last executing test programs:

4m33.860316517s ago: executing program 2 (id=723):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004049}, 0x0)

4m33.858639139s ago: executing program 2 (id=725):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000540)=0x9, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0)

4m33.813922344s ago: executing program 2 (id=726):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r2, 0xfffffffffffffffe, 0x29)

4m33.813682807s ago: executing program 2 (id=727):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

4m33.636489283s ago: executing program 2 (id=732):
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setreuid(0xee01, 0x0)
setresuid(0x0, 0x0, 0x0)

4m32.774116312s ago: executing program 2 (id=743):
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

4m32.653704021s ago: executing program 32 (id=743):
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

4m32.183572595s ago: executing program 1 (id=750):
r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x7)

4m32.133908807s ago: executing program 1 (id=751):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x0, 0xb48c3d785668e54c, 0x0, {0x9, 0x21, 0xfff7, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="402196"], 0x0, 0x0, 0x0, 0x0}, 0x0)

4m30.420368824s ago: executing program 1 (id=752):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020)

4m30.333708749s ago: executing program 1 (id=753):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000002340)='./file0\x00', 0x1010052, &(0x7f0000000240)={[{}, {@discard}, {@errors_remount_ro}, {@errors_remount_ro}, {@nobarrier}, {@order_strict}, {@errors_continue}, {@order_relaxed}], [], 0x2c}, 0x2, 0xebd, &(0x7f0000004540)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFSlUqBfVSpMRV7PfWu8+e7npsz9q7v5/07ds3b3a+b7yRMzOefRuAkdVYfTx5cr4I4d1P33n05aeK315fdld7jSOrj0XstUIIzY5+kW3v87jg6pWXzmzWFuH46mPqh8cut187HUJYDkfCZ6EVPlpc+vLD9x45+vHrU7e8dfGZV3Zp99vy/QAAgGF06c9Lf7/vn396YO6rS4dPh8n28nR83or96XjcfyweKKfj5Ubo7hcd0WkiW28sRiNbbyxbbzzLM16Sr5ltp1my3kSPfGMdyzbbTwAAANiP0nltKxSNha5+o7GwsHbef93nsxPFwnPnl85dGFChAAAAQGX/eXX1plshhBBCCCGEEEIMcazMDvoKBAAAADBq8vnCNlje2Zm62ltr9Zf/8sONzV8PO6Duf//y76/8H7zmNw4AANUN69Fk2q90HJ3mMcjnERzLXrfV4/9Gtp3xLdZZNq/gfplvsKzO/Oe6V5XVv9X3cVDK6s/nw9yryurP5+ncq8rqn6y5jqrK6p+quY6qyuo/UHMdVZXVf7DmOqoqq3+65jqqKqt/puY6qiqr/4aa66iqrP5DNddRVVn9++W22rL6WzXXUVVZ/XM111FVWf031lxHVWX131RzHVWV1X9zzXUMyp2xTT+Hw9l45/lzfk63X87xAAAAYNT91/x/QgghhBBCCCHE0Merg74AAQAAAAxc+lxA+tT7SpTGx3qMj/cYb/YYn+gxPtljHAAAAAjhd2+cu+3tYv1z/tudDy/NG5XmX9rqPEb5fIRbzb/dec+2m3+/zFsGAADAaCm+99m1+x99/4W5ry4dPt1x9nstnu+meUDH47WBT2I/3Rcwk/WLdA59ujtPo2S9/PrADWXbe3ybOwoAAAAjLJ2/t0LRWOg4726FRmNhYf18fD40i3Pnl84ei/30/Sx/nG1OXl/+UM11AwAAAP1bP9/f/Pw/fY/vfJgoFp47v3Tuwlp/pr282ei8LjC7vrzovC7QypYfL1l+IvbT93f+YPbA6vKFMz9cemqndx4AAABGxIUXLz7z5NLS2R954oknnrSfDPo3EwAAsNO++OKd5o9PzPx+7fP/6/Pfpc//H4n9Vpzb7y9xhXSfQPocwIbP6z/RnWe2bL3nu9drZeuNxZjM6p7q2E7omG8wvW6uLF+rezsTJfmms3wzWb58noLxbP2U71C2PJ+fMK03my3P52Ecz3IUWf67AwAAAJRbfOHZ5xcvvHjxwfPPPvn02afPPnfi+Knvnjp17KHvPLS4el//Yufd/QAAAMB+tH7T76ArAQAAAAAAAAAAAAAAAAAAgNFVx9eJDXofAQAAYNT9+9UQwrIQoiTWvgJz8HUIIYQQQvSOsT1QgxBiz8bKSv5N8wAAAAC76+qVl850thssFzuar7211lpzLeZN7cyDf5u7Hmm1yw93Xy85uKPVMOrq/vcv//7K/8FrO5t/Kj3p+/dfo3sDp6vlvXfxl/Od+W8f7zN/vv+PV8t/NMt/b+gv/8r7Wf4nquW/L8t/sM/8G/b/+Wr574/552P/6D395u9+/ydjm/bjQJ/5v53t/1Oh3/zZ/rf6TJh5IOYHgFHUGHQBuyQdJaTj6OnYT/sbDzdDfvfDVo//G9l2xrddefd203HQrbGfjpdmsrzJVuufzrZ3Q8U6c/vlrpKy+nfqfdxtZfU3a66jqrL6J2quo6qy+idrrqOqsvqnaq6jqrL6+z0PHbSy+vfLdeWy+qdrrqOqsvpnaq6jqrL6t/r/+KCU1X+o5jqqKqt/tuY6qiqrv+JltdqV1T9Xcx1VldV/Y811VFVW/00111FVWf0311zHoNwR27Lz4XT+ORvHUr+V9Sc3+VkO67UFAAAA2G/+Zf4/IYQQQgghhBBi6GNlZdBXIBik3f00MwB7ld//o837P9q8/6PN+8//k+7hL7J+MtZjfLzHeLPH+EQ2nv97newxflO23ZUojd/cY/xrPcYP9Ri/tcf4fI/x23qM395j/I4e4wAAAIyGW2Lr/BAAAACG18u/+uTN39z7xJW5ry4dPh0mNsw7fyz2J+Pf1t+I/Xze+6QZ/+b/k9j/RWz/ENt/ZOu7/wQAAAB2X/qeGH//BwAAgOGVvqfU+T8AAAAMr7nYOv8HAACA4XVjbJ3/AwAAwBArpjZfHNt0XeDu2PY7rx8AsPd9PbZ3xvZwbO+K7Tdim44D7ontN2uqDwDYOT///k9PvV2sz/d/Ihu/GpendoPltSsFRaN7Jv8DsT0Y22/1WU/+fQD95k8O9Zlnt/LPbjM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8GquPJ0/OFyG8++k7j/5s4s2/Xl92V3uNI6uPRey1QgjN9uvS6Hr/13HFq1deOtPZXottEY6HIhTt5eGxy+1M0yGE5XAkfBZa4aPFpS8/fO+Rox+/PnXLWxefeWUXfwRd+wcAAADD6H8BAAD//8WNHkw=")
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)

4m30.174897447s ago: executing program 1 (id=754):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="02000000020001000003be8c5ee1768810003c08030300ec", 0x18)

4m29.013553637s ago: executing program 1 (id=764):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2)

4m28.877642535s ago: executing program 33 (id=764):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2)

4m17.782292093s ago: executing program 4 (id=852):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x268, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x224, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x188, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x64, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xf0, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0xbd, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea927bcdffe4d3ec14fb6fca0407429934982873a3f054bcbf1e53f85fe7aee4ccd90229e6ba2b45bd165ebd7929c21abcdf0b8d47ff6a950009bf4b1ef96863b19aaa1c52a12b02f39c0816b2c6136341ed251c3b6f6af9385e3d242e39802d1054758f1fecd4810c086a3ef4c0b3354522333a981535fdda66a4dc5f04533ed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x7c, 0x1, [@m_ctinfo={0x78, 0x19, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fffffff}, @TCA_CTINFO_ZONE={0x6}]}, {0x39, 0x6, "c04874b4806554224c1d607fce4f3c46819b0f84ba8654e87574ed1da66e458671a5cb17969c51d284950d06a20474f6efcb232d91"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x268}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

4m17.542777753s ago: executing program 4 (id=853):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0c0001"], 0x24}}, 0x0)

4m17.363094721s ago: executing program 4 (id=855):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="cbaa0900f100000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

4m17.292846846s ago: executing program 4 (id=857):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)

4m17.048612013s ago: executing program 4 (id=861):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setreuid(0xee01, 0xee01)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f00000011c0)=[{{&(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x1, 0x4008000)
close(0x3)

4m16.403932697s ago: executing program 4 (id=865):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x211}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

4m16.26610071s ago: executing program 34 (id=865):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x211}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1d"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1m26.712726884s ago: executing program 3 (id=2669):
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0)
read$FUSE(r0, &(0x7f00000083c0)={0x2020}, 0x2020)
read$hidraw(r0, &(0x7f0000000000)=""/60, 0x3c)

1m26.712489375s ago: executing program 3 (id=2670):
mkdir(&(0x7f00000009c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)={0x10000011})
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
write$P9_RVERSION(r1, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13)

1m26.599815968s ago: executing program 3 (id=2671):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0)

1m25.614939004s ago: executing program 3 (id=2674):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0)

1m25.533251112s ago: executing program 3 (id=2675):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009058202"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

1m25.281415818s ago: executing program 3 (id=2676):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5, 0xc9, 0x1}}}, 0x7)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

1m25.190468517s ago: executing program 35 (id=2676):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5, 0xc9, 0x1}}}, 0x7)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

38.321124637s ago: executing program 0 (id=3240):
chdir(&(0x7f0000000540)='./cgroup\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
lseek(r0, 0x7fffdfff, 0x2)
getdents64(r0, 0x0, 0x0)

38.320867081s ago: executing program 0 (id=3241):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700736f757465000000140004800800014000000000080002"], 0x94}}, 0x0)

38.256491848s ago: executing program 0 (id=3243):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x280840, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

37.351557819s ago: executing program 0 (id=3257):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
move_mount(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x100)

37.181142221s ago: executing program 0 (id=3258):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

36.989490706s ago: executing program 0 (id=3259):
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x2)

36.710985763s ago: executing program 36 (id=3259):
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x2)

3.318530429s ago: executing program 6 (id=3626):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4, 0x12}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.209912214s ago: executing program 6 (id=3627):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_connect(0x4, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x3d, 0xcf, 0x82, 0x40, 0x67b, 0x2507, 0x3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0xf3, 0xe, 0xe0, 0x2, [{{0x9, 0x4, 0x24, 0x3, 0x0, 0xac, 0xee, 0x38, 0x4}}, {{0x9, 0x4, 0x9f, 0xc, 0x0, 0x7, 0xf1, 0x69}}]}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000140)=ANY=[])

1.182707229s ago: executing program 7 (id=3653):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r0, 0x0, 0x4}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r1, 0x0, 0x4}, 0x18)
r2 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0xfffffff8}, &(0x7f00000007c0)=<r3=>0x0, &(0x7f0000000800)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000022})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1.082393173s ago: executing program 7 (id=3654):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x2c020400)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0)

391.838178ms ago: executing program 5 (id=3655):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

342.843143ms ago: executing program 5 (id=3656):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

229.259613ms ago: executing program 7 (id=3657):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891b, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x0, @private=0xa010101}})

229.091434ms ago: executing program 5 (id=3658):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
sync()
unlink(&(0x7f00000001c0)='./file0\x00')

228.925527ms ago: executing program 7 (id=3659):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0006"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

151.66799ms ago: executing program 6 (id=3660):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0xa}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x8040)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

151.398296ms ago: executing program 7 (id=3661):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0)

70.998398ms ago: executing program 7 (id=3662):
r0 = socket(0x2a, 0x2, 0x0)
ioctl$SIOCSIFMTU(r0, 0x541b, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {0x0}, {0x0}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0})
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4)
r5 = syz_open_procfs(0x0, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000040))
getdents64(r6, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

70.811279ms ago: executing program 5 (id=3663):
sched_setscheduler(0x0, 0x5, &(0x7f0000000100))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0xfe)

70.246606ms ago: executing program 6 (id=3664):
r0 = socket$isdn(0x22, 0x2, 0x10)
r1 = socket$isdn(0x22, 0x2, 0x2)
r2 = dup3(r1, r0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0)

668.822µs ago: executing program 5 (id=3665):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x4e}}, &(0x7f0000000480)='GPL\x00'}, 0x80)

403.164µs ago: executing program 6 (id=3666):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4ea4, 0x2, @remote, 0xfffffffd}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xc805, 0x4)

168.628µs ago: executing program 5 (id=3667):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='L', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="c8", 0x1}], 0x1, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0x4000c50)

