last executing test programs:

4m37.401433065s ago: executing program 32 (id=138):
syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df30c", 0x20, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x6, 0x0, 0x0, {[@generic={0x3, 0x5, "5eee37"}, @exp_fastopen={0xfe, 0x7, 0xf989, "feff98"}]}}}}}}}}, 0x0)

4m17.495278151s ago: executing program 2 (id=429):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0xba}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m17.425521511s ago: executing program 2 (id=430):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='veno', 0x4)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

4m16.534715308s ago: executing program 2 (id=431):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/failslab/ignore-gfp-wait\x00', 0x1, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$proc_mixer(r2, &(0x7f0000000100)=[{'LINE3', @val={' \'', 'Mic Capture'}}, {'VIDEO', @val={' \'', 'Master'}}, {'ALTPCM', @val={' \'', 'Mic Capture Switch'}}], 0x7e)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

4m15.673380947s ago: executing program 2 (id=442):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)

4m15.673011901s ago: executing program 2 (id=443):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

4m15.225297043s ago: executing program 2 (id=450):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711074000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

4m15.19160086s ago: executing program 33 (id=450):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711074000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

3m34.31472147s ago: executing program 3 (id=1035):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)

3m34.263381708s ago: executing program 3 (id=1036):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x100, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0xfffff000, 0x1c, 0x5, 0x4, 0x5, 0x0, 0xfffffffe, 0x400007, 0x7, 0x2, 0x3, 0x1ff, 0x65884919, 0x7ff, 0x6, 0x1, 0xc, 0x3, 0x80000000, 0x9, 0x2, 0x6, 0x8b6, 0xb0e5, 0x5, 0x0, 0x0, 0xfff, 0x1, 0x5, 0x9]})

3m34.263014924s ago: executing program 3 (id=1037):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = socket$inet6(0xa, 0x80002, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

3m34.202101825s ago: executing program 3 (id=1038):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000640)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]})

3m34.112475408s ago: executing program 3 (id=1039):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100040aa7, 0xc0203)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc0585604, &(0x7f0000000100)={0x1000000})

3m33.616279617s ago: executing program 3 (id=1045):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='-bo', 0x3)

3m33.470371512s ago: executing program 34 (id=1045):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='-bo', 0x3)

2m36.705380957s ago: executing program 4 (id=1675):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8062, &(0x7f0000000240)={[{@gid}, {}]})

2m36.592505214s ago: executing program 4 (id=1676):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x45, &(0x7f0000000000), 0x4)

2m36.592165734s ago: executing program 4 (id=1677):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xc2, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)

2m36.591850817s ago: executing program 4 (id=1678):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x20849b, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

2m36.458881288s ago: executing program 4 (id=1679):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)

2m36.244013763s ago: executing program 4 (id=1680):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0x5bf}, {}]})

2m36.162595729s ago: executing program 35 (id=1680):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0x5bf}, {}]})

2m34.146426482s ago: executing program 6 (id=1681):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000003300)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x40, @private2, 0x3}, 0x1c, &(0x7f00000014c0)=[{&(0x7f00000010c0)="04", 0x1}], 0x1}}], 0x1, 0x202a804)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001100)={0x0, 0xd8b}, &(0x7f0000001680)=0x8)

2m34.063880866s ago: executing program 6 (id=1687):
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)

2m34.063730004s ago: executing program 6 (id=1688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb, 0x2}, 0x18}}, 0x0)

2m33.981809015s ago: executing program 6 (id=1689):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000300)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@discard_size={'discard', 0x3d, 0x8}}, {@usrquota}, {@quota}, {@uid={'uid', 0x3d, 0xee01}}, {@discard}]}, 0x21, 0x6182, &(0x7f0000001140)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0xa1c08, 0x0)

2m33.781410435s ago: executing program 6 (id=1692):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1}, 0x80d1)
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd12000000000014"], 0xfdef)

2m31.643011195s ago: executing program 6 (id=1717):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0xe4ce, &(0x7f0000000000)={[{@dax_never}, {@quota}], [{@dont_hash}]}, 0x3, 0x461, &(0x7f0000000d00)="$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")
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}, 0xa8}], 0x1, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x40000000015, 0x5, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000086a82, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000016c0)={'wlan0\x00', <r5=>0x0})
prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}}, 0x80)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x18, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x28008004)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
r8 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r8, 0x3554000)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2m31.537833785s ago: executing program 36 (id=1717):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0xe4ce, &(0x7f0000000000)={[{@dax_never}, {@quota}], [{@dont_hash}]}, 0x3, 0x461, &(0x7f0000000d00)="$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")
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
recvmmsg(r0, &(0x7f00000054c0)=[{{0x0, 0x0, 0x0}, 0xa8}], 0x1, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x40000000015, 0x5, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000086a82, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000016c0)={'wlan0\x00', <r5=>0x0})
prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}}, 0x80)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000540)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x18, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040090}, 0x28008004)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810)
r8 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r8, 0x3554000)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

2m31.047628592s ago: executing program 5 (id=1722):
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x74, 0x2a, 0x1, 0x70bd28, 0x25dfdbfb, "", [@nested={0x61, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237d"]}]}, 0x74}], 0x1, 0x0, 0x0, 0x2000}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x240, 0x310)
ioctl(r0, 0xc138fd02, &(0x7f0000000000)="0400000000000000000000003801")

2m30.974016622s ago: executing program 5 (id=1723):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x0, 0x1, 0x0, 0x4}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x2004c8c2)

2m30.924144634s ago: executing program 5 (id=1724):
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042)
writev(r0, &(0x7f0000000700)=[{&(0x7f00000002c0)="6de6149f921bbf", 0x7}, {0x0, 0x9f}], 0x2)

2m30.852028943s ago: executing program 5 (id=1725):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000440)={[{@fat=@check_normal}, {@rodir}, {@uni_xlate}, {@utf8}, {@numtail}, {@utf8}, {@utf8}, {@fat=@discard}, {@uni_xlate}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_winnt}, {@fat=@uid={'uid', 0x3d, 0xee01}}]}, 0x0, 0x2be, &(0x7f0000002880)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

2m30.743968924s ago: executing program 5 (id=1726):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082)
write$P9_RREAD(r0, &(0x7f0000000140)=ANY=[], 0x25)
r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x10180c9, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2m30.404467653s ago: executing program 5 (id=1727):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@report={0xb0, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x50801310198f26cd, {@in=@remote, @in=@multicast1, 0x7ff, 0x6, 0x4e20, 0x0, 0x0, 0xb0, 0x20, 0x8}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e22, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

2m30.25615081s ago: executing program 37 (id=1727):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@report={0xb0, 0x29, 0x1, 0x70bd2c, 0x25dfdbfe, {0x50801310198f26cd, {@in=@remote, @in=@multicast1, 0x7ff, 0x6, 0x4e20, 0x0, 0x0, 0xb0, 0x20, 0x8}}, [@algo_auth={0x48, 0x1, {{'blake2s-160-generic\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x4e21, 0x4e22, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

2m28.273961954s ago: executing program 0 (id=1736):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)

2m28.203747264s ago: executing program 0 (id=1737):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x58, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="6394bc11539d"}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

2m28.048854958s ago: executing program 0 (id=1738):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1})

2m27.870021529s ago: executing program 0 (id=1739):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2cd, &(0x7f0000000b80)="$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")
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x892, 0x0)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs\x00', 0x1ff)

2m27.75290389s ago: executing program 0 (id=1740):
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
keyctl$clear(0x7, r0)

2m27.404538836s ago: executing program 0 (id=1741):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @multicast2}}]}, 0xa8}}, 0x0)

2m27.302562263s ago: executing program 38 (id=1741):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @multicast2}}]}, 0xa8}}, 0x0)

1m4.233204259s ago: executing program 8 (id=2909):
r0 = memfd_create(&(0x7f0000000280)='-B\xd5N4:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc8<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUOMX\x164\xec\x06i\x85\x93\x87YB.e\xea2|A\x95\x05\xc3\x11\xde\xa0\x14*4\x83J\xa1\xddc\xde\x91 sO\xfb\xcc\r\xa8\x05\xa3\xab\xe6\xb5\xe4\x8b\x128\xa8\x05\xf9\f\xb4\x97\x1c\x82\xfd\x80O\x00\x00\x00\x00\x00\x00\x00', 0x7)
r1 = dup(r0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000002, 0x52, r1, 0x0)
rseq(0x0, 0x20, 0x0, 0x0)

1m4.228373301s ago: executing program 8 (id=2910):
syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x84, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0)

1m4.179011435s ago: executing program 8 (id=2912):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x4c}}, 0x0)
sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0x70bd2c}, 0x10}, 0x19}, 0x0)

1m4.081446628s ago: executing program 8 (id=2914):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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")
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x5, 0x8ffff)

1m3.560926215s ago: executing program 8 (id=2927):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080)

1m3.114697896s ago: executing program 8 (id=2929):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000140)={[{@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@noload}, {@abort}, {@lazytime}, {@nodiscard}]}, 0xfe, 0x482, &(0x7f0000000dc0)="$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")

1m3.019768321s ago: executing program 39 (id=2929):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000140)={[{@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@noload}, {@abort}, {@lazytime}, {@nodiscard}]}, 0xfe, 0x482, &(0x7f0000000dc0)="$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")

791.66291ms ago: executing program 9 (id=3899):
r0 = socket$unix(0x1, 0x1, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
splice(r0, 0x0, r1, 0x0, 0x7, 0x2)

791.22164ms ago: executing program 9 (id=3901):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r2)

650.530341ms ago: executing program 7 (id=3904):
r0 = socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
close(0x3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x2400e0d5)

650.301058ms ago: executing program 7 (id=3905):
r0 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)

561.34932ms ago: executing program 1 (id=3906):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1ac0400ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d"], 0xe0}], 0x1, 0x0, 0x0, 0x40000}, 0x40040)

561.197571ms ago: executing program 7 (id=3907):
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b5020000000000008500000083000000bc0900000000000055090100000000006a00000000000000bf91000000000000b7020000020000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

443.393482ms ago: executing program 7 (id=3908):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff0b7a0204be1486d8fe056406040c5c0009003f0006200a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160040030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x20000800, 0x0, 0xa0)

358.419474ms ago: executing program 7 (id=3909):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)=@multiplanar_mmap={0x2, 0x8, 0x4, 0x10, 0x9, {0x77359400}, {0x4, 0xc, 0x0, 0xc, 0xd7, 0x6, "fc395f4f"}, 0x200, 0x1, {0x0}, 0x40})

358.251032ms ago: executing program 7 (id=3910):
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902"], 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000000)=ANY=[], 0x4)

172.075198ms ago: executing program 1 (id=3911):
mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000240)=""/162, 0xa2}, {&(0x7f0000000700)=""/221, 0xdd}, {&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000940)=""/255, 0xff}], 0x4)

171.45541ms ago: executing program 9 (id=3912):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
readv(r0, &(0x7f0000000c00)=[{0x0}, {&(0x7f0000000700)=""/240, 0xf0}], 0x2)

171.375751ms ago: executing program 1 (id=3913):
memfd_create(&(0x7f00000000c0)='\xca\xa0}#\x16\xbf\xa2\b\xc9\xb3\x8bSc\xca\b>\x12^\xaa{\x02\x880\x0e\xe4\xfan \xf2}g~:I\xb5H^Nz\xe0i\x85Y\x13\xd2o\xc5\xab\xc7\rI$\xa2]\xd9\xbcC:i\x10\xfa\x98si\xba\xd2\x8d\x06\x7f\xa3\x93yq\xd4$\xd6\x84 \x1f\x16\xd9\"\x05\x85\f8\x91se\xc9\x12\xbcs\x95\xd2\x85\x01\x99Q\x1e\x96\x10!W4\xb6-\xd8ly\x04\xbc\xdf\xb9\x836\xab\x12\x90\xd9\xbb\x11\f\xf1t\xc3\x92\x8c\x0e\xd46@\x85\x9f*]\x80+\xe9\x85\xc3\xcb*\xe9V\xf3\x8a\xd1\xb6\x8c\x85\x03\x11\xdc\xc696\xf3@NRR_\x83r\xf9\x97\xdd\xd8M\xd1\xfe\xdf\xb84\xc1\x14\x1f\x1c3\xd1<t\xe2\x96\xcdM\xd0\xe4\x8b\xe6\xa8\xca\xd2\\\xabn0U\x0e\xf2H\xe2,LW\xbc\xd2D\xa7\xad\xcaS!\xb0\x86\xe2\x96\xdd\xa4\xda\xba\xcd\xaa\x81\x1bg\x1fJ\xfd\xb1gP:\xc4bl=\x8a\x82\xdb\x92o\xfc\xa7\x9d\x8e\x7f\xb4|\xc2(6', 0x3)

104.703096ms ago: executing program 9 (id=3914):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
shutdown(r0, 0x2)

104.461675ms ago: executing program 1 (id=3915):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
lsetxattr$system_posix_acl(0x0, &(0x7f00000002c0)='system.posix_acl_default\x00', 0x0, 0x24, 0x0)

38.494385ms ago: executing program 9 (id=3916):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500288537350d000300686173683a6d6163"], 0x5c}}, 0x4005800)

38.073494ms ago: executing program 9 (id=3917):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
r1 = socket$kcm(0x29, 0x0, 0x0)
ioctl$XFS_IOC_GETPARENTS(r1, 0xc028583e, &(0x7f0000000600)={{[0xca13, 0x4, 0x2, 0xe]}, 0x0, 0x3, 0x7fff, 0x0, &(0x7f0000000480)=[{{@_ha_fsid={[0x8, 0x7]}, {0x5, 0x3, 0x0, 0x1}}, 0x3, 0x0, '/dev/adsp1\x00'}, {{@align=0xf465, {0x9, 0xdd6, 0x6, 0x5}}, 0x0, 0x0, '\x00'}, {{@align=0x80000000, {0xd, 0x9, 0x6, 0x81}}, 0xffff, 0x0, '\x00'}, {{@_ha_fsid={[0x7, 0x9]}, {0x1, 0xd8, 0x8, 0x8}}, 0x9, 0x0, '-[}}#!\\)w.}\x00'}, {{@align=0x100000001, {0x5, 0x8, 0x8000, 0x9}}, 0x42c187cf, 0x0, '&,%}]\x00'}, {{@_ha_fsid={[0x7, 0xffffffff]}, {0x6f, 0x2, 0x3, 0x400}}, 0x8, 0x0, ')[%\x00'}, {{@_ha_fsid={[0x2, 0x5]}, {0x0, 0x6, 0x7e, 0x6}}, 0x4, 0x0, '\xe4\x00'}, {{@_ha_fsid={[0x38e3, 0xb]}, {0x100, 0x800, 0x8, 0xe56b}}, 0x700, 0x0, '*$\x00'}, {{@align=0xa7, {0x9, 0x1, 0x1ff, 0x100000001}}, 0x0, 0x0, '+[\'#[^\v&\x00'}]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000300004802c0001800c00010062697477697365001c0002800800014000000011080003403747000000000800024000000017050007406900000014000000110001000000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20008811}, 0x4000890)
ppoll(&(0x7f00000002c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18)
socket$kcm(0x29, 0x5, 0x0)
syz_io_uring_setup(0xf06, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0xffffffff, 0x51}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4110}, 0x1})
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_open_dev$loop(&(0x7f0000000040), 0x200000b1, 0x8a681)
fadvise64(r8, 0x9, 0x2, 0x4)
r9 = syz_open_dev$dvb_frontend(&(0x7f00000000c0), 0x4b162cd8, 0x141)
ioctl$FE_SET_PROPERTY(r9, 0x40086f52, &(0x7f0000000880)={0x11, &(0x7f0000000680)=[{0x35, '\x00', @data=0x8, 0x5}, {0x1, '\x00', @buffer={"ed14b64c32c433a0f7580f68b136a20b432b94be353ceff95292936edadaa19b", 0x20}, 0xc42}, {0x2, '\x00', @data=0x1, 0x8}, {0x8, '\x00', @buffer={"e4881f0b8591b382ae5e2d4b5b0a671f8f98283935b054dfd48ad9249f342431", 0x20}, 0xcc}, {0x2a, '\x00', @st={0x4, [{0x2, @svalue=0x551a4e47}, {0x0, @svalue=0x57000000}, {0x1}, {0x3, @svalue=0x3}]}, 0xf86d}]})
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[], 0xfce1)
ioctl$TCFLSH(r6, 0x540b, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

