last executing test programs:

19.168819834s ago: executing program 0 (id=128):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002000a", 0x3f, 0x0, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x600)

19.167518424s ago: executing program 0 (id=129):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9aec, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000180)={0x140, 0x1, 0x4, 0x0, 0x3})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @pix={0x8, 0x3, 0x34325258, 0x5, 0xffffffff, 0x4, 0x7, 0x4, 0x1, 0x0, 0x1}})

19.167304684s ago: executing program 0 (id=130):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
setreuid(0xee01, 0xee00)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setlease(r0, 0x400, 0x2)

19.09077299s ago: executing program 0 (id=131):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x126)

19.090555505s ago: executing program 0 (id=132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000940)=""/209, 0xd1, 0x140000000000)

18.928009888s ago: executing program 0 (id=134):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x7, 0x700}, 0x50)

18.844065246s ago: executing program 32 (id=134):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0, 0x7, 0x700}, 0x50)

17.619414042s ago: executing program 2 (id=152):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x0, 0xffe0}, {0x9, 0x20ae10c6e58e9baf}}}, 0x24}, 0x1, 0x0, 0x0, 0xc881}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

17.5084831s ago: executing program 2 (id=155):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000002"])

17.364771312s ago: executing program 2 (id=157):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x9)
io_setup(0x4, &(0x7f0000000380))

16.92061051s ago: executing program 2 (id=159):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000004c0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000640)="270502001a1114000600002fb96dbcf706e10500000086ddffff1144ee1611d4", 0x20}, {&(0x7f0000000340)="b54ed3488224b19127188fd3b695960c8b0f8e49", 0x14}, {&(0x7f0000000140)="cbb2880fd6c639f1f539bd31d9", 0x1b00}], 0x3}, 0xd890)

16.920357134s ago: executing program 2 (id=160):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090100"], 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0)

16.870409524s ago: executing program 2 (id=161):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='freeze\n', 0x7)

8.440778234s ago: executing program 1 (id=258):
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7)
fchown(r0, 0x0, 0xee01)
fchown(r0, 0xffffffffffffffff, 0xee01)

8.348547643s ago: executing program 1 (id=260):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

8.229998673s ago: executing program 1 (id=261):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0xa, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10)
ptrace(0x10, r0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x8000000000000401})

7.150629293s ago: executing program 1 (id=265):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000061c0)='./file4\x00', 0x8, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x1f1, &(0x7f0000000500)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)

7.037535426s ago: executing program 1 (id=266):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000004c000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x3b4, 0x0, 0x0, 0x38, 0x16})

6.859236736s ago: executing program 1 (id=270):
socket(0x400000000010, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ppoll(&(0x7f0000000100)=[{r0, 0x1a0}], 0x1, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2b4}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008800)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket(0x1a, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}})
unshare(0x2a020400)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x804)

1.769310805s ago: executing program 33 (id=161):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/power/state\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='freeze\n', 0x7)

339.941014ms ago: executing program 3 (id=306):
r0 = socket(0x10, 0x80003, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newlinkprop={0x34, 0x6c, 0xb21, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x34400, 0x10010}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x10)

339.692602ms ago: executing program 3 (id=307):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x40000}}, 0xb8}}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0xfffffffc, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0xfffffffffffffffb}, {0x0, 0x3ffffffffffffd, 0x200000000000000}, 0x2}, [@mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010)

259.374634ms ago: executing program 3 (id=308):
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x4800)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x69)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x4a, 0x2c, 0x6e})
close(0xffffffffffffffff)
syz_emit_ethernet(0x4a, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
listen(r0, 0x0)
listen(r1, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r2, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00')
read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020)

259.318159ms ago: executing program 4 (id=296):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x49, 0x0, 0x2}})

209.823558ms ago: executing program 3 (id=309):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x2000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)

209.652988ms ago: executing program 4 (id=310):
r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000500)={{0x9, 0x4, 0x2, 0x2349, 'syz1\x00', 0x44}, 0x6, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0xffffffff, 'syz1\x00', 0x0})

209.525794ms ago: executing program 4 (id=311):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0x3}, 0x1)

150.332523ms ago: executing program 4 (id=312):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000490001002cbd7000fddbdf250a001000", @ANYRES32=0x0, @ANYBLOB="78bfffff08000200060000ec130001"], 0x38}}, 0x0)

150.107016ms ago: executing program 4 (id=313):
syz_read_part_table(0x5e6, &(0x7f0000001800)="$eJzs1E9rXFUUAPBzx0xeY2c6oRsXboQGQYgWLGLBDljKMHRjSv2DS1eVunAR6KKLIaFmXesXEGoJhGzyBQJuYhIICSSrkIWr2bgREwQJQZ68mTcTFXcZYgO/H8x799+55w738IILrRKNWowVrTyLiD8nIuK3PM97k9X+msmIyIYRP14uG9nl+HS5lcUb927f/yTeS/Hrz/Uv0nDfYsuIvBGR+vGVXpJyz7sTsft8687R8uT2tb2NqReVMm61ElEbLzvpbwediPIU4+PFnlBYaa43vlmYbT993Myi3eneeJAi/uhN3UoR85+XhVXUVVzqNS+NNn9Rk738D/fbne7U7s3FnXzm8Pv6O9WN3eN3N3urrvyjlIdeGeVJ+D98WNzhwun9x9UnB0+OP3pz6dH16bFYm3tWXvzv6ct68f6geHw1P/i0AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjMxKc/04FmbbTx83H+63O90bD95uvf5t6+vv3v/h1txnr1WiUqxKkZ/8Z3h1BPkb2bDX6Vbj5uJOPnMY9dli4NXBzHQqnidX+r2xs6blJfFWNVKkGNbf4GaXHl2fvnqwNvcs9fv5vwN/2TznkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF0Ur5vP89v1KRIqf0ul4nvXfqfwNzJTjd7OP0/OtO0fLk9vX9jamXtwrx1drUSuXNs7pL3AGfwUAAP//U1hyog==")

46.776336ms ago: executing program 3 (id=314):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xfd, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x6, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)

