version)
[  149.423201][ T8154]   features: 
[  149.437810][ T8154] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  149.441841][ T8154] bcachefs (loop3): initializing new filesystem
[  149.451782][ T8154] bcachefs (loop3): going read-write
[  149.485364][ T8154] bcachefs (loop3): marking superblocks
[  149.493425][ T8154] bcachefs (loop3): initializing freespace
[  149.501707][ T8154] bcachefs (loop3): done initializing freespace
[  149.506698][ T8154] bcachefs (loop3): reading snapshots table
[  149.509309][ T8154] bcachefs (loop3): reading snapshots done
[  149.541231][ T8154] bcachefs (loop3): done starting filesystem
[  149.652727][ T6638] bcachefs (loop3): shutting down
[  149.655187][ T6638] bcachefs (loop3): going read-only
[  149.660027][ T6638] bcachefs (loop3): finished waiting for writes to stop
[  149.672259][ T6638] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  149.704280][ T6638] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  149.710771][ T6638] bcachefs (loop3): clean shutdown complete, journal seq 4
[  149.714728][ T6638] bcachefs (loop3): marking filesystem clean
[  149.737375][ T6638] bcachefs (loop3): shutdown complete
[  150.085522][ T5850] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  150.244991][ T5850] usb 3-1: Using ep0 maxpacket: 16
[  150.249384][ T5850] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  150.252737][ T5850] usb 3-1: config 0 has no interface number 0
[  150.259524][ T5850] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  150.263942][ T5850] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  150.268470][ T5850] usb 3-1: config 0 interface 41 has no altsetting 0
[  150.273538][ T5850] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  150.277549][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.280913][ T5850] usb 3-1: Product: syz
[  150.282622][ T5850] usb 3-1: Manufacturer: syz
[  150.284652][ T5850] usb 3-1: SerialNumber: syz
[  150.289643][ T5850] usb 3-1: config 0 descriptor??
[  150.292425][ T8186] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  150.296138][ T8186] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  150.509922][ T8186] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  150.513105][ T8186] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  150.695095][ T5896] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  150.855100][ T5896] usb 2-1: Using ep0 maxpacket: 32
[  150.859594][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.864303][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.869635][ T5896] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  150.873660][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.883744][ T5896] usb 2-1: config 0 descriptor??
[  151.126146][ T5850] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  151.198092][ T8205] syz.3.828 uses obsolete (PF_INET,SOCK_PACKET)
[  151.320787][ T5896] ft260 0003:0403:6030.0006: unknown main item tag 0x7
[  151.360711][ T8207] netlink: 'syz.3.829': attribute type 13 has an invalid length.
[  151.447216][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.450965][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.518240][ T5896] ft260 0003:0403:6030.0006: chip code: 6424 8183
[  151.547102][ T5850] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  151.555845][ T5850] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  151.560341][ T5850] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71
[  151.569454][ T5850] usb 3-1: USB disconnect, device number 12
[  151.622369][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.631695][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.720181][ T5896] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  151.796490][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.800323][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.804002][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.807925][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.920318][ T5896] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup
[  151.925710][ T5896] ft260 0003:0403:6030.0006: failed to retrieve status: -32
[  152.132333][ T5896] usb 2-1: USB disconnect, device number 15
[  152.154423][ T8218] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  152.745785][ T5848] Bluetooth: hci1: link tx timeout
[  152.750937][ T5848] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.759512][ T5854] Bluetooth: hci1: link tx timeout
[  152.761741][ T5854] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.765261][ T5854] Bluetooth: hci1: link tx timeout
[  152.767459][ T5854] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.770680][ T5854] Bluetooth: hci1: link tx timeout
[  152.772866][ T5854] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.894113][ T5854] Bluetooth: hci1: link tx timeout
[  152.898664][ T5854] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  153.550762][ T8244] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  153.768074][ T8252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.848'.
Connection to localhost closed by remote host.
