last executing test programs:

24.665336417s ago: executing program 3 (id=1028):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000200195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r0}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x0)
shutdown(r1, 0x0)

24.451231976s ago: executing program 3 (id=1029):
r0 = io_uring_setup(0x5997, &(0x7f0000000140)={0x0, 0x0, 0x1})
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8)
sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

24.191262684s ago: executing program 3 (id=1032):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40)

23.939960673s ago: executing program 3 (id=1033):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xa4)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
open(&(0x7f0000000200)='./bus\x00', 0x14d27e, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

22.111537958s ago: executing program 3 (id=1041):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCGFLAGS1(r1, 0x40047457, 0x0)

11.620520943s ago: executing program 3 (id=1041):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$PPPIOCGFLAGS1(r1, 0x40047457, 0x0)

9.069101704s ago: executing program 5 (id=1101):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(r0, &(0x7f0000000100)=""/85, 0x55)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2)

5.117702863s ago: executing program 0 (id=1115):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xa7, 0xf3, 0x98, 0x8, 0x547, 0x7303, 0xc4ff, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x58, 0x22, 0xd3}}]}}]}}, 0x0)

4.167283204s ago: executing program 1 (id=1121):
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x10010)

4.140708292s ago: executing program 4 (id=1122):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
creat(0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000a40)={0x0, 0x0, 0x6, "b562eaf44d0f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

3.716682234s ago: executing program 0 (id=1123):
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x1, r4})
io_uring_enter(r1, 0x5113, 0x0, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.534771552s ago: executing program 0 (id=1124):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8)
sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
sendto$inet6(r0, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000140)=0x8)

3.146040369s ago: executing program 0 (id=1126):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xa1a)

2.987251603s ago: executing program 5 (id=1128):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b707000000ff00004870000000000000400000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

2.851228429s ago: executing program 1 (id=1129):
r0 = io_uring_setup(0x5997, &(0x7f0000000140)={0x0, 0x0, 0x1})
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x4}, 0x8)
sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="85", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

2.757749086s ago: executing program 5 (id=1130):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0)
io_uring_setup(0x3819, &(0x7f00000003c0))
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x6, 0x0, 0x46, 0x407006}, 0x104)

2.698351559s ago: executing program 2 (id=1131):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
r1 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_DISCONNECT(r2, 0xab08)

2.544957865s ago: executing program 1 (id=1133):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x2a, 0x2, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140), 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0)

2.48312708s ago: executing program 4 (id=1134):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052cae96064b55c8a04c6ad7f72cc5e3f5aba5b2320b7ca4d64981b5c0179365bb26dcb6f5dd409cefe4e35df84798463947e69102fbf7581c0eef9ffea68c80ae911c5cef286544566cff7e452e3f0c45fedeb36c6646f5c44aa585d", 0x7b}, {&(0x7f0000000640)="0d58fa00a4a25557616d6ad626d271bcc615561efebc4402c751263a6048a6cc870c57ef079cfb94f1992cf5f8477c193de19ba52e949b73ff7cb3bb8b81dac1679408e377ed2ee99f8b90b9834cfbce43615f550f1153dc48e5303114822b01a9dd1ea48e4c6dddfc5c7b1b15", 0x6d}], 0x2}, 0x0)
recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0)

2.286013654s ago: executing program 4 (id=1135):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mlock2(&(0x7f00002dd000/0x4000)=nil, 0x4000, 0x0)

2.226538464s ago: executing program 2 (id=1136):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r0, 0x1)

1.980769079s ago: executing program 2 (id=1137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r2, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)

1.934741294s ago: executing program 0 (id=1138):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000540)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"})
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0)

1.806149875s ago: executing program 4 (id=1139):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0)

1.723825073s ago: executing program 5 (id=1140):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5a, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3, {0x5, 0x92, 0x4}}, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9c37}]}, 0x90}}, 0x0)

1.692301936s ago: executing program 0 (id=1141):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0x6066}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5, 0x2}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0xfffc, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a00)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

1.571168644s ago: executing program 2 (id=1142):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1516, &(0x7f0000001c00)="$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")
r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
ftruncate(r0, 0x1)
dup3(r1, r0, 0x0)
finit_module(r1, 0x0, 0x0)

1.518922022s ago: executing program 4 (id=1143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)={0x124, r1, 0x5, 0x42, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@supported_rates={0x1, 0x2, [{0x9, 0x1}, {0x60}]}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0xde, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @from_mac, {0x6, 0x1}}, 0x1, @default, 0x1400, @void, @void, @void, @void, @void, @val={0x5, 0x71, {0x40, 0xa7, 0xaf, "d6a1c659c793b064908cbec442bc6c3f926e62f1abbd553fd168c35ffa3d1edb4d96ec4beb3ec66f11e18d577f6134c95c8e1ca38a361f4a892f8ad57dee0845f88e4ff292e27fcdc8528d34c541ceb530ea99cb6f36e0e7f7c24c42c07ff3b38bc5d429301e6d1ef04808a42b30"}}, @val={0x25, 0x3, {0x1, 0xac, 0x2}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x1, 0x76, 0xb7, 0x65}}, @val={0x2d, 0x1a, {0xd7a9c66bf4d601a9, 0x2, 0x4, 0x0, {0x888c, 0x6, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0x3a5, 0x9}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x2, 0x5, 0x69}}, @val={0x76, 0x6, {0xe, 0x5, 0x1f, 0x81e}}}}]]}, 0x124}}, 0x0)

1.500644196s ago: executing program 1 (id=1144):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x80040, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fstat(r0, &(0x7f0000000240))

1.389558532s ago: executing program 5 (id=1145):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r1, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0x4})

1.239088786s ago: executing program 4 (id=1146):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
acct(&(0x7f00000017c0)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080))
acct(0x0)

248.567193ms ago: executing program 1 (id=1147):
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r3 = socket(0x10, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x200440c0, 0x1})
io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0)

248.30499ms ago: executing program 2 (id=1148):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="7f96be1030f2a6a5e2c9b768ae8349417d7b72e2dfe0002c43ae001897d43052cae96064b55c8a04c6ad7f72cc5e3f5aba5b2320b7ca4d64981b5c0179365bb26dcb6f5dd409cefe4e35df84798463947e69102fbf7581c0eef9ffea68c80ae911c5cef286544566cff7e452e3f0c45fedeb36c6646f5c44aa585d", 0x7b}, {&(0x7f0000000640)="0d58fa00a4a25557616d6ad626d271bcc615561efebc4402c751263a6048a6cc870c57ef079cfb94f1992cf5f8477c193de19ba52e949b73ff7cb3bb8b81dac1679408e377ed2ee99f8b90b9834cfbce43615f550f1153dc48e5303114822b01a9dd1ea48e4c6dddfc5c7b1b15", 0x6d}], 0x2}, 0x0)
recvmmsg(r1, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0)

248.168487ms ago: executing program 5 (id=1149):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "d722"}, 0x0, &(0x7f0000000700)={0x40, 0x13, 0x6, @random="3f42ae1d53e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000280)={0x0, 0x17, 0x4, "06000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

30.57472ms ago: executing program 2 (id=1150):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x2, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=1151):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xa1a)

kernel console output (not intermixed with test programs):

