last executing test programs:

22.30995341s ago: executing program 1 (id=211):
r0 = socket$xdp(0x2c, 0x3, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffffb9e3, 0x5})
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x211000, 0x1000}, 0x20)

22.23051588s ago: executing program 1 (id=212):
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005fffffff7000d000000020000000b000000ec00914e13000180f0b9c2d8f9860f2124f523ab4283ab6b48b9bb01d6b2247a4ecc82eba7d119d269d31274c515e87fbb0c2450660d725b6ac6bbeda6bb9ac96a63010001002e3f90a5a547ccd166fb5d2e1bcefff230d92187db5d972b6550eb737924a2deec8b021cbc0b644c6ac65f1fe6b97c84425b0ee20f0fea1f5716bf8a89accaefd98a7c2be53436191b1839e4a7fb7e67089b852c0694010b7a", 0xb7}], 0x1}, 0x4000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0)

22.230247803s ago: executing program 1 (id=213):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/ip_tables_matches\x00')
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x4)
preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/128, 0x80}], 0x1, 0x5f7, 0x4)

22.148748816s ago: executing program 1 (id=214):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'macturkish'}}, {@nodecompose}, {@nodecompose}, {@creator={'creator', 0x3d, "e22ad8a4"}}, {@nodecompose}]}, 0x3, 0x60f, &(0x7f0000000200)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)

22.060538362s ago: executing program 1 (id=215):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x1, @sdr={0x41564e57}})

21.739024787s ago: executing program 1 (id=216):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0)

21.640114173s ago: executing program 32 (id=216):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0)

3.18772276s ago: executing program 3 (id=383):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, 0x0, &(0x7f00000001c0))

2.936499466s ago: executing program 3 (id=384):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0)

2.905027878s ago: executing program 3 (id=385):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61124c00000000006113720000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916200000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

2.827575213s ago: executing program 3 (id=387):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/184, 0x22fe0}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

2.704250295s ago: executing program 3 (id=390):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f00000040c0)={0x20, 0x1405, 0x1, 0x70bd2d, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4)

2.615038957s ago: executing program 3 (id=392):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x60, 0xc, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

2.430450448s ago: executing program 0 (id=396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r0, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0)

2.399394186s ago: executing program 0 (id=398):
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./proc\x00', 0x4, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='1', 0x1)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40008c0)

2.196219265s ago: executing program 0 (id=400):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)