37.930832ms ago: executing program 1 (id=3918):
ppoll(&(0x7f0000000840)=[{0xffffffffffffffff, 0x4080}], 0x0, 0x0, &(0x7f0000000280)={[0x9]}, 0x0)

0s ago: executing program 1 (id=3919):
r0 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x2000000, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1)

kernel console output (not intermixed with test programs):

[T11419] loop8: detected capacity change from 0 to 64
[  238.776481][T11419] syz.8.2149: attempt to access beyond end of device
[  238.776481][T11419] loop8: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  238.781804][T11419] Buffer I/O error on dev loop8, logical block 512, async page read
[  238.792321][T11419] syz.8.2149: attempt to access beyond end of device
[  238.792321][T11419] loop8: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  238.798586][T11419] Buffer I/O error on dev loop8, logical block 56576, async page read
[  238.886056][T11424] loop8: detected capacity change from 0 to 256
[  238.893624][   T34] kauditd_printk_skb: 4 callbacks suppressed
[  238.893637][   T34] audit: type=1800 audit(1787670997.400:90): pid=11424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2151" name="file2" dev="loop8" ino=1048709 res=0 errno=0
[  239.074246][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  239.095785][T11434] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2156'.
[  239.124047][   T33] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  239.130296][   T33] asix 10-1:0.188: probe with driver asix failed with error -71
[  239.137900][   T33] usb 10-1: USB disconnect, device number 7
[  239.466301][T11459] hsr_slave_0: left promiscuous mode
[  239.469024][T11459] hsr_slave_1: left promiscuous mode
[  239.521744][T11460] bond0: entered promiscuous mode
[  239.524324][T11460] bond_slave_0: entered promiscuous mode
[  239.530323][T11460] bond_slave_1: entered promiscuous mode
[  239.536797][T11460] gretap0: entered promiscuous mode
[  239.541547][T11460] dummy0: entered promiscuous mode
[  239.560584][T11460] debugfs: 'hsr0' already exists in 'hsr'
[  239.562881][T11460] Cannot create hsr debugfs directory
[  239.574502][T11459] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2168'.
[  239.600209][T11459] dummy0 (unregistering): left promiscuous mode
[  239.617475][T11464] netlink: 'syz.8.2169': attribute type 12 has an invalid length.
[  239.623953][T11464] netlink: 'syz.8.2169': attribute type 29 has an invalid length.
[  239.629892][T11464] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2169'.
[  239.634171][T11464] netlink: 51 bytes leftover after parsing attributes in process `syz.8.2169'.
[  240.075157][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  240.301464][   T10] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  240.453977][   T10] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  240.456979][   T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.470269][   T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  240.482616][   T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.491389][   T10] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  240.494858][   T10] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  240.500722][   T10] usb 10-1: Product: syz
[  240.502134][   T10] usb 10-1: Manufacturer: syz
[  240.534756][   T10] cdc_wdm 10-1:1.0: skipping garbage
[  240.538945][   T10] cdc_wdm 10-1:1.0: skipping garbage
[  240.542448][   T10] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22
[  240.604937][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2194'.
[  240.750272][T10379] usb 10-1: USB disconnect, device number 8
[  240.828688][T11531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2199'.
[  240.922155][ T5790] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  241.105414][ T5790] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  241.109627][ T5790] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  241.113647][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  241.116906][ T5790] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  241.120780][ T5790] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  241.124798][ T5790] usb 9-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  241.129746][ T5790] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.138288][T11525] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  241.141445][T11525] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  241.153963][ T5790] pl2303 9-1:1.0: pl2303 converter detected
[  241.182777][ T5790] usb 9-1: pl2303 converter now attached to ttyUSB0
[  241.470271][T11525] pl2303 9-1:1.0: pl2303_vendor_write - failed to write [0007]: -110
[  241.480149][T11525] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32
[  241.483063][T11525] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  241.494109][T11525] pl2303 9-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  241.505091][T11525] pl2303 ttyUSB0: failed to submit interrupt urb: -90
[  241.511227][ T5790] usb 9-1: USB disconnect, device number 5
[  241.537980][T11533] loop9: detected capacity change from 0 to 32768
[  241.561177][ T5790] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  241.575764][ T5790] pl2303 9-1:1.0: device disconnected
[  241.666015][T11537] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[  241.673413][T11537] PKCS7: Only support pkcs7_signedData type
[  241.774146][T11542] CIFS: Attempting to mount //127.0.0.1/share
[  241.778562][T11545] netlink: 'syz.9.2206': attribute type 1 has an invalid length.
[  241.778591][T11545] netlink: 200 bytes leftover after parsing attributes in process `syz.9.2206'.
[  241.778604][T11545] netlink: 'syz.9.2206': attribute type 1 has an invalid length.
[  241.778615][T11545] netlink: 29 bytes leftover after parsing attributes in process `syz.9.2206'.
[  242.173219][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  242.236979][T11562] loop9: detected capacity change from 0 to 4096
[  242.277627][T11564] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  242.612524][T11542] CIFS: VFS: cifs_mount failed w/return code = -112
[  242.802143][T11575] loop9: detected capacity change from 0 to 32768
[  242.879463][T11575] JBD2: Ignoring recovery information on journal
[  242.951708][T11575] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  243.037848][T11575] (syz.9.2216,11575,0):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1
[  243.110854][T10198] ocfs2: Unmounting device (7,9) on (node local)
[  243.251068][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  244.338068][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  245.248976][T11652] loop9: detected capacity change from 0 to 1024
[  245.312701][T11652] hfsplus: walked past end of dir
[  245.436357][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  245.602017][T11668] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2263'.
[  245.726559][T11678] netlink: 'syz.7.2268': attribute type 20 has an invalid length.
[  245.730139][T11678] IPv6: NLM_F_CREATE should be specified when creating new route
[  245.972930][T11672] loop9: detected capacity change from 0 to 32768
[  245.981412][T11672] jfs_mount: Mount Failure: superblock is corrupt!
[  245.990497][T11672] Mount JFS Failure: -22
[  246.212949][T11702] netlink: 'syz.7.2280': attribute type 3 has an invalid length.
[  246.485077][T11698] loop9: detected capacity change from 0 to 131072
[  246.524652][T11698] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  246.535386][T11698] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  246.552428][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  247.245072][T11714] loop9: detected capacity change from 0 to 131072
[  247.248713][T11714] F2FS-fs (loop9): Invalid log sectorsize (67108873)
[  247.251016][T11714] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  247.254203][T11714] F2FS-fs (loop9): invalid crc value
[  247.298815][T11714] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  247.313590][T11714] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  247.316233][T11714] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  247.325396][   T34] audit: type=1800 audit(1787671005.603:91): pid=11714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2283" name="file1" dev="loop9" ino=7 res=0 errno=0
[  247.652466][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  248.128720][T11769] loop8: detected capacity change from 0 to 512
[  248.135790][T11769] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  248.154793][T11774] netlink: 324 bytes leftover after parsing attributes in process `syz.9.2308'.
[  248.178674][T11769] EXT4-fs (loop8): 1 truncate cleaned up
[  248.183166][T11769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.205381][T11777] loop9: detected capacity change from 0 to 1024
[  248.333093][T10123] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.408707][T11788] xt_recent: hitcount (16777216) is larger than allowed maximum (65535)
[  248.732372][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2329'.
[  248.767643][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  248.812543][T11820] loop9: detected capacity change from 0 to 4096
[  248.835158][T11820] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  248.839253][T11820] ntfs3(loop9): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  248.869682][T11820] ntfs3(loop9): ino=19, mi_enum_attr
[  248.872942][T11820] ntfs3(loop9): Failed to load root (-22).
[  248.990934][T11830] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2338'.
[  249.308012][T11837] ieee802154 phy0 wpan0: encryption failed: -90
[  249.631861][T11850] loop9: detected capacity change from 0 to 8
[  249.638947][T11850] SQUASHFS error: zlib decompression failed, data probably corrupt
[  249.646131][T11850] SQUASHFS error: Failed to read block 0x9b: -5
[  249.648367][T11850] SQUASHFS error: Unable to read metadata cache entry [99]
[  249.652963][T11850] SQUASHFS error: Unable to read inode 0x127
[  249.753693][T11858] loop9: detected capacity change from 0 to 512
[  249.759946][T11858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  249.765920][T11858] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended
[  249.790997][T11858] Quota error (device loop9): do_insert_tree: Free block already used in tree: block 1
[  249.800375][T11858] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota
[  249.803885][T11858] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.2349: Failed to acquire dquot type 1
[  249.807756][T11858] loop9: lost filesystem error report for type 5 error -5
[  249.808122][T11858] EXT4-fs (loop9): Remounting filesystem read-only
[  249.810890][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  249.810903][    C0] EXT4-fs (loop9): initial error at time 1787671007: ext4_acquire_dquot:7041
[  249.810916][    C0] EXT4-fs (loop9): last error at time 1787671007: ext4_acquire_dquot:7041
[  249.826227][T11858] EXT4-fs (loop9): 1 truncate cleaned up
[  249.828854][T11858] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.853382][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.885433][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  249.914240][T11862] ipt_REJECT: TCP_RESET invalid for non-tcp
[  250.317440][T10226] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  250.507281][T10226] usb 9-1: unable to get BOS descriptor or descriptor too short
[  250.513752][T10226] usb 9-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16
[  250.523063][T10226] usb 9-1: config 66 interface 0 has no altsetting 0
[  250.529622][T10226] usb 9-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  250.535339][T10226] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.539873][T10226] usb 9-1: Product: syz
[  250.541801][T10226] usb 9-1: Manufacturer: syz
[  250.544921][T10226] usb 9-1: SerialNumber: syz
[  250.550794][T11871] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  250.780983][T10226] ati_remote2 9-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint
[  250.788350][T10226] usb 9-1: USB disconnect, device number 6
[  251.005927][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  251.240547][T11893] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.253118][T11893] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.539735][T11896] openvswitch: netlink: IPv4 tunnel dst address is zero
[  251.768826][T11912] cgroup: Invalid name
[  251.803964][T11915] loop8: detected capacity change from 0 to 128
[  251.807661][T11915] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  251.824393][T11915] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  252.138126][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  252.790786][T10123] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  252.829487][T11933] netlink: 'syz.7.2380': attribute type 1 has an invalid length.
[  252.841793][T11933] netlink: 64851 bytes leftover after parsing attributes in process `syz.7.2380'.
[  253.021337][T11944] loop8: detected capacity change from 0 to 512
[  253.024444][T11944] EXT4-fs: Ignoring removed oldalloc option
[  253.029943][T11944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  253.032563][T11944] System zones: 1-12
[  253.041629][T11944] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #12: comm syz.8.2385: missing EA_INODE flag
[  253.047202][T11944] loop8: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  253.052928][T11944] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2385: error while reading EA inode 12 err=-117
[  253.055891][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  253.055902][    C1] EXT4-fs (loop8): initial error at time 1787671010: ext4_xattr_inode_iget:441: inode 12
[  253.055915][    C1] EXT4-fs (loop8): last error at time 1787671010: ext4_xattr_inode_iget:441: inode 12
[  253.070448][T11944] loop8: lost filesystem error report for type 5 error -117
[  253.074742][T11944] EXT4-fs (loop8): 1 orphan inode deleted
[  253.080009][T11944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.089287][T11944] fscrypt (loop8, inode 15): Unsupported log2_data_unit_size in encryption policy: 232
[  253.113876][T10123] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.234186][T11952] netlink: 'syz.8.2388': attribute type 2 has an invalid length.
[  253.238782][T11952] netlink: 'syz.8.2388': attribute type 2 has an invalid length.
[  253.250496][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  254.373993][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  254.478877][T12006] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  254.593446][T12010] loop8: detected capacity change from 0 to 128
[  254.608131][T12010] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  254.619081][T12010] hpfs: filesystem error: improperly stopped
[  254.633947][T12010] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  254.636502][T12010] hpfs: You really don't want any checks? You are crazy...
[  254.647111][T12010] hpfs: Code page index out of array
[  254.653683][T12010] hpfs: code page support is disabled
[  254.657846][T12010] hpfs: hpfs_map_4sectors(): unaligned read
[  254.661440][T12010] hpfs: hpfs_map_4sectors(): unaligned read
[  254.667060][T12010] hpfs: filesystem error: unable to find root dir
[  254.803988][T10379] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  254.823404][T10379] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  254.833514][T10379] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  254.837745][T10379] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  254.846282][T10379] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  254.851032][T10379] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  254.856266][T10379] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  254.863183][T10379] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  254.867990][T10379] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  254.873646][T10379] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0
[  254.893164][T10379] hid-generic 0006:0008:0008.0009: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1
[  255.041007][T12037] loop9: detected capacity change from 0 to 128
[  255.046793][T12037] ufs: You didn't specify the type of your ufs filesystem
[  255.046793][T12037] 
[  255.046793][T12037] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  255.046793][T12037] 
[  255.046793][T12037] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  255.053831][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2429'.
[  255.101126][T12037] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  255.170654][T12047] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff
[  255.228188][T12053] loop9: detected capacity change from 0 to 512
[  255.261529][T12053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.265502][T12053] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.308415][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.366042][T12062] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  255.367248][T12045] loop8: detected capacity change from 0 to 32768
[  255.498634][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  255.528531][T12076] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2447'.
[  255.586719][T12084] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.2445'.