 0 descriptor??
[  193.622415][ T5295] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024
[  193.695223][ T5295] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024
[  193.732544][ T5295] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00
[  193.744538][   T52] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  193.762537][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  193.792564][ T5295] usb 6-1: SerialNumber: syz
[  193.850333][ T5293] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00
[  193.882457][ T5293] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  193.890503][ T5295] usb 6-1: config 0 descriptor??
[  193.911543][ T7578] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  193.949868][ T7578] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  193.955729][ T5293] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  193.998342][    C1] port100 6-1:0.0: NFC: Urb failure (status -71)
[  194.008008][ T5293] [drm] Initialized udl on minor 2
[  194.012440][ T7565] read_mapping_page failed!
[  194.013577][    C1] port100 6-1:0.0: NFC: Urb failure (status -71)
[  194.066490][ T5295] port100 6-1:0.0: NFC: Could not get supported command types
[  194.332989][ T5293] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  194.368828][ T5293] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  194.379514][ T5292] usb 6-1: USB disconnect, device number 8
[  194.382176][ T5295] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  194.391000][ T7593] loop3: detected capacity change from 0 to 2048
[  194.443814][ T5295] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  194.468565][ T5295] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  194.485797][ T5293] usb 3-1: USB disconnect, device number 12
[  194.684702][ T7574] loop1: detected capacity change from 0 to 32768
[  194.770693][ T7574] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  194.822992][ T7609] loop3: detected capacity change from 0 to 512
[  194.888346][ T7609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  194.917074][ T7609] EXT4-fs (loop3): 1 truncate cleaned up
[  194.931113][ T7609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.012958][ T7574] XFS (loop1): Ending clean mount
[  195.143469][ T7615] input: syz0 as /devices/virtual/input/input17
[  195.166937][ T5236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.453555][ T5241] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  195.459139][ T7624] input: syz0 as /devices/virtual/input/input18
[  195.550844][ T7624] input: failed to attach handler leds to device input18, error: -6
[  196.981324][ T7626] loop4: detected capacity change from 0 to 32768
[  197.093636][ T7626] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  197.345543][ T7626] XFS (loop4): Ending clean mount
[  197.369029][ T7626] XFS (loop4): Quotacheck needed: Please wait.
[  197.444385][ T7626] XFS (loop4): Quotacheck: Done.
[  197.578260][ T7661] loop0: detected capacity change from 0 to 32768
[  197.632639][ T7661] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.701 (7661)
[  197.763537][ T7661] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  197.788442][ T7661] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  197.832571][ T7661] BTRFS info (device loop0): using free-space-tree
[  197.935379][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'.
[  198.053983][ T5227] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.338684][ T7654] loop5: detected capacity change from 0 to 32768
[  198.705294][ T7704] loop2: detected capacity change from 0 to 1024
[  198.726685][ T7654] read_mapping_page failed!
[  198.731492][ T7654] read_mapping_page failed!
[  198.778430][ T7704] EXT4-fs: Ignoring removed orlov option
[  198.830432][ T7704] EXT4-fs: Ignoring removed nomblk_io_submit option
[  198.892918][  T109] read_mapping_page failed!
[  198.923401][ T7704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.941039][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  198.947471][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  198.993573][ T5226] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.219821][ T7702] loop1: detected capacity change from 0 to 32768
[  199.234565][ T7702] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.709 (7702)
[  199.251281][ T7702] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  199.261715][ T7702] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  199.483276][ T7702] BTRFS info (device loop1): rebuilding free space tree
[  199.613592][ T7702] BTRFS info (device loop1): disabling free space tree
[  199.620561][ T7702] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  199.682595][ T7702] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  199.961467][ T5228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.309743][   T29] audit: type=1800 audit(1728160156.104:41): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.709" name="file1" dev="loop1" ino=260 res=0 errno=0
[  200.507263][ T7752] loop5: detected capacity change from 0 to 8192
[  200.702340][ T7761] loop2: detected capacity change from 0 to 1024
[  200.786757][ T5241] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  200.993719][ T7761] hfsplus: xattr searching failed
[  201.172243][ T7742] loop3: detected capacity change from 0 to 32768
[  201.204153][ T5320] hfsplus: b-tree write err: -5, ino 3
[  201.216646][ T7742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.717 (7742)
[  201.311546][ T7742] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  201.344840][ T7742] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  201.382634][ T7742] BTRFS info (device loop3): using free-space-tree
[  201.736472][ T7795] macvlan0: entered allmulticast mode
[  201.791354][ T7795] veth1_vlan: entered allmulticast mode
[  201.853190][ T7801] veth1_vlan: left allmulticast mode
[  201.988282][ T7801] macvlan0 (unregistering): left allmulticast mode
[  202.142543][ T5293] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  202.334336][ T5236] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.418685][ T7772] loop4: detected capacity change from 0 to 40427
[  202.461676][ T7772] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  202.473291][ T5293] usb 2-1: Using ep0 maxpacket: 32
[  202.480118][ T7810] cgroup: fork rejected by pids controller in /syz5
[  202.506971][ T7772] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  202.589805][ T5293] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  202.629513][ T5293] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  202.645968][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.670889][ T5293] usb 2-1: Product: syz
[  202.676247][ T5293] usb 2-1: Manufacturer: syz
[  202.680970][ T5293] usb 2-1: SerialNumber: syz
[  202.754414][ T5293] usb 2-1: config 0 descriptor??
[  202.775475][ T7803] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  202.800065][ T7772] F2FS-fs (loop4): Found nat_bits in checkpoint
[  202.908862][ T5293] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  203.006141][ T7807] loop2: detected capacity change from 0 to 32768
[  203.009696][ T7772] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  203.107153][ T7772] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  203.263366][ T7829] syz.4.728: attempt to access beyond end of device
[  203.263366][ T7829] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  203.285029][ T5293] usb 2-1: USB disconnect, device number 5
[  203.291590][ T7807] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.330796][ T7772] syz.4.728: attempt to access beyond end of device
[  203.330796][ T7772] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.625075][ T7807] XFS (loop2): Ending clean mount
[  203.640973][ T7836] loop3: detected capacity change from 0 to 1024
[  203.685255][ T7836] hfsplus: unable to parse mount options
[  203.759113][  T145] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.900142][ T5228] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  204.097525][  T145] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.380862][   T29] audit: type=1326 audit(1728160160.174:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.2.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4523b7dff9 code=0x7ffc0000
[  204.632742][ T7841] loop1: detected capacity change from 0 to 32768
[  204.647353][   T29] audit: type=1326 audit(1728160160.174:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.2.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f4523b7dff9 code=0x7ffc0000
[  204.669812][   T29] audit: type=1326 audit(1728160160.294:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.2.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4523b7dff9 code=0x7ffc0000
[  204.692153][   T29] audit: type=1326 audit(1728160160.294:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.2.747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4523b7dff9 code=0x7ffc0000
[  204.993298][  T145] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.087237][ T5251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  205.102601][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  205.111263][ T5251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  205.119694][ T5251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  205.130060][ T5251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  205.138306][ T5251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  205.146036][ T5251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  205.355594][  T145] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.410563][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.421349][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.560390][    T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  205.569791][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  205.579402][    T9] usb 3-1: SerialNumber: syz
[  205.730440][ T7859] loop4: detected capacity change from 0 to 32768
[  205.775266][ T7859] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.842548][ T5296] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  205.890173][    T9] usb 3-1: 0:2 : does not exist
[  205.963348][    T9] usb 3-1: USB disconnect, device number 13
[  205.976667][ T7877] input: syz0 as /devices/virtual/input/input19
[  205.982027][ T7857] chnl_net:caif_netlink_parms(): no params data found
[  206.023372][ T5296] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  206.059148][ T5296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.102574][ T5296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.116052][ T7859] XFS (loop4): Ending clean mount
[  206.126431][ T5296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  206.145356][ T5294] udevd[5294]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.175333][ T5296] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  206.191938][ T7859] XFS (loop4): Quotacheck needed: Please wait.
[  206.204649][ T5296] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  206.231369][ T5296] usb 1-1: Manufacturer: syz
[  206.260516][ T7859] XFS (loop4): Quotacheck: Done.
[  206.281407][ T5296] usb 1-1: config 0 descriptor??
[  206.291715][  T145] bridge_slave_1: left allmulticast mode
[  206.298678][  T145] bridge_slave_1: left promiscuous mode
[  206.319327][  T145] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.346033][  T145] bridge_slave_0: left allmulticast mode
[  206.353963][  T145] bridge_slave_0: left promiscuous mode
[  206.359768][  T145] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.393890][ T7883] loop1: detected capacity change from 0 to 2048
[  206.465672][ T5227] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.707442][ T5296] appleir 0003:05AC:8243.000F: unknown main item tag 0x0
[  206.723651][ T5296] appleir 0003:05AC:8243.000F: No inputs registered, leaving
[  206.792474][ T5296] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  206.925894][ T7888] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  207.078634][ T7892] loop4: detected capacity change from 0 to 256
[  207.195247][ T7892] FAT-fs (loop4): Directory bread(block 64) failed
[  207.202602][ T7892] FAT-fs (loop4): Directory bread(block 65) failed
[  207.209273][ T7892] FAT-fs (loop4): Directory bread(block 66) failed
[  207.220362][ T7892] FAT-fs (loop4): Directory bread(block 67) failed
[  207.227961][ T7892] FAT-fs (loop4): Directory bread(block 68) failed
[  207.235316][ T7892] FAT-fs (loop4): Directory bread(block 69) failed
[  207.241936][ T7892] FAT-fs (loop4): Directory bread(block 70) failed
[  207.249971][ T7892] FAT-fs (loop4): Directory bread(block 71) failed
[  207.259775][ T7892] FAT-fs (loop4): Directory bread(block 72) failed
[  207.267630][ T5239] Bluetooth: hci3: command tx timeout
[  207.269865][ T7892] FAT-fs (loop4): Directory bread(block 73) failed
[  207.294326][ T5296] usb 1-1: USB disconnect, device number 14
[  207.431327][ T5316] kworker/u8:7: attempt to access beyond end of device
[  207.431327][ T5316] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256
[  207.765378][  T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.835623][  T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.902633][  T145] bond0 (unregistering): Released all slaves
[  208.267146][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.284819][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.337474][ T7857] bridge_slave_0: entered allmulticast mode
[  208.367963][ T7857] bridge_slave_0: entered promiscuous mode
[  208.711275][ T7930] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  208.802222][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.817020][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.871292][ T7857] bridge_slave_1: entered allmulticast mode
[  208.907891][ T7857] bridge_slave_1: entered promiscuous mode
[  209.013719][ T7898] loop4: detected capacity change from 0 to 32768
[  209.231643][ T7912] loop1: detected capacity change from 0 to 32768
[  209.274026][ T7898] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.300289][ T7912] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.768 (7912)
[  209.332551][ T5239] Bluetooth: hci3: command tx timeout
[  209.400589][ T7946] netlink: 'syz.0.778': attribute type 9 has an invalid length.
[  209.415928][ T7946] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.778'.
[  209.420422][ T7857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.471457][ T7912] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  209.510032][   T29] audit: type=1326 audit(1728160421.301:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4523b7dff9 code=0x7fc00000
[  209.512535][ T7912] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  209.577259][ T7912] BTRFS info (device loop1): using free-space-tree
[  209.635237][ T7898] XFS (loop4): Ending clean mount
[  209.842470][ T5296] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  209.872597][ T7857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.898042][ T7978] loop0: detected capacity change from 0 to 128
[  209.954225][   T29] audit: type=1804 audit(1728160421.751:47): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.768" name="/newroot/132/bus/bus" dev="loop1" ino=263 res=1 errno=0
[  209.993753][ T5227] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.025893][   T29] audit: type=1800 audit(1728160421.751:48): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.768" name="bus" dev="loop1" ino=263 res=0 errno=0
[  210.082638][ T5296] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  210.143772][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.162680][   T29] audit: type=1326 audit(1728160421.921:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7947 comm="syz.2.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4523b7dff9 code=0x7fc00000
[  210.235072][ T5296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.300449][ T5296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  210.432512][  T145] hsr_slave_0: left promiscuous mode