2.189675855s ago: executing program 0 (id=401):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000080)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x52ad}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x558, &(0x7f0000001340)="$eJzs3c9vHFcdAPDvbLzOL6d2KQeoRClQlFSQdVyT1uJQgoTgVKmi3IOxN5aVtTfyrtvYioTzFyAhBAhOcOGCxB9QCUXiwhEhRYIzSEUgBA4ckIBMNbNjx13POpt0u+sfn480mffe/Pi+N5sZz5sZzQRwYr0YEdci4mGapi9HxGRRXimG2OoM2XwPtu8sZEMSafrWP5JIirKddSXF+Hyx2JmI+OY3Ir6T7I/b2ti8Od9o1NeK/HR75dZ0a2Pz8vLK/FJ9qb46Ozvz6txrc1fnrgyknRci4vWv/eWH3/vF11//9Rff+fP1v13Kmh0TxfS97XgC2SYaO2iGTtOr+bbYkS2w9hTBDquxvIWFs2VzpGmaPkwn95TcHUrNAADolp3AfiwiPhsRL8dknDr4dBYAAAA4gtKvTMT/ks4dmhLjPcoBAACAI6SSPwObVGrFswATUanUap1neD8e5yqNZqv9hRvN9dXF+z+ZiIipqFZuLDfqV4pnhaeimmT5mTz9KP9KV342Ip6NiB9Mns3ztYVmY3HUFz8AAADghDjf1f//92Sn/w8AAAAcM1P7iyqjqAcAAADw0Snp/wMAAADHjP4/AAAAHGtvxlS8+cYb6c73rxff3li/2Xz78mK9dbO2sr5QW2iu3aotNZtL+Tv7VvYue6pkfY1m89aXYnX99nS73mpPtzY2r68011fb15c/8AlsAAAAYIie/fS9PyYRsfXls/mQGe+apzsPHA9ju6mkGJfs7X96pjN+b0iVAoai7Bp+t/dOD6EiwNCNPdVSaT+HDeCQq466AsDIJY+Z3vPhnd8V488Mtj4AAMDgXfxk7/v/B38DYMsnAuCIsxPDydV1Iy+dHFVFgKHL7//3+4CvkwU4Vqp9PQEIHGcf+v7/Y6XpE1UIAAAYuIl8SCq14vLeRFQqtVrEhfyzANXkxnKjfiUinomIP0xWT2f5mXzJ5LF9BgAAAAAAAAAAAAAAAAAAAAAAAACgI02TSDuy7Om8aK9rKQAAAHDERVT+mvym8y7/i5MvTXRfHxhP/pN/Eng8It756Vs/uj3fbq/NZOX/3C1v/7gof2UEFzAAAACAfXb66Tv9eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpAfbdxYebN9J/7t9Z2GYcf/+1YiY2o2fD50pY3EmH5+JakSc+1cSY3uWSyLi1ADib92NiE+UxU+yau2GLIt/9qOPH1PFViiLf34A8eEku5cdf66V7X+VeDEfl+9/YxEfyD+t3se/2D3+neqx/1/oM8bz93813TP+3Yjnx8qPPzvxk33xk2Jc6Sv+t7+1udlrWvqziItRHn9vtOn2yq3p1sbm5eWV+aX6Un11dnbm1bnX5q7OXZm+sdyoF/+Wxvj+p959eFD7z/WIP9Wz/Z06vdRX6yP+f//29nM9/l5l8S99riT+b39ezLE/fqVY1+eLdDb94k56q5Pe64Vf/v6Fg9q/+Kj91f5+/07MSwc3+9EPOIgdBQAYmNbG5s35RqO+dhQS1adZKuull016rtgCH75i44dl+0g8YeK7A11hmqZpj/9R9yKin/UkUSTevTrq7TPa4xIAADB4j076R10TAAAAAAAAAAAAAAAAAAAAOLkG+M6w8dLX7JW8WWBrN5V4MzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGi8HwAA///0vdOO")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000002c0)='.\x00', 0x18920f4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000000100))

1.988264639s ago: executing program 0 (id=403):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0)

1.914803598s ago: executing program 0 (id=405):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x19b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb0, 0x0, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="40242800000028231ba57fb04d4f1e07d695f26853bd852798b2"], 0x0, 0x0, 0x0, 0x0}, 0x0)

336.539734ms ago: executing program 2 (id=420):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x121}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x48}}, 0x0)

267.248871ms ago: executing program 2 (id=421):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
mlockall(0x1)

218.397388ms ago: executing program 2 (id=422):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bic', 0x3)
shutdown(r0, 0x1)

158.383896ms ago: executing program 2 (id=423):
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0xee01, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c}}], 0x20, 0x40}}], 0x2, 0x4)

93.778858ms ago: executing program 2 (id=424):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="18000000010005", 0x7)

