last executing test programs:

2m21.417661742s ago: executing program 1 (id=785):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000400), 0x4)

2m21.41746792s ago: executing program 1 (id=786):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r0)

2m21.287335486s ago: executing program 1 (id=787):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/devices/usb1\x00', &(0x7f0000000000)=""/256, 0x100)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/devices/usb1/speed\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/64, 0x40)

2m21.18881198s ago: executing program 1 (id=788):
socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0x4, 0x209, &(0x7f0000001c00)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x24000000)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, r1, 0x1, 0x0)
r2 = open(&(0x7f0000000100)='./file2\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x1c}}, 0x4004001)

2m21.047264655s ago: executing program 1 (id=789):
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001000), 0x4240, 0x0)

2m20.687590568s ago: executing program 1 (id=791):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000044c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x40001)
r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r2 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m20.510397985s ago: executing program 32 (id=791):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000044c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x40001)
r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r2 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m34.427810173s ago: executing program 2 (id=975):
getrusage(0xffffffffffffffff, &(0x7f0000000500))

1m34.351391888s ago: executing program 2 (id=976):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50)

1m34.345768646s ago: executing program 2 (id=978):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0xfffffffffffffffc, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x400c050)
r1 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r1, &(0x7f0000003e40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0x18}}], 0x1, 0x4001c90)

1m34.253537829s ago: executing program 2 (id=979):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@debug}, {@data_journal}, {@norecovery}]}, 0x3, 0x498, &(0x7f0000000240)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)

1m34.007309753s ago: executing program 2 (id=980):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000340)=0x200, 0x4)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000001c0)='wg1\x00', 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}], 0x1c)

1m33.470347208s ago: executing program 2 (id=989):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x29, 0x4e, 0x0, 0x0)

1m33.296650247s ago: executing program 33 (id=989):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x29, 0x4e, 0x0, 0x0)

1m20.519194088s ago: executing program 4 (id=1202):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x1}}, 0x20)

1m20.445097705s ago: executing program 4 (id=1203):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
write(r0, &(0x7f0000000440)="737562d751f911e16c3a6536743a6d6f643ab6b7d91c73797a5f6d6fdd831aeb23efe29cc6b68749787b8df9312d", 0x2e)

1m20.371569499s ago: executing program 4 (id=1205):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/brif/bridge_slave_0/multicast_router\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='2', 0x1)

1m20.370135768s ago: executing program 4 (id=1207):
socketpair(0xa, 0x1, 0x100, &(0x7f0000000700))

1m20.327135456s ago: executing program 4 (id=1208):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000001900)='./file0\x00', 0x8008, &(0x7f0000001940)=ANY=[@ANYRES8=0x0, @ANYRESOCT], 0x1, 0x2ae, &(0x7f0000001600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x89)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x3, 0x1731b, 0x3})

1m20.169561692s ago: executing program 4 (id=1209):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)

1m4.297995621s ago: executing program 34 (id=1209):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006)

56.834262062s ago: executing program 3 (id=1362):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210840, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$eJzs3d9rW1UcAPDvTX/sp66DMfRFBntwMpeurT8mCM5H0eFA32doszKaLqNJx1oHrg/uxRcZgogD8Q/w3cfhP+BfMdDBkFH0QYTITW+2tE2atkuXbPl84G7n5N6bc7+593t6Tm5CAhhYJ9J/chGvRsS3ScSRpnXDka08sbbd6qOb0+mSRK322V9JJNljje2T7P9DWeWViPjt64jTuc3tVpaW5wqlUnEhq49X56+NV5aWz1yZL8wWZ4tXJ6emzr09Nfneu+90LdY3Lv7zw6f3Pjr3zcnV7395cPROEufjcLauOY6ncKu5cqLwX1YaifMbNpzoQmP9JOn1AbArQ1mej0TaBxyJoSzrgRffVxFRAwZUIv9hQDXGAY25fZfmwc+Nhx+uTYDqsY82xz+89t5I7K/PjQ6uJutmRul8d6wL7adt/Prn3TvpElu/D3GgQx1gR26tRMTZ4eHN/X+S9X+7d7b+5vHWNrYxaH9/oJfupeOfN1uN/3KPxz/RYvxzqEXu7kbn/M896EIzbaXjv/dbjn8fd11jQ1ntpfqYbyS5fKVUPBsRL0fEqah1vPVxbvV+rd265vFfuqTtN8aC2XE8GN63fp+ZQrUQEaO7DHmdhyv14W2qTf+/vz7W3Xj+09fj4jbbOF68+1q7dZ3j31u1nyNeb3n+n5zWZOv7k+P162G8cVVs9vft47+3a7/X8T9ciTi4dfxjSfP92srO2/hp/7/Fdut2e/2PJp/Xy40kuFGoVhcmIkaTTzY/Pvlk30a9sX0a/6mTW/d/ra7/dPL1xTbjv33sdttN++H8z+zo/O+8cP/jL39s1/72zv9b9dKp7JGs/2stu1a2e4BP+/oBAAAAAABAP8lFxOFIcvnH5Vwun1/7fMexOJgrlSvV05fLi1dnov5d2bEYyTXudB9p+jzERPZ52EZ9ckN9KiKORsR3Qwfq9fx0uTTT6+ABAAAAAAAAAAAAAAAAAACgTxxq8/3/1B9DvT46YM/Vf9hgX6+PAuiFjj/5341fegL6Usf8B15Y8h8Gl/yHwSX/YXDJfxhc8h8Gl/yHwSX/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsuXriQLrXVRzen0/rM9aXFufL1MzPFylx+fnE6P11euJafLZdnS8X8dHm+0/OVyuVrE5OxeGO8WqxUxytLy5fmy4tXq5euzBdmi5eKI88kKgAAAAAAAAAAAAAAAAAAAHi+VJaW5wqlUnGhC4UkIrrxPP1W+CD64jD2MsA1u9p9uF+i2OvCyB6kzDMprGQHvrO9etQhAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAL/wcAAP//eBcqGw==")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
getdents64(r0, &(0x7f0000000140)=""/46, 0x2e)
getdents64(r0, 0xfffffffffffffffe, 0x29)

56.514035313s ago: executing program 3 (id=1365):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2300000003f01f00660000007f00000001000000", @ANYRES32], 0x50)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0)

56.227636833s ago: executing program 3 (id=1367):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r2 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
r3 = add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000b40)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r2)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000010c0)={r3, 0x300}, &(0x7f0000001100)={'enc=', 'pkcs1', ' hash=', {'sha3-384\x00'}}, 0x0, 0x0)

55.917245615s ago: executing program 3 (id=1369):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0xb, 0xc, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c)

55.824939923s ago: executing program 3 (id=1370):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0)

55.586820654s ago: executing program 3 (id=1372):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000780)={0x1, 0x1, 0xb, 0x17, 0x164, &(0x7f0000000380)})

40.53733721s ago: executing program 35 (id=1372):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000780)={0x1, 0x1, 0xb, 0x17, 0x164, &(0x7f0000000380)})

34.141350733s ago: executing program 0 (id=1495):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x80, 0x3, 0x3, 0x3}, 0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x6, 0xfffe, 0x202, 0x3e16, 0x7, 0x6, 0x2}, 0x20)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r0, &(0x7f00000000c0)='}', 0xff41, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)

33.104991247s ago: executing program 0 (id=1497):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)=""/1})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)

32.452680041s ago: executing program 0 (id=1503):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xb17, 0x2, 0x5, 0x4, 0xc, 0x7, 0x2379}, 0xc)

32.231197573s ago: executing program 0 (id=1505):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@fadd={0x58, 0x114, 0x6, {{0x9, 0x8}, 0xfffffffffffffffd, 0x0, 0x1, 0x6, 0xf, 0x9, 0x41, 0x7ff}}], 0x58}, 0x0)

31.87050334s ago: executing program 0 (id=1507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a00010500000000000000000000000800000000080005"], 0x20}}, 0x0)

31.538649397s ago: executing program 0 (id=1508):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x9], [0x400000000000000]})

27.605046219s ago: executing program 6 (id=1529):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0)
connect$phonet_pipe(r0, 0x0, 0x0)

27.416138316s ago: executing program 6 (id=1530):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd4}}, 0x0)

27.159021861s ago: executing program 6 (id=1531):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
epoll_create1(0x80000)
r0 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES32=r0], 0x0)

26.442345605s ago: executing program 5 (id=1533):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x2200c54, &(0x7f00000006c0)={[{@fat=@nfs}, {@shortname_win95}, {@rodir}, {@rodir}, {@uni_xlate}, {@utf8}, {@utf8}, {@utf8}, {@shortname_winnt}, {@fat=@dos1xfloppy}, {@fat=@discard}, {@uni_xlateno}, {@shortname_win95}]}, 0x0, 0x2c5, &(0x7f0000002a00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r0, &(0x7f0000002d00)={0x2020}, 0x2020)

26.073712016s ago: executing program 5 (id=1534):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x3, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in6=@mcast2, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0)

25.835511807s ago: executing program 5 (id=1535):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x9, 0x12)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)

25.680915086s ago: executing program 6 (id=1536):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000300)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f00000001c0)={0x18, 0x2, 0x0, 0x9})

25.616280872s ago: executing program 5 (id=1537):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
socket$netlink(0x10, 0x3, 0xc)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0}])

25.512323438s ago: executing program 6 (id=1538):
r0 = socket(0x11, 0x2, 0x0)
setsockopt(r0, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10)
r1 = socket(0x11, 0x2, 0x0)
setsockopt(r1, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)

24.856466828s ago: executing program 5 (id=1539):
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000030000504000000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000180080003000100000008000a"], 0x5c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

23.920216791s ago: executing program 6 (id=1540):
inotify_init1(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
pread64(r0, &(0x7f0000001280)=""/200, 0xc8, 0x17a7)

22.720039338s ago: executing program 5 (id=1541):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x100)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x9)

12.812826593s ago: executing program 36 (id=1508):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x9], [0x400000000000000]})

3.041088813s ago: executing program 37 (id=1540):
inotify_init1(0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
pread64(r0, &(0x7f0000001280)=""/200, 0xc8, 0x17a7)

0s ago: executing program 38 (id=1541):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x100)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x9)

kernel console output (not intermixed with test programs):