[  210.474914][ T5241] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  210.610395][ T5296] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  210.620841][ T5296] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  210.629111][ T5296] usb 4-1: Manufacturer: syz
[  210.636617][ T5296] usb 4-1: config 0 descriptor??
[  210.682536][  T145] hsr_slave_1: left promiscuous mode
[  210.751614][  T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.759764][  T145] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.852935][ T7988] capability: warning: `syz.0.786' uses deprecated v2 capabilities in a way that may be insecure
[  210.864994][  T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.882528][  T145] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.980293][  T145] veth1_macvtap: left promiscuous mode
[  210.994658][  T145] veth0_macvtap: left promiscuous mode
[  211.014114][  T145] veth1_vlan: left promiscuous mode
[  211.019553][  T145] veth0_vlan: left promiscuous mode
[  211.075099][ T5296] appleir 0003:05AC:8243.0010: unknown main item tag 0x0
[  211.091736][ T5296] appleir 0003:05AC:8243.0010: No inputs registered, leaving
[  211.153094][ T5296] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  211.414086][ T5239] Bluetooth: hci3: command tx timeout
[  211.689446][ T5296] usb 4-1: USB disconnect, device number 9
[  212.064264][ T7986] loop4: detected capacity change from 0 to 32768
[  212.071512][ T7986] XFS: ikeep mount option is deprecated.
[  212.152701][ T7986] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  212.304723][ T7994] loop0: detected capacity change from 0 to 32768
[  212.313522][ T7994] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.787 (7994)
[  212.336992][ T7994] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  212.362882][ T7994] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  212.371366][ T7994] BTRFS info (device loop0): using free-space-tree
[  212.530493][ T7992] loop1: detected capacity change from 0 to 32768
[  212.589884][ T7992] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.784 (7992)
[  212.660458][ T7986] XFS (loop4): Ending clean mount
[  212.670500][ T7986] XFS (loop4): Quotacheck needed: Please wait.
[  212.724302][ T7992] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.746501][ T7992] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  212.772798][ T7992] BTRFS info (device loop1): using free-space-tree
[  212.801093][   T29] audit: type=1800 audit(1728160424.601:50): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.787" name="bus" dev="loop0" ino=263 res=0 errno=0
[  212.876707][   T29] audit: type=1800 audit(1728160424.601:51): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.787" name="bus" dev="loop0" ino=263 res=0 errno=0
[  212.951755][ T5226] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  212.965278][ T7986] XFS (loop4): Quotacheck: Done.
[  213.322716][ T5227] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  213.351077][ T5241] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.552469][ T5239] Bluetooth: hci3: command tx timeout
[  213.957887][  T145] team0 (unregistering): Port device team_slave_1 removed
[  214.180289][  T145] team0 (unregistering): Port device team_slave_0 removed
[  214.649981][ T8078] loop0: detected capacity change from 0 to 128
[  214.695283][ T8078] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  214.723548][ T8078] ext4 filesystem being mounted at /146/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  214.981990][ T5226] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  215.244633][ T8075] loop4: detected capacity change from 0 to 32768
[  215.263725][ T8075] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.801 (8075)
[  215.302672][   T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  215.321292][ T8075] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.342793][ T8075] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  215.351549][ T8075] BTRFS info (device loop4): using free-space-tree
[  215.473334][   T25] usb 2-1: Using ep0 maxpacket: 16
[  215.488317][   T25] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  215.517350][   T25] usb 2-1: config 0 has no interface number 0
[  215.536367][   T25] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  215.581869][   T25] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  215.623962][   T25] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  215.649102][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.682429][   T25] usb 2-1: Product: syz
[  215.694970][   T25] usb 2-1: Manufacturer: syz
[  215.723612][   T25] usb 2-1: SerialNumber: syz
[  215.749739][   T25] usb 2-1: config 0 descriptor??
[  215.760325][ T8085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  215.770145][ T8085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  215.816824][ T5227] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  216.018383][ T7857] team0: Port device team_slave_0 added
[  216.057434][ T8085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  216.065931][ T7857] team0: Port device team_slave_1 added
[  216.103028][ T8085] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  216.357750][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.395583][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.532662][ T7857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.578984][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.612446][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.722469][ T7857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.759659][   T25] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  216.818347][   T25] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  216.857244][   T25] asix 2-1:0.251: probe with driver asix failed with error -71
[  216.869764][   T25] usb 2-1: USB disconnect, device number 6
[  217.154732][ T8087] loop0: detected capacity change from 0 to 40427
[  217.232239][ T8087] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  217.240035][ T7857] hsr_slave_0: entered promiscuous mode
[  217.273599][ T7857] hsr_slave_1: entered promiscuous mode
[  217.279321][ T8087] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  217.312691][ T7857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.344058][ T7857] Cannot create hsr debugfs directory
[  217.371844][ T8087] F2FS-fs (loop0): Found nat_bits in checkpoint
[  217.423774][ T8132] loop3: detected capacity change from 0 to 64
[  217.443790][ T8132] hfs: unable to parse mount options
[  217.629310][ T8136] loop3: detected capacity change from 0 to 256
[  217.645355][ T5295] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  217.721557][ T8106] loop2: detected capacity change from 0 to 32768
[  217.750437][ T8106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.807 (8106)
[  217.767566][ T8087] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  217.776697][ T8106] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  217.787908][ T8106] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  217.803239][ T8087] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  217.852477][ T5295] usb 5-1: Using ep0 maxpacket: 8
[  217.859715][ T5295] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  217.859951][ T8106] BTRFS info (device loop2): using free-space-tree
[  217.880639][ T5295] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.927622][ T5295] usb 5-1: config 0 has no interface number 0
[  217.968502][ T5295] usb 5-1: config 0 interface 255 has no altsetting 0
[  217.997634][ T5295] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  218.014277][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.023249][ T8087] syz.0.804: attempt to access beyond end of device
[  218.023249][ T8087] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  218.030480][ T5295] usb 5-1: Product: syz
[  218.075903][ T8087] syz.0.804: attempt to access beyond end of device
[  218.075903][ T8087] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  218.119846][ T5295] usb 5-1: Manufacturer: syz
[  218.162591][ T5295] usb 5-1: SerialNumber: syz
[  218.422165][ T5295] usb 5-1: config 0 descriptor??
[  218.471396][ T5295] streamzap 5-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0)
[  218.487002][ T5228] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  219.111258][ T5292] usb 5-1: USB disconnect, device number 10
[  219.503501][ T7857] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  219.537699][ T7857] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  219.852098][ T7857] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  219.868452][ T8197] loop4: detected capacity change from 0 to 1024
[  220.202503][ T8199] loop1: detected capacity change from 0 to 32768
[  220.230154][ T8199] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.822 (8199)
[  220.252663][ T8199] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.262969][ T8199] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  220.271444][ T8199] BTRFS info (device loop1): using free-space-tree
[  220.286601][ T7857] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  220.785226][ T7857] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.788952][ T8224] xt_TCPMSS: Only works on TCP SYN packets
[  220.946588][ T7857] 8021q: adding VLAN 0 to HW filter on device team0
[  221.023836][ T8197] hfsplus: xattr searching failed
[  221.091650][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.099082][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  221.121859][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.129069][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.190717][ T7857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  221.212063][ T7857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.573755][ T5241] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  221.640313][ T7857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.100289][ T7857] veth0_vlan: entered promiscuous mode
[  222.117119][ T7857] veth1_vlan: entered promiscuous mode
[  222.161328][ T7857] veth0_macvtap: entered promiscuous mode
[  222.175459][ T7857] veth1_macvtap: entered promiscuous mode
[  222.198438][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.212069][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.225551][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.239462][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.257610][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.271643][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.282226][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.302977][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.312916][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.324571][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.336402][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.357216][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.375501][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.387245][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.405822][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.419965][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.434765][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.451273][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.470898][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.490006][ T7857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  222.500814][ T7857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.523450][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.551326][ T7857] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.567701][ T7857] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.581391][ T7857] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.595799][ T7857] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.719874][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.740597][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.775098][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.789893][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.921219][ T8276] netlink: 36 bytes leftover after parsing attributes in process `syz.5.744'.
[  223.638196][ T8300] loop3: detected capacity change from 0 to 512
[  223.694161][ T8300] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  223.913157][ T8300] EXT4-fs (loop3): 1 orphan inode deleted
[  223.918953][ T8300] EXT4-fs (loop3): 1 truncate cleaned up
[  223.980248][ T8300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.208363][ T8297] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  224.305741][ T8297] EXT4-fs (loop3): Remounting filesystem read-only
[  224.496098][ T8286] loop2: detected capacity change from 0 to 32768
[  224.597254][ T5236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.683597][   T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  224.739440][ T8286] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.762039][ T8323] loop5: detected capacity change from 0 to 32768
[  224.833341][ T8323] find_entry called with index >= next_index
[  224.842631][ T8323] find_entry called with index >= next_index
[  224.875971][   T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  224.905925][   T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.940885][ T8323] find_entry called with index >= next_index
[  224.972637][   T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  224.981674][   T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.008666][   T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  225.017988][   T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  225.026145][   T25] usb 5-1: Product: syz
[  225.030430][   T25] usb 5-1: Manufacturer: syz
[  225.041304][   T25] cdc_wdm 5-1:1.0: skipping garbage
[  225.046848][   T25] cdc_wdm 5-1:1.0: skipping garbage
[  225.056123][   T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  225.062512][ T5293] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  225.076913][ T8286] XFS (loop2): Ending clean mount
[  225.092963][   T25] cdc_wdm 5-1:1.0: Unknown control protocol
[  225.105586][ T8286] XFS (loop2): Quotacheck needed: Please wait.
[  225.240983][ T5293] usb 2-1: Using ep0 maxpacket: 32
[  225.281923][ T8286] XFS (loop2): Quotacheck: Done.
[  225.295208][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  225.301336][ T5293] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  225.302091][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  225.302448][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  225.318258][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.323846][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  225.324393][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  225.332718][ T5293] usb 2-1: Product: syz
[  225.337949][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  225.338974][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  225.344987][ T5293] usb 2-1: Manufacturer: syz
[  225.348851][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  225.357324][ T5293] usb 2-1: SerialNumber: syz
[  225.362279][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  225.375173][ T5293] usb 2-1: config 0 descriptor??
[  225.376680][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  225.385263][ T5293] hub 2-1:0.0: bad descriptor, ignoring hub
[  225.388627][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  225.407050][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  225.413795][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  225.420434][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  225.426726][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  225.433351][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  225.440150][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  225.446810][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  225.453877][    C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  225.460509][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  225.468011][    T9] usb 5-1: USB disconnect, device number 11
[  225.469697][ T5293] hub 2-1:0.0: probe with driver hub failed with error -5