[  154.658527][ T5858] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.727475][ T5858] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.764634][ T5851] syz-executor (5851) used greatest stack depth: 16136 bytes left
[  154.815883][ T5858] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.836114][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  154.904118][ T5858] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.025751][ T5858] bridge_slave_1: left allmulticast mode
[  155.028219][ T5858] bridge_slave_1: left promiscuous mode
[  155.031537][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.037530][ T5858] bridge_slave_0: left allmulticast mode
[  155.039903][ T5858] bridge_slave_0: left promiscuous mode
[  155.042448][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.529282][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.536641][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.542900][ T5858] bond0 (unregistering): Released all slaves
[  155.705893][ T5858] bond1 (unregistering): Released all slaves
[  155.804546][ T5858] tipc: Disabling bearer <udp:syz0>
[  155.821110][ T5858] tipc: Left network mode
[  156.069291][ T5858] hsr_slave_0: left promiscuous mode
[  156.075554][ T5858] hsr_slave_1: left promiscuous mode
[  156.078676][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.081751][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.085536][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.087983][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.104810][ T5858] veth1_macvtap: left promiscuous mode
[  156.109036][ T5858] veth0_macvtap: left promiscuous mode
[  156.111125][ T5858] veth1_vlan: left promiscuous mode
[  156.112939][ T5858] veth0_vlan: left promiscuous mode
[  156.623405][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  156.681280][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  157.397870][ T5858] IPVS: stop unused estimator thread 0...
[  157.847849][ T5858] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.923516][ T5858] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.975893][ T5858] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.061592][ T5858] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.166886][ T5858] bridge_slave_1: left allmulticast mode
[  158.169304][ T5858] bridge_slave_1: left promiscuous mode
[  158.171909][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.177245][ T5858] bridge_slave_0: left allmulticast mode
[  158.179716][ T5858] bridge_slave_0: left promiscuous mode
[  158.182433][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.189461][ T5858] bridge_slave_1: left allmulticast mode
[  158.191797][ T5858] bridge_slave_1: left promiscuous mode
[  158.193823][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.200873][ T5858] bridge_slave_0: left allmulticast mode
[  158.202857][ T5858] bridge_slave_0: left promiscuous mode
[  158.205105][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.584434][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.589602][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.593996][ T5858] bond0 (unregistering): Released all slaves
[  158.605644][ T5858] bond1 (unregistering): Released all slaves
[  159.096601][ T5858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.107130][ T5858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.112747][ T5858] bond0 (unregistering): Released all slaves
[  159.648607][ T5858] hsr_slave_0: left promiscuous mode
[  159.651855][ T5858] hsr_slave_1: left promiscuous mode
[  159.655159][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.659178][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.671057][ T5858] hsr_slave_0: left promiscuous mode
[  159.675974][ T5858] hsr_slave_1: left promiscuous mode
[  159.679062][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.682399][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.688619][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.691832][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.711776][ T5858] veth1_macvtap: left promiscuous mode
[  159.714287][ T5858] veth0_macvtap: left promiscuous mode
[  159.717208][ T5858] veth1_vlan: left promiscuous mode
[  159.719807][ T5858] veth0_vlan: left promiscuous mode
[  160.278172][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  160.340820][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  161.397040][ T5858] team0 (unregistering): Port device team_slave_1 removed
[  161.436332][ T5858] team0 (unregistering): Port device team_slave_0 removed
[  162.552663][ T5858] IPVS: stop unused estimator thread 0...
[  162.563803][ T5858] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
04:36:19  Registers:
info registers vcpu 0

CPU#0
RAX=33f510a2be354f00 RBX=ffffffff819721d7 RCX=33f510a2be354f00 RDX=0000000000000001
RSI=ffffffff8db9af17 RDI=ffffffff8c03bf60 RBP=ffffffff8e007ea8 RSP=ffffffff8e007d80
R8 =ffff88804b032fdb R9 =1ffff110096065fb R10=dffffc0000000000 R11=ffffed10096065fc
R12=ffffffff8fc30870 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1c12a38
RIP=ffffffff8b7dcdd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b840a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555995c2be20 CR3=000000010c414000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000ff0000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=3cf5fd0f9fd89200 RBX=ffffffff819721d7 RCX=3cf5fd0f9fd89200 RDX=0000000000000001
RSI=ffffffff8db9af17 RDI=ffffffff8c03bf60 RBP=ffffc90000177f10 RSP=ffffc90000177de0
R8 =ffff888136632fdb R9 =1ffff11026cc65fb R10=dffffc0000000000 R11=ffffed1026cc65fc
R12=ffffffff8fc30870 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7dcdd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3a0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=00000000118ac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ffff0000000000 0000000000000000 XMM01=00000000ff000000 0000000000000000
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