0s ago: executing program 6 (id=3668):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000002740)={'mpc624\x00', [0x4f27, 0x8, 0x2, 0x3, 0x5, 0xcc5, 0xf, 0x6, 0xa, 0xe8aa, 0x2, 0x1, 0xffffbffd, 0x1, 0x0, 0x1, 0x0, 0x1a449, 0x3ff, 0x40000003, 0x200099, 0xcaa7, 0x0, 0x20001e57, 0x7, 0xe6b, 0x1003c, 0xd0, 0x2, 0x1, 0xfce]})

kernel console output (not intermixed with test programs):

writing register 01: -71
[  280.569691][ T5897] sonixb 6-1:0.0: probe with driver sonixb failed with error -71
[  280.578585][ T5897] usb 6-1: USB disconnect, device number 22
[  280.764856][T12178] loop0: detected capacity change from 0 to 128
[  282.289441][T12209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  282.400677][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2396'.
[  282.502560][T12217] loop0: detected capacity change from 0 to 4096
[  282.506832][T12217] EXT4-fs (loop0): Test dummy encryption mode enabled
[  282.511546][T12217] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  282.514855][T12217] System zones: 0-5
[  282.522381][T12217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.560113][T12217] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  282.603873][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.645419][T12231] loop3: detected capacity change from 0 to 1024
[  282.742346][T12243] macvtap0: entered allmulticast mode
[  282.744922][T12243] veth0_macvtap: entered allmulticast mode
[  282.914308][T12254] netlink: 'syz.0.2415': attribute type 1 has an invalid length.
[  282.988442][T12256] loop0: detected capacity change from 0 to 4096
[  282.992635][T12256] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  283.005047][T12256] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  283.008698][T12256] ntfs3(loop0): ino=19, mi_enum_attr
[  283.016976][T12256] ntfs3(loop0): failed to convert "c46c" to macceltic
[  283.022093][T12256] ntfs3(loop0): ino=20, mi_enum_attr
[  283.773055][T12276] loop3: detected capacity change from 0 to 4096
[  283.776806][T12276] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  283.794059][T12276] ntfs3(loop3): $AttrDef is corrupted.
[  283.986043][T12284] loop3: detected capacity change from 0 to 4096
[  284.009468][T12284] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  284.013684][T12286] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.025337][T12284] NILFS (loop3): mounting fs with errors
[  284.208243][T12297] loop0: detected capacity change from 0 to 1024
[  284.225944][T12297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.230108][T12297] ext4 filesystem being mounted at /903/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.251740][T12297] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  284.259441][T12297] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  284.263769][T12297] EXT4-fs (loop0): This should not happen!! Data will be lost
[  284.263769][T12297] 
[  284.266875][T12297] EXT4-fs (loop0): Total free blocks count 0
[  284.268895][T12297] EXT4-fs (loop0): Free/Dirty block details
[  284.271221][T12297] EXT4-fs (loop0): free_blocks=4293918720
[  284.273329][T12297] EXT4-fs (loop0): dirty_blocks=16
[  284.275212][T12297] EXT4-fs (loop0): Block reservation details
[  284.277642][T12297] EXT4-fs (loop0): i_reserved_data_blocks=1
[  284.324879][T12297] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.2435: lblock 1 mapped to illegal pblock 1 (length 15)
[  284.335399][T12297] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  284.472371][T12316] loop0: detected capacity change from 0 to 256
[  284.475962][T12316] vfat: Deprecated parameter 'posix'
[  284.478011][T12316] FAT-fs: "posix" option is obsolete, not supported now
[  284.835855][ T5897] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  285.070111][ T5897] usb 1-1: Using ep0 maxpacket: 32
[  285.076641][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.081863][ T5897] usb 1-1: config 1 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  285.087391][ T5897] usb 1-1: config 1 interface 0 has no altsetting 0
[  285.093708][ T5897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  285.097772][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.101232][ T5897] usb 1-1: Product: syz
[  285.103263][ T5897] usb 1-1: Manufacturer: 톲폻稀뢇
[  285.105918][ T5897] usb 1-1: SerialNumber: syz
[  285.322852][ T5897] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  285.330254][ T5897] usb 1-1: USB disconnect, device number 25
[  285.856316][T12354] ALSA: mixer_oss: invalid OSS volume 'file1'
[  286.060445][   T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  286.129920][ T5897] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  286.209982][   T10] usb 6-1: Using ep0 maxpacket: 32
[  286.214072][   T10] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[  286.217558][   T10] usb 6-1: config 0 has no interface number 0
[  286.220363][   T10] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  286.224534][   T10] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  286.228745][   T10] usb 6-1: config 0 interface 126 has no altsetting 0
[  286.234635][   T10] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  286.238486][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.241900][   T10] usb 6-1: Product: syz
[  286.243705][   T10] usb 6-1: Manufacturer: syz
[  286.245597][   T10] usb 6-1: SerialNumber: syz
[  286.249630][   T10] usb 6-1: config 0 descriptor??
[  286.252775][T12352] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  286.255898][T12352] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  286.281742][ T5897] usb 1-1: Using ep0 maxpacket: 8
[  286.285289][ T5897] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  286.288101][ T5897] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  286.291584][ T5897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  286.295114][ T5897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  286.299200][ T5897] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.305102][ T5897] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  286.308548][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.311216][ T2397] pvrusb2: request_firmware fatal error with code=-110
[  286.314762][ T2397] pvrusb2: Failure uploading firmware1
[  286.317283][ T2397] pvrusb2: Device initialization was not successful.
[  286.321459][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  286.325464][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  286.329400][ T5314] pvrusb2: Device being rendered inoperable
[  286.339590][ T5847] udevd[5847]: failed to send result of seq 13953 to main daemon: Connection refused
[  286.529189][ T5897] usb 1-1: usb_control_msg returned -32
[  286.533472][ T5897] usbtmc 1-1:16.0: can't read capabilities
[  286.662440][ T5314] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  286.667532][   T10] ir_usb 6-1:0.126: IR Dongle converter detected
[  286.839985][ T5314] usb 4-1: Using ep0 maxpacket: 32
[  286.858481][ T5314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  286.878632][   T10] usb 6-1: IR Dongle converter now attached to ttyUSB0
[  286.883086][ T5314] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  286.888747][ T5314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.893053][ T5314] usb 4-1: Product: syz
[  286.894913][ T5314] usb 4-1: Manufacturer: syz
[  286.896926][ T5314] usb 4-1: SerialNumber: syz
[  286.901447][ T5314] usb 4-1: config 0 descriptor??
[  287.075580][ T7584] usb 6-1: USB disconnect, device number 23
[  287.085973][ T7584] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  287.089642][ T7584] ir_usb 6-1:0.126: device disconnected
[  287.108335][ T5897] usb 4-1: USB disconnect, device number 7
[  287.676638][T12363] loop3: detected capacity change from 0 to 4096
[  287.698888][T12363] ntfs3(loop3): ino=5, "/" indx_read
[  287.702693][T12363] ntfs3(loop3): ino=5, "/" ntfs_readdir
[  287.969962][ T5897] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  288.120006][ T5897] usb 4-1: Using ep0 maxpacket: 8
[  288.124383][ T5897] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.128935][ T5897] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  288.133230][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.139090][ T5897] usb 4-1: config 0 descriptor??
[  288.148235][ T5897] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22
[  288.352261][ T5897] usb 4-1: USB disconnect, device number 8
[  288.905732][ T5897] usb 1-1: USB disconnect, device number 26
[  289.016540][T12401] usb usb8: usbfs: process 12401 (syz.3.2482) did not claim interface 0 before use
[  289.318612][T12412] loop0: detected capacity change from 0 to 32768
[  289.375171][T12429] netlink: 'syz.3.2493': attribute type 1 has an invalid length.
[  289.379096][T12429] netlink: 'syz.3.2493': attribute type 1 has an invalid length.
[  289.410131][T12412] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  289.410147][T12412]   allowing incompatible features above 0.0: (unknown version)
[  289.410152][T12412]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  289.426785][T12412] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  289.429460][T12412] bcachefs (loop0): initializing new filesystem
[  289.436562][T12412] bcachefs (loop0): going read-write
[  289.444828][T12412] bcachefs (loop0): marking superblocks
[  289.450222][T12412] bcachefs (loop0): initializing freespace
[  289.455155][T12412] bcachefs (loop0): done initializing freespace
[  289.458408][T12412] bcachefs (loop0): reading snapshots table
[  289.461718][T12412] bcachefs (loop0): reading snapshots done
[  289.506618][T12412] bcachefs (loop0): done starting filesystem
[  289.890376][ T8850] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  290.022692][ T5844] bcachefs (loop0): shutting down
[  290.025009][ T5844] bcachefs (loop0): going read-only
[  290.027413][ T5844] bcachefs (loop0): finished waiting for writes to stop
[  290.032023][ T5844] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  290.044823][ T8850] usb 6-1: Using ep0 maxpacket: 32
[  290.050569][ T8850] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[  290.057877][ T8850] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  290.063139][ T8850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.065861][ T8850] usb 6-1: Product: syz
[  290.067257][ T8850] usb 6-1: Manufacturer: syz
[  290.068833][ T8850] usb 6-1: SerialNumber: syz
[  290.071715][ T5844] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  290.072489][ T8850] usb 6-1: config 0 descriptor??
[  290.077649][ T5844] bcachefs (loop0): clean shutdown complete, journal seq 5
[  290.077976][T12437] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  290.080627][ T5844] bcachefs (loop0): marking filesystem clean
[  290.090568][ T8850] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  290.095426][ T5844] bcachefs (loop0): shutdown complete
[  290.306936][ T8850] usb 6-1: USB disconnect, device number 24
[  290.809545][T12462] loop3: detected capacity change from 0 to 16
[  290.819160][T12462] erofs (device loop3): mounted with root inode @ nid 36.
[  290.832631][T12462] erofs (device loop3): readahead error at folio 6 @ nid 36
[  290.837314][T12462] erofs (device loop3): readahead error at folio 4 @ nid 36
[  290.844350][T12462] erofs (device loop3): invalid logical cluster 0 at nid 36
[  290.847624][T12462] erofs (device loop3): readahead error at folio 0 @ nid 36
[  290.852708][T12462] syz.3.2505: attempt to access beyond end of device
[  290.852708][T12462] loop3: rw=524288, sector=296, nr_sectors = 16 limit=16
[  290.858942][T12462] syz.3.2505: attempt to access beyond end of device
[  290.858942][T12462] loop3: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  290.861819][T12464] can0: slcan on ptm0.
[  290.870391][T12462] syz.3.2505: attempt to access beyond end of device
[  290.870391][T12462] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16
[  290.877297][T12462] syz.3.2505: attempt to access beyond end of device
[  290.877297][T12462] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16
[  290.885045][T12462] erofs (device loop3): invalid logical cluster 0 at nid 36
[  290.889006][T12462] syz.3.2505: attempt to access beyond end of device
[  290.889006][T12462] loop3: rw=0, sector=296, nr_sectors = 8 limit=16
[  290.893403][T12462] erofs (device loop3): read error -5 @ 0 of nid 36
[  290.895725][T12462] erofs (device loop3): failed to readdir of logical block 0 of nid 36
[  290.951344][T12463] can0 (unregistered): slcan off ptm0.
[  291.108038][T12474] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  291.111318][T12474] overlayfs: failed to set xattr on upper
[  291.114895][T12474] overlayfs: ...falling back to index=off.
[  291.115290][T12478] loop3: detected capacity change from 0 to 1024
[  291.117180][T12474] overlayfs: ...falling back to uuid=null.
[  291.148619][T12478] hfsplus: request for non-existent node 134217728 in B*Tree
[  291.152183][T12478] hfsplus: request for non-existent node 134217728 in B*Tree
[  291.422745][T12490] usb usb9: usbfs: process 12490 (syz.5.2517) did not claim interface 0 before use
[  291.984225][T12497] loop0: detected capacity change from 0 to 128
[  292.123945][T12503] input: syz1 as /devices/virtual/input/input15
[  292.247773][T12511] IPv6: NLM_F_CREATE should be specified when creating new route
[  292.443638][T12509] loop3: detected capacity change from 0 to 32768
[  292.447210][T12509] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2526 (12509)
[  292.456484][T12509] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  292.460503][T12509] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  292.463916][T12509] BTRFS info (device loop3): using free-space-tree
[  292.485400][T12524] loop0: detected capacity change from 0 to 4096
[  292.565282][ T7818] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  292.843357][T12542] loop3: detected capacity change from 0 to 40427
[  292.846330][T12542] F2FS-fs: quotafile must be on filesystem root
[  292.937284][   T26] ntfs3(loop0): ino=5, mi_enum_attr
[  293.034382][T12554] loop0: detected capacity change from 0 to 1024
[  293.275208][T12553] loop3: detected capacity change from 0 to 32768
[  293.279520][T12553] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2539 (12553)
[  293.322604][T12553] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  293.327695][T12553] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  293.333772][T12553] BTRFS info (device loop3): using free-space-tree
[  293.350596][   T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  293.704201][T12553] BTRFS info (device loop3): rebuilding free space tree
[  293.773945][ T7818] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  293.828191][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.832795][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.838524][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  293.844400][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  293.848346][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.884712][   T10] usb 1-1: config 0 descriptor??
[  294.309009][   T10] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  294.410624][T12591] loop3: detected capacity change from 0 to 1024
[  294.690135][ T8850] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  294.800294][T12595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2551'.
[  294.899988][ T8850] usb 6-1: Using ep0 maxpacket: 8
[  294.932605][ T8850] usb 6-1: unable to get BOS descriptor or descriptor too short
[  294.954436][ T8850] usb 6-1: config 5 has an invalid interface number: 215 but max is 0
[  294.968717][    C1] plantronics 0003:047F:FFFF.000E: hid_field_extract() called with n (132) > 32! (syz.3.2551)
[  294.994717][ T8850] usb 6-1: config 5 has no interface number 0
[  294.997352][ T8850] usb 6-1: config 5 interface 215 has no altsetting 0
[  295.002568][ T8850] usb 6-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[  295.006256][ T8850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.009469][ T8850] usb 6-1: Product: syz
[  295.011340][ T8850] usb 6-1: Manufacturer: syz
[  295.013263][ T8850] usb 6-1: SerialNumber: syz
[  295.170960][ T5314] usb 1-1: USB disconnect, device number 27
[  295.225755][ T8850] cypress_m8 6-1:5.215: DeLorme Earthmate USB converter detected
[  295.234615][ T8850] usb 6-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[  295.242167][ T8850] usb 6-1: USB disconnect, device number 25
[  295.247627][ T8850] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[  295.251734][ T8850] cypress_m8 6-1:5.215: device disconnected