0s ago: executing program 2 (id=425):
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)='|', 0x1}], 0x2)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31544' (ED25519) to the list of known hosts.
syzkaller login: [   49.405455][ T5537] cgroup: Unknown subsys name 'net'
[   49.499171][ T5537] cgroup: Unknown subsys name 'cpuset'
[   49.507178][ T5537] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.268445][ T5537] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.096454][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.101678][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.105504][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.110587][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.115605][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.121336][ T4986] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.127374][ T4986] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.130917][ T4986] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.147520][ T4986] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.153402][ T4986] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.211042][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.217041][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.222142][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.226831][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.230810][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.758932][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.762431][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.765935][ T5609] bridge_slave_0: entered allmulticast mode
[   56.769891][ T5609] bridge_slave_0: entered promiscuous mode
[   56.795925][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.798930][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.801404][ T5609] bridge_slave_1: entered allmulticast mode
[   56.804752][ T5609] bridge_slave_1: entered promiscuous mode
[   56.862578][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.891929][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.922814][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.925821][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.928776][ T5612] bridge_slave_0: entered allmulticast mode
[   56.932657][ T5612] bridge_slave_0: entered promiscuous mode
[   56.950741][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.953930][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.956254][ T5612] bridge_slave_1: entered allmulticast mode
[   56.959343][ T5612] bridge_slave_1: entered promiscuous mode
[   56.969904][ T5609] team0: Port device team_slave_0 added
[   56.988311][ T5609] team0: Port device team_slave_1 added
[   57.015670][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.036723][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.040205][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.042527][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.050411][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.078525][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.081429][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.091732][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.145874][ T5612] team0: Port device team_slave_0 added
[   57.151642][ T5612] team0: Port device team_slave_1 added
[   57.192226][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.194679][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.197021][ T5621] bridge_slave_0: entered allmulticast mode
[   57.200267][ T5621] bridge_slave_0: entered promiscuous mode
[   57.204955][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.207253][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.209853][ T5621] bridge_slave_1: entered allmulticast mode
[   57.212924][ T5621] bridge_slave_1: entered promiscuous mode
[   57.243976][ T5609] hsr_slave_0: entered promiscuous mode
[   57.247723][ T5609] hsr_slave_1: entered promiscuous mode
[   57.259833][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.262184][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.270899][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.276203][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.278445][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.287301][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.307100][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.313307][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.395399][ T5612] hsr_slave_0: entered promiscuous mode
[   57.398635][ T5612] hsr_slave_1: entered promiscuous mode
[   57.402873][ T5612] debugfs: 'hsr0' already exists in 'hsr'
[   57.406373][ T5612] Cannot create hsr debugfs directory
[   57.422763][ T5621] team0: Port device team_slave_0 added
[   57.436271][ T5621] team0: Port device team_slave_1 added
[   57.491475][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.493954][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.502089][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.507319][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.509501][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   57.517578][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.660913][ T5621] hsr_slave_0: entered promiscuous mode
[   57.664568][ T5621] hsr_slave_1: entered promiscuous mode
[   57.667631][ T5621] debugfs: 'hsr0' already exists in 'hsr'
[   57.669974][ T5621] Cannot create hsr debugfs directory