0s ago: executing program 3 (id=315):
r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r1, &(0x7f00000001c0)="98", 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:26561' (ED25519) to the list of known hosts.
syzkaller login: [   47.490090][ T5575] cgroup: Unknown subsys name 'net'
[   47.618899][ T5575] cgroup: Unknown subsys name 'cpuset'
[   47.624270][ T5575] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   48.918385][ T5575] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.726208][ T5591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.730323][ T5591] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.733047][ T5591] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.736327][ T5591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.740635][ T5591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.757038][ T5591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.760032][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.762600][ T5591] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.765914][ T5591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.768649][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   52.784350][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   52.791215][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   52.795383][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   52.800198][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   52.803196][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.141697][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.144603][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.147254][ T5590] bridge_slave_0: entered allmulticast mode
[   53.149809][ T5590] bridge_slave_0: entered promiscuous mode
[   53.175327][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.178312][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.181207][ T5590] bridge_slave_1: entered allmulticast mode
[   53.185517][ T5590] bridge_slave_1: entered promiscuous mode
[   53.222539][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.230624][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.258273][ T5590] team0: Port device team_slave_0 added
[   53.272927][ T5590] team0: Port device team_slave_1 added
[   53.299863][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.302273][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.310393][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.324140][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.326651][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.334978][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.357547][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.360156][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.362486][ T5594] bridge_slave_0: entered allmulticast mode
[   53.365200][ T5594] bridge_slave_0: entered promiscuous mode
[   53.368250][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.370483][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.372739][ T5594] bridge_slave_1: entered allmulticast mode
[   53.375403][ T5594] bridge_slave_1: entered promiscuous mode
[   53.418531][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.423375][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.433374][ T5590] hsr_slave_0: entered promiscuous mode
[   53.435826][ T5590] hsr_slave_1: entered promiscuous mode
[   53.464037][ T5594] team0: Port device team_slave_0 added
[   53.466382][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.468699][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.470993][ T5598] bridge_slave_0: entered allmulticast mode
[   53.473556][ T5598] bridge_slave_0: entered promiscuous mode
[   53.485297][ T5594] team0: Port device team_slave_1 added
[   53.493544][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.496073][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.498353][ T5598] bridge_slave_1: entered allmulticast mode
[   53.501146][ T5598] bridge_slave_1: entered promiscuous mode
[   53.534030][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.544247][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.546904][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.554815][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.560483][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.568978][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.571391][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.579576][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.615558][ T5598] team0: Port device team_slave_0 added
[   53.630849][ T5598] team0: Port device team_slave_1 added
[   53.664214][ T5594] hsr_slave_0: entered promiscuous mode
[   53.666459][ T5594] hsr_slave_1: entered promiscuous mode
[   53.668538][ T5594] debugfs: 'hsr0' already exists in 'hsr'
[   53.670353][ T5594] Cannot create hsr debugfs directory
[   53.689612][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.692586][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.703318][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.717285][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.722417][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   53.731394][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.790734][ T5598] hsr_slave_0: entered promiscuous mode
[   53.793206][ T5598] hsr_slave_1: entered promiscuous mode
[   53.796048][ T5598] debugfs: 'hsr0' already exists in 'hsr'
[   53.797899][ T5598] Cannot create hsr debugfs directory
[   53.890837][ T5590] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.899346][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   53.913573][ T5590] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.919623][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   53.933806][ T5590] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.938171][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   53.950243][ T5590] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.961660][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   54.023426][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.026100][ T5590] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.028760][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.031235][ T5590] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.043021][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.046973][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.069738][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.075900][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   54.079087][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.083073][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   54.086086][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.089887][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   54.092528][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.096386][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   54.148920][ T5598] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.153668][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   54.156697][ T5598] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.160668][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   54.168985][ T5598] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.173170][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   54.176990][ T5598] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.180793][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   54.216894][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.241457][ T5590] 8021q: adding VLAN 0 to HW filter on device team0
[   54.259676][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.261960][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.272439][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.274723][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.284043][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.307416][ T5594] 8021q: adding VLAN 0 to HW filter on device team0
[   54.325471][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.327731][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.339243][ T5590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.342510][ T5590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.350306][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.352584][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.368031][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.389758][ T5598] 8021q: adding VLAN 0 to HW filter on device team0
[   54.402302][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.404597][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.411964][ T5594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.422859][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.425126][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.592456][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.618685][ T5590] veth0_vlan: entered promiscuous mode
[   54.629261][ T5590] veth1_vlan: entered promiscuous mode
[   54.670056][ T5590] veth0_macvtap: entered promiscuous mode
[   54.680174][ T5590] veth1_macvtap: entered promiscuous mode
[   54.693422][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.698986][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.706567][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.733922][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.755052][   T55] Bluetooth: hci0: command tx timeout
[   54.778200][ T5594] veth0_vlan: entered promiscuous mode
[   54.800605][ T5594] veth1_vlan: entered promiscuous mode
[   54.811537][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.815223][ T5646] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.817910][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.826088][ T5646] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.834920][   T55] Bluetooth: hci2: command tx timeout
[   54.835286][ T5591] Bluetooth: hci1: command tx timeout
[   54.848909][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.850144][ T5598] veth0_vlan: entered promiscuous mode
[   54.852756][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.854793][ T5628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.862434][ T5628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.873206][ T5598] veth1_vlan: entered promiscuous mode
[   54.886180][ T5594] veth0_macvtap: entered promiscuous mode
[   54.890966][ T5590] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.894237][ T5594] veth1_macvtap: entered promiscuous mode
[   54.925653][ T5598] veth0_macvtap: entered promiscuous mode
[   54.933421][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.942179][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.946518][ T5598] veth1_macvtap: entered promiscuous mode
[   54.991635][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.003320][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.039596][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.044207][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.047981][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.079489][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.084854][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.090578][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.094943][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.122843][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.128751][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.135250][ T5628] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.152143][   T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.156843][ T5628] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.161427][   T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.168795][ T5628] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.177428][ T5628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.183884][ T5628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.274987][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   55.311884][ T5710] loop1: detected capacity change from 0 to 256