[  295.658330][T12604] ubi31: detaching mtd0
[  295.666552][T12604] ubi31: mtd0 is detached
[  295.914262][T12626] loop0: detected capacity change from 0 to 64
[  295.930172][T12626] Bad inode number on dev loop0: 6 is out of range
[  295.996775][T12632] loop0: detected capacity change from 0 to 2048
[  296.017041][T12632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  296.310048][ T8850] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  296.339988][ T5897] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  296.466143][ T8850] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  296.469569][ T8850] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.476096][ T8850] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  296.479513][ T8850] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  296.483171][ T8850] usb 6-1: Manufacturer: syz
[  296.487034][ T8850] usb 6-1: config 0 descriptor??
[  296.489997][ T5897] usb 1-1: Using ep0 maxpacket: 16
[  296.493590][ T8850] igorplugusb 6-1:0.0: incorrect number of endpoints
[  296.498405][ T5897] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  296.503938][ T5897] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  296.507845][ T5897] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  296.513932][ T5897] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  296.517471][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.521404][ T5897] usb 1-1: Product: syz
[  296.523046][ T5897] usb 1-1: Manufacturer: syz
[  296.524886][ T5897] usb 1-1: SerialNumber: syz
[  296.695515][ T5314] usb 6-1: USB disconnect, device number 26
[  296.759366][ T5897] usb 1-1: USB disconnect, device number 28
[  296.836041][T12642] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.681868][T12660] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2580'.
[  298.521974][T12675] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2585'.
[  298.525397][T12675] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.2585'.
[  299.113974][T12679] loop0: detected capacity change from 0 to 512
[  299.130786][T12679] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  299.133623][T12679] System zones: 1-12
[  299.135911][T12679] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2588: corrupted in-inode xattr: e_value size too large
[  299.141514][T12679] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2588: couldn't read orphan inode 15 (err -117)
[  299.147245][T12679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.163920][T12679] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2588: corrupted in-inode xattr: e_value size too large
[  299.285959][T12689] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.2588: corrupted in-inode xattr: e_value size too large
[  300.270639][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.789911][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  301.669854][   T10] usb 4-1: Using ep0 maxpacket: 32
[  301.674199][   T10] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  301.678841][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.686778][   T10] usb 4-1: config 0 descriptor??
[  301.695470][   T10] gspca_main: sunplus-2.14.0 probing 041e:400b
[  302.147859][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2611'.
[  302.757549][   T10] gspca_sunplus: reg_r err -71
[  302.769632][   T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  302.774282][   T10] usb 4-1: USB disconnect, device number 9
[  303.545748][T12778] loop3: detected capacity change from 0 to 512
[  303.548793][T12778] EXT4-fs: Ignoring removed bh option
[  303.562093][T12778] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  303.882985][T12778] EXT4-fs (loop3): 1 truncate cleaned up
[  303.886967][T12778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.363192][T12784] input: syz1 as /devices/virtual/input/input16
[  304.423468][ T7818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.738258][T12794] loop3: detected capacity change from 0 to 32768
[  304.757647][T12794] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  304.784738][T12794] XFS (loop3): Ending clean mount
[  304.791426][T12794] XFS (loop3): Quotacheck needed: Please wait.
[  304.907293][T12794] XFS (loop3): Quotacheck: Done.
[  304.974364][ T7818] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  305.502000][T12829] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  305.806766][  T794] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  305.961559][  T794] usb 4-1: config 1 has an invalid interface number: 146 but max is 0
[  305.964487][  T794] usb 4-1: config 1 has no interface number 0
[  305.971858][  T794] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb
[  305.977265][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.983890][  T794] usb 4-1: Product: syz
[  305.988148][  T794] usb 4-1: Manufacturer: syz
[  305.990936][  T794] usb 4-1: SerialNumber: syz
[  305.997741][  T794] usbserial_generic 4-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  306.005442][  T794] usbserial_generic 4-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  306.009762][  T794] usbserial_generic 4-1:1.146: generic converter detected
[  306.014156][  T794] usb 4-1: generic converter now attached to ttyUSB0
[  306.021965][T12846] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2654'.
[  306.201635][  T794] usb 4-1: USB disconnect, device number 10
[  306.212936][  T794] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  306.221480][  T794] usbserial_generic 4-1:1.146: device disconnected
[  306.576829][T12863] cgroup: Name too long
[  306.920941][T12879] loop3: detected capacity change from 0 to 8
[  306.923983][T12879] squashfs image failed sanity check
[  306.950049][ T8850] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  307.107164][ T8850] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  307.111977][ T8850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.118031][ T8850] usb 6-1: config 0 descriptor??
[  307.124684][ T8850] cp210x 6-1:0.0: cp210x converter detected
[  307.652818][ T8850] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  307.662911][ T8850] usb 6-1: cp210x converter now attached to ttyUSB0
[  307.765506][T12891] loop0: detected capacity change from 0 to 40427
[  307.773405][T12891] F2FS-fs (loop0): invalid crc value
[  307.815742][T12891] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  307.822269][T12891] F2FS-fs (loop0): Start checkpoint disabled!
[  307.829283][T12891] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  307.861861][   T10] usb 6-1: USB disconnect, device number 27
[  307.867098][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  307.871726][   T10] cp210x 6-1:0.0: device disconnected
[  307.874621][ T3579] kworker/u10:5: attempt to access beyond end of device
[  307.874621][ T3579] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  307.882434][ T3579] CPU: 0 UID: 0 PID: 3579 Comm: kworker/u10:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  307.882451][ T3579] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  307.882459][ T3579] Workqueue: writeback wb_workfn (flush-7:0)
[  307.882500][ T3579] Call Trace:
[  307.882505][ T3579]  <TASK>
[  307.882510][ T3579]  dump_stack_lvl+0x189/0x250
[  307.882528][ T3579]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.882540][ T3579]  ? __pfx_queue_work_on+0x10/0x10
[  307.882551][ T3579]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  307.882564][ T3579]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  307.882584][ T3579]  f2fs_handle_critical_error+0x37c/0x540
[  307.882603][ T3579]  f2fs_write_end_io+0x886/0xb60
[  307.882631][ T3579]  __submit_merged_bio+0x27a/0x6a0
[  307.882649][ T3579]  __submit_merged_write_cond+0x255/0x530
[  307.882666][ T3579]  f2fs_write_data_pages+0x261d/0x3000
[  307.882705][ T3579]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  307.882728][ T3579]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  307.882765][ T3579]  ? __lock_acquire+0xab9/0xd20
[  307.882802][ T3579]  ? bpf_trace_run4+0x322/0x4a0
[  307.882828][ T3579]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  307.882842][ T3579]  do_writepages+0x32e/0x550
[  307.882860][ T3579]  ? reacquire_held_locks+0x127/0x1d0
[  307.882870][ T3579]  ? writeback_sb_inodes+0x384/0x1010
[  307.882889][ T3579]  __writeback_single_inode+0x145/0xff0
[  307.882901][ T3579]  ? do_raw_spin_unlock+0x4d/0x240
[  307.882923][ T3579]  writeback_sb_inodes+0x6c7/0x1010
[  307.882934][ T3579]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.882966][ T3579]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  307.883036][ T3579]  ? rcu_is_watching+0x15/0xb0
[  307.883056][ T3579]  wb_writeback+0x43b/0xaf0
[  307.883075][ T3579]  ? queue_io+0x301/0x590
[  307.883089][ T3579]  ? __pfx_wb_writeback+0x10/0x10
[  307.883108][ T3579]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.883123][ T3579]  wb_workfn+0x409/0xef0
[  307.883146][ T3579]  ? __pfx_wb_workfn+0x10/0x10
[  307.883160][ T3579]  ? __lock_acquire+0xab9/0xd20
[  307.883182][ T3579]  ? process_scheduled_works+0x9ef/0x17b0
[  307.883197][ T3579]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.883206][ T3579]  ? process_scheduled_works+0x9ef/0x17b0
[  307.883215][ T3579]  ? process_scheduled_works+0x9ef/0x17b0
[  307.883226][ T3579]  process_scheduled_works+0xae1/0x17b0
[  307.883258][ T3579]  ? __pfx_process_scheduled_works+0x10/0x10
[  307.883282][ T3579]  worker_thread+0x8a0/0xda0
[  307.883295][ T3579]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  307.883312][ T3579]  ? __kthread_parkme+0x7b/0x200
[  307.883331][ T3579]  kthread+0x711/0x8a0
[  307.883346][ T3579]  ? __pfx_worker_thread+0x10/0x10
[  307.883356][ T3579]  ? __pfx_kthread+0x10/0x10
[  307.883369][ T3579]  ? _raw_spin_unlock_irq+0x23/0x50
[  307.883379][ T3579]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.883388][ T3579]  ? __pfx_kthread+0x10/0x10
[  307.883401][ T3579]  ret_from_fork+0x3fc/0x770
[  307.883414][ T3579]  ? __pfx_ret_from_fork+0x10/0x10
[  307.883429][ T3579]  ? __switch_to_asm+0x39/0x70
[  307.883440][ T3579]  ? __switch_to_asm+0x33/0x70
[  307.883450][ T3579]  ? __pfx_kthread+0x10/0x10
[  307.883463][ T3579]  ret_from_fork_asm+0x1a/0x30
[  307.883487][ T3579]  </TASK>
[  307.883954][ T3579] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  308.465790][ T5875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.471543][ T5875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.586961][ T5875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.593176][ T5875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.677434][ T5875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.684900][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  308.692695][ T5875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.692788][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  308.701238][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  308.704768][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  308.709524][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  308.779525][ T5875] bond0: (slave netdevsim0): Releasing backup interface
[  308.784882][   T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  308.797160][ T5875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.803095][ T5875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.912872][T12907] chnl_net:caif_netlink_parms(): no params data found
[  308.940400][   T10] usb 6-1: Using ep0 maxpacket: 8
[  308.951927][   T10] usb 6-1: config 0 has an invalid interface number: 200 but max is 0
[  308.956562][   T10] usb 6-1: config 0 has no interface number 0
[  308.959213][   T10] usb 6-1: config 0 interface 200 has no altsetting 0
[  308.971095][   T10] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  308.975301][ T5875] bridge0: port 3(team0) entered disabled state
[  308.978684][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.982605][   T10] usb 6-1: Product: syz
[  308.985384][   T10] usb 6-1: Manufacturer: syz
[  308.987664][   T10] usb 6-1: SerialNumber: syz
[  308.998197][ T5875] bridge_slave_1: left allmulticast mode
[  309.002150][ T5875] bridge_slave_1: left promiscuous mode
[  309.005412][   T10] usb 6-1: config 0 descriptor??
[  309.009885][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.017912][ T5875] bridge_slave_0: left allmulticast mode
[  309.022161][ T5875] bridge_slave_0: left promiscuous mode
[  309.024751][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.233980][   T10] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.200/input/input17
[  309.248406][   T10] usb 6-1: USB disconnect, device number 28
[  309.450869][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.455233][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.459068][ T5875] bond0 (unregistering): Released all slaves
[  309.466354][ T5875] bond1 (unregistering): Released all slaves
[  309.557587][ T5875] tipc: Disabling bearer <eth:batadv0>
[  309.571429][ T5875] tipc: Left network mode
[  309.572482][T12907] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.581125][T12907] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.584222][T12907] bridge_slave_0: entered allmulticast mode
[  309.587356][T12907] bridge_slave_0: entered promiscuous mode
[  309.606078][ T5875] IPVS: stopping backup sync thread 8128 ...
[  309.613081][T12907] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.615565][T12907] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.618092][T12907] bridge_slave_1: entered allmulticast mode
[  309.621324][T12907] bridge_slave_1: entered promiscuous mode
[  309.675167][T12907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.683293][T12907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.739742][T12907] team0: Port device team_slave_0 added
[  309.743592][T12907] team0: Port device team_slave_1 added
[  309.780050][T12907] batman_adv: batadv0: Adding interface: batadv_slave_0
[  309.782689][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.792428][T12907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  309.824488][ T5875] hsr_slave_0: left promiscuous mode
[  309.826862][ T5875] hsr_slave_1: left promiscuous mode
[  309.829295][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.833821][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.837548][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.841179][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.871192][ T5875] veth1_macvtap: left promiscuous mode
[  309.873581][ T5875] veth0_macvtap: left promiscuous mode
[  309.875930][ T5875] veth1_vlan: left promiscuous mode
[  309.878082][ T5875] veth0_vlan: left promiscuous mode
[  310.373270][ T5875] team_slave_1 (unregistering): left promiscuous mode
[  310.376095][ T5875] team_slave_1 (unregistering): left allmulticast mode
[  310.379628][ T5875] team0 (unregistering): Port device team_slave_1 removed
[  310.419442][ T5875] team_slave_0 (unregistering): left promiscuous mode
[  310.424369][ T5875] team_slave_0 (unregistering): left allmulticast mode
[  310.428293][ T5875] team0 (unregistering): Port device team_slave_0 removed
[  310.785717][ T5846] Bluetooth: hci1: command tx timeout
[  310.895891][T12907] batman_adv: batadv0: Adding interface: batadv_slave_1
[  310.898833][T12907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.909568][ T5897] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  310.912752][T12907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.008329][T12907] hsr_slave_0: entered promiscuous mode
[  311.011710][T12907] hsr_slave_1: entered promiscuous mode
[  311.015042][T12907] debugfs: 'hsr0' already exists in 'hsr'
[  311.017670][T12907] Cannot create hsr debugfs directory
[  311.092962][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  311.097283][ T5897] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  311.111788][ T5897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  311.138760][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  311.145262][ T5897] usb 1-1: SerialNumber: syz
[  311.154441][ T5897] usb 1-1: bad CDC descriptors
[  311.157014][ T5897] usb-storage 1-1:1.0: USB Mass Storage device detected
[  311.201167][ T5897] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  311.368026][   T24] usb 1-1: USB disconnect, device number 29
[  311.421496][T12907] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  311.429248][T12907] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  311.440755][T12907] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  311.446793][T12907] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  311.824468][ T5875] IPVS: stop unused estimator thread 0...