[  225.474036][    C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  225.598618][ T5228] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  225.843993][ T5293] usb 2-1: reset high-speed USB device number 7 using dummy_hcd
[  226.104078][ T8366] loop5: detected capacity change from 0 to 512
[  226.128663][ T8366] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  226.236050][ T5297] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  226.276196][ T8366] EXT4-fs (loop5): 1 orphan inode deleted
[  226.281986][ T8366] EXT4-fs (loop5): 1 truncate cleaned up
[  226.363492][ T8366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.392923][ T5297] usb 1-1: Using ep0 maxpacket: 8
[  226.404125][ T5297] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  226.413907][ T5297] usb 1-1: config 1 has no interface number 1
[  226.420124][ T5297] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  226.483557][ T5297] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  226.511483][ T5297] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  226.531062][ T5297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.542296][ T8378] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  226.560059][ T5297] usb 1-1: Product: syz
[  226.570174][ T5297] usb 1-1: Manufacturer: syz
[  226.582757][ T5292] usb 2-1: USB disconnect, device number 7
[  226.599254][ T5297] usb 1-1: SerialNumber: syz
[  226.614673][ T5293] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  226.645323][ T7857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.750894][ T8385] loop5: detected capacity change from 0 to 512
[  226.761315][ T8385] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  226.786675][ T8385] EXT4-fs (loop5): 1 truncate cleaned up
[  226.792660][ T5293] usb 3-1: Using ep0 maxpacket: 8
[  226.800640][ T5293] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.809924][ T8385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.812261][ T5295] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  226.832294][ T5293] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.844680][ T5293] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  226.853407][ T5297] usb 1-1: 2:1 : unsupported format bits 0x80
[  226.860378][ T5293] usb 3-1: config 0 interface 0 has no altsetting 0
[  226.873081][ T5293] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  226.882253][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.893085][ T5293] usb 3-1: config 0 descriptor??
[  226.930957][ T5297] usb 1-1: USB disconnect, device number 15
[  227.010160][ T7857] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.024711][ T5294] udevd[5294]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  227.067504][ T5295] usb 5-1: config 0 has no interfaces?
[  227.089365][ T5295] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  227.100990][ T5251] Bluetooth: hci3: command 0x0405 tx timeout
[  227.126628][ T5295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.147245][ T5295] usb 5-1: Product: syz
[  227.157266][ T5295] usb 5-1: Manufacturer: syz
[  227.168850][ T5295] usb 5-1: SerialNumber: syz
[  227.184197][ T5295] usb 5-1: config 0 descriptor??
[  227.316167][ T5293] hid-steam 0003:28DE:1102.0011: unknown main item tag 0x0
[  227.326966][ T5293] hid-steam 0003:28DE:1102.0011: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[  227.400534][ T5293] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' connected
[  227.434248][ T5295] usb 5-1: USB disconnect, device number 12
[  227.446493][ T5293] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.0011/input/input20
[  227.519140][ T5293] hid-steam 0003:28DE:1102.0012: unknown main item tag 0x0
[  227.538572][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.589118][ T5293] hid-steam 0003:28DE:1102.0012: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0
[  227.598786][ T8395] loop1: detected capacity change from 0 to 1024
[  227.653505][ T8395] EXT4-fs: Ignoring removed mblk_io_submit option
[  227.654461][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.761501][ T8399] loop3: detected capacity change from 0 to 1024
[  227.809415][ T8395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.845055][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.894370][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.895773][ T5241] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.025810][ T5297] usb 3-1: USB disconnect, device number 14
[  228.167529][ T5297] hid-steam 0003:28DE:1102.0011: Steam Controller 'XXXXXXXXXX' disconnected
[  229.072806][ T8391] loop5: detected capacity change from 0 to 40427
[  229.235659][ T5251] Bluetooth: hci3: command 0x0405 tx timeout
[  232.332462][ T8391] F2FS-fs (loop5): Found nat_bits in checkpoint
[  233.292008][ T8416] loop1: detected capacity change from 0 to 32768
[  233.339110][ T8416] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.866 (8416)
[  233.462638][ T8416] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  233.544109][ T8416] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  233.579045][ T8416] BTRFS info (device loop1): using free-space-tree
[  233.686325][ T8428] vivid-007: disconnect
[  233.714414][ T8426] vivid-007: reconnect
[  233.950179][ T8442] loop4: detected capacity change from 0 to 64
[  234.387595][ T8416] BTRFS info (device loop1 state M): max_inline set to 0
[  234.581437][ T8459] loop2: detected capacity change from 0 to 512
[  234.588617][ T5241] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  234.624310][ T8459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.183958][ T5228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.321108][ T8470] loop1: detected capacity change from 0 to 164
[  235.578353][ T8468] loop3: detected capacity change from 0 to 32768
[  235.686861][ T8468] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  236.040724][   T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.099582][ T8466] loop4: detected capacity change from 0 to 32768
[  236.119908][ T8466] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.877 (8466)
[  236.283175][ T5251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  236.328944][ T5251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  236.344150][ T5251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  236.351443][ T8466] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.383898][ T5251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  236.386866][ T8468] XFS (loop3): Ending clean mount
[  236.412147][ T8466] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  236.430813][ T5251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  236.439521][ T5251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  236.439583][ T8466] BTRFS info (device loop4): using free-space-tree
[  236.479459][   T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.587798][ T8468] XFS (loop3): Quotacheck needed: Please wait.
[  236.594391][ T5293] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  236.780313][ T5293] usb 2-1: Using ep0 maxpacket: 32
[  236.795415][ T5293] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  236.815493][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.902987][ T5293] usb 2-1: Product: syz
[  236.907237][ T5293] usb 2-1: Manufacturer: syz
[  236.914635][ T5293] usb 2-1: SerialNumber: syz
[  236.923369][ T8468] XFS (loop3): Quotacheck: Done.
[  236.933984][ T5293] usb 2-1: config 0 descriptor??
[  236.946658][   T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.092666][ T5297] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  237.145278][   T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.220620][ T5236] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.279844][ T5297] usb 3-1: Using ep0 maxpacket: 32
[  237.295479][ T5297] usb 3-1: unable to get BOS descriptor or descriptor too short
[  237.305201][ T5297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  237.322516][ T5297] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  237.340874][ T5297] usb 3-1: string descriptor 0 read error: -22
[  237.348255][ T5297] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  237.370768][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  237.395393][ T5297] cdc_ether 3-1:1.0: skipping garbage
[  237.401023][ T5297] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  237.451874][ T5227] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.676541][ T5293] rtl8150 2-1:0.0: eth1: rtl8150 is detected
[  237.808706][ T8491] chnl_net:caif_netlink_parms(): no params data found
[  237.962682][ T5293] usb 2-1: USB disconnect, device number 8
[  238.023692][   T52] bridge_slave_1: left allmulticast mode
[  238.032430][   T52] bridge_slave_1: left promiscuous mode
[  238.040232][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.107056][   T52] bridge_slave_0: left allmulticast mode
[  238.113670][   T52] bridge_slave_0: left promiscuous mode
[  238.119456][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.126337][ T8528] loop3: detected capacity change from 0 to 4096
[  238.652876][ T5251] Bluetooth: hci3: command tx timeout
[  239.963527][ T5295] usb 3-1: USB disconnect, device number 15
[  240.722540][ T5251] Bluetooth: hci3: command tx timeout
[  241.632905][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.688139][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.692759][ T8541] loop1: detected capacity change from 0 to 32768
[  241.712173][   T52] bond0 (unregistering): Released all slaves
[  241.731364][ T8541] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.900 (8541)
[  241.833746][ T8541] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.849833][ T8561] loop3: detected capacity change from 0 to 256
[  241.870649][ T8541] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  241.907997][ T8561] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  241.920683][ T8541] BTRFS info (device loop1): using free-space-tree
[  241.930663][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  241.931385][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  241.941562][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  242.033948][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  242.050425][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  242.075725][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  242.097458][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  242.137813][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  242.194134][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  242.214150][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  242.232596][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  242.248768][ T8541] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  242.275629][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.331941][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.346631][ T8578] netlink: 52 bytes leftover after parsing attributes in process `syz.4.911'.
[  242.358123][ T8541] BTRFS error (device loop1): open_ctree failed
[  242.362689][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.4.911'.
[  242.373177][ T8491] bridge_slave_0: entered allmulticast mode
[  242.445244][ T8491] bridge_slave_0: entered promiscuous mode
[  242.655509][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.673477][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.721475][ T8491] bridge_slave_1: entered allmulticast mode
[  242.751489][ T8491] bridge_slave_1: entered promiscuous mode
[  242.774020][ T5239] Bluetooth: hci3: command tx timeout
[  243.012045][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.061711][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.745184][ T8491] team0: Port device team_slave_0 added
[  243.857395][ T8491] team0: Port device team_slave_1 added
[  243.955653][ T8628] loop2: detected capacity change from 0 to 2048
[  244.085259][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.092268][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.121927][ T8491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  244.241049][   T52] hsr_slave_0: left promiscuous mode
[  244.247522][   T52] hsr_slave_1: left promiscuous mode
[  244.259107][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  244.311056][ T8641] loop3: detected capacity change from 0 to 512
[  244.339582][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  244.386880][ T8628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.408175][ T8628] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  244.424166][ T8641] EXT4-fs: Ignoring removed i_version option
[  244.425515][ T8628] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28
[  244.443149][ T8628] EXT4-fs (loop2): This should not happen!! Data will be lost
[  244.443149][ T8628] 
[  244.453155][ T8628] EXT4-fs (loop2): Total free blocks count 0
[  244.459611][ T8628] EXT4-fs (loop2): Free/Dirty block details
[  244.465882][ T8628] EXT4-fs (loop2): free_blocks=2415919104
[  244.471983][ T8628] EXT4-fs (loop2): dirty_blocks=16
[  244.485787][ T8647] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  244.498622][ T8628] EXT4-fs (loop2): Block reservation details
[  244.504742][ T8628] EXT4-fs (loop2): i_reserved_data_blocks=1
[  244.514571][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  244.522129][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  244.594674][ T8643] loop4: detected capacity change from 0 to 2048
[  244.601586][ T8641] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.929: bad orphan inode 1
[  244.615147][ T8641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.717385][   T52] veth1_macvtap: left promiscuous mode
[  244.752610][   T52] veth0_macvtap: left promiscuous mode
[  244.758258][   T52] veth1_vlan: left promiscuous mode
[  244.763680][   T52] veth0_vlan: left promiscuous mode
[  244.807324][ T5236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.853283][ T8643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.865914][ T5239] Bluetooth: hci3: command tx timeout
[  245.140168][ T5227] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.679187][ T8670] loop2: detected capacity change from 0 to 32768
[  245.748880][ T8670] JBD2: Ignoring recovery information on journal
[  245.845010][ T8670] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  245.942130][   T29] audit: type=1800 audit(1728160457.731:52): pid=8670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.938" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  246.250778][ T8670] (syz.2.938,8670,1):ocfs2_dio_end_io:2423 ERROR: Direct IO failed, bytes = -4
[  246.402664][ T5228] ocfs2: Unmounting device (7,2) on (node local)
[  246.847888][   T52] team0 (unregistering): Port device team_slave_1 removed
[  246.929491][   T52] team0 (unregistering): Port device team_slave_0 removed
[  247.075919][   T29] audit: type=1326 audit(1728160458.871:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8695 comm="syz.4.946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522e17dff9 code=0x0
[  247.099475][ T5293] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  247.264561][ T5293] usb 3-1: Using ep0 maxpacket: 8
[  247.279138][ T5293] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[  247.289183][ T5293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.307035][ T5293] usb 3-1: Product: syz
[  247.311250][ T5293] usb 3-1: Manufacturer: syz
[  247.316312][ T5293] usb 3-1: SerialNumber: syz
[  247.333385][ T5293] usb 3-1: config 0 descriptor??
[  247.350815][ T5293] gspca_main: vc032x-2.14.0 probing 046d:0896
[  247.518225][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.525596][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.558778][ T8491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.896983][ T8491] hsr_slave_0: entered promiscuous mode
[  247.910306][ T8491] hsr_slave_1: entered promiscuous mode
[  247.937377][ T8491] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.960325][ T8491] Cannot create hsr debugfs directory