/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f0384f9e1d9 code=0x7ffc0000
[  117.075596][   T34] audit: type=1326 audit(1791714856.646:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0384f9e1d9 code=0x7ffc0000
[  117.075615][   T34] audit: type=1326 audit(1791714856.646:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0384f9e1d9 code=0x7ffc0000
[  117.075729][   T34] audit: type=1326 audit(1791714856.646:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0384f9e1d9 code=0x7ffc0000
[  117.075981][   T34] audit: type=1326 audit(1791714856.646:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0384f9e1d9 code=0x7ffc0000
[  117.076096][   T34] audit: type=1326 audit(1791714856.646:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.1.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0384f9e1d9 code=0x7ffc0000
[  117.192132][ T7584] loop2: detected capacity change from 0 to 4096
[  117.210431][ T7584] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  117.213092][ T7584] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  117.222085][ T7584] ntfs3(loop2): ino=5, "/" indx_read_ra
[  117.224491][ T7584] ntfs3(loop2): ino=5, "/" ntfs_readdir
[  117.244867][  T382] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  117.248433][ T5594] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  117.248503][ T5594] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  117.248529][ T5594] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  117.257431][  T382] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  117.435178][ T7595] loop2: detected capacity change from 0 to 512
[  117.449660][ T7595] EXT4-fs (loop2): orphan cleanup on readonly fs
[  117.452550][ T7595] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.756: corrupted in-inode xattr: invalid size in ea xattr
[  117.462760][ T7595] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  117.464323][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  117.464365][    C1] EXT4-fs (loop2): initial error at time 1791714857: ext4_iget_extra_inode:5210: inode 15
[  117.464451][    C1] EXT4-fs (loop2): last error at time 1791714857: ext4_iget_extra_inode:5210: inode 15
[  117.478867][ T7595] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.756: couldn't read orphan inode 15 (err -117)
[  117.483582][ T7595] loop2: lost filesystem error report for type 5 error -117
[  117.518063][ T7595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  117.564331][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.634639][ T7602] netlink: 'syz.2.759': attribute type 8 has an invalid length.
[  118.168438][ T5009] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  118.334221][ T5009] usb 3-1: Using ep0 maxpacket: 32
[  118.339959][ T5009] usb 3-1: unable to get BOS descriptor or descriptor too short
[  118.343053][ T5009] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  118.349491][ T5009] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.354069][ T5009] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.362440][ T5009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.365485][ T5009] usb 3-1: Product: syz
[  118.367444][ T5009] usb 3-1: Manufacturer: syz
[  118.369864][ T5009] usb 3-1: SerialNumber: syz
[  118.397898][ T5009] usb 3-1: selecting invalid altsetting 1
[  118.520453][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  118.612760][ T5009] usb 3-1: USB disconnect, device number 15
[  119.395309][ T7630] loop2: detected capacity change from 0 to 2048
[  119.429665][ T7630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.518642][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.859266][ T4995] Bluetooth: Frame is too long (len 10, expected len 8)
[  119.859338][ T4995] Bluetooth: Wrong link type (-71)
[  120.182006][ T7667] loop1: detected capacity change from 0 to 16
[  120.201481][ T7667] erofs (device loop1): mounted with root inode @ nid 36.
[  120.217421][ T7667] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 2904 size 16 => 808
[  120.228957][ T7667] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 2904 size 16 => 808
[  120.232514][ T7667] erofs (device loop1): read error -117 @ 0 of nid 89
[  120.249854][   T34] kauditd_printk_skb: 26 callbacks suppressed
[  120.249918][   T34] audit: type=1800 audit(1791714859.816:115): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.788" name="file2" dev="loop1" ino=89 res=0 errno=0
[  120.280016][ T5602] erofs (device loop1): invalid fast symlink size 39 @ nid 83
[  120.283228][ T5602] erofs (device loop1): invalid fast symlink size 39 @ nid 83
[  120.625139][ T5650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.830928][ T5650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.938394][ T7674] [U] 
[  121.014656][ T5650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.029883][ T7677] netlink: 240 bytes leftover after parsing attributes in process `syz.0.793'.
[  121.045495][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'.
[  121.097610][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.107867][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.110837][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.117682][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.121285][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.128398][ T7681] loop0: detected capacity change from 0 to 1024
[  121.172021][ T5650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.246465][ T7681] hfsplus: bad catalog file entry
[  121.296676][ T4286] hfsplus: bad catalog file entry
[  121.646378][ T5650] bridge_slave_1: left allmulticast mode
[  121.656104][ T5650] bridge_slave_1: left promiscuous mode
[  121.657092][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.668635][ T5650] bridge_slave_0: left allmulticast mode
[  121.670666][ T5650] bridge_slave_0: left promiscuous mode
[  121.672590][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.043479][ T5650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.066034][ T5650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.070007][ T5650] bond0 (unregistering): Released all slaves
[  122.077274][ T5341] 8021q: adding VLAN 0 to HW filter on device eth1
[  122.155164][ T5650] tipc: Disabling bearer <eth:macvtap0>
[  122.188400][ T5650] tipc: Left network mode
[  122.275396][   T33] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  122.435614][   T33] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  122.440335][   T33] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  122.440400][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.605233][ T5341] 8021q: adding VLAN 0 to HW filter on device eth2
[  122.668030][ T5650] hsr_slave_0: left promiscuous mode
[  122.671490][ T5650] hsr_slave_1: left promiscuous mode
[  122.676019][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.679553][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.687360][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.690784][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.720499][ T5650] veth1_macvtap: left promiscuous mode
[  122.722606][ T5650] veth0_macvtap: left promiscuous mode
[  122.725938][ T5650] veth1_vlan: left promiscuous mode
[  122.728484][ T5650] veth0_vlan: left promiscuous mode
[  122.890960][   T33] lg-g15 0003:046D:C222.0006: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0
[  122.985650][ T5650] team0 (unregistering): Port device team_slave_1 removed
[  123.007874][ T5650] team0 (unregistering): Port device team_slave_0 removed
[  123.075559][   T33] lg-g15 0003:046D:C222.0006: Error -71 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver
[  123.090375][   T33] usb 1-1: USB disconnect, device number 15
[  123.179412][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.179483][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.179598][ T7678] bridge_slave_0: entered allmulticast mode
[  123.180379][ T7678] bridge_slave_0: entered promiscuous mode
[  123.201360][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.201435][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.201527][ T7678] bridge_slave_1: entered allmulticast mode
[  123.208588][ T7678] bridge_slave_1: entered promiscuous mode
[  123.283050][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  123.294288][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  123.357057][ T7678] team0: Port device team_slave_0 added
[  123.367187][ T7678] team0: Port device team_slave_1 added
[  123.374624][ T4995] Bluetooth: hci2: command tx timeout
[  123.391135][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.393651][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.402305][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.417081][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.419831][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.428167][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  123.459257][ T7678] hsr_slave_0: entered promiscuous mode
[  123.461657][ T7678] hsr_slave_1: entered promiscuous mode
[  123.464323][ T7678] debugfs: 'hsr0' already exists in 'hsr'
[  123.466236][ T7678] Cannot create hsr debugfs directory
[  123.590196][ T5341] 8021q: adding VLAN 0 to HW filter on device eth3
[  123.786881][ T5341] 8021q: adding VLAN 0 to HW filter on device eth4
[  123.796127][ T7749] ip6gretap1: entered allmulticast mode
[  123.800641][ T7749] batman_adv: batadv0: Adding interface: ip6gretap1
[  123.803698][ T7749] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.812178][ T7749] batman_adv: batadv0: Interface activated: ip6gretap1
[  123.872622][ T7755] xt_CT: No such helper "snmp"
[  124.000115][ T7678] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  124.062607][ T7768] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead?
[  124.069245][ T7678] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  124.073166][ T7678] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  124.081949][ T7678] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  124.089340][ T7678] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  124.098963][ T7770] loop2: detected capacity change from 0 to 8
[  124.114214][ T7678] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  124.118977][ T7678] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  124.148704][ T7770] SQUASHFS error: xz decompression failed, data probably corrupt
[  124.148809][ T7770] SQUASHFS error: Failed to read block 0x108: -5
[  124.150897][ T7770] SQUASHFS error: Unable to read metadata cache entry [106]
[  124.150911][ T7770] SQUASHFS error: Unable to read inode 0x11f
[  124.184223][ T7678] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  124.324442][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.335656][ T7678] 8021q: adding VLAN 0 to HW filter on device team0
[  124.341118][ T7788] netlink: 480 bytes leftover after parsing attributes in process `syz.2.822'.
[  124.347494][ T7788] netlink: 480 bytes leftover after parsing attributes in process `syz.2.822'.
[  124.359488][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.359565][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state
[  124.379333][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.379429][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  124.473547][   T33] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  124.634536][   T33] usb 1-1: Using ep0 maxpacket: 32
[  124.637118][   T33] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  124.640934][   T33] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  124.645881][   T33] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  124.645922][   T33] usb 1-1: Product: syz
[  124.645960][   T33] usb 1-1: Manufacturer: syz
[  124.645985][   T33] usb 1-1: SerialNumber: syz
[  124.655609][   T33] usb 1-1: config 0 descriptor??
[  124.664585][ T7781] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  124.665958][   T33] hub 1-1:0.0: bad descriptor, ignoring hub
[  124.665991][   T33] hub 1-1:0.0: probe with driver hub failed with error -5
[  124.778230][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  124.809654][ T7678] veth0_vlan: entered promiscuous mode
[  124.817328][ T7678] veth1_vlan: entered promiscuous mode
[  124.833221][ T7678] veth0_macvtap: entered promiscuous mode
[  124.841276][ T7678] veth1_macvtap: entered promiscuous mode
[  124.851033][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.860610][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.906406][ T5650] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.906637][ T5650] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.906694][ T5650] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.906750][ T5650] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.992338][    T9] usb 1-1: USB disconnect, device number 16
[  125.118833][   T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.118881][   T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.158817][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.158867][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.197845][ T7825] netlink: 'syz.2.834': attribute type 12 has an invalid length.
[  125.197896][ T7825] netlink: 'syz.2.834': attribute type 29 has an invalid length.
[  125.197948][ T7825] netlink: 148 bytes leftover after parsing attributes in process `syz.2.834'.
[  125.197980][ T7825] netlink: 'syz.2.834': attribute type 1 has an invalid length.
[  125.198011][ T7825] netlink: 'syz.2.834': attribute type 2 has an invalid length.
[  125.240122][ T7827] loop3: detected capacity change from 0 to 8
[  125.262067][ T7827] SQUASHFS error: zlib decompression failed, data probably corrupt
[  125.262117][ T7827] SQUASHFS error: Failed to read block 0x9b: -5
[  125.262161][ T7827] SQUASHFS error: Unable to read metadata cache entry [99]
[  125.262185][ T7827] SQUASHFS error: Unable to read inode 0x127
[  125.313532][ T2436] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  125.355888][ T7833] loop2: detected capacity change from 0 to 164
[  125.376321][ T7833] isofs_fill_super: root inode is not a directory. Corrupted media?
[  125.453435][ T4995] Bluetooth: hci2: command tx timeout
[  125.464443][ T2436] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  125.469031][ T2436] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  125.471150][ T2436] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  125.471163][ T2436] usb 1-1: Product: syz
[  125.471169][ T2436] usb 1-1: Manufacturer: syz
[  125.471175][ T2436] usb 1-1: SerialNumber: syz
[  125.476882][ T2436] usb 1-1: config 0 descriptor??
[  125.477420][ T7781] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  125.478066][ T2436] hub 1-1:0.0: bad descriptor, ignoring hub
[  125.478076][ T2436] hub 1-1:0.0: probe with driver hub failed with error -5
[  125.625460][    T9] e1000 0000:00:03.0 eth0: Reset adapter
[  125.778145][ T7848] vivid-000: disconnect
[  125.788611][   T33] usb 1-1: USB disconnect, device number 17
[  125.792239][ T7847] vivid-000: reconnect
[  125.813905][ T5828] e1000 0000:00:03.0 eth0: Reset adapter
[  127.523256][ T4995] Bluetooth: hci2: command tx timeout
[  128.003936][  T806] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  129.604063][ T4995] Bluetooth: hci2: command tx timeout
[  131.443760][  T806] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
[  132.803940][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  132.804029][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  153.483722][ T7927] loop2: detected capacity change from 0 to 16
[  153.507562][ T7927] erofs (device loop2): mounted with root inode @ nid 36.
[  153.566907][ T7930] input: syz1 as /devices/virtual/input/input14
[  153.708963][ T7938] loop0: detected capacity change from 0 to 512
[  153.716082][ T7938] EXT4-fs: Ignoring removed oldalloc option
[  153.730583][ T7938] EXT4-fs (loop0): Test dummy encryption mode enabled
[  153.770882][ T7923] loop3: detected capacity change from 0 to 32768
[  153.789518][ T7938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.945371][ T7938] fscrypt: AES-256-XTS using blk-crypto-fallback
[  153.989712][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.040160][ T5664] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  154.122053][   T71] IPVS: starting estimator thread 0...
[  154.128380][ T7954] IPVS: rr: UDP [fe80::aa]:8080 - no destination available
[  154.212099][ T7955] IPVS: using max 86 ests per chain, 206400 per kthread
[  154.215712][ T5664] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  154.221637][ T5664] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  154.221678][ T5664] usb 3-1: config 0 has no interface number 0
[  154.221715][ T5664] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  154.232942][ T5664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.232978][ T5664] usb 3-1: Product: syz
[  154.233022][ T5664] usb 3-1: Manufacturer: syz
[  154.233059][ T5664] usb 3-1: SerialNumber: syz
[  154.243523][ T5664] usb 3-1: config 0 descriptor??