[   57.857759][ T5609] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.866576][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   57.869646][ T5609] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.876443][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   57.891497][ T5609] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.898252][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   57.902596][ T5609] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.907993][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   57.991885][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.001555][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.012136][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.021029][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.024943][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.032637][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.036199][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.043650][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.135972][ T5621] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   58.141702][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   58.147869][ T5621] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   58.154418][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   58.157376][ T5621] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   58.162292][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   58.169411][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.176435][ T5621] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.182388][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   58.193860][ T5618] Bluetooth: hci1: command tx timeout
[   58.193868][ T5611] Bluetooth: hci0: command tx timeout
[   58.232437][ T5609] 8021q: adding VLAN 0 to HW filter on device team0
[   58.250719][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.253673][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.264404][ T5611] Bluetooth: hci2: command tx timeout
[   58.277633][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.280612][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.363986][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.396718][ T5612] 8021q: adding VLAN 0 to HW filter on device team0
[   58.415472][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.417786][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.436836][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.439346][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.461560][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.498662][ T5621] 8021q: adding VLAN 0 to HW filter on device team0
[   58.512354][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.514646][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.541808][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.544705][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.791520][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.842476][ T5609] veth0_vlan: entered promiscuous mode
[   58.858542][ T5609] veth1_vlan: entered promiscuous mode
[   58.879007][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.897123][ T5609] veth0_macvtap: entered promiscuous mode
[   58.906746][ T5609] veth1_macvtap: entered promiscuous mode
[   58.951029][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.972541][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.978837][ T5612] veth0_vlan: entered promiscuous mode
[   58.994380][ T5466] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.997887][ T5466] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.007996][ T5466] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.010719][ T5466] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.019154][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.023930][ T5612] veth1_vlan: entered promiscuous mode
[   59.102835][ T5612] veth0_macvtap: entered promiscuous mode
[   59.112161][ T5621] veth0_vlan: entered promiscuous mode
[   59.117962][ T5612] veth1_macvtap: entered promiscuous mode
[   59.150665][ T5621] veth1_vlan: entered promiscuous mode
[   59.159044][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.162376][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.164180][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.184236][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.202222][ T5665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.212722][ T5665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.217606][ T5665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.226489][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.227574][ T5665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.232517][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.288874][ T5621] veth0_macvtap: entered promiscuous mode
[   59.302617][ T5609] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.325355][ T5621] veth1_macvtap: entered promiscuous mode
[   59.370675][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0
[   59.377411][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.390696][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.426807][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1