[   55.317410][ T5710] =======================================================
[   55.317410][ T5710] WARNING: The mand mount option has been deprecated and
[   55.317410][ T5710]          and is ignored by this kernel. Remove the mand
[   55.317410][ T5710]          option from the mount to silence this warning.
[   55.317410][ T5710] =======================================================
[   55.446282][   T10] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[   55.459994][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.471483][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.481757][   T10] usb 3-1: Product: syz
[   55.483040][   T10] usb 3-1: Manufacturer: syz
[   55.491212][   T10] usb 3-1: SerialNumber: syz
[   55.554311][ T5721] loop0: detected capacity change from 0 to 4096
[   55.608273][ T5721] ntfs3(loop0): ino=9, mi_enum_attr
[   55.611031][ T5721] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   55.619355][ T5721] ntfs3(loop0): ino=9, mi_enum_attr
[   55.621405][ T5721] ntfs3(loop0): ino=b, mi_enum_attr
[   55.627169][ T5721] ntfs3(loop0): Failed to load $Extend (-22).
[   55.632370][ T5721] ntfs3(loop0): Failed to initialize $Extend.
[   55.705664][   T10] usb 3-1: Limiting number of CPorts to U8_MAX
[   55.709396][   T10] usb 3-1: Not enough endpoints found in device, aborting!
[   55.911672][ T5654] usb 3-1: USB disconnect, device number 2
[   55.924355][ T5729] dns_resolver: Unsupported server list version (0)
[   56.000220][ T5735] loop0: detected capacity change from 0 to 2048
[   56.030675][ T5735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.078660][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.079619][ T5742] loop1: detected capacity change from 0 to 128
[   56.091586][ T5742] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   56.097619][ T5742] hpfs: filesystem error: improperly stopped
[   56.099789][ T5742] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   56.102407][ T5742] hpfs: You really don't want any checks? You are crazy...
[   56.108283][ T5742] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[   56.112447][ T5742] hpfs: code page support is disabled
[   56.118142][ T5742] hpfs: hpfs_map_4sectors(): unaligned read
[   56.126744][ T5742] hpfs: hpfs_map_4sectors(): unaligned read
[   56.131975][ T5742] hpfs: filesystem error: unable to find root dir
[   56.144202][ T5742] hpfs: hpfs_map_4sectors(): unaligned read
[   56.148144][ T5742] hpfs: hpfs_map_sector(): read error
[   56.543752][ T5772] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   56.604559][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   56.619317][ T5775] Cannot find set identified by id 0 to match
[   56.756998][ T5783] loop2: detected capacity change from 0 to 2048
[   56.765775][   T10] usb 2-1: Using ep0 maxpacket: 32
[   56.775017][   T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[   56.780415][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   56.784261][   T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   56.788134][   T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[   56.792352][   T10] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   56.797345][   T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   56.802349][   T10] usb 2-1: config 1 interface 1 has no altsetting 0
[   56.804761][ T5783]  loop2: p1 < > p4 < >
[   56.806531][ T5783] loop2: partition table partially beyond EOD, truncated
[   56.809086][ T5783] loop2: p1 start 8388608 is beyond EOD, truncated
[   56.813556][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   56.817892][   T10] usb 2-1: Product: syz
[   56.820953][   T10] usb 2-1: Manufacturer: syz
[   56.824581][   T10] usb 2-1: SerialNumber: syz
[   56.845129][ T5591] Bluetooth: hci0: command tx timeout
[   56.915017][ T5591] Bluetooth: hci2: command tx timeout
[   56.915136][   T55] Bluetooth: hci1: command tx timeout
[   57.056944][   T10] usb 2-1: selecting invalid altsetting 0
[   57.060955][   T10] usb 2-1: 1:1: cannot get freq (v2/v3): err -71
[   57.065304][   T10] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[   57.098074][   T10] usb 2-1: USB disconnect, device number 2
[   57.147653][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   57.399194][ T5794] netlink: 'syz.0.40': attribute type 2 has an invalid length.
[   57.519926][ T5796] infiniband syz2: set down
[   57.522201][ T5796] infiniband syz2: added ipvlan1
[   57.532632][ T5796] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   57.537628][ T5796] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   57.542861][ T5796] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   57.558423][ T5796] RDS/IB: syz2: added
[   57.560205][ T5796] smc: adding ib device syz2 with port count 1
[   57.562203][ T5796] smc:    ib device syz2 port 1 has no pnetid
[   57.761486][ T5801] loop1: detected capacity change from 0 to 40427
[   57.766100][ T5801] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   57.769018][ T5801] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   57.773522][ T5801] F2FS-fs (loop1): invalid crc value
[   57.842459][ T5801] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   57.850605][ T5801] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   57.852983][ T5801] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   58.037815][ T5811] netlink: 'syz.2.48': attribute type 1 has an invalid length.
[   58.041130][ T5813] xt_hashlimit: size too large, truncated to 1048576
[   58.125128][ T5817] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET)
[   58.285731][ T5825] Zero length message leads to an empty skb
[   58.613471][ T5837] syz_tun: entered allmulticast mode
[   58.615869][ T5836] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   58.625180][ T5835] syz_tun: left allmulticast mode
[   58.660169][ T5839] gfs2: error -5 reading superblock
[   58.915140][   T55] Bluetooth: hci0: command tx timeout
[   58.984625][ T5667] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   58.995183][   T55] Bluetooth: hci1: command tx timeout
[   59.004560][   T55] Bluetooth: hci2: command tx timeout
[   59.138863][ T5667] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[   59.144376][ T5667] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.148164][ T5667] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[   59.152794][ T5667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.164850][ T5667] usb 3-1: config 0 descriptor??
[   59.322717][ T5882] loop1: detected capacity change from 0 to 4096
[   59.326458][ T5882] EXT4-fs: Ignoring removed nomblk_io_submit option
[   59.334967][ T5882] EXT4-fs (loop1): bs(8192) > ps(4096) unsupported for encrypt
[   59.596288][ T5667] Bluetooth: Can't get state to change to load configuration err
[   59.620360][ T5888] No such timeout policy "syz1"
[   59.629048][ T5667] Bluetooth: Loading sysconfig file failed
[   59.641742][ T5667] ath3k 3-1:0.0: probe with driver ath3k failed with error -16
[   59.693020][ T5667] usb 3-1: USB disconnect, device number 3
[   59.738722][ T5886] loop0: detected capacity change from 0 to 32768
[   59.755970][ T5886] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   59.798114][ T5598] ocfs2: Unmounting device (7,0) on (node local)
[   60.009153][ T5900] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   60.366832][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   60.465630][ T5919] cgroup: fork rejected by pids controller in /syz1
[   60.524952][    T9] usb 1-1: Using ep0 maxpacket: 16
[   60.535817][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[   60.554760][    T9] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   60.574620][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   60.582522][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.594345][    T9] usb 1-1: config 0 descriptor??
[   60.603499][ T5958] macvlan0: entered promiscuous mode
[   60.781090][ T5960] loop1: detected capacity change from 0 to 32768
[   60.994714][   T55] Bluetooth: hci0: command tx timeout
[   61.015911][    T9] wacom 0003:056A:5000.0001: unknown main item tag 0x3
[   61.021384][    T9] wacom 0003:056A:5000.0001: unknown main item tag 0x6
[   61.032226][    T9] wacom 0003:056A:5000.0001: hidraw0: USB HID v0.05 Device [HID 056a:5000] on usb-dummy_hcd.0-1/input0
[   61.075796][   T55] Bluetooth: hci1: command tx timeout
[   61.091289][ T5970] overlayfs: failed to resolve './file1metacopy=off': -2
[   61.202066][ T5978] loop1: detected capacity change from 0 to 4096
[   61.206467][ T5978] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   61.219900][ T5978] ntfs3(loop1): ino=19, mi_enum_attr
[   61.222113][ T5978] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   61.253876][ T5667] usb 1-1: USB disconnect, device number 2
[   61.574580][   T34] audit: type=1804 audit(1789580542.545:2): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.116" name="/newroot/59/file0" dev="fuse" ino=1 res=1 errno=0
[   61.646449][   T31] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   61.817397][   T31] usb 3-1: not running at top speed; connect to a high speed hub
[   61.821884][   T31] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb
[   61.834259][   T31] usb 3-1: config 45 has an invalid interface number: 2 but max is 0
[   61.839792][   T31] usb 3-1: config 45 has no interface number 0
[   61.846784][   T31] usb 3-1: config 45 interface 2 has no altsetting 0
[   61.854795][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.855604][ T6004] warning: `syz.0.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.859447][   T31] usb 3-1: Product: syz
[   61.862535][   T31] usb 3-1: Manufacturer: syz
[   61.864189][   T31] usb 3-1: SerialNumber: syz
[   61.923438][ T6008] loop0: detected capacity change from 0 to 64
[   62.063161][ T6014] vivid-000: disconnect
[   62.067672][ T6014] vivid-000: reconnect
[   62.081919][   T31] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[   62.086886][   T31] dvb-usb: bulk message failed: -22 (3/0)
[   62.103602][   T31] dvb-usb: will use the device's hardware PID filter (table count: 32).
[   62.108718][   T31] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[   62.111273][   T31] usb 3-1: media controller created
[   62.112921][   T31] dvb-usb: bulk message failed: -22 (5/0)
[   62.115443][   T31] dvb-usb: MAC address reading failed.
[   62.121073][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   62.133293][   T31] dvb-usb: bulk message failed: -22 (6/0)
[   62.136501][   T31] dvb-usb: bulk message failed: -22 (6/0)
[   62.138919][   T31] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[   62.143076][   T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[   62.149331][   T31] dvb-usb: schedule remote query interval to 100 msecs.