[  311.836089][T12907] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.857681][T12907] 8021q: adding VLAN 0 to HW filter on device team0
[  311.868317][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.870771][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  311.882042][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state
[  311.885160][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state
[  312.052449][T12907] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.253453][T12907] veth0_vlan: entered promiscuous mode
[  312.273825][T12907] veth1_vlan: entered promiscuous mode
[  312.299596][T12907] veth0_macvtap: entered promiscuous mode
[  312.304786][T12907] veth1_macvtap: entered promiscuous mode
[  312.316366][T12907] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.323877][T12907] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.330262][  T794] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  312.340424][ T7933] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.343328][ T7933] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.346311][ T7933] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.384006][ T7933] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  312.439664][  T717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.444091][  T717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.464837][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  312.468291][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  312.526305][  T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.535861][  T794] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.539601][  T794] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  312.550105][  T794] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[  312.552125][T12982] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2677'.
[  312.553741][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.566513][  T794] usb 1-1: config 0 descriptor??
[  312.860066][ T5846] Bluetooth: hci1: command tx timeout
[  312.980124][  T794] sony 0003:12BA:0100.000F: item fetching failed at offset 5/7
[  312.983647][  T794] sony 0003:12BA:0100.000F: parse failed
[  312.988040][  T794] sony 0003:12BA:0100.000F: probe with driver sony failed with error -22
[  313.189012][T13019] loop6: detected capacity change from 0 to 128
[  313.189367][   T24] usb 1-1: USB disconnect, device number 30
[  313.203934][T13019] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  313.213732][T13019] qnx6: wrong signature (magic) in superblock #1.
[  313.216301][T13019] qnx6: unable to read the first superblock
[  313.450499][T13033] loop6: detected capacity change from 0 to 4096
[  313.454233][T13033] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  313.562132][T13035] loop6: detected capacity change from 0 to 128
[  313.567950][T13035] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  313.574340][T13035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  313.797838][T13042] loop0: detected capacity change from 0 to 256
[  314.214201][T13040] loop6: detected capacity change from 0 to 1024
[  314.217521][T13040] hfsplus: Unknown parameter '000000000000000000000000xffffffffffffffff'
[  314.255788][T13047] loop0: detected capacity change from 0 to 4096
[  314.260292][T13047] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  314.447059][T13055] loop0: detected capacity change from 0 to 1024
[  314.453240][T13055] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  314.468065][T13055] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  314.474818][T13055] EXT4-fs (loop0): orphan cleanup on readonly fs
[  314.478052][T13055] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.2732: Freeing blocks not in datazone - block = 0, count = 4096
[  314.488801][T13055] EXT4-fs (loop0): 1 orphan inode deleted
[  314.495890][T13055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  314.517376][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.589443][   T33] kauditd_printk_skb: 107 callbacks suppressed
[  314.589458][   T33] audit: type=1326 audit(1755132550.261:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.5.2736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e698ebe9 code=0x7ffc0000
[  314.602950][   T33] audit: type=1326 audit(1755132550.281:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.5.2736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e698ebe9 code=0x7ffc0000
[  314.620201][   T33] audit: type=1326 audit(1755132550.281:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.5.2736" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f26e698d69f code=0x7ffc0000
[  314.627474][   T33] audit: type=1326 audit(1755132550.281:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.5.2736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e698ebe9 code=0x7ffc0000
[  314.637829][   T33] audit: type=1326 audit(1755132550.281:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.5.2736" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e698ebe9 code=0x7ffc0000
[  314.667737][T13072] ip_vti0: Master is either lo or non-ether device
[  314.753169][T13082] loop0: detected capacity change from 0 to 1024
[  314.759468][T13082] EXT4-fs: Ignoring removed bh option
[  314.780095][T13082] EXT4-fs: inline encryption not supported
[  314.782720][T13082] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  314.789628][T13082] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  314.791655][T13087] netlink: 'syz.5.2747': attribute type 32 has an invalid length.
[  314.802328][T13082] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2745: lblock 2 mapped to illegal pblock 2 (length 1)
[  314.807906][T13082] Quota error (device loop0): qtree_write_dquot: dquota write failed
[  314.811516][T13082] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2745: lblock 0 mapped to illegal pblock 48 (length 1)
[  314.816258][T13082] Quota error (device loop0): v2_write_file_info: Can't write info structure
[  314.819678][T13082] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2745: Failed to acquire dquot type 0
[  314.825919][T13082] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  314.835491][T13082] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2745: mark_inode_dirty error
[  314.839361][T13082] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  314.849892][T13082] EXT4-fs (loop0): 1 orphan inode deleted
[  314.852615][T13082] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.864081][  T717] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  314.875512][  T717] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  314.878994][  T717] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u9:3: Failed to release dquot type 0
[  314.889161][T13082] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  314.909605][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.940121][ T5846] Bluetooth: hci1: command tx timeout
[  315.360691][   T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  315.510010][   T24] usb 1-1: Using ep0 maxpacket: 8
[  315.517348][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  315.523457][   T24] usb 1-1: config 250 has an invalid interface number: 4 but max is 0
[  315.527360][   T24] usb 1-1: config 250 has no interface number 0
[  315.531066][   T24] usb 1-1: config 250 interface 4 altsetting 43 endpoint 0x6 has invalid wMaxPacketSize 0
[  315.535490][   T24] usb 1-1: config 250 interface 4 has no altsetting 0
[  315.542075][   T24] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=1b.8a
[  315.546204][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.550429][   T24] usb 1-1: Product: syz
[  315.552388][   T24] usb 1-1: Manufacturer: syz
[  315.554534][   T24] usb 1-1: SerialNumber: syz
[  315.775290][   T24] powermate 1-1:250.4: probe with driver powermate failed with error -5
[  315.782753][   T24] usb 1-1: USB disconnect, device number 31
[  316.259901][   T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  316.413734][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  316.418584][   T24] usb 6-1: config 129 has an invalid interface number: 135 but max is 0
[  316.422734][   T24] usb 6-1: config 129 has an invalid interface number: 5 but max is 0
[  316.426583][   T24] usb 6-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[  316.432404][   T24] usb 6-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  316.436260][   T24] usb 6-1: config 129 has no interface number 0
[  316.438879][   T24] usb 6-1: config 129 has no interface number 1
[  316.442903][   T24] usb 6-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  316.449274][   T24] usb 6-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  316.455540][   T24] usb 6-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  316.461279][   T24] usb 6-1: config 129 interface 135 has no altsetting 0
[  316.464190][   T24] usb 6-1: config 129 interface 5 has no altsetting 0
[  316.469388][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  316.475463][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.505504][   T24] usb 6-1: Product: syz
[  316.507515][   T24] usb 6-1: Manufacturer: syz
[  316.509534][   T24] usb 6-1: SerialNumber: syz
[  316.613123][T13126] tracefs: Unknown parameter 'huge'
[  316.736789][   T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  316.742032][   T24] usb 6-1: MIDIStreaming interface descriptor not found
[  316.769302][   T24] usb 6-1: USB disconnect, device number 29
[  317.023610][ T5846] Bluetooth: hci1: command tx timeout
[  317.024154][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.029649][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.600005][    T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  317.754629][    T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  317.758557][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.763157][    T9] usb 1-1: Product: syz
[  317.764964][    T9] usb 1-1: Manufacturer: syz
[  317.766966][    T9] usb 1-1: SerialNumber: syz
[  317.782366][    T9] usb 1-1: config 0 descriptor??
[  317.792917][    T9] gspca_main: sunplus-2.14.0 probing 055f:c230
[  318.225376][T13174] loop6: detected capacity change from 0 to 164
[  318.598423][    T9] gspca_sunplus: reg_r err -71
[  318.609992][    T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  318.615149][    T9] usb 1-1: USB disconnect, device number 32
[  318.735829][T13191] tmpfs: Bad value for 'mpol'
[  318.897169][T13199] syzkaller1: entered promiscuous mode
[  318.899532][T13199] syzkaller1: entered allmulticast mode
[  318.994832][T13203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2796'.
[  318.999024][T13203] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2796'.
[  319.809541][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2810'.
[  319.948957][T13238] loop6: detected capacity change from 0 to 512
[  320.006144][T13238] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.2811: Parent and EA inode have the same ino 15
[  320.016815][T13238] EXT4-fs (loop6): Remounting filesystem read-only
[  320.141848][T13238] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  320.146386][T13238] EXT4-fs (loop6): 1 orphan inode deleted
[  320.150924][T13238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  320.183335][T12907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.242517][T13252] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2817'.
[  320.374690][T13262] netlink: zone id is out of range
[  320.376755][T13262] netlink: zone id is out of range
[  320.378669][T13262] netlink: zone id is out of range
[  320.382525][T13262] netlink: zone id is out of range
[  320.384517][T13262] netlink: zone id is out of range
[  320.386439][T13262] netlink: zone id is out of range
[  320.388230][T13262] netlink: zone id is out of range
[  320.393326][T13262] netlink: zone id is out of range
[  320.395236][T13262] netlink: zone id is out of range
[  320.396990][T13262] netlink: zone id is out of range
[  320.426371][T13266] netlink: 'syz.6.2824': attribute type 4 has an invalid length.
[  320.563868][T13275] futex_wake_op: syz.6.2828 tries to shift op by -1; fix this program
[  321.397635][T13286] loop6: detected capacity change from 0 to 2048
[  321.416810][T13286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.423135][T13286] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.283290][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2845'.
[  322.294843][T12907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.705232][T13338] netlink: 'syz.6.2852': attribute type 1 has an invalid length.
[  322.715226][T13338] netlink: 'syz.6.2852': attribute type 4 has an invalid length.
[  322.722249][T13338] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2852'.
[  323.420234][   T24] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  323.574456][   T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  323.578478][   T24] usb 6-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  323.582177][   T24] usb 6-1: Product: syz
[  323.585861][   T24] usb 6-1: config 0 descriptor??
[  323.590349][   T24] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  323.594694][   T24] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  323.794435][   T24] usb 6-1: USB disconnect, device number 30
[  323.797651][   T24] ftdi_sio 6-1:0.0: device disconnected
[  324.326012][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2861'.
[  324.447566][T13367] IPv6: sit2: Disabled Multicast RS
[  324.475519][T13369] netlink: 'syz.5.2865': attribute type 5 has an invalid length.
[  325.333940][T13382] loop0: detected capacity change from 0 to 32768
[  325.729881][   T47] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  325.881756][   T47] usb 6-1: config 2 has an invalid descriptor of length 146, skipping remainder of the config
[  325.886396][   T47] usb 6-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  325.891995][   T47] usb 6-1: config 2 interface 0 has no altsetting 0
[  325.897618][   T47] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  325.901511][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.904730][   T47] usb 6-1: Product: syz
[  325.906405][   T47] usb 6-1: Manufacturer: syz
[  325.908455][   T47] usb 6-1: SerialNumber: syz
[  326.138338][   T47] ims_pcu 6-1:2.0: probe with driver ims_pcu failed with error -22
[  326.148799][   T47] usb 6-1: USB disconnect, device number 31
[  326.824363][ T5314] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  326.980202][ T5314] usb 1-1: Using ep0 maxpacket: 8
[  326.993203][ T5314] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  326.996952][ T5314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.024837][ T5314] pvrusb2: Hardware description: Terratec Grabster AV400
[  327.041192][ T5314] pvrusb2: **********
[  327.042930][ T5314] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  327.057850][ T5314] pvrusb2: Important functionality might not be entirely working.
[  327.068084][ T5314] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  327.080366][ T5314] pvrusb2: **********
[  327.170971][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2892'.
[  327.268169][ T2397] pvrusb2: Invalid write control endpoint
[  327.306364][T13438] loop6: detected capacity change from 0 to 128
[  327.317431][T13438] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  327.325646][ T2397] pvrusb2: Invalid write control endpoint
[  327.327809][ T2397] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  327.331102][T13438] FAT-fs (loop6): bogus number of directory entries (203)
[  327.333606][ T2397] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  327.336128][T13438] FAT-fs (loop6): Can't find a valid FAT filesystem
[  327.338190][ T2397] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  327.347316][ T2397] pvrusb2: Device being rendered inoperable
[  327.355930][ T2397] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  327.360414][ T2397] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  327.431920][ T2397] pvrusb2: Attached sub-driver cx25840
[  327.440348][ T2397] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  327.453139][ T2397] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  327.551115][ T5314] usb 1-1: USB disconnect, device number 33
[  328.167926][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2901'.
[  329.352409][T13506] loop0: detected capacity change from 0 to 256
[  329.662027][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2923'.
[  330.318795][T13546] loop0: detected capacity change from 0 to 1024