[  255.759562][ T5646] Bluetooth: hci0: command 0x1407 tx timeout
[  255.762267][ T5021] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  255.859709][T12111] loop9: detected capacity change from 0 to 512
[  255.867077][T12111] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  255.890325][T12111] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.2462: inode has both inline data and extents flags
[  255.895090][T12111] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  255.895367][T12111] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2462: couldn't read orphan inode 15 (err -117)
[  255.901981][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  255.901992][    C1] EXT4-fs (loop9): initial error at time 1787671013: ext4_orphan_get:1399: inode 15
[  255.902006][    C1] EXT4-fs (loop9): last error at time 1787671013: ext4_orphan_get:1399: inode 15
[  255.910166][T12111] loop9: lost filesystem error report for type 5 error -117
[  255.911130][T12111] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.935900][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.173264][T12132] loop9: detected capacity change from 0 to 32768
[  256.182975][T12132] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[  256.187492][T12132] JBD2: Ignoring recovery information on journal
[  256.211132][T12132] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  256.282378][T12132] syz.9.2471 (12132) used greatest stack depth: 20200 bytes left
[  256.326488][T10198] ocfs2: Unmounting device (7,9) on (node local)
[  256.396189][T12136] netdevsim netdevsim9 netdevsim0: entered promiscuous mode
[  256.634639][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  256.722628][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  256.725293][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  256.746095][T12161] Cannot find add_set index 0 as target
[  256.780524][T12165] netlink: 'syz.7.2486': attribute type 21 has an invalid length.
[  256.783785][T12165] netlink: 'syz.7.2486': attribute type 1 has an invalid length.
[  256.787813][T12165] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2486'.
[  256.928526][T12163] loop9: detected capacity change from 0 to 32768
[  256.930637][T12178] openvswitch: netlink: IP tunnel dst address not specified
[  256.933853][T12163] (syz.9.2485,12163,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  256.935020][T12178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.960110][T12163] (syz.9.2485,12163,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  256.977600][T12163] JBD2: Ignoring recovery information on journal
[  257.017134][T12163] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  257.108449][T12192] loop8: detected capacity change from 0 to 2048
[  257.139674][T12192] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  257.144171][T10198] ocfs2: Unmounting device (7,9) on (node local)
[  257.169068][T12192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.291944][T12206] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2505'.
[  257.511664][T12214] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002
[  257.749075][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  257.760023][T10379] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  257.922711][T10379] usb 10-1: Using ep0 maxpacket: 32
[  257.926906][T10379] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  257.930309][T10379] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.934455][T10379] usb 10-1: config 0 descriptor??
[  258.160636][T10379] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  258.164779][T10379] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  258.169350][T10379] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  258.172668][T10379] usb 10-1: media controller created
[  258.185478][T10379] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  258.305036][T12216] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.388741][T10379] az6027: usb out operation failed. (-71)
[  258.399226][T10379] az6027: usb out operation failed. (-71)
[  258.405186][T10379] stb0899_attach: Driver disabled by Kconfig
[  258.409603][T10379] az6027: no front-end attached
[  258.409603][T10379] 
[  258.420611][T10379] az6027: usb out operation failed. (-71)
[  258.423065][T10379] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  258.431513][T10379] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input15
[  258.449065][T10379] dvb-usb: schedule remote query interval to 400 msecs.
[  258.459629][T10379] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  258.464948][T10379] usb 10-1: USB disconnect, device number 9
[  258.590138][T10379] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  258.637981][T12219] loop8: detected capacity change from 0 to 32768
[  258.885625][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  259.448584][T10226] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  259.611063][T10226] usb 10-1: Using ep0 maxpacket: 8
[  259.620813][T10226] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  259.627977][T10226] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.632285][T10226] usb 10-1: Product: syz
[  259.635496][T10226] usb 10-1: Manufacturer: syz
[  259.637023][T10226] usb 10-1: SerialNumber: syz
[  259.644928][T10226] usb 10-1: config 0 descriptor??
[  259.653528][T10226] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  259.735137][T12246] loop8: detected capacity change from 0 to 32768
[  259.741863][T12246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2522 (12246)
[  259.779600][T12246] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  259.783415][T12246] BTRFS info (device loop8): using crc32c checksum algorithm
[  259.827020][T12246] BTRFS info (device loop8): enabling ssd optimizations
[  259.830073][T12246] BTRFS info (device loop8): turning on async discard
[  259.832818][T12246] BTRFS info (device loop8): enabling free space tree
[  259.835535][T12246] BTRFS info (device loop8): use lzo compression, level 1
[  259.869294][T10123] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  260.006828][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  260.318580][T10226] gspca_sonixj: reg_w1 err -71
[  260.320213][T10226] sonixj 10-1:0.0: probe with driver sonixj failed with error -71
[  260.337709][T10226] usb 10-1: USB disconnect, device number 10
[  260.347992][ T5791] udevd[5791]: setting mode of /dev/bus/usb/010/010 to 020664 failed: No such file or directory
[  260.352662][ T5791] udevd[5791]: setting owner of /dev/bus/usb/010/010 to uid=0, gid=0 failed: No such file or directory
[  261.083386][T12303] loop9: detected capacity change from 0 to 40427
[  261.086422][T12303] F2FS-fs (loop9): Small segment_count (9 < 1 * 24)
[  261.088817][T12303] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  261.126902][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  261.150874][T12303] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  261.164341][T12303] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  261.166712][T12303] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  261.385656][T12309] loop9: detected capacity change from 0 to 2048
[  261.392302][T12309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.639889][T12327] loop9: detected capacity change from 0 to 512
[  261.642772][T12327] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  261.647919][T12327] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  261.650421][T12327] System zones: 1-12
[  261.651716][T12327] EXT4-fs (loop9): orphan cleanup on readonly fs
[  261.658645][T12327] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #11: comm syz.9.2550: attempt to clear invalid blocks 1024 len 1
[  261.662698][T12327] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  261.665891][T12327] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2550: bg 0: block 361: padding at end of block bitmap is not set
[  261.668770][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  261.668780][    C0] EXT4-fs (loop9): initial error at time 1787671018: ext4_clear_blocks:876: inode 11
[  261.668792][    C0] EXT4-fs (loop9): last error at time 1787671018: ext4_clear_blocks:876: inode 11
[  261.684912][T12327] loop9: lost filesystem error report for type 5 error -117
[  261.685151][T12327] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  261.690318][T12327] loop9: lost filesystem error report for type 5 error -117
[  261.690616][T12327] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2550: invalid indirect mapped block 1811939328 (level 0)
[  261.697268][T12327] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  261.697520][T12327] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2550: invalid indirect mapped block 2 (level 2)
[  261.705854][T12327] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  261.706161][T12327] EXT4-fs (loop9): 1 truncate cleaned up
[  261.713318][T12327] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  261.721348][T12327] EXT4-fs (loop9): ext4_remount: Checksum for group 0 failed (17031!=33349)
[  261.724762][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2551'.
[  261.757608][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  262.139010][T12368] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2570'.
[  262.143052][T12371] loop8: detected capacity change from 0 to 512
[  262.151789][T12371] EXT4-fs: Ignoring removed nomblk_io_submit option
[  262.175986][T12371] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  262.201586][T12371] EXT4-fs (loop8): 1 truncate cleaned up
[  262.216315][T12371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.253476][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  262.330111][T10123] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.449912][T12388] netlink: 'syz.8.2577': attribute type 1 has an invalid length.
[  262.941471][T10379] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  262.969601][T12396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2581'.
[  263.102290][T10379] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  263.106079][T10379] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  263.110502][T10379] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[  263.114258][T10379] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.123045][T10379] spcp8x5 9-1:1.0: SPCP8x5 converter detected
[  263.132930][T10379] usb 9-1: SPCP8x5 converter now attached to ttyUSB0
[  263.390414][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  263.400354][T12407] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  263.531360][T12390] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  263.534693][T12390] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[  263.540081][T12390] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  263.752105][T12390] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  263.758492][T10226] usb 9-1: USB disconnect, device number 7
[  263.776623][T10226] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  263.779494][T10226] spcp8x5 9-1:1.0: device disconnected
[  264.195770][T12419] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96
[  264.505717][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  265.136240][  T241] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  265.297800][  T241] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.301422][  T241] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  265.304283][  T241] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.308703][  T241] usb 9-1: config 0 descriptor??
[  265.316674][  T241] pwc: Askey VC010 type 2 USB webcam detected.
[  265.632181][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  265.892006][  T241] pwc: recv_control_msg error -32 req 02 val 2b00
[  265.899537][  T241] pwc: recv_control_msg error -32 req 02 val 2700
[  265.902259][  T241] pwc: recv_control_msg error -32 req 02 val 2c00
[  265.905459][  T241] pwc: recv_control_msg error -32 req 04 val 1000
[  265.908362][  T241] pwc: recv_control_msg error -32 req 04 val 1300
[  265.911087][  T241] pwc: recv_control_msg error -32 req 04 val 1400
[  265.914089][  T241] pwc: recv_control_msg error -32 req 02 val 2000
[  265.916957][  T241] pwc: recv_control_msg error -32 req 02 val 2100
[  265.920023][  T241] pwc: recv_control_msg error -32 req 04 val 1500
[  265.922694][  T241] pwc: recv_control_msg error -32 req 02 val 2500
[  266.147849][  T241] pwc: recv_control_msg error -71 req 02 val 2600
[  266.150989][  T241] pwc: recv_control_msg error -71 req 02 val 2900
[  266.154298][  T241] pwc: recv_control_msg error -71 req 02 val 2800
[  266.157221][  T241] pwc: recv_control_msg error -71 req 04 val 1100
[  266.161473][  T241] pwc: recv_control_msg error -71 req 04 val 1200
[  266.172945][  T241] pwc: Registered as video103.
[  266.176429][  T241] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input17
[  266.190496][  T241] usb 9-1: USB disconnect, device number 8
[  266.402043][T10226] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  266.566876][T10226] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  266.570651][T10226] usb 10-1: config 1 has no interface number 0
[  266.573239][T10226] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.578694][T10226] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  266.582357][T10226] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  266.590891][T10226] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  266.601689][T10226] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.606026][T10226] usb 10-1: Product: syz
[  266.609307][T10226] usb 10-1: Manufacturer: syz
[  266.610802][T10226] usb 10-1: SerialNumber: syz
[  266.758700][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  266.986932][T12479] loop8: detected capacity change from 0 to 4096
[  267.159392][T12479] ftl_cs: FTL header not found.
[  267.250975][T12479] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096]
[  267.500682][T10226] cdc_ncm 10-1:1.1: bind() failure
[  267.503279][T10226] mos7720 10-1:1.1: required endpoints missing
[  267.727704][T10226] usb 10-1: USB disconnect, device number 11
[  267.885096][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  268.252551][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2629'.
[  268.256434][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2629'.
[  268.783857][ T5790] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  268.957232][ T5790] usb 9-1: Using ep0 maxpacket: 16
[  268.964813][ T5790] usb 9-1: config index 0 descriptor too short (expected 51443, got 18)
[  268.977945][ T5790] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  268.985628][ T5790] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.990363][ T5790] usb 9-1: Product: syz
[  268.995447][ T5790] usb 9-1: Manufacturer: syz
[  269.000584][ T5790] usb 9-1: SerialNumber: syz
[  269.011399][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  269.018731][ T5790] r8152-cfgselector 9-1: Unknown version 0x0000
[  269.022995][ T5790] r8152-cfgselector 9-1: config 0 descriptor??
[  269.168722][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2648'.
[  269.488585][T12544] loop8: detected capacity change from 0 to 128
[  269.570664][   T34] audit: type=1800 audit(1787671026.181:92): pid=12544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2642" name="file2" dev="loop8" ino=1048710 res=0 errno=0
[  269.583450][T12562] tipc: Started in network mode
[  269.585058][T12562] tipc: Node identity 7f000001, cluster identity 4711
[  269.587964][T12562] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  269.705551][T10379] r8152-cfgselector 9-1: USB disconnect, device number 9
[  269.872743][T12578] openvswitch: netlink: Actions may not be safe on all matching packets
[  270.033421][T12592] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  270.046289][T12592] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  270.068009][T12584] loop9: detected capacity change from 0 to 32768
[  270.096406][T12584] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  270.132386][T10198] ocfs2: Unmounting device (7,9) on (node local)
[  270.148873][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  270.281919][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2671'.
[  270.454595][T12624] openvswitch: netlink: Message has 8 unknown bytes.
[  270.537646][T12628] loop9: detected capacity change from 0 to 2048
[  270.558648][T12628] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.564329][   T34] audit: type=1800 audit(1787671027.104:93): pid=12628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2680" name="file1" dev="loop9" ino=15 res=0 errno=0
[  270.583648][T12628] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.971670][T12626] loop8: detected capacity change from 0 to 131072
[  270.975888][T12626] xfs: Deprecated parameter 'ikeep'
[  270.977934][T12626] XFS: ikeep mount option is deprecated.
[  271.024013][T12626] XFS (loop8): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  271.086191][T12626] XFS (loop8): Starting recovery (logdev: internal)
[  271.109807][T12626] XFS (loop8): Ending recovery (logdev: internal)
[  271.160176][T10123] XFS (loop8): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  271.275532][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  271.418729][T12656] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2688'.