[   62.152042][   T31] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[   62.159535][   T31] usb 3-1: USB disconnect, device number 4
[   62.189567][   T31] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[   62.193098][ T6018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.127'.
[   62.234797][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'.
[   62.238189][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.0.128'.
[   62.468340][ T5997] syz.1.117 (5997) used greatest stack depth: 19872 bytes left
[   62.549293][ T5628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.661888][ T5628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.671330][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.678133][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.682016][ T5591] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.691495][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.695332][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.762007][ T5628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.958047][ T5628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.182384][ T5628] bridge_slave_1: left allmulticast mode
[   63.190731][ T5628] bridge_slave_1: left promiscuous mode
[   63.199913][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.228105][ T5628] bridge_slave_0: left allmulticast mode
[   63.233014][ T5628] bridge_slave_0: left promiscuous mode
[   63.238574][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.437078][ T5628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   63.442266][ T5628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   63.446119][ T5628] bond0 (unregistering): Released all slaves
[   63.472849][ T6061] tipc: Started in network mode
[   63.474713][ T6061] tipc: Node identity , cluster identity 4711
[   63.643794][ T6075] loop2: detected capacity change from 0 to 256
[   63.651653][ T6078] netlink: zone id is out of range
[   63.670830][ T5339] 8021q: adding VLAN 0 to HW filter on device eth1
[   63.751195][ T6084] netlink: 56 bytes leftover after parsing attributes in process `syz.1.149'.
[   63.909368][ T6101] loop1: detected capacity change from 0 to 256
[   63.912444][ T6101] exfat: Deprecated parameter 'utf8'
[   63.919009][ T6101] exfat: Deprecated parameter 'namecase'
[   63.921373][ T6101] exfat: Deprecated parameter 'namecase'
[   63.923263][ T6101] exfat: Deprecated parameter 'utf8'
[   63.931975][ T5339] 8021q: adding VLAN 0 to HW filter on device eth2
[   63.940644][ T6101] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   63.947048][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.947782][ T6101] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[   63.953708][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.968770][ T6035] bridge_slave_0: entered allmulticast mode
[   63.971862][ T6035] bridge_slave_0: entered promiscuous mode
[   63.978623][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.987302][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.006656][ T6035] bridge_slave_1: entered allmulticast mode
[   64.011811][ T6035] bridge_slave_1: entered promiscuous mode
[   64.107185][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.120220][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.160634][ T6105] loop1: detected capacity change from 0 to 32768
[   64.179888][ T6105] JBD2: Ignoring recovery information on journal
[   64.210878][ T6105] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   64.214541][ T5628] hsr_slave_0: left promiscuous mode
[   64.222598][ T5628] hsr_slave_1: left promiscuous mode
[   64.232280][ T5628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.236799][ T5628] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.250245][ T5628] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.257467][ T5628] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.267364][ T5594] ocfs2: Unmounting device (7,1) on (node local)
[   64.295410][ T5628] veth1_macvtap: left promiscuous mode
[   64.302184][ T5628] veth0_macvtap: left promiscuous mode
[   64.311275][ T5628] veth1_vlan: left promiscuous mode
[   64.318637][ T5628] veth0_vlan: left promiscuous mode
[   64.418789][   T27] smc: removing ib device syz2
[   64.520732][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.160'.
[   64.533207][ T5628] team0 (unregistering): Port device team_slave_1 removed
[   64.553001][ T6125] PM: suspend entry (s2idle)
[   64.557478][ T5628] team0 (unregistering): Port device team_slave_0 removed
[   64.642346][ T6035] team0: Port device team_slave_0 added
[   64.645231][ T5339] 8021q: adding VLAN 0 to HW filter on device eth3
[   64.658804][ T6035] team0: Port device team_slave_1 added
[   64.722314][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.729832][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.733284][   T27] smbdirect: ib_dev[syz2] removed
[   64.738553][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.747006][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.749524][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.758578][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.758745][   T12] Filesystems sync: 0.197 seconds
[   64.764594][ T5591] Bluetooth: hci2: command tx timeout
[   64.787996][ T6035] hsr_slave_0: entered promiscuous mode
[   64.790242][ T6035] hsr_slave_1: entered promiscuous mode
[   64.792628][ T6035] debugfs: 'hsr0' already exists in 'hsr'
[   64.798043][ T6035] Cannot create hsr debugfs directory
[   64.979604][ T6129] loop1: detected capacity change from 0 to 32768
[   65.001266][ T6129] JBD2: Ignoring recovery information on journal
[   65.052959][ T6129] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   65.119693][ T5594] ocfs2: Unmounting device (7,1) on (node local)
[   65.222084][ T5339] 8021q: adding VLAN 0 to HW filter on device eth4
[   65.309165][ T6035] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   65.323906][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   65.330329][ T6035] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   65.342911][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   65.348498][ T6035] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   65.352531][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   65.359153][ T6035] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   65.376492][ T6125] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   65.381333][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   65.391055][ T6125] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   65.456979][ T6125] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   65.498858][ T6125] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   65.503320][ T6125] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   65.518025][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.533650][ T6125] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   65.542493][ T6035] 8021q: adding VLAN 0 to HW filter on device team0
[   65.554303][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.557104][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.561359][ T6125] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   65.567339][ T6125] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   65.573431][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.575842][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.608819][ T6125] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   66.031101][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.087291][ T6035] veth0_vlan: entered promiscuous mode
[   66.101588][ T6035] veth1_vlan: entered promiscuous mode
[   66.150651][ T6035] veth0_macvtap: entered promiscuous mode
[   66.162603][ T6035] veth1_macvtap: entered promiscuous mode
[   66.186763][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.204135][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.276466][ T5628] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.333541][ T1037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.341315][ T1037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.345557][ T5628] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.356511][ T5628] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.374603][ T5628] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.414412][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.419453][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.622295][ T6178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'.
[   66.664411][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'.
[   66.707806][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'.
[   66.741542][ T6190] tmpfs: Bad value for 'nr_blocks'
[   66.914957][ T5591] Bluetooth: hci0: command 0x0c1a tx timeout
[   67.035800][ T6210] loop3: detected capacity change from 0 to 32768
[   67.051171][ T6210] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   67.079540][ T6210] XFS (loop3): Ending clean mount
[   67.082749][ T6214] loop1: detected capacity change from 0 to 32768
[   67.089710][ T6210] XFS (loop3): Quotacheck needed: Please wait.
[   67.111610][ T6214] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   67.120694][   T27] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x19d/0x1560, inode 0x2447 dinode
[   67.124043][   T27] XFS (loop3): Unmount and run xfs_repair
[   67.126958][   T27] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   67.128414][ T6214] XFS (loop1): Ending clean mount
[   67.129626][   T27] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[   67.133978][   T27] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   67.137125][   T27] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[   67.137443][   T34] audit: type=1800 audit(1789580548.105:3): pid=6214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.186" name="file1" dev="loop1" ino=9286 res=0 errno=0
[   67.139946][   T27] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 23 28  4.Xh...=......#(
[   67.146597][ T6214] XFS (loop1): User initiated shutdown received.
[   67.150320][   T27] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01  ................
[   67.151226][ T6214] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:464).  Shutting down filesystem.
[   67.153590][   T27] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 8b 1b 8c 50  ...............P
[   67.157934][ T6214] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   67.162780][   T27] 00000060: ff ff ff ff f4 ae c2 82 00 00 00 00 00 00 00 06  ................
[   67.166226][   T27] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08  ................
[   67.168953][   T27] loop3: lost filesystem error report for type 5 error -117
[   67.180865][ T5594] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   67.202973][ T6210] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[   67.210115][ T6210] loop3: lost filesystem error report for type 5 error -117
[   67.236529][ T6210] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x19d/0x1560, inode 0x2447 dinode
[   67.247763][ T6210] XFS (loop3): Unmount and run xfs_repair
[   67.250215][ T6210] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   67.252620][ T6210] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[   67.255892][ T6210] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   67.258729][ T6210] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[   67.261604][ T6210] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 23 28  4.Xh...=......#(