[  330.341327][T13546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.352588][T13546] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.2946: missing EA_INODE flag
[  330.365804][T13546] EXT4-fs (loop0): Remounting filesystem read-only
[  330.385448][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.020783][T13575] 9pnet_fd: Insufficient options for proto=fd
[  331.034335][T13575] loop6: detected capacity change from 0 to 16
[  331.042816][T13575] erofs: Unknown parameter 'K،jxIE'
[  331.681831][T13582] IPv6: Can't replace route, no match found
[  331.881304][   T33] audit: type=1326 audit(1755132567.441:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.5.2964" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e698ebe9 code=0x7ffc0000
[  331.894679][   T33] audit: type=1326 audit(1755132567.441:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.5.2964" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26e698ebe9 code=0x7ffc0000
[  332.273953][T13610] sp0: Synchronizing with TNC
[  332.392298][T13620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2977'.
[  332.521892][T13636] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2985'.
[  332.616666][T13638] could not allocate digest TFM handle cryptd(blake2b-160)
[  332.712311][T13652] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2989'.
[  332.716516][T13652] NCSI netlink: No device for ifindex 1024
[  332.793204][T13658] loop6: detected capacity change from 0 to 164
[  332.832287][T13658] iso9660: Corrupted directory entry in block 4 of inode 1792
[  333.315430][T13676] loop6: detected capacity change from 0 to 512
[  333.340383][T13676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.346584][T13676] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  333.367172][T13676] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.3001: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  333.379737][T13676] EXT4-fs (loop6): Remounting filesystem read-only
[  333.652612][T13699] netlink: 340 bytes leftover after parsing attributes in process `syz.0.3009'.
[  333.659246][T13699] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3009'.
[  334.178616][T12907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.203366][    T9] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  334.372157][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  334.376832][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  334.385099][    T9] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  334.388589][    T9] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  334.392644][    T9] usb 6-1: Manufacturer: syz
[  334.394771][    T9] usb 6-1: SerialNumber: syz
[  334.398815][    T9] usb 6-1: config 0 descriptor??
[  334.402750][T13720] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  334.418226][    T9] usb 6-1: ucan: probing device on interface #0
[  334.420672][    T9] usb 6-1: ucan: invalid endpoint configuration
[  334.423313][    T9] usb 6-1: ucan: probe failed; try to update the device firmware
[  334.518166][T13745] wireguard0: entered promiscuous mode
[  334.520987][T13745] wireguard0: entered allmulticast mode
[  334.617718][   T24] usb 6-1: USB disconnect, device number 32
[  334.990077][    T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  335.170140][    T9] usb 1-1: Using ep0 maxpacket: 8
[  335.174253][    T9] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48
[  335.177901][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.185078][    T9] usb 1-1: config 0 descriptor??
[  335.394896][   T47] usb 1-1: USB disconnect, device number 34
[  335.400718][   T24] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  335.549972][   T24] usb 6-1: Using ep0 maxpacket: 16
[  335.554454][   T24] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  335.557785][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  335.562499][   T24] usb 6-1: config 0 has no interface number 0
[  335.566707][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  335.569613][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.573701][   T24] usb 6-1: Product: syz
[  335.575515][   T24] usb 6-1: Manufacturer: syz
[  335.577480][   T24] usb 6-1: SerialNumber: syz
[  335.582199][   T24] usb 6-1: config 0 descriptor??
[  335.586137][   T24] uvcvideo 6-1:0.105: probe with driver uvcvideo failed with error -22
[  335.789511][ T5314] usb 6-1: USB disconnect, device number 33
[  336.657217][T13760] loop0: detected capacity change from 0 to 32768
[  336.661570][T13760] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas: no devices in entry sb: 33/0 []
[  336.661570][T13760] replicas (size 24):
[  336.661570][T13760] btree: 0/1 [2] sb: 33/0 [] (unknown data_type 144): 56/184 [0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 0 0 0 0 0 0 0 0 2 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 16 0]
[  336.661570][T13760] 
[  336.684751][T13760] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  336.987127][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3039'.
[  336.997459][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3039'.
[  337.392482][T13767] loop0: detected capacity change from 0 to 32768
[  337.472933][T13767] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  337.472955][T13767]   allowing incompatible features above 0.0: (unknown version)
[  337.472962][T13767]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  337.490330][T13767] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  337.493471][T13767] bcachefs (loop0): initializing new filesystem
[  337.502453][T13767] bcachefs (loop0): going read-write
[  337.509306][T13767] bcachefs (loop0): marking superblocks
[  337.516203][T13767] bcachefs (loop0): initializing freespace
[  337.521226][T13767] bcachefs (loop0): done initializing freespace
[  337.526067][T13767] bcachefs (loop0): reading snapshots table
[  337.528484][T13767] bcachefs (loop0): reading snapshots done
[  337.561281][T13767] bcachefs (loop0): done starting filesystem
[  337.888928][T13792] loop6: detected capacity change from 0 to 512
[  337.897092][T13792] EXT4-fs: Ignoring removed mblk_io_submit option
[  337.909643][T13792] ext4: Bad value for 'debug_want_extra_isize'
[  338.533748][T13792] loop6: detected capacity change from 0 to 32768
[  338.544304][T13792] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3046 (13792)
[  338.560144][T13792] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  338.564333][T13792] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  338.568035][T13792] BTRFS info (device loop6): using free-space-tree
[  338.755527][T12907] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  338.813376][T13814] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3050'.
[  339.396015][ T5844] bcachefs (loop0): shutting down
[  339.398290][ T5844] bcachefs (loop0): going read-only
[  339.402712][ T5844] bcachefs (loop0): finished waiting for writes to stop
[  339.407339][ T5844] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  339.424025][ T5844] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[  339.437294][ T5844] bcachefs (loop0): clean shutdown complete, journal seq 5
[  339.442328][ T5844] bcachefs (loop0): marking filesystem clean
[  339.476368][ T5844] bcachefs (loop0): shutdown complete
[  339.693676][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3055'.
[  340.199959][ T5314] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  340.369959][ T5314] usb 6-1: Using ep0 maxpacket: 32
[  340.373752][ T5314] usb 6-1: config 0 interface 0 has no altsetting 0
[  340.378128][ T5314] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  340.381906][ T5314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.384788][ T5314] usb 6-1: Product: syz
[  340.386361][ T5314] usb 6-1: Manufacturer: syz
[  340.388209][ T5314] usb 6-1: SerialNumber: syz
[  340.392481][ T5314] usb 6-1: config 0 descriptor??
[  340.647052][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3054'.
[  340.789267][T13842] loop6: detected capacity change from 0 to 32768
[  340.808584][ T5314] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  340.980023][ T5897] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  341.132780][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  341.136209][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  341.143168][ T5897] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  341.147327][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.152455][ T5897] usb 1-1: Product: syz
[  341.154341][ T5897] usb 1-1: Manufacturer: syz
[  341.156358][ T5897] usb 1-1: SerialNumber: syz
[  341.160646][ T5897] usb 1-1: config 0 descriptor??
[  341.167187][ T5897] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  341.213651][ T5314] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  341.223368][ T5314] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71
[  341.229581][ T5314] usb 6-1: USB disconnect, device number 34
[  341.393158][ T5897] usb 1-1: USB disconnect, device number 35
[  342.803193][T13881] loop0: detected capacity change from 0 to 8
[  342.851367][T13881] SQUASHFS error: Failed to read block 0x4de: -5
[  342.857535][T13881] SQUASHFS error: Failed to read block 0x4de: -5
[  342.910489][   T33] audit: type=1800 audit(1755132578.541:219): pid=13881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3077" name="file1" dev="loop0" ino=5 res=0 errno=0
[  343.345840][T13896] tmpfs: Bad value for 'mpol'
[  343.700013][ T5897] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  343.809990][   T24] usb 1-1: new low-speed USB device number 36 using dummy_hcd
[  343.849949][ T5897] usb 6-1: Using ep0 maxpacket: 8
[  343.853593][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  343.857955][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  343.861824][ T5897] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  343.866206][ T5897] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  343.872207][ T5897] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  343.876049][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.884637][ T5897] hub 6-1:1.0: bad descriptor, ignoring hub
[  343.887053][ T5897] hub 6-1:1.0: probe with driver hub failed with error -5
[  343.890264][ T5897] cdc_wdm 6-1:1.0: skipping garbage
[  343.892479][ T5897] cdc_wdm 6-1:1.0: skipping garbage
[  343.896352][ T5897] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  343.899083][ T5897] cdc_wdm 6-1:1.0: Unknown control protocol
[  343.964606][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  343.968869][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  343.973208][   T24] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  343.978597][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[  343.994010][   T24] usb 1-1: string descriptor 0 read error: -22
[  343.996877][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.60
[  344.000919][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.010678][   T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input19
[  344.190027][ T5897] usb 6-1: USB disconnect, device number 35
[  344.212281][ T5281] bcm5974 1-1:1.0: could not read from device
[  344.215306][ T5281] bcm5974 1-1:1.0: could not read from device
[  344.223769][ T5281] bcm5974 1-1:1.0: could not read from device
[  344.226377][   T24] usb 1-1: USB disconnect, device number 36
[  344.229456][ T5281] bcm5974 1-1:1.0: could not read from device
[  344.393925][T13914] net_ratelimit: 62 callbacks suppressed
[  344.393939][T13914] openvswitch: netlink: Missing key (keys=40, expected=100)
[  344.421922][T13916] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3093'.
[  344.448831][T13918] netlink: 'syz.6.3094': attribute type 30 has an invalid length.
[  344.519967][ T5314] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  344.679921][ T5314] usb 6-1: Using ep0 maxpacket: 8
[  344.684853][ T5314] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config
[  344.689210][ T5314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  344.693159][ T5314] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  344.697990][ T5314] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  344.701191][ T5314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.706517][ T5314] hub 6-1:1.0: bad descriptor, ignoring hub
[  344.708735][ T5314] hub 6-1:1.0: probe with driver hub failed with error -5
[  344.711517][ T5314] cdc_wdm 6-1:1.0: skipping garbage
[  344.713238][ T5314] cdc_wdm 6-1:1.0: skipping garbage
[  344.714962][ T5314] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  344.758473][T13922] loop0: detected capacity change from 0 to 1024
[  344.779155][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.785349][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.789540][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.792879][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.796126][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.798982][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.804438][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.807618][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.811061][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.814157][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.817451][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.822159][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.837836][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.842856][T13922] hfsplus: request for non-existent node 16777216 in B*Tree
[  344.857807][   T33] audit: type=1800 audit(1755132580.531:220): pid=13922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3096" name="file1" dev="loop0" ino=20 res=0 errno=0
[  345.026217][   T24] usb 6-1: USB disconnect, device number 36
[  345.229967][ T5314] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  345.380213][ T5314] usb 1-1: Using ep0 maxpacket: 8
[  345.385567][ T5314] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  345.388975][ T5314] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  345.393904][ T5314] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  345.399220][ T5314] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  345.404397][ T5314] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  345.415402][ T5314] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  345.418521][ T5314] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  345.424891][ T5314] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  345.432133][ T5314] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  345.437825][ T5314] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  345.444013][ T5314] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  345.447636][ T5314] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  345.454461][ T5314] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  345.459247][ T5314] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  345.464484][ T5314] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  345.472173][ T5314] usb 1-1: string descriptor 0 read error: -22
[  345.474927][ T5314] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  345.478950][ T5314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.497013][ T5314] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  345.707243][   T24] usb 1-1: USB disconnect, device number 37
[  346.324724][T13952] loop0: detected capacity change from 0 to 256
[  346.327850][T13952] exfat: Deprecated parameter 'utf8'
[  346.332915][T13952] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  346.519285][T13960] loop0: detected capacity change from 0 to 2048
[  346.532632][T13960] hpfs: filesystem error: improperly stopped; already mounted read-only
[  346.536150][T13960] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  346.539309][T13960] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000001
[  346.950260][  T794] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  347.122151][  T794] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  347.125566][  T794] usb 1-1: config 0 has no interface number 0
[  347.128033][  T794] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  347.133931][  T794] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  347.137546][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.140846][  T794] usb 1-1: Product: syz
[  347.142407][  T794] usb 1-1: Manufacturer: syz
[  347.144240][  T794] usb 1-1: SerialNumber: syz
[  347.149231][  T794] usb 1-1: config 0 descriptor??
[  347.209902][ T8850] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  347.355744][  T794] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[  347.358936][  T794] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[  347.360001][ T8850] usb 6-1: Using ep0 maxpacket: 16