[  271.455127][T12658] loop9: detected capacity change from 0 to 512
[  271.489341][T12658] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.493900][T12658] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.500262][T12658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  271.503647][T12658] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000.
[  271.518887][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.590864][T12664] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2690'.
[  271.684648][T12668] loop8: detected capacity change from 0 to 8192
[  271.731391][T12668]  loop8: [POWERTEC]
[  271.814327][T12678] 9p: Unknown access argument 18446744073709551615: -34
[  272.057342][   T32] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  272.213254][T12695] loop8: detected capacity change from 0 to 128
[  272.390859][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  272.436066][   T32] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  272.440307][   T32] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  272.443874][   T32] usb 10-1: config 1 has no interface number 0
[  272.446040][   T32] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.449610][   T32] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  272.452561][   T32] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  272.458754][   T32] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  272.462022][   T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.464843][   T32] usb 10-1: Product: syz
[  272.466308][   T32] usb 10-1: Manufacturer: syz
[  272.468762][   T32] usb 10-1: SerialNumber: syz
[  273.411252][T12715] overlayfs: failed to clone upperpath
[  273.485141][   T32] cdc_ncm 10-1:1.1: bind() failure
[  273.491803][   T32] mos7720 10-1:1.1: required endpoints missing
[  273.528135][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  273.706424][ T5790] usb 10-1: USB disconnect, device number 12
[  274.091148][T12748] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2725'.
[  274.207000][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2728'.
[  274.644020][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  275.375239][ T5021] Bluetooth: hci0: unexpected event for opcode 0x0c23
[  275.537745][T12799] netlink: 'syz.7.2747': attribute type 23 has an invalid length.
[  275.680311][T12809] netlink: 'syz.9.2752': attribute type 4 has an invalid length.
[  275.729213][T12809] netlink: 'syz.9.2752': attribute type 4 has an invalid length.
[  275.781715][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  275.802265][T12813] netlink: 51 bytes leftover after parsing attributes in process `syz.9.2754'.
[  275.899039][T12819] ip6gre1: entered allmulticast mode
[  275.910105][   T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  275.958185][T12823] sch_fq: defrate 0 ignored.
[  276.166584][  T241] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  276.198371][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2765'.
[  276.386637][T12843] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2769'.
[  276.389535][  T241] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.394476][  T241] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.397677][  T241] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  276.401501][  T241] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.405821][  T241] usb 10-1: config 0 descriptor??
[  276.851923][  T241] playstation 0003:054C:0DF2.000A: reserved main item tag 0xe
[  276.856436][  T241] playstation 0003:054C:0DF2.000A: bogus close delimiter
[  276.858770][  T241] playstation 0003:054C:0DF2.000A: item 0 0 2 10 parsing failed
[  276.861963][  T241] playstation 0003:054C:0DF2.000A: Parse failed
[  276.864176][  T241] playstation 0003:054C:0DF2.000A: probe with driver playstation failed with error -22
[  276.896911][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  276.960800][T12858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.974440][T12858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  277.069109][T10226] usb 10-1: USB disconnect, device number 13
[  277.533432][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2779'.
[  277.536498][T12864] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2779'.
[  277.710114][T12877] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2782'.
[  277.773032][T12879] IPv6: NLM_F_CREATE should be specified when creating new route
[  278.014166][T12890] fuse: fd is not a fuse device
[  278.023645][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  278.474336][T12896] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2792'.
[  279.034171][T12910] loop9: detected capacity change from 0 to 32768
[  279.056446][T12910] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  279.103208][T12910] XFS (loop9): Ending clean mount
[  279.131275][T10198] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  279.157149][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  279.392124][T12950] loop9: detected capacity change from 0 to 1024
[  279.400686][  T241] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  279.489803][T12960] loop9: detected capacity change from 0 to 2048
[  279.494345][T12960] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  279.563602][  T241] usb 9-1: Using ep0 maxpacket: 32
[  279.567819][  T241] usb 9-1: unable to get BOS descriptor or descriptor too short
[  279.571186][  T241] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  279.574913][  T241] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  279.579678][  T241] usb 9-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40
[  279.582492][  T241] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.587437][  T241] usb 9-1: Product: syz
[  279.588794][  T241] usb 9-1: Manufacturer: syz
[  279.590301][  T241] usb 9-1: SerialNumber: syz
[  279.625757][  T241] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[  279.642018][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  279.810619][   T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  279.820695][  T241] usb 9-1: USB disconnect, device number 10
[  279.994764][   T10] usb 10-1: Using ep0 maxpacket: 32
[  279.999262][   T10] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  280.003234][   T10] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  280.007333][   T10] usb 10-1: config 0 interface 0 has no altsetting 0
[  280.013086][   T10] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  280.017627][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.020938][   T10] usb 10-1: Product: syz
[  280.022843][   T10] usb 10-1: Manufacturer: syz
[  280.024862][   T10] usb 10-1: SerialNumber: syz
[  280.029607][   T10] usb 10-1: config 0 descriptor??
[  280.276594][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  280.449736][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  280.477144][   T10] gs_usb 10-1:0.0: Configuring for 1 interfaces
[  280.514308][T12997] netlink: 'syz.8.2837': attribute type 4 has an invalid length.
[  280.694404][   T10] gs_usb 10-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  280.697330][   T10] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -71
[  280.703360][   T10] usb 10-1: USB disconnect, device number 14
[  280.856361][T13007] loop8: detected capacity change from 0 to 32768
[  280.868360][T13007] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  280.887021][T13007] XFS (loop8): Ending clean mount
[  280.908706][T10123] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  280.946790][T13026] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2847'.
[  280.950403][T13026] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2847'.
[  281.002911][T13027] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2847'.
[  281.017569][T13027] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2847'.
[  281.338869][T13040] netlink: 'syz.9.2853': attribute type 4 has an invalid length.
[  281.346597][T13040] netlink: 'syz.9.2853': attribute type 4 has an invalid length.
[  281.406106][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  281.486117][T13050] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2858'.
[  282.030735][T13055] loop8: detected capacity change from 0 to 131072
[  282.035001][T13055] F2FS-fs (loop8): Wrong secs_per_zone / total_sections (512, 24)
[  282.038135][T13055] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  282.041356][T13055] F2FS-fs (loop8): Test dummy encryption mode enabled
[  282.045155][T13055] F2FS-fs (loop8): invalid crc value
[  282.091098][T13055] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  282.099198][T13055] loop8: lost filesystem error report for type 5 error -117
[  282.103331][T13055] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  282.114692][T13055] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0
[  282.117850][T13055] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  282.122062][T13055] F2FS-fs (loop8): Start checkpoint disabled!
[  282.135297][T13055] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0
[  282.139160][T13055] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  282.142100][T13055] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  282.529507][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  282.546892][T13075] netlink: 'syz.7.2869': attribute type 3 has an invalid length.
[  282.634428][T13080] loop9: detected capacity change from 0 to 128
[  282.668325][T13080] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  282.681702][T13080] ext4 filesystem being mounted at /315/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  282.710433][T13080] syz.9.2871 (pid 13080) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  282.770758][T10198] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  282.927317][T13092] loop8: detected capacity change from 0 to 8192
[  282.933210][T13092] vfat: Unknown parameter './file0'
[  283.656156][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  283.774257][T13172] loop9: detected capacity change from 0 to 2048
[  283.802684][T13172] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.821360][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.915504][T13178] gadgetfs: bound to dummy_udc driver
[  284.010358][T13170] loop8: detected capacity change from 0 to 40427
[  284.040531][T13170] F2FS-fs (loop8): invalid crc value
[  284.047544][T13180] loop9: detected capacity change from 0 to 4096
[  284.051505][T13180] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[  284.058743][T13180] ntfs3(loop9): ino=3, mi_enum_attr
[  284.062111][T13180] ntfs3(loop9): Failed to load $Volume (-22).
[  284.111786][T13170] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  284.121332][T13183] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  284.142760][T13183] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.2919: bad orphan inode 11
[  284.158445][T13183] loop9: lost filesystem error report for type 5 error -117
[  284.159482][T13183] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.168176][T13170] F2FS-fs (loop8): f2fs_disable_checkpoint starts, unusable: 0
[  284.175635][T13170] F2FS-fs (loop8): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  284.180666][T13170] F2FS-fs (loop8): Start checkpoint disabled!
[  284.183943][T13183] EXT4-fs error (device loop9): __ext4_new_inode:1081: comm syz.9.2919: reserved inode found cleared - inode=18
[  284.223824][T13170] F2FS-fs (loop8): f2fs_disable_checkpoint finishes, err:0
[  284.229310][T13170] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  284.232385][T13183] CacheFiles: mkdir cache failed with error -28
[  284.246488][T13183] CacheFiles: Failed to register: -28
[  284.252197][   T34] audit: type=1800 audit(1787671039.743:94): pid=13170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2914" name="bus" dev="loop8" ino=10 res=0 errno=0
[  284.272092][T10123] syz-executor: attempt to access beyond end of device
[  284.272092][T10123] loop8: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  284.277335][T10123] syz-executor: attempt to access beyond end of device
[  284.277335][T10123] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  284.290494][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.331805][   T82] Trying to write to read-only block-device loop8
[  284.339927][   T82] kworker/u10:4: attempt to access beyond end of device
[  284.339927][   T82] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  284.350053][   T82] CPU: 0 UID: 0 PID: 82 Comm: kworker/u10:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  284.350067][   T82] Tainted: [L]=SOFTLOCKUP
[  284.350070][   T82] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.350075][   T82] Workqueue: writeback wb_workfn (flush-7:8)
[  284.350091][   T82] Call Trace:
[  284.350094][   T82]  <TASK>
[  284.350097][   T82]  dump_stack_lvl+0xe8/0x150
[  284.350110][   T82]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  284.350123][   T82]  f2fs_write_end_io+0x124b/0x1710
[  284.350141][   T82]  __submit_merged_bio+0x258/0x6a0
[  284.350150][   T82]  ? rcu_is_watching+0x15/0xb0
[  284.350164][   T82]  __submit_merged_write_cond+0x3c9/0x4e0
[  284.350175][   T82]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  284.350191][   T82]  f2fs_write_data_pages+0x2a27/0x36f0
[  284.350213][   T82]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  284.350227][   T82]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  284.350248][   T82]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  284.350262][   T82]  ? __lock_acquire+0x6df/0x2e50
[  284.350280][   T82]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  284.350290][   T82]  do_writepages+0x338/0x560
[  284.350303][   T82]  ? reacquire_held_locks+0x117/0x1a0
[  284.350313][   T82]  ? writeback_sb_inodes+0x450/0x1b00
[  284.350326][   T82]  __writeback_single_inode+0x12e/0xf90
[  284.350339][   T82]  writeback_sb_inodes+0x9de/0x1b00
[  284.350349][   T82]  ? __lock_acquire+0x6df/0x2e50
[  284.350363][   T82]  ? lock_acquire+0x115/0x350
[  284.350374][   T82]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  284.350398][   T82]  ? rcu_is_watching+0x15/0xb0
[  284.350408][   T82]  ? queue_io+0x2d3/0x470
[  284.350419][   T82]  wb_writeback+0x41c/0xad0
[  284.350429][   T82]  ? queue_io+0x2d1/0x470
[  284.350441][   T82]  ? __pfx_wb_writeback+0x10/0x10
[  284.350449][   T82]  ? do_raw_spin_lock+0x12b/0x2f0
[  284.350462][   T82]  wb_workfn+0x431/0x10f0
[  284.350477][   T82]  ? __pfx_wb_workfn+0x10/0x10
[  284.350485][   T82]  ? trace_hrtimer_start+0x82/0x200
[  284.350497][   T82]  ? do_raw_spin_lock+0x12b/0x2f0
[  284.350506][   T82]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  284.350515][   T82]  ? lock_acquire+0x115/0x350
[  284.350527][   T82]  ? rcu_is_watching+0x15/0xb0
[  284.350538][   T82]  ? process_scheduled_works+0xa20/0x14e0
[  284.350546][   T82]  process_scheduled_works+0xa8e/0x14e0
[  284.350563][   T82]  ? __pfx_process_scheduled_works+0x10/0x10
[  284.350586][   T82]  ? assign_work+0x3cf/0x5d0
[  284.350595][   T82]  worker_thread+0xa47/0xfb0
[  284.350613][   T82]  kthread+0x388/0x470
[  284.350623][   T82]  ? __pfx_worker_thread+0x10/0x10
[  284.350631][   T82]  ? __pfx_kthread+0x10/0x10
[  284.350641][   T82]  ret_from_fork+0x514/0xb70
[  284.350653][   T82]  ? __pfx_ret_from_fork+0x10/0x10
[  284.350663][   T82]  ? __switch_to+0xc89/0x1420
[  284.350673][   T82]  ? __pfx_kthread+0x10/0x10
[  284.350683][   T82]  ret_from_fork_asm+0x1a/0x30
[  284.350699][   T82]  </TASK>
[  284.350703][   T82] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  284.443494][   T82] CPU: 0 UID: 0 PID: 82 Comm: kworker/u10:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  284.443508][   T82] Tainted: [L]=SOFTLOCKUP
[  284.443510][   T82] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.443515][   T82] Workqueue: writeback wb_workfn (flush-7:8)
[  284.443530][   T82] Call Trace:
[  284.443534][   T82]  <TASK>
[  284.443538][   T82]  dump_stack_lvl+0xe8/0x150
[  284.443550][   T82]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  284.443562][   T82]  f2fs_write_end_io+0x124b/0x1710
[  284.443585][   T82]  __submit_merged_bio+0x258/0x6a0
[  284.443593][   T82]  ? rcu_is_watching+0x15/0xb0
[  284.443606][   T82]  __submit_merged_write_cond+0x3c9/0x4e0
[  284.443617][   T82]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  284.443633][   T82]  f2fs_write_data_pages+0x2a27/0x36f0
[  284.443655][   T82]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  284.443669][   T82]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  284.443693][   T82]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  284.443715][   T82]  ? __lock_acquire+0x6df/0x2e50
[  284.443743][   T82]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  284.443772][   T82]  do_writepages+0x338/0x560
[  284.443787][   T82]  ? reacquire_held_locks+0x117/0x1a0
[  284.443797][   T82]  ? writeback_sb_inodes+0x450/0x1b00
[  284.443810][   T82]  __writeback_single_inode+0x12e/0xf90
[  284.443823][   T82]  writeback_sb_inodes+0x9de/0x1b00
[  284.443832][   T82]  ? __lock_acquire+0x6df/0x2e50
[  284.443846][   T82]  ? lock_acquire+0x115/0x350
[  284.443857][   T82]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  284.443882][   T82]  ? rcu_is_watching+0x15/0xb0
