last executing test programs:

3m16.463507787s ago: executing program 0 (id=479):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000000c00)=ANY=[], 0x1, 0x555e, &(0x7f0000005f80)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

3m15.269344339s ago: executing program 0 (id=491):
r0 = mq_open(&(0x7f0000000040)='\'\\\x00', 0x40, 0x2, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/191, 0xbf}], 0x1, 0x1ff, 0x59)

3m13.518435786s ago: executing program 0 (id=495):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4)

3m13.348755246s ago: executing program 0 (id=496):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000140), 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60)
getdents64(r0, 0x0, 0x22)

3m13.173709811s ago: executing program 0 (id=498):
unshare(0x2040400)
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c)
ppoll(&(0x7f0000001c40)=[{r0, 0x8002}], 0x1, 0x0, 0x0, 0x0)

3m12.798169674s ago: executing program 0 (id=502):
syz_emit_ethernet(0x11, &(0x7f0000001300)={@link_local, @dev, @void, {@llc_tr={0x11, {@llc={0x35419df6840579c6, 0xff, "02"}}}}}, 0x0)

3m12.556630852s ago: executing program 32 (id=502):
syz_emit_ethernet(0x11, &(0x7f0000001300)={@link_local, @dev, @void, {@llc_tr={0x11, {@llc={0x35419df6840579c6, 0xff, "02"}}}}}, 0x0)

3m6.941308138s ago: executing program 3 (id=537):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

3m6.647902926s ago: executing program 3 (id=541):
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040)

3m6.598460082s ago: executing program 3 (id=544):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

3m6.505343409s ago: executing program 3 (id=546):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1e5042, 0x1ff)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6)

3m6.269870491s ago: executing program 3 (id=551):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0)
mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r1, 0xbc4cd000)
read$rfkill(r0, &(0x7f0000000000), 0x8)
read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020)

3m4.376219389s ago: executing program 1 (id=560):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x2})

3m4.376134996s ago: executing program 1 (id=561):
unshare(0x20000600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x9f)

3m4.30907579s ago: executing program 1 (id=562):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES8=r1, @ANYBLOB="ebbe5b97"], 0x24}}, 0x0)

3m4.308705765s ago: executing program 1 (id=563):
syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f000000df00)={[{@nodiscard}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@grpjquota}, {@noflush_merge}, {@nocheckpoint_merge}, {@acl}, {@gc_merge}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@background_gc_off}, {@checkpoint_diasble}]}, 0x4, 0x550c, &(0x7f00000089c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})

3m4.22936579s ago: executing program 3 (id=564):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)

3m4.050466257s ago: executing program 33 (id=564):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10)
getxattr(0x0, 0x0, 0x0, 0x0)

3m3.761952563s ago: executing program 1 (id=566):
r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchownat(r1, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0)

3m2.620993116s ago: executing program 1 (id=569):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000ff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000020b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

3m2.502711511s ago: executing program 34 (id=569):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000ff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000020b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94)

1m5.276871461s ago: executing program 4 (id=1493):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x62, 0xda, 0x20, 0x2040, 0x4901, 0x4777, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0x8e, 0x72}}]}}]}}, 0x0)

1m4.618166897s ago: executing program 4 (id=1499):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)

1m4.175346641s ago: executing program 4 (id=1500):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
statfs(0x0, 0x0)

1m2.824645432s ago: executing program 2 (id=1508):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x1}, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x90000}, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)

1m2.824378085s ago: executing program 2 (id=1509):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]})

1m2.077359152s ago: executing program 5 (id=1511):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0xc, 0x9, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000b8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m2.007999286s ago: executing program 5 (id=1512):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
landlock_restrict_self(r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0)
syz_io_uring_setup(0x7540, 0x0, 0x0, 0x0)

1m1.832951034s ago: executing program 2 (id=1513):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xd50, 0xffffffffffffff60, &(0x7f0000000380)="b9ff0300600d698cff9e14f08edd", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50)

1m1.832744258s ago: executing program 5 (id=1514):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8)
sendto$inet6(r0, &(0x7f0000000280)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x4, 0x4}, 0x8)

1m1.707791898s ago: executing program 2 (id=1515):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x3, 0x3, 0x0, 0x4, 0x40, 0x4, 0x6}, &(0x7f0000000040)=0x9c)

1m1.576974173s ago: executing program 5 (id=1516):
timerfd_create(0x7, 0x80000)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x54)

1m1.576808008s ago: executing program 4 (id=1517):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)

1m1.425049038s ago: executing program 5 (id=1518):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='subflow_check_data_avail\x00', r0, 0x0, 0x200000}, 0x18)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081)

1m1.424709185s ago: executing program 2 (id=1519):
setresgid(0xffffffffffffffff, 0xee01, 0xffffffffffffffff)
socket$nl_audit(0x10, 0x3, 0x9)
socket(0x28, 0x801, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000100), 0x800)

1m1.424559563s ago: executing program 4 (id=1520):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'cpuacct.usage_percpu_sys\x00'}], 0xa, "d4692be5874f1ac0bbe59322888b190f8b09d28074cb387bd7da8dc6707e219c854a69509a358516203a557f1d1b7de2189bd7f81e76b685eae275d3d365002ec81a4d1866d3a42ddf80980c2d0a645cf2c7ed84071492aff62a1721929164e0a329764aab3b96e8e08289467ba5c57bff1fea4a2c086bf910e99e92811f1e63284c4fc5dad1b2b43d7b3681f847e7e334ed80eb4ebf908bae3ec9297bc53d6d8d685f1c5926ad919d5530159bf1ea0c70f9b7156f38c82ee63add36550337eb3120d74f7498bda36ba0519562c356b89590c113ad2182231d2bd9c5"}, 0x101)
modify_ldt$write(0x1, &(0x7f0000000180)={0x2, 0x20000800, 0x400, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
unshare(0x2c020400)
r0 = msgget$private(0x0, 0x1a2)
msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0)
msgsnd(r0, &(0x7f0000000100)=ANY=[], 0x8, 0x800)
msgrcv(r0, 0x0, 0x0, 0xffffff7f00000000, 0x3800)

40.962650122s ago: executing program 4 (id=1521):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000003f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

39.283896066s ago: executing program 5 (id=1522):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x4, 0x0, &(0x7f0000000080))

39.283689121s ago: executing program 2 (id=1523):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x820}]}, 0x54}}, 0x40000)

30.733775209s ago: executing program 35 (id=1521):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)

1.440988978s ago: executing program 36 (id=1522):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x4, 0x0, &(0x7f0000000080))

0s ago: executing program 37 (id=1523):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x820}]}, 0x54}}, 0x40000)

kernel console output (not intermixed with test programs):