[  347.361670][  T794] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[  347.365666][ T8850] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  347.365959][  T794] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[  347.369414][ T8850] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  347.375399][  T794] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  347.377006][ T8850] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  347.380196][  T794] usb 1-1: USB disconnect, device number 38
[  347.382549][ T8850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.386981][ T8850] usb 6-1: Product: syz
[  347.387456][  T794] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  347.388753][ T8850] usb 6-1: Manufacturer: syz
[  347.392240][  T794] keyspan 1-1:0.133: device disconnected
[  347.396359][ T8850] usb 6-1: SerialNumber: syz
[  347.511989][T13976] loop6: detected capacity change from 0 to 4096
[  347.515028][T13976] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  347.522126][T13976] NILFS (loop6): invalid segment: Checksum error in segment payload
[  347.525012][T13976] NILFS (loop6): unable to fall back to spare super block
[  347.527495][T13976] NILFS (loop6): error -22 while searching super root
[  347.606660][ T8850] usb 6-1: 0:2 : does not exist
[  347.615838][ T8850] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  347.641726][ T8850] usb 6-1: USB disconnect, device number 37
[  347.771460][T13988] loop6: detected capacity change from 0 to 512
[  347.774136][T13988] EXT4-fs: Ignoring removed mblk_io_submit option
[  347.777135][T13988] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  347.782424][T13988] EXT4-fs (loop6): DAX unsupported by block device.
[  348.335188][T14012] netlink: 'syz.0.3138': attribute type 21 has an invalid length.
[  348.414551][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3143'.
[  348.509393][ T5846] Bluetooth: hci3: Malformed HCI Event: 0x22
[  348.591409][T14035] netlink: 'syz.0.3149': attribute type 46 has an invalid length.
[  348.688951][T14037] loop0: detected capacity change from 0 to 512
[  348.700403][T14037] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  348.717034][T14037] EXT4-fs (loop0): 1 truncate cleaned up
[  348.720708][T14037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.734592][T14043] loop6: detected capacity change from 0 to 2048
[  348.757954][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.762152][T14043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.775989][T14043] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  348.834580][T12907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.906624][T14056] delete_channel: no stack
[  349.129399][T14053] loop0: detected capacity change from 0 to 32768
[  349.165345][T14053] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.230906][T14053] XFS (loop0): Ending clean mount
[  349.248153][T14053] XFS (loop0): Quotacheck needed: Please wait.
[  349.381951][T14053] XFS (loop0): Quotacheck: Done.
[  349.553467][ T5844] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  350.024295][T14095] loop0: detected capacity change from 0 to 512
[  350.393960][T14101] sch_tbf: burst 3 is lower than device lo mtu (65550) !
[  350.755162][T14109] loop0: detected capacity change from 0 to 4096
[  350.772436][T14109] ntfs3(loop0): ino=1a, mi_enum_attr
[  350.774256][T14109] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  350.838425][T12735] ntfs3(loop0): ino=5, mi_enum_attr
[  351.079191][T14121] loop0: detected capacity change from 0 to 32768
[  351.083401][T14121] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3184 (14121)
[  351.092129][T14121] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  351.095941][T14121] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  351.098826][T14121] BTRFS info (device loop0): using free-space-tree
[  351.179087][T14135] syz.5.3185: attempt to access beyond end of device
[  351.179087][T14135] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  351.183967][T14135] efs: cannot read volume header
[  351.407269][ T5844] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  351.705290][T14154] input: syz0 as /devices/virtual/input/input21
[  351.859600][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3193'.
[  352.410488][ T8850] usb 6-1: new low-speed USB device number 38 using dummy_hcd
[  352.457550][T14183] loop0: detected capacity change from 0 to 512
[  352.463459][T14183] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  352.467255][T14183] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -16
[  352.563153][ T8850] usb 6-1: unable to get BOS descriptor or descriptor too short
[  352.571337][ T8850] usb 6-1: config 7 has an invalid interface number: 83 but max is 0
[  352.574580][ T8850] usb 6-1: config 7 has no interface number 0
[  352.577055][ T8850] usb 6-1: config 7 interface 83 altsetting 254 endpoint 0x7 has invalid maxpacket 16, setting to 0
[  352.591546][ T8850] usb 6-1: No eUSB2 isoc ep 7 companion for config 7 interface 83 altsetting 254
[  352.595220][ T8850] usb 6-1: config 7 interface 83 has no altsetting 0
[  352.613645][ T8850] usb 6-1: string descriptor 0 read error: -22
[  352.616267][ T8850] usb 6-1: New USB device found, idVendor=19d2, idProduct=0145, bcdDevice=44.f5
[  352.620251][ T8850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.637581][ T8850] option 6-1:7.83: GSM modem (1-port) converter detected
[  352.840321][ T5314] usb 6-1: USB disconnect, device number 38
[  352.844423][ T5314] option 6-1:7.83: device disconnected
[  353.594763][T14203] loop0: detected capacity change from 0 to 512
[  353.599076][T14203] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  353.625169][T14203] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.3214: corrupted xattr entries
[  353.633497][T14203] EXT4-fs (loop0): 1 truncate cleaned up
[  353.637301][T14203] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.649103][   T33] audit: type=1800 audit(1755132589.321:221): pid=14203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3214" name="bus" dev="loop0" ino=18 res=0 errno=0
[  353.676565][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.858380][T14213] loop0: detected capacity change from 0 to 512
[  353.861894][T14213] EXT4-fs: Ignoring removed orlov option
[  353.865144][T14213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  353.873509][T14213] EXT4-fs (loop0): orphan cleanup on readonly fs
[  353.884632][T14213] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3217: bg 0: block 248: padding at end of block bitmap is not set
[  353.893024][T14213] Quota error (device loop0): write_blk: dquota write failed
[  353.896021][T14213] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  353.899542][T14213] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3217: Failed to acquire dquot type 1
[  353.915468][T14213] EXT4-fs (loop0): 1 truncate cleaned up
[  353.931549][T14213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  353.939160][T14218] blkio.reset_stats is deprecated
[  353.944234][T14213] EXT4-fs error (device loop0): __ext4_remount:6736: comm syz.0.3217: Abort forced by user
[  353.950143][T14213] EXT4-fs (loop0): Remounting filesystem read-only
[  353.952414][T14213] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  353.965560][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.994634][T14223] netlink: 'syz.0.3221': attribute type 12 has an invalid length.
[  353.997160][T14223] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3221'.
[  354.064116][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3225'.
[  354.334717][T14248] loop0: detected capacity change from 0 to 64
[  355.013385][T14262] netlink: 4624 bytes leftover after parsing attributes in process `syz.5.3238'.
[  355.401351][ T8850] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  355.535876][T14278] netlink: 'syz.6.3245': attribute type 4 has an invalid length.
[  355.543894][T14278] netlink: 'syz.6.3245': attribute type 4 has an invalid length.
[  355.571147][ T8850] usb 6-1: Using ep0 maxpacket: 8
[  355.583474][ T8850] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  355.587202][ T8850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.590972][ T8850] usb 6-1: Product: syz
[  355.592701][ T8850] usb 6-1: Manufacturer: syz
[  355.594661][ T8850] usb 6-1: SerialNumber: syz
[  355.606446][ T8850] usb 6-1: config 0 descriptor??
[  355.686694][T14284] loop6: detected capacity change from 0 to 2048
[  355.702760][T14285] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  355.705211][T14284] NILFS (loop6): corrupt root inode
[  355.816545][ T8850] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  357.252200][ T8850] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  357.276169][ T8850] usb 6-1: USB disconnect, device number 39
[  357.446920][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  357.463419][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  357.468462][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  357.476470][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  357.482421][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  357.703741][T14306] chnl_net:caif_netlink_parms(): no params data found
[  357.779442][T14306] bridge0: port 1(bridge_slave_0) entered blocking state
[  357.784655][T14306] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.787768][T14306] bridge_slave_0: entered allmulticast mode
[  357.791687][T14306] bridge_slave_0: entered promiscuous mode
[  357.796250][T14306] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.799320][T14306] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.804861][T14306] bridge_slave_1: entered allmulticast mode
[  357.812035][T14306] bridge_slave_1: entered promiscuous mode
[  357.854495][T14306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  357.896961][T14306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  357.934279][T14306] team0: Port device team_slave_0 added
[  357.939468][T14306] team0: Port device team_slave_1 added
[  357.983968][T14306] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.987788][T14306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  358.001326][T14306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  358.014426][T14306] batman_adv: batadv0: Adding interface: batadv_slave_1
[  358.017429][T14306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  358.029641][T14306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  358.098622][T14306] hsr_slave_0: entered promiscuous mode
[  358.101702][T14306] hsr_slave_1: entered promiscuous mode
[  358.104595][T14306] debugfs: 'hsr0' already exists in 'hsr'
[  358.106769][T14306] Cannot create hsr debugfs directory
[  358.245941][T14306] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  358.251967][T14306] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  358.256498][T14306] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  358.260927][T14306] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  358.284178][T14306] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.286684][T14306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.289168][T14306] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.291619][T14306] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.325845][T14306] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.335121][T12735] bridge0: port 1(bridge_slave_0) entered disabled state
[  358.338109][T12735] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.349252][T14306] 8021q: adding VLAN 0 to HW filter on device team0
[  358.361096][T12735] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.363486][T12735] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.373556][T13882] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.375927][T13882] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.493912][T14306] 8021q: adding VLAN 0 to HW filter on device batadv0
[  358.604509][T14306] veth0_vlan: entered promiscuous mode
[  358.609607][T14306] veth1_vlan: entered promiscuous mode
[  358.627092][T14306] veth0_macvtap: entered promiscuous mode
[  358.632824][T14306] veth1_macvtap: entered promiscuous mode
[  358.643658][T14306] batman_adv: batadv0: Interface activated: batadv_slave_0
[  358.650739][T14306] batman_adv: batadv0: Interface activated: batadv_slave_1
[  358.658222][ T5875] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  358.664460][ T5875] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  358.667979][ T5875] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  358.672313][ T5875] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.737966][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.742216][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.759324][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.762989][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  359.083853][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3271'.
[  359.461541][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3272'.
[  359.501532][ T5853] Bluetooth: hci0: command tx timeout
[  360.438545][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3275'.
[  360.457865][T14370] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3276'.
[  361.011441][T14379] loop7: detected capacity change from 0 to 32768
[  361.039013][T14379] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  361.098387][T14379] XFS (loop7): Ending clean mount
[  361.118043][T14306] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  361.175876][T14406] loop6: detected capacity change from 0 to 16
[  361.229119][T14406] erofs (device loop6): mounted with root inode @ nid 36.
[  361.541160][T14421] loop7: detected capacity change from 0 to 2048
[  361.549686][T14421] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[  361.568431][T14421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  361.581188][ T5853] Bluetooth: hci0: command tx timeout
[  362.075785][T14426] loop7: detected capacity change from 0 to 32768
[  362.080450][T14426] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section journal: journal bucket 1 before first bucket 32767
[  362.080450][T14426] journal (size 40):
[  362.080450][T14426] Buckets:  9 7 24 1
[  362.080450][T14426] 
[  362.100015][T14426] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  362.398723][T14454] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136)
[  362.402556][T14454] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  363.662037][ T5853] Bluetooth: hci0: command tx timeout
[  364.104872][T14481] loop7: detected capacity change from 0 to 40427
[  364.109189][T14481] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  364.112702][T14481] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  364.118227][T14481] F2FS-fs (loop7): invalid crc value
[  364.152668][T14481] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  364.156853][T14481] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  364.159147][T14481] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  364.290235][T14350] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  364.770017][T14350] usb 6-1: Using ep0 maxpacket: 32
[  364.776188][T14350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.790129][T14350] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.794318][T14350] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  364.810143][T14350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.837011][T14350] usb 6-1: config 0 descriptor??
[  364.849389][T14350] hub 6-1:0.0: USB hub found
[  365.048515][T14350] hub 6-1:0.0: 1 port detected
[  365.368051][T14521] loop6: detected capacity change from 0 to 32768
[  365.371758][T14521] XFS: attr2 mount option is deprecated.
[  365.399350][T14521] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  365.417340][T14521] XFS (loop6): Ending clean mount
[  365.422960][T14521] XFS (loop6): Quotacheck needed: Please wait.
[  365.461843][T14521] XFS (loop6): Quotacheck: Done.
[  365.489731][T12907] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  365.623613][T14531] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  365.627118][T14531] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  365.653397][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3339'.
[  365.661069][T14350] hub 6-1:0.0: activate --> -90
[  365.741014][ T5853] Bluetooth: hci0: command tx timeout
[  366.268541][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3344'.
[  366.469179][T14350] hub 6-1:0.0: hub_ext_port_status failed (err = -71)