[  284.443893][   T82]  ? queue_io+0x2d3/0x470
[  284.443903][   T82]  wb_writeback+0x41c/0xad0
[  284.443914][   T82]  ? queue_io+0x2d1/0x470
[  284.443926][   T82]  ? __pfx_wb_writeback+0x10/0x10
[  284.443938][   T82]  ? do_raw_spin_lock+0x12b/0x2f0
[  284.443959][   T82]  wb_workfn+0x431/0x10f0
[  284.443981][   T82]  ? __pfx_wb_workfn+0x10/0x10
[  284.443990][   T82]  ? trace_hrtimer_start+0x82/0x200
[  284.444030][   T82]  ? do_raw_spin_lock+0x12b/0x2f0
[  284.444046][   T82]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  284.444056][   T82]  ? lock_acquire+0x115/0x350
[  284.444070][   T82]  ? rcu_is_watching+0x15/0xb0
[  284.444081][   T82]  ? process_scheduled_works+0xa20/0x14e0
[  284.444090][   T82]  process_scheduled_works+0xa8e/0x14e0
[  284.444108][   T82]  ? __pfx_process_scheduled_works+0x10/0x10
[  284.444118][   T82]  ? assign_work+0x3cf/0x5d0
[  284.444128][   T82]  worker_thread+0xa47/0xfb0
[  284.444146][   T82]  kthread+0x388/0x470
[  284.444156][   T82]  ? __pfx_worker_thread+0x10/0x10
[  284.444163][   T82]  ? __pfx_kthread+0x10/0x10
[  284.444173][   T82]  ret_from_fork+0x514/0xb70
[  284.444185][   T82]  ? __pfx_ret_from_fork+0x10/0x10
[  284.444195][   T82]  ? __switch_to+0xc89/0x1420
[  284.444205][   T82]  ? __pfx_kthread+0x10/0x10
[  284.444218][   T82]  ret_from_fork_asm+0x1a/0x30
[  284.444242][   T82]  </TASK>
[  284.444320][   T82] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  284.782539][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  284.966340][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  284.973579][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  284.978791][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  284.983309][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  284.995127][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  285.436956][   T12] bridge_slave_1: left allmulticast mode
[  285.438862][   T12] bridge_slave_1: left promiscuous mode
[  285.440734][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.448728][   T12] bridge_slave_0: left allmulticast mode
[  285.450586][   T12] bridge_slave_0: left promiscuous mode
[  285.452443][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.677123][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.687926][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.691421][   T12] bond0 (unregistering): Released all slaves
[  285.708334][ T5376] 8021q: adding VLAN 0 to HW filter on device eth21
[  285.799341][   T12] tipc: Disabling bearer <udp:s>
[  285.826116][   T12] tipc: Left network mode
[  286.087300][   T12] hsr_slave_0: left promiscuous mode
[  286.090225][   T12] hsr_slave_1: left promiscuous mode
[  286.096566][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.108223][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.270805][   T12] team0 (unregistering): Port device team_slave_1 removed
[  286.287332][   T12] team0 (unregistering): Port device team_slave_0 removed
[  286.449438][ T5376] 8021q: adding VLAN 0 to HW filter on device eth22
[  286.556874][T13208] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.560334][T13208] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.563504][T13208] bridge_slave_0: entered allmulticast mode
[  286.567377][T13208] bridge_slave_0: entered promiscuous mode
[  286.573264][T13208] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.576583][T13208] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.579774][T13208] bridge_slave_1: entered allmulticast mode
[  286.585189][T13208] bridge_slave_1: entered promiscuous mode
[  286.634176][T13208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.711346][T13208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.774528][T13208] team0: Port device team_slave_0 added
[  286.784090][T13208] team0: Port device team_slave_1 added
[  286.850132][T13208] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.856395][T13208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.877718][T13208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.907372][T13279] program syz.9.2949 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  286.937759][T13273] batman_adv: batadv0: Adding interface: macsec1
[  286.941671][T13273] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.954733][T13273] batman_adv: batadv0: Interface activated: macsec1
[  286.968139][T13208] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.977902][T13208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  286.987094][T13208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.012710][ T5376] 8021q: adding VLAN 0 to HW filter on device eth23
[  287.020581][   T12] IPVS: stop unused estimator thread 0...
[  287.073293][T13208] hsr_slave_0: entered promiscuous mode
[  287.077801][T13208] hsr_slave_1: entered promiscuous mode
[  287.080499][T13208] debugfs: 'hsr0' already exists in 'hsr'
[  287.082680][T13208] Cannot create hsr debugfs directory
[  287.209438][ T5021] Bluetooth: hci1: command tx timeout
[  287.375729][ T5376] 8021q: adding VLAN 0 to HW filter on device eth24
[  287.453454][T13311] scsi_nl_rcv_msg: discarding partial message
[  287.584874][T13319] set_capacity_and_notify: 1 callbacks suppressed
[  287.584886][T13319] loop9: detected capacity change from 0 to 256
[  287.772918][T13329] loop9: detected capacity change from 0 to 2048
[  287.824434][T13335] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  287.973366][   T34] audit: type=1800 audit(1787671043.177:95): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2957" name="bus" dev="loop9" ino=2097152 res=0 errno=0
[  288.013666][T13342] NILFS (loop9): nilfs_sufile_do_free: segment 9 is already clean
[  289.328839][T13208] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  289.343621][T13208] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  289.350820][T13208] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  289.373506][T13208] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  289.381737][T13208] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  289.401485][T13208] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  289.406072][T13208] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  289.417788][T13208] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  289.475100][ T5021] Bluetooth: hci1: command tx timeout
[  289.516770][T13208] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.545370][T13208] 8021q: adding VLAN 0 to HW filter on device team0
[  289.557960][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.560879][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.576009][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.579109][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.580594][T13380] loop9: detected capacity change from 0 to 4096
[  289.600238][T13380] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.687380][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.984626][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  290.061664][T13416] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  290.120855][T13208] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.223084][T13208] veth0_vlan: entered promiscuous mode
[  290.251887][T13208] veth1_vlan: entered promiscuous mode
[  290.273081][T13208] veth0_macvtap: entered promiscuous mode
[  290.284553][T13208] veth1_macvtap: entered promiscuous mode
[  290.297558][T13208] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.304100][T13208] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.310077][ T5688] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.319077][ T5688] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.324359][ T5688] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.335591][ T5688] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.509888][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.529146][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.616669][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.628343][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.643415][T13457] ip_tables: iptables: counters copy to user failed while replacing table
[  290.643999][   T34] audit: type=1326 audit(1787671045.642:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13454 comm="syz.9.2988" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240519e0d9 code=0x0
[  290.659566][    C1] IPv4: Oversized IP packet from 127.0.0.1
[  291.725863][ T5021] Bluetooth: hci1: command tx timeout
[  292.610937][T13540] loop1: detected capacity change from 0 to 32768
[  293.161579][T13543] loop1: detected capacity change from 0 to 32768
[  293.181643][T13543] JBD2: Ignoring recovery information on journal
[  293.197621][T13543] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  293.397726][T13208] ocfs2: Unmounting device (7,1) on (node local)
[  293.679747][T13551] loop1: detected capacity change from 0 to 512
[  293.713554][T13551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.717529][T13551] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.724927][T13551] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3021: bg 0: block 264: padding at end of block bitmap is not set
[  293.736666][T13551] Quota error (device loop1): write_blk: dquota write failed
[  293.743424][T13551] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  293.747390][T13551] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  293.759293][T13551] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.3021: Failed to acquire dquot type 1
[  293.781648][T13554] Quota error (device loop1): write_blk: dquota write failed
[  293.787174][T13554] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  293.797803][T13554] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  293.801922][T13554] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.3021: Failed to acquire dquot type 1
[  293.847846][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.966261][T13560] Scaler: =================  START STATUS  =================
[  293.969588][T13560] Scaler: ==================  END STATUS  ==================
[  293.982337][ T5021] Bluetooth: hci1: command tx timeout
[  294.247164][T13492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  294.397956][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3026'.
[  294.419131][T13565] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.426304][T13565] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.433320][T13565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  294.441368][T13565] batman_adv: batadv0: Removing interface: batadv_slave_1
[  294.889231][T13604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3045'.
[  294.953213][T13606] sctp: [Deprecated]: syz.9.3046 (pid 13606) Use of int in max_burst socket option.
[  294.953213][T13606] Use struct sctp_assoc_value instead
[  295.410290][ T7193] Bluetooth: hci3: Frame reassembly failed (-84)
[  295.436042][ T7193] Bluetooth: hci3: Frame reassembly failed (-84)
[  295.971889][   T32] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  296.137532][   T32] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  296.140635][   T32] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.147670][   T32] usb 10-1: config 0 descriptor??
[  296.153842][   T32] cp210x 10-1:0.0: cp210x converter detected
[  296.596023][   T32] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32
[  296.623661][   T32] usb 10-1: cp210x converter now attached to ttyUSB0
[  296.794411][ T5711] IPVS: starting estimator thread 0...
[  296.801379][T13657] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available
[  296.824353][   T33] usb 10-1: USB disconnect, device number 15
[  296.843581][   T33] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  296.856826][   T33] cp210x 10-1:0.0: device disconnected
[  296.892481][T13658] IPVS: using max 90 ests per chain, 216000 per kthread
[  296.945773][T13666] xt_hashlimit: size too large, truncated to 1048576
[  297.445093][ T5021] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  298.285633][T13689] loop1: detected capacity change from 0 to 32768
[  298.308649][T13689] JBD2: Ignoring recovery information on journal
[  298.336322][T13689] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  298.404357][T13689] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  298.413067][T13689] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  298.418429][T13689] OCFS2: File system is now read-only.
[  298.429673][T13689] (syz.1.3078,13689,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -30
[  298.433126][T13689] (syz.1.3078,13689,1):__ocfs2_claim_clusters:2579 ERROR: status = -30
[  298.436093][T13689] (syz.1.3078,13689,1):__ocfs2_claim_clusters:2587 ERROR: status = -30
[  298.439097][T13689] (syz.1.3078,13689,1):ocfs2_add_clusters_in_btree:4847 ERROR: status = -30
[  298.442354][T13689] (syz.1.3078,13689,1):ocfs2_symlink:1980 ERROR: Failed to extend file to 4094
[  298.445876][T13689] (syz.1.3078,13689,1):ocfs2_symlink:1981 ERROR: status = -30
[  298.481211][T13208] ocfs2: Unmounting device (7,1) on (node local)
[  298.639480][T13697] loop1: detected capacity change from 0 to 4096
[  298.645558][T13697] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  298.708250][T13697] ntfs3(loop1): Inode r=19 is not in use!
[  298.710273][T13697] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  299.178069][ T5790] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  299.346361][ T5790] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  299.350112][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.354554][ T5790] usb 2-1: Product: syz
[  299.356946][ T5790] usb 2-1: Manufacturer: syz
[  299.359013][ T5790] usb 2-1: SerialNumber: syz
[  299.364751][ T5790] usb 2-1: config 0 descriptor??
[  299.383460][ T5790] gspca_main: sq905c-2.14.0 probing 2770:9052
[  299.899777][T13721] loop9: detected capacity change from 0 to 512
[  299.919267][T13721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.924072][T13721] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.963243][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.104740][ T5790] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  300.110976][ T5790] sq905c 2-1:0.0: probe with driver sq905c failed with error -71
[  300.119968][ T5790] usb 2-1: USB disconnect, device number 9
[  300.477077][   T10] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  300.590122][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3095'.
[  300.599604][T13734] erspan0: entered promiscuous mode
[  300.900349][   T10] usb 10-1: Using ep0 maxpacket: 16
[  300.916675][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.923478][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.935425][   T10] usb 10-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  300.939113][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.942253][T13742] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.3099' resets device
[  300.947235][   T10] usb 10-1: config 0 descriptor??
[  301.539480][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3106'.
[  301.543281][T13767] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3106'.
[  301.617786][   T10] usb 10-1: string descriptor 0 read error: -71
[  301.655043][   T10] usb 10-1: Max retries (5) exceeded reading string descriptor 200
[  301.658195][   T10] letsketch 0003:6161:4D15.000B: probe with driver letsketch failed with error -32
[  301.669966][   T10] usb 10-1: USB disconnect, device number 16
[  301.978948][T13797] xt_hashlimit: overflow, rate too high: 0
[  302.322190][   T34] audit: type=1800 audit(1787671056.425:97): pid=13768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3104" name="/" dev="fuse" ino=1 res=0 errno=0
[  302.851183][T13857] loop9: detected capacity change from 0 to 4096
[  302.876533][T13862] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  302.908676][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3136'.
[  302.914506][T13864] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3136'.
[  303.058904][T13874] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  303.316340][T13881] overlayfs: invalid redirect ((null))
[  303.481238][    C0] vcan0: j1939_tp_rxtimer: 0xffff888114ebe400: rx timeout, send abort
[  303.671899][T13902] overlayfs: failed to resolve './file1metacopy=off': -2
[  303.823109][T13909] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3154'.
[  304.022913][    C0] vcan0: j1939_tp_rxtimer: 0xffff888114ebe800: rx timeout, send abort
[  304.031156][    C0] vcan0: j1939_tp_rxtimer: 0xffff888114ebe400: abort rx timeout. Force session deactivation
[  304.430022][T13952] loop9: detected capacity change from 0 to 1024
[  304.435393][T13952] EXT4-fs: Ignoring removed bh option
[  304.468672][T13952] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.501945][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.567360][    C0] vcan0: j1939_tp_rxtimer: 0xffff888114ebe800: abort rx timeout. Force session deactivation
[  304.581054][T13961] netlink: zone id is out of range
[  304.582789][T13961] netlink: del zone limit has 4 unknown bytes
[  304.630901][T13965] loop9: detected capacity change from 0 to 64
[  304.682158][T13967] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3178'.
[  305.056625][T13987] loop1: detected capacity change from 0 to 512