[  247.991605][ T8692] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  248.038307][ T8692] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  248.055673][ T8692] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  248.061628][ T8692] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  248.132595][ T8692] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  248.144498][ T8692] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  248.167873][ T8692] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  248.194770][ T8692] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  248.213568][ T8709] netlink: 'syz.4.949': attribute type 4 has an invalid length.
[  248.460220][ T8710] netlink: 'syz.4.949': attribute type 4 has an invalid length.
[  248.616450][ T5293] gspca_vc032x: reg_w err -71
[  248.621802][ T5293] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  248.668439][ T5293] usb 3-1: USB disconnect, device number 16
[  248.727226][ T8717] loop4: detected capacity change from 0 to 256
[  248.754326][ T8717] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  248.830722][ T8717] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  249.192829][ T5293] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  249.374001][ T8692] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  249.379968][ T8692] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  249.477907][ T5293] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  249.486586][ T5293] usb 1-1: config 0 has no interface number 0
[  249.493195][ T5293] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  249.504326][ T5293] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  249.538542][ T5293] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  249.548859][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  249.591777][ T5293] usb 1-1: Product: syz
[  249.612047][ T5293] usb 1-1: Manufacturer: syz
[  249.635315][ T5293] usb 1-1: SerialNumber: syz
[  249.680049][ T5293] usb 1-1: config 0 descriptor??
[  249.707993][ T8742] loop3: detected capacity change from 0 to 512
[  249.722944][ T8724] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  249.743998][ T5293] usb-storage 1-1:0.20: USB Mass Storage device detected
[  249.829402][ T5293] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  249.858223][ T8742] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #15: comm syz.3.958: casefold flag without casefold feature
[  249.909160][ T8742] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.958: couldn't read orphan inode 15 (err -117)
[  249.930245][ T8742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.975969][ T8724] netlink: 'syz.0.953': attribute type 9 has an invalid length.
[  249.992543][ T8724] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.953'.
[  250.041464][ T5293] scsi host1: usb-storage 1-1:0.20
[  250.056918][ T5293] usb 1-1: USB disconnect, device number 16
[  250.426488][ T5236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.502855][ T8760] loop4: detected capacity change from 0 to 128
[  250.611478][ T8491] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  250.624427][ T8491] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  250.641109][ T8760] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  250.661081][ T8768] loop3: detected capacity change from 0 to 512
[  250.673182][ T8491] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  250.706740][ T8491] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  250.722489][ T8760] ext4 filesystem being mounted at /182/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  250.743347][ T8768] EXT4-fs: Ignoring removed bh option
[  251.008608][ T8784] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  251.024183][ T8768] EXT4-fs error (device loop3): __ext4_iget:4952: inode #15: block 1803188595: comm syz.3.964: invalid block
[  251.046015][ T8491] 8021q: adding VLAN 0 to HW filter on device bond0
[  251.089936][ T8768] EXT4-fs error (device loop3): ext4_orphan_get:1391: comm syz.3.964: couldn't read orphan inode 15 (err -117)
[  251.116922][ T8491] 8021q: adding VLAN 0 to HW filter on device team0
[  251.131090][ T8768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.152848][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.160152][ T5316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  251.195866][ T5227] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  251.258210][ T5316] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.265557][ T5316] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.444731][ T8794] hsr0: entered promiscuous mode
[  251.600606][ T5236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.693677][ T8800] loop2: detected capacity change from 0 to 2048
[  251.765178][ T8800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.945978][   T29] audit: type=1800 audit(1728160463.721:54): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.973" name="bus" dev="loop2" ino=18 res=0 errno=0
[  251.997453][ T8800] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  252.018215][ T8800] EXT4-fs (loop2): Remounting filesystem read-only
[  252.157596][ T5228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.514034][ T8491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.682512][ T5293] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  252.855838][ T5293] usb 5-1: Using ep0 maxpacket: 8
[  252.884497][ T5293] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  252.913256][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  252.956408][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  253.008331][ T5293] usb 5-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46
[  253.028376][ T5293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.066016][ T5293] usb 5-1: Product: syz
[  253.079978][ T5293] usb 5-1: Manufacturer: syz
[  253.080232][ T8814] loop1: detected capacity change from 0 to 40427
[  253.097850][ T5293] usb 5-1: SerialNumber: syz
[  253.124705][ T5293] usb 5-1: config 0 descriptor??
[  253.196893][ T8814] F2FS-fs (loop1): invalid crc value
[  253.206442][ T8814] F2FS-fs (loop1): Found nat_bits in checkpoint
[  253.278022][ T8814] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  253.378826][ T5293] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  253.399651][ T5241] syz-executor: attempt to access beyond end of device
[  253.399651][ T5241] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  253.414316][ T5293] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  253.449387][ T5241] syz-executor: attempt to access beyond end of device
[  253.449387][ T5241] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  253.473823][ T8491] veth0_vlan: entered promiscuous mode
[  253.499609][ T8491] veth1_vlan: entered promiscuous mode
[  253.551131][ T8491] veth0_macvtap: entered promiscuous mode
[  253.571251][ T8491] veth1_macvtap: entered promiscuous mode
[  253.579832][ T5293] radio-si470x 5-1:0.0: software version 0, hardware version 0
[  253.599656][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.621158][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.621970][ T5293] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  253.631487][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.721218][ T5293] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  253.733894][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.759490][   T52] kworker/u8:3: attempt to access beyond end of device
[  253.759490][   T52] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  253.782729][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.802590][   T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  253.803834][ T5293] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[  253.814581][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.850244][   T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  253.857878][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.870158][   T52] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  253.895539][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.922742][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.942431][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.988987][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.996438][ T5293] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[  254.018629][ T5293] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22
[  254.067202][ T5293] usb 5-1: USB disconnect, device number 13
[  254.323412][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.341922][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.364806][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.384971][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.399638][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.411018][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.452801][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.464335][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.477532][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.488068][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.499681][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.559070][   T52] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.573412][ T5295] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  254.619927][ T8491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.650583][ T8491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.687230][ T8491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.720655][ T8491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.775083][ T5295] usb 4-1: Using ep0 maxpacket: 8
[  254.801057][ T5295] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  254.836630][ T5295] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  254.850035][   T52] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.897583][ T5295] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  254.931558][ T5295] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  255.017198][ T5295] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  255.074990][ T5295] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  255.084079][   T52] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.136912][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.146685][ T5316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.166544][ T5296] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  255.184278][ T5316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.295644][   T52] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.365759][ T5296] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  255.407985][ T5296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  255.423242][ T5295] usb 4-1: GET_CAPABILITIES returned 0
[  255.428803][ T5295] usbtmc 4-1:16.0: can't read capabilities
[  255.454933][ T5316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.467059][ T5296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  255.480974][ T5316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.512035][ T5296] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  255.563385][ T5296] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  255.594717][ T5296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.633550][ T5296] usb 1-1: config 0 descriptor??
[  255.744625][ T8909] loop2: detected capacity change from 0 to 512
[  255.787378][ T5293] usb 4-1: USB disconnect, device number 10
[  255.837116][ T8909] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  255.879667][ T8913] loop5: detected capacity change from 0 to 256
[  255.900106][   T52] bridge_slave_1: left allmulticast mode
[  255.922027][ T8909] EXT4-fs (loop2): 1 truncate cleaned up
[  255.959479][   T52] bridge_slave_1: left promiscuous mode
[  255.994001][ T8909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.016678][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.030420][ T8913] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  256.065732][ T5296] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max
[  256.086512][   T52] bridge_slave_0: left allmulticast mode
[  256.095435][   T52] bridge_slave_0: left promiscuous mode
[  256.103518][ T8913] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  256.106055][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.143757][ T5296] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  256.188148][ T5296] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  256.236566][ T8913] Invalid ELF header len 1
[  256.281517][   T29] audit: type=1804 audit(1728160468.021:55): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.884" name="/newroot/0/file2/bus" dev="loop5" ino=1048744 res=1 errno=0
[  256.358426][ T5251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  256.398528][ T5251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  256.407888][ T5251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  256.452213][ T5251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  256.472811][ T5251] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  256.482782][ T5251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  256.535114][ T8921] loop3: detected capacity change from 0 to 128
[  257.100513][ T8902] loop4: detected capacity change from 0 to 32768
[  257.947877][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  258.038349][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  258.106845][   T52] bond0 (unregistering): Released all slaves
[  258.208303][ T8955] loop4: detected capacity change from 0 to 128
[  258.216430][    T9] usb 1-1: USB disconnect, device number 17
[  258.339865][ T5228] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.541257][ T5251] Bluetooth: hci5: command tx timeout
[  258.578400][ T8962] loop5: detected capacity change from 0 to 128
[  258.664404][ T8962] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  258.751471][ T8962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.020544][ T8948] loop3: detected capacity change from 0 to 40427
[  259.076626][ T8948] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  259.092496][ T8948] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  259.126659][ T8948] F2FS-fs (loop3): invalid crc value
[  259.335426][ T8948] F2FS-fs (loop3): Found nat_bits in checkpoint
[  259.617217][ T8948] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  259.630066][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  259.668702][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  259.675206][ T8948] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  259.739527][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  259.878636][   T29] audit: type=1800 audit(1728160471.671:56): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1008" name="file1" dev="loop3" ino=455 res=0 errno=0
[  259.899731][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  259.934465][ T8993] Process accounting resumed
[  259.956230][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  259.968973][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  259.998079][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.005940][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.026448][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.034036][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.071195][ T5316] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  260.117273][   T52] veth1_macvtap: left promiscuous mode
[  260.157048][ T5316] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  260.172480][   T52] veth0_macvtap: left promiscuous mode
[  260.192552][   T52] veth1_vlan: left promiscuous mode
[  260.197867][   T52] veth0_vlan: left promiscuous mode
[  260.231811][ T9001] loop5: detected capacity change from 0 to 64
[  260.366891][ T9001] minix_free_block (loop5:2): bit already cleared
[  260.377193][ T1263] ieee802154 phy0 wpan0: encryption failed: -22
[  260.384272][ T1263] ieee802154 phy1 wpan1: encryption failed: -22
[  260.399172][ T9001] minix_free_block (loop5:3): bit already cleared
[  260.404336][ T5295] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  260.405830][ T9001] minix_free_block (loop5:4): bit already cleared