[  366.469575][ T5895] usb 6-1: USB disconnect, device number 40
[  367.603709][T14582] loop6: detected capacity change from 0 to 4096
[  367.607826][T14582] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  367.614197][ T5897] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  367.619607][T14582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.678775][T12907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.762778][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short
[  367.770041][ T5897] usb 6-1: not running at top speed; connect to a high speed hub
[  367.780513][ T5897] usb 6-1: config 1 interface 0 altsetting 90 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  367.785067][ T5897] usb 6-1: config 1 interface 0 has no altsetting 0
[  367.793010][ T5897] usb 6-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice= 0.40
[  367.796813][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.800744][ T5897] usb 6-1: Product: syz
[  367.802631][ T5897] usb 6-1: Manufacturer: syz
[  367.804637][ T5897] usb 6-1: SerialNumber: syz
[  367.811114][T14574] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  368.077916][ T5897] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input22
[  368.084811][ T5897] usb 6-1: USB disconnect, device number 41
[  368.509627][T14611] loop7: detected capacity change from 0 to 128
[  368.513344][T14611] vfat: Unexpected value for 'dos1xfloppy'
[  368.854599][T14626] netlink: 'syz.5.3377': attribute type 11 has an invalid length.
[  368.858249][T14626] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3377'.
[  369.100989][T14633] 9pnet: Could not find request transport: f
[  369.205952][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3382'.
[  369.714362][T14674] loop7: detected capacity change from 0 to 32768
[  369.723028][T14674] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  369.733466][T14674] XFS (loop7): Ending clean mount
[  370.364930][T14693] ALSA: mixer_oss: invalid OSS volume ''
[  370.518227][T14306] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  370.769045][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3408'.
[  370.911895][T14710] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3411'.
[  371.226949][   T33] audit: type=1326 audit(1755132606.901:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14722 comm="syz.7.3417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64778ebe9 code=0x7ffc0000
[  371.240048][   T33] audit: type=1326 audit(1755132606.901:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14722 comm="syz.7.3417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64778ebe9 code=0x7ffc0000
[  371.247523][   T33] audit: type=1326 audit(1755132606.901:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14722 comm="syz.7.3417" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fc64778ebe9 code=0x7ffc0000
[  371.257388][   T33] audit: type=1326 audit(1755132606.901:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14722 comm="syz.7.3417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64778ebe9 code=0x7ffc0000
[  371.275732][T14725] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  371.276548][   T33] audit: type=1326 audit(1755132606.901:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14722 comm="syz.7.3417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64778ebe9 code=0x7ffc0000
[  371.286544][   T33] audit: type=1326 audit(1755132606.901:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14722 comm="syz.7.3417" exe="/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fc64778ebe9 code=0x7ffc0000
[  371.294845][   T33] audit: type=1326 audit(1755132606.901:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14722 comm="syz.7.3417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64778ebe9 code=0x7ffc0000
[  371.304563][   T33] audit: type=1326 audit(1755132606.901:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14722 comm="syz.7.3417" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc64778ebe9 code=0x7ffc0000
[  371.834760][T14751] netlink: 'syz.5.3429': attribute type 1 has an invalid length.
[  371.838673][T14751] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3429'.
[  371.850186][T14751] NCSI netlink: No device for ifindex 0
[  371.962200][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3432'.
[  372.121468][   T33] audit: type=1800 audit(1755132607.801:230): pid=14763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3435" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=37302 res=0 errno=0
[  372.947340][T14782] loop6: detected capacity change from 0 to 4096
[  372.955154][T14782] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  372.986695][T14782] ntfs3(loop6): ino=19, mi_enum_attr
[  372.996950][T14782] ntfs3(loop6): ino=5, "/" indx_read
[  372.999009][T14782] ntfs3(loop6): ino=5, "/" ntfs_readdir
[  373.117944][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3451'.
[  373.662826][   T33] audit: type=1326 audit(1755132609.331:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14803 comm="syz.6.3453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a10d8ebe9 code=0x7fc00000
[  374.147011][T14816] capability: warning: `syz.6.3457' uses 32-bit capabilities (legacy support in use)
[  374.205124][T14818] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.093273][T14834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3464'.
[  375.112227][T14834] 8021q: adding VLAN 0 to HW filter on device bond1
[  375.485078][T14854] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3472'.
[  375.669860][T14857] loop6: detected capacity change from 0 to 32768
[  375.719990][   T24] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  375.756852][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  375.756875][T14857]   allowing incompatible features above 0.0: (unknown version)
[  375.756883][T14857]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  375.756892][T14857]   with devices loop6
[  375.777979][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  375.782698][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  375.793716][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  375.802296][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  375.811301][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  375.817655][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  375.823444][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  375.827008][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  375.865525][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  375.890116][   T24] usb 6-1: Using ep0 maxpacket: 32
[  375.894392][T14857] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown by ioctl type 0emergency read only at seq 3
[  375.904730][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  375.909373][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  375.919390][ T5314] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  375.923998][T12907] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  375.935893][ T5314] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[  375.936664][   T24] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  375.940967][ T5314] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3
[  375.943596][ T5314] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): unclean shutdown complete, journal seq 3
[  375.949046][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.951197][ T5314] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  375.960103][   T24] usb 6-1: Product: syz
[  375.966858][   T24] usb 6-1: Manufacturer: syz
[  375.968926][   T24] usb 6-1: SerialNumber: syz
[  375.971319][ T5314] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done going read-only, filesystem not clean
[  375.991742][   T24] usb 6-1: config 0 descriptor??
[  376.002082][T12907] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  376.004516][   T24] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  376.217001][ T7933] usb 6-1: Failed to submit usb control message: -71
[  376.217221][   T24] usb 6-1: USB disconnect, device number 42
[  376.219600][ T7933] usb 6-1: unable to send the bmi data to the device: -71
[  376.219659][ T7933] usb 6-1: unable to get target info from device
[  376.219665][ T7933] usb 6-1: could not get target info (-71)
[  376.219672][ T7933] usb 6-1: could not probe fw (-71)
[  376.230165][ T5314] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  376.399941][ T5314] usb 8-1: Using ep0 maxpacket: 8
[  376.403354][ T5314] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  376.407298][ T5314] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  376.411410][ T5314] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  376.415369][ T5314] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  376.420890][ T5314] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  376.424079][ T5314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.633911][ T5314] usb 8-1: GET_CAPABILITIES returned 0
[  376.635905][ T5314] usbtmc 8-1:16.0: can't read capabilities
[  376.839706][ T5897] usb 8-1: USB disconnect, device number 2
[  377.660305][ T5897] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  377.833139][ T5897] usb 8-1: Using ep0 maxpacket: 32
[  377.839455][ T5897] usb 8-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  377.847046][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.854830][ T5897] usb 8-1: Product: syz
[  377.858107][ T5897] usb 8-1: Manufacturer: syz
[  377.860445][ T5897] usb 8-1: SerialNumber: syz
[  377.864639][ T5897] usb 8-1: config 0 descriptor??
[  377.869032][ T5897] ums-onetouch 8-1:0.0: USB Mass Storage device detected
[  377.895916][T14899] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3486'.
[  377.926965][ T5897] usb 8-1: Found UVC 0.00 device syz (0d49:7000)
[  377.929692][ T5897] usb 8-1: No valid video chain found.
[  378.100836][ T5897] usb 8-1: USB disconnect, device number 3
[  378.202266][T14906] loop6: detected capacity change from 0 to 512
[  378.207552][T14906] EXT4-fs: Ignoring removed bh option
[  378.215682][T14906] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  378.226818][T14906] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  378.231556][T14906] EXT4-fs (loop6): orphan cleanup on readonly fs
[  378.234911][T14906] EXT4-fs error (device loop6): ext4_quota_enable:7120: comm syz.6.3489: Bad quota inum: 4294967291, type: 0
[  378.241724][T14906] EXT4-fs (loop6): Remounting filesystem read-only
[  378.244548][T14906] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix.
[  378.251796][T14906] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  378.260190][T14906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  378.465458][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.472344][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  379.358779][T14913] loop7: detected capacity change from 0 to 4096
[  379.425919][T14914] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  379.541493][T14916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3492'.
[  380.369488][T12907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.764942][T14939] loop6: detected capacity change from 0 to 1024
[  380.774444][T14939] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  380.843979][T14939] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3502: bg 0: block 10: padding at end of block bitmap is not set
[  380.857928][T14939] __quota_error: 5 callbacks suppressed
[  380.857950][T14939] Quota error (device loop6): write_blk: dquota write failed
[  380.866029][T14939] Quota error (device loop6): find_free_dqentry: Can't write quota data block 2
[  380.870266][T14939] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  380.873815][T14939] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3502: Failed to acquire dquot type 0
[  380.888191][T14939] Quota error (device loop6): write_blk: dquota write failed
[  380.901266][T14939] Quota error (device loop6): find_free_dqentry: Can't write quota data block 2
[  380.904358][T14939] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  380.907487][T14939] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3502: Failed to acquire dquot type 0
[  380.928073][T14939] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.3502: Freeing blocks not in datazone - block = 0, count = 4096
[  380.954784][T14939] Quota error (device loop6): write_blk: dquota write failed
[  380.959877][T14939] Quota error (device loop6): find_free_dqentry: Can't write quota data block 2
[  380.963343][T14939] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  380.966818][T14939] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3502: Failed to acquire dquot type 0
[  380.986640][T14939] EXT4-fs (loop6): 1 orphan inode deleted
[  380.989386][T14939] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.014944][T14939] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #2: block 16: comm syz.6.3502: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  381.333367][T14922] Set syz1 is full, maxelem 65536 reached
[  381.360701][T12907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.410972][T14966] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3515'.
[  381.414821][T14966] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3515'.
[  381.427608][T14966] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3515'.
[  381.431792][T14966] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3515'.
[  381.434723][T14966] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3515'.
[  381.437657][T14966] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3515'.
[  381.534694][T14974] netlink: 'syz.6.3508': attribute type 1 has an invalid length.
[  382.102508][T15016] netlink: 'syz.5.3538': attribute type 1 has an invalid length.
[  382.107462][T15016] netlink: 'syz.5.3538': attribute type 1 has an invalid length.
[  382.112241][T15016] netlink: 'syz.5.3538': attribute type 1 has an invalid length.
[  382.116490][T15016] block nbd0: shutting down sockets
[  382.788067][T15034] loop7: detected capacity change from 0 to 512
[  382.805178][T15034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.811343][T15034] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  382.816836][T15036] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  382.824568][T15036] syzkaller0: entered promiscuous mode
[  382.828027][T15036] syzkaller0: entered allmulticast mode
[  382.831042][T15034] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.3546: Abort forced by user
[  382.839944][T15034] EXT4-fs (loop7): Remounting filesystem read-only
[  382.842949][T15034] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  382.849755][T15036] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  382.878119][T14306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.896011][T15036] tipc: Resetting bearer <eth:syzkaller0>
[  382.901544][T15035] tipc: Resetting bearer <eth:syzkaller0>
[  382.923298][T15040] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3548'.
[  382.928015][T15035] tipc: Disabling bearer <eth:syzkaller0>
[  384.502290][T14350] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  384.782891][T14350] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  384.786807][T14350] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  384.793408][T14350] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  384.796785][T14350] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  384.799538][T14350] usb 6-1: SerialNumber: syz
[  385.252690][T14350] usb 6-1: bad CDC descriptors
[  385.261185][T14350] usb 6-1: USB disconnect, device number 43
[  385.315835][T15084] loop6: detected capacity change from 0 to 512
[  385.335945][T15084] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.341848][T15084] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  385.369714][T12907] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.504519][T15089] loop6: detected capacity change from 0 to 32768
[  385.507500][T15089] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3567 (15089)
[  385.513410][T15089] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  385.517020][T15089] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  385.520491][T15089] BTRFS info (device loop6): using free-space-tree
[  385.570475][T15104] loop7: detected capacity change from 0 to 16
[  385.575292][T15104] erofs (device loop7): mounted with root inode @ nid 36.
[  385.579349][T15089] BTRFS info (device loop6): rebuilding free space tree
[  385.620804][T14306] erofs (device loop7): invalid de[0].nameoff 0 @ nid 46
[  385.628542][T14306] syz-executor: attempt to access beyond end of device