[  154.246445][ T7961] loop3: detected capacity change from 0 to 256
[  154.280608][ T5664] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  154.466403][    C1] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8
[  154.482537][ T7963] loop0: detected capacity change from 0 to 32768
[  154.630640][ T5664] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  154.649707][ T7967] netlink: 'syz.0.866': attribute type 2 has an invalid length.
[  154.667353][   T33] usb 3-1: USB disconnect, device number 16
[  154.691696][   T33] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  154.790918][ T5664] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  154.796276][ T5664] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.796323][ T5664] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  154.796357][ T5664] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.796393][ T5664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.828355][ T5664] usb 4-1: config 0 descriptor??
[  155.242274][ T7981] loop2: detected capacity change from 0 to 512
[  155.251431][ T7981] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  155.258272][ T5664] hid_parser_main: 27 callbacks suppressed
[  155.261360][ T5664] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0
[  155.263961][ T5664] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0
[  155.266453][ T5664] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0
[  155.269182][ T5664] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0
[  155.272260][ T5664] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0
[  155.276112][ T5664] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0
[  155.279611][ T5664] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0
[  155.283053][ T5664] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0
[  155.286366][ T5664] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0
[  155.291672][ T5664] magicmouse 0003:05AC:0324.0007: unknown main item tag 0x0
[  155.304537][ T5664] magicmouse 0003:05AC:0324.0007: hidraw0: USB HID v7f.fd Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0
[  155.469450][    T9] usb 4-1: USB disconnect, device number 2
[  156.152457][ T5603] Bluetooth: hci2: unexpected cc 0x203d length: 0 < 1
[  156.288641][ T7998] netlink: 'syz.3.879': attribute type 10 has an invalid length.
[  156.292556][ T7998] ipvlan0: entered allmulticast mode
[  156.294579][ T7998] veth0_vlan: entered allmulticast mode
[  156.303682][ T7998] team0: Device ipvlan0 failed to register rx_handler
[  156.349932][ T5664] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  156.362552][ T8002] loop3: detected capacity change from 0 to 256
[  156.510212][ T5664] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  156.514263][ T5664] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.519912][ T5664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.522559][ T5664] usb 1-1: Product: syz
[  156.524854][ T5664] usb 1-1: Manufacturer: syz
[  156.526578][ T5664] usb 1-1: SerialNumber: syz
[  156.535413][ T5664] usb 1-1: config 0 descriptor??
[  156.618027][ T7996] loop2: detected capacity change from 0 to 131072
[  156.619013][ T7996] F2FS-fs (loop2): Test dummy encryption mode enabled
[  156.676570][ T7996] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  156.684372][ T7996] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955
[  156.740708][ T7996] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903
[  156.754382][ T5664] cdc_subset 1-1:0.0: probe with driver cdc_subset failed with error -22
[  156.762365][ T8008] syz.3.882: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  156.762668][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.3.882 Not tainted syzkaller #0 PREEMPT(full) 
[  156.762703][ T8008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  156.762712][ T8008] Call Trace:
[  156.762719][ T8008]  <TASK>
[  156.762726][ T8008]  dump_stack_lvl+0xe8/0x150
[  156.762753][ T8008]  warn_alloc+0x24d/0x270
[  156.762767][ T8008]  ? __pfx_hlock_conflict+0x10/0x10
[  156.762788][ T8008]  ? __pfx_warn_alloc+0x10/0x10
[  156.762809][ T8008]  ? lockdep_unlock+0x5c/0xd0
[  156.762827][ T8008]  ? __lock_acquire+0x14b9/0x2e50
[  156.762845][ T8008]  ? disksize_store+0x121/0x3e0
[  156.762864][ T8008]  __vmalloc_node_range_noprof+0x127/0x1540
[  156.762893][ T8008]  ? lock_acquire+0x115/0x350
[  156.762914][ T8008]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  156.762937][ T8008]  ? down_write+0x16b/0x200
[  156.762976][ T8008]  ? __pfx_down_write+0x10/0x10
[  156.762993][ T8008]  ? disksize_store+0x121/0x3e0
[  156.763009][ T8008]  vzalloc_noprof+0xb2/0xe0
[  156.763028][ T8008]  ? disksize_store+0x121/0x3e0
[  156.763047][ T8008]  disksize_store+0x121/0x3e0
[  156.763063][ T8008]  ? sysfs_kf_write+0x166/0x260
[  156.763084][ T8008]  ? __pfx_sysfs_kf_write+0x10/0x10
[  156.763101][ T8008]  kernfs_fop_write_iter+0x3a4/0x540
[  156.763120][ T8008]  vfs_write+0x612/0xba0
[  156.763146][ T8008]  ? __pfx_vfs_write+0x10/0x10
[  156.763173][ T8008]  ? __fget_files+0x2a/0x420
[  156.763198][ T8008]  ksys_write+0x150/0x270
[  156.763244][ T8008]  ? __pfx_ksys_write+0x10/0x10
[  156.763273][ T8008]  do_syscall_64+0x166/0x520
[  156.763290][ T8008]  ? trace_irq_disable+0x3b/0x140
[  156.763304][ T8008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.763323][ T8008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.763336][ T8008] RIP: 0033:0x7f856a39e1d9
[  156.763351][ T8008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  156.763361][ T8008] RSP: 002b:00007f856b32c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  156.763375][ T8008] RAX: ffffffffffffffda RBX: 00007f856a625fa0 RCX: 00007f856a39e1d9
[  156.763384][ T8008] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003
[  156.763394][ T8008] RBP: 00007f856a435888 R08: 0000000000000000 R09: 0000000000000000
[  156.763401][ T8008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  156.763408][ T8008] R13: 00007f856a626038 R14: 00007f856a625fa0 R15: 00007ffc59adb058
[  156.763432][ T8008]  </TASK>
[  156.768369][ T8008] Mem-Info:
[  156.768382][ T8008] active_anon:25651 inactive_anon:0 isolated_anon:0
[  156.768382][ T8008]  active_file:0 inactive_file:57114 isolated_file:0
[  156.768382][ T8008]  unevictable:1000 dirty:366 writeback:0
[  156.768382][ T8008]  slab_reclaimable:9660 slab_unreclaimable:85797
[  156.768382][ T8008]  mapped:18766 shmem:20900 pagetables:3451
[  156.768382][ T8008]  sec_pagetables:0 bounce:0
[  156.768382][ T8008]  kernel_misc_reclaimable:0
[  156.768382][ T8008]  free:1099050 free_pcp:12453 free_cma:0
[  156.769105][ T8008] Node 0 active_anon:74716kB inactive_anon:0kB active_file:0kB inactive_file:175860kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:26684kB dirty:96kB writeback:0kB shmem:68696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8176kB pagetables:3800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  156.771422][ T8008] Node 1 active_anon:27888kB inactive_anon:0kB active_file:0kB inactive_file:52596kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:48380kB dirty:1368kB writeback:0kB shmem:14904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4080kB pagetables:10004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  156.771463][ T8008] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  156.771700][ T8008] lowmem_reserve[]: 0 1564 2092 2092 2092
[  156.771727][ T8008] Node 0 DMA32 free:1419956kB boost:0kB min:24772kB low:30964kB high:37156kB reserved_highatomic:0kB free_highatomic:0kB active_anon:59272kB inactive_anon:0kB active_file:0kB inactive_file:70392kB unevictable:0kB writepending:72kB zspages:0kB present:2080636kB managed:1602232kB mlocked:0kB bounce:0kB free_pcp:5256kB local_pcp:5184kB free_cma:0kB
[  156.771767][ T8008] lowmem_reserve[]: 0 0 527 527 527
[  156.771792][ T8008] Node 0 Normal free:31548kB boost:0kB min:8504kB low:10628kB high:12752kB reserved_highatomic:0kB free_highatomic:0kB active_anon:15348kB inactive_anon:0kB active_file:0kB inactive_file:105452kB unevictable:2000kB writepending:24kB zspages:0kB present:1572868kB managed:540392kB mlocked:0kB bounce:0kB free_pcp:476kB local_pcp:424kB free_cma:0kB
[  156.771833][ T8008] lowmem_reserve[]: 0 0 0 0 0
[  156.771858][ T8008] Node 1 Normal free:2929336kB boost:0kB min:56588kB low:70732kB high:84876kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27888kB inactive_anon:0kB active_file:0kB inactive_file:52596kB unevictable:2000kB writepending:1368kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:44080kB local_pcp:31632kB free_cma:0kB
[  156.771897][ T8008] lowmem_reserve[]: 0 0 0 0 0
[  156.771919][ T8008] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  156.772008][ T8008] Node 0 DMA32: 339*4kB (UME) 357*8kB (UME) 372*16kB (UE) 442*32kB (UE) 335*64kB (UE) 290*128kB (UME) 245*256kB (UE) 229*512kB (UE) 200*1024kB (UME) 7*2048kB (UE) 229*4096kB (UME) = 1419956kB
[  156.772112][ T8008] Node 0 Normal: 447*4kB (UE) 280*8kB (UE) 252*16kB (UE) 401*32kB (UE) 86*64kB (UE) 18*128kB (UE) 5*256kB (UE) 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 31516kB
[  156.772209][ T8008] Node 1 Normal: 572*4kB (UME) 401*8kB (UME) 642*16kB (UME) 48*32kB (ME) 56*64kB (ME) 38*128kB (UME) 16*256kB (UM) 7*512kB (UME) 20*1024kB (UME) 4*2048kB (M) 700*4096kB (UM) = 2929304kB
[  156.781476][ T8008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  156.781489][ T8008] Node 1 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  156.781500][ T8008] 77973 total pagecache pages
[  156.781505][ T8008] 0 pages in swap cache
[  156.781512][ T8008] Free swap  = 124996kB
[  156.781516][ T8008] Total swap = 124996kB
[  156.781523][ T8008] 1834877 pages RAM
[  156.781527][ T8008] 0 pages HighMem/MovableOnly
[  156.781533][ T8008] 396709 pages reserved
[  156.781539][ T8008] 0 pages cma reserved
[  156.999879][ T5664] usb 1-1: USB disconnect, device number 18
[  157.314248][ T8019] netlink: ct family unspecified
[  157.619590][   T33] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  157.624086][ T5664] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  157.779667][   T33] usb 4-1: Using ep0 maxpacket: 8
[  157.783614][   T33] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  157.790767][ T5664] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  157.797263][   T33] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.797338][   T33] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  157.797453][   T33] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.797504][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.816912][ T5664] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  157.820318][ T3169] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  157.824980][ T5664] usb 3-1: Product: syz
[  157.827035][ T5664] usb 3-1: SerialNumber: syz
[  157.839278][ T5664] usb 3-1: config 0 descriptor??
[  157.841675][   T33] hub 4-1:1.0: bad descriptor, ignoring hub
[  157.841713][   T33] hub 4-1:1.0: probe with driver hub failed with error -5
[  157.847647][   T33] cdc_wdm 4-1:1.0: skipping garbage
[  157.847702][   T33] cdc_wdm 4-1:1.0: skipping garbage
[  157.861410][   T33] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  157.863451][   T33] cdc_wdm 4-1:1.0: Unknown control protocol
[  158.005493][ T3169] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  158.010644][ T3169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.016624][ T3169] usb 1-1: config 0 descriptor??
[  158.022708][ T3169] cp210x 1-1:0.0: cp210x converter detected
[  158.065458][ T5664] hso 3-1:0.0: Failed to find BULK eps
[  158.269826][  T806] usb 3-1: USB disconnect, device number 17
[  158.401615][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  158.401694][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  158.403278][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  158.403305][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  158.406048][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  158.406058][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  158.408558][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  158.408566][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  158.411336][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  158.411344][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  158.411708][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  158.411717][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  158.413865][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  158.413873][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  158.416749][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  158.416760][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  158.419079][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  158.419092][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  158.421406][    C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  158.421413][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  158.454911][ T5664] usb 4-1: USB disconnect, device number 3
[  158.455024][    C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  158.654496][ T3169] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[  158.657066][ T3169] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  158.665094][ T3169] usb 1-1: cp210x converter now attached to ttyUSB0
[  158.669958][ T3169] usb 1-1: USB disconnect, device number 19
[  158.676970][ T3169] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  158.685049][ T3169] cp210x 1-1:0.0: device disconnected
[  159.059478][ T5828] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  159.219308][ T5828] usb 3-1: Using ep0 maxpacket: 16
[  159.225127][ T5828] usb 3-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd
[  159.228972][ T5828] usb 3-1: config 222 has an invalid interface number: 31 but max is 0
[  159.228985][ T5828] usb 3-1: config 222 has no interface number 0
[  159.229002][ T5828] usb 3-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11
[  159.229013][ T5828] usb 3-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024
[  159.229024][ T5828] usb 3-1: config 222 interface 31 has no altsetting 0
[  159.231243][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.231254][ T5828] usb 3-1: Product: syz
[  159.231259][ T5828] usb 3-1: Manufacturer: syz
[  159.231265][ T5828] usb 3-1: SerialNumber: syz
[  159.237660][ T8032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  159.455493][ T5828] ldusb 3-1:222.31: LD USB Device #0 now attached to major 180 minor 0
[  159.457625][ T5828] usb 3-1: USB disconnect, device number 18
[  159.463450][ T5828] ldusb 3-1:222.31: LD USB Device #0 now disconnected
[  160.221074][ T3169] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  160.369870][ T3169] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  160.373865][ T3169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  160.377764][ T3169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  160.377820][ T3169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  160.389045][ T3169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.389182][ T3169] usb 3-1: Product: syz
[  160.389232][ T3169] usb 3-1: Manufacturer: syz
[  160.389256][ T3169] usb 3-1: SerialNumber: syz
[  160.398126][ T3169] usb 3-1: config 0 descriptor??
[  160.571990][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'.
[  160.575033][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'.
[  160.578105][ T8055] netlink: 'syz.3.901': attribute type 7 has an invalid length.
[  160.611833][ T3169] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  160.654435][ T8057] loop3: detected capacity change from 0 to 512
[  160.678443][ T8057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.678533][ T8057] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.694687][ T8057] netlink: 'syz.3.902': attribute type 3 has an invalid length.
[  160.720362][ T7678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.822796][   T33] usb 3-1: USB disconnect, device number 19
[  161.414333][ T8074] FAULT_INJECTION: forcing a failure.
[  161.414333][ T8074] name failslab, interval 1, probability 0, space 0, times 0
[  161.421478][ T8074] CPU: 1 UID: 0 PID: 8074 Comm: syz.2.909 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  161.421510][ T8074] Tainted: [L]=SOFTLOCKUP
[  161.421515][ T8074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.421520][ T8074] Call Trace:
[  161.421524][ T8074]  <TASK>
[  161.421530][ T8074]  dump_stack_lvl+0xe8/0x150
[  161.421547][ T8074]  should_fail_ex+0x410/0x560
[  161.421565][ T8074]  should_failslab+0xa8/0x100
[  161.421578][ T8074]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  161.421592][ T8074]  ? __d_alloc+0x37/0x6f0
[  161.421603][ T8074]  ? __d_alloc+0x37/0x6f0
[  161.421617][ T8074]  __d_alloc+0x37/0x6f0
[  161.421628][ T8074]  ? packet_create+0x6f5/0x8b0
[  161.421638][ T8074]  d_alloc_pseudo+0x21/0xc0