[   67.264782][ T6210] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01  ................
[   67.267599][ T6210] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 8b 1b 8c 50  ...............P
[   67.270522][ T6210] 00000060: ff ff ff ff f4 ae c2 82 00 00 00 00 00 00 00 06  ................
[   67.273403][ T6210] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08  ................
[   67.277235][ T6210] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x19d/0x1560, inode 0x2447 dinode
[   67.280660][ T6210] XFS (loop3): Unmount and run xfs_repair
[   67.282640][ T6210] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[   67.285444][ T6210] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[   67.288308][ T6210] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   67.291102][ T6210] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[   67.293912][ T6210] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 23 28  4.Xh...=......#(
[   67.297375][ T6210] 00000040: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 01  ................
[   67.300183][ T6210] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 8b 1b 8c 50  ...............P
[   67.303023][ T6210] 00000060: ff ff ff ff f4 ae c2 82 00 00 00 00 00 00 00 06  ................
[   67.306033][ T6210] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08  ................
[   67.319642][ T6232] FAULT_INJECTION: forcing a failure.
[   67.319642][ T6232] name failslab, interval 1, probability 0, space 0, times 1
[   67.328092][ T6232] CPU: 1 UID: 0 PID: 6232 Comm: syz.1.187 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   67.328105][ T6232] Tainted: [L]=SOFTLOCKUP
[   67.328108][ T6232] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   67.328113][ T6232] Call Trace:
[   67.328117][ T6232]  <TASK>
[   67.328120][ T6232]  dump_stack_lvl+0xe8/0x150
[   67.328138][ T6232]  should_fail_ex+0x410/0x560
[   67.328150][ T6232]  should_failslab+0xa8/0x100
[   67.328165][ T6232]  __kmalloc_cache_noprof+0xa8/0x660
[   67.328177][ T6232]  ? security_inode_alloc+0xd5/0x310
[   67.328188][ T6232]  ? alloc_pipe_info+0xe8/0x4c0
[   67.328199][ T6232]  ? alloc_pipe_info+0xe8/0x4c0
[   67.328210][ T6232]  alloc_pipe_info+0xe8/0x4c0
[   67.328220][ T6232]  create_pipe_files+0x88/0x7c0
[   67.328232][ T6232]  __do_pipe_flags+0x46/0x1f0
[   67.328242][ T6232]  do_pipe2+0xaa/0x190
[   67.328253][ T6232]  ? __pfx_do_pipe2+0x10/0x10
[   67.328262][ T6232]  ? __pfx_ksys_write+0x10/0x10
[   67.328273][ T6232]  __x64_sys_pipe+0x3a/0x50
[   67.328282][ T6232]  do_syscall_64+0x166/0x520
[   67.328293][ T6232]  ? trace_irq_disable+0x3b/0x140
[   67.328303][ T6232]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.328313][ T6232]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   67.328320][ T6232] RIP: 0033:0x7f1c3d39e159
[   67.328328][ T6232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   67.328335][ T6232] RSP: 002b:00007f1c3e31b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016
[   67.328344][ T6232] RAX: ffffffffffffffda RBX: 00007f1c3d625fa0 RCX: 00007f1c3d39e159
[   67.328349][ T6232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   67.328354][ T6232] RBP: 00007f1c3d43506b R08: 0000000000000000 R09: 0000000000000000
[   67.328358][ T6232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   67.328362][ T6232] R13: 00007f1c3d626038 R14: 00007f1c3d625fa0 R15: 00007ffc85c5d978
[   67.328375][ T6232]  </TASK>
[   67.336275][ T6035] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   67.410157][ T6035] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[   67.554763][ T5591] Bluetooth: hci1: command 0x0c1a tx timeout
[   67.637107][ T5591] Bluetooth: hci2: command 0x040f tx timeout
[   67.764691][ T5060] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   67.880211][ T6257] loop1: detected capacity change from 0 to 512
[   67.897141][ T6257] EXT4-fs error (device loop1): ext4_iget_extra_inode:5152: inode #15: comm syz.1.197: corrupted in-inode xattr: invalid ea_ino
[   67.902963][ T6257] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   67.903584][ T6257] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.197: couldn't read orphan inode 15 (err -117)
[   67.907317][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   67.907360][    C0] EXT4-fs (loop1): initial error at time 1789580548: ext4_iget_extra_inode:5152: inode 15
[   67.907384][    C0] EXT4-fs (loop1): last error at time 1789580548: ext4_iget_extra_inode:5152: inode 15
[   67.922535][ T5060] usb 4-1: Using ep0 maxpacket: 32
[   67.925467][ T5060] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[   67.929375][ T6257] loop1: lost filesystem error report for type 5 error -117
[   67.930370][ T5060] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[   67.938707][ T5060] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[   67.945364][ T6257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.950617][ T5060] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   67.955619][ T5060] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[   67.979916][ T5060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.982980][ T5060] usb 4-1: Product: syz
[   67.985744][ T5060] usb 4-1: Manufacturer: syz
[   67.987606][ T5060] usb 4-1: SerialNumber: syz
[   67.999303][    C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71)
[   68.006094][ T5060] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input8
[   68.234645][ T5060] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[   68.237592][ T5060]  (id 0x00)
[   68.345177][ T5060] rc_core: IR keymap rc-imon-pad not found
[   68.347460][ T5060] Registered IR keymap rc-empty
[   68.350050][ T5060] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[   68.353333][ T5060] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[   68.436773][ T5060] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0
[   68.441263][ T5060] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input9
[   68.451923][ T5060] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:2> initialized
[   68.785278][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.819795][ T6264] loop1: detected capacity change from 0 to 2048
[   68.828415][ T6264] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   68.865778][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'.
[   68.950554][ T6272] netlink: 52 bytes leftover after parsing attributes in process `syz.1.202'.
[   68.994622][ T5591] Bluetooth: hci0: command 0x0c1a tx timeout
[   69.033750][ T6273] imon:send_packet: task interrupted
[   69.035987][ T6273] imon:send_packet: packet tx failed (-512)
[   69.038461][ T6273] imon:vfd_write: send packet #1 failed
[   69.183024][   T33] usb 4-1: USB disconnect, device number 2
[   69.644636][ T5591] Bluetooth: hci1: command 0x0c1a tx timeout
[   69.717485][ T5591] Bluetooth: hci2: command 0x040f tx timeout
[   69.722258][ T6282] loop3: detected capacity change from 0 to 256
[   69.729017][ T6282] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbfe4f927, utbl_chksum : 0xe619d30d)
[   69.740341][   T34] audit: type=1800 audit(1789580550.715:4): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.205" name="file1" dev="loop3" ino=1048609 res=0 errno=0
[   69.918095][ T6284] loop3: detected capacity change from 0 to 40427
[   69.924269][ T6284] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   69.931044][ T6284] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   69.936917][ T6284] F2FS-fs (loop3): invalid crc value
[   69.966548][ T6284] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   69.972135][ T6284] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   69.974371][ T6284] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   70.221863][ T6305] loop3: detected capacity change from 0 to 64
[   70.324197][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'.
[   70.428609][ T5645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   70.432395][ T5645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   70.435464][ T5645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   70.437881][ T5645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   70.440230][ T5645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   70.442539][ T5645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   70.445154][ T5645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   70.448123][ T5645] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   70.460640][ T5645] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.10 Device [syz0] on syz1
[   70.846569][ T6346] loop4: detected capacity change from 0 to 11695
[   70.852474][ T6346]  loop4: AHDI p2 p3
[   70.858104][ T6346] loop4: p3 start 335544320 is beyond EOD, truncated
[   71.047356][ T6350] libceph: resolve 'c' (ret=-3): failed
[   71.077203][ T5591] Bluetooth: hci0: command 0x0c1a tx timeout
[   71.487346][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[   71.490637][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[   71.655104][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   71.714634][ T5591] Bluetooth: hci1: command 0x0c1a tx timeout
[   71.794724][ T5591] Bluetooth: hci2: command 0x040f tx timeout
[   71.825040][    T9] usb 2-1: Using ep0 maxpacket: 8
[   71.831023][    T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[   71.836228][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   71.839528][    T9] usb 2-1: config 0 has no interface number 0
[   71.842079][    T9] usb 2-1: config 0 interface 1 has no altsetting 0
[   71.847333][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.850673][    T9] usb 2-1: Product: syz
[   71.852528][    T9] usb 2-1: Manufacturer: syz
[   71.856078][    T9] usb 2-1: SerialNumber: syz
[   71.863784][    T9] usb 2-1: config 0 descriptor??
[   72.074322][    T9] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -71
[   72.084833][    T9] usb 2-1: USB disconnect, device number 3
[   72.700941][ T6397] loop3: detected capacity change from 0 to 32768
[   72.707432][ T6397] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.253 (6397)
[   72.723701][ T6397] BTRFS info (device loop3 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   72.727828][ T6397] BTRFS info (device loop3 state S): using blake2b checksum algorithm
[   72.741119][   T53] BTRFS warning (device loop3 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x3226f9dadc896f8f7b9a0be7c609110345c27f6019125c38f3283b3a68e897a5 found 0xbd4b976cd9fa1814a05461e3a8d6527e6af0699630a7a870b913a48450669c6b level 0, ignored
[   72.752744][ T6397] BTRFS warning (device loop3 state ES): devid 0 uuid a3373a75-1192-444c-9807-48156503709a is missing
[   72.758224][   T41] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xdcb7575773209a357189e5b2f3b8fd71b0d15f18ca4e677a36d2538f2b7693d1 level 0, ignored
[   72.772877][   T41] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x401afd31dc190f42243ccb8f3c46dd862cf2884305920dd2d03d401e95eb4ccd level 0, ignored
[   72.782901][   T27] BTRFS warning (device loop3 state ECS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored
[   72.791398][   T27] BTRFS error (device loop3 state ECS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1
[   72.796228][   T41] BTRFS warning (device loop3 state ECS): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0x03f37032b0b529a92cc2d9b40919dda221d62f8bc175d07bdd8abd18d59851fb level 0, ignored