[  385.628542][T14306] loop7: rw=524288, sector=8, nr_sectors = 24 limit=16
[  385.642679][T14306] erofs (device loop7): invalid de[0].nameoff 0 @ nid 89
[  385.647113][T14306] erofs (device loop7): invalid de[0].nameoff 0 @ nid 89
[  385.709637][T15112] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3570'.
[  385.712925][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3570'.
[  385.715844][T15112] netlink: 'syz.7.3570': attribute type 18 has an invalid length.
[  385.748322][T12907] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  386.189470][T15134] loop7: detected capacity change from 0 to 1024
[  386.205381][T15134] hfsplus: bad catalog entry type
[  386.226715][   T36] hfsplus: b-tree write err: -5, ino 4
[  386.407306][T15152] netlink: 'syz.6.3589': attribute type 12 has an invalid length.
[  386.411063][T15152] netlink: 'syz.6.3589': attribute type 29 has an invalid length.
[  386.414359][T15152] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3589'.
[  386.418184][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3589'.
[  386.448724][T15156] loop7: detected capacity change from 0 to 8
[  386.455069][T15156] SQUASHFS error: Failed to read block 0x62: -5
[  386.457800][T15156] squashfs image failed sanity check
[  386.581512][ T5895] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  387.093332][ T5895] usb 6-1: config 2 has an invalid interface number: 77 but max is 0
[  387.096376][ T5895] usb 6-1: config 2 has no interface number 0
[  387.098663][ T5895] usb 6-1: config 2 interface 77 has no altsetting 0
[  387.106056][ T5895] usb 6-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=3d.a0
[  387.109484][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.112895][ T5895] usb 6-1: Product: syz
[  387.114801][ T5895] usb 6-1: Manufacturer: syz
[  387.116803][ T5895] usb 6-1: SerialNumber: syz
[  387.504345][ T5895] usb 6-1: USB disconnect, device number 44
[  387.683069][T15172] loop7: detected capacity change from 0 to 256
[  387.708697][T15172] FAT-fs (loop7): Directory bread(block 64) failed
[  387.711753][T15172] FAT-fs (loop7): Directory bread(block 65) failed
[  387.714476][T15172] FAT-fs (loop7): Directory bread(block 66) failed
[  387.717252][T15172] FAT-fs (loop7): Directory bread(block 67) failed
[  387.720185][T15172] FAT-fs (loop7): Directory bread(block 68) failed
[  387.722379][T15172] FAT-fs (loop7): Directory bread(block 69) failed
[  387.724689][T15172] FAT-fs (loop7): Directory bread(block 70) failed
[  387.727067][T15172] FAT-fs (loop7): Directory bread(block 71) failed
[  387.733582][T15172] FAT-fs (loop7): Directory bread(block 72) failed
[  387.736138][T15172] FAT-fs (loop7): Directory bread(block 73) failed
[  387.785868][   T33] audit: type=1800 audit(1755132623.461:237): pid=15172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3597" name="bus" dev="loop7" ino=1048670 res=0 errno=0
[  388.037646][T15180] kernel profiling enabled (shift: 63)
[  388.041976][T15180] profiling shift: 63 too large
[  388.097895][T15187] binder: 15186:15187 ioctl c0306201 2000000003c0 returned -14
[  388.372657][T15196] loop7: detected capacity change from 0 to 32768
[  388.377888][T15197] binder: 15181:15197 ioctl c0306201 200000000040 returned -22
[  388.684474][T15196] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  388.684489][T15196]   allowing incompatible features above 0.0: (unknown version)
[  388.684497][T15196]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  388.701799][T15196] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  388.705220][T15196] bcachefs (loop7): initializing new filesystem
[  388.713659][T15196] bcachefs (loop7): going read-write
[  388.736807][T15196] bcachefs (loop7): marking superblocks
[  388.744822][T15196] bcachefs (loop7): initializing freespace
[  388.749764][T15196] bcachefs (loop7): done initializing freespace
[  388.754488][T15196] bcachefs (loop7): reading snapshots table
[  388.757028][T15196] bcachefs (loop7): reading snapshots done
[  388.795426][T15196] bcachefs (loop7): done starting filesystem
[  389.752195][T14306] bcachefs (loop7): shutting down
[  389.779419][T14306] bcachefs (loop7): going read-only
[  389.796571][T14306] bcachefs (loop7): finished waiting for writes to stop
[  389.812829][T14306] bcachefs (loop7): flushing journal and stopping allocators, journal seq 4
[  389.856472][T14306] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 5
[  389.860433][T14306] bcachefs (loop7): clean shutdown complete, journal seq 6
[  389.863768][T14306] bcachefs (loop7): marking filesystem clean
[  389.889488][T14306] bcachefs (loop7): shutdown complete
[  390.019203][T15235] GUP no longer grows the stack in syz.6.3622 (15235): 200000003000-20000000a000 (200000001000)
[  390.027167][T15235] CPU: 1 UID: 0 PID: 15235 Comm: syz.6.3622 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  390.027183][T15235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.027188][T15235] Call Trace:
[  390.027192][T15235]  <TASK>
[  390.027197][T15235]  dump_stack_lvl+0x189/0x250
[  390.027213][T15235]  ? __pfx_dump_stack_lvl+0x10/0x10
[  390.027223][T15235]  ? __pfx__printk+0x10/0x10
[  390.027234][T15235]  ? find_vma+0xe7/0x160
[  390.027244][T15235]  ? __lock_acquire+0xab9/0xd20
[  390.027262][T15235]  __get_user_pages+0x24d0/0x2ce0
[  390.027273][T15235]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  390.027295][T15235]  ? rcu_is_watching+0x15/0xb0
[  390.027305][T15235]  __gup_longterm_locked+0xde9/0x1660
[  390.027320][T15235]  ? sanity_check_pinned_pages+0x123a/0x1300
[  390.027334][T15235]  gup_fast_fallback+0x1e6a/0x2010
[  390.027359][T15235]  ? __pfx_gup_fast_fallback+0x10/0x10
[  390.027376][T15235]  ? pin_user_pages_fast+0x4d/0xb0
[  390.027387][T15235]  iov_iter_extract_pages+0x35a/0x5e0
[  390.027399][T15235]  extract_iter_to_sg+0xe46/0x24e0
[  390.027416][T15235]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  390.027434][T15235]  ? __asan_memset+0x22/0x50
[  390.027444][T15235]  af_alg_get_rsgl+0x436/0x810
[  390.027462][T15235]  aead_recvmsg+0x4cc/0x13f0
[  390.027475][T15235]  ? rcu_is_watching+0x15/0xb0
[  390.027487][T15235]  ? __pfx_aead_recvmsg+0x10/0x10
[  390.027497][T15235]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  390.027507][T15235]  ? __pfx_aead_recvmsg+0x10/0x10
[  390.027518][T15235]  sock_recvmsg_nosec+0x186/0x1c0
[  390.027565][T15235]  ____sys_recvmsg+0x3aa/0x460
[  390.027585][T15235]  ? __pfx_____sys_recvmsg+0x10/0x10
[  390.027605][T15235]  ? import_iovec+0x74/0xa0
[  390.027614][T15235]  ___sys_recvmsg+0x1b5/0x510
[  390.027628][T15235]  ? __pfx____sys_recvmsg+0x10/0x10
[  390.027655][T15235]  ? __might_fault+0xb0/0x130
[  390.027668][T15235]  do_recvmmsg+0x307/0x770
[  390.027684][T15235]  ? __pfx_do_recvmmsg+0x10/0x10
[  390.027695][T15235]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  390.027714][T15235]  ? __pfx_do_futex+0x10/0x10
[  390.027733][T15235]  __x64_sys_recvmmsg+0x190/0x240
[  390.027745][T15235]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  390.027755][T15235]  ? rcu_is_watching+0x15/0xb0
[  390.027764][T15235]  ? do_syscall_64+0xbe/0x3b0
[  390.027776][T15235]  do_syscall_64+0xfa/0x3b0
[  390.027784][T15235]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.027793][T15235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.027801][T15235]  ? exc_page_fault+0x9f/0xf0
[  390.027810][T15235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.027818][T15235] RIP: 0033:0x7f9a10d8ebe9
[  390.027826][T15235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  390.027834][T15235] RSP: 002b:00007f9a11c6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  390.027844][T15235] RAX: ffffffffffffffda RBX: 00007f9a10fb5fa0 RCX: 00007f9a10d8ebe9
[  390.027849][T15235] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000007
[  390.027854][T15235] RBP: 00007f9a10e11e19 R08: 0000000000000000 R09: 0000000000000000
[  390.027858][T15235] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  390.027863][T15235] R13: 00007f9a10fb6038 R14: 00007f9a10fb5fa0 R15: 00007ffccc7091b8
[  390.027876][T15235]  </TASK>
[  390.151029][ T7933] bridge_slave_0: left promiscuous mode
[  390.153637][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.673927][ T7933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  390.677732][ T7933] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  390.682240][ T7933] bond0 (unregistering): Released all slaves
[  390.692470][ T7933] bond1 (unregistering): Released all slaves
[  390.789441][ T7933] tipc: Left network mode
[  391.100442][T15265] loop7: detected capacity change from 0 to 512
[  391.118956][T15265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  391.124947][T15265] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  391.163341][T14306] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.211924][ T7933] hsr_slave_0: left promiscuous mode
[  391.215648][ T7933] 0: left promiscuous mode
[  391.218171][ T7933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.229222][ T7933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.287917][T15272] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3635'.
[  392.365771][ T7933] IPVS: stop unused estimator thread 0...
[  393.282322][T15316] netlink: 'syz.5.3655': attribute type 1 has an invalid length.
[  393.284988][T15316] netlink: 'syz.5.3655': attribute type 4 has an invalid length.
[  393.287508][T15316] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3655'.
[  393.291573][T15316] netlink: 'syz.5.3655': attribute type 1 has an invalid length.
[  393.294452][T15316] netlink: 'syz.5.3655': attribute type 4 has an invalid length.
[  393.297130][T15316] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3655'.
[  393.485737][T15324] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.531705][T15326] netlink: 'syz.6.3660': attribute type 12 has an invalid length.
[  393.534841][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3660'.
[  393.555350][ T7933] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  393.559289][T15326] netlink: 'syz.6.3660': attribute type 12 has an invalid length.
[  393.571382][ T7933] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  393.574994][ T7933] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  393.578690][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3660'.
[  393.592657][ T7933] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  393.645946][T15335] delete_channel: no stack
[  393.684921][T15339] sock: sock_timestamping_bind_phc: sock not bind to device
[  393.726451][T15342] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  393.731579][T15342] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  393.736179][T15342] CPU: 1 UID: 0 PID: 15342 Comm: syz.6.3668 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  393.741396][T15342] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  393.745766][T15342] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  393.748213][T15342] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f9 01 37 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 01 37 f9 4d 8b 24 24 48 83 c3
[  393.756532][T15342] RSP: 0018:ffffc900065d7a60 EFLAGS: 00010206
[  393.759180][T15342] RAX: 0000000000000005 RBX: ffff88810ae15580 RCX: 0000000000080000
[  393.762640][T15342] RDX: ffffc90027988000 RSI: 00000000000003cd RDI: 00000000000003ce
[  393.766026][T15342] RBP: 0000000000000001 R08: ffff88810ebf892f R09: 1ffff11021d7f125
[  393.769399][T15342] R10: dffffc0000000000 R11: ffffffff88ebf250 R12: 0000000000000028
[  393.772857][T15342] R13: dffffc0000000000 R14: ffff88810ebf8800 R15: dffffc0000000000
[  393.776277][T15342] FS:  00007f9a11c6d6c0(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  393.780153][T15342] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  393.782994][T15342] CR2: 0000001b33423ffc CR3: 00000001069fc000 CR4: 00000000000006f0
[  393.786444][T15342] Call Trace:
[  393.787920][T15342]  <TASK>
[  393.789204][T15342]  pcl818_detach+0x66/0xd0
[  393.791180][T15342]  comedi_device_detach_locked+0x178/0x750
[  393.793606][T15342]  comedi_unlocked_ioctl+0xcde/0x1020
[  393.795820][T15342]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  393.798220][T15342]  ? __lock_acquire+0xab9/0xd20
[  393.800280][T15342]  ? __fget_files+0x2a/0x420
[  393.802218][T15342]  ? __fget_files+0x2a/0x420
[  393.804169][T15342]  ? __fget_files+0x3a0/0x420
[  393.806221][T15342]  ? __fget_files+0x2a/0x420
[  393.808234][T15342]  ? bpf_lsm_file_ioctl+0x9/0x20
[  393.810404][T15342]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  393.812962][T15342]  __se_sys_ioctl+0xfc/0x170
[  393.814978][T15342]  do_syscall_64+0xfa/0x3b0
[  393.816967][T15342]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.819179][T15342]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.821829][T15342]  ? exc_page_fault+0x9f/0xf0
[  393.823889][T15342]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.826438][T15342] RIP: 0033:0x7f9a10d8ebe9
[  393.828381][T15342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  393.836628][T15342] RSP: 002b:00007f9a11c6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  393.840168][T15342] RAX: ffffffffffffffda RBX: 00007f9a10fb5fa0 RCX: 00007f9a10d8ebe9
[  393.843600][T15342] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  393.846949][T15342] RBP: 00007f9a10e11e19 R08: 0000000000000000 R09: 0000000000000000
[  393.850270][T15342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  393.853599][T15342] R13: 00007f9a10fb6038 R14: 00007f9a10fb5fa0 R15: 00007ffccc7091b8
[  393.856867][T15342]  </TASK>
[  393.858206][T15342] Modules linked in:
[  393.860760][T15342] ---[ end trace 0000000000000000 ]---
[  393.872538][T15342] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  393.875184][T15342] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f9 01 37 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 d8 01 37 f9 4d 8b 24 24 48 83 c3
[  393.884420][T15342] RSP: 0018:ffffc900065d7a60 EFLAGS: 00010206
[  393.887260][T15342] RAX: 0000000000000005 RBX: ffff88810ae15580 RCX: 0000000000080000
[  393.893340][T15342] RDX: ffffc90027988000 RSI: 00000000000003cd RDI: 00000000000003ce
[  393.916767][T15342] RBP: 0000000000000001 R08: ffff88810ebf892f R09: 1ffff11021d7f125
[  393.920441][T15342] R10: dffffc0000000000 R11: ffffffff88ebf250 R12: 0000000000000028
[  393.930030][T15342] R13: dffffc0000000000 R14: ffff88810ebf8800 R15: dffffc0000000000
[  393.933667][T15342] FS:  00007f9a11c6d6c0(0000) GS:ffff8881a3c23000(0000) knlGS:0000000000000000
[  393.938001][T15342] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  393.941190][T15342] CR2: 00007ffeb2f58ff8 CR3: 00000001069fc000 CR4: 00000000000006f0
[  393.946931][T15342] Kernel panic - not syncing: Fatal exception
[  393.950758][T15342] Kernel Offset: disabled
[  393.952664][T15342] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:46:07  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff84c5dd4f RBX=ffffc900046afb00 RCX=0000000000000000 RDX=ffff88810b6fb980
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900046af968
R8 =0000000000000000 R9 =ffffc900046afcf0 R10=ffffc900046afd30 R11=fffff520008d5fa8
R12=0000000000000000 R13=0000000000000000 R14=ffffc900046afba0 R15=dffffc0000000000
RIP=ffffffff81bfb051 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc6486326c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000003a030 CR3=0000000120bc0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=000055558ef0ae2d 000055558ef0add0 XMM03=000055558ef085e4 000055558ef085e0
XMM04=0000000000000000 000055558eefc498 XMM05=000055558ef141e9 000055558ef13d80
XMM06=000055558eefe904 000055558eefe900 XMM07=00019f9803020800 019f900304080001
XMM08=9f880303a0080001 9f80030880f80800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000fe1 RDI=0000000000000fe2 RBP=00000000000003f8 RSP=ffffc900065d7290
R8 =ffff888107fb8237 R9 =1ffff11020ff7046 R10=dffffc0000000000 R11=ffffffff854e7660
R12=dffffc0000000000 R13=ffffffff99af2916 R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e76dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9a11c6d6c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33423ffc CR3=00000001069fc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9a10f87498 00007f9a10f87470 XMM03=00007f9a10f874a8 00007f9a10f874a0
XMM04=00007f9a11aed100 00007f9a10f87460 XMM05=00007f9a10f87478 00007f9a10f874c0
XMM06=00007f9a10f874b8 00007f9a10f874b0 XMM07=00007f9a10f874a8 00007f9a10f874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f9a10e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