[   59.448194][ T5466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.452091][ T5466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.463074][ T5466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.471007][ T5466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.486348][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.491884][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.638021][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.646691][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.677415][ T5721] sg_write: process 5 (syz.2.4) changed security contexts after opening file descriptor, this is not allowed.
[   59.691453][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.700962][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.041544][ T5740] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[   60.078498][ T5738] loop2: detected capacity change from 0 to 32768
[   60.088247][ T5738] (syz.2.7,5738,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   60.094415][ T5738] (syz.2.7,5738,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   60.118882][ T5738] JBD2: Ignoring recovery information on journal
[   60.151566][ T5738] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   60.191410][   T34] audit: type=1800 audit(1787569825.012:2): pid=5738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7" name="file1" dev="loop2" ino=16979 res=0 errno=0
[   60.270188][ T5611] Bluetooth: hci1: command tx timeout
[   60.274370][ T5611] Bluetooth: hci0: command tx timeout
[   60.346631][ T5611] Bluetooth: hci2: command tx timeout
[   60.804269][ T5738] (syz.2.7,5738,0):ocfs2_dio_end_io:2420 ERROR: Direct IO failed, bytes = -28
[   60.838585][ T5738] syz.2.7 (5738) used greatest stack depth: 19240 bytes left
[   60.948270][ T5609] ocfs2: Unmounting device (7,2) on (node local)
[   61.127116][   T34] audit: type=1400 audit(1787569825.952:3): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5754 comm="syz.2.12" name="p" offset=43
[   61.179231][ T5751] loop0: detected capacity change from 0 to 32768
[   61.195336][ T5751] =======================================================
[   61.195336][ T5751] WARNING: The mand mount option has been deprecated and
[   61.195336][ T5751]          and is ignored by this kernel. Remove the mand
[   61.195336][ T5751]          option from the mount to silence this warning.
[   61.195336][ T5751] =======================================================
[   61.214667][ T5757] loop2: detected capacity change from 0 to 1024
[   61.268319][ T5751] JBD2: Ignoring recovery information on journal
[   61.321288][ T5751] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   61.393760][  T802] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   61.398337][ T5751] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[   61.422571][ T5751] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   61.432866][ T5751] OCFS2: Returning error to the calling process.
[   61.442381][ T5751] (syz.0.11,5751,1):ocfs2_search_chain:1935 ERROR: status = -5
[   61.458498][ T5751] (syz.0.11,5751,1):ocfs2_search_chain:2058 ERROR: status = -5
[   61.472486][ T5751] (syz.0.11,5751,1):ocfs2_claim_suballoc_bits:2145 ERROR: status = -5
[   61.485916][ T5751] (syz.0.11,5751,1):ocfs2_claim_suballoc_bits:2198 ERROR: status = -5
[   61.497976][ T5751] (syz.0.11,5751,1):ocfs2_claim_new_inode:2439 ERROR: status = -5
[   61.507795][ T5751] (syz.0.11,5751,1):ocfs2_claim_new_inode:2454 ERROR: status = -5
[   61.511078][ T5751] (syz.0.11,5751,1):ocfs2_mknod_locked:642 ERROR: status = -5
[   61.514558][ T5751] (syz.0.11,5751,1):ocfs2_mknod:389 ERROR: status = -5
[   61.517759][ T5751] (syz.0.11,5751,1):ocfs2_mknod:506 ERROR: status = -5
[   61.583633][  T802] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[   61.607880][  T802] usb 2-1: config 0 has no interface number 0
[   61.611212][ T5612] ocfs2: Unmounting device (7,0) on (node local)
[   61.614455][  T802] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[   61.624054][  T802] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   61.641109][  T802] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[   61.645268][  T802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.653259][  T802] usb 2-1: Product: syz
[   61.655197][  T802] usb 2-1: Manufacturer: syz
[   61.657507][  T802] usb 2-1: SerialNumber: syz
[   61.671648][  T802] usb 2-1: config 0 descriptor??
[   61.681157][ T5753] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   61.710318][  T802] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[   61.743616][  T802] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[   61.890230][ T5761] loop2: detected capacity change from 0 to 32768
[   61.922191][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[   62.132532][ T4685] usb 2-1: USB disconnect, device number 2
[   62.172649][ T4685] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[   62.183579][   T33] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   62.195242][ T4685] cyberjack 2-1:0.69: device disconnected
[   62.310724][ T5770] loop2: detected capacity change from 0 to 2048
[   62.353325][   T33] usb 1-1: Using ep0 maxpacket: 16
[   62.353905][ T5611] Bluetooth: hci0: command tx timeout
[   62.355541][ T5618] Bluetooth: hci1: command tx timeout
[   62.366130][   T33] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   62.383466][   T33] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   62.400501][   T33] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   62.404368][   T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.409190][   T33] usb 1-1: Product: syz