[  260.478512][ T8948] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[  260.595532][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.625970][ T5251] Bluetooth: hci5: command tx timeout
[  260.641064][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.660898][ T5295] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  260.672716][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.684346][ T5295] usb 1-1: config 0 descriptor??
[  261.108106][ T5295] pyra 0003:1E7D:2CF6.0014: item fetching failed at offset 5/7
[  261.133004][ T5295] pyra 0003:1E7D:2CF6.0014: parse failed
[  261.146476][ T5295] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -22
[  261.329703][ T5295] usb 1-1: USB disconnect, device number 18
[  261.650755][ T9028] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  262.062777][ T5251] Bluetooth: hci2: command tx timeout
[  262.086154][ T9044] trusted_key: syz.0.1031 sent an empty control message without MSG_MORE.
[  262.398789][   T52] team0 (unregistering): Port device team_slave_1 removed
[  262.607574][   T52] team0 (unregistering): Port device team_slave_0 removed
[  262.737581][ T5251] Bluetooth: hci5: command tx timeout
[  262.888067][ T9045] loop5: detected capacity change from 0 to 40427
[  262.985564][ T9045] F2FS-fs (loop5): Found nat_bits in checkpoint
[  263.127406][ T9045] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  263.329736][ T8491] syz-executor: attempt to access beyond end of device
[  263.329736][ T8491] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  263.350768][ T8491] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  263.364228][ T8491] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  264.068308][ T9077] loop5: detected capacity change from 0 to 512
[  264.113263][ T9077] EXT4-fs: Ignoring removed nomblk_io_submit option
[  264.124784][ T8917] chnl_net:caif_netlink_parms(): no params data found
[  264.132905][ T5251] Bluetooth: hci2: command tx timeout
[  264.182523][ T9077] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  264.202481][ T9077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002]
[  264.229417][ T9077] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80)
[  264.239054][ T9077] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features
[  264.249313][ T9077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  264.280389][ T9077] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none.
[  264.391920][ T9086] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80)
[  264.499416][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.506717][   T29] audit: type=1326 audit(1728160476.301:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9082 comm="syz.4.1040" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f522e17dff9 code=0x0
[  264.538657][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.567403][ T8917] bridge_slave_0: entered allmulticast mode
[  264.583405][ T8917] bridge_slave_0: entered promiscuous mode
[  264.598798][ T8491] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.613373][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.642624][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.649917][ T8917] bridge_slave_1: entered allmulticast mode
[  264.791939][ T5251] Bluetooth: hci5: command tx timeout
[  264.814442][ T8917] bridge_slave_1: entered promiscuous mode
[  264.951550][ T8917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  265.051084][ T8917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  265.079752][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  265.090551][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  265.098547][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  265.106908][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  265.114938][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  265.122243][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  265.318842][ T8917] team0: Port device team_slave_0 added
[  265.362172][ T8917] team0: Port device team_slave_1 added
[  265.387995][ T8978] chnl_net:caif_netlink_parms(): no params data found
[  265.532938][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_0
[  265.540113][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.617099][ T8917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  265.759464][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_1
[  265.782831][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  265.832548][ T8917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.985758][ T8917] hsr_slave_0: entered promiscuous mode
[  266.003576][ T8917] hsr_slave_1: entered promiscuous mode
[  266.029833][ T8917] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.037875][ T8917] Cannot create hsr debugfs directory
[  266.214626][ T5239] Bluetooth: hci2: command tx timeout
[  266.270608][ T8978] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.279237][ T8978] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.286528][ T8978] bridge_slave_0: entered allmulticast mode
[  266.293944][ T8978] bridge_slave_0: entered promiscuous mode
[  266.305292][ T8978] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.312586][ T8978] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.320346][ T8978] bridge_slave_1: entered allmulticast mode
[  266.328211][ T8978] bridge_slave_1: entered promiscuous mode
[  266.473536][ T9106] loop4: detected capacity change from 0 to 40427
[  266.502649][ T9135] loop5: detected capacity change from 0 to 128
[  266.526827][ T9106] F2FS-fs (loop4): Found nat_bits in checkpoint
[  266.552257][ T8978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.617234][ T8978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.770912][ T9106] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  266.796450][ T8978] team0: Port device team_slave_0 added
[  266.901167][ T8978] team0: Port device team_slave_1 added
[  266.979834][ T5227] syz-executor: attempt to access beyond end of device
[  266.979834][ T5227] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  266.999427][ T5227] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  267.009348][ T5227] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  267.073110][ T9097] chnl_net:caif_netlink_parms(): no params data found
[  267.109247][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.116566][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.142918][ T8978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.159197][ T8978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.166265][ T8978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.192702][ T8978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.262737][ T5239] Bluetooth: hci4: command tx timeout
[  267.432637][ T8978] hsr_slave_0: entered promiscuous mode
[  267.450245][ T8978] hsr_slave_1: entered promiscuous mode
[  267.469956][ T8978] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  267.526359][ T8978] Cannot create hsr debugfs directory
[  267.657191][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.689265][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.706023][ T9097] bridge_slave_0: entered allmulticast mode
[  267.733178][ T9097] bridge_slave_0: entered promiscuous mode
[  267.750498][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.762577][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.769909][ T9097] bridge_slave_1: entered allmulticast mode
[  267.777310][ T9097] bridge_slave_1: entered promiscuous mode
[  267.972144][ T9097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.066902][ T9097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.285773][ T9097] team0: Port device team_slave_0 added
[  268.292808][ T5239] Bluetooth: hci2: command tx timeout
[  268.393635][ T9097] team0: Port device team_slave_1 added
[  268.407418][ T8917] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  268.559186][ T8917] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  268.636724][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.652869][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.689257][ T9097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.702589][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.709645][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.735728][ T9097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.753155][ T8917] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  268.764081][ T8917] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  268.925162][ T8978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.998818][ T9097] hsr_slave_0: entered promiscuous mode
[  269.013682][ T9097] hsr_slave_1: entered promiscuous mode
[  269.022531][ T9097] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.040319][ T9097] Cannot create hsr debugfs directory
[  269.138166][ T8978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.272163][ T8978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.333394][ T5239] Bluetooth: hci4: command tx timeout
[  269.377676][ T8978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.521686][ T9097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.544931][ T8917] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.597177][ T9097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.620456][ T8917] 8021q: adding VLAN 0 to HW filter on device team0
[  269.633111][ T5316] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.640480][ T5316] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.659825][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.666956][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.706341][ T9097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.773175][ T9097] bond0: (slave netdevsim0): Releasing backup interface
[  269.784892][ T9097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  269.924628][ T8978] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  269.936287][ T8978] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  269.968481][ T8978] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  269.993626][ T8978] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  270.072025][ T9097] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  270.086196][ T9097] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  270.096660][ T9097] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  270.106357][ T9097] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  270.167482][ T8917] 8021q: adding VLAN 0 to HW filter on device batadv0
[  270.286604][ T9097] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.316137][ T8917] veth0_vlan: entered promiscuous mode
[  270.352975][ T9097] 8021q: adding VLAN 0 to HW filter on device team0
[  270.369917][ T8917] veth1_vlan: entered promiscuous mode
[  270.385614][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.392800][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.406699][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.413850][ T5810] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.453552][ T8917] veth0_macvtap: entered promiscuous mode
[  270.471942][ T8978] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.491939][ T8917] veth1_macvtap: entered promiscuous mode
[  270.559825][ T8978] 8021q: adding VLAN 0 to HW filter on device team0
[  270.599717][ T9097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  270.636111][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.652565][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.662798][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.683013][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.708343][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.722601][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.742607][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.764714][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.782703][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  270.802585][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.827396][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.845859][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.857436][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.869171][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.880066][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.901410][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.912713][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.923336][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.935514][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.945408][ T8917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  270.956447][ T8917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  270.968227][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.984887][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.992027][ T5810] bridge0: port 1(bridge_slave_0) entered forwarding state
[  271.016936][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.024090][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.068015][ T8917] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.087320][ T8917] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.102655][ T8917] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.111679][ T8917] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.396371][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.413016][ T5239] Bluetooth: hci4: command tx timeout
[  271.429102][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.501772][ T5320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.533675][ T5320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.606965][ T9097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.744712][ T9192] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  271.831573][ T9097] veth0_vlan: entered promiscuous mode
[  271.888213][ T8978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.939261][ T9097] veth1_vlan: entered promiscuous mode
[  272.033033][ T8978] veth0_vlan: entered promiscuous mode
[  272.121739][ T9097] veth0_macvtap: entered promiscuous mode
[  272.137148][ T9097] veth1_macvtap: entered promiscuous mode
[  272.168945][ T8978] veth1_vlan: entered promiscuous mode
[  272.222984][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.233506][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.243760][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.254712][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.264696][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.275234][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.285635][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.296773][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.306787][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.317375][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.327291][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.337870][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.350364][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.360299][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.370814][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.381278][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.391806][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.401702][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.412189][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.422069][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.432644][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.442908][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.454800][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.464901][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.475426][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.488560][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.499439][ T9097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.508278][ T9097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.517067][ T9097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.525880][ T9097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.531582][ T9203] loop5: detected capacity change from 0 to 40427
[  272.577197][ T9203] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff
[  272.585956][ T9203] F2FS-fs (loop5): Image doesn't support compression
[  272.603871][ T9203] F2FS-fs (loop5): Image doesn't support compression
[  272.628074][ T8978] veth0_macvtap: entered promiscuous mode
[  272.633557][ T9203] F2FS-fs (loop5): invalid crc value
[  272.642823][ T9203] F2FS-fs (loop5): Found nat_bits in checkpoint
[  272.940591][ T9203] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  273.003375][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.011255][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.047373][ T9199] loop1: detected capacity change from 0 to 40427
[  273.109611][ T8978] veth1_macvtap: entered promiscuous mode
[  273.130471][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.138774][ T9215] F2FS-fs (loop5): inject orphan in f2fs_acquire_orphan_inode of f2fs_unlink+0x432/0x8c0
[  273.141041][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.161332][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.171996][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.182067][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.192812][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.202728][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.213277][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.223289][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.233816][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.243754][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.254282][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.264298][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  273.274942][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.286734][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.450018][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.465332][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.493779][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.495041][ T5239] Bluetooth: hci4: command tx timeout
[  273.518705][ T9199] F2FS-fs (loop1): Found nat_bits in checkpoint
[  273.522170][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.544174][ T5316] kworker/u8:7: attempt to access beyond end of device
[  273.544174][ T5316] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  273.583933][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.602455][ T5316] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  273.610422][ T9199] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  273.621966][ T5316] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  273.631917][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.652834][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.654511][ T5320] kworker/u8:8: attempt to access beyond end of device
[  273.654511][ T5320] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  273.678917][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.680116][ T5320] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  273.698290][ T5320] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  273.715116][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.744991][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.755604][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.766627][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.789528][ T8978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.803319][ T8978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.817912][ T8978] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.855873][ T5295] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  273.871209][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.938238][ T8978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.949116][ T5320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.967753][ T8978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.972856][ T5320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.988280][ T8978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.022579][ T8978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.024731][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.062770][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.096860][ T5295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  274.161167][ T5295] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  274.192433][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.218173][ T5295] usb 5-1: config 0 descriptor??
[  274.315892][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.356315][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.531911][ T5320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.582301][ T5320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.670087][ T5295] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  274.693616][ T5295] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving
[  274.721532][ T5295] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  275.481862][ T5320] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.745711][ T5320] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.859528][ T5251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.892843][ T5251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  275.932794][ T5251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  275.967895][ T9257] loop5: detected capacity change from 0 to 4096
[  276.072673][ T5251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  276.133370][ T5251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  276.157709][ T5251] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  276.282770][ T5320] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.352536][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  276.475005][ T9259] loop1: detected capacity change from 0 to 32768
[  276.504637][ T9259] 
[  276.504637][ T9259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  276.504637][ T9259] 
[  276.529551][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.565161][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  276.570817][ T5320] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.582715][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.598915][ T9259] find_entry called with index = 0
[  276.618441][    T9] usb 3-1: Product: syz
[  276.635219][ T9259] read_mapping_page failed!
[  276.640349][    T9] usb 3-1: Manufacturer: syz
[  276.640387][    T9] usb 3-1: SerialNumber: syz
[  276.723341][ T9259] ERROR: (device loop1): txAbort: 
[  276.723341][ T9259] 
[  276.775535][ T9263] jfs_readdir: bad index table
[  276.826412][ T5339] usb 5-1: USB disconnect, device number 14
[  277.044925][   T52] read_mapping_page failed!
[  277.050808][   T52] ERROR: (device loop1): txAbort: 
[  277.050808][   T52] 
[  277.058774][   T52] jfs_write_inode: jfs_commit_inode failed!
[  277.073726][ T8917] 
[  277.073726][ T8917]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  277.073726][ T8917] 
[  277.106002][ T5320] bridge_slave_1: left allmulticast mode
[  277.111712][ T5320] bridge_slave_1: left promiscuous mode
[  277.122576][ T8917] 
[  277.122576][ T8917]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  277.122576][ T8917] 
[  277.133046][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.164771][ T5320] bridge_slave_0: left allmulticast mode
[  277.175262][ T5320] bridge_slave_0: left promiscuous mode
[  277.181386][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.212714][ T5292] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  277.225307][ T5339] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  277.372250][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.392636][ T5339] usb 5-1: Using ep0 maxpacket: 16
[  277.402577][ T5292] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.406325][ T5339] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  277.440782][ T5292] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00
[  277.442424][ T5339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.452487][ T5292] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.485360][ T5292] usb 1-1: config 0 descriptor??
[  277.500185][ T5339] usb 5-1: Product: syz
[  277.522649][ T5339] usb 5-1: Manufacturer: syz
[  277.527301][ T5339] usb 5-1: SerialNumber: syz
[  277.555665][ T5339] usb 5-1: config 0 descriptor??
[  277.585286][ T5339] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  277.747709][ T5292] usbhid 1-1:0.0: can't add hid device: -71
[  277.753991][ T5292] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  277.764947][ T5292] usb 1-1: USB disconnect, device number 19
[  277.776102][ T5293] psmouse serio3: Failed to reset mouse on : -5
[  277.778892][ T9283] loop1: detected capacity change from 0 to 4096
[  277.789186][    T9] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  277.795872][    T9] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  277.803688][    T9] cdc_ncm 3-1:1.0: setting rx_max = 2048
[  277.806580][ T9283] ntfs3: loop1: Primary boot: unsupported bytes per index 8192.
[  277.835594][ T9283] ntfs3: loop1: try to read out of volume at offset 0x1ffe00
[  277.990139][    T9] cdc_ncm 3-1:1.0: setting tx_max = 60
[  278.220244][ T5251] Bluetooth: hci4: command tx timeout
[  278.288705][ T5320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.312569][ T5320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.327272][ T5320] bond0 (unregistering): Released all slaves
[  278.369353][ T9254] chnl_net:caif_netlink_parms(): no params data found
[  278.376745][    T9] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  278.430687][    T9] usb 3-1: USB disconnect, device number 17
[  278.449236][    T9] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  278.792891][ T5339] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71
[  278.818538][ T5339] usb 5-1: USB disconnect, device number 15
[  278.846733][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.854172][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.861732][ T9254] bridge_slave_0: entered allmulticast mode
[  278.873049][ T9254] bridge_slave_0: entered promiscuous mode
[  278.888087][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.911929][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.932972][ T9254] bridge_slave_1: entered allmulticast mode
[  278.943944][ T9254] bridge_slave_1: entered promiscuous mode
[  279.045047][ T5320] hsr_slave_0: left promiscuous mode
[  279.070454][ T5320] hsr_slave_1: left promiscuous mode
[  279.083943][ T5320] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.098480][ T5320] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.106652][ T5320] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.114210][ T5320] batman_adv: batadv0: Removing interface: batadv_slave_1
[  279.143122][ T5320] veth1_macvtap: left promiscuous mode
[  279.148779][ T5320] veth0_macvtap: left promiscuous mode
[  279.154763][ T5320] veth1_vlan: left promiscuous mode
[  279.160179][ T5320] veth0_vlan: left promiscuous mode
[  279.360100][ T9297] loop2: detected capacity change from 0 to 32768
[  279.380924][ T9297] XFS: ikeep mount option is deprecated.
[  279.514203][ T9297] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  279.667433][ T9297] XFS (loop2): Ending clean mount
[  279.684828][ T9297] XFS (loop2): Quotacheck needed: Please wait.
[  279.777388][ T9297] XFS (loop2): Quotacheck: Done.
[  279.834367][   T29] audit: type=1800 audit(1728160491.631:58): pid=9297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1106" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  280.013123][ T8978] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  280.296857][ T5251] Bluetooth: hci4: command tx timeout
[  280.625395][ T5320] team0 (unregistering): Port device team_slave_1 removed
[  280.756635][ T5320] team0 (unregistering): Port device team_slave_0 removed
[  280.942610][ T5292] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  281.094223][ T5292] usb 3-1: Using ep0 maxpacket: 16
[  281.102610][ T5292] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  281.110986][ T5292] usb 3-1: config 0 has no interface number 0
[  281.120399][ T5292] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  281.134695][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.152445][ T5292] usb 3-1: Product: syz
[  281.156881][ T5292] usb 3-1: Manufacturer: syz
[  281.163719][ T5292] usb 3-1: SerialNumber: syz
[  281.175499][ T5292] usb 3-1: config 0 descriptor??
[  281.191291][ T5292] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  281.554325][ T9254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  281.602500][  T931] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  281.609439][ T9254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  281.632468][ T5293] misc userio: Buffer overflowed, userio client isn't keeping up
[  281.759370][ T9254] team0: Port device team_slave_0 added
[  281.772544][  T931] usb 1-1: Using ep0 maxpacket: 8
[  281.782005][  T931] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff
[  281.806023][  T931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.829034][  T931] usb 1-1: config 0 descriptor??
[  281.830870][ T9254] team0: Port device team_slave_1 added
[  281.843681][  T931] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  281.932709][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.939923][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.014069][ T9254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  282.045406][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  282.062524][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.086421][  T931] usb 1-1: USB disconnect, device number 20
[  282.152718][ T9254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  282.171493][ T9338] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  282.301524][ T9254] hsr_slave_0: entered promiscuous mode
[  282.324336][ T9254] hsr_slave_1: entered promiscuous mode
[  282.330943][ T9254] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  282.351582][ T9254] Cannot create hsr debugfs directory
[  282.373123][ T5251] Bluetooth: hci4: command tx timeout
[  282.415362][ T5292] gspca_spca1528: reg_w err -71
[  282.420507][ T5292] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  282.442662][ T5292] usb 3-1: USB disconnect, device number 18
[  282.542583][ T5297] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  282.716787][ T5297] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  282.723757][ T5293] input: PS/2 Generic Mouse as /devices/serio3/input/input21
[  282.741090][ T5297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.776556][ T5297] usb 5-1: config 0 descriptor??
[  282.982505][ T5293] psmouse serio3: Failed to enable mouse on 
[  283.264488][ T5297] usb 5-1: Cannot set MAC address
[  283.269957][ T5297] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  283.348172][ T5297] usb 5-1: USB disconnect, device number 16
[  283.513851][ T9254] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  283.568842][ T9254] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  283.598115][ T9254] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  283.653465][ T9254] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  283.894638][ T9254] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.946897][ T9254] 8021q: adding VLAN 0 to HW filter on device team0
[  283.954252][ T9365] block nbd2: NBD_DISCONNECT
[  283.973145][ T9364] block nbd2: Disconnected due to user request.
[  283.995260][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.002483][ T5320] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.019359][ T9364] block nbd2: shutting down sockets
[  284.118991][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.126266][ T5320] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.453344][ T5251] Bluetooth: hci4: command tx timeout
[  284.731502][ T9254] 8021q: adding VLAN 0 to HW filter on device batadv0
[  284.888675][ T9392] loop2: detected capacity change from 0 to 256
[  284.938186][ T9254] veth0_vlan: entered promiscuous mode
[  284.990850][ T9254] veth1_vlan: entered promiscuous mode