[  305.080202][T13987] EXT4-fs: Ignoring removed oldalloc option
[  305.089194][T13987] EXT4-fs: Ignoring removed i_version option
[  305.106637][T13987] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  305.129680][T13987] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3188: invalid indirect mapped block 4294967295 (level 1)
[  305.139807][T13987] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  305.143011][T13987] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3188: invalid indirect mapped block 4294967295 (level 1)
[  305.150595][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  305.150605][    C1] EXT4-fs (loop1): initial error at time 1787671059: ext4_free_branches:1023: inode 11
[  305.150618][    C1] EXT4-fs (loop1): last error at time 1787671059: ext4_free_branches:1023: inode 11
[  305.183262][T13987] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  305.183675][T13987] EXT4-fs (loop1): 2 truncates cleaned up
[  305.189206][T13987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.223938][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.291979][T13989] loop9: detected capacity change from 0 to 32768
[  305.299806][   T34] audit: type=1800 audit(1787671059.084:98): pid=13987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3188" name="file1" dev="loop1" ino=15 res=0 errno=0
[  305.315651][T13989] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3189 (13989)
[  305.569695][T13989] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  305.588963][T13989] BTRFS info (device loop9): using sha256 checksum algorithm
[  305.662195][T13989] BTRFS info (device loop9): enabling ssd optimizations
[  305.664875][T13989] BTRFS info (device loop9): turning on async discard
[  305.671109][T13989] BTRFS info (device loop9): enabling free space tree
[  305.673261][T13989] BTRFS info (device loop9): enabling auto defrag
[  305.675539][T13989] BTRFS info (device loop9): max_inline set to 4096
[  305.724730][T10198] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  305.962004][T14024] loop9: detected capacity change from 0 to 8192
[  305.968341][T14024] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  306.087829][   T33] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  306.105477][   T34] audit: type=1800 audit(1787671059.915:99): pid=14026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3199" name="file1" dev="tmpfs" ino=3084 res=0 errno=0
[  306.254931][   T33] usb 2-1: unable to get BOS descriptor or descriptor too short
[  306.267769][   T33] usb 2-1: not running at top speed; connect to a high speed hub
[  306.276235][   T33] usb 2-1: config 1 interface 0 has no altsetting 0
[  306.293514][   T33] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  306.299292][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.310967][   T33] usb 2-1: Product: syz
[  306.329339][   T33] usb 2-1: Manufacturer: syz
[  306.335422][   T33] usb 2-1: SerialNumber: syz
[  306.343289][T14027] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  306.362983][T14027] FAT-fs (loop9): Filesystem has been set read-only
[  306.368962][T14027] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  306.379059][T14027] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 1050)
[  306.476183][T14038] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3204'.
[  306.543388][T14042] fuse: fd is not a fuse device
[  306.886702][   T33] usb 2-1: No union descriptors
[  306.895002][   T33] mos7720 2-1:1.0: required endpoints missing
[  306.910413][   T33] usb 2-1: USB disconnect, device number 10
[  307.132938][T14058] sctp: [Deprecated]: syz.7.3214 (pid 14058) Use of struct sctp_assoc_value in delayed_ack socket option.
[  307.132938][T14058] Use struct sctp_sack_info instead
[  307.188222][T14062] netlink: 'syz.7.3216': attribute type 4 has an invalid length.
[  307.707416][T14082] loop1: detected capacity change from 0 to 128
[  307.714571][T14082] ufs: ufstype=nextstep is supported read-only
[  308.082059][ T5790] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[  308.251801][ T5790] usb 10-1: unable to get BOS descriptor or descriptor too short
[  308.255570][ T5790] usb 10-1: not running at top speed; connect to a high speed hub
[  308.261384][ T5790] usb 10-1: config 4 has an invalid interface number: 106 but max is 0
[  308.264441][ T5790] usb 10-1: config 4 has no interface number 0
[  308.267300][ T5790] usb 10-1: config 4 interface 106 has no altsetting 0
[  308.270559][ T5790] usb 10-1: language id specifier not provided by device, defaulting to English
[  308.276485][ T5790] usb 10-1: New USB device found, idVendor=0408, idProduct=4033, bcdDevice=96.91
[  308.281882][ T5790] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.284676][ T5790] usb 10-1: Product: syz
[  308.286374][ T5790] usb 10-1: Manufacturer: 朎㢶
[  308.291916][ T5790] usb 10-1: SerialNumber: syz
[  308.571062][ T5790] uvcvideo 10-1:4.106: Found UVC 0.00 device syz (0408:4033)
[  308.574750][ T5790] uvcvideo 10-1:4.106: Forcing UVC version to 1.0a
[  308.577131][ T5790] uvcvideo 10-1:4.106: No valid video chain found.
[  308.604091][ T5790] usb 10-1: USB disconnect, device number 17
[  309.237322][T14113] veth0: entered promiscuous mode
[  309.248196][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3239'.
[  309.271979][T14113] bond0: (slave bond_slave_1): Releasing backup interface
[  309.275130][T14116] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.3242'.
[  309.293263][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3241'.
[  309.347116][T14112] veth0: left promiscuous mode
[  309.894515][T14143] raw_sendmsg: syz.1.3250 forgot to set AF_INET. Fix it!
[  310.085767][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  311.256079][T14169] loop9: detected capacity change from 0 to 8
[  311.283499][T14169] SQUASHFS error: Unable to read inode 0x24
[  311.562902][T14194] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3276'.
[  311.878489][T14218] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  311.893132][T14218] veth0_to_team: entered promiscuous mode
[  311.912851][T14151] bridge0: port 1(bridge_slave_0) entered blocking state
[  311.915129][T14151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.068027][   T32] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  312.108248][T14233] mmap: syz.9.3292 (14233): VmData 37462016 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[  312.243886][   T32] usb 2-1: Using ep0 maxpacket: 32
[  312.263761][   T32] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  312.273297][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.279318][   T32] usb 2-1: Product: syz
[  312.282650][   T32] usb 2-1: Manufacturer: syz
[  312.284205][   T32] usb 2-1: SerialNumber: syz
[  312.291482][   T32] usb 2-1: config 0 descriptor??
[  312.300731][   T32] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  312.305479][T14245] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3298'.
[  312.309417][   T32] dvb-usb: bulk message failed: -22 (4/0)
[  312.309455][   T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  312.309504][   T32] dvb-usb: bulk message failed: -22 (5/0)
[  312.309510][   T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  312.313133][   T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  312.313600][   T32] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  312.313631][   T32] usb 2-1: media controller created
[  312.344213][   T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  312.410194][   T32] usb 2-1: selecting invalid altsetting 3
[  312.416363][   T32] ttusb2: set interface to alts=3 failed
[  312.439086][   T32] DVB: Unable to find symbol tda10086_attach()
[  312.441258][   T32] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  312.444405][   T32] dvb-usb: bulk message failed: -22 (4/0)
[  312.446218][   T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  312.450286][   T32] dvb-usb: bulk message failed: -22 (5/0)
[  312.452792][   T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  312.457090][   T32] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  312.541736][T14258] netlink: 'syz.9.3304': attribute type 21 has an invalid length.
[  312.545167][   T32] usb 2-1: USB disconnect, device number 11
[  312.551221][T14258] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3304'.
[  312.624036][   T32] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  312.881744][ T5689] usb 10-1: new low-speed USB device number 18 using dummy_hcd
[  313.067318][ T5689] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  313.071649][ T5689] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0
[  313.076248][ T5689] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0
[  313.083925][ T5689] usb 10-1: string descriptor 0 read error: -22
[  313.086908][ T5689] usb 10-1: New USB device found, idVendor=0582, idProduct=002f, bcdDevice= 0.40
[  313.090983][ T5689] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.105621][ T5689] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  313.109019][ T5689] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -2
[  313.234698][T14272] program syz.1.3311 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  313.329139][T14278] loop1: detected capacity change from 0 to 128
[  313.333837][T14278] EXT4-fs (loop1): Test dummy encryption mode enabled
[  313.366054][T14278] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  313.372584][T14278] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  313.498929][T14278] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  313.512743][ T5689] usb 10-1: USB disconnect, device number 18
[  313.601695][T13208] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  313.634615][T14297] netlink: 'syz.7.3318': attribute type 11 has an invalid length.
[  313.679153][T14301] loop1: detected capacity change from 0 to 256
[  313.810434][T14317] overlay: Unknown parameter 'subj_role'
[  314.470494][   T34] audit: type=1326 audit(1787671067.633:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.3341" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8439e0d9 code=0x7ffc0000
[  314.811250][   T34] audit: type=1326 audit(1787671067.633:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.3341" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8439e0d9 code=0x7ffc0000
[  314.817984][   T34] audit: type=1326 audit(1787671067.633:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.3341" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8439e0d9 code=0x7ffc0000
[  314.825809][   T34] audit: type=1326 audit(1787671067.633:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.3341" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8439e0d9 code=0x7ffc0000
[  314.833302][   T34] audit: type=1326 audit(1787671067.633:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.3341" exe="/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7faa8439e0d9 code=0x7ffc0000
[  314.843445][   T34] audit: type=1326 audit(1787671067.633:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.3341" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8439e0d9 code=0x7ffc0000
[  314.850936][   T34] audit: type=1326 audit(1787671067.633:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.3341" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7faa8439e0d9 code=0x7ffc0000
[  314.859938][   T34] audit: type=1326 audit(1787671067.633:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.3341" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8439e0d9 code=0x7ffc0000
[  314.867688][   T34] audit: type=1326 audit(1787671067.633:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14356 comm="syz.7.3341" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7faa8439e0d9 code=0x7ffc0000
[  315.131845][T14410] IPv6: NLM_F_CREATE should be specified when creating new route
[  315.287386][T14419] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[  315.619243][T14429] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3375'.
[  315.765430][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3378'.
[  316.047559][   T10] kernel write not supported for file /input/mice (pid: 10 comm: kworker/0:1)
[  316.332147][T14460] netlink: NAT attribute type 0 has unexpected length (1 != 0)
[  316.334718][T14460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  316.403094][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3392'.
[  316.467284][T14466] loop9: detected capacity change from 0 to 64
[  316.615306][T14476] Invalid argument reading file caps for ./file0
[  316.661606][T14480] cgroup: noprefix used incorrectly
[  316.828669][T14496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  317.159230][ T5790] usb 10-1: new low-speed USB device number 19 using dummy_hcd
[  317.323846][ T5790] usb 10-1: unable to get BOS descriptor or descriptor too short
[  317.330489][ T5790] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8
[  317.336467][ T5790] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt
[  317.344130][ T5790] usb 10-1: string descriptor 0 read error: -22
[  317.355195][ T5790] usb 10-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40
[  317.358800][ T5790] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.366897][T14501] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  317.372599][T14501] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  317.391232][ T5790] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  318.115021][ T5790] usb 10-1: USB disconnect, device number 19
[  318.365183][T14530] Invalid argument reading file caps for ./file0
[  318.423006][T14534] rnbd_client L127: Can't parse path ip: -93
[  318.456214][T14536] sctp: [Deprecated]: syz.1.3426 (pid 14536) Use of struct sctp_assoc_value in delayed_ack socket option.
[  318.456214][T14536] Use struct sctp_sack_info instead
[  318.488894][T14538] loop1: detected capacity change from 0 to 16
[  318.493034][T14538] erofs (device loop1): DAX unsupported by block device. Turning off DAX.
[  318.500193][T14538] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  318.504341][T14538] erofs (device loop1): mounted with root inode @ nid 36.
[  318.924855][T14560] loop9: detected capacity change from 0 to 2048
[  319.036027][T14560] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.081306][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.126729][T14569] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  319.214788][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3443'.
[  319.391529][ T5689] IPVS: starting estimator thread 0...
[  319.488110][T14581] IPVS: using max 90 ests per chain, 216000 per kthread
[  319.496773][T14586] ieee802154 phy0 wpan0: encryption failed: -22
[  320.581847][T13456] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  320.747562][T13456] usb 2-1: config 5 has an invalid interface number: 180 but max is 0
[  320.765798][T13456] usb 2-1: config 5 has no interface number 0
[  320.770721][T13456] usb 2-1: config 5 interface 180 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  320.776348][T13456] usb 2-1: config 5 interface 180 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64
[  320.781147][T13456] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice= a.60
[  320.784222][T13456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.793676][T13456] imon_raw 2-1:5.180: IR endpoint missing
[  320.881892][T14647] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3476'.
[  321.015334][T13456] usb 2-1: USB disconnect, device number 12
[  321.051540][T14651] loop9: detected capacity change from 0 to 32768
[  321.436836][T14669] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3487'.
[  321.603192][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3491'.
[  321.637910][T14681] xt_hashlimit: size too large, truncated to 1048576
[  321.935014][T14693] bridge1: entered promiscuous mode
[  321.988199][T14694] loop1: detected capacity change from 0 to 2048
[  322.165942][T14695] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  322.472133][T14703] loop9: detected capacity change from 0 to 512
[  322.554308][T14703] Quota error (device loop9): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  322.558882][T14703] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[  322.562049][T14703] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.3499: Failed to acquire dquot type 1
[  322.572793][T14703] loop9: lost filesystem error report for type 5 error -117
[  322.575637][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  322.579926][    C1] EXT4-fs (loop9): last error at time 1787671075: ext4_acquire_dquot:7041
[  322.598369][T14703] EXT4-fs (loop9): 1 truncate cleaned up
[  322.601349][T14703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.605580][T14703] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  322.739110][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.841998][T14712] fuse: fd is not a fuse device
[  323.075651][T14730] loop1: detected capacity change from 0 to 512
[  323.078795][T14730] EXT4-fs: Ignoring removed oldalloc option
[  323.090051][T14730] EXT4-fs (loop1): filesystem is read-only
[  323.094673][T14730] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  323.107024][T14730] EXT4-fs (loop1): failed to initialize system zone (-117)
[  323.109430][T14730] EXT4-fs (loop1): mount failed
[  323.273052][ T1371] ieee802154 phy0 wpan0: encryption failed: -22