[  161.421649][ T8074]  alloc_path_pseudo+0x107/0x220
[  161.421661][ T8074]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  161.421670][ T8074]  ? do_raw_spin_lock+0x12b/0x2f0
[  161.421685][ T8074]  alloc_file_pseudo+0xa8/0x1e0
[  161.421695][ T8074]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  161.421706][ T8074]  ? _raw_spin_unlock+0x28/0x50
[  161.421717][ T8074]  ? alloc_fd+0x651/0x6c0
[  161.421729][ T8074]  sock_alloc_file+0xb8/0x2e0
[  161.421739][ T8074]  ? __sys_socket+0x12b/0x1b0
[  161.421747][ T8074]  __sys_socket+0x13f/0x1b0
[  161.421756][ T8074]  __x64_sys_socket+0x7a/0x90
[  161.421764][ T8074]  do_syscall_64+0x166/0x520
[  161.421773][ T8074]  ? trace_irq_disable+0x3b/0x140
[  161.421780][ T8074]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.421791][ T8074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.421799][ T8074] RIP: 0033:0x7f99d3f9e1d9
[  161.421808][ T8074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.421815][ T8074] RSP: 002b:00007f99d4e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  161.421824][ T8074] RAX: ffffffffffffffda RBX: 00007f99d4225fa0 RCX: 00007f99d3f9e1d9
[  161.421830][ T8074] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011
[  161.421835][ T8074] RBP: 00007f99d4035888 R08: 0000000000000000 R09: 0000000000000000
[  161.421840][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.421844][ T8074] R13: 00007f99d4226038 R14: 00007f99d4225fa0 R15: 00007ffc4b3b8928
[  161.421856][ T8074]  </TASK>
[  161.547411][ T8080] loop2: detected capacity change from 0 to 1024
[  161.551366][ T8080] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  161.586784][ T8080] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.912: lblock 2 mapped to illegal pblock 2 (length 1)
[  161.586835][ T8080] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  161.593468][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  161.593484][    C1] EXT4-fs (loop2): initial error at time 1791714901: ext4_map_blocks:790: inode 3: block 2
[  161.593500][    C1] EXT4-fs (loop2): last error at time 1791714901: ext4_map_blocks:790: inode 3: block 2
[  161.610209][ T8080] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  161.610267][ T8080] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.912: lblock 0 mapped to illegal pblock 48 (length 1)
[  161.610318][ T8080] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  161.622422][ T8080] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  161.622472][ T8080] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.912: Failed to acquire dquot type 0
[  161.622509][ T8080] loop2: lost filesystem error report for type 5 error -117
[  161.623182][ T8080] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  161.623193][ T8080] loop2: lost filesystem error report for type 5 error -117
[  161.646484][ T8080] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.912: mark_inode_dirty error
[  161.646541][ T8080] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  161.659662][ T8087] loop3: detected capacity change from 0 to 16
[  161.661100][ T8080] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117)
[  161.661175][ T8080] EXT4-fs (loop2): 1 orphan inode deleted
[  161.665195][ T8080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  161.682268][ T8087] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 66700)
[  161.686743][   T53] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u9:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  161.763212][ T8089] loop3: detected capacity change from 0 to 512
[  161.768264][ T8089] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  161.781371][   T53] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  161.781429][   T53] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u9:2: Failed to release dquot type 0
[  161.811703][ T8089] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.915: bad orphan inode 131083
[  161.815020][ T8089] loop3: lost filesystem error report for type 5 error -117
[  161.818650][ T8089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.018151][  T806] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  162.108998][   T33] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  162.170674][  T806] usb 1-1: unable to get BOS descriptor or descriptor too short
[  162.170733][  T806] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  162.172264][  T806] usb 1-1: config index 0 descriptor too short (expected 40744, got 96)
[  162.172277][  T806] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.172285][  T806] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  162.174383][  T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.174395][  T806] usb 1-1: Product: syz
[  162.174401][  T806] usb 1-1: Manufacturer: syz
[  162.174407][  T806] usb 1-1: SerialNumber: syz
[  162.268941][   T33] usb 4-1: Using ep0 maxpacket: 32
[  162.271421][   T33] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  162.276108][   T33] usb 4-1: config index 0 descriptor too short (expected 27632, got 27)
[  162.278807][   T33] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  162.278817][   T33] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  162.284593][   T33] usb 4-1: config 1 has no interface number 0
[  162.286626][   T33] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  162.286640][   T33] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  162.286661][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.302279][   T33] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  162.392769][  T806] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  162.426645][  T806] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  162.427972][  T806] usb 1-1: USB disconnect, device number 20
[  162.446467][ T7968] udevd[7968]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  162.504891][   T33] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  162.935261][   T33] usb 4-1: USB disconnect, device number 4
[  162.936058][   T33] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  162.949015][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.954845][   T37] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u10:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  162.954887][   T37] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  162.966553][   T37] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  162.966634][   T37] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u10:1: Failed to release dquot type 0
[  162.966679][   T37] loop2: lost filesystem error report for type 5 error -117
[  162.985313][ T5594] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  162.999792][ T5594] loop2: lost filesystem error report for type 5 error -117
[  163.005664][ T5594] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[  163.013338][ T5594] loop2: lost filesystem error report for type 5 error -117
[  163.013619][ T5594] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error
[  163.022572][ T5594] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  163.022912][ T5594] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0
[  163.034763][ T5594] loop2: lost filesystem error report for type 5 error -117
[  163.139999][ T8100] loop2: detected capacity change from 0 to 512
[  163.181874][ T8100] EXT4-fs (loop2): 1 orphan inode deleted
[  163.184044][ T8100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.184237][ T8100] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.193763][ T8100] EXT4-fs (loop2): shut down requested (2)
[  163.201527][ T1111] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  163.243479][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.438239][ T8108] netlink: 67 bytes leftover after parsing attributes in process `syz.2.922'.
[  163.525425][ T7678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.629007][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'.
[  163.700696][ T8121] loop3: detected capacity change from 0 to 512
[  163.703201][ T8121] EXT4-fs: Ignoring removed bh option
[  163.720807][ T8125] loop2: detected capacity change from 0 to 128
[  163.723212][ T8121] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  163.752951][ T8121] EXT4-fs (loop3): 1 truncate cleaned up
[  163.753737][ T8121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  163.760882][ T8121] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  163.873743][ T7678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.067716][ T8003] IPVS: starting estimator thread 0...
[  164.147033][ T8152] input: syz0 as /devices/virtual/input/input16
[  164.169937][ T8148] IPVS: using max 85 ests per chain, 204000 per kthread
[  164.208750][ T3169] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  164.358701][ T3169] usb 4-1: Using ep0 maxpacket: 16
[  164.360030][ T3169] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  164.361029][ T3169] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.361051][ T3169] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  164.361059][ T3169] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.361069][ T3169] usb 4-1: config 0 interface 0 has no altsetting 0
[  164.362926][ T3169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24
[  164.362937][ T3169] usb 4-1: Product: syz
[  164.362942][ T3169] usb 4-1: Manufacturer: syz
[  164.362949][ T3169] usb 4-1: SerialNumber: syz
[  164.368466][ T3169] usb 4-1: config 0 descriptor??
[  164.745916][ T8167] vivid-000: disconnect
[  164.746166][ T8166] vivid-000: reconnect
[  164.797700][ T3169] usb 4-1: USB disconnect, device number 5
[  165.368318][ T8186] netlink: 'syz.3.957': attribute type 4 has an invalid length.
[  165.370974][ T8186] netlink: 152 bytes leftover after parsing attributes in process `syz.3.957'.
[  165.394411][ T8186] .`: renamed from bond0 (while UP)
[  165.444642][ T8192] netlink: 'syz.3.960': attribute type 83 has an invalid length.
[  165.466498][ T8188] FAULT_INJECTION: forcing a failure.
[  165.466498][ T8188] name failslab, interval 1, probability 0, space 0, times 0
[  165.466559][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.2.958 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.466588][ T8188] Tainted: [L]=SOFTLOCKUP
[  165.466592][ T8188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.466597][ T8188] Call Trace:
[  165.466602][ T8188]  <TASK>
[  165.466606][ T8188]  dump_stack_lvl+0xe8/0x150
[  165.466623][ T8188]  should_fail_ex+0x410/0x560
[  165.466640][ T8188]  should_failslab+0xa8/0x100
[  165.466651][ T8188]  __kmalloc_cache_node_noprof+0xaa/0x620
[  165.466661][ T8188]  ? elevator_alloc+0x7a/0x1b0
[  165.466671][ T8188]  ? elevator_alloc+0x7a/0x1b0
[  165.466683][ T8188]  elevator_alloc+0x7a/0x1b0
[  165.466695][ T8188]  blk_mq_init_sched+0x9b/0x620
[  165.466708][ T8188]  elevator_switch+0x26f/0x7b0
[  165.466719][ T8188]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  165.466729][ T8188]  elevator_change+0x2fa/0x480
[  165.466741][ T8188]  ? do_raw_spin_unlock+0x4d/0x200
[  165.466759][ T8188]  elv_iosched_store+0x504/0x630
[  165.466779][ T8188]  ? __pfx_elv_iosched_store+0x10/0x10
[  165.466826][ T8188]  ? __lock_acquire+0x6df/0x2e50
[  165.466845][ T8188]  queue_attr_store+0x207/0x2b0
[  165.466866][ T8188]  ? __pfx_queue_attr_store+0x10/0x10
[  165.466881][ T8188]  ? lock_acquire+0x115/0x350
[  165.466889][ T8188]  ? sysfs_file_kobj+0x1a/0x230
[  165.466901][ T8188]  ? sysfs_file_kobj+0x1a/0x230
[  165.466916][ T8188]  ? sysfs_file_kobj+0x1a/0x230
[  165.466924][ T8188]  ? sysfs_file_kobj+0x1a/0x230
[  165.466934][ T8188]  ? sysfs_file_kobj+0x1e4/0x230
[  165.466944][ T8188]  ? sysfs_kf_write+0x166/0x260
[  165.466955][ T8188]  ? __pfx_sysfs_kf_write+0x10/0x10
[  165.466964][ T8188]  kernfs_fop_write_iter+0x3a4/0x540
[  165.466976][ T8188]  vfs_write+0x612/0xba0
[  165.466992][ T8188]  ? __pfx_vfs_write+0x10/0x10
[  165.467007][ T8188]  ? __fget_files+0x2a/0x420
[  165.467023][ T8188]  ksys_write+0x150/0x270
[  165.467035][ T8188]  ? __pfx_ksys_write+0x10/0x10
[  165.467052][ T8188]  do_syscall_64+0x166/0x520
[  165.467062][ T8188]  ? trace_irq_disable+0x3b/0x140
[  165.467070][ T8188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.467111][ T8188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.467125][ T8188] RIP: 0033:0x7f99d3f9e1d9
[  165.467139][ T8188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.467149][ T8188] RSP: 002b:00007f99d4e7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  165.467159][ T8188] RAX: ffffffffffffffda RBX: 00007f99d4225fa0 RCX: 00007f99d3f9e1d9
[  165.467165][ T8188] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000004
[  165.467170][ T8188] RBP: 00007f99d4035888 R08: 0000000000000000 R09: 0000000000000000
[  165.467175][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.467180][ T8188] R13: 00007f99d4226038 R14: 00007f99d4225fa0 R15: 00007ffc4b3b8928
[  165.467193][ T8188]  </TASK>
[  165.476331][ T8188] elv: switch to "kyber" failed, falling back to "none"
[  165.659269][ T5664] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  165.699410][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'.
[  165.816213][ T8213] loop3: detected capacity change from 0 to 256
[  165.825517][ T8213] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  165.828911][   T34] audit: type=1800 audit(1791714905.392:116): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.970" name="file1" dev="loop3" ino=1048654 res=0 errno=0
[  165.835438][ T8213] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  165.835492][ T8213] FAT-fs (loop3): Filesystem has been set read-only
[  165.840440][ T5664] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  165.843507][ T5664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.843522][ T5664] usb 1-1: Product: syz
[  165.843532][ T5664] usb 1-1: Manufacturer: syz
[  165.843540][ T5664] usb 1-1: SerialNumber: syz
[  165.849345][ T5664] usb 1-1: config 0 descriptor??
[  165.988565][   T33] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  166.073953][ T5664] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  166.149956][   T33] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00
[  166.151594][   T33] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  166.151609][   T33] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  166.154376][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.154390][   T33] usb 3-1: Product: syz
[  166.154398][   T33] usb 3-1: Manufacturer: syz
[  166.154406][   T33] usb 3-1: SerialNumber: syz
[  166.165708][   T33] kobil_sct 3-1:1.0: KOBIL USB smart card terminal converter detected
[  166.173467][   T33] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  166.420606][   T33] usb 3-1: USB disconnect, device number 20
[  166.434499][   T33] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  166.436048][   T33] kobil_sct 3-1:1.0: device disconnected
[  166.875150][ T5664] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  166.877936][ T5664] usb 1-1: USB disconnect, device number 21
[  167.123687][ T8233] loop2: detected capacity change from 0 to 512
[  167.145272][ T8233] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  167.158920][ T8233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  167.158996][ T8233] System zones: 1-12
[  167.164097][ T8233] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.979: bad orphan inode 131072
[  167.168746][ T8233] loop2: lost filesystem error report for type 5 error -117
[  167.182129][ T8233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.210740][ T8236] loop3: detected capacity change from 0 to 512
[  167.298737][ T8233] overlayfs: upper fs needs to support d_type.
[  167.344652][ T5594] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /347/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  167.567911][ T8247] fuse: Unexpected value for 'default_permissions'
[  167.652559][ T8253] loop3: detected capacity change from 0 to 4096
[  167.658037][ T8253] ntfs3(loop3): ino=0, mi_enum_attr
[  167.662680][ T8253] ntfs3(loop3): ino=0, mi_enum_attr
[  167.662786][ T8253] ntfs3(loop3): Failed to load $MFT (-22).
[  167.715028][ T5009] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  167.783567][ T7548] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.869434][ T5009] usb 1-1: Using ep0 maxpacket: 32
[  167.872819][ T5009] usb 1-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=1a.7c
[  167.877325][ T5009] usb 1-1: config 87 has an invalid interface number: 229 but max is 1
[  167.877376][ T5009] usb 1-1: config 87 has no interface number 1
[  167.877419][ T5009] usb 1-1: config 87 interface 229 has no altsetting 0
[  167.881652][ T5009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.881662][ T5009] usb 1-1: Product: syz
[  167.881668][ T5009] usb 1-1: Manufacturer: syz
[  167.881674][ T5009] usb 1-1: SerialNumber: syz