[   72.820374][   T27] BTRFS warning (device loop3 state ECS): checksum verify failed on logical 5267456 mirror 1 wanted 0xce6a0dc39dad9e7cbba6cc000b67b0cf7f3e351c922d08ed6fd033c276f2526b found 0xc8acb2220dd26cbeaf7e61def41ecb1d135feabf0cb66d6d38ec8a1356a8465c level 0, ignored
[   72.831041][ T6397] BTRFS info (device loop3 state ECS): allowing degraded mounts
[   72.833418][ T6397] BTRFS info (device loop3 state ECS): enabling ssd optimizations
[   72.836060][ T6397] BTRFS info (device loop3 state ECS): using spread ssd allocation scheme
[   72.839327][ T6397] BTRFS info (device loop3 state ECS): turning off barriers
[   72.842031][ T6397] BTRFS info (device loop3 state ECS): disabling log replay at mount time
[   72.845139][ T6397] BTRFS info (device loop3 state ECS): enabling free space tree
[   72.847787][ T6397] BTRFS info (device loop3 state ECS): ignoring bad roots
[   72.850336][ T6397] BTRFS info (device loop3 state ECS): ignoring data csums
[   72.852696][ T6397] BTRFS info (device loop3 state ECS): ignoring meta csums
[   72.855032][ T6397] BTRFS info (device loop3 state ECS): ignoring unknown super block flags
[   72.857772][ T6397] BTRFS info (device loop3 state ECS): force zlib compression, level 3
[   72.860363][ T6397] BTRFS info (device loop3 state ECS): max_inline set to 0
[   72.873589][ T6420] loop1: detected capacity change from 0 to 128
[   72.879539][ T6420] EXT4-fs: Ignoring removed nobh option
[   72.885456][ T6035] BTRFS info (device loop3 state ECS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   72.900581][ T6420] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   72.910503][ T6420] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   72.993728][ T5594] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   73.058325][ T6428] loop3: detected capacity change from 0 to 128
[   73.062639][ T6428] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   73.094268][ T6430] loop1: detected capacity change from 0 to 512
[   73.106267][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.110287][ T6430] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.129758][ T6430] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.260: corrupted xattr block 33: invalid checksum
[   73.136916][ T6430] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74
[   73.137236][ T6430] EXT4-fs warning (device loop1): ext4_evict_inode:289: xattr delete (err -74)
[   73.177421][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.875146][ T5591] Bluetooth: hci2: command 0x040f tx timeout
[   73.936808][   T53] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   73.977090][ T6439] coreboot_table pcspkr: probe with driver coreboot_table failed with error -22
[   74.311885][ T6449] loop1: detected capacity change from 0 to 16
[   74.337616][ T6449] erofs (device loop1): mounted with root inode @ nid 36.
[   74.755322][ T6459] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[   74.758503][ T6459] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[   74.761160][ T6459] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[   75.477455][ T6467] mmap: syz.3.272 (6467) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   75.672299][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'.
[   75.693052][ T6479] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   75.732561][ T5591] Bluetooth: hci2: unexpected cc 0x0c05 length: 4 > 1
[   75.739251][ T5591] Bluetooth: hci2: unexpected event for opcode 0x0c05
[   75.768593][ T6484] loop3: detected capacity change from 0 to 512
[   75.781340][ T6484] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   75.789954][ T6484] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.280: iget: bogus i_mode (7)
[   75.793737][ T6484] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   75.794267][ T6484] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.280: couldn't read orphan inode 15 (err -117)
[   75.797366][    C1] EXT4-fs (loop3): error count since last fsck: 1
[   75.797381][    C1] EXT4-fs (loop3): initial error at time 1789580556: ext4_orphan_get:1399: inode 15
[   75.797405][    C1] EXT4-fs (loop3): last error at time 1789580556: ext4_orphan_get:1399: inode 15
[   75.813993][ T6484] loop3: lost filesystem error report for type 5 error -117
[   75.820293][ T6484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.856112][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.061035][ T6494] loop3: detected capacity change from 0 to 32768
[   76.069003][ T6494] JBD2: Ignoring recovery information on journal
[   76.088766][ T6494] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   76.113718][ T6035] ocfs2: Unmounting device (7,3) on (node local)
[   76.435805][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   76.585099][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   76.589352][    T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[   76.592410][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   76.601188][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   76.603785][    T9] usb 4-1: SerialNumber: syz
[   76.610794][ T6499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   76.821750][ T6499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   77.228032][    T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[   77.436287][    T9] usb 4-1: USB disconnect, device number 3
[   78.996505][ T6529] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   79.093328][ T6533] loop3: detected capacity change from 0 to 512
[   79.111408][ T6533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   79.116110][ T6533] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.166085][ T6035] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.233610][ T6540] loop3: detected capacity change from 0 to 128
[   79.236766][ T6540] udf: Bad value for 'fileset'
[   79.672020][ T6546] loop3: detected capacity change from 0 to 131072
[   79.676212][ T6546] F2FS-fs (loop3): invalid crc value
[   79.719764][ T6546] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   79.725491][ T6546] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   79.751469][ T6546] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[   79.755360][   T34] audit: type=1800 audit(1789580560.735:5): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.295" name="file1" dev="loop3" ino=7 res=0 errno=0
[   79.763470][ T6546] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[   79.830260][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   79.835114][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   79.837962][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   79.840881][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   79.843462][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   80.104976][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.107760][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.107822][ T6552] bridge_slave_0: entered allmulticast mode
[   80.108615][ T6552] bridge_slave_0: entered promiscuous mode
[   80.115832][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.118105][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.120830][ T6552] bridge_slave_1: entered allmulticast mode
[   80.123474][ T6552] bridge_slave_1: entered promiscuous mode
[   80.147193][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.152099][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.171943][ T6552] team0: Port device team_slave_0 added
[   80.176557][ T6552] team0: Port device team_slave_1 added
[   80.197917][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.200170][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.209434][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.213701][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.216118][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   80.225182][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.251612][ T6552] hsr_slave_0: entered promiscuous mode
[   80.253836][ T6552] hsr_slave_1: entered promiscuous mode
[   80.256047][ T6552] debugfs: 'hsr0' already exists in 'hsr'
[   80.257808][ T6552] Cannot create hsr debugfs directory
[   80.331208][ T6574] loop3: detected capacity change from 0 to 32768
[   80.362283][ T6574] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   80.368074][ T6552] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.372056][ T6552] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   80.375712][ T6552] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.379381][ T6574] XFS (loop3): Ending clean mount
[   80.379727][ T6552] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   80.383587][ T6552] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.388152][   T34] audit: type=1800 audit(1789580561.365:6): pid=6574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.299" name="file1" dev="loop3" ino=6150 res=0 errno=0
[   80.389596][ T6552] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   80.397361][ T6552] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.401388][ T6552] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   80.412053][ T6035] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   80.422844][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.425101][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.427409][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.429574][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.499715][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.510416][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.513901][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.522245][ T6552] 8021q: adding VLAN 0 to HW filter on device team0
[   80.528035][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.530312][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.546661][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.549087][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.744733][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.884715][ T6552] veth0_vlan: entered promiscuous mode
[   80.900225][ T6552] veth1_vlan: entered promiscuous mode
[   80.914286][ T6552] veth0_macvtap: entered promiscuous mode
[   80.918328][ T6552] veth1_macvtap: entered promiscuous mode
[   80.934187][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.956134][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.040414][ T5628] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.044377][ T5628] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.068983][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.076495][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.085744][ T6126] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.095215][ T6126] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.121761][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.129082][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.325403][ T6637] loop4: detected capacity change from 0 to 2048
[   81.366879][ T6637]  loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22
[   81.369761][ T6637] loop4: p2 start 65535 is beyond EOD, truncated
[   81.402433][ T6637] loop4: p4 size 722688 extends beyond EOD, truncated
[   81.419094][ T6637] loop4: p5 start 65535 is beyond EOD, truncated
[   81.422224][ T6637] loop4: p6 start 65535 is beyond EOD, truncated
[   81.424332][ T6637] loop4: p7 start 65535 is beyond EOD, truncated