[  323.280541][ T1371] ieee802154 phy1 wpan1: encryption failed: -22
[  323.311519][   T33] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  323.474387][   T33] usb 10-1: Using ep0 maxpacket: 16
[  323.482872][   T33] usb 10-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  323.489333][   T33] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.494252][   T33] usb 10-1: Product: syz
[  323.497650][   T33] usb 10-1: Manufacturer: syz
[  323.500339][   T33] usb 10-1: SerialNumber: syz
[  323.506178][   T33] usb 10-1: config 0 descriptor??
[  323.520295][   T33] visor 10-1:0.0: Sony Clie 3.5 converter detected
[  323.963393][   T33] usb 10-1: Sony Clie 3.5 converter now attached to ttyUSB0
[  324.180766][   T33] usb 10-1: USB disconnect, device number 20
[  324.196486][   T33] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  324.205966][   T33] visor 10-1:0.0: device disconnected
[  324.300761][T14778] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  324.304991][T14778] Error validating options; rc = [-22]
[  324.498186][T14800] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3544'.
[  324.569352][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3547'.
[  324.640840][T14813] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3550'.
[  324.798130][T13456] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  324.957913][T13456] usb 2-1: Using ep0 maxpacket: 16
[  324.962317][T13456] usb 2-1: unable to get BOS descriptor or descriptor too short
[  324.966097][T13456] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  324.973033][T13456] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 7
[  324.981035][T13456] usb 2-1: config 1 interface 0 has no altsetting 0
[  324.995947][T13456] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  325.001910][T13456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.008916][T13456] usb 2-1: Product: syz
[  325.010254][T13456] usb 2-1: Manufacturer: syz
[  325.013363][T13456] usb 2-1: SerialNumber: syz
[  325.019441][T14805] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  325.251116][T13456] cdc_ether 2-1:1.0: Descriptor too short
[  325.253820][T13456] mos7720 2-1:1.0: required endpoints missing
[  325.261181][T13456] usb 2-1: USB disconnect, device number 13
[  325.283648][T14843] netlink: 'syz.7.3565': attribute type 1 has an invalid length.
[  325.383863][ T5711] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[  325.512694][ T5021] Bluetooth: hci0: command 0x1407 tx timeout
[  325.550279][ T5711] usb 10-1: unable to get BOS descriptor or descriptor too short
[  325.555457][ T5711] usb 10-1: not running at top speed; connect to a high speed hub
[  325.562750][ T5711] usb 10-1: config 7 has an invalid interface number: 62 but max is 0
[  325.566471][ T5711] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  325.570136][ T5711] usb 10-1: config 7 has no interface number 0
[  325.572562][ T5711] usb 10-1: config 7 interface 62 has no altsetting 0
[  325.579290][ T5711] usb 10-1: New USB device found, idVendor=0421, idProduct=0327, bcdDevice=8b.96
[  325.582565][ T5711] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.585438][ T5711] usb 10-1: Product: syz
[  325.587609][ T5711] usb 10-1: Manufacturer: syz
[  325.589436][ T5711] usb 10-1: SerialNumber: syz
[  325.837666][ T5711] cdc_phonet 10-1:7.62: skipping garbage
[  325.841794][ T5711] cdc_phonet 10-1:7.62: probe with driver cdc_phonet failed with error -22
[  325.869075][ T5711] usb 10-1: USB disconnect, device number 21
[  325.926879][T14872] loop1: detected capacity change from 0 to 4096
[  325.953681][T14872] ntfs3(loop1): Failed to load $Extend (-22).
[  325.956310][T14872] ntfs3(loop1): Failed to initialize $Extend.
[  325.971336][   T34] audit: type=1800 audit(1787671078.259:109): pid=14872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3579" name="file1" dev="loop1" ino=30 res=0 errno=0
[  326.439922][T14872] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  326.444305][T14872] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  326.448998][T14872] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  326.451851][T14872] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  326.457420][T14872] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  326.461245][T14872] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  326.468482][T14872] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  326.471121][T14872] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  326.595480][T14885] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3586'.
[  326.598430][T14885] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3586'.
[  326.601256][T14885] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3586'.
[  326.604174][T14885] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3586'.
[  326.638501][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3587'.
[  327.121361][T14907] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  327.127599][T14907] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  327.217425][T14913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  327.222940][T14913] IPv6: NLM_F_CREATE should be set when creating new route
[  327.471856][T14929] loop9: detected capacity change from 0 to 128
[  327.474641][T14929] EXT4-fs (loop9): Test dummy encryption mode enabled
[  327.486898][T14929] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  327.500580][T14929] ext4 filesystem being mounted at /540/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  327.578563][T10198] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  328.482007][T14971] netlink: 'syz.7.3623': attribute type 4 has an invalid length.
[  328.484628][T14971] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3623'.
[  328.792101][T14988] netlink: 'syz.7.3632': attribute type 2 has an invalid length.
[  328.795071][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3632'.
[  328.884748][T14991] netlink: 'syz.9.3625': attribute type 5 has an invalid length.
[  329.103851][T15003] tc_dump_action: action bad kind
[  329.146419][T15009] loop9: detected capacity change from 0 to 512
[  329.153792][T15009] EXT4-fs: Ignoring removed bh option
[  329.163597][T15009] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.3642: corrupted in-inode xattr: e_value size too large
[  329.168050][T15009] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  329.168278][T15009] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3642: couldn't read orphan inode 15 (err -117)
[  329.174762][    C0] EXT4-fs (loop9): error count since last fsck: 1
[  329.174772][    C0] EXT4-fs (loop9): initial error at time 1787671081: ext4_iget_extra_inode:5180: inode 15
[  329.174785][    C0] EXT4-fs (loop9): last error at time 1787671081: ext4_iget_extra_inode:5180: inode 15
[  329.188006][T15009] loop9: lost filesystem error report for type 5 error -117
[  329.189060][T15009] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.213491][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.366069][T15020] binder: 15016:15020 ioctl c0306201 200000000640 returned -22
[  329.396005][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3649'.
[  330.103431][ T5632] Bluetooth: hci1: command 0x0405 tx timeout
[  330.599115][T15070] netlink: 888 bytes leftover after parsing attributes in process `syz.9.3668'.
[  330.609293][   T33] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  330.787069][   T33] usb 2-1: Using ep0 maxpacket: 8
[  330.792241][   T33] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  330.810423][T15087] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  330.813097][   T33] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  330.816867][   T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.826568][   T33] usb 2-1: config 0 descriptor??
[  331.072208][ T5646] Bluetooth: hci2: command 0x0406 tx timeout
[  331.364553][   T33] hid_parser_main: 7 callbacks suppressed
[  331.365197][   T33] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0
[  331.370172][   T33] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0
[  331.375468][   T33] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0
[  331.378002][   T33] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0
[  331.380419][   T33] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0
[  331.383915][   T33] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0
[  331.387049][   T33] playstation 0003:054C:0BA0.000C: unknown main item tag 0x0
[  331.413518][   T33] playstation 0003:054C:0BA0.000C: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0
[  331.582763][   T33] playstation 0003:054C:0BA0.000C: Invalid byte count transferred, expected 16 got 0
[  331.586362][   T33] playstation 0003:054C:0BA0.000C: Failed to retrieve DualShock4 pairing info: -22
[  331.590852][   T33] playstation 0003:054C:0BA0.000C: Failed to get MAC address from DualShock4
[  331.594285][   T33] playstation 0003:054C:0BA0.000C: Failed to create dualshock4.
[  331.613862][   T33] playstation 0003:054C:0BA0.000C: probe with driver playstation failed with error -22
[  331.801947][   T10] usb 2-1: USB disconnect, device number 14
[  331.944812][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3686'.
[  331.949479][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3686'.
[  332.328880][T15119] loop9: detected capacity change from 0 to 512
[  332.398138][T15121] loop1: detected capacity change from 0 to 1024
[  332.403078][T15121] EXT4-fs: Ignoring removed mblk_io_submit option
[  332.411727][T15121] EXT4-fs: Ignoring removed oldalloc option
[  332.440487][T15121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  332.449203][T15121] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.486880][T15121] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.3693: lblock 0 mapped to illegal pblock 0 (length 1)
[  332.491263][T15126] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  332.502614][T15121] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  332.508199][T15121] EXT4-fs (loop1): This should not happen!! Data will be lost
[  332.508199][T15121] 
[  332.542282][   T26] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28
[  332.548213][   T26] EXT4-fs (loop1): This should not happen!! Data will be lost
[  332.548213][   T26] 
[  332.551163][   T26] EXT4-fs (loop1): Total free blocks count 0
[  332.553140][   T26] EXT4-fs (loop1): Free/Dirty block details
[  332.555229][   T26] EXT4-fs (loop1): free_blocks=0
[  332.556862][   T26] EXT4-fs (loop1): dirty_blocks=64
[  332.558408][   T26] EXT4-fs (loop1): Block reservation details
[  332.571489][T13208] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  332.613250][T15123] loop9: detected capacity change from 0 to 32768
[  332.650273][T15123] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  332.666235][T15123] XFS (loop9): Ending clean mount
[  332.765431][T10198] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  332.937839][T15133] loop1: detected capacity change from 0 to 32768
[  332.979292][T15133] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  333.008119][T15133] XFS (loop1): Ending clean mount
[  333.056447][T13208] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  333.261303][T15160] loop9: detected capacity change from 0 to 4096
[  333.274230][T15160] ntfs3(loop9): Failed to load $Extend (-22).
[  333.276289][T15160] ntfs3(loop9): Failed to initialize $Extend.
[  333.289708][   T34] audit: type=1800 audit(1787671345.061:110): pid=15160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3703" name="file1" dev="loop9" ino=30 res=0 errno=0
[  333.388502][T15160] ntfs3(loop9): ino=5, "/" mi_enum_attr
[  333.391488][T15160] ntfs3(loop9): ino=5, "/" mi_enum_attr
[  333.394126][T15160] ntfs3(loop9): ino=5, "/" mi_enum_attr
[  333.396808][T15160] ntfs3(loop9): ino=5, "/" mi_enum_attr
[  333.403307][T15160] ntfs3(loop9): ino=5, "/" mi_enum_attr
[  333.411224][T15160] ntfs3(loop9): ino=5, "/" mi_enum_attr
[  333.416219][T15160] ntfs3(loop9): ino=5, "/" mi_enum_attr
[  333.420574][T15160] ntfs3(loop9): ino=5, "/" mi_enum_attr
[  333.628969][T15172] loop1: detected capacity change from 0 to 128
[  333.839097][T15180] TCP: TCP_TX_DELAY enabled
[  334.115692][   T33] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  334.290240][   T33] usb 2-1: Using ep0 maxpacket: 16
[  334.298080][   T33] usb 2-1: unable to get BOS descriptor or descriptor too short
[  334.306330][   T33] usb 2-1: config 1 has an invalid interface number: 232 but max is 0
[  334.314203][   T33] usb 2-1: config 1 has no interface number 0
[  334.322710][   T33] usb 2-1: config 1 interface 232 altsetting 93 endpoint 0xE has an invalid bInterval 0, changing to 7
[  334.332218][   T33] usb 2-1: config 1 interface 232 altsetting 93 endpoint 0xE has invalid wMaxPacketSize 0
[  334.340526][   T33] usb 2-1: config 1 interface 232 has no altsetting 0
[  334.347536][   T33] usb 2-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2
[  334.356847][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.377300][   T33] usb 2-1: Product: syz
[  334.382712][   T33] usb 2-1: Manufacturer: syz
[  334.388264][   T33] usb 2-1: SerialNumber: syz
[  334.643702][   T33] hub 2-1:1.232: bad descriptor, ignoring hub
[  334.649918][   T33] hub 2-1:1.232: probe with driver hub failed with error -5
[  334.659674][   T33] option 2-1:1.232: GSM modem (1-port) converter detected
[  334.699219][   T33] usb 2-1: USB disconnect, device number 15
[  334.712479][   T33] option 2-1:1.232: device disconnected
[  335.278126][ T5021] Bluetooth: Wrong link type (-71)
[  335.413204][T15212] loop9: detected capacity change from 0 to 512
[  335.414728][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3727'.
[  335.434406][T15212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  335.453954][T15212] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.550649][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.123346][T15236] loop9: detected capacity change from 0 to 32768
[  336.153957][T15236] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  336.174570][T15236] XFS (loop9): Ending clean mount
[  336.214332][T10198] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  336.568704][T15254] loop9: detected capacity change from 0 to 32768
[  336.977835][T15279] netlink: 'syz.7.3751': attribute type 5 has an invalid length.
[  336.995607][T15279] netlink: 45 bytes leftover after parsing attributes in process `syz.7.3751'.
[  337.254419][T15289] loop9: detected capacity change from 0 to 256
[  337.266290][T15289] exFAT-fs (loop9): error, no upcase table entry. Please run fsck
[  337.271490][T15289] exFAT-fs (loop9): Filesystem has been set read-only
[  337.274405][T15289] exFAT-fs (loop9): failed to test first cluster bit of root dir(5)
[  338.601952][T15307] loop1: detected capacity change from 0 to 16
[  338.840027][T15307] erofs (device loop1): mounted with root inode @ nid 36.
[  338.940208][T15307] netlink: zone id is out of range
[  338.943753][T15310] sock: sock_timestamping_bind_phc: sock not bind to device
[  338.949751][T15307] netlink: zone id is out of range
[  338.960250][T15307] netlink: zone id is out of range
[  338.965254][T15307] netlink: zone id is out of range
[  338.972564][T15307] netlink: zone id is out of range
[  338.978338][T15307] netlink: zone id is out of range
[  338.993529][T15307] netlink: zone id is out of range
[  338.998326][T15307] netlink: zone id is out of range
[  339.006418][T15307] netlink: zone id is out of range
[  339.010991][T15307] netlink: zone id is out of range
[  339.220627][T15316] loop9: detected capacity change from 0 to 1024
[  339.238811][T15316] EXT4-fs: Ignoring removed mblk_io_submit option
[  339.258771][T15316] EXT4-fs: Ignoring removed orlov option
[  339.310064][T15316] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.486936][T10198] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.854955][T15345] loop9: detected capacity change from 0 to 256
[  339.955965][T15349] syzkaller0: entered promiscuous mode
[  339.959741][T15349] syzkaller0: entered allmulticast mode
[  339.964964][T15349] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  340.183878][   T34] audit: type=1804 audit(1787671351.427:111): pid=15365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3783" name="bus" dev="ramfs" ino=42174 res=1 errno=0
[  340.206975][   T34] audit: type=1804 audit(1787671351.427:112): pid=15365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.3783" name="bus" dev="ramfs" ino=42174 res=1 errno=0
[  340.289931][T15370] pimreg: entered allmulticast mode
[  340.305199][T15370] pimreg: left allmulticast mode
[  340.579661][T15380] loop1: detected capacity change from 0 to 128
[  341.159928][T15407] fuse: fd is not a fuse device
[  341.614783][T15420] Invalid ELF header magic: != ELF
[  341.890723][T15446] loop9: detected capacity change from 0 to 40427
[  341.916799][T15446] F2FS-fs (loop9): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  341.922337][T15446] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  341.928518][T15446] F2FS-fs (loop9): Image doesn't support compression
[  341.938292][T15446] F2FS-fs (loop9): build fault injection rate: 690
[  341.940510][T15446] F2FS-fs (loop9): build fault injection type: 0x35f7