[  167.896610][ T5650] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.050892][ T5650] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.121336][ T5009] rndis_host 1-1:87.229: probe with driver rndis_host failed with error -22
[  168.121635][ T5009] cdc_acm 1-1:87.229: probe with driver cdc_acm failed with error -22
[  168.152678][ T5009] usb 1-1: USB disconnect, device number 22
[  168.192354][ T5650] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.287914][ T4995] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.298750][ T4995] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.301197][ T4995] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.301577][ T4995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.301868][ T4995] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  168.378283][ T5650] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.590111][ T5650] bridge_slave_1: left allmulticast mode
[  168.592616][ T5650] bridge_slave_1: left promiscuous mode
[  168.592801][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.602307][ T5650] bridge_slave_0: left allmulticast mode
[  168.602357][ T5650] bridge_slave_0: left promiscuous mode
[  168.602475][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.841884][ T5650] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[  168.841936][ T5650] ip6gretap1 (unregistering): left allmulticast mode
[  168.965471][ T8259] orangefs_mount: mount request failed with -4
[  169.051626][ T5650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.059910][ T5650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.064862][ T5650] bond0 (unregistering): Released all slaves
[  169.076177][ T5650] bond1 (unregistering): left allmulticast mode
[  169.076225][ T5650] bond1 (unregistering): left promiscuous mode
[  169.082870][ T5650] team0: Port device macvlan2 removed
[  169.096087][ T5650] bond1 (unregistering): Released all slaves
[  169.111971][ T5341] 8021q: adding VLAN 0 to HW filter on device eth5
[  169.121283][ T8287] overlayfs: invalid origin (0000)
[  169.298111][ T5009] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  169.462577][ T5341] 8021q: adding VLAN 0 to HW filter on device eth6
[  169.471073][ T5009] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  169.474827][ T5009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.476257][ T5009] usb 4-1: config 0 descriptor??
[  169.503355][ T5009] gspca_main: sunplus-2.14.0 probing 055f:c420
[  169.562172][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.562217][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.566871][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  169.566883][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.581968][ T5650] veth1_macvtap: left promiscuous mode
[  169.582089][ T5650] veth0_macvtap: left promiscuous mode
[  169.582157][ T5650] veth1_vlan: left promiscuous mode
[  169.582183][ T5650] veth0_vlan: left promiscuous mode
[  169.915597][ T5650] team0 (unregistering): Port device team_slave_1 removed
[  169.929873][ T5650] team0 (unregistering): Port device team_slave_0 removed
[  170.074395][ T5341] 8021q: adding VLAN 0 to HW filter on device eth7
[  170.098092][ T5009] gspca_sunplus: reg_w_riv err -71
[  170.098204][ T5009] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  170.113830][ T5009] usb 4-1: USB disconnect, device number 6
[  170.322242][ T4995] Bluetooth: hci0: command tx timeout
[  170.370936][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.372607][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.372774][ T8260] bridge_slave_0: entered allmulticast mode
[  170.377419][ T8260] bridge_slave_0: entered promiscuous mode
[  170.394258][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.400065][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.400186][ T8260] bridge_slave_1: entered allmulticast mode
[  170.407197][ T8260] bridge_slave_1: entered promiscuous mode
[  170.516256][ T8260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.531030][ T8260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.587599][ T5341] 8021q: adding VLAN 0 to HW filter on device eth8
[  170.627186][ T8260] team0: Port device team_slave_0 added
[  170.640876][ T8260] team0: Port device team_slave_1 added
[  170.708031][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.708073][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.708108][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.709066][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.709072][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  170.709082][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.727968][ T4995] Bluetooth: hci1: command 0x0406 tx timeout
[  170.789984][ T8260] hsr_slave_0: entered promiscuous mode
[  170.790528][ T8260] hsr_slave_1: entered promiscuous mode
[  170.790860][ T8260] debugfs: 'hsr0' already exists in 'hsr'
[  170.790871][ T8260] Cannot create hsr debugfs directory
[  170.809774][ T8331] loop3: detected capacity change from 0 to 256
[  170.810273][ T8331] exfat: Deprecated parameter 'utf8'
[  170.816871][ T8331] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  170.894821][   T34] audit: type=1800 audit(1791714910.462:117): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1004" name="file1" dev="loop3" ino=1048656 res=0 errno=0
[  171.141967][ T8260] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  171.146693][ T8260] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  171.149883][ T8260] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  171.153848][ T8260] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  171.154468][ T8260] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  171.161720][ T8260] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  171.163934][ T8260] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  171.169436][ T8260] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  171.195276][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.195362][ T8260] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.198716][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.198928][ T8260] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.209209][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.212320][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.275776][ T8260] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.284126][ T8260] 8021q: adding VLAN 0 to HW filter on device team0
[  171.294806][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.294885][ T8003] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.301886][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.301971][ T8003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.333567][ T8347] kAFS: bad VL server IP address
[  171.561485][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'.
[  171.635649][ T8371] loop3: detected capacity change from 0 to 512
[  171.643275][ T8371] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.653249][ T8371] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  171.715375][ T8260] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.792594][ T8381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1017'.
[  171.920533][ T8260] veth0_vlan: entered promiscuous mode
[  171.939062][ T8260] veth1_vlan: entered promiscuous mode
[  171.995948][ T8260] veth0_macvtap: entered promiscuous mode
[  172.001680][ T8260] veth1_macvtap: entered promiscuous mode
[  172.055620][ T8260] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.064682][ T8260] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.148256][ T5650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.148487][ T5650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.148648][ T5650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.148681][ T5650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.253279][ T8003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.253325][ T8003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.299438][ T8395] file system registered
[  172.310351][ T8003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.310397][ T8003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.400600][ T5603] Bluetooth: hci0: command tx timeout
[  172.454571][ T7678] ffs_data_put(): freeing
[  172.541351][ T8405] loop4: detected capacity change from 0 to 2048
[  172.591306][ T8408] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.633180][ T8408] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  172.646201][ T8408] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  172.666038][ T8411] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  172.678744][ T8408] Remounting filesystem read-only
[  172.697238][ T8260] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  172.707790][    T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  172.849886][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.853548][ T8422] bridge_slave_0 (unregistering): left allmulticast mode
[  172.854049][ T8422] bridge_slave_0 (unregistering): left promiscuous mode
[  172.854110][ T8422] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.862167][    T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[  172.866204][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  172.866265][    T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024
[  172.866293][    T9] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  172.866320][    T9] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  172.866346][    T9] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  172.866380][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.900356][ T8400] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  172.908784][    T9] ims_pcu 1-1:1.0: Max IN packet size is too small (0)
[  172.908838][    T9] ims_pcu 1-1:1.0: probe with driver ims_pcu failed with error -22
[  173.115696][ T3169] usb 1-1: USB disconnect, device number 23
[  173.182799][ T8430] loop4: detected capacity change from 0 to 32768
[  173.187181][ T8430] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1036 (8430)
[  173.220515][ T8430] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  173.220577][ T8430] BTRFS info (device loop4): using sha256 checksum algorithm
[  173.259842][ T8430] BTRFS info (device loop4): enabling ssd optimizations
[  173.259892][ T8430] BTRFS info (device loop4): turning on async discard
[  173.259924][ T8430] BTRFS info (device loop4): enabling free space tree
[  173.339022][ T8260] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  173.459453][ T8456] netlink: 'syz.3.1042': attribute type 10 has an invalid length.
[  173.465290][ T8456] team0: Device veth0_vlan failed to register rx_handler
[  173.643916][ T8460] loop3: detected capacity change from 0 to 4096
[  173.675521][ T8460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.710279][ T8460] syz.3.1043 (pid 8460) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  173.735836][ T7678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.749765][ T8471] Bluetooth: MGMT ver 1.23
[  173.752550][ T8471] Bluetooth: hci0: service_discovery: too big uuid_count value 48059
[  173.816065][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1048'.
[  173.960302][ T5664] libceph: connect (1)[c::]:6789 error -101
[  173.960544][ T5664] libceph: mon0 (1)[c::]:6789 connect error
[  173.966278][ T5664] libceph: connect (1)[c::]:6789 error -101
[  173.971042][ T5664] libceph: mon0 (1)[c::]:6789 connect error
[  173.976123][ T8486] ceph: No mds server is up or the cluster is laggy
[  174.043199][ T8494] No control pipe specified
[  174.071566][ T8495] bond0: option arp_interval: invalid value ()
[  174.071621][ T8495] bond0: option arp_interval: allowed values 0 - 2147483647
[  174.137901][ T5664] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  174.229148][ T8509] loop4: detected capacity change from 0 to 256
[  174.241046][ T8509] exfat: Deprecated parameter 'utf8'
[  174.241107][ T8509] exfat: Deprecated parameter 'namecase'
[  174.241171][ T8509] exfat: Deprecated parameter 'namecase'
[  174.241181][ T8509] exfat: Deprecated parameter 'utf8'
[  174.257120][ T8509] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  174.257363][ T8509] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  174.264032][ T8511] ieee802154 phy0 wpan0: encryption failed: -22
[  174.298463][ T5664] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  174.310820][ T5664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.310869][ T5664] usb 4-1: Product: syz
[  174.310899][ T5664] usb 4-1: Manufacturer: syz
[  174.310922][ T5664] usb 4-1: SerialNumber: syz
[  174.314148][ T5664] usb 4-1: config 0 descriptor??
[  174.320393][ T5664] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  174.339326][ T5664] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  174.342133][ T5664] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  174.342169][ T5664] usb 4-1: media controller created
[  174.356325][ T5664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  174.414935][ T5664] DVB: Unable to find symbol mt352_attach()
[  174.449824][ T5664] DVB: Unable to find symbol nxt6000_attach()
[  174.449872][ T5664] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  174.454987][ T5664] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[  174.474239][ T5664] dvb-usb: schedule remote query interval to 1000 msecs.
[  174.474288][ T5664] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  174.476521][ T5664] dvb-usb: bulk message failed: -22 (7/0)
[  174.476535][ T5664] dvb-usb: bulk message failed: -22 (7/0)
[  174.487540][ T5603] Bluetooth: hci0: command tx timeout
[  174.510374][   T34] audit: type=1326 audit(1791714914.083:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaac79e1d9 code=0x7ffc0000
[  174.510424][   T34] audit: type=1326 audit(1791714914.083:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaac79e1d9 code=0x7ffc0000
[  174.510476][   T34] audit: type=1326 audit(1791714914.083:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fbaac79e1d9 code=0x7ffc0000
[  174.520026][ T8525] vti0: entered promiscuous mode
[  174.527830][   T34] audit: type=1326 audit(1791714914.083:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaac79e1d9 code=0x7ffc0000
[  174.527854][   T34] audit: type=1326 audit(1791714914.083:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.4.1071" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaac79e1d9 code=0x7ffc0000
[  174.542469][ T5664] usb 4-1: USB disconnect, device number 7
[  174.612608][ T8528] loop4: detected capacity change from 0 to 8
[  174.668674][ T5664] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  175.158524][ T8548] IPv6: Can't replace route, no match found
[  175.257079][ T5341] veth0_macvtap: left promiscuous mode
[  175.455589][ T8551] loop3: detected capacity change from 0 to 32768
[  175.514402][ T8551] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  175.534354][ T8551] XFS (loop3): Ending clean mount
[  175.561614][ T8551] XFS (loop3): User initiated shutdown received.
[  175.564671][ T8551] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  175.571531][ T5664] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  175.574620][ T8551] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  175.593663][ T7678] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  175.718295][ T5664] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  175.723217][ T5664] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.727367][ T5664] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  175.730913][ T5664] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  175.734410][ T5664] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  175.738773][ T5664] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.082066][ T8596] loop3: detected capacity change from 0 to 4096
[  176.085826][ T8596] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  176.104756][ T8596] ntfs3(loop3): ino=19, mi_enum_attr
[  176.322166][ T8609] loop3: detected capacity change from 0 to 2048
[  176.366092][ T8609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.567349][ T5603] Bluetooth: hci0: command tx timeout
[  176.574406][ T5664] gud 5-1:1.0: Failed to get connectors (error=-5)
[  176.576626][ T5664] gud 5-1:1.0: probe with driver gud failed with error -5
[  176.669485][   T34] audit: type=1326 audit(1791714916.243:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd99e1d9 code=0x7ffc0000
[  176.669557][   T34] audit: type=1326 audit(1791714916.243:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd99e1d9 code=0x7ffc0000
[  176.688651][   T34] audit: type=1326 audit(1791714916.263:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd99e1d9 code=0x7ffc0000
[  176.688718][   T34] audit: type=1326 audit(1791714916.263:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6ebd99e1d9 code=0x7ffc0000
[  176.688806][   T34] audit: type=1326 audit(1791714916.263:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd99e1d9 code=0x7ffc0000