 deactivated: batadv_slave_1
[  115.868882][ T5866] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.893293][ T5860] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.897554][ T5866] veth1_macvtap: left promiscuous mode
[  115.905424][ T5866] veth0_macvtap: left promiscuous mode
[  115.908255][ T5866] veth1_vlan: left promiscuous mode
[  115.910626][ T5866] veth0_vlan: left promiscuous mode
[  116.173739][   T24] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  116.357014][ T5866] team0 (unregistering): Port device team_slave_1 removed
[  116.386741][ T5866] team0 (unregistering): Port device team_slave_0 removed
[  116.762831][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.765477][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.777011][ T7259] bridge_slave_0: entered allmulticast mode
[  116.783861][ T7259] bridge_slave_0: entered promiscuous mode
[  116.792742][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.795926][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.803644][ T7259] bridge_slave_1: entered allmulticast mode
[  116.806648][ T7259] bridge_slave_1: entered promiscuous mode
[  116.903215][ T7259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.908948][ T7259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.964211][ T7259] team0: Port device team_slave_0 added
[  116.973185][ T7259] team0: Port device team_slave_1 added
[  116.990238][   T47] usb 3-1: USB disconnect, device number 8
[  117.035909][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.039554][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.049376][ T7259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.061851][ T7323] batman_adv: batadv0: Adding interface: ipvlan2
[  117.064725][ T7323] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.075537][ T7323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.079779][ T7323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.083538][ T7323] batman_adv: batadv0: Interface activated: ipvlan2
[  117.090860][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.094333][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.106734][ T7259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.150085][   T54] Bluetooth: hci0: command tx timeout
[  117.162834][ T7259] hsr_slave_0: entered promiscuous mode
[  117.165831][ T7259] hsr_slave_1: entered promiscuous mode
[  117.169321][ T7259] debugfs: 'hsr0' already exists in 'hsr'
[  117.171726][ T7259] Cannot create hsr debugfs directory
[  117.369737][   T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  117.390933][ T7259] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  117.397230][ T7259] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  117.405656][ T7259] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  117.413700][ T7259] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  117.447249][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.450587][ T7259] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.453784][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.457060][ T7259] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.531679][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.536975][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  117.539765][ T7259] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.549845][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  117.557050][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  117.574463][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  117.586240][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.588136][   T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  117.599276][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.604853][   T24] usb 2-1: Manufacturer: syz
[  117.620159][   T24] usb 2-1: config 0 descriptor??
[  117.689932][ T7259] 8021q: adding VLAN 0 to HW filter on device team0
[  117.707470][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.710005][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.714012][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.716863][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.918812][   T24] rc_core: IR keymap rc-hauppauge not found
[  117.921097][   T24] Registered IR keymap rc-empty
[  117.923141][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  117.937940][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  117.953978][ T7259] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.960691][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  117.970257][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  117.979573][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  117.997977][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  118.003298][ T7259] veth0_vlan: entered promiscuous mode
[  118.012462][ T7259] veth1_vlan: entered promiscuous mode
[  118.018068][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  118.038220][ T7259] veth0_macvtap: entered promiscuous mode
[  118.039098][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  118.046451][ T7259] veth1_macvtap: entered promiscuous mode
[  118.060192][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  118.060703][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_0
[  118.075574][ T7259] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.077931][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  118.085145][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.088869][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.095730][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.100426][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  118.103608][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.120454][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  118.139186][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  118.166688][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.167957][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  118.174120][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.191438][   T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  118.193225][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.196144][   T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  118.200062][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.337862][ T5890] usb 2-1: USB disconnect, device number 12
[  118.877137][   T33] kauditd_printk_skb: 32 callbacks suppressed
[  118.877146][   T33] audit: type=1326 audit(1757091257.657:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.533" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568658ebe9 code=0x7ffc0000
[  118.890181][   T33] audit: type=1326 audit(1757091257.657:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.533" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568658ebe9 code=0x7ffc0000
[  118.899588][   T33] audit: type=1326 audit(1757091257.677:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.533" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5686590b07 code=0x7ffc0000
[  118.929062][   T33] audit: type=1326 audit(1757091257.677:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.533" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5686590a7c code=0x7ffc0000
[  118.943034][   T33] audit: type=1326 audit(1757091257.677:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.533" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f56865909b4 code=0x7ffc0000
[  118.953419][   T33] audit: type=1326 audit(1757091257.677:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.533" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f56865909b4 code=0x7ffc0000
[  118.962050][   T33] audit: type=1326 audit(1757091257.677:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.533" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f568658d84a code=0x7ffc0000
[  118.980575][   T33] audit: type=1326 audit(1757091257.677:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.533" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568658ebe9 code=0x7ffc0000
[  118.989638][ T7379] netlink: 48 bytes leftover after parsing attributes in process `syz.1.535'.
[  118.990273][   T33] audit: type=1326 audit(1757091257.677:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.2.533" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568658ebe9 code=0x7ffc0000
[  118.994461][ T7379] netlink: 48 bytes leftover after parsing attributes in process `syz.1.535'.
[  119.012413][ T7379] Zero length message leads to an empty skb
[  119.229973][   T54] Bluetooth: hci0: command tx timeout
[  120.281155][ T5890] kernel write not supported for file /392/clear_refs (pid: 5890 comm: kworker/1:3)
[  120.293125][ T7412] loop3: detected capacity change from 0 to 512
[  120.350603][ T7412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.357678][ T7412] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.378053][   T33] audit: type=1800 audit(1757091259.157:68): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.546" name="file1" dev="loop3" ino=15 res=0 errno=0
[  120.431612][ T7412] loop3: detected capacity change from 512 to 0
[  120.431819][    C1] blk_print_req_error: 27 callbacks suppressed
[  120.431831][    C1] I/O error, dev loop3, sector 132 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  120.443509][    C1] I/O error, dev loop3, sector 148 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  120.456147][    C1] I/O error, dev loop3, sector 148 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  120.470005][    C1] I/O error, dev loop3, sector 140 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  120.474349][    C1] I/O error, dev loop3, sector 136 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  120.478581][ T7421] EXT4-fs error (device loop3): ext4_get_inode_loc:4999: inode #15: block 34: comm syz.3.546: unable to read itable block
[  120.495060][ T7421] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: IO failure
[  120.502742][ T7421] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #15: comm syz.3.546: mark_inode_dirty error
[  120.542426][    C1] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  120.581144][    C1] I/O error, dev loop3, sector 140 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  120.585529][    C1] I/O error, dev loop3, sector 136 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  120.589899][ T6896] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4984: inode #15: block 34: comm kworker/u10:6: unable to read itable block
[  120.604930][ T7259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.044526][ T7435] loop1: detected capacity change from 0 to 256
[  121.167654][ T7439] loop1: detected capacity change from 0 to 1764
[  121.184834][ T7439] iso9660: Corrupted directory entry in block 2 of inode 1920
[  121.477920][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  121.645390][   T10] usb 2-1: config 0 has an invalid interface number: 83 but max is 0
[  121.648782][   T10] usb 2-1: config 0 has no interface number 0
[  121.651198][   T10] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  121.654768][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.660070][   T10] usb 2-1: config 0 descriptor??
[  121.665083][   T10] ttusbir 2-1:0.83: cannot find expected altsetting
[  121.870638][   T10] usb 2-1: USB disconnect, device number 13
[  122.605137][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.701675][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.759028][ T7451] loop1: detected capacity change from 0 to 40427
[  122.783017][ T7451] F2FS-fs (loop1): Image doesn't support compression
[  122.791852][ T7451] F2FS-fs (loop1): build fault injection rate: 690
[  122.798497][ T7451] F2FS-fs (loop1): build fault injection type: 0x35f7
[  122.812122][ T7451] F2FS-fs (loop1): invalid crc value
[  122.813006][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.879840][ T7451] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.886006][ T7451] F2FS-fs (loop1): Start checkpoint disabled!
[  122.887047][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.895787][ T7451] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  123.033115][ T5860] F2FS-fs (loop1): access invalid blkaddr:4043309056
[  123.036893][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  123.036908][ T5860] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.036912][ T5860] Call Trace:
[  123.036917][ T5860]  <TASK>
[  123.036920][ T5860]  dump_stack_lvl+0x189/0x250
[  123.036934][ T5860]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.036942][ T5860]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  123.036956][ T5860]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  123.036971][ T5860]  f2fs_map_blocks+0xd84/0x4130
[  123.036996][ T5860]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  123.037006][ T5860]  ? xa_load+0x60/0x210
[  123.037019][ T5860]  ? xa_load+0x1ea/0x210
[  123.037028][ T5860]  f2fs_mpage_readpages+0xcb2/0x1ac0
[  123.037044][ T5860]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  123.037053][ T5860]  ? __folio_batch_add_and_move+0x20a/0xd20
[  123.037068][ T5860]  ? f2fs_readahead+0x177/0x330
[  123.037079][ T5860]  read_pages+0x17a/0x580
[  123.037092][ T5860]  ? __pfx_read_pages+0x10/0x10
[  123.037104][ T5860]  ? filemap_add_folio+0x1af/0x270
[  123.037116][ T5860]  page_cache_ra_unbounded+0x6b0/0x7b0
[  123.037134][ T5860]  f2fs_readdir+0x49b/0xa60
[  123.037149][ T5860]  ? __pfx_f2fs_readdir+0x10/0x10
[  123.037162][ T5860]  ? down_read_killable+0x1d1/0x350
[  123.037171][ T5860]  iterate_dir+0x399/0x570
[  123.037183][ T5860]  __se_sys_getdents64+0xe4/0x260
[  123.037192][ T5860]  ? __pfx___se_sys_getdents64+0x10/0x10
[  123.037200][ T5860]  ? exc_page_fault+0x76/0xf0
[  123.037208][ T5860]  ? __pfx_filldir64+0x10/0x10
[  123.037217][ T5860]  ? do_user_addr_fault+0xc8a/0x1390
[  123.037230][ T5860]  ? do_syscall_64+0xbe/0x3b0
[  123.037237][ T5860]  do_syscall_64+0xfa/0x3b0
[  123.037243][ T5860]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.037252][ T5860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.037258][ T5860]  ? exc_page_fault+0x9f/0xf0
[  123.037268][ T5860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.037275][ T5860] RIP: 0033:0x7f972dbc1553
[  123.037282][ T5860] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[  123.037288][ T5860] RSP: 002b:00007ffeccbe52a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  123.037296][ T5860] RAX: ffffffffffffffda RBX: 0000555570cc1600 RCX: 00007f972dbc1553
[  123.037301][ T5860] RDX: 0000000000008000 RSI: 0000555570cc1600 RDI: 0000000000000005
[  123.037306][ T5860] RBP: 0000555570cc15d4 R08: 0000000000000000 R09: 0000000000000000
[  123.037310][ T5860] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[  123.037314][ T5860] R13: 0000000000000010 R14: 0000555570cc15d0 R15: 00007ffeccbe7560
[  123.037325][ T5860]  </TASK>
[  123.155925][   T13] bridge_slave_1: left allmulticast mode
[  123.160069][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  123.160761][   T13] bridge_slave_1: left promiscuous mode
[  123.165917][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  123.166903][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.173910][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  123.180951][   T13] bridge_slave_0: left allmulticast mode
[  123.183499][   T13] bridge_slave_0: left promiscuous mode
[  123.183908][ T5860] syz-executor: attempt to access beyond end of device
[  123.183908][ T5860] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  123.189988][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.192540][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  123.199059][ T5860] syz-executor: attempt to access beyond end of device
[  123.199059][ T5860] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  123.205799][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  123.242103][ T6896] kworker/u10:6: attempt to access beyond end of device
[  123.242103][ T6896] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  123.247140][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: kworker/u10:6 Not tainted syzkaller #0 PREEMPT(full) 
[  123.247153][ T6896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.247158][ T6896] Workqueue: writeback wb_workfn (flush-7:1)
[  123.247174][ T6896] Call Trace:
[  123.247178][ T6896]  <TASK>
[  123.247182][ T6896]  dump_stack_lvl+0x189/0x250
[  123.247195][ T6896]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.247204][ T6896]  ? __pfx_queue_work_on+0x10/0x10
[  123.247212][ T6896]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  123.247224][ T6896]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.247238][ T6896]  f2fs_handle_critical_error+0x37c/0x540
[  123.247253][ T6896]  f2fs_write_end_io+0x886/0xb60
[  123.247268][ T6896]  __submit_merged_bio+0x27a/0x6a0
[  123.247281][ T6896]  __submit_merged_write_cond+0x255/0x530
[  123.247294][ T6896]  f2fs_write_data_pages+0x261d/0x3000
[  123.247319][ T6896]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.247335][ T6896]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  123.247358][ T6896]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  123.247373][ T6896]  ? trace_f2fs_writepages+0x7f/0x200
[  123.247383][ T6896]  ? f2fs_write_node_pages+0x478/0x6e0
[  123.247395][ T6896]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  123.247410][ T6896]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.247421][ T6896]  do_writepages+0x32e/0x550
[  123.247434][ T6896]  ? reacquire_held_locks+0x127/0x1d0