[  341.943396][T15446] F2FS-fs (loop9): invalid crc value
[  342.003497][   T33] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  342.006571][T15446] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  342.012767][T15446] F2FS-fs (loop9): f2fs_disable_checkpoint starts, unusable: 0
[  342.017612][T15446] F2FS-fs (loop9): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  342.021912][T15446] F2FS-fs (loop9): Start checkpoint disabled!
[  342.043080][T15446] F2FS-fs (loop9): f2fs_disable_checkpoint finishes, err:0
[  342.054273][T15446] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  342.057045][T15446] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  342.072817][T15446] syz.9.3822: attempt to access beyond end of device
[  342.072817][T15446] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  342.103698][ T6411] kworker/u9:5: attempt to access beyond end of device
[  342.103698][ T6411] loop9: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  342.113111][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: kworker/u9:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  342.113141][ T6411] Tainted: [L]=SOFTLOCKUP
[  342.113145][ T6411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  342.113152][ T6411] Workqueue: writeback wb_workfn (flush-7:9)
[  342.113175][ T6411] Call Trace:
[  342.113180][ T6411]  <TASK>
[  342.113186][ T6411]  dump_stack_lvl+0xe8/0x150
[  342.113205][ T6411]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  342.113223][ T6411]  f2fs_write_end_io+0x124b/0x1710
[  342.113251][ T6411]  __submit_merged_bio+0x258/0x6a0
[  342.113264][ T6411]  ? rcu_is_watching+0x15/0xb0
[  342.113286][ T6411]  __submit_merged_write_cond+0x3c9/0x4e0
[  342.113306][ T6411]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  342.113334][ T6411]  f2fs_write_data_pages+0x2a27/0x36f0
[  342.113370][ T6411]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  342.113392][ T6411]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  342.113427][ T6411]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  342.113449][ T6411]  ? __lock_acquire+0x6df/0x2e50
[  342.113475][ T6411]  ? set_raw_inline+0x28b/0x390
[  342.113486][ T6411]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  342.113527][ T6411]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  342.113546][ T6411]  do_writepages+0x338/0x560
[  342.113567][ T6411]  ? reacquire_held_locks+0x117/0x1a0
[  342.113613][ T6411]  ? writeback_sb_inodes+0x450/0x1b00
[  342.113634][ T6411]  __writeback_single_inode+0x12e/0xf90
[  342.113656][ T6411]  writeback_sb_inodes+0x9de/0x1b00
[  342.113671][ T6411]  ? __lock_acquire+0x6df/0x2e50
[  342.113696][ T6411]  ? lock_acquire+0x115/0x350
[  342.113716][ T6411]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  342.113756][ T6411]  ? rcu_is_watching+0x15/0xb0
[  342.113774][ T6411]  ? queue_io+0x2d3/0x470
[  342.113793][ T6411]  wb_writeback+0x41c/0xad0
[  342.113812][ T6411]  ? queue_io+0x2d1/0x470
[  342.113831][ T6411]  ? __pfx_wb_writeback+0x10/0x10
[  342.113845][ T6411]  ? do_raw_spin_lock+0x12b/0x2f0
[  342.113869][ T6411]  wb_workfn+0x431/0x10f0
[  342.113894][ T6411]  ? __pfx_wb_workfn+0x10/0x10
[  342.113908][ T6411]  ? trace_hrtimer_start+0x82/0x200
[  342.113928][ T6411]  ? do_raw_spin_lock+0x12b/0x2f0
[  342.113942][ T6411]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  342.113956][ T6411]  ? lock_acquire+0x115/0x350
[  342.113977][ T6411]  ? rcu_is_watching+0x15/0xb0
[  342.113995][ T6411]  ? process_scheduled_works+0xa20/0x14e0
[  342.114008][ T6411]  process_scheduled_works+0xa8e/0x14e0
[  342.114039][ T6411]  ? __pfx_process_scheduled_works+0x10/0x10
[  342.114057][ T6411]  ? assign_work+0x3cf/0x5d0
[  342.114074][ T6411]  worker_thread+0xa47/0xfb0
[  342.114105][ T6411]  kthread+0x388/0x470
[  342.114128][ T6411]  ? __pfx_worker_thread+0x10/0x10
[  342.114140][ T6411]  ? __pfx_kthread+0x10/0x10
[  342.114156][ T6411]  ret_from_fork+0x514/0xb70
[  342.114175][ T6411]  ? __pfx_ret_from_fork+0x10/0x10
[  342.114191][ T6411]  ? __switch_to+0xc89/0x1420
[  342.114207][ T6411]  ? __pfx_kthread+0x10/0x10
[  342.114224][ T6411]  ret_from_fork_asm+0x1a/0x30
[  342.114253][ T6411]  </TASK>
[  342.114305][ T6411] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  342.211346][   T33] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  342.308692][   T33] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  342.320228][   T33] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  342.331000][   T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.354550][T15440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  342.369674][   T33] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  342.484715][T15460] loop9: detected capacity change from 0 to 2048
[  342.493017][T15460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  342.604886][   T33] usb 2-1: USB disconnect, device number 16
[  342.732159][   T34] audit: type=1326 audit(1787671353.771:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.9.3829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240519e0d9 code=0x7ffc0000
[  342.764385][   T34] audit: type=1326 audit(1787671353.771:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.9.3829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240519e0d9 code=0x7ffc0000
[  342.780112][T15472] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3831'.
[  342.784964][   T34] audit: type=1326 audit(1787671353.771:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.9.3829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240519e0d9 code=0x7ffc0000
[  342.801817][   T34] audit: type=1326 audit(1787671353.771:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.9.3829" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f240519e0d9 code=0x7ffc0000
[  342.826986][   T34] audit: type=1326 audit(1787671353.771:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.9.3829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240519e0d9 code=0x7ffc0000
[  342.835468][   T34] audit: type=1326 audit(1787671353.771:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.9.3829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f240519e0d9 code=0x7ffc0000
[  342.851343][   T34] audit: type=1326 audit(1787671353.771:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.9.3829" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f240519e0d9 code=0x7ffc0000
[  342.865641][   T34] audit: type=1326 audit(1787671353.771:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15467 comm="syz.9.3829" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f240519e0d9 code=0x7ffc0000
[  343.204632][T15495] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3842'.
[  343.232874][T15497] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3843'.
[  343.252407][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3841'.
[  343.961316][T15508] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3848'.
[  344.100869][T15516] fuse: fd is not a fuse device
[  344.376205][T15531] loop1: detected capacity change from 0 to 32768
[  344.383844][T15531] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  344.445749][T15531] (syz.1.3859,15531,0):ocfs2_dio_end_io:2420 ERROR: Direct IO failed, bytes = -14
[  344.476943][T13208] ocfs2: Unmounting device (7,1) on (node local)
[  345.189818][ T5646] Bluetooth: hci3: command 0x1003 tx timeout
[  345.195510][ T5021] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  345.259514][T15546] libceph: resolve '
[  345.259514][T15546] -&fYǝa2i
[  345.259514][T15546] .?&*&' (ret=-3): failed
[  345.674257][T15568] loop9: detected capacity change from 0 to 4096
[  345.679226][T15568] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  345.695723][T15568] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  345.698190][T15568] ntfs3(loop9): Failed to load $AttrDef (-22)
[  345.907962][T15575] loop9: detected capacity change from 0 to 32768
[  345.936372][T15575] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  345.973723][T15575] XFS (loop9): Ending clean mount
[  345.983329][T15575] XFS (loop9): Quotacheck needed: Please wait.
[  346.027008][T15589] loop1: detected capacity change from 0 to 1764
[  346.085935][T15575] XFS (loop9): Quotacheck: Done.
[  346.379476][   T34] kauditd_printk_skb: 1 callbacks suppressed
[  346.379488][   T34] audit: type=1800 audit(1787671357.130:122): pid=15599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3878" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop9" ino=4430 res=0 errno=0
[  346.425857][T15598] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  346.429359][T15598] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  346.432757][T15598] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  346.439411][T15598] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  346.442834][T15598] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  346.446378][T15598] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  346.450826][T15598] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  346.454881][T15598] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  346.458981][T15598] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  346.462829][T15598] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  346.690394][T15611] net_ratelimit: 58 callbacks suppressed
[  346.690410][T15611] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  346.731091][T10198] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  346.970567][T15627] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3898'.
[  347.159195][T15643] loop1: detected capacity change from 0 to 256
[  347.168850][T15643] exFAT-fs (loop1): bogus sectors bits per cluster : 46
[  347.176326][T15643] exFAT-fs (loop1): failed to read boot sector
[  347.182764][T15643] exFAT-fs (loop1): failed to recognize exfat type
[  347.814599][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3917'.
[  347.860756][T15676] ------------[ cut here ]------------
[  347.865179][T15676] RTNL: assertion failed at ./include/net/netdev_lock.h (72)
[  347.868287][T15676] WARNING: ./include/net/netdev_lock.h:72 at netdev_queue_get_dma_dev+0x483/0x500, CPU#1: syz.1.3919/15676
[  347.872946][T15676] Modules linked in:
[  347.875007][T15676] CPU: 1 UID: 0 PID: 15676 Comm: syz.1.3919 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  347.879381][T15676] Tainted: [L]=SOFTLOCKUP
[  347.881080][T15676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  347.884837][T15676] RIP: 0010:netdev_queue_get_dma_dev+0x48f/0x500
[  347.886881][T15676] Code: 75 d7 eb dd e8 22 fd 0e f8 90 0f 0b 90 e9 e0 fc ff ff e8 14 fd 0e f8 48 8d 3d 7d 73 af 06 48 c7 c6 bf 17 29 8e ba 48 00 00 00 <67> 48 0f b9 3a e9 be fc ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 9b fb
[  347.892986][T15676] RSP: 0018:ffffc90005f879e0 EFLAGS: 00010283
[  347.894965][T15676] RAX: ffffffff89b7ee2c RBX: ffff88811337c000 RCX: 0000000000080000
[  347.897396][T15676] RDX: 0000000000000048 RSI: ffffffff8e2917bf RDI: ffffffff906761b0
[  347.900232][T15676] RBP: 0000000000000000 R08: ffffffff90030b67 R09: 1ffffffff200616c
[  347.902759][T15676] R10: dffffc0000000000 R11: fffffbfff200616d R12: 0000000000000000
[  347.905336][T15676] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  347.908288][T15676] FS:  00007fa8104266c0(0000) GS:ffff8882a8f49000(0000) knlGS:0000000000000000
[  347.911135][T15676] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  347.913187][T15676] CR2: 0000200000002010 CR3: 00000001bda1a000 CR4: 00000000000006f0
[  347.915604][T15676] Call Trace:
[  347.916688][T15676]  <TASK>
[  347.917652][T15676]  zcrx_register_netdev+0x213/0x520
[  347.919295][T15676]  ? io_region_pin_pages+0xbe/0x190
[  347.920939][T15676]  ? __pfx_zcrx_register_netdev+0x10/0x10
[  347.922553][T15676]  ? __asan_memset+0x22/0x50
[  347.924100][T15676]  ? io_allocate_rbuf_ring+0x19c/0x230
[  347.925827][T15676]  io_register_zcrx+0x953/0xc00
[  347.927350][T15676]  ? __pfx_io_register_zcrx+0x10/0x10
[  347.929050][T15676]  ? __mutex_lock+0x30d/0x1550
[  347.930562][T15676]  ? __pfx___mutex_lock+0x10/0x10
[  347.932216][T15676]  ? __fget_files+0x3a2/0x420
[  347.933792][T15676]  ? __fget_files+0x2a/0x420
[  347.935363][T15676]  __se_sys_io_uring_register+0xc23/0x1ab0
[  347.937428][T15676]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  347.939451][T15676]  ? rcu_is_watching+0x15/0xb0
[  347.940972][T15676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.943140][T15676]  do_syscall_64+0x174/0x580
[  347.944797][T15676]  ? trace_irq_disable+0x3b/0x140
[  347.946440][T15676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  347.948347][T15676] RIP: 0033:0x7fa80f59e0d9
[  347.949787][T15676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  347.956584][T15676] RSP: 002b:00007fa810426028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  347.959984][T15676] RAX: ffffffffffffffda RBX: 00007fa80f825fa0 RCX: 00007fa80f59e0d9
[  347.963030][T15676] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003
[  347.966563][T15676] RBP: 00007fa80f635024 R08: 0000000000000000 R09: 0000000000000000
[  347.969709][T15676] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  347.972775][T15676] R13: 00007fa80f826038 R14: 00007fa80f825fa0 R15: 00007fff0ebc9b88
[  347.976071][T15676]  </TASK>
[  347.977323][T15676] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  347.980150][T15676] CPU: 1 UID: 0 PID: 15676 Comm: syz.1.3919 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  347.983940][T15676] Tainted: [L]=SOFTLOCKUP
[  347.985677][T15676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  347.988854][T15676] Call Trace:
[  347.990059][T15676]  <TASK>
[  347.991183][T15676]  vpanic+0x56c/0xa60
[  347.992562][T15676]  ? __pfx__printk+0x10/0x10
[  347.994195][T15676]  ? __pfx_vpanic+0x10/0x10
[  347.995844][T15676]  ? is_bpf_text_address+0x292/0x2b0
[  347.997667][T15676]  ? is_bpf_text_address+0x26/0x2b0
[  347.999284][T15676]  panic+0xc5/0xd0
[  348.000457][T15676]  ? __pfx_panic+0x10/0x10
[  348.002044][T15676]  __warn+0x315/0x4c0
[  348.003409][T15676]  ? netdev_queue_get_dma_dev+0x483/0x500
[  348.005277][T15676]  ? netdev_queue_get_dma_dev+0x483/0x500
[  348.007061][T15676]  __report_bug+0x276/0x570
[  348.008486][T15676]  ? netdev_queue_get_dma_dev+0x483/0x500
[  348.010258][T15676]  ? __pfx___report_bug+0x10/0x10
[  348.011840][T15676]  report_bug_entry+0x19a/0x290
[  348.013782][T15676]  ? netdev_queue_get_dma_dev+0x48f/0x500
[  348.016032][T15676]  ? netdev_queue_get_dma_dev+0x494/0x500
[  348.018157][T15676]  handle_bug+0xce/0x200
[  348.019768][T15676]  exc_invalid_op+0x1a/0x50
[  348.021200][T15676]  asm_exc_invalid_op+0x1a/0x20
[  348.022710][T15676] RIP: 0010:netdev_queue_get_dma_dev+0x48f/0x500
[  348.024639][T15676] Code: 75 d7 eb dd e8 22 fd 0e f8 90 0f 0b 90 e9 e0 fc ff ff e8 14 fd 0e f8 48 8d 3d 7d 73 af 06 48 c7 c6 bf 17 29 8e ba 48 00 00 00 <67> 48 0f b9 3a e9 be fc ff ff 44 89 f9 80 e1 07 38 c1 0f 8c 9b fb
[  348.030564][T15676] RSP: 0018:ffffc90005f879e0 EFLAGS: 00010283
[  348.032424][T15676] RAX: ffffffff89b7ee2c RBX: ffff88811337c000 RCX: 0000000000080000
[  348.034906][T15676] RDX: 0000000000000048 RSI: ffffffff8e2917bf RDI: ffffffff906761b0
[  348.037667][T15676] RBP: 0000000000000000 R08: ffffffff90030b67 R09: 1ffffffff200616c
[  348.040302][T15676] R10: dffffc0000000000 R11: fffffbfff200616d R12: 0000000000000000
[  348.042893][T15676] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  348.045316][T15676]  ? netdev_queue_get_dma_dev+0x47c/0x500
[  348.047122][T15676]  zcrx_register_netdev+0x213/0x520
[  348.048893][T15676]  ? io_region_pin_pages+0xbe/0x190
[  348.050496][T15676]  ? __pfx_zcrx_register_netdev+0x10/0x10
[  348.052445][T15676]  ? __asan_memset+0x22/0x50
[  348.054276][T15676]  ? io_allocate_rbuf_ring+0x19c/0x230
[  348.056385][T15676]  io_register_zcrx+0x953/0xc00
[  348.058184][T15676]  ? __pfx_io_register_zcrx+0x10/0x10
[  348.059950][T15676]  ? __mutex_lock+0x30d/0x1550
[  348.061765][T15676]  ? __pfx___mutex_lock+0x10/0x10
[  348.063652][T15676]  ? __fget_files+0x3a2/0x420
[  348.065263][T15676]  ? __fget_files+0x2a/0x420
[  348.066703][T15676]  __se_sys_io_uring_register+0xc23/0x1ab0
[  348.068844][T15676]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  348.070819][T15676]  ? rcu_is_watching+0x15/0xb0
[  348.072519][T15676]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.074485][T15676]  do_syscall_64+0x174/0x580
[  348.075956][T15676]  ? trace_irq_disable+0x3b/0x140
[  348.077692][T15676]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  348.079529][T15676] RIP: 0033:0x7fa80f59e0d9
[  348.081141][T15676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.087689][T15676] RSP: 002b:00007fa810426028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  348.091003][T15676] RAX: ffffffffffffffda RBX: 00007fa80f825fa0 RCX: 00007fa80f59e0d9
[  348.094180][T15676] RDX: 0000200000000100 RSI: 0000000000000020 RDI: 0000000000000003
[  348.097341][T15676] RBP: 00007fa80f635024 R08: 0000000000000000 R09: 0000000000000000
[  348.100371][T15676] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  348.103421][T15676] R13: 00007fa80f826038 R14: 00007fa80f825fa0 R15: 00007fff0ebc9b88
[  348.106156][T15676]  </TASK>
[  348.108061][T15676] Kernel Offset: disabled
[  348.109682][T15676] Rebooting in 86400 seconds..