[  176.688859][   T34] audit: type=1326 audit(1791714916.263:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd99e1d9 code=0x7ffc0000
[  176.723742][   T34] audit: type=1326 audit(1791714916.263:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ebd99e1d9 code=0x7ffc0000
[  176.724029][   T34] audit: type=1326 audit(1791714916.283:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6ebd99e1d9 code=0x7ffc0000
[  176.724120][   T34] audit: type=1326 audit(1791714916.283:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.0.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6ebd99e1d9 code=0x7ffc0000
[  176.776231][ T5664] usb 5-1: USB disconnect, device number 2
[  176.923466][ T8639] FAULT_INJECTION: forcing a failure.
[  176.923466][ T8639] name failslab, interval 1, probability 0, space 0, times 0
[  176.923529][ T8639] CPU: 0 UID: 0 PID: 8639 Comm: syz.0.1114 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.923542][ T8639] Tainted: [L]=SOFTLOCKUP
[  176.923545][ T8639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  176.923549][ T8639] Call Trace:
[  176.923553][ T8639]  <TASK>
[  176.923558][ T8639]  dump_stack_lvl+0xe8/0x150
[  176.923573][ T8639]  should_fail_ex+0x410/0x560
[  176.923588][ T8639]  should_failslab+0xa8/0x100
[  176.923599][ T8639]  __kmalloc_cache_noprof+0xa3/0x600
[  176.923606][ T8639]  ? lockdep_hardirqs_on+0x7b/0x110
[  176.923616][ T8639]  ? binder_open+0x11a/0xba0
[  176.923626][ T8639]  ? binder_open+0x11a/0xba0
[  176.923639][ T8639]  binder_open+0x11a/0xba0
[  176.923653][ T8639]  ? __pfx_binder_open+0x10/0x10
[  176.923665][ T8639]  ? tomoyo_file_open+0x163/0x220
[  176.923675][ T8639]  ? fsnotify_open_perm_and_set_mode+0x13c/0x6b0
[  176.923685][ T8639]  ? __pfx_binder_open+0x10/0x10
[  176.923696][ T8639]  do_dentry_open+0x816/0x1380
[  176.923709][ T8639]  vfs_open+0x3b/0x340
[  176.923716][ T8639]  ? path_openat+0x1428/0x1d60
[  176.923724][ T8639]  path_openat+0x1443/0x1d60
[  176.923738][ T8639]  do_file_open+0x23e/0x4a0
[  176.923746][ T8639]  ? __pfx_do_file_open+0x10/0x10
[  176.923760][ T8639]  ? _raw_spin_unlock+0x28/0x50
[  176.923767][ T8639]  ? alloc_fd+0x651/0x6c0
[  176.923780][ T8639]  do_sys_openat2+0x115/0x200
[  176.923789][ T8639]  ? __se_sys_futex+0x3a8/0x450
[  176.923799][ T8639]  ? __pfx_do_sys_openat2+0x10/0x10
[  176.923807][ T8639]  ? ksys_write+0x242/0x270
[  176.923817][ T8639]  ? __pfx___se_sys_futex+0x10/0x10
[  176.923829][ T8639]  ? __pfx_ksys_write+0x10/0x10
[  176.923858][ T8639]  __x64_sys_openat+0x138/0x170
[  176.923871][ T8639]  do_syscall_64+0x166/0x520
[  176.923879][ T8639]  ? trace_irq_disable+0x3b/0x140
[  176.923886][ T8639]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.923897][ T8639]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.923927][ T8639] RIP: 0033:0x7f6ebd99e1d9
[  176.923936][ T8639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.923944][ T8639] RSP: 002b:00007f6ebe7d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  176.923953][ T8639] RAX: ffffffffffffffda RBX: 00007f6ebdc25fa0 RCX: 00007f6ebd99e1d9
[  176.923959][ T8639] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c
[  176.923964][ T8639] RBP: 00007f6ebda35888 R08: 0000000000000000 R09: 0000000000000000
[  176.923969][ T8639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.923975][ T8639] R13: 00007f6ebdc26038 R14: 00007f6ebdc25fa0 R15: 00007fff43ced558
[  176.923987][ T8639]  </TASK>
[  177.267826][   T34] audit: type=1326 audit(1791714916.843:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.3.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856a39e1d9 code=0x7ffc0000
[  177.989124][ T8709] libceph: Failed to parse secret: -22
[  178.142484][ T8714] loop4: detected capacity change from 0 to 256
[  178.155214][ T8714] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d)
[  178.384137][ T8720] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1150'.
[  178.393333][ T8720] 0XD: renamed from gretap0 (while UP)
[  178.408821][ T8720] 0XD: entered allmulticast mode
[  178.648051][   T27] IPVS: starting estimator thread 0...
[  178.807068][ T8734] IPVS: using max 86 ests per chain, 206400 per kthread
[  178.859895][ T8736] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1155'.
[  179.202328][ T8748] jffs2: notice: (8748) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  179.601132][ T8761] loop3: detected capacity change from 0 to 2048
[  179.646473][ T8761]  loop3: p1 p2 p3
[  180.043558][ T8791] loop3: detected capacity change from 0 to 64
[  180.070139][ T8793] vlan0: entered promiscuous mode
[  180.531497][ T8823] loop4: detected capacity change from 0 to 512
[  180.557802][ T8823] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.1197: bg 0: block 5: invalid block bitmap
[  180.557893][ T8823] loop4: lost filesystem error report for type 5 error -117
[  180.562454][ T8823] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  180.567916][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  180.567926][    C0] EXT4-fs (loop4): initial error at time 1791714920: ext4_validate_block_bitmap:436
[  180.567935][    C0] EXT4-fs (loop4): last error at time 1791714920: ext4_validate_block_bitmap:436
[  180.568177][  T806] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  180.577115][ T8823] loop4: lost filesystem error report for type 5 error -117
[  180.581468][ T8823] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1197: invalid indirect mapped block 3 (level 2)
[  180.581531][ T8823] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  180.590901][ T8823] EXT4-fs (loop4): 1 orphan inode deleted
[  180.590953][ T8823] EXT4-fs (loop4): 1 truncate cleaned up
[  180.591955][ T8823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.679370][ T8260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.717399][  T806] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[  180.721406][  T806] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.725197][  T806] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[  180.729541][  T806] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  180.729624][  T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.080332][ T8848] loop4: detected capacity change from 0 to 512
[  181.165890][  T806] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[  181.169170][  T806] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[  181.174498][  T806] cxacru 4-1:1.0: probe with driver cxacru failed with error -71
[  181.185726][  T806] usb 4-1: USB disconnect, device number 8
[  182.202083][ T8865] ip_tables: iptables: counters copy to user failed while replacing table
[  182.578216][ T8881] loop3: detected capacity change from 0 to 32768
[  182.588198][ T8881] JBD2: Ignoring recovery information on journal
[  182.588794][ T8881] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75
[  182.590097][ T8881] JBD2: bad block at offset 32
[  182.598234][ T8881] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  182.840632][ T7678] ocfs2: Unmounting device (7,3) on (node local)
[  183.257789][ T5603] Bluetooth: hci1: unexpected event for opcode 0x203d
[  185.216325][  T806] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  185.358384][ T8960] binder: 8959:8960 ioctl c0306201 200000000080 returned -14
[  185.361941][ T8960] binder: 8959:8960 ioctl c0306201 2000000003c0 returned -14
[  185.368768][  T806] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  185.372734][  T806] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0
[  185.372829][  T806] usb 4-1: config 0 interface 0 has no altsetting 0
[  185.380300][  T806] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  185.383477][  T806] usb 4-1: Product: syz
[  185.384988][  T806] usb 4-1: Manufacturer: syz
[  185.386833][  T806] usb 4-1: SerialNumber: syz
[  185.391238][  T806] usb 4-1: config 0 descriptor??
[  185.397558][  T806] usb 4-1: selecting invalid altsetting 0
[  185.422180][ T8961] binder: 8959:8961 unknown command 0
[  185.422239][ T8961] binder: 8959:8961 ioctl c0306201 200000000000 returned -22
[  185.620997][  T806] usb 4-1: USB disconnect, device number 9
[  186.386457][   T33] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  186.536941][   T33] usb 1-1: Using ep0 maxpacket: 8
[  186.537502][   T33] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[  186.538453][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.543498][   T33] usb 1-1: config 0 descriptor??
[  186.555836][   T33] gm12u320 1-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  186.555908][   T33] gm12u320 1-1:0.0: probe with driver gm12u320 failed with error -5
[  186.574609][   T33] usb-storage 1-1:0.0: USB Mass Storage device detected
[  186.613989][   T33] usb-storage 1-1:0.0: device ignored
[  186.616241][ T8989] syzkaller0: entered promiscuous mode
[  186.616283][ T8989] syzkaller0: entered allmulticast mode
[  186.629008][ T8989] tipc: Started in network mode
[  186.636313][ T8989] tipc: Node identity e608bad62ba2, cluster identity 4711
[  186.640296][ T8989] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.647236][ T8988] tipc: Resetting bearer <eth:syzkaller0>
[  186.679152][ T8988] tipc: Disabling bearer <eth:syzkaller0>
[  186.769195][  T806] usb 1-1: USB disconnect, device number 24
[  187.234051][ T6525] kworker/u10:5 (6525) used greatest stack depth: 19744 bytes left
[  187.261848][ T9005] smpboot: CPU 1 is now offline
[  188.166564][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'.
[  188.973417][ T9050] loop3: detected capacity change from 0 to 8
[  188.998166][ T9050] SQUASHFS error: xz decompression failed, data probably corrupt
[  188.998214][ T9050] SQUASHFS error: Failed to read block 0x108: -5
[  188.998253][ T9050] SQUASHFS error: Unable to read metadata cache entry [106]
[  188.998282][ T9050] SQUASHFS error: Unable to read inode 0x101f
[  189.413032][ T9064] loop3: detected capacity change from 0 to 512
[  189.421302][ T9064] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  189.439034][ T9064] EXT4-fs (loop3): 1 truncate cleaned up
[  189.439753][ T9064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.465763][ T5675] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  189.510251][ T7678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.588832][ T9068] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  189.627252][ T5675] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  189.630972][ T5675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.631017][ T5675] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.631048][ T5675] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.631087][ T5675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.647098][ T5675] usb 1-1: config 0 descriptor??
[  190.108789][ T5675] hid_parser_main: 470 callbacks suppressed
[  190.119819][ T5675] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0
[  190.119881][ T5675] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0
[  190.119924][ T5675] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0
[  190.119958][ T5675] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0
[  190.119992][ T5675] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0
[  190.120035][ T5675] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0
[  190.120087][ T5675] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0
[  190.120126][ T5675] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0
[  190.120162][ T5675] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0
[  190.120196][ T5675] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x0
[  190.149353][ T5675] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  190.199389][ T9077] loop3: detected capacity change from 0 to 512
[  190.214269][ T9077] EXT4-fs (loop3): Test dummy encryption mode enabled
[  190.214314][ T9077] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  190.233759][ T9077] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1292: bad orphan inode 131083
[  190.233844][ T9077] loop3: lost filesystem error report for type 5 error -117
[  190.237378][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  190.237388][    C0] EXT4-fs (loop3): initial error at time 1791714929: ext4_orphan_get:1429
[  190.239074][    C0] EXT4-fs (loop3): last error at time 1791714929: ext4_orphan_get:1429
[  190.253253][ T9077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.344361][  T806] usb 1-1: USB disconnect, device number 25
[  190.394987][ T7678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.455218][ T5675] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  193.606451][ T5675] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00
[  193.612161][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.246624][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  194.252317][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  194.462035][    C0] usb 4-1: NFC: Received an invalid frame
[  194.484674][ T5675] usb 4-1: NFC: Unable to get FW version
[  194.504404][ T5675] pn533_usb 4-1:1.0: probe with driver pn533_usb failed with error -5
[  194.765219][  T806] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  194.773027][ T2436] usb 4-1: USB disconnect, device number 10
[  194.917372][  T806] usb 1-1: New USB device found, idVendor=15c2, idProduct=0037, bcdDevice=c4.46
[  194.921172][  T806] usb 1-1: config 250 has an invalid interface number: 177 but max is 0
[  194.921215][  T806] usb 1-1: config 250 has no interface number 0
[  194.928358][  T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.928399][  T806] usb 1-1: Product: syz
[  194.928434][  T806] usb 1-1: Manufacturer: syz
[  194.928464][  T806] usb 1-1: SerialNumber: syz
[  195.156435][  T806] imon 1-1:250.177: unable to register, err -19
[  195.165805][  T806] usb 1-1: USB disconnect, device number 26
[  195.729732][ T9141] loop3: detected capacity change from 0 to 512
[  195.744667][ T9141] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  195.748301][ T9141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  195.753759][ T9141] EXT4-fs (loop3): orphan cleanup on readonly fs
[  195.753843][ T9141] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #13: comm syz.3.1320: iget: bad i_size value: 12154761577498
[  195.753882][ T9141] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  195.756379][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  195.756390][    C0] EXT4-fs (loop3): initial error at time 1791714935: ext4_orphan_get:1403: inode 13
[  195.756402][    C0] EXT4-fs (loop3): last error at time 1791714935: ext4_orphan_get:1403: inode 13
[  195.782471][ T9141] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1320: couldn't read orphan inode 13 (err -117)
[  195.782522][ T9141] loop3: lost filesystem error report for type 5 error -117
[  195.787514][ T9141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  195.829429][ T9141] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1320: dx entry: limit 65535 != root limit 120
[  195.829485][ T9141] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1320: Corrupt directory, running e2fsck is recommended
[  196.976100][ T7678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.271122][ T9159] loop7: detected capacity change from 0 to 16384
[  197.388646][ T4995] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  197.394886][ T4995] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  197.408364][ T4995] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  197.411178][ T4995] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  197.418709][ T4995] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  197.635506][ T9161] loop7: detected capacity change from 16384 to 0
[  198.818946][ T9196] xt_hashlimit: size too large, truncated to 1048576
[  198.924009][ T9197] xt_hashlimit: size too large, truncated to 1048576
[  199.068805][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.071862][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.077246][ T9160] bridge_slave_0: entered allmulticast mode
[  199.083309][ T9160] bridge_slave_0: entered promiscuous mode
[  199.095128][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.099411][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.104340][ T9160] bridge_slave_1: entered allmulticast mode
[  199.110755][ T9160] bridge_slave_1: entered promiscuous mode
[  199.213894][ T9160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.235540][ T9160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.312528][ T9160] team0: Port device team_slave_0 added
[  199.322274][ T9160] team0: Port device team_slave_1 added
[  199.408853][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.412387][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.421741][ T9160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.429048][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.432213][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.432227][ T9160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.441871][ T4995] Bluetooth: hci3: command tx timeout