[   81.426739][ T6637] loop4: p8 start 65535 is beyond EOD, truncated
[   81.428989][ T6637] loop4: p9 start 65535 is beyond EOD, truncated
[   81.431392][ T6637] loop4: p10 start 65535 is beyond EOD, truncated
[   81.433718][ T6637] loop4: p11 start 65535 is beyond EOD, truncated
[   81.436128][ T6637] loop4: p12 start 65535 is beyond EOD, truncated
[   81.438255][ T6637] loop4: p13 start 65535 is beyond EOD, truncated
[   81.440529][ T6637] loop4: p14 start 65535 is beyond EOD, truncated
[   81.442845][ T6637] loop4: p15 start 65535 is beyond EOD, truncated
[   81.445889][ T6637] loop4: p16 start 65535 is beyond EOD, truncated
[   81.448719][ T6637] loop4: p17 start 65535 is beyond EOD, truncated
[   81.451758][ T6637] loop4: p18 start 65535 is beyond EOD, truncated
[   81.454385][ T6637] loop4: p19 start 65535 is beyond EOD, truncated
[   81.457462][ T6637] loop4: p20 start 65535 is beyond EOD, truncated
[   81.459761][ T6637] loop4: p21 start 65535 is beyond EOD, truncated
[   81.462147][ T6637] loop4: p22 start 65535 is beyond EOD, truncated
[   81.464581][ T6637] loop4: p23 start 65535 is beyond EOD, truncated
[   81.467120][ T6637] loop4: p24 start 65535 is beyond EOD, truncated
[   81.469374][ T6637] loop4: p25 start 65535 is beyond EOD, truncated
[   81.471586][ T6637] loop4: p26 start 65535 is beyond EOD, truncated
[   81.473937][ T6637] loop4: p27 start 65535 is beyond EOD, truncated
[   81.476475][ T6637] loop4: p28 start 65535 is beyond EOD, truncated
[   81.478447][ T6637] loop4: p29 start 65535 is beyond EOD, truncated
[   81.480714][ T6637] loop4: p30 start 65535 is beyond EOD, truncated
[   81.483079][ T6637] loop4: p31 start 65535 is beyond EOD, truncated
[   81.485816][ T6637] loop4: p32 start 65535 is beyond EOD, truncated
[   81.487812][ T6637] loop4: p33 start 65535 is beyond EOD, truncated
[   81.489716][ T6637] loop4: p34 start 65535 is beyond EOD, truncated
[   81.491589][ T6637] loop4: p35 start 65535 is beyond EOD, truncated
[   81.493646][ T6637] loop4: p36 start 65535 is beyond EOD, truncated
[   81.496393][ T6637] loop4: p37 start 65535 is beyond EOD, truncated
[   81.498792][ T6637] loop4: p38 start 65535 is beyond EOD, truncated
[   81.501021][ T6637] loop4: p39 start 65535 is beyond EOD, truncated
[   81.503173][ T6637] loop4: p40 start 65535 is beyond EOD, truncated
[   81.505212][ T6637] loop4: p41 start 65535 is beyond EOD, truncated
[   81.507319][ T6637] loop4: p42 start 65535 is beyond EOD, truncated
[   81.509576][ T6637] loop4: p43 start 65535 is beyond EOD, truncated
[   81.511871][ T6637] loop4: p44 start 65535 is beyond EOD, truncated
[   81.514090][ T6637] loop4: p45 start 65535 is beyond EOD, truncated
[   81.516411][ T6637] loop4: p46 start 65535 is beyond EOD, truncated
[   81.518809][ T6637] loop4: p47 start 65535 is beyond EOD, truncated
[   81.521057][ T6637] loop4: p48 start 65535 is beyond EOD, truncated
[   81.523101][ T6637] loop4: p49 start 65535 is beyond EOD, truncated
[   81.525701][ T6637] loop4: p50 start 65535 is beyond EOD, truncated
[   81.528081][ T6637] loop4: p51 start 65535 is beyond EOD, truncated
[   81.530156][ T6637] loop4: p52 start 65535 is beyond EOD, truncated
[   81.532208][ T6637] loop4: p53 start 65535 is beyond EOD, truncated
[   81.534775][ T6637] loop4: p54 start 65535 is beyond EOD, truncated
[   81.537171][ T6637] loop4: p55 start 65535 is beyond EOD, truncated
[   81.539783][ T6637] loop4: p56 start 65535 is beyond EOD, truncated
[   81.542357][ T6637] loop4: p57 start 65535 is beyond EOD, truncated
[   81.544944][ T6637] loop4: p58 start 65535 is beyond EOD, truncated
[   81.547352][ T6637] loop4: p59 start 65535 is beyond EOD, truncated
[   81.549787][ T6637] loop4: p60 start 65535 is beyond EOD, truncated
[   81.552290][ T6637] loop4: p61 start 65535 is beyond EOD, truncated
[   81.556688][ T6637] loop4: p62 start 65535 is beyond EOD, truncated
[   81.559150][ T6637] loop4: p63 start 65535 is beyond EOD, truncated
[   81.561571][ T6637] loop4: p64 start 65535 is beyond EOD, truncated
[   81.563800][ T6637] loop4: p65 start 65535 is beyond EOD, truncated
[   81.566277][ T6637] loop4: p66 start 65535 is beyond EOD, truncated
[   81.568485][ T6637] loop4: p67 start 65535 is beyond EOD, truncated
[   81.570865][ T6637] loop4: p68 start 65535 is beyond EOD, truncated
[   81.573156][ T6637] loop4: p69 start 65535 is beyond EOD, truncated
[   81.575474][ T6637] loop4: p70 start 65535 is beyond EOD, truncated
[   81.577516][ T6637] loop4: p71 start 65535 is beyond EOD, truncated
[   81.579569][ T6637] loop4: p72 start 65535 is beyond EOD, truncated
[   81.581993][ T6637] loop4: p73 start 65535 is beyond EOD, truncated
[   81.584356][ T6637] loop4: p74 start 65535 is beyond EOD, truncated
[   81.586986][ T6637] loop4: p75 start 65535 is beyond EOD, truncated
[   81.589181][ T6637] loop4: p76 start 65535 is beyond EOD, truncated
[   81.591596][ T6637] loop4: p77 start 65535 is beyond EOD, truncated
[   81.593595][ T6637] loop4: p78 start 65535 is beyond EOD, truncated
[   81.596284][ T6637] loop4: p79 start 65535 is beyond EOD, truncated
[   81.598284][ T6637] loop4: p80 start 65535 is beyond EOD, truncated
[   81.600245][ T6637] loop4: p81 start 65535 is beyond EOD, truncated
[   81.602232][ T6637] loop4: p82 start 65535 is beyond EOD, truncated
[   81.604202][ T6637] loop4: p83 start 65535 is beyond EOD, truncated
[   81.606523][ T6637] loop4: p84 start 65535 is beyond EOD, truncated
[   81.608505][ T6637] loop4: p85 start 65535 is beyond EOD, truncated
[   81.610467][ T6637] loop4: p86 start 65535 is beyond EOD, truncated
[   81.612405][ T6637] loop4: p87 start 65535 is beyond EOD, truncated
[   81.614348][ T6637] loop4: p88 start 65535 is beyond EOD, truncated
[   81.616372][ T6637] loop4: p89 start 65535 is beyond EOD, truncated
[   81.618326][ T6637] loop4: p90 start 65535 is beyond EOD, truncated
[   81.620303][ T6637] loop4: p91 start 65535 is beyond EOD, truncated
[   81.622315][ T6637] loop4: p92 start 65535 is beyond EOD, truncated
[   81.624311][ T6637] loop4: p93 start 65535 is beyond EOD, truncated
[   81.626267][ T6637] loop4: p94 start 65535 is beyond EOD, truncated
[   81.628155][ T6637] loop4: p95 start 65535 is beyond EOD, truncated
[   81.630095][ T6637] loop4: p96 start 65535 is beyond EOD, truncated
[   81.632110][ T6637] loop4: p97 start 65535 is beyond EOD, truncated
[   81.634090][ T6637] loop4: p98 start 65535 is beyond EOD, truncated
[   81.636472][ T6637] loop4: p99 start 65535 is beyond EOD, truncated
[   81.638485][ T6637] loop4: p100 start 65535 is beyond EOD, truncated
[   81.640405][ T6637] loop4: p101 start 65535 is beyond EOD, truncated
[   81.642502][ T6637] loop4: p102 start 65535 is beyond EOD, truncated
[   81.644868][ T6637] loop4: p103 start 65535 is beyond EOD, truncated
[   81.647505][ T6637] loop4: p104 start 65535 is beyond EOD, truncated
[   81.649891][ T6637] loop4: p105 start 65535 is beyond EOD, truncated
[   81.652017][ T6637] loop4: p106 start 65535 is beyond EOD, truncated
[   81.654146][ T6637] loop4: p107 start 65535 is beyond EOD, truncated
[   81.658766][ T5671] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   81.661456][ T6637] loop4: p108 start 65535 is beyond EOD, truncated
[   81.664034][ T6637] loop4: p109 start 65535 is beyond EOD, truncated
[   81.666939][ T6637] loop4: p110 start 65535 is beyond EOD, truncated
[   81.669054][ T6637] loop4: p111 start 65535 is beyond EOD, truncated
[   81.671520][ T6637] loop4: p112 start 65535 is beyond EOD, truncated
[   81.674072][ T6637] loop4: p113 start 65535 is beyond EOD, truncated
[   81.677453][ T6637] loop4: p114 start 65535 is beyond EOD, truncated
[   81.680117][ T6637] loop4: p115 start 65535 is beyond EOD, truncated
[   81.682751][ T6637] loop4: p116 start 65535 is beyond EOD, truncated
[   81.685496][ T6637] loop4: p117 start 65535 is beyond EOD, truncated
[   81.688102][ T6637] loop4: p118 start 65535 is beyond EOD, truncated
[   81.690732][ T6637] loop4: p119 start 65535 is beyond EOD, truncated
[   81.693318][ T6637] loop4: p120 start 65535 is beyond EOD, truncated
[   81.696004][ T6637] loop4: p121 start 65535 is beyond EOD, truncated
[   81.698665][ T6637] loop4: p122 start 65535 is beyond EOD, truncated
[   81.701318][ T6637] loop4: p123 start 65535 is beyond EOD, truncated
[   81.703887][ T6637] loop4: p124 start 65535 is beyond EOD, truncated
[   81.707069][ T6637] loop4: p125 start 65535 is beyond EOD, truncated
[   81.709535][ T6637] loop4: p126 start 65535 is beyond EOD, truncated
[   81.711894][ T6637] loop4: p127 start 65535 is beyond EOD, truncated
[   81.714122][ T6637] loop4: p128 start 65535 is beyond EOD, truncated
[   81.720532][ T6637] loop4: p129 start 65535 is beyond EOD, truncated
[   81.724072][ T6637] loop4: p130 start 65535 is beyond EOD, truncated
[   81.729566][ T6637] loop4: p131 start 65535 is beyond EOD, truncated
[   81.731701][  T879] cfg80211: failed to load regulatory.db
[   81.739115][ T6637] loop4: p132 start 65535 is beyond EOD, truncated
[   81.742140][ T6125] Freezing user space processes
[   81.745120][ T6637] loop4: p133 start 65535 is beyond EOD, truncated
[   81.746465][ T6459] 
[   81.747318][ T6637] loop4: p134 start 65535 is beyond EOD, truncated
[   81.748121][ T6459] ====================================
[   81.750130][ T6637] loop4: p135 start 65535 is beyond EOD, 
[   81.751815][ T6459] WARNING: syz.1.270/6459 still has locks held!
[   81.751818][ T6637] truncated
[   81.751828][ T6459] syzkaller #0 Tainted: G             L     
[   81.753577][ T6637] loop4: p136 start 65535 is beyond EOD, 
[   81.755696][ T6459] ------------------------------------
[   81.757206][ T6637] truncated
[   81.758923][ T6459] locks held by syz.1.270/6459: 1, last CPU#1:
[   81.758933][ T6459]  #0: ffff888171070258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_compat_flash_update+0xa6/0x2c0
[   81.758966][ T6459] 
[   81.758966][ T6459] stack backtrace:
[   81.758973][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.1.270 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   81.758985][ T6459] Tainted: [L]=SOFTLOCKUP
[   81.758988][ T6459] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.758996][ T6459] Call Trace:
[   81.759000][ T6459]  <TASK>
[   81.759003][ T6459]  dump_stack_lvl+0xe8/0x150
[   81.759015][ T6459]  print_held_locks_bug+0x82/0x90
[   81.759028][ T6459]  usermodehelper_read_trylock+0x207/0x2c0
[   81.759037][ T6459]  ? __pfx_usermodehelper_read_trylock+0x10/0x10
[   81.759047][ T6459]  ? __pfx_autoremove_wake_function+0x10/0x10
[   81.759056][ T6459]  ? ima_load_data+0xa1/0x110
[   81.759067][ T6459]  firmware_fallback_sysfs+0x16e/0xa40
[   81.759078][ T6459]  ? kfree+0x1c5/0x640
[   81.759087][ T6459]  _request_firmware+0x1049/0x1780
[   81.759099][ T6459]  ? __pfx__request_firmware+0x10/0x10
[   81.759109][ T6459]  ? xa_get_mark+0x67/0x7a0
[   81.759120][ T6459]  request_firmware+0x36/0x50
[   81.759129][ T6459]  devlink_compat_flash_update+0x157/0x2c0
[   81.759137][ T6459]  ? dev_ethtool+0x224a/0x29c0
[   81.759144][ T6459]  ? dev_ioctl+0x392/0x1150
[   81.759152][ T6459]  ? sock_ioctl+0x57a/0x7e0
[   81.759163][ T6459]  ? __se_sys_ioctl+0xfc/0x170
[   81.759170][ T6459]  ? do_syscall_64+0x166/0x520
[   81.759179][ T6459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.759187][ T6459]  ? __pfx_devlink_compat_flash_update+0x10/0x10