[  123.247448][ T6896]  ? writeback_sb_inodes+0x384/0x1010
[  123.247486][ T6896]  __writeback_single_inode+0x145/0xff0
[  123.247496][ T6896]  ? do_raw_spin_unlock+0x4d/0x240
[  123.247506][ T6896]  writeback_sb_inodes+0x6c7/0x1010
[  123.247527][ T6896]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  123.247554][ T6896]  ? rcu_is_watching+0x15/0xb0
[  123.247566][ T6896]  wb_writeback+0x43b/0xaf0
[  123.247579][ T6896]  ? queue_io+0x331/0x590
[  123.247589][ T6896]  ? __pfx_wb_writeback+0x10/0x10
[  123.247601][ T6896]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.247613][ T6896]  wb_workfn+0x409/0xef0
[  123.247627][ T6896]  ? __pfx_wb_workfn+0x10/0x10
[  123.247636][ T6896]  ? __lock_acquire+0xab9/0xd20
[  123.247652][ T6896]  ? process_scheduled_works+0x9ef/0x17b0
[  123.247662][ T6896]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.247670][ T6896]  ? process_scheduled_works+0x9ef/0x17b0
[  123.247676][ T6896]  ? process_scheduled_works+0x9ef/0x17b0
[  123.247683][ T6896]  process_scheduled_works+0xae1/0x17b0
[  123.247705][ T6896]  ? __pfx_process_scheduled_works+0x10/0x10
[  123.247719][ T6896]  worker_thread+0x8a0/0xda0
[  123.247728][ T6896]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.247759][ T6896]  ? __kthread_parkme+0x7b/0x200
[  123.247773][ T6896]  kthread+0x711/0x8a0
[  123.247783][ T6896]  ? __pfx_worker_thread+0x10/0x10
[  123.247789][ T6896]  ? __pfx_kthread+0x10/0x10
[  123.247798][ T6896]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.247807][ T6896]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.247817][ T6896]  ? __pfx_kthread+0x10/0x10
[  123.247825][ T6896]  ret_from_fork+0x3fc/0x770
[  123.247835][ T6896]  ? __pfx_ret_from_fork+0x10/0x10
[  123.247845][ T6896]  ? __switch_to_asm+0x39/0x70
[  123.247853][ T6896]  ? __switch_to_asm+0x33/0x70
[  123.247861][ T6896]  ? __pfx_kthread+0x10/0x10
[  123.247870][ T6896]  ret_from_fork_asm+0x1a/0x30
[  123.247886][ T6896]  </TASK>
[  123.389638][ T6896] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  123.400977][ T6896] CPU: 0 UID: 0 PID: 6896 Comm: kworker/u10:6 Not tainted syzkaller #0 PREEMPT(full) 
[  123.400994][ T6896] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.401000][ T6896] Workqueue: writeback wb_workfn (flush-7:1)
[  123.401020][ T6896] Call Trace:
[  123.401024][ T6896]  <TASK>
[  123.401029][ T6896]  dump_stack_lvl+0x189/0x250
[  123.401046][ T6896]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.401058][ T6896]  ? __pfx_queue_work_on+0x10/0x10
[  123.401067][ T6896]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  123.401081][ T6896]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.401101][ T6896]  f2fs_handle_critical_error+0x37c/0x540
[  123.401120][ T6896]  f2fs_write_end_io+0x886/0xb60
[  123.401142][ T6896]  __submit_merged_bio+0x27a/0x6a0
[  123.401159][ T6896]  __submit_merged_write_cond+0x255/0x530
[  123.401177][ T6896]  f2fs_write_data_pages+0x261d/0x3000
[  123.401213][ T6896]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.401235][ T6896]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  123.401268][ T6896]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  123.401290][ T6896]  ? trace_f2fs_writepages+0x7f/0x200
[  123.401304][ T6896]  ? f2fs_write_node_pages+0x478/0x6e0
[  123.401343][ T6896]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  123.401367][ T6896]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.401381][ T6896]  do_writepages+0x32e/0x550
[  123.401399][ T6896]  ? reacquire_held_locks+0x127/0x1d0
[  123.401409][ T6896]  ? writeback_sb_inodes+0x384/0x1010
[  123.401427][ T6896]  __writeback_single_inode+0x145/0xff0
[  123.401439][ T6896]  ? do_raw_spin_unlock+0x4d/0x240
[  123.401480][ T6896]  writeback_sb_inodes+0x6c7/0x1010
[  123.401509][ T6896]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  123.401547][ T6896]  ? rcu_is_watching+0x15/0xb0
[  123.401562][ T6896]  wb_writeback+0x43b/0xaf0
[  123.401579][ T6896]  ? queue_io+0x331/0x590
[  123.401593][ T6896]  ? __pfx_wb_writeback+0x10/0x10
[  123.401610][ T6896]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.401625][ T6896]  wb_workfn+0x409/0xef0
[  123.401645][ T6896]  ? __pfx_wb_workfn+0x10/0x10
[  123.401659][ T6896]  ? __lock_acquire+0xab9/0xd20
[  123.401680][ T6896]  ? process_scheduled_works+0x9ef/0x17b0
[  123.401694][ T6896]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.401705][ T6896]  ? process_scheduled_works+0x9ef/0x17b0
[  123.401712][ T6896]  ? process_scheduled_works+0x9ef/0x17b0
[  123.401723][ T6896]  process_scheduled_works+0xae1/0x17b0
[  123.401759][ T6896]  ? __pfx_process_scheduled_works+0x10/0x10
[  123.401780][ T6896]  worker_thread+0x8a0/0xda0
[  123.401792][ T6896]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.401810][ T6896]  ? __kthread_parkme+0x7b/0x200
[  123.401828][ T6896]  kthread+0x711/0x8a0
[  123.401841][ T6896]  ? __pfx_worker_thread+0x10/0x10
[  123.401850][ T6896]  ? __pfx_kthread+0x10/0x10
[  123.401865][ T6896]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.401878][ T6896]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.401892][ T6896]  ? __pfx_kthread+0x10/0x10
[  123.401907][ T6896]  ret_from_fork+0x3fc/0x770
[  123.401922][ T6896]  ? __pfx_ret_from_fork+0x10/0x10
[  123.401938][ T6896]  ? __switch_to_asm+0x39/0x70
[  123.401951][ T6896]  ? __switch_to_asm+0x33/0x70
[  123.401964][ T6896]  ? __pfx_kthread+0x10/0x10
[  123.401977][ T6896]  ret_from_fork_asm+0x1a/0x30
[  123.401999][ T6896]  </TASK>
[  123.402033][ T6896] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  123.722374][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.726971][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.730855][   T13] bond0 (unregistering): Released all slaves
[  124.142211][   T13] hsr_slave_0: left promiscuous mode
[  124.145114][   T13] hsr_slave_1: left promiscuous mode
[  124.158424][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.161740][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.181643][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.199697][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.227674][   T13] veth1_macvtap: left promiscuous mode
[  124.233754][   T13] veth0_macvtap: left promiscuous mode
[  124.236347][   T13] veth1_vlan: left promiscuous mode
[  124.241062][   T13] veth0_vlan: left promiscuous mode
[  124.900129][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  124.910347][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  124.920354][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  124.925220][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  124.929291][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  125.030188][   T13] team0 (unregistering): Port device team_slave_1 removed
[  125.053711][   T13] team0 (unregistering): Port device team_slave_0 removed
[  125.230813][ T5237] Bluetooth: hci0: command tx timeout
[  125.422102][ T7455] chnl_net:caif_netlink_parms(): no params data found
[  125.547720][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.556797][ T7455] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.568908][ T7455] bridge_slave_0: entered allmulticast mode
[  125.573253][ T7455] bridge_slave_0: entered promiscuous mode
[  125.580373][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.583548][ T7455] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.586614][ T7455] bridge_slave_1: entered allmulticast mode
[  125.592728][ T7455] bridge_slave_1: entered promiscuous mode
[  125.647360][ T7455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.664767][ T7455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.722996][ T7455] team0: Port device team_slave_0 added
[  125.993298][ T7455] team0: Port device team_slave_1 added
[  126.126675][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.129768][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.139399][ T7455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.145932][ T7455] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.150848][ T7455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.162081][ T7455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.244942][ T7455] hsr_slave_0: entered promiscuous mode
[  126.249917][ T7455] hsr_slave_1: entered promiscuous mode
[  126.253080][ T7455] debugfs: 'hsr0' already exists in 'hsr'
[  126.255578][ T7455] Cannot create hsr debugfs directory
[  126.308874][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.441238][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.483806][ T7479] chnl_net:caif_netlink_parms(): no params data found
[  126.674370][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.905914][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.933699][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.944188][ T7479] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.947679][ T7479] bridge_slave_0: entered allmulticast mode
[  126.953052][ T7479] bridge_slave_0: entered promiscuous mode
[  126.959986][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.962510][ T7479] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.965461][ T7479] bridge_slave_1: entered allmulticast mode
[  126.970810][ T7479] bridge_slave_1: entered promiscuous mode
[  126.988974][ T5237] Bluetooth: hci2: command tx timeout
[  127.319697][ T5237] Bluetooth: hci0: command tx timeout
[  127.428382][ T7479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.435185][ T7479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.491275][ T7479] team0: Port device team_slave_0 added
[  127.536568][ T7479] team0: Port device team_slave_1 added
[  127.613109][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.620151][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.632222][ T7479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.637705][ T7479] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.640439][ T7479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.651853][ T7479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.695879][ T7455] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  127.703991][   T13] bridge_slave_1: left allmulticast mode
[  127.706497][   T13] bridge_slave_1: left promiscuous mode
[  127.722736][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.731273][   T13] bridge_slave_0: left allmulticast mode
[  127.733206][   T13] bridge_slave_0: left promiscuous mode
[  127.735395][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.997873][ T7543] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  128.059924][ T7545] loop2: detected capacity change from 0 to 128
[  128.065102][ T7545] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  128.085983][ T7545] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  128.112344][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  128.112359][   T33] audit: type=1800 audit(1757091266.897:70): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.588" name="file0" dev="loop2" ino=1048616 res=0 errno=0
[  128.153197][ T6896] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  128.260449][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  128.268469][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  128.273911][   T13] bond0 (unregistering): Released all slaves
[  128.309758][ T7455] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  128.322461][ T7455] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  128.431696][ T7479] hsr_slave_0: entered promiscuous mode
[  128.434846][ T7479] hsr_slave_1: entered promiscuous mode
[  128.441155][ T7479] debugfs: 'hsr0' already exists in 'hsr'
[  128.445853][ T7479] Cannot create hsr debugfs directory
[  128.449616][ T7455] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  128.576623][ T7564] loop2: detected capacity change from 0 to 256
[  128.592557][ T7564] FAT-fs (loop2): Directory bread(block 64) failed
[  128.595590][ T7564] FAT-fs (loop2): Directory bread(block 65) failed
[  128.598870][ T7564] FAT-fs (loop2): Directory bread(block 66) failed
[  128.601642][ T7564] FAT-fs (loop2): Directory bread(block 67) failed
[  128.604353][ T7564] FAT-fs (loop2): Directory bread(block 68) failed
[  128.607242][ T7564] FAT-fs (loop2): Directory bread(block 69) failed
[  128.618380][ T7564] FAT-fs (loop2): Directory bread(block 70) failed
[  128.623467][ T7564] FAT-fs (loop2): Directory bread(block 71) failed
[  128.631344][ T7564] FAT-fs (loop2): Directory bread(block 72) failed
[  128.634144][ T7564] FAT-fs (loop2): Directory bread(block 73) failed
[  128.726880][   T13] hsr_slave_0: left promiscuous mode
[  128.748008][   T13] hsr_slave_1: left promiscuous mode
[  128.750813][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.753916][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.771930][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.775248][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.786987][   T13] batman_adv: batadv0: Interface deactivated: ipvlan2
[  128.796476][   T13] batman_adv: batadv0: Removing interface: ipvlan2
[  128.825042][   T13] veth1_macvtap: left promiscuous mode
[  128.827406][   T13] veth0_macvtap: left promiscuous mode
[  128.833046][   T13] veth1_vlan: left promiscuous mode
[  128.835549][   T13] veth0_vlan: left promiscuous mode
[  129.068500][ T5237] Bluetooth: hci2: command tx timeout
[  129.364962][   T13] team0 (unregistering): Port device team_slave_1 removed
[  129.394963][   T13] team0 (unregistering): Port device team_slave_0 removed
[  129.398097][ T5237] Bluetooth: hci0: command tx timeout
[  129.806172][ T7455] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.830609][ T7455] 8021q: adding VLAN 0 to HW filter on device team0
[  129.839219][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.841678][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.844902][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.847293][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.005906][ T7479] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  130.035082][ T7479] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  130.056315][ T7479] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  130.096630][ T7479] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  130.318618][ T7479] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.365681][ T7479] 8021q: adding VLAN 0 to HW filter on device team0
[  130.397864][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.400909][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.484417][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.487620][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.591200][ T7455] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.108236][ T7479] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.148959][ T5237] Bluetooth: hci2: command tx timeout
[  131.366941][ T7455] veth0_vlan: entered promiscuous mode
[  131.431262][ T7455] veth1_vlan: entered promiscuous mode
[  131.478661][ T5237] Bluetooth: hci0: command tx timeout
[  131.584415][ T7455] veth0_macvtap: entered promiscuous mode
[  131.629250][ T7455] veth1_macvtap: entered promiscuous mode
[  131.650324][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.664468][ T7455] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.671769][ T7479] veth0_vlan: entered promiscuous mode
[  131.693489][ T7479] veth1_vlan: entered promiscuous mode
[  131.717301][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.724301][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.745728][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.763996][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.809225][ T7479] veth0_macvtap: entered promiscuous mode
[  131.847676][ T7479] veth1_macvtap: entered promiscuous mode
[  131.910911][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.925899][ T7664] misc userio: Invalid payload size
[  131.947362][ T7479] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.959519][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.969974][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.980150][ T7550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.992454][ T7550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.995154][ T7550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  132.021277][ T7550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  132.035072][ T6896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.055262][ T6896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.101412][ T6896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.104322][ T6896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.146940][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.153243][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.261841][ T7681] loop5: detected capacity change from 0 to 2048
[  132.279472][ T7681] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.512407][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.514704][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.668472][ T7696] loop5: detected capacity change from 0 to 32768
[  132.672207][ T7696] btrfs: Deprecated parameter 'usebackuproot'
[  132.674733][ T7696] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  132.680795][ T7696] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.618 (7696)
[  132.692341][ T7696] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.696316][ T7696] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  132.829363][ T7696] BTRFS info (device loop5): rebuilding free space tree
[  132.846266][ T7696] BTRFS info (device loop5): enabling ssd optimizations