[  199.699473][ T9160] hsr_slave_0: entered promiscuous mode
[  199.707171][ T9160] hsr_slave_1: entered promiscuous mode
[  199.707494][ T9160] debugfs: 'hsr0' already exists in 'hsr'
[  199.707530][ T9160] Cannot create hsr debugfs directory
[  200.254447][  T806] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  200.422165][  T806] usb 4-1: unable to get BOS descriptor or descriptor too short
[  200.422274][  T806] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  200.430028][  T806] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024
[  200.430079][  T806] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  200.446787][  T806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.446829][  T806] usb 4-1: Product: syz
[  200.446862][  T806] usb 4-1: Manufacturer: syz
[  200.446889][  T806] usb 4-1: SerialNumber: syz
[  200.767103][ T9160] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  200.810210][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  200.817889][ T9160] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  200.848889][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  200.862492][ T9160] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  200.897280][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  200.898116][ T9160] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  200.916027][  T806] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  200.935129][ T9160] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  201.120470][  T806] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  201.272078][  T806] usb 4-1: USB disconnect, device number 11
[  201.289479][ T9160] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.333675][ T9160] 8021q: adding VLAN 0 to HW filter on device team0
[  201.372215][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.372288][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.397372][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.397450][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.514377][ T4995] Bluetooth: hci3: command tx timeout
[  202.265254][ T9160] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.586216][  T806] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  202.735222][  T806] usb 1-1: Using ep0 maxpacket: 8
[  202.741656][  T806] usb 1-1: unable to get BOS descriptor or descriptor too short
[  202.741713][  T806] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0020, bcdDevice= 0.80
[  202.752593][  T806] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  202.752632][  T806] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 5
[  202.767383][  T806] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  202.767427][  T806] usb 1-1: Product: syz
[  202.767465][  T806] usb 1-1: SerialNumber: syz
[  202.825200][ T9160] veth0_vlan: entered promiscuous mode
[  202.911337][ T9160] veth1_vlan: entered promiscuous mode
[  203.039773][  T806] usb 1-1: USB disconnect, device number 27
[  203.081672][ T9160] veth0_macvtap: entered promiscuous mode
[  203.103922][ T9160] veth1_macvtap: entered promiscuous mode
[  203.151345][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.181601][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.204394][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.204572][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.226243][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.226970][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.464241][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.464287][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.579554][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.579597][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.595428][ T4995] Bluetooth: hci3: command tx timeout
[  204.404934][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1358'.
[  204.621441][ T9280] loop3: detected capacity change from 0 to 1024
[  204.621942][ T9280] EXT4-fs: Ignoring removed nobh option
[  204.622044][ T9280] EXT4-fs: Ignoring removed bh option
[  204.622111][ T9280] EXT4-fs: Ignoring removed nobh option
[  204.702912][ T9280] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled
[  204.724134][ T9280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.870784][ T7678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.988871][ T9291] loop5: detected capacity change from 0 to 512
[  205.051797][ T9293] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1365'.
[  205.109374][ T9291] FAT-fs (loop5): error, clusters badly computed (1 != 0)
[  205.675224][ T4995] Bluetooth: hci3: command tx timeout
[  206.233417][ T9315] netlink: 'syz.0.1376': attribute type 5 has an invalid length.
[  206.649646][   T53] IPVS: starting estimator thread 0...
[  206.654847][ T9328] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1382'.
[  206.734516][ T9330] IPVS: using max 86 ests per chain, 206400 per kthread
[  206.855995][ T9333] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0
[  208.389331][ T9334] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input19
[  208.640796][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1395'.
[  208.649005][ T9357] IPv6: sit1: Disabled Multicast RS
[  208.651282][ T9357] sit1: entered allmulticast mode
[  208.740367][ T9359] loop5: detected capacity change from 0 to 4096
[  208.756131][ T9359] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  208.864347][ T9359] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  209.208938][ T9359] ntfs3(loop5): ino=1e, mi_enum_attr
[  209.507936][ T9366] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  210.582111][ T9390] loop5: detected capacity change from 0 to 512
[  210.586751][ T9390] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  210.622542][ T9390] EXT4-fs (loop5): 1 truncate cleaned up
[  210.623952][ T9390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.484187][    T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  211.633586][    T9] usb 1-1: Using ep0 maxpacket: 16
[  211.639284][    T9] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  211.649958][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.649997][    T9] usb 1-1: Product: syz
[  211.650031][    T9] usb 1-1: Manufacturer: syz
[  211.650058][    T9] usb 1-1: SerialNumber: syz
[  211.878277][    T9] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  211.887545][    T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  211.895518][    T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  211.895601][    T9] usb 1-1: media controller created
[  211.925463][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  212.078408][ T9160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.109347][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[  212.223973][    T9] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  212.238751][    T9] usb 1-1: USB disconnect, device number 28
[  213.443507][ T5675] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  213.603325][ T5675] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  213.607157][ T5675] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64
[  213.607211][ T5675] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64
[  213.607245][ T5675] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  213.607277][ T5675] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  213.607309][ T5675] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64
[  213.607340][ T5675] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64
[  213.630378][ T5675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  213.630423][ T5675] usb 6-1: Product: syz
[  213.630461][ T5675] usb 6-1: Manufacturer: syz
[  213.641381][ T9409] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  213.641538][ T9409] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  213.641633][ T9409] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  213.641782][ T9409] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  213.641859][ T9409] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  213.642022][ T9409] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  213.660304][ T5675] usb 6-1: USB2VGA dongle found at address 2
[  213.681456][ T5675] usb 6-1: Allocated 8 output buffers
[  213.694833][ T5675] usb 6-1: Failed to early initialize device
[  213.968601][ T9409] usb 6-1: Failed to initialize device
[  213.975082][ T5675] usb 6-1: USB disconnect, device number 2
[  214.540860][ T9434] MTRR 1 not used
[  214.889062][ T9444] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  215.017232][ T9446] macsec2: entered allmulticast mode
[  215.017291][ T9446] veth1_macvtap: entered allmulticast mode
[  215.041636][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1435'.
[  215.049389][ T9446] veth1_macvtap (unregistering): left allmulticast mode
[  216.316858][ T9472] __vm_enough_memory: pid: 9472, comm: syz.5.1442, bytes: 21200163262464 not enough memory for the allocation
[  216.612854][  T806] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  216.762464][  T806] usb 1-1: Using ep0 maxpacket: 32
[  216.764709][  T806] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  216.769084][  T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.769134][  T806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.769181][  T806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.786819][  T806] usb 1-1: config 0 descriptor??
[  217.281329][  T806] hid_parser_main: 14 callbacks suppressed
[  217.281422][  T806] ft260 0003:0403:6030.0009: unknown main item tag 0x0
[  217.281485][  T806] ft260 0003:0403:6030.0009: unknown main item tag 0x0
[  217.483777][  T806] ft260 0003:0403:6030.0009: chip code: 0000 0000
[  217.689868][  T806] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  217.892510][  T806] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup
[  217.899471][  T806] ft260 0003:0403:6030.0009: failed to retrieve status: -32
[  217.943650][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  218.094591][    T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  218.098938][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  218.098984][    T9] usb 6-1: config 0 has no interface number 0
[  218.109415][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.109460][    T9] usb 6-1: Product: syz
[  218.109550][    T9] usb 6-1: Manufacturer: syz
[  218.109582][    T9] usb 6-1: SerialNumber: syz
[  218.119396][    T9] usb 6-1: config 0 descriptor??
[  218.142793][  T806] usb 1-1: USB disconnect, device number 29
[  218.338996][    T9] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -71
[  218.347591][    T9] usb 6-1: USB disconnect, device number 3
[  219.202318][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  219.353024][    T9] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  219.357711][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  219.357772][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  219.366550][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.366591][    T9] usb 1-1: Product: syz
[  219.367167][    T9] usb 1-1: Manufacturer: syz
[  219.367198][    T9] usb 1-1: SerialNumber: syz
[  219.604274][    T9] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  220.068367][ T5675] usb 1-1: USB disconnect, device number 30
[  220.110355][ T5675] usblp0: removed
[  220.402736][ T9521] input: syz0 as /devices/virtual/input/input20
[  220.936022][ T9531] loop5: detected capacity change from 0 to 2048
[  220.949417][ T9531] NILFS: invalid option "cp=0": invalid checkpoint number 0
[  221.212795][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  221.226672][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  221.230435][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  221.235200][ T5603] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  221.244565][ T5603] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  221.390360][ T9539] loop5: detected capacity change from 0 to 512
[  221.408159][ T9539] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  221.426905][ T9539] EXT4-fs (loop5): 1 truncate cleaned up
[  221.427715][ T9539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.588499][ T9539] EXT4-fs error (device loop5): __ext4_expand_extra_isize:6537: inode #12: comm syz.5.1468: bad extra_isize 62 (inode size 256)
[  221.756311][ T9539] EXT4-fs (loop5): Remounting filesystem read-only
[  221.809214][ T9160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.924108][ T9551] Bluetooth: hci0: invalid length 0, exp 2 for type 27
[  222.907044][ T9534] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.907167][ T9534] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.907286][ T9534] bridge_slave_0: entered allmulticast mode
[  222.908123][ T9534] bridge_slave_0: entered promiscuous mode
[  222.934427][ T9534] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.938858][ T9534] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.941328][ T9534] bridge_slave_1: entered allmulticast mode
[  222.949179][ T9534] bridge_slave_1: entered promiscuous mode
[  223.050969][ T9534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.069650][ T9534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.144077][ T9534] team0: Port device team_slave_0 added
[  223.151248][ T9534] team0: Port device team_slave_1 added
[  223.214999][ T9534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.229262][ T9534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  223.229314][ T9534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.246488][ T9534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.248871][ T9534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  223.257178][ T9534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.355305][ T5603] Bluetooth: hci4: command tx timeout
[  223.401111][ T9534] hsr_slave_0: entered promiscuous mode
[  223.407584][ T9534] hsr_slave_1: entered promiscuous mode
[  223.410658][ T9534] debugfs: 'hsr0' already exists in 'hsr'
[  223.413294][ T9534] Cannot create hsr debugfs directory
[  223.612848][  T806] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  223.764075][  T806] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  223.775906][  T806] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  223.791236][  T806] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  223.791277][  T806] usb 1-1: Product: syz
[  223.791312][  T806] usb 1-1: SerialNumber: syz
[  223.807215][  T806] usb 1-1: config 0 descriptor??
[  224.827239][  T806] usb 1-1: USB disconnect, device number 31
[  225.005442][ T9534] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  225.027876][ T9534] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  225.034793][ T9534] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  225.052931][ T5675] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  225.088675][ T9534] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  225.100886][ T9534] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  225.121001][ T9534] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  225.129359][ T9534] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  225.160647][ T9534] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  225.203325][ T5675] usb 6-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  225.207381][ T5675] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.207431][ T5675] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  225.216428][ T5675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.216467][ T5675] usb 6-1: Product: syz
[  225.216502][ T5675] usb 6-1: Manufacturer: syz
[  225.216532][ T5675] usb 6-1: SerialNumber: syz
[  225.433403][ T5603] Bluetooth: hci4: command tx timeout
[  225.540475][ T5675] usb 6-1: 0:1 : does not exist
[  225.587424][ T5675] usb 6-1: cannot request logical cluster ID: 0 (err: -71)
[  225.595277][ T5675] usb 6-1: unit 80 not found!
[  225.605587][ T9534] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.644715][ T9534] 8021q: adding VLAN 0 to HW filter on device team0
[  225.656468][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.656551][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.672935][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.673022][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.763824][ T5675] usb 6-1: USB disconnect, device number 4
[  226.442187][ T9614] loop5: detected capacity change from 0 to 764
[  226.746859][ T9534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.344210][ T9534] veth0_vlan: entered promiscuous mode
[  227.371108][ T9534] veth1_vlan: entered promiscuous mode
[  227.461629][ T9534] veth0_macvtap: entered promiscuous mode
[  227.477964][ T9534] veth1_macvtap: entered promiscuous mode
[  227.512594][ T4995] Bluetooth: hci4: command tx timeout