[   62.411004][   T33] usb 1-1: Manufacturer: syz
[   62.412639][   T33] usb 1-1: SerialNumber: syz
[   62.428464][ T5618] Bluetooth: hci2: command tx timeout
[   62.457779][   T33] usb 1-1: 0:2 : does not exist
[   62.549409][ T5770] loop2: detected capacity change from 0 to 4096
[   62.586034][ T5770] ntfs3(loop2): Failed to load $Extend (-22).
[   62.588352][ T5770] ntfs3(loop2): Failed to initialize $Extend.
[   62.656494][   T33] usb 1-1: USB disconnect, device number 2
[   62.957416][ T5776] loop2: detected capacity change from 0 to 32768
[   62.982504][ T5776] ea_get: invalid extended attribute
[   62.987807][ T5776] ffff8881b27d52b0: 04 00 00 00                                      ....
[   63.410013][ T5807] loop0: detected capacity change from 0 to 1024
[   63.420232][ T5807] EXT4-fs: Ignoring removed nobh option
[   63.423982][ T5807] EXT4-fs: Ignoring removed bh option
[   63.428356][ T5807] EXT4-fs: Ignoring removed nobh option
[   63.443574][ T5807] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled
[   63.492246][ T5807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.497579][ T5813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'.
[   63.516536][   T34] audit: type=1800 audit(1787569828.342:4): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.35" name="file1" dev="loop0" ino=15 res=0 errno=0
[   63.616216][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.681425][ T5817] capability: warning: `syz.2.40' uses deprecated v2 capabilities in a way that may be insecure
[   64.129972][ T5833] netlink: 'syz.0.47': attribute type 10 has an invalid length.
[   64.139114][ T5833] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   64.191806][ T5838] loop0: detected capacity change from 0 to 1024
[   64.202777][ T5838] EXT4-fs: Ignoring removed bh option
[   64.222068][ T5838] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled
[   64.242502][ T5838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.296827][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.373268][ T5666] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   64.423432][ T5618] Bluetooth: hci1: command tx timeout
[   64.495302][ T5851] netlink: 'syz.0.54': attribute type 1 has an invalid length.
[   64.498526][ T5851] netlink: 'syz.0.54': attribute type 2 has an invalid length.
[   64.503275][ T5618] Bluetooth: hci2: command tx timeout
[   64.532341][ T5666] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   64.538524][ T5853] netlink: 'syz.0.55': attribute type 21 has an invalid length.
[   64.540911][ T5666] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   64.541086][ T5853] netlink: 128 bytes leftover after parsing attributes in process `syz.0.55'.
[   64.546506][ T5666] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   64.551769][ T5666] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   64.554609][ T5853] netlink: 'syz.0.55': attribute type 4 has an invalid length.
[   64.559417][ T5853] netlink: 'syz.0.55': attribute type 5 has an invalid length.
[   64.560543][ T5666] usb 3-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00
[   64.561877][ T5853] netlink: 3 bytes leftover after parsing attributes in process `syz.0.55'.
[   64.568130][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.572690][ T5666] usb 3-1: Product: syz
[   64.574785][ T5666] usb 3-1: Manufacturer: syz
[   64.576785][ T5666] usb 3-1: SerialNumber: syz
[   64.594001][ T5666] kaweth 3-1:1.0: couldn't find required endpoints
[   64.714063][ T5859] loop0: detected capacity change from 0 to 2048
[   64.722226][ T5764] udevd[5764]: incorrect nilfs2 checksum on /dev/loop0
[   64.732708][ T5859] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   64.736600][ T5764] udevd[5764]: incorrect nilfs2 checksum on /dev/loop0
[   64.750186][ T5860] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   64.801552][ T5666] usb 3-1: USB disconnect, device number 2
[   64.969675][ T5868] key id 00000001 not found
[   64.971580][ T5868] key id 00000001 not found
[   65.097909][ T5870] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   65.319181][ T5883] xt_bpf: check failed: parse error
[   65.453349][ T4685] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   65.603485][ T5887] loop1: detected capacity change from 0 to 32768
[   65.609151][ T5887] jfs_mount: Mount Failure: File System Dirty.
[   65.613938][ T4685] usb 1-1: Using ep0 maxpacket: 32
[   65.616416][ T5887] Mount JFS Failure: -22
[   65.618255][ T5887] jfs_mount failed w/return code = -22
[   65.622764][ T4685] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[   65.628361][ T4685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.641901][ T4685] usb 1-1: config 0 descriptor??
[   65.658894][ T4685] gspca_main: sunplus-2.14.0 probing 041e:400b
[   65.872933][ T5903] loop1: detected capacity change from 0 to 1024
[   65.891287][ T5903] EXT4-fs: Ignoring removed orlov option
[   65.905883][ T5903] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[   65.940880][ T5909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.81'.
[   65.941587][ T5903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   65.943993][ T5909] openvswitch: netlink: Missing key (keys=c0, expected=10000000)