[  132.848930][ T7696] BTRFS info (device loop5): using spread ssd allocation scheme
[  132.851782][ T7696] BTRFS info (device loop5): enabling free space tree
[  132.854590][ T7696] BTRFS info (device loop5): force clearing of disk cache
[  132.857278][ T7696] BTRFS info (device loop5): enabling auto defrag
[  132.860135][ T7696] BTRFS info (device loop5): doing ref verification
[  132.862969][ T7696] BTRFS info (device loop5): trying to use backup root at mount time
[  132.866406][ T7696] BTRFS info (device loop5): max_inline set to 4096
[  133.237911][ T5237] Bluetooth: hci2: command tx timeout
[  133.289610][ T7730] loop4: detected capacity change from 0 to 8192
[  133.346291][ T5921]  loop4: AHDI p1 p2
[  133.349264][ T5921] loop4: p1 size 65535 extends beyond EOD, truncated
[  133.386565][ T7730]  loop4: AHDI p1 p2
[  133.389450][ T7730] loop4: p1 size 65535 extends beyond EOD, truncated
[  133.438412][ T7479] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.543636][ T5921] udevd[5921]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  133.734981][ T7744] loop4: detected capacity change from 0 to 47
[  134.172927][ T7772] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  134.176529][ T7772] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  134.609988][ T7797] loop2: detected capacity change from 0 to 512
[  134.722754][ T7797] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  135.729504][ T7810] loop4: detected capacity change from 0 to 4096
[  136.235937][ T7816] loop5: detected capacity change from 0 to 4096
[  136.270799][ T5857] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  136.326282][ T7817] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.453836][ T5857] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  136.457316][ T5857] usb 5-1: config 0 has no interface number 0
[  136.475802][ T5857] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  136.491914][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.519542][ T5857] usb 5-1: config 0 descriptor??
[  136.534963][ T5857] usb 5-1: selecting invalid altsetting 1
[  136.545988][ T5857] dvb_ttusb_budget: ttusb_init_controller: error
[  136.552920][ T5857] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  136.665653][ T5857] DVB: Unable to find symbol cx22700_attach()
[  136.823781][ T5857] DVB: Unable to find symbol tda10046_attach()
[  136.826438][ T5857] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  136.836539][ T5857] usb 5-1: USB disconnect, device number 2
[  137.754646][ T7842] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  137.927072][ T7850] use of bytesused == 0 is deprecated and will be removed in the future,
[  137.932999][ T7850] use the actual size instead.
[  137.993319][ T7854] loop2: detected capacity change from 0 to 1024
[  138.010388][ T7858] loop4: detected capacity change from 0 to 16
[  138.017518][ T7854] hfsplus: keylen 65060 too large
[  138.021575][ T7854] hfsplus: xattr search failed
[  138.030612][ T7858] erofs (device loop4): mounted with root inode @ nid 36.
[  138.093314][   T33] audit: type=1804 audit(1757091276.877:71): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.662" name="/newroot/14/bus/file1" dev="overlay" ino=86 res=1 errno=0
[  138.245603][ T7873] loop4: detected capacity change from 0 to 1024
[  138.248593][ T7876] loop5: detected capacity change from 0 to 512
[  138.283746][ T7878] ip6tnl1: entered promiscuous mode
[  138.302592][ T7878] ip6tnl1: entered allmulticast mode
[  138.313790][ T7880] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  138.407659][ T7887] loop2: detected capacity change from 0 to 4096
[  138.534558][ T7896] smc: net device bond0 applied user defined pnetid SYZ0
[  138.544843][ T7895] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  139.055881][ T7903] loop4: detected capacity change from 0 to 1764
[  139.146578][ T7903] iso9660: Corrupted directory entry in block 2 of inode 1920
[  139.684248][ T7921] loop5: detected capacity change from 0 to 1024
[  139.768733][ T7923] loop5: detected capacity change from 0 to 1024
[  139.894008][ T7918] loop4: detected capacity change from 0 to 32768
[  139.995873][ T7918] 
[  139.995873][ T7918]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.995873][ T7918] 
[  140.225867][ T7918] 
[  140.225867][ T7918]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.225867][ T7918] 
[  140.244469][ T7918] 
[  140.244469][ T7918]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.244469][ T7918] 
[  140.258044][ T7918] 
[  140.258044][ T7918]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.258044][ T7918] 
[  140.346392][ T7918] 
[  140.346392][ T7918]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.346392][ T7918] 
[  140.634590][ T7455] 
[  140.634590][ T7455]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.634590][ T7455] 
[  140.642045][ T7455] 
[  140.642045][ T7455]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.642045][ T7455] 
[  142.497870][   T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  142.650511][   T10] usb 5-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.657193][   T10] usb 5-1: config 1 interface 0 has no altsetting 0
[  142.663362][   T10] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  142.667527][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.672460][   T10] usb 5-1: Product: syz
[  142.676155][   T10] usb 5-1: Manufacturer: syz
[  142.680735][   T10] usb 5-1: SerialNumber: syz
[  142.911606][   T10] usb 5-1: USB disconnect, device number 3
[  143.068004][ T5890] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  143.217840][ T5890] usb 6-1: Using ep0 maxpacket: 8
[  143.222245][ T5890] usb 6-1: config 0 has an invalid interface number: 24 but max is 0
[  143.225596][ T5890] usb 6-1: config 0 has no interface number 0
[  143.230205][ T8003] loop2: detected capacity change from 0 to 32768
[  143.234646][ T5890] usb 6-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65
[  143.236983][ T8003] BTRFS error: invalid value 0 for thread_pool
[  143.238910][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.244457][ T5890] usb 6-1: Product: syz
[  143.246219][ T5890] usb 6-1: Manufacturer: syz
[  143.250151][ T5890] usb 6-1: SerialNumber: syz
[  143.258187][ T5890] usb 6-1: config 0 descriptor??
[  143.474782][ T8009] netlink: 104 bytes leftover after parsing attributes in process `syz.4.722'.
[  143.489767][ T5890] pegasus 6-1:0.24: probe with driver pegasus failed with error -71
[  143.900847][ T5890] usb 6-1: USB disconnect, device number 2
[  144.430624][ T8030] loop2: detected capacity change from 0 to 128
[  144.473729][ T8027] loop4: detected capacity change from 0 to 8192
[  144.505385][ T8027] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1)
[  144.521391][ T8027] FAT-fs (loop4): Filesystem has been set read-only
[  144.709953][ T8042] loop2: detected capacity change from 0 to 1024
[  144.718558][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'.
[  144.762180][ T8044] vlan2: entered promiscuous mode
[  144.764477][ T8044] gretap0: entered promiscuous mode
[  144.838002][ T8048] loop2: detected capacity change from 0 to 4096
[  144.841153][ T8048] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  144.846334][ T8048] ntfs3(loop2): ino=0, mi_enum_attr
[  144.862348][ T8048] ntfs3(loop2): mft corrupted
[  144.871032][ T8048] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  144.877150][ T8048] ntfs3(loop2): Failed to load $MFT (-22).
[  145.013393][ T8057] loop2: detected capacity change from 0 to 256
[  145.021464][ T8055] syz.4.736 uses old SIOCAX25GETINFO
[  145.075237][ T8057] FAT-fs (loop2): Directory bread(block 64) failed
[  145.082702][ T8057] FAT-fs (loop2): Directory bread(block 65) failed
[  145.088660][ T8057] FAT-fs (loop2): Directory bread(block 66) failed
[  145.091542][ T8057] FAT-fs (loop2): Directory bread(block 67) failed
[  145.094408][ T8057] FAT-fs (loop2): Directory bread(block 68) failed
[  145.097165][ T8057] FAT-fs (loop2): Directory bread(block 69) failed
[  145.115080][ T8057] FAT-fs (loop2): Directory bread(block 70) failed
[  145.125973][ T8057] FAT-fs (loop2): Directory bread(block 71) failed
[  145.133248][ T8057] FAT-fs (loop2): Directory bread(block 72) failed
[  145.142930][ T8057] FAT-fs (loop2): Directory bread(block 73) failed
[  147.358928][ T8098] raw_sendmsg: syz.5.745 forgot to set AF_INET. Fix it!
[  147.511416][ T8106] loop5: detected capacity change from 0 to 512
[  147.533810][ T8106] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  147.568381][ T8106] EXT4-fs (loop5): 1 truncate cleaned up
[  147.576910][ T8106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.607159][ T8106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.755509][ T8118] loop5: detected capacity change from 0 to 512
[  147.786578][ T8118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.802159][ T8118] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.814395][ T8122] netlink: 68 bytes leftover after parsing attributes in process `syz.2.751'.
[  147.833155][ T8118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 12: comm syz.5.750: path /51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  147.864394][ T8118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.750: path /51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  147.886384][ T8118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 14: comm syz.5.750: path /51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  147.903107][ T8118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 15: comm syz.5.750: path /51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  147.912814][ T8118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz.5.750: path /51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  147.921628][ T8124] loop2: detected capacity change from 0 to 256
[  147.926685][ T8118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 17: comm syz.5.750: path /51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  147.936080][ T8118] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 18: comm syz.5.750: lblock 23 mapped to illegal pblock 18 (length 1)
[  147.945040][ T8118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 19: comm syz.5.750: path /51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  147.955208][ T8118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 20: comm syz.5.750: path /51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  147.970727][ T8118] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 21: comm syz.5.750: path /51/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  148.462778][ T8132] loop2: detected capacity change from 0 to 2048
[  148.503899][ T8132] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.805425][ T7479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.815331][ T8153] loop4: detected capacity change from 0 to 65536
[  150.122563][ T6017] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  150.358023][ T6017] usb 5-1: Using ep0 maxpacket: 16
[  150.375121][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.388396][ T6017] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  150.394339][ T6017] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  150.441022][ T8167] overlayfs: failed to resolve './file1': -2
[  150.571946][ T7658] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  150.586610][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.599495][ T6017] usb 5-1: config 0 descriptor??
[  150.770265][ T7658] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  150.773703][ T7658] usb 3-1: config 0 has no interface number 0
[  150.776272][ T7658] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  150.780780][ T7658] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  150.788710][ T7658] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  150.792706][ T7658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.796109][ T7658] usb 3-1: Product: syz
[  150.798166][ T7658] usb 3-1: Manufacturer: syz
[  150.800096][ T7658] usb 3-1: SerialNumber: syz
[  150.803556][ T7658] usb 3-1: config 0 descriptor??
[  150.812997][ T7658] yurex 3-1:0.50: Could not submitting URB
[  150.815738][ T7658] yurex 3-1:0.50: probe with driver yurex failed with error -5
[  151.027544][ T6017] input: HID 0955:7214 Haptics as /devices/virtual/input/input9
[  151.039686][ T7658] usb 3-1: USB disconnect, device number 9
[  151.159874][ T6017] shield 0003:0955:7214.0005: Registered Thunderstrike controller
[  151.163881][ T8169] loop5: detected capacity change from 0 to 2048
[  151.164732][ T6017] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  151.181638][ T8169] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.265159][   T24] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  151.271918][ T6017] usb 5-1: USB disconnect, device number 4
[  151.278348][   T24] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  151.283134][   T24] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  151.295478][   T24] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  151.809329][ T5237] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  152.230379][ T8202] loop5: detected capacity change from 0 to 256
[  152.244415][ T8202] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  152.256976][ T8202] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  152.336308][ T8202] exFAT-fs (loop5): valid_size(150994954) is greater than size(10)
[  152.350929][ T8208] loop2: detected capacity change from 0 to 512
[  152.354487][ T8208] EXT4-fs: Ignoring removed i_version option
[  152.361351][ T8208] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  152.383992][ T8208] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  152.390985][ T8208] EXT4-fs (loop2): 1 truncate cleaned up
[  152.405016][ T8208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.454661][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.473362][  T792] hid-generic 0005:16BF:5505.0006: unknown main item tag 0x0
[  152.480326][ T6017] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  152.525712][  T792] hid-generic 0005:16BF:5505.0006: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  152.658007][ T6017] usb 5-1: Using ep0 maxpacket: 32
[  152.665799][ T6017] usb 5-1: config 0 has an invalid interface number: 23 but max is 0
[  152.675079][ T6017] usb 5-1: config 0 has no interface number 0
[  152.680394][ T6017] usb 5-1: config 0 interface 23 has no altsetting 0
[  152.691066][ T6017] usb 5-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad
[  152.695176][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.699003][ T6017] usb 5-1: Product: syz
[  152.700737][ T6017] usb 5-1: Manufacturer: syz
[  152.701646][ T8216] loop2: detected capacity change from 0 to 2048
[  152.702937][ T6017] usb 5-1: SerialNumber: syz
[  152.719748][ T6017] usb 5-1: config 0 descriptor??
[  152.743732][ T8216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.796755][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.945299][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.970918][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.001799][ T6017] kaweth 5-1:0.23: Firmware present in device.
[  153.010002][ T6017] kaweth 5-1:0.23: Error reading configuration (-71), no net device created
[  153.022535][ T6017] kaweth 5-1:0.23: probe with driver kaweth failed with error -5
[  153.046411][ T6017] usb 5-1: USB disconnect, device number 5
[  154.598395][ T8252] loop2: detected capacity change from 0 to 32768
[  154.725280][ T8252] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  154.725301][ T8252]   allowing incompatible features above 0.0: (unknown version)
[  154.725309][ T8252]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  154.744088][ T8252] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  154.747613][ T8252] bcachefs (loop2): initializing new filesystem
[  154.756994][ T8252] bcachefs (loop2): going read-write
[  154.796907][ T8252] bcachefs (loop2): marking superblocks
[  154.814284][ T8252] bcachefs (loop2): initializing freespace
[  154.819755][ T8252] bcachefs (loop2): done initializing freespace
[  154.825645][ T8252] bcachefs (loop2): reading snapshots table
[  154.828461][ T8252] bcachefs (loop2): reading snapshots done
[  154.862647][ T8252] bcachefs (loop2): done starting filesystem
[  154.905574][ T8276] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  155.171746][ T8268] loop4: detected capacity change from 0 to 32768
[  155.203437][ T8268] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  155.247717][ T8268] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  155.290953][   T13] (kworker/u8:1,13,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  155.299347][ T6017] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  155.331808][ T7455] ocfs2: Unmounting device (7,4) on (node local)
[  155.459366][ T6017] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  155.469458][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.478588][ T6017] usb 6-1: Product: syz
[  155.480588][ T6017] usb 6-1: Manufacturer: syz
[  155.486318][ T6017] usb 6-1: SerialNumber: syz
[  155.511459][ T6017] usb 6-1: config 0 descriptor??
[  155.730125][ T6017] hso 6-1:0.0: Failed to find INT IN ep
[  155.735073][ T6017] usb-storage 6-1:0.0: USB Mass Storage device detected
[  155.942882][ T7658] usb 6-1: USB disconnect, device number 3
[  156.414476][ T8252] syz.2.805 (8252) used greatest stack depth: 16824 bytes left