[   81.759195][ T6459]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   81.759205][ T6459]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[   81.759213][ T6459]  dev_ethtool+0x23b7/0x29c0
[   81.759219][ T6459]  ? __lock_acquire+0x683/0x2cf0
[   81.759230][ T6459]  ? __pfx_dev_ethtool+0x10/0x10
[   81.759237][ T6459]  ? kasan_quarantine_put+0xbb/0x1f0
[   81.759247][ T6459]  ? dev_load+0x21/0x1f0
[   81.759255][ T6459]  ? dev_load+0x21/0x1f0
[   81.759263][ T6459]  ? dev_load+0x21/0x1f0
[   81.759270][ T6459]  dev_ioctl+0x392/0x1150
[   81.759277][ T6459]  sock_do_ioctl+0x23e/0x320
[   81.759287][ T6459]  ? trace_irq_disable+0x3b/0x140
[   81.759297][ T6459]  ? __pfx_sock_do_ioctl+0x10/0x10
[   81.759308][ T6459]  ? __pfx_sock_ioctl+0x10/0x10
[   81.759318][ T6459]  sock_ioctl+0x57a/0x7e0
[   81.759328][ T6459]  ? __pfx_sock_ioctl+0x10/0x10
[   81.759338][ T6459]  ? __fget_files+0x2a/0x420
[   81.759344][ T6459]  ? __fget_files+0x3a2/0x420
[   81.759349][ T6459]  ? __fget_files+0x2a/0x420
[   81.759356][ T6459]  ? bpf_lsm_file_ioctl+0x9/0x20
[   81.759365][ T6459]  ? __pfx_sock_ioctl+0x10/0x10
[   81.759374][ T6459]  __se_sys_ioctl+0xfc/0x170
[   81.759382][ T6459]  do_syscall_64+0x166/0x520
[   81.759391][ T6459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.759399][ T6459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.759406][ T6459] RIP: 0033:0x7f1c3d39e159
[   81.759414][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.759420][ T6459] RSP: 002b:00007f1c3e31b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   81.759428][ T6459] RAX: ffffffffffffffda RBX: 00007f1c3d625fa0 RCX: 00007f1c3d39e159
[   81.759433][ T6459] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000006
[   81.759438][ T6459] RBP: 00007f1c3d43506b R08: 0000000000000000 R09: 0000000000000000
[   81.759442][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.759446][ T6459] R13: 00007f1c3d626038 R14: 00007f1c3d625fa0 R15: 00007ffc85c5d978
[   81.759454][ T6459]  </TASK>
[   81.877378][ T5591] Bluetooth: hci3: command tx timeout
[   81.880339][ T6637] loop4: p137 start 65535 is beyond EOD, truncated
[   81.886033][ T6637] loop4: p138 start 65535 is beyond EOD, truncated
[   81.888376][ T6637] loop4: p139 start 65535 is beyond EOD, truncated
[   81.890577][ T6637] loop4: p140 start 65535 is beyond EOD, truncated
[   81.892678][ T6637] loop4: p141 start 65535 is beyond EOD, truncated
[   81.895138][ T5671] usb 4-1: Using ep0 maxpacket: 32
[   81.897451][ T6637] loop4: p142 start 65535 is beyond EOD, truncated
[   81.899960][ T6637] loop4: p143 start 65535 is beyond EOD, truncated
[   81.902343][ T6637] loop4: p144 start 65535 is beyond EOD, truncated
[   81.904716][ T6637] loop4: p145 start 65535 is beyond EOD, truncated
[   81.907116][ T6637] loop4: p146 start 65535 is beyond EOD, truncated
[   81.909523][ T6637] loop4: p147 start 65535 is beyond EOD, truncated
[   81.911926][ T6637] loop4: p148 start 65535 is beyond EOD, truncated
[   81.914190][ T6637] loop4: p149 start 65535 is beyond EOD, truncated
[   81.916270][ T6637] loop4: p150 start 65535 is beyond EOD, truncated
[   81.918294][ T6637] loop4: p151 start 65535 is beyond EOD, truncated
[   81.920340][ T6637] loop4: p152 start 65535 is beyond EOD, truncated
[   81.922385][ T6637] loop4: p153 start 65535 is beyond EOD, truncated
[   81.924756][ T6637] loop4: p154 start 65535 is beyond EOD, truncated
[   81.927073][ T6637] loop4: p155 start 65535 is beyond EOD, truncated
[   81.929137][ T6637] loop4: p156 start 65535 is beyond EOD, truncated
[   81.931223][ T6637] loop4: p157 start 65535 is beyond EOD, truncated
[   81.933392][ T6637] loop4: p158 start 65535 is beyond EOD, truncated
[   81.935907][ T6637] loop4: p159 start 65535 is beyond EOD, truncated
[   81.938183][ T6637] loop4: p160 start 65535 is beyond EOD, truncated
[   81.940667][ T6637] loop4: p161 start 65535 is beyond EOD, truncated
[   81.942782][ T6637] loop4: p162 start 65535 is beyond EOD, truncated
[   81.944975][ T6637] loop4: p163 start 65535 is beyond EOD, truncated
[   81.947221][ T6637] loop4: p164 start 65535 is beyond EOD, truncated
[   81.949657][ T6637] loop4: p165 start 65535 is beyond EOD, truncated
[   81.951883][ T6637] loop4: p166 start 65535 is beyond EOD, truncated
[   81.954322][ T6637] loop4: p167 start 65535 is beyond EOD, truncated
[   81.958676][ T6637] loop4: p168 start 65535 is beyond EOD, truncated
[   81.961072][ T6637] loop4: p169 start 65535 is beyond EOD, truncated
[   81.964156][ T6637] loop4: p170 start 65535 is beyond EOD, truncated
[   81.966442][ T6637] loop4: p171 start 65535 is beyond EOD, truncated
[   81.968474][ T6637] loop4: p172 start 65535 is beyond EOD, truncated
[   81.970550][ T6637] loop4: p173 start 65535 is beyond EOD, truncated
[   81.972854][ T6637] loop4: p174 start 65535 is beyond EOD, truncated
[   81.975218][ T6637] loop4: p175 start 65535 is beyond EOD, truncated
[   81.977391][ T6637] loop4: p176 start 65535 is beyond EOD, truncated
[   81.979499][ T6637] loop4: p177 start 65535 is beyond EOD, truncated
[   81.981807][ T6637] loop4: p178 start 65535 is beyond EOD, truncated
[   81.983821][ T6637] loop4: p179 start 65535 is beyond EOD, truncated
[   81.985883][ T6637] loop4: p180 start 65535 is beyond EOD, truncated
[   81.987906][ T6637] loop4: p181 start 65535 is beyond EOD, truncated
[   81.989942][ T6637] loop4: p182 start 65535 is beyond EOD, truncated
[   81.991952][ T6637] loop4: p183 start 65535 is beyond EOD, truncated
[   81.993998][ T6637] loop4: p184 start 65535 is beyond EOD, truncated
[   81.996032][ T6637] loop4: p185 start 65535 is beyond EOD, truncated
[   81.998059][ T6637] loop4: p186 start 65535 is beyond EOD, truncated
[   82.000243][ T6637] loop4: p187 start 65535 is beyond EOD, truncated
[   82.002298][ T6637] loop4: p188 start 65535 is beyond EOD, truncated
[   82.004338][ T6637] loop4: p189 start 65535 is beyond EOD, truncated
[   82.006427][ T6637] loop4: p190 start 65535 is beyond EOD, truncated
[   82.008473][ T6637] loop4: p191 start 65535 is beyond EOD, truncated
[   82.010549][ T6637] loop4: p192 start 65535 is beyond EOD, truncated
[   82.012590][ T6637] loop4: p193 start 65535 is beyond EOD, truncated
[   82.014751][ T6637] loop4: p194 start 65535 is beyond EOD, truncated
[   82.017178][ T6637] loop4: p195 start 65535 is beyond EOD, truncated
[   82.019508][ T6637] loop4: p196 start 65535 is beyond EOD, truncated
[   82.021553][ T6637] loop4: p197 start 65535 is beyond EOD, truncated
[   82.023516][ T6637] loop4: p198 start 65535 is beyond EOD, truncated
[   82.025747][ T6637] loop4: p199 start 65535 is beyond EOD, truncated
[   82.027947][ T6637] loop4: p200 start 65535 is beyond EOD, truncated
[   82.029986][ T6637] loop4: p201 start 65535 is beyond EOD, truncated
[   82.032064][ T6637] loop4: p202 start 65535 is beyond EOD, truncated
[   82.034194][ T6637] loop4: p203 start 65535 is beyond EOD, truncated
[   82.037236][ T6637] loop4: p204 start 65535 is beyond EOD, truncated
[   82.039384][ T6637] loop4: p205 start 65535 is beyond EOD, truncated
[   82.041406][ T6637] loop4: p206 start 65535 is beyond EOD, truncated
[   82.043435][ T6637] loop4: p207 start 65535 is beyond EOD, truncated
[   82.046181][ T6637] loop4: p208 start 65535 is beyond EOD, truncated
[   82.048250][ T6637] loop4: p209 start 65535 is beyond EOD, truncated
[   82.050316][ T6637] loop4: p210 start 65535 is beyond EOD, truncated
[   82.052376][ T6637] loop4: p211 start 65535 is beyond EOD, truncated
[   82.054404][ T6637] loop4: p212 start 65535 is beyond EOD, truncated
[   82.056700][ T6637] loop4: p213 start 65535 is beyond EOD, truncated
[   82.058782][ T6637] loop4: p214 start 65535 is beyond EOD, truncated
[   82.061114][ T6637] loop4: p215 start 65535 is beyond EOD, truncated
[   82.063341][ T6637] loop4: p216 start 65535 is beyond EOD, truncated
[   82.066124][ T6637] loop4: p217 start 65535 is beyond EOD, truncated
[   82.068169][ T6637] loop4: p218 start 65535 is beyond EOD, truncated
[   82.070275][ T6637] loop4: p219 start 65535 is beyond EOD, truncated
[   82.072543][ T6637] loop4: p220 start 65535 is beyond EOD, truncated
[   82.074686][ T6637] loop4: p221 start 65535 is beyond EOD, truncated
[   82.076730][ T6637] loop4: p222 start 65535 is beyond EOD, truncated
[   82.078898][ T6637] loop4: p223 start 65535 is beyond EOD, truncated
[   82.080953][ T6637] loop4: p224 start 65535 is beyond EOD, truncated
[   82.083011][ T6637] loop4: p225 start 65535 is beyond EOD, truncated
[   82.085409][ T6637] loop4: p226 start 65535 is beyond EOD, truncated
[   82.087433][ T6637] loop4: p227 start 65535 is beyond EOD, truncated
[   82.089497][ T6637] loop4: p228 start 65535 is beyond EOD, truncated
[   82.091557][ T6637] loop4: p229 start 65535 is beyond EOD, truncated
[   82.093659][ T6637] loop4: p230 start 65535 is beyond EOD, truncated
[   82.095966][ T6637] loop4: p231 start 65535 is beyond EOD, truncated
[   82.098000][ T6637] loop4: p232 start 65535 is beyond EOD, truncated
[   82.100172][ T6637] loop4: p233 start 65535 is beyond EOD, truncated
[   82.102256][ T6637] loop4: p234 start 65535 is beyond EOD, truncated
[   82.104367][ T6637] loop4: p235 start 65535 is beyond EOD, truncated
[   82.106712][ T6637] loop4: p236 start 65535 is beyond EOD, truncated
[   82.108758][ T6637] loop4: p237 start 65535 is beyond EOD, truncated
[   82.111068][ T6637] loop4: p238 start 65535 is beyond EOD, truncated
[   82.113234][ T6637] loop4: p239 start 65535 is beyond EOD, truncated
[   82.116230][ T6637] loop4: p240 start 65535 is beyond EOD, truncated
[   82.118277][ T6637] loop4: p241 start 65535 is beyond EOD, truncated
[   82.120696][ T6637] loop4: p242 start 65535 is beyond EOD, truncated
[   82.122902][ T6637] loop4: p243 start 65535 is beyond EOD, truncated
[   82.126391][ T6637] loop4: p244 start 65535 is beyond EOD, truncated
[   82.128611][ T6637] loop4: p245 start 65535 is beyond EOD, truncated
[   82.130695][ T6637] loop4: p246 start 65535 is beyond EOD, truncated
[   82.132858][ T6637] loop4: p247 start 65535 is beyond EOD, truncated
[   82.134862][ T6637] loop4: p248 start 65535 is beyond EOD, truncated
[   82.136944][ T6637] loop4: p249 start 65535 is beyond EOD, truncated
[   82.139033][ T6637] loop4: p250 start 65535 is beyond EOD, truncated
[   82.141534][ T6637] loop4: p251 start 65535 is beyond EOD, truncated
[   82.143909][ T6637] loop4: p252 start 65535 is beyond EOD, truncated
[   82.146288][ T6637] loop4: p253 start 65535 is beyond EOD, truncated
[   82.148759][ T6637] loop4: p254 start 65535 is beyond EOD, truncated
[   82.151161][ T6637] loop4: p255 start 65535 is beyond EOD, truncated
[   83.954588][ T5591] Bluetooth: hci3: command tx timeout
[   86.034934][ T5591] Bluetooth: hci3: command tx timeout
[   86.914824][ T5671] usb 4-1: device descriptor read/all, error -110
[   87.044556][ T5671] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   87.174521][ T5671] usb 4-1: device descriptor read/64, error -32
[   87.295033][ T5671] usb usb4-port1: attempt power cycle
[   87.634621][ T5671] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   87.654810][ T5671] usb 4-1: device descriptor read/8, error -32
[   87.894638][ T5671] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   87.914877][ T5671] usb 4-1: device descriptor read/8, error -32
[   88.025134][ T5671] usb usb4-port1: unable to enumerate USB device
[   88.114945][ T5591] Bluetooth: hci3: command tx timeout