[  227.534643][ T9534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  227.556522][ T9534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  227.600286][ T5650] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.600402][ T5650] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.644049][ T5650] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.644103][ T5650] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.866366][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.866468][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.030749][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.030791][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.863878][ T9644] binder: 9643:9644 ioctl c0306201 200000001a80 returned -14
[  228.937427][ T9656] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes.
[  229.324640][ T9665] loop6: detected capacity change from 0 to 512
[  229.492615][ T9665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.496886][ T9665] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  229.612557][ T5603] Bluetooth: hci4: command tx timeout
[  230.183186][ T9534] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.198387][   T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  230.361900][   T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  230.367335][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.371168][   T10] usb 1-1: config 0 descriptor??
[  230.625655][   T10] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  230.982450][   T10] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  230.984692][   T10] [drm] Initialized udl on minor 2
[  231.810885][ T5675] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  231.960857][ T5675] usb 6-1: Using ep0 maxpacket: 8
[  231.963624][ T5675] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[  231.970030][ T5675] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.970193][ T5675] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  231.970244][ T5675] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.012219][ T5675] kobil_sct 6-1:1.0: required endpoints missing
[  232.276928][ T5675] usb 6-1: USB disconnect, device number 5
[  232.654999][ T9706] loop6: detected capacity change from 0 to 32768
[  232.684510][ T9706] (syz.6.1522,9706,0):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #66: Corrupt state (nlink = 3 or mode = 0) detected!
[  232.684554][ T9706] (syz.6.1522,9706,0):ocfs2_read_locked_inode:633 ERROR: status = -117
[  232.684699][ T9706] (syz.6.1522,9706,0):ocfs2_init_global_system_inodes:452 ERROR: status = -117
[  232.684729][ T9706] (syz.6.1522,9706,0):ocfs2_init_global_system_inodes:476 ERROR: status = -117
[  232.684820][ T9706] (syz.6.1522,9706,0):ocfs2_initialize_super:2194 ERROR: status = -117
[  232.704397][ T9706] (syz.6.1522,9706,0):ocfs2_fill_super:1177 ERROR: status = -117
[  233.230650][ T9224] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  233.380544][ T9224] usb 6-1: Using ep0 maxpacket: 32
[  233.385116][ T9224] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  233.391221][ T9224] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  233.391363][ T9224] usb 6-1: config 0 has no interface number 0
[  233.391418][ T9224] usb 6-1: config 0 interface 184 has no altsetting 0
[  233.404778][ T9224] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.404913][ T9224] usb 6-1: Product: syz
[  233.404965][ T9224] usb 6-1: Manufacturer: syz
[  233.405106][ T9224] usb 6-1: SerialNumber: syz
[  233.419352][ T9224] usb 6-1: config 0 descriptor??
[  234.076953][ T9224] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  234.077079][ T9224] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  234.077117][ T9224] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  234.077331][ T9224] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  234.108754][ T9224] usb 6-1: USB disconnect, device number 6
[  234.512834][ T2436] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  234.670523][ T2436] usb 7-1: Using ep0 maxpacket: 16
[  234.673077][ T2436] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  234.680118][ T2436] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.680232][ T2436] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  234.693557][ T2436] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.693693][ T2436] usb 7-1: Product: syz
[  234.693734][ T2436] usb 7-1: Manufacturer: syz
[  234.693766][ T2436] usb 7-1: SerialNumber: syz
[  234.734260][ T2436] usb 7-1: 0:2 : does not exist
[  234.861692][ T9726] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified.
[  234.865294][ T9726] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  234.952444][ T2436] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  235.088592][ T9728] loop5: detected capacity change from 0 to 128
[  235.176994][ T2436] usb 7-1: USB disconnect, device number 2
[  235.365331][ T7968] udevd[7968]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  236.073306][   T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  236.092753][ T9741] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1538'.
[  236.139093][   T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  240.797856][    C0] sched: DL replenish lagged too much
[  254.578251][ T2436] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  255.785556][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  255.786281][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  260.653718][ T2436] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  263.347860][ T2436] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  276.106203][ T4995] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  276.382032][ T4995] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  276.498267][ T4995] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  276.577525][ T9224] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  276.579552][ T4995] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  277.330866][ T4995] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  279.734216][ T5603] Bluetooth: hci5: command tx timeout
[  282.058715][ T5603] Bluetooth: hci5: command tx timeout
[  284.066032][ T5603] Bluetooth: hci5: command tx timeout
[  286.184921][ T5603] Bluetooth: hci5: command tx timeout
[  288.934252][ T4995] Bluetooth: hci2: command 0x0406 tx timeout
[  293.405553][ T4995] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  293.633521][ T4995] Bluetooth: hci0: command 0x0406 tx timeout
[  294.544513][ T5603] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  295.484694][ T4995] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  295.496050][ T4995] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  295.499415][ T5675] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  295.603115][ T4995] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  295.677683][ T4995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  296.207289][ T5595] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  296.214236][ T5595] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  296.287234][ T4995] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  296.336124][ T4995] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  296.416720][ T4995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  299.864829][ T5603] Bluetooth: hci6: command tx timeout
[  299.991811][ T5603] Bluetooth: hci7: command tx timeout
[  301.905714][ T5603] Bluetooth: hci6: command tx timeout
[  302.063351][ T5600] Bluetooth: hci7: command tx timeout
[  304.061995][ T5600] Bluetooth: hci6: command tx timeout
[  304.326746][ T5600] Bluetooth: hci7: command tx timeout
[  306.442816][ T5600] Bluetooth: hci6: command tx timeout
[  306.444182][ T5600] Bluetooth: hci7: command tx timeout
[  307.502187][ T5675] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  317.233473][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  317.234264][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  321.340440][ T9225] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  328.648051][   T35] INFO: task kworker/0:5:5828 blocked for more than 143 seconds.
[  328.648707][   T35]       Tainted: G             L      syzkaller #0
[  328.649301][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  328.649400][   T35] task:kworker/0:5     state:D stack:21736 pid:5828  tgid:5828  ppid:2      task_flags:0x4208060 flags:0x00080000
[  328.650798][   T35] Workqueue: events drm_fb_helper_damage_work
[  328.652168][   T35] Call Trace:
[  328.652758][   T35]  <TASK>
[  328.653375][   T35]  __schedule+0x17db/0x58f0
[  328.654066][   T35]  ? __pfx___schedule+0x10/0x10
[  328.654785][   T35]  ? __pfx___schedule+0x10/0x10
[  328.655500][   T35]  ? schedule+0x90/0x2b0
[  328.656082][   T35]  schedule+0x164/0x2b0
[  328.656708][   T35]  schedule_preempt_disabled+0x13/0x30
[  328.657356][   T35]  __mutex_lock+0x7c1/0x1550
[  328.658082][   T35]  ? __lock_acquire+0x6df/0x2e50
[  328.658836][   T35]  ? __mutex_lock+0x5d4/0x1550
[  328.659392][   T35]  ? drm_fb_helper_damage_work+0x15b/0xf20
[  328.660017][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  328.660660][   T35]  ? __lock_acquire+0x6df/0x2e50
[  328.661329][   T35]  ? look_up_lock_class+0x57/0x110
[  328.662626][   T35]  drm_fb_helper_damage_work+0x15b/0xf20
[  328.663316][   T35]  ? __queue_work+0xc73/0x10d0
[  328.663907][   T35]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  328.664522][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[  328.665198][   T35]  ? lock_acquire+0x115/0x350
[  328.665932][   T35]  ? rcu_is_watching+0x16/0xb0
[  328.666692][   T35]  ? process_scheduled_works+0x97a/0x1630
[  328.667257][   T35]  process_scheduled_works+0xc3d/0x1630
[  328.667874][   T35]  ? __pfx_process_scheduled_works+0x10/0x10
[  328.668519][   T35]  ? assign_work+0x3cf/0x5d0
[  328.669212][   T35]  worker_thread+0xa47/0xfb0
[  328.669460][   T35]  ? __kthread_parkme+0x71/0x1f0
[  328.670343][   T35]  kthread+0x38b/0x480
[  328.670959][   T35]  ? __pfx_worker_thread+0x10/0x10
[  328.671552][   T35]  ? __pfx_kthread+0x10/0x10
[  328.672208][   T35]  ret_from_fork+0x514/0xb70
[  328.672916][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  328.673670][   T35]  ? __switch_to+0xc89/0x1420
[  328.674344][   T35]  ? __pfx_kthread+0x10/0x10
[  328.674947][   T35]  ret_from_fork_asm+0x1a/0x30
[  328.675573][   T35]  </TASK>
[  328.676281][   T35] 
[  328.676281][   T35] Showing all locks held in the system:
[  328.677003][   T35] locks held by kworker/u9:1/29: 3, last CPU#0:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  328.678256][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  332.121113][   T35]  #1: ffff888120e24408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  332.125119][   T35]  #2: ffff88811c9a07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  332.129115][   T35] locks held by khungtaskd/35: 1, last CPU#0:
[  332.129870][   T35]  #0: ffffffff8fd5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  332.134346][   T35] locks held by kworker/u9:4/146: 3, last CPU#0:
[  332.134969][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  332.138918][   T35]  #1: ffffc900030c7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  332.142426][   T35]  #2: ffff8881b21007a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  332.147023][   T35] locks held by kworker/u9:5/1106: 3, last CPU#0:
[  332.147878][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  332.151634][   T35]  #1: ffffc9000729fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  332.155926][   T35]  #2: ffff888171120258 (&devlink->lock_key#6
[  333.299071][ T5675] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  333.489874][   T35] ){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  333.492284][   T35] locks held by kworker/u9:6/1110: 3, last CPU#0:
[  333.493188][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  333.498877][   T35]  #1: ffffc900072dfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  333.503907][   T35]  #2: ffff8881bf7c2258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[  333.511070][   T35] locks held by kworker/u9:7/1111: 2, on CPU#0:
[  333.511992][   T35]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  333.517271][   T35]  #1: ffffc9000730fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  333.522967][   T35] locks held by kworker/u9:9/1113: 3, last CPU#0:
[  335.360377][   T35]  #0: ffff888120e3bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  335.682147][   T35]  #1: ffff888120e24408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  335.686096][   T35]  #2: ffff88811c9907a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420
[  335.689862][   T35] locks held by getty/5423: 2, on CPU#0:
[  335.690557][   T35]  #0: ffff8881720ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  335.695079][   T35]  #1: ffffc9000348b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  335.699126][   T35] locks held by kworker/u8:2/5431: 2, last CPU#0:
[  335.699799][   T35]  #0: ffff88816ee0d940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  335.703756][   T35]  #1: ffffc900040f7c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  335.707659][   T35] locks held by kworker/0:5/5828: 3, on CPU#0:
[  335.708289][   T35]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  335.732214][   T35]  #1: ffffc9000717fc40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  335.732235][   T35]  #2: ffff888104ffda70 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x15b/0xf20
[  335.732262][   T35] locks held by syz.4.1209/8850: 10, last CPU#0:
[  335.732268][   T35]  #0: ffff8880238080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  335.732288][   T35]  #1: ffff888023808128 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x1e2/0x9f0
[  335.732314][   T35]  #2: ffff8880238082c8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1f5/0x11e0
[  335.732332][   T35]  #3: ffffc90003593370 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x66d/0x11e0
[  335.732349][   T35]  #4: ffffffff8fd4ea20 (console_lock){+.+.}-{0:0}, at: do_con_write+0x12e/0x5500
[  335.732366][   T35]  #5: ffff888104ffda70 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_pan_display+0xbe/0xbe0
[  335.732384][   T35]  #6: ffff888168768128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x20/0x80
[  336.939383][   T35]  #7: ffff888104ffd890 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_locked+0x4c/0x4d0
[  336.943861][   T35]  #8: ffffc90004227150 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0x11a/0x7e0
[  336.947833][   T35]  #9: ffffc90004227178 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_atomic+0x11a/0x7e0
[  336.951769][   T35] locks held by syz-executor/9160: 3, on CPU#0:
[  336.952535][   T35]  #0: ffff8881190e8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  336.956416][   T35]  #1: ffff8881190e80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10c0
[  336.960483][   T35]  #2: ffffffff8fd62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  336.964355][   T35] locks held by kworker/0:6/9224: 2, last CPU#0:
[  336.964959][   T35]  #0: ffff8881147e8540 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  337.007340][   T35]  #1: ffffc9000b10fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  337.007378][   T35] locks held by kworker/0:7/9225: 2, last CPU#0:
[  337.007384][   T35]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  337.007404][   T35]  #1: ffffc9000e57fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  337.007423][   T35] locks held by syz-executor/9534: 4, on CPU#0:
[  337.878352][   T35]  #0: ffff8880246a0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  337.882876][   T35]  #1: ffff8880246a00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x61f/0x10c0
[  337.886796][   T35]  #2: ffffffff913d8bc0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0x99/0x260
[  337.890429][   T35]  #3: ffff888023df52f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550
[  337.895077][   T35] locks held by syz.0.1508/9675: 1, on CPU#0:
[  337.895790][   T35]  #0: ffff888168768128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_open+0x6e/0x170
[  337.901944][   T35] locks held by syz-executor/9754: 1, last CPU#0:
[  337.902707][   T35]  #0: ffffffff8fd5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  337.906152][   T35] locks held by syz-executor/9762: 1, on CPU#0:
[  337.906783][   T35]  #0: ffffffff8fd62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[  337.919312][   T35] locks held by syz-executor/9775: 2, last CPU#0:
[  337.919319][   T35]  #0: ffff88810c4e1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  337.919340][   T35]  #1: ffffffff8fd5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  337.919359][   T35] locks held by syz-executor/9779: 1, last CPU#0:
[  337.919368][   T35]  #0: ffffffff8fd5c6e0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0
[  337.919388][   T35] locks held by syz-executor/9783: 1, last CPU#0:
[  337.919393][   T35]  #0: ffffffff8fd5c6e0 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x116/0x500