[  284.999301][ T9392] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  285.026197][ T9392] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  285.082551][ T5295] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  285.107524][ T9254] veth0_macvtap: entered promiscuous mode
[  285.126468][   T29] audit: type=1804 audit(1728160496.921:59): pid=9392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1142" name="/newroot/11/file2/bus" dev="loop2" ino=1048764 res=1 errno=0
[  285.175162][ T9254] veth1_macvtap: entered promiscuous mode
[  285.183117][ T9392] Invalid ELF header len 1
[  285.230958][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.266364][ T5295] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.279900][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.293782][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.305191][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.315735][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.327403][ T5295] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  285.342479][ T5295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.361312][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.372213][ T5295] usb 1-1: Product: syz
[  285.377939][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.392440][ T5295] usb 1-1: Manufacturer: syz
[  285.397149][ T5295] usb 1-1: SerialNumber: syz
[  285.401978][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.414133][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.426096][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.438272][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.450993][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.461191][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.472017][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.504819][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.536774][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.598219][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.642629][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.682445][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.702401][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.731323][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.747726][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.762401][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.772321][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.798879][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.817146][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.840293][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.852405][ T9254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  285.882578][ T9254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.913342][ T9254] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.943645][ T9254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.952898][ T9254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.974501][ T9254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.012475][ T9254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.261818][ T5316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.290889][ T5316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.375533][ T5320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.396891][ T5320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.483465][ T5295] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  286.490069][ T5295] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  286.518209][ T5295] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  286.534717][ T5296] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  286.636997][ T9400] loop4: detected capacity change from 0 to 40427
[  286.649367][ T9400] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  286.661643][ T9400] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  286.712652][ T5295] cdc_ncm 1-1:1.0: setting tx_max = 60
[  286.723730][ T9400] F2FS-fs (loop4): invalid crc value
[  286.732555][ T5296] usb 6-1: Using ep0 maxpacket: 16
[  286.741371][ T5296] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  286.741459][ T5295] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  286.761196][ T5296] usb 6-1: config 0 has no interface number 0
[  286.767913][ T5296] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  286.778339][ T5296] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  286.779259][ T5295] usb 1-1: USB disconnect, device number 21
[  286.796941][ T5295] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  286.820169][ T5296] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  286.829525][ T5296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.838488][ T5296] usb 6-1: Product: syz
[  286.843092][ T5296] usb 6-1: Manufacturer: syz
[  286.847854][ T5296] usb 6-1: SerialNumber: syz
[  286.856550][ T9400] F2FS-fs (loop4): Found nat_bits in checkpoint
[  286.878578][ T5296] usb 6-1: config 0 descriptor??
[  286.896506][ T9407] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  286.914366][ T9407] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  286.957820][ T5295] ------------[ cut here ]------------
[  286.963839][ T5295] ODEBUG: free active (active state 0) object: ffff88807a8e51a0 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xe90
[  286.978358][ T5295] WARNING: CPU: 1 PID: 5295 at lib/debugobjects.c:514 debug_print_object+0x1a3/0x2b0
[  286.988551][ T5295] Modules linked in:
[  286.993077][ T5295] CPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0
[  287.003963][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  287.014227][ T5295] Workqueue: usb_hub_wq hub_event
[  287.019424][ T5295] RIP: 0010:debug_print_object+0x1a3/0x2b0
[  287.025489][ T5295] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 80 a4 d1 8b 41 56 4c 89 e6 48 c7 c7 e0 97 d1 8b e8 ae bd bb fc 90 <0f> 0b 90 90 58 83 05 dd db cc 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
[  287.045231][ T5295] RSP: 0018:ffffc9000475f458 EFLAGS: 00010282
[  287.051348][ T5295] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90017d37000
[  287.059422][ T5295] RDX: 0000000000100000 RSI: ffffffff814e71b6 RDI: 0000000000000001
[  287.067497][ T5295] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  287.075723][ T5295] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bd19e80
[  287.083898][ T5295] R13: ffffffff8b6be880 R14: ffffffff86bb1f00 R15: ffffc9000475f568
[  287.092440][ T5295] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  287.102287][ T5295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  287.109410][ T5295] CR2: 000000002005b000 CR3: 0000000028d04000 CR4: 0000000000350ef0
[  287.117498][ T5295] Call Trace:
[  287.120818][ T5295]  <TASK>
[  287.123878][ T5295]  ? __warn+0xea/0x3d0
[  287.128020][ T5295]  ? preempt_schedule_notrace+0x62/0xe0
[  287.133690][ T5295]  ? debug_print_object+0x1a3/0x2b0
[  287.138964][ T5295]  ? report_bug+0x3c0/0x580
[  287.143634][ T5295]  ? handle_bug+0x54/0xa0
[  287.148038][ T5295]  ? exc_invalid_op+0x17/0x50
[  287.152852][ T5295]  ? asm_exc_invalid_op+0x1a/0x20
[  287.157950][ T5295]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  287.163991][ T5295]  ? __warn_printk+0x1a6/0x350
[  287.168838][ T5295]  ? debug_print_object+0x1a3/0x2b0
[  287.174431][ T5295]  ? debug_print_object+0x1a2/0x2b0
[  287.179698][ T5295]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  287.185725][ T5295]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  287.192099][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.198311][ T5295]  debug_check_no_obj_freed+0x4b8/0x600
[  287.204048][ T5295]  ? __pfx_mark_lock+0x10/0x10
[  287.208933][ T5295]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  287.215118][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.220852][ T5295]  kfree+0x2b3/0x4b0
[  287.224932][ T5295]  ? rcu_is_watching+0x12/0xc0
[  287.229758][ T5295]  ? kvfree+0x47/0x50
[  287.233891][ T5295]  kvfree+0x47/0x50
[  287.237755][ T5295]  ? __pfx_netdev_release+0x10/0x10
[  287.243213][ T5295]  device_release+0xa4/0x240
[  287.247871][ T5295]  kobject_put+0x1e7/0x5a0
[  287.252348][ T5295]  put_device+0x1f/0x30
[  287.257080][ T5295]  free_netdev+0x4b7/0x670
[  287.261586][ T5295]  usbnet_disconnect+0x25c/0x500
[  287.266654][ T5295]  usb_unbind_interface+0x1eb/0x970
[  287.271929][ T5295]  ? kernfs_find_ns+0x2ee/0x3f0
[  287.276920][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.282690][ T5295]  ? __pfx_usb_unbind_interface+0x10/0x10
[  287.288486][ T5295]  device_remove+0x125/0x170
[  287.293681][ T5295]  device_release_driver_internal+0x44a/0x610
[  287.299834][ T5295]  bus_remove_device+0x22f/0x420
[  287.305428][ T5295]  device_del+0x396/0x9f0
[  287.309838][ T5295]  ? __pfx_device_del+0x10/0x10
[  287.314809][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.320513][ T5295]  ? kobject_put+0x210/0x5a0
[  287.325278][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.330989][ T5295]  usb_disable_device+0x36c/0x7f0
[  287.336612][ T5295]  usb_disconnect+0x2e1/0x920
[  287.341377][ T5295]  hub_event+0x1da5/0x4e10
[  287.345957][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.351671][ T5295]  ? lock_acquire+0x2f/0xb0
[  287.356305][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.362018][ T5295]  ? __pfx_hub_event+0x10/0x10
[  287.366943][ T5295]  ? __entry_text_end+0xfdfc5/0x1020c9
[  287.372524][ T5295]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  287.378216][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.383978][ T5295]  ? rcu_is_watching+0x12/0xc0
[  287.388798][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.395022][ T5295]  ? trace_lock_acquire+0x14a/0x1d0
[  287.400298][ T5295]  ? process_one_work+0x921/0x1ba0
[  287.406215][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.411911][ T5295]  ? lock_acquire+0x2f/0xb0
[  287.416784][ T5295]  ? process_one_work+0x921/0x1ba0
[  287.422127][ T5295]  process_one_work+0x9c8/0x1ba0
[  287.427180][ T5295]  ? __pfx_hub_event+0x10/0x10
[  287.432007][ T5295]  ? __pfx_process_one_work+0x10/0x10
[  287.437486][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.443249][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.448967][ T5295]  ? assign_work+0x1a0/0x250
[  287.453719][ T5295]  worker_thread+0x6c8/0xf00
[  287.458383][ T5295]  ? __pfx_worker_thread+0x10/0x10
[  287.463591][ T5295]  kthread+0x2c4/0x3a0
[  287.467722][ T5295]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.473027][ T5295]  ? __pfx_kthread+0x10/0x10
[  287.477679][ T5295]  ret_from_fork+0x48/0x80
[  287.482145][ T5295]  ? __pfx_kthread+0x10/0x10
[  287.486881][ T5295]  ret_from_fork_asm+0x1a/0x30
[  287.491730][ T5295]  </TASK>
[  287.495441][ T5295] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  287.502752][ T5295] CPU: 1 UID: 0 PID: 5295 Comm: kworker/1:4 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0
[  287.513567][ T5295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  287.523659][ T5295] Workqueue: usb_hub_wq hub_event
[  287.528744][ T5295] Call Trace:
[  287.532040][ T5295]  <TASK>
[  287.534996][ T5295]  dump_stack_lvl+0x3d/0x1f0
[  287.539653][ T5295]  panic+0x71d/0x800
[  287.543599][ T5295]  ? __pfx_panic+0x10/0x10
[  287.548091][ T5295]  ? show_trace_log_lvl+0x29d/0x3d0
[  287.553351][ T5295]  ? debug_print_object+0x1a3/0x2b0
[  287.558600][ T5295]  check_panic_on_warn+0xab/0xb0
[  287.563599][ T5295]  __warn+0xf6/0x3d0
[  287.567558][ T5295]  ? preempt_schedule_notrace+0x62/0xe0
[  287.573506][ T5295]  ? debug_print_object+0x1a3/0x2b0
[  287.578755][ T5295]  report_bug+0x3c0/0x580
[  287.583159][ T5295]  handle_bug+0x54/0xa0
[  287.587369][ T5295]  exc_invalid_op+0x17/0x50
[  287.592027][ T5295]  asm_exc_invalid_op+0x1a/0x20
[  287.597012][ T5295] RIP: 0010:debug_print_object+0x1a3/0x2b0
[  287.602894][ T5295] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 80 a4 d1 8b 41 56 4c 89 e6 48 c7 c7 e0 97 d1 8b e8 ae bd bb fc 90 <0f> 0b 90 90 58 83 05 dd db cc 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d
[  287.622539][ T5295] RSP: 0018:ffffc9000475f458 EFLAGS: 00010282
[  287.628659][ T5295] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffc90017d37000
[  287.636669][ T5295] RDX: 0000000000100000 RSI: ffffffff814e71b6 RDI: 0000000000000001
[  287.644671][ T5295] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[  287.652685][ T5295] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bd19e80
[  287.660707][ T5295] R13: ffffffff8b6be880 R14: ffffffff86bb1f00 R15: ffffc9000475f568
[  287.668711][ T5295]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  287.674678][ T5295]  ? __warn_printk+0x1a6/0x350
[  287.679503][ T5295]  ? debug_print_object+0x1a2/0x2b0
[  287.684748][ T5295]  ? __pfx_usbnet_deferred_kevent+0x10/0x10
[  287.690706][ T5295]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  287.696561][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.702532][ T5295]  debug_check_no_obj_freed+0x4b8/0x600
[  287.708120][ T5295]  ? __pfx_mark_lock+0x10/0x10
[  287.712941][ T5295]  ? __pfx_debug_check_no_obj_freed+0x10/0x10
[  287.719070][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.724782][ T5295]  kfree+0x2b3/0x4b0
[  287.728736][ T5295]  ? rcu_is_watching+0x12/0xc0
[  287.733549][ T5295]  ? kvfree+0x47/0x50
[  287.737564][ T5295]  kvfree+0x47/0x50
[  287.741419][ T5295]  ? __pfx_netdev_release+0x10/0x10
[  287.746662][ T5295]  device_release+0xa4/0x240
[  287.751315][ T5295]  kobject_put+0x1e7/0x5a0
[  287.755775][ T5295]  put_device+0x1f/0x30
[  287.759988][ T5295]  free_netdev+0x4b7/0x670
[  287.764461][ T5295]  usbnet_disconnect+0x25c/0x500
[  287.769480][ T5295]  usb_unbind_interface+0x1eb/0x970
[  287.774738][ T5295]  ? kernfs_find_ns+0x2ee/0x3f0
[  287.779636][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.785324][ T5295]  ? __pfx_usb_unbind_interface+0x10/0x10
[  287.791100][ T5295]  device_remove+0x125/0x170
[  287.795739][ T5295]  device_release_driver_internal+0x44a/0x610
[  287.801877][ T5295]  bus_remove_device+0x22f/0x420
[  287.806881][ T5295]  device_del+0x396/0x9f0
[  287.811270][ T5295]  ? __pfx_device_del+0x10/0x10
[  287.816172][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.821883][ T5295]  ? kobject_put+0x210/0x5a0
[  287.826526][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.832232][ T5295]  usb_disable_device+0x36c/0x7f0
[  287.837316][ T5295]  usb_disconnect+0x2e1/0x920
[  287.842058][ T5295]  hub_event+0x1da5/0x4e10
[  287.846555][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.852251][ T5295]  ? lock_acquire+0x2f/0xb0
[  287.856810][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.862504][ T5295]  ? __pfx_hub_event+0x10/0x10
[  287.867313][ T5295]  ? __entry_text_end+0xfdfc5/0x1020c9
[  287.872844][ T5295]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  287.878518][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.884214][ T5295]  ? rcu_is_watching+0x12/0xc0
[  287.889037][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.894730][ T5295]  ? trace_lock_acquire+0x14a/0x1d0
[  287.899984][ T5295]  ? process_one_work+0x921/0x1ba0
[  287.905137][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.910834][ T5295]  ? lock_acquire+0x2f/0xb0
[  287.915384][ T5295]  ? process_one_work+0x921/0x1ba0
[  287.920542][ T5295]  process_one_work+0x9c8/0x1ba0
[  287.925539][ T5295]  ? __pfx_hub_event+0x10/0x10
[  287.930354][ T5295]  ? __pfx_process_one_work+0x10/0x10
[  287.935760][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.941467][ T5295]  ? srso_alias_return_thunk+0x5/0xfbef5
[  287.947170][ T5295]  ? assign_work+0x1a0/0x250
[  287.951841][ T5295]  worker_thread+0x6c8/0xf00
[  287.956484][ T5295]  ? __pfx_worker_thread+0x10/0x10
[  287.961639][ T5295]  kthread+0x2c4/0x3a0
[  287.965762][ T5295]  ? _raw_spin_unlock_irq+0x23/0x50
[  287.971008][ T5295]  ? __pfx_kthread+0x10/0x10
[  287.975650][ T5295]  ret_from_fork+0x48/0x80
[  287.980109][ T5295]  ? __pfx_kthread+0x10/0x10
[  287.984744][ T5295]  ret_from_fork_asm+0x1a/0x30
[  287.989596][ T5295]  </TASK>
[  287.992901][ T5295] Kernel Offset: disabled
[  287.997292][ T5295] Rebooting in 86400 seconds..