[  156.447092][ T5855] bcachefs (loop2): shutting down
[  156.454579][ T5855] bcachefs (loop2): going read-only
[  156.456851][ T5855] bcachefs (loop2): finished waiting for writes to stop
[  156.467511][ T5855] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  156.493069][ T5855] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  156.506018][ T8302] loop5: detected capacity change from 0 to 256
[  156.526142][ T5855] bcachefs (loop2): clean shutdown complete, journal seq 5
[  156.527144][ T8302] FAT-fs (loop5): Directory bread(block 64) failed
[  156.533227][ T5855] bcachefs (loop2): marking filesystem clean
[  156.535729][ T8302] FAT-fs (loop5): Directory bread(block 65) failed
[  156.543178][ T8302] FAT-fs (loop5): Directory bread(block 66) failed
[  156.548788][ T8302] FAT-fs (loop5): Directory bread(block 67) failed
[  156.551132][ T8302] FAT-fs (loop5): Directory bread(block 68) failed
[  156.553400][ T8302] FAT-fs (loop5): Directory bread(block 69) failed
[  156.556241][ T8302] FAT-fs (loop5): Directory bread(block 70) failed
[  156.559345][ T8302] FAT-fs (loop5): Directory bread(block 71) failed
[  156.562148][ T8302] FAT-fs (loop5): Directory bread(block 72) failed
[  156.564860][ T8302] FAT-fs (loop5): Directory bread(block 73) failed
[  156.589961][ T5855] bcachefs (loop2): shutdown complete
[  156.694451][ T7658] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  156.864335][ T7658] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  156.868377][ T7658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.871164][ T7658] usb 5-1: Product: syz
[  156.872681][ T7658] usb 5-1: Manufacturer: syz
[  156.874649][ T7658] usb 5-1: SerialNumber: syz
[  156.878018][ T7658] usb 5-1: config 0 descriptor??
[  156.883455][ T7658] hub 5-1:0.0: bad descriptor, ignoring hub
[  156.886032][ T7658] hub 5-1:0.0: probe with driver hub failed with error -5
[  156.890851][ T7658] usbsevseg 5-1:0.0: USB 7 Segment device now attached
[  156.917834][ T6017] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  157.068966][ T6017] usb 6-1: Using ep0 maxpacket: 32
[  157.074522][ T6017] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  157.084096][ T6017] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  157.092910][ T6017] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  157.097308][ T6017] usb 6-1: config 1 has no interface number 0
[  157.100542][ T6017] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  157.105161][ T6017] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  157.109407][ T6017] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  157.114891][ T6017] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  157.118995][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.129145][ T6017] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  157.218242][   T24] usb 5-1: USB disconnect, device number 6
[  157.222066][   T24] usbsevseg 5-1:0.0: USB 7 Segment now disconnected
[  157.331273][ T6017] snd_usb_pod 6-1:1.1: cannot start listening: -90
[  157.334338][ T6017] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  157.337631][ T6017] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -90
[  157.541265][ T7658] usb 6-1: USB disconnect, device number 4
[  158.270773][ T8323] loop5: detected capacity change from 0 to 32768
[  158.285608][ T8323] read_mapping_page failed!
[  158.289121][ T8323] ialloc: diAlloc returned -5!
[  158.310986][  T117] read_mapping_page failed!
[  158.470865][ T8329] loop2: detected capacity change from 0 to 512
[  158.501851][ T8329] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003)
[  158.506609][ T8329] FAT-fs (loop2): Filesystem has been set read-only
[  158.512628][ T8329] FAT-fs (loop2): error, invalid access to FAT (entry 0x22000003)
[  158.850669][ T8347] Device name cannot be null; rc = [-22]
[  158.962682][ T8353] loop4: detected capacity change from 0 to 2048
[  158.968658][ T8353] NILFS (loop4): couldn't find nilfs on the device
[  159.015907][ T8356] loop4: detected capacity change from 0 to 512
[  159.023811][ T8356] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  159.034994][ T8356] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.846: casefold flag without casefold feature
[  159.040335][ T8356] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.846: couldn't read orphan inode 15 (err -117)
[  159.046363][ T8356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.057397][ T8356] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #2: block 4: comm syz.4.846: lblock 0 mapped to illegal pblock 4 (length 1)
[  159.091382][ T7455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.466325][ T8333] ceph: No mds server is up or the cluster is laggy
[  161.411702][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.867'.
[  161.472877][ T8410] loop5: detected capacity change from 0 to 2048
[  161.497708][ T8410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  161.842179][ T8426] loop5: detected capacity change from 0 to 32768
[  161.873265][ T8426] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  161.977500][   T33] audit: type=1800 audit(1757091300.757:72): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.876" name="file2" dev="loop5" ino=17059 res=0 errno=0
[  162.217703][ T7479] ocfs2: Unmounting device (7,5) on (node local)
[  162.806384][ T8477] netlink: 'syz.4.898': attribute type 2 has an invalid length.
[  162.833919][ T8477] : entered promiscuous mode
[  162.986481][ T8488] loop5: detected capacity change from 0 to 512
[  162.998548][ T8488] EXT4-fs (loop5): Test dummy encryption mode enabled
[  163.030271][ T8488] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  163.041700][ T8488] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  163.046214][ T8488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.050659][ T8493] loop4: detected capacity change from 0 to 4096
[  163.084169][ T8488] EXT4-fs (loop5): shut down requested (1)
[  163.113368][ T7479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.409065][ T8501] loop5: detected capacity change from 0 to 32768
[  163.919580][   T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  163.972167][ T8524] syz.2.922 uses obsolete (PF_INET,SOCK_PACKET)
[  164.068896][   T10] usb 5-1: Using ep0 maxpacket: 16
[  164.072729][   T10] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  164.078868][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.092707][   T10] usb 5-1: config 0 has no interface number 0
[  164.106750][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  164.112757][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.115607][ T8533] loop5: detected capacity change from 0 to 128
[  164.116546][   T10] usb 5-1: Product: syz
[  164.124380][   T10] usb 5-1: Manufacturer: syz
[  164.126385][   T10] usb 5-1: SerialNumber: syz
[  164.130099][ T8533] EXT4-fs (loop5): Test dummy encryption mode enabled
[  164.137167][ T8533] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  164.143411][ T8533] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  164.151890][   T10] usb 5-1: config 0 descriptor??
[  164.162925][   T10] uvcvideo 5-1:0.105: probe with driver uvcvideo failed with error -22
[  164.169584][ T7479] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  164.241465][ T8543] Bluetooth: MGMT ver 1.23
[  164.357662][   T24] usb 5-1: USB disconnect, device number 7
[  164.962170][ T8569] loop5: detected capacity change from 0 to 1024
[  165.014771][ T7838] hfsplus: b-tree write err: -5, ino 4
[  165.021915][ T8573] loop4: detected capacity change from 0 to 4096
[  165.083202][ T8575] loop5: detected capacity change from 0 to 128
[  165.222294][ T8584] loop5: detected capacity change from 0 to 512
[  165.227187][ T8584] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  165.317306][ T8587] loop4: detected capacity change from 0 to 512
[  165.328252][ T8587] EXT4-fs: Ignoring removed nobh option
[  165.380169][ T8587] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  165.385302][ T8587] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.948: invalid indirect mapped block 256 (level 1)
[  165.394723][ T8587] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.948: invalid indirect mapped block 2683928664 (level 1)
[  165.401696][ T8587] EXT4-fs (loop4): 1 truncate cleaned up
[  165.405771][ T8587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.671394][ T8587] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.948: invalid fast symlink length 39
[  165.758701][ T7455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.997811][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  166.187825][   T10] usb 3-1: Using ep0 maxpacket: 32
[  166.199481][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  166.202201][   T10] usb 3-1: config 0 has no interface number 0
[  166.206275][   T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  166.217802][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.220690][   T10] usb 3-1: Product: syz
[  166.222519][   T10] usb 3-1: Manufacturer: syz
[  166.224488][   T10] usb 3-1: SerialNumber: syz
[  166.238442][   T10] usb 3-1: config 0 descriptor??
[  166.242273][   T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  166.245555][   T10] usb 3-1: selecting invalid altsetting 1
[  166.257785][   T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  166.264150][   T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  166.268396][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  166.270751][ T5237] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  166.277937][   T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  166.280713][   T10] usb 3-1: media controller created
[  166.300506][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  166.445163][   T10] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  166.448716][   T10] zl10353_read_register: readreg error (reg=127, ret==-71)
[  166.457858][   T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  166.478257][ T3650] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  166.508393][   T10] usb 3-1: USB disconnect, device number 10
[  167.134322][ T8608] netlink: 'syz.2.955': attribute type 2 has an invalid length.
[  167.318396][ T8619] netlink: 160 bytes leftover after parsing attributes in process `syz.2.960'.
[  167.321621][ T8619] netlink: 68 bytes leftover after parsing attributes in process `syz.2.960'.
[  167.472987][ T8627] loop5: detected capacity change from 0 to 128
[  167.500565][   T33] audit: type=1800 audit(1757091306.287:73): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.964" name="file1" dev="loop5" ino=1048641 res=0 errno=0
[  167.501861][ T8627] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  167.517365][ T8627] FAT-fs (loop5): Filesystem has been set read-only
[  167.709575][ T8637] loop4: detected capacity change from 0 to 4096
[  167.714669][ T8637] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  167.755001][ T8637] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  167.759812][ T8637] ntfs3(loop4): ino=19, mi_enum_attr
[  167.771043][ T8637] ntfs3(loop4): failed to convert "c46c" to cp874
[  167.774022][ T8637] ntfs3(loop4): ino=20, mi_enum_attr
[  167.983367][ T8653] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  168.098289][ T8659] befs: (nullb0): No write support. Marking filesystem read-only
[  168.103201][ T8659] befs: (nullb0): invalid magic header
[  168.584073][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'.
[  168.592531][ T8681] netlink: 120 bytes leftover after parsing attributes in process `syz.2.990'.
[  168.596586][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'.
[  169.018073][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  169.216126][ T8700] loop5: detected capacity change from 0 to 256
[  169.221308][ T8700] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  169.225824][ T8700] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  169.233473][ T8700] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  169.445707][ T8707] netlink: 'syz.4.1000': attribute type 1 has an invalid length.
[  169.449206][ T8707] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1000'.
[  170.136063][ T8727] netlink: 'syz.2.1008': attribute type 1 has an invalid length.
[  170.746036][ T8744] loop4: detected capacity change from 0 to 256
[  170.758879][ T8744] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  170.764110][ T8744] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  170.783248][ T8744] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  171.838543][   T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  172.013730][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  172.024306][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.030079][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  172.034807][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  172.043686][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.072621][   T10] usb 3-1: config 0 descriptor??
[  172.406371][ T8764] loop5: detected capacity change from 0 to 32768
[  172.436985][ T8764] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.467413][ T8764] XFS (loop5): Ending clean mount
[  172.497366][   T10] logitech 0003:046D:CA04.0007: unknown main item tag 0x4
[  172.511612][   T10] logitech 0003:046D:CA04.0007: hidraw1: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.2-1/input0
[  172.518242][   T10] logitech 0003:046D:CA04.0007: no inputs found
[  172.549339][ T7479] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.718767][   T10] usb 3-1: USB disconnect, device number 11
[  172.840837][ T8788] loop5: detected capacity change from 0 to 128
[  173.312862][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'.
[  173.317472][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'.
[  173.657847][   T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  173.818007][   T24] usb 3-1: Using ep0 maxpacket: 16
[  173.828667][   T24] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  173.839146][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  173.844458][   T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  173.851351][   T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  173.855634][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  173.863478][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  173.867537][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  173.872110][   T24] usb 3-1: SerialNumber: syz
[  173.883754][ T8800] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  173.889516][   T24] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  173.894774][   T24] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  174.100067][ T8828] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  174.115502][   T24] usb 3-1: USB disconnect, device number 12
[  174.157300][ T8830] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  174.161126][ T8830] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  174.562452][ T8815] 9pnet_fd: p9_fd_create_tcp (8815): problem connecting socket to 127.0.0.1
[  176.977598][ T6038] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  177.576537][ T8870] loop4: detected capacity change from 0 to 8
[  177.579961][ T6038] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  177.583114][ T6038] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.585883][ T6038] usb 3-1: Product: syz
[  177.587277][ T6038] usb 3-1: Manufacturer: syz
[  177.610402][ T8870] SQUASHFS error: Failed to read block 0x4de: -5
[  177.614646][ T8870] SQUASHFS error: Failed to read block 0x4de: -5
[  177.618579][ T6038] usb 3-1: SerialNumber: syz
[  177.619469][ T8870] SQUASHFS error: Failed to read block 0x4de: -5
[  177.625172][ T8870] SQUASHFS error: Failed to read block 0x4de: -5
[  177.627657][ T8870] SQUASHFS error: Failed to read block 0x4de: -5
[  177.631610][   T33] audit: type=1800 audit(1757091316.417:74): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1063" name="file1" dev="loop4" ino=5 res=0 errno=0
[  177.683166][ T6038] usb 3-1: config 0 descriptor??
[  177.711349][ T6038] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 013
[  178.118227][ T8880] trusted_key: encrypted_key: insufficient parameters specified
[  178.219779][ T6038]  (null): failure reading functionality
[  178.288750][ T6038] i2c i2c-2: failure reading functionality
[  178.313963][ T6038] i2c i2c-2: connected i2c-tiny-usb device
[  178.428366][ T6038] usb 3-1: USB disconnect, device number 13
[  179.145702][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'.
[  179.441202][ T8900] loop4: detected capacity change from 0 to 512
[  179.444108][ T8900] EXT4-fs: inline encryption not supported
[  179.454773][ T8900] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  179.475482][ T8900] EXT4-fs (loop4): 1 truncate cleaned up
[  179.481876][ T8900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.542227][ T7455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.188309][  T792] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  180.337877][  T792] usb 5-1: Using ep0 maxpacket: 8
[  180.342650][  T792] usb 5-1: unable to get BOS descriptor or descriptor too short
[  180.346492][  T792] usb 5-1: config 4 interface 0 has no altsetting 0
[  180.355331][  T792] usb 5-1: string descriptor 0 read error: -22
[  180.359060][  T792] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  180.362310][  T792] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  180.373762][  T792] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  180.390858][  T792] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  180.394535][  T792] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  180.397029][  T792] usb 5-1: media controller created
[  180.415244][  T792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.937779][  T792] zl10353_read_register: readreg error (reg=127, ret==0)
[  181.066536][  T792] usb 5-1: USB disconnect, device number 8
[  181.774383][ T8924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1085'.
[  181.851794][ T8925] loop4: detected capacity change from 0 to 512
[  181.884533][ T8925] EXT4-fs: Ignoring removed nobh option
[  181.948821][ T8925] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117
[  181.998826][ T8925] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1086: invalid indirect mapped block 256 (level 1)
[  182.050832][ T8925] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1086: invalid indirect mapped block 2683928664 (level 1)
[  182.095636][ T8925] EXT4-fs (loop4): 1 truncate cleaned up
[  182.156648][ T8925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.617080][   T33] audit: type=1800 audit(1757091321.397:75): pid=8925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1086" name="file0" dev="loop4" ino=13 res=0 errno=0
[  182.682509][ T7455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.849018][ T8924] team0 (unregistering): Port device team_slave_0 removed
[  182.870080][ T8924] team0 (unregistering): Port device team_slave_1 removed
[  183.586036][  T792] IPVS: starting estimator thread 0...
[  183.603210][ T8961] loop4: detected capacity change from 0 to 256
[  183.611330][ T8961] vfat: Bad value for 'umask'
[  183.699740][ T8960] IPVS: using max 82 ests per chain, 196800 per kthread
[  183.726797][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'.
[  187.070016][  T792] kernel write not supported for file /425/net/fib_triestat (pid: 792 comm: kworker/1:2)
[  187.747955][  T792] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  187.877151][ T9008] loop4: detected capacity change from 0 to 32768
[  187.920106][  T792] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  187.932967][  T792] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 66
[  187.937311][  T792] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.948203][  T792] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.961302][  T792] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  187.966811][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.971417][  T792] usb 3-1: Product: syz
[  187.973346][  T792] usb 3-1: Manufacturer: syz
[  187.975418][  T792] usb 3-1: SerialNumber: syz
[  188.018953][ T9008] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.077064][ T9008] XFS (loop4): Ending clean mount
[  188.094488][ T9008] XFS (loop4): Quotacheck needed: Please wait.
[  188.148920][ T9008] XFS (loop4): Quotacheck: Done.
[  188.166685][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  188.247081][ T7455] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.475473][   T10] usb 6-1: Using ep0 maxpacket: 16
[  188.650897][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  188.655138][   T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  188.663949][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.671680][   T10] usb 6-1: config 0 descriptor??
[  189.018518][  T792] cdc_ncm 3-1:1.0: bind() failure
[  189.046465][  T792] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  189.057133][  T792] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  189.072825][  T792] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  189.096685][ T9025] loop4: detected capacity change from 0 to 32768
[  189.108802][  T792] usb 3-1: USB disconnect, device number 14
[  189.122977][ T9025] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1124 (9025)
[  189.140367][   T10] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input10
[  189.186834][ T9025] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  189.192329][ T9025] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  189.226028][ T5281] bcm5974 6-1:0.0: could not read from device
[  189.268570][ T5281] bcm5974 6-1:0.0: could not read from device
[  189.306904][ T5281] bcm5974 6-1:0.0: could not read from device
[  189.330690][ T9025] BTRFS info (device loop4): enabling ssd optimizations
[  189.341695][ T5281] bcm5974 6-1:0.0: could not read from device
[  189.345657][ T9025] BTRFS info (device loop4): enabling free space tree
[  189.351741][ T9025] BTRFS info (device loop4): use zstd compression, level 3
[  189.369487][ T5281] bcm5974 6-1:0.0: could not read from device
[  189.383627][ T6836] bcm5974 6-1:0.0: could not read from device
[  189.407277][   T10] usb 6-1: USB disconnect, device number 5
[  189.455211][ T7455] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  191.068758][ T5237] Bluetooth: hci1: command 0x0406 tx timeout
[  191.367553][   T33] audit: type=1326 audit(1757091330.147:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9056 comm="syz.5.1131" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35f1d8ebe9 code=0x0
[  191.939536][  T792] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  192.091647][  T792] usb 3-1: config 0 has an invalid interface number: 171 but max is 0
[  192.095573][  T792] usb 3-1: config 0 has no interface number 0
[  192.103942][  T792] usb 3-1: config 0 interface 171 has no altsetting 0
[  192.113965][  T792] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  192.120093][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.132372][  T792] usb 3-1: Product: syz
[  192.135998][  T792] usb 3-1: Manufacturer: syz
[  192.143588][  T792] usb 3-1: SerialNumber: syz
[  192.156592][  T792] usb 3-1: config 0 descriptor??
[  192.325743][ T9073] tmpfs: Bad value for 'mpol'
[  192.400178][  T792] dvb_usb_m920x 3-1:0.171: probe with driver dvb_usb_m920x failed with error -71
[  192.437111][  T792] usb 3-1: USB disconnect, device number 15
[  192.792296][ T9081] loop5: detected capacity change from 0 to 128
[  192.809469][ T9081] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  192.997103][ T9093] kAFS: No cell specified
[  193.158085][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  193.259864][ T9102] netlink: 'syz.4.1151': attribute type 1 has an invalid length.
[  193.269175][ T9102] nbd: couldn't find a device at index 393224
[  193.348876][   T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  193.353314][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.390168][   T24] usb 6-1: config 0 descriptor??
[  193.402558][   T24] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  193.604409][   T24] gspca_sn9c2028: read1 error -32
[  193.606612][   T24] gspca_sn9c2028: read1 error -32
[  193.815292][   T24] usb 6-1: USB disconnect, device number 6
[  193.839729][ T6017] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  193.958511][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.961366][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.991491][ T6017] usb 3-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config
[  193.995994][ T6017] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  194.001511][ T6017] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  194.013445][ T6017] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  194.020533][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.026035][ T6017] usb 3-1: Product: syz
[  194.029965][ T6017] usb 3-1: Manufacturer: syz
[  194.032161][ T6017] usb 3-1: SerialNumber: syz
[  194.260023][ T6017] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  194.263016][ T6017] cdc_ncm 3-1:1.0: bind() failure
[  194.286215][ T6017] usb 3-1: USB disconnect, device number 16
[  194.947949][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  195.120242][   T24] usb 5-1: Using ep0 maxpacket: 8
[  195.139732][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  195.169741][   T24] usb 5-1: config 5 has an invalid interface number: 2 but max is 0
[  195.193102][   T24] usb 5-1: config 5 has no interface number 0
[  195.237644][   T24] usb 5-1: New USB device found, idVendor=09fb, idProduct=602d, bcdDevice=e2.b2
[  195.273009][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.297155][   T24] usb 5-1: Product: syz
[  195.313993][   T24] usb 5-1: Manufacturer: syz
[  195.325799][   T24] usb 5-1: SerialNumber: syz
[  195.784559][   T24] ftdi_sio 5-1:5.2: FTDI USB Serial Device converter detected
[  195.836627][   T24] ftdi_sio ttyUSB0: unknown device type: 0xe2b2
[  195.900406][   T24] usb 5-1: USB disconnect, device number 9
[  195.985412][   T24] ftdi_sio 5-1:5.2: device disconnected
[  196.829898][ T9135] loop4: detected capacity change from 0 to 4096
[  196.861121][ T9135] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  197.973681][    C0] sched: DL replenish lagged too much
[  198.480225][ T9150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1171'.
[  199.244431][   T33] audit: type=1326 audit(1757091337.887:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9174 comm="syz.2.1183" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568658ebe9 code=0x7ffc0000
[  199.297471][   T33] audit: type=1326 audit(1757091337.897:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9174 comm="syz.2.1183" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568658ebe9 code=0x7ffc0000
[  199.369971][   T33] audit: type=1326 audit(1757091338.037:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9174 comm="syz.2.1183" exe="/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f568658ebe9 code=0x7ffc0000
[  199.401103][   T33] audit: type=1326 audit(1757091338.037:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9174 comm="syz.2.1183" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568658ebe9 code=0x7ffc0000
[  199.421091][   T33] audit: type=1326 audit(1757091338.037:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9174 comm="syz.2.1183" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f568658ebe9 code=0x7ffc0000
[  200.438778][ T5890] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  200.481071][ T9198] loop4: detected capacity change from 0 to 4096
[  200.496090][ T9198] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  200.551515][ T9198] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  200.555417][ T9198] ntfs3(loop4): ino=19, mi_enum_attr
[  200.676039][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short
[  200.697341][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -71
[  200.714336][ T5890] usb 3-1: can't read configurations, error -71
[  201.110706][ T9204] loop4: detected capacity change from 0 to 32768
[  201.113817][ T9204] XFS: ikeep mount option is deprecated.
[  201.402970][ T9204] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  201.455365][ T9204] XFS (loop4): Ending clean mount
[  201.459277][ T9204] XFS (loop4): Quotacheck needed: Please wait.
[  201.466852][ T9211] CIFS: VFS: Malformed UNC in devname
[  201.504740][ T9204] XFS (loop4): Quotacheck: Done.
[  203.183704][ T7455] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.746674][ T9272] cgroup: fork rejected by pids controller in /syz2
[  204.946055][ T9262] loop5: detected capacity change from 0 to 32768
[  204.984732][   T33] audit: type=1804 audit(1757091343.767:82): pid=9262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1217" name="/newroot/183/file1/bus" dev="loop5" ino=7 res=1 errno=0
[  205.003587][ T9262] Invalid ELF header magic: != ELF
[  206.564219][ T9304] loop5: detected capacity change from 0 to 1764
[  206.614076][ T9304] iso9660: Corrupted directory entry in block 2 of inode 1920
[  206.656640][ T9308] loop4: detected capacity change from 0 to 256
[  206.817283][ T9310] loop5: detected capacity change from 0 to 1024
[  206.983900][ T9315] netlink: 'syz.4.1239': attribute type 39 has an invalid length.
[  207.546195][ T9320] loop4: detected capacity change from 0 to 1024
[  207.565653][ T9320] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  207.585444][ T9320] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  207.597990][ T9320] EXT4-fs (loop4): invalid journal inode
[  207.603417][ T9320] EXT4-fs (loop4): can't get journal size
[  207.613568][ T9320] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 17104912: comm syz.4.1242: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  207.626990][ T9320] EXT4-fs (loop4): failed to initialize system zone (-117)
[  207.639507][ T9320] EXT4-fs (loop4): mount failed
[  207.748795][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  207.831305][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  207.836669][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  207.841842][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  207.852952][ T5237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  207.989893][ T9331] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  208.123333][ T9333] loop5: detected capacity change from 0 to 1024
[  208.224082][ T9333] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  208.233626][ T9333] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  208.257456][ T3650] hfsplus: b-tree write err: -5, ino 4
[  208.393058][ T9340] loop4: detected capacity change from 0 to 256
[  208.424883][ T9340] FAT-fs (loop4): Directory bread(block 64) failed
[  208.430228][ T9340] FAT-fs (loop4): Directory bread(block 65) failed
[  208.432594][ T9340] FAT-fs (loop4): Directory bread(block 66) failed
[  208.434680][ T9340] FAT-fs (loop4): Directory bread(block 67) failed
[  208.437093][ T9340] FAT-fs (loop4): Directory bread(block 68) failed
[  208.450002][ T9340] FAT-fs (loop4): Directory bread(block 69) failed
[  208.452319][ T9340] FAT-fs (loop4): Directory bread(block 70) failed
[  208.454508][ T9340] FAT-fs (loop4): Directory bread(block 71) failed
[  208.456848][ T9340] FAT-fs (loop4): Directory bread(block 72) failed
[  208.465100][ T9340] FAT-fs (loop4): Directory bread(block 73) failed
[  208.523960][ T9322] chnl_net:caif_netlink_parms(): no params data found
[  208.735169][ T9351] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  209.335407][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  210.108198][ T5237] Bluetooth: hci1: command tx timeout
[  210.531348][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.537242][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.563259][ T9322] bridge_slave_0: entered allmulticast mode
[  210.585313][ T9322] bridge_slave_0: entered promiscuous mode
[  210.605052][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.621259][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.633355][ T9322] bridge_slave_1: entered allmulticast mode
[  210.668151][ T9322] bridge_slave_1: entered promiscuous mode
[  210.860251][ T9373] loop5: detected capacity change from 0 to 512
[  210.876972][ T9373] msdos: Bad value for 'tz'
[  210.916971][ T9322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.151168][ T9322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.258199][ T9378] loop5: detected capacity change from 0 to 256
[  211.275222][ T9378] FAT-fs (loop5): Directory bread(block 64) failed
[  211.280459][ T9378] FAT-fs (loop5): Directory bread(block 65) failed
[  211.283519][ T9378] FAT-fs (loop5): Directory bread(block 66) failed
[  211.286474][ T9378] FAT-fs (loop5): Directory bread(block 67) failed
[  211.296990][ T9378] FAT-fs (loop5): Directory bread(block 68) failed
[  211.312552][ T9378] FAT-fs (loop5): Directory bread(block 69) failed
[  211.315553][ T9378] FAT-fs (loop5): Directory bread(block 70) failed
[  211.330997][ T9378] FAT-fs (loop5): Directory bread(block 71) failed
[  211.334318][ T9378] FAT-fs (loop5): Directory bread(block 72) failed
[  211.337239][ T9378] FAT-fs (loop5): Directory bread(block 73) failed
[  211.396875][ T9322] team0: Port device team_slave_0 added
[  211.410799][ T9322] team0: Port device team_slave_1 added
[  211.855908][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.876166][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.957849][ T9322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  212.001472][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_1
[  212.014618][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  212.101512][ T9322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  212.189816][ T5237] Bluetooth: hci1: command tx timeout
[  212.788411][ T6017] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  212.942192][ T9322] hsr_slave_0: entered promiscuous mode
[  212.953857][ T9322] hsr_slave_1: entered promiscuous mode
[  212.970716][ T9322] debugfs: 'hsr0' already exists in 'hsr'
[  212.973495][ T9322] Cannot create hsr debugfs directory
[  213.020998][ T6017] usb 6-1: unable to get BOS descriptor or descriptor too short
[  213.046260][ T6017] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  213.069663][ T6017] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[  213.086478][ T6017] usb 6-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  213.112880][ T6017] usb 6-1: config 1 interface 0 has no altsetting 0
[  213.143228][ T6017] usb 6-1: string descriptor 0 read error: -22
[  213.149872][ T6017] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  213.166072][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.217334][ T9387] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  213.252199][ T9387] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  213.290955][ T9387] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  213.360011][ T6017] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  213.562675][ T6017] usb 6-1: USB disconnect, device number 7
[  213.932772][ T9322] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.058372][ T9322] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.237309][ T9322] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.269087][ T5237] Bluetooth: hci1: command tx timeout
[  214.331819][ T9398] pim6reg1: entered promiscuous mode
[  214.334173][ T9398] pim6reg1: entered allmulticast mode
[  214.436968][ T9322] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.916463][ T9322] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  214.963371][ T9322] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  214.987348][ T9322] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  215.014940][ T9322] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  215.414608][ T9420] loop5: detected capacity change from 0 to 256
[  215.431070][ T9420] exfat: Deprecated parameter 'namecase'
[  215.444502][ T9420] exfat: Deprecated parameter 'utf8'
[  215.474743][ T9420] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  215.485649][ T9322] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.534464][   T33] audit: type=1804 audit(1757091354.317:83): pid=9420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1275" name="/newroot/206/file0/bus" dev="loop5" ino=1048646 res=1 errno=0
[  215.731565][ T9322] 8021q: adding VLAN 0 to HW filter on device team0
[  215.780268][   T70] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.783509][   T70] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.834061][   T70] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.837007][   T70] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.095113][ T9427] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1277'.
[  216.350956][ T5237] Bluetooth: hci1: command tx timeout
[  216.420785][ T9322] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.620365][ T9322] veth0_vlan: entered promiscuous mode
[  216.640261][ T9441] mmap: syz.4.1282 (9441): VmData 37474304 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data.
[  216.669509][ T9322] veth1_vlan: entered promiscuous mode
[  216.802137][ T9322] veth0_macvtap: entered promiscuous mode
[  216.806089][ T9322] veth1_macvtap: entered promiscuous mode
[  216.949136][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.976798][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.009278][ T5866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.013218][ T5866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.016270][ T5866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.029119][ T5866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.044520][ T9450] loop4: detected capacity change from 0 to 4096
[  217.178424][ T6017] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  217.318033][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.337820][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.357612][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  217.396077][ T6017] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  217.413362][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  217.417462][ T6017] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  217.455093][ T7837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  217.465335][ T9452] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1288'.
[  217.475427][ T7837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  217.481264][ T6017] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  217.494814][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.507035][ T6017] usb 6-1: Product: syz
[  217.515946][ T6017] usb 6-1: Manufacturer: syz
[  217.530967][ T6017] usb 6-1: SerialNumber: syz
[  217.554224][ T6017] usb 6-1: config 0 descriptor??
[  217.589124][ T6017] usb 6-1: NFC: Unable to get FW version
[  217.620436][ T6017] pn533_usb 6-1:0.0: probe with driver pn533_usb failed with error -90
[  217.803794][ T6017] usb 6-1: USB disconnect, device number 8
[  217.992859][ T9457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.078616][  T792] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  218.234633][  T792] usb 3-1: config 6 has an invalid interface number: 14 but max is 0
[  218.239502][  T792] usb 3-1: config 6 has no interface number 0
[  218.242193][  T792] usb 3-1: config 6 interface 14 altsetting 218 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  218.246872][  T792] usb 3-1: config 6 interface 14 has no altsetting 0
[  218.254007][  T792] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[  218.259800][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.263539][  T792] usb 3-1: Product: syz
[  218.265435][  T792] usb 3-1: Manufacturer: syz
[  218.267534][  T792] usb 3-1: SerialNumber: syz
[  218.515425][  T792] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  218.546846][  T792] command write [95] error -8
[  218.604466][  T792] usb 3-1: USB disconnect, device number 19
[  218.822890][ T9465] loop5: detected capacity change from 0 to 8192
[  219.076892][ T9473] loop4: detected capacity change from 0 to 16
[  219.165576][ T9473] erofs (device loop4): mounted with root inode @ nid 36.
[  219.203904][   T33] audit: type=1800 audit(1757091357.987:84): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1295" name="file1" dev="loop4" ino=86 res=0 errno=0
[  219.596057][ T9483] overlay: ./file0 is not a directory
[  219.628310][ T5891] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  219.810537][ T5891] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  219.816524][ T5891] usb 6-1: config 0 interface 0 has no altsetting 0
[  219.821860][ T5891] usb 6-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  219.835995][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.860553][ T5891] usb 6-1: config 0 descriptor??
[  220.297647][ T5891] uclogic 0003:5543:0064.0008: item fetching failed at offset 2/5
[  220.308446][ T5891] uclogic 0003:5543:0064.0008: parse failed
[  220.310689][ T5891] uclogic 0003:5543:0064.0008: probe with driver uclogic failed with error -22
[  220.494560][ T5890] usb 6-1: USB disconnect, device number 9
[  220.561638][ T9490] loop4: detected capacity change from 0 to 2048
[  220.583612][ T9490] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  220.596164][ T9490] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.004146][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1307'.
[  221.102639][ T9504] loop4: detected capacity change from 0 to 512
[  221.120326][ T9504] EXT4-fs: Ignoring removed nobh option
[  221.163155][ T9504] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1308: iget: bad i_size value: 38620345925642
[  221.190780][ T9510] netlink: 'syz.5.1310': attribute type 3 has an invalid length.
[  221.194337][ T9504] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1308: couldn't read orphan inode 15 (err -117)
[  221.212084][ T9504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.899497][ T5891] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  221.925206][ T7838] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u10:8: bg 0: block 5: invalid block bitmap
[  221.946872][ T7838] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  221.964946][ T7838] EXT4-fs (loop4): This should not happen!! Data will be lost
[  221.964946][ T7838] 
[  221.973129][ T7838] EXT4-fs (loop4): Total free blocks count 0
[  221.976740][ T7838] EXT4-fs (loop4): Free/Dirty block details
[  221.982648][ T7838] EXT4-fs (loop4): free_blocks=0
[  221.984918][ T7838] EXT4-fs (loop4): dirty_blocks=9292
[  221.987199][ T7838] EXT4-fs (loop4): Block reservation details
[  221.990047][ T7838] EXT4-fs (loop4): i_reserved_data_blocks=9292
[  222.021753][   T70] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  222.061233][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  222.065376][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  222.081290][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  222.086252][ T5891] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  222.104552][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.116272][ T5891] usb 6-1: config 0 descriptor??
[  222.599961][ T5891] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  222.670569][ T9544] overlay: Unknown parameter '\'
[  222.727100][ T9546] syzkaller1: entered promiscuous mode
[  222.729151][ T9546] syzkaller1: entered allmulticast mode
[  224.901109][ T5891] usb 6-1: USB disconnect, device number 10
[  225.146610][ T9588] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1346'.
[  225.199323][ T9590] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2
[  225.203041][ T9590] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0/file1
[  225.631572][ T9599] loop4: detected capacity change from 0 to 256
[  225.646707][ T9599] FAT-fs (loop4): Directory bread(block 64) failed
[  225.651271][ T9599] FAT-fs (loop4): Directory bread(block 65) failed
[  225.654387][ T9599] FAT-fs (loop4): Directory bread(block 66) failed
[  225.657475][ T9599] FAT-fs (loop4): Directory bread(block 67) failed
[  225.666987][ T9599] FAT-fs (loop4): Directory bread(block 68) failed
[  225.671188][ T9599] FAT-fs (loop4): Directory bread(block 69) failed
[  225.674146][ T9599] FAT-fs (loop4): Directory bread(block 70) failed
[  225.677093][ T9599] FAT-fs (loop4): Directory bread(block 71) failed
[  225.683990][ T9599] FAT-fs (loop4): Directory bread(block 72) failed
[  225.686982][ T9599] FAT-fs (loop4): Directory bread(block 73) failed
[  225.727229][ T9595] loop5: detected capacity change from 0 to 2048
[  225.773560][ T9595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.797285][ T9595] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.814319][ T9595] ptrace attach of "/syz-executor exec"[7479] was attempted by "FGϞ}aF׷_엷|g'/>d0;#Y5fk  ӈr_Ceу\x0c   +#M   ࡗD+     nV7/E{׷G-O8΄dm+WEč.>_.޻Zƻ]֟NإoNC=ֿ\x0b;qd7=_xb[d+#+;wzi}\x22o?vqOm^_a?\x5c?sbϿ[9N4\x22m[:r<}s>OvWo×                                            @)Hl+N,8ű\x1bjK\x22c0)шlLuFģ~8֊~7                                                              1IEDU4]   ]    \x5c  ?                                                                                                                  p .?ښkxlɼ>-Ujmq!զ<uV[8KWFy1R_^4W[o\x5c/\x07                                                               P%iiiE?\x22c0)шx$\x22\x0cih                                                              
[  225.850738][ T7479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.897447][ T9604] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1352'.
[  226.155940][ T9608] loop4: detected capacity change from 0 to 4096
[  226.183746][ T9608] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  226.243589][ T9608] ntfs3(loop4): ino=1a, mi_enum_attr
[  226.270140][ T9608] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  227.591398][   T33] audit: type=1326 audit(1757091366.377:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095918ebe9 code=0x7ffc0000
[  227.617381][   T33] audit: type=1326 audit(1757091366.387:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095918ebe9 code=0x7ffc0000
[  227.628911][   T33] audit: type=1326 audit(1757091366.397:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1374" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f095918ebe9 code=0x7ffc0000
[  227.638277][   T33] audit: type=1326 audit(1757091366.397:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095918ebe9 code=0x7ffc0000
[  227.646932][   T33] audit: type=1326 audit(1757091366.397:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095918ebe9 code=0x7ffc0000
[  227.658341][   T33] audit: type=1326 audit(1757091366.397:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1374" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f095918ebe9 code=0x7ffc0000
[  227.676591][   T33] audit: type=1326 audit(1757091366.397:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095918ebe9 code=0x7ffc0000
[  227.720505][   T33] audit: type=1326 audit(1757091366.397:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095918ebe9 code=0x7ffc0000
[  227.754282][   T33] audit: type=1326 audit(1757091366.397:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1374" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f095918ebe9 code=0x7ffc0000
[  227.791988][   T33] audit: type=1326 audit(1757091366.397:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9648 comm="syz.4.1374" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095918ebe9 code=0x7ffc0000
[  227.993285][ T9657] loop5: detected capacity change from 0 to 40427
[  228.009094][ T9657] F2FS-fs (loop5): build fault injection rate: 14
[  228.011961][ T9657] F2FS-fs (loop5): build fault injection type: 0x3bfe8c
[  228.045753][ T9657] F2FS-fs (loop5): invalid crc value
[  228.053773][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  228.071334][    C1] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  228.121628][ T9657] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  228.125319][ T9657] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  228.130890][ T9657] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  228.151649][ T9657] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  228.282173][ T5890] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  228.453230][ T5890] usb 3-1: Using ep0 maxpacket: 8
[  228.459149][ T5890] usb 3-1: config 0 has an invalid interface number: 118 but max is 0
[  228.467952][ T5890] usb 3-1: config 0 has no interface number 0
[  228.475856][ T5890] usb 3-1: New USB device found, idVendor=0711, idProduct=0179, bcdDevice=d8.42
[  228.483777][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.495994][ T5890] usb 3-1: Product: syz
[  228.498469][ T5890] usb 3-1: Manufacturer: syz
[  228.500496][ T5890] usb 3-1: SerialNumber: syz
[  228.515160][ T5890] usb 3-1: config 0 descriptor??
[  228.535885][ T5890] ax88179_178a 3-1:0.118: probe with driver ax88179_178a failed with error -22
[  228.672507][ T9674] ptrace attach of "/syz-executor exec"[7455] was attempted by "/syz-executor exec"[9674]
[  228.727860][ T5890] usb 3-1: USB disconnect, device number 20
[  229.626796][ T9715] loop5: detected capacity change from 0 to 512
[  229.637950][ T9715] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  229.735538][ T9715] EXT4-fs (loop5): 1 truncate cleaned up
[  229.743201][ T9715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.787552][ T7479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.323629][ T9742] overlayfs: failed to clone upperpath
[  231.030524][ T9767] loop5: detected capacity change from 0 to 4096
[  231.053053][ T9767] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  231.072574][ T9767] ntfs3(loop5): ino=3, mi_enum_attr
[  231.074699][ T9767] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  231.096876][ T9767] ntfs3(loop5): volume is dirty and "force" flag is not set!
[  231.973046][ T9791] loop5: detected capacity change from 0 to 512
[  231.991247][ T9791] EXT4-fs: Ignoring removed i_version option
[  231.993807][ T9791] EXT4-fs: Ignoring removed mblk_io_submit option
[  232.025423][ T9791] EXT4-fs (loop5): Test dummy encryption mode enabled
[  232.040436][ T9791] EXT4-fs (loop5): orphan cleanup on readonly fs
[  232.049186][ T9791] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.1435: inode #13: comm syz.5.1435: iget: illegal inode #
[  232.065310][ T9791] EXT4-fs (loop5): Remounting filesystem read-only
[  232.070773][ T9791] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  232.108480][  T792] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  232.137288][ T7479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.278745][  T792] usb 3-1: Using ep0 maxpacket: 32
[  232.287810][  T792] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  232.291012][  T792] usb 3-1: config 0 has no interface number 0
[  232.316099][  T792] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  232.323063][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.339823][  T792] usb 3-1: Product: syz
[  232.339836][  T792] usb 3-1: Manufacturer: syz
[  232.339843][  T792] usb 3-1: SerialNumber: syz
[  232.347280][  T792] usb 3-1: config 0 descriptor??
[  232.350223][  T792] smsc95xx v2.0.0
[  232.714338][ T9799] ubi31: attaching mtd0
[  232.732767][ T9799] ubi31: scanning is finished
[  232.734749][ T9799] ubi31: empty MTD device detected
[  233.288118][ T9799] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  233.464457][  T792] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  233.479020][  T792] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  233.489683][  T792] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  233.493947][  T792] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  233.516493][  T792] usb 3-1: USB disconnect, device number 21
[  233.758089][ T5890] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  233.907886][ T5890] usb 6-1: Using ep0 maxpacket: 32
[  233.921459][ T5890] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  233.925367][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.937871][ T5890] usb 6-1: Product: syz
[  233.941656][ T5890] usb 6-1: Manufacturer: syz
[  233.943736][ T5890] usb 6-1: SerialNumber: syz
[  234.038332][ T5890] usb 6-1: config 0 descriptor??
[  234.043145][ T5890] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  235.688208][ T5890] gspca_ov534_9: reg_w failed -110
[  236.783239][ T5890] gspca_ov534_9: Unknown sensor 0000
[  236.783333][ T5890] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22
[  237.145760][ T9841] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  237.184822][ T5890] usb 6-1: USB disconnect, device number 11
[  237.308704][ T9849] geneve1: entered promiscuous mode
[  237.311782][ T9849] macsec1: entered promiscuous mode
[  237.314214][ T9849] macsec1: entered allmulticast mode
[  237.316591][ T9849] geneve1: entered allmulticast mode
[  237.336976][ T9849] geneve1: left allmulticast mode
[  237.341466][ T9849] geneve1: left promiscuous mode
[  237.547895][ T5890] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  237.712614][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.717417][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.737826][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  237.750282][ T5890] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  237.758694][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.779455][ T5890] usb 6-1: config 0 descriptor??
[  238.198918][ T5890] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  238.430373][   T33] kauditd_printk_skb: 18 callbacks suppressed
[  238.430387][   T33] audit: type=1326 audit(1757091377.217:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.4.1471" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f095918ebe9 code=0x0
[  238.448799][ T6017] usb 6-1: USB disconnect, device number 12
[  238.621390][ T9894] 9pnet_fd: Insufficient options for proto=fd
[  238.793891][ T9902] 9pnet_fd: Insufficient options for proto=fd
[  238.907927][ T6017] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  239.090187][ T6017] usb 3-1: Using ep0 maxpacket: 32
[  239.101870][ T6017] usb 3-1: config 0 has an invalid interface number: 96 but max is 0
[  239.110421][ T6017] usb 3-1: config 0 has no interface number 0
[  239.120915][ T6017] usb 3-1: config 0 interface 96 has no altsetting 0
[  240.038736][ T6017] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44
[  240.042930][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.046526][ T6017] usb 3-1: Product: syz
[  240.048563][ T6017] usb 3-1: Manufacturer: syz
[  240.050707][ T6017] usb 3-1: SerialNumber: syz
[  240.056903][ T6017] usb 3-1: config 0 descriptor??
[  240.075951][ T6017] legousbtower 3-1:0.96: interrupt endpoints not found
[  240.792086][ T6017] usb 3-1: USB disconnect, device number 22
[  241.414975][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1490'.
[  241.822444][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'.
[  241.826761][ T9939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1497'.
[  241.835231][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'.
[  241.851236][ T9939] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1497'.
[  241.860033][ T9939] netlink: 'syz.2.1497': attribute type 6 has an invalid length.
[  243.705855][ T9963] loop5: detected capacity change from 0 to 1024
[  243.719016][ T9963] EXT4-fs: Ignoring removed bh option
[  243.773850][ T9963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.857296][ T7479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.615105][ T9977] loop5: detected capacity change from 0 to 128
[  244.791115][ T9981] loop5: detected capacity change from 0 to 1024
[  244.797713][ T9981] EXT4-fs: Ignoring removed bh option
[  244.825110][ T9981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  244.981904][ T7479] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  247.349662][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  257.717876][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  257.729879][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  308.009861][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.015491][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.019914][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.023523][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  308.032769][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  308.075561][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  308.082632][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  308.086265][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  308.099382][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  308.104571][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  308.112268][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  308.140134][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  308.146000][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  308.151115][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  308.154467][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  308.562145][T10016] chnl_net:caif_netlink_parms(): no params data found
[  308.593745][T10018] chnl_net:caif_netlink_parms(): no params data found
[  308.630325][T10019] chnl_net:caif_netlink_parms(): no params data found
[  308.881724][ T8212] ==================================================================
[  308.885108][ T8212] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  308.888302][ T8212] Read of size 8 at addr ffff888033b600a0 by task khidpd_16bf5505/8212
[  308.892901][ T8212] 
[  308.893931][ T8212] CPU: 1 UID: 0 PID: 8212 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  308.893973][ T8212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.893981][ T8212] Call Trace:
[  308.893986][ T8212]  <TASK>
[  308.893992][ T8212]  dump_stack_lvl+0x189/0x250
[  308.894010][ T8212]  ? __kasan_check_byte+0x12/0x40
[  308.894027][ T8212]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.894041][ T8212]  ? lock_release+0x4b/0x3e0
[  308.894067][ T8212]  ? __virt_addr_valid+0x4a5/0x5c0
[  308.894082][ T8212]  print_report+0xca/0x240
[  308.894093][ T8212]  ? __mutex_lock+0x801/0x1350
[  308.894103][ T8212]  kasan_report+0x118/0x150
[  308.894119][ T8212]  ? __mutex_lock+0x801/0x1350
[  308.894131][ T8212]  __mutex_lock+0x801/0x1350
[  308.894142][ T8212]  ? __mutex_lock+0x5bb/0x1350
[  308.894154][ T8212]  ? l2cap_unregister_user+0x6a/0x1b0
[  308.894169][ T8212]  ? __pfx___mutex_lock+0x10/0x10
[  308.894179][ T8212]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  308.894199][ T8212]  l2cap_unregister_user+0x6a/0x1b0
[  308.894214][ T8212]  hidp_session_thread+0x3c9/0x410
[  308.894230][ T8212]  ? __pfx_hidp_session_thread+0x10/0x10
[  308.894244][ T8212]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  308.894258][ T8212]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  308.894275][ T8212]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  308.894290][ T8212]  ? __kthread_parkme+0x7b/0x200
[  308.894302][ T8212]  ? __kthread_parkme+0x1a1/0x200
[  308.894314][ T8212]  kthread+0x711/0x8a0
[  308.894328][ T8212]  ? __pfx_hidp_session_thread+0x10/0x10
[  308.894343][ T8212]  ? __pfx_kthread+0x10/0x10
[  308.894355][ T8212]  ? _raw_spin_unlock_irq+0x23/0x50
[  308.894369][ T8212]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.894383][ T8212]  ? __pfx_kthread+0x10/0x10
[  308.894395][ T8212]  ret_from_fork+0x3fc/0x770
[  308.894409][ T8212]  ? __pfx_ret_from_fork+0x10/0x10
[  308.894420][ T8212]  ? __switch_to_asm+0x39/0x70
[  308.894433][ T8212]  ? __switch_to_asm+0x33/0x70
[  308.894446][ T8212]  ? __pfx_kthread+0x10/0x10
[  308.894459][ T8212]  ret_from_fork_asm+0x1a/0x30
[  308.894477][ T8212]  </TASK>
[  308.894482][ T8212] 
[  308.981881][ T8212] Allocated by task 7479:
[  308.983721][ T8212]  kasan_save_track+0x3e/0x80
[  308.985800][ T8212]  __kasan_kmalloc+0x93/0xb0
[  308.987848][ T8212]  __kmalloc_noprof+0x27a/0x4f0
[  308.989966][ T8212]  hci_alloc_dev_priv+0x28/0x2060
[  308.992100][ T8212]  vhci_create_device+0x120/0x6e0
[  308.994270][ T8212]  vhci_write+0x3ce/0x4a0
[  308.996075][ T8212]  vfs_write+0x5c9/0xb30
[  308.997881][ T8212]  ksys_write+0x145/0x250
[  308.999796][ T8212]  do_syscall_64+0xfa/0x3b0
[  309.001743][ T8212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.004189][ T8212] 
[  309.005265][ T8212] Freed by task 7479:
[  309.006998][ T8212]  kasan_save_track+0x3e/0x80
[  309.009004][ T8212]  kasan_save_free_info+0x46/0x50
[  309.011159][ T8212]  __kasan_slab_free+0x5b/0x80
[  309.013165][ T8212]  kfree+0x18e/0x440
[  309.014847][ T8212]  bt_host_release+0x82/0x90
[  309.016808][ T8212]  device_release+0x9c/0x1c0
[  309.018840][ T8212]  kobject_put+0x22b/0x480
[  309.020766][ T8212]  vhci_release+0x88/0xd0
[  309.022629][ T8212]  __fput+0x44c/0xa70
[  309.024327][ T8212]  task_work_run+0x1d4/0x260
[  309.026251][ T8212]  do_exit+0x6b5/0x2300
[  309.028106][ T8212]  do_group_exit+0x21c/0x2d0
[  309.030137][ T8212]  get_signal+0x1286/0x1340
[  309.032119][ T8212]  arch_do_signal_or_restart+0x9a/0x750
[  309.034465][ T8212]  exit_to_user_mode_loop+0x75/0x110
[  309.036830][ T8212]  do_syscall_64+0x2bd/0x3b0
[  309.038894][ T8212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.041458][ T8212] 
[  309.042543][ T8212] Last potentially related work creation:
[  309.045013][ T8212]  kasan_save_stack+0x3e/0x60
[  309.047101][ T8212]  kasan_record_aux_stack+0xbd/0xd0
[  309.049358][ T8212]  insert_work+0x3d/0x330
[  309.051299][ T8212]  __queue_work+0xcd2/0xfb0
[  309.053333][ T8212]  queue_work_on+0x181/0x270
[  309.055393][ T8212]  hci_cmd_sync_submit+0x285/0x2b0
[  309.057619][ T8212]  process_scheduled_works+0xae1/0x17b0
[  309.060099][ T8212]  worker_thread+0x8a0/0xda0
[  309.062159][ T8212]  kthread+0x711/0x8a0
[  309.063982][ T8212]  ret_from_fork+0x3fc/0x770
[  309.065970][ T8212]  ret_from_fork_asm+0x1a/0x30
[  309.068065][ T8212] 
[  309.069100][ T8212] Second to last potentially related work creation:
[  309.071855][ T8212]  kasan_save_stack+0x3e/0x60
[  309.073908][ T8212]  kasan_record_aux_stack+0xbd/0xd0
[  309.076199][ T8212]  insert_work+0x3d/0x330
[  309.078094][ T8212]  __queue_work+0xbaf/0xfb0
[  309.080130][ T8212]  queue_work_on+0x181/0x270
[  309.081827][ T8212]  process_scheduled_works+0xae1/0x17b0
[  309.083726][ T8212]  worker_thread+0x8a0/0xda0
[  309.085482][ T8212]  kthread+0x711/0x8a0
[  309.086994][ T8212]  ret_from_fork+0x3fc/0x770
[  309.088736][ T8212]  ret_from_fork_asm+0x1a/0x30
[  309.090381][ T8212] 
[  309.091198][ T8212] The buggy address belongs to the object at ffff888033b60000
[  309.091198][ T8212]  which belongs to the cache kmalloc-8k of size 8192
[  309.096449][ T8212] The buggy address is located 160 bytes inside of
[  309.096449][ T8212]  freed 8192-byte region [ffff888033b60000, ffff888033b62000)
[  309.101321][ T8212] 
[  309.102264][ T8212] The buggy address belongs to the physical page:
[  309.104704][ T8212] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33b60
[  309.108108][ T8212] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  309.111060][ T8212] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  309.114073][ T8212] page_type: f5(slab)
[  309.115601][ T8212] raw: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[  309.118760][ T8212] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  309.122153][ T8212] head: 00fff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[  309.125522][ T8212] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  309.128364][ T8212] head: 00fff00000000003 ffffea0000ced801 00000000ffffffff 00000000ffffffff
[  309.131525][ T8212] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  309.134814][ T8212] page dumped because: kasan: bad access detected
[  309.137177][ T8212] page_owner tracks the page as allocated
[  309.139226][ T8212] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7479, tgid 7479 (syz-executor), ts 124882002965, free_ts 124091412732
[  309.146819][ T8212]  post_alloc_hook+0x240/0x2a0
[  309.148498][ T8212]  get_page_from_freelist+0x21e4/0x22c0
[  309.150506][ T8212]  __alloc_frozen_pages_noprof+0x181/0x370
[  309.153095][ T8212]  alloc_pages_mpol+0x232/0x4a0
[  309.155293][ T8212]  allocate_slab+0x8a/0x370
[  309.157322][ T8212]  ___slab_alloc+0xbeb/0x1410
[  309.159376][ T8212]  __kmalloc_noprof+0x305/0x4f0
[  309.161467][ T8212]  hci_alloc_dev_priv+0x28/0x2060
[  309.163596][ T8212]  vhci_create_device+0x120/0x6e0
[  309.165745][ T8212]  vhci_write+0x3ce/0x4a0
[  309.167627][ T8212]  vfs_write+0x5c9/0xb30
[  309.169455][ T8212]  ksys_write+0x145/0x250
[  309.171071][ T8212]  do_syscall_64+0xfa/0x3b0
[  309.172833][ T8212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.175195][ T8212] page last free pid 5997 tgid 5997 stack trace:
[  309.177966][ T8212]  __free_frozen_pages+0xbc4/0xd30
[  309.180100][ T8212]  __put_partials+0x156/0x1a0
[  309.182009][ T8212]  put_cpu_partial+0x17c/0x250
[  309.183964][ T8212]  __slab_free+0x2d5/0x3c0
[  309.185784][ T8212]  qlist_free_all+0x97/0x140
[  309.187663][ T8212]  kasan_quarantine_reduce+0x148/0x160
[  309.190114][ T8212]  __kasan_slab_alloc+0x22/0x80
[  309.192189][ T8212]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  309.195074][ T8212]  getname_flags+0xb8/0x540
[  309.197376][ T8212]  user_path_at+0x24/0x60
[  309.199280][ T8212]  do_utimes+0x131/0x2a0
[  309.201165][ T8212]  __x64_sys_utimensat+0x14f/0x230
[  309.204191][ T8212]  do_syscall_64+0xfa/0x3b0
[  309.206426][ T8212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.208918][ T8212] 
[  309.209831][ T8212] Memory state around the buggy address:
[  309.212163][ T8212]  ffff888033b5ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  309.217011][ T8212]  ffff888033b60000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  309.220091][ T8212] >ffff888033b60080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  309.223569][ T8212]                                ^
[  309.226315][ T8212]  ffff888033b60100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  309.230575][ T8212]  ffff888033b60180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  309.234066][ T8212] ==================================================================
[  309.239268][ T8212] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  309.243262][ T8212] CPU: 1 UID: 0 PID: 8212 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  309.247566][ T8212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  309.251832][ T8212] Call Trace:
[  309.253232][ T8212]  <TASK>
[  309.254465][ T8212]  dump_stack_lvl+0x99/0x250
[  309.256750][ T8212]  ? __asan_memcpy+0x40/0x70
[  309.258691][ T8212]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.260965][ T8212]  ? __pfx__printk+0x10/0x10
[  309.263175][ T8212]  vpanic+0x281/0x750
[  309.264870][ T8212]  ? __pfx_vpanic+0x10/0x10
[  309.267073][ T8212]  ? irqentry_exit+0x74/0x90
[  309.269691][ T8212]  panic+0xb9/0xc0
[  309.271486][ T8212]  ? __pfx_panic+0x10/0x10
[  309.274085][ T8212]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  309.276682][ T8212]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  309.278916][ T8212]  ? __mutex_lock+0x801/0x1350
[  309.280823][ T8212]  check_panic_on_warn+0x89/0xb0
[  309.282693][ T8212]  ? __mutex_lock+0x801/0x1350
[  309.284462][ T8212]  end_report+0x78/0x160
[  309.286678][ T8212]  kasan_report+0x129/0x150
[  309.288987][ T8212]  ? __mutex_lock+0x801/0x1350
[  309.291216][ T8212]  __mutex_lock+0x801/0x1350
[  309.293467][ T8212]  ? __mutex_lock+0x5bb/0x1350
[  309.295629][ T8212]  ? l2cap_unregister_user+0x6a/0x1b0
[  309.297796][ T8212]  ? __pfx___mutex_lock+0x10/0x10
[  309.300115][ T8212]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  309.302500][ T8212]  l2cap_unregister_user+0x6a/0x1b0
[  309.304734][ T8212]  hidp_session_thread+0x3c9/0x410
[  309.308153][ T8212]  ? __pfx_hidp_session_thread+0x10/0x10
[  309.310362][ T8212]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  309.312406][ T8212]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  309.314498][ T8212]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  309.316846][ T8212]  ? __kthread_parkme+0x7b/0x200
[  309.318688][ T8212]  ? __kthread_parkme+0x1a1/0x200
[  309.320715][ T8212]  kthread+0x711/0x8a0
[  309.322364][ T8212]  ? __pfx_hidp_session_thread+0x10/0x10
[  309.324259][ T8212]  ? __pfx_kthread+0x10/0x10
[  309.325859][ T8212]  ? _raw_spin_unlock_irq+0x23/0x50
[  309.327655][ T8212]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.329504][ T8212]  ? __pfx_kthread+0x10/0x10
[  309.331379][ T8212]  ret_from_fork+0x3fc/0x770
[  309.333127][ T8212]  ? __pfx_ret_from_fork+0x10/0x10
[  309.334904][ T8212]  ? __switch_to_asm+0x39/0x70
[  309.336684][ T8212]  ? __switch_to_asm+0x33/0x70
[  309.338460][ T8212]  ? __pfx_kthread+0x10/0x10
[  309.340092][ T8212]  ret_from_fork_asm+0x1a/0x30
[  309.342036][ T8212]  </TASK>
[  309.344028][ T8212] Kernel Offset: disabled
[  309.345599][ T8212] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:57:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=00000000ffffffff RCX=ffff8881081a8000 RDX=0000000000000000
RSI=00000000ffffffff RDI=ffffffff8e139fe0 RBP=00000000ffffffff RSP=ffffc90006b06618
R8 =0000000000000000 R9 =ffffffff825d433c R10=dffffc0000000000 R11=ffffed10036dc024
R12=0000000000000246 R13=ffff8881081a8000 R14=ffffffff8e139fe0 R15=dffffc0000000000
RIP=ffffffff8b79cb5d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557a72f500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffaf657fc0 CR3=000000012e402000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000276f370
R8 =ffff88801f6b8237 R9 =1ffff11003ed7046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd915 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fffaf658268 CR3=0000000111d38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000035 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=363030302e353035 353a464236313a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