[   66.036271][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.295845][ T5918] loop1: detected capacity change from 0 to 32768
[   66.336058][ T5918] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   66.357186][ T5918] XFS (loop1): Ending clean mount
[   66.382889][ T5918] XFS (loop1): Quotacheck needed: Please wait.
[   66.402012][ T5922] loop2: detected capacity change from 0 to 32768
[   66.408878][ T5922] (syz.2.87,5922,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   66.414462][ T5922] (syz.2.87,5922,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   66.427483][ T5922] (syz.2.87,5922,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[   66.440428][ T5922] JBD2: Ignoring recovery information on journal
[   66.466427][ T5918] XFS (loop1): Quotacheck: Done.
[   66.505494][ T5922] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   66.565086][ T5621] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   66.596819][ T5609] ocfs2: Unmounting device (7,2) on (node local)
[   66.876642][ T4685] gspca_sunplus: reg_w_riv err -71
[   66.885640][ T4685] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[   66.898861][ T4685] usb 1-1: USB disconnect, device number 3
[   67.126379][ T5957] syzkaller1: entered promiscuous mode
[   67.128214][ T5957] syzkaller1: entered allmulticast mode
[   67.219360][ T5959] ip_tables: iptables: counters copy to user failed while replacing table
[   67.550454][ T5971] loop0: detected capacity change from 0 to 512
[   67.563600][ T4685] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   67.579911][ T5971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.584373][ T5971] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.620100][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.723468][ T4685] usb 3-1: Using ep0 maxpacket: 32
[   67.731557][ T4685] usb 3-1: unable to get BOS descriptor or descriptor too short
[   67.741467][ T4685] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[   67.747381][ T4685] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[   67.754757][ T4685] usb 3-1: config 14 has no interface number 0
[   67.760310][ T4685] usb 3-1: config 14 has no interface number 1
[   67.764277][ T4685] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[   67.772628][ T4685] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[   67.782365][ T4685] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[   67.790450][ T4685] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[   67.800078][ T4685] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[   67.813269][ T4685] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   67.817367][ T4685] usb 3-1: config 14 interface 57 has no altsetting 0
[   67.819464][ T4685] usb 3-1: config 14 interface 228 has no altsetting 0
[   67.830427][ T4685] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[   67.835389][ T4685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.844872][ T4685] usb 3-1: Product: syz
[   67.848103][ T4685] usb 3-1: Manufacturer: syz
[   67.853923][ T4685] usb 3-1: SerialNumber: syz
[   67.951633][ T5988] loop1: detected capacity change from 0 to 4096
[   67.958417][ T5988] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   67.980247][ T5988] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   67.990924][ T5988] ntfs3(loop1): Failed to load $AttrDef (-22)
[   68.092373][ T5992] loop1: detected capacity change from 0 to 128
[   68.281412][ T4685] legousbtower 3-1:14.57: interrupt endpoints not found
[   68.313790][ T6004] Zero length message leads to an empty skb
[   68.683278][ T4685] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 244.166 build 40507
[   68.697552][ T4685] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[   68.709521][ T6021] loop0: detected capacity change from 0 to 32768
[   68.739547][ T6015] loop1: detected capacity change from 0 to 40427
[   68.749068][ T6021] XFS (loop0): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[   68.759988][ T6015] F2FS-fs (loop1): invalid crc value
[   68.812158][ T6015] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   68.812227][ T6021] XFS (loop0): Starting recovery (logdev: internal)
[   68.818618][ T6015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   68.842024][ T6021] XFS (loop0): Ending recovery (logdev: internal)
[   68.862717][   T34] audit: type=1800 audit(1787569833.682:5): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.126" name="file1" dev="loop1" ino=10 res=0 errno=0
[   68.923387][ T6015] syz.1.126: attempt to access beyond end of device
[   68.923387][ T6015] loop1: rw=8423425, sector=77824, nr_sectors = 8 limit=40427
[   68.929688][ T5612] XFS (loop0): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[   68.990897][ T5621] syz-executor: attempt to access beyond end of device
[   68.990897][ T5621] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   69.041130][ T5621] CPU: 1 UID: 0 PID: 5621 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   69.041147][ T5621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.041153][ T5621] Call Trace:
[   69.041158][ T5621]  <TASK>
[   69.041162][ T5621]  dump_stack_lvl+0xe8/0x150
[   69.041180][ T5621]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   69.041195][ T5621]  f2fs_write_end_io+0x124b/0x1710
[   69.041221][ T5621]  __submit_merged_bio+0x258/0x6a0
[   69.041234][ T5621]  ? rcu_is_watching+0x15/0xb0
[   69.041254][ T5621]  __submit_merged_write_cond+0x3c9/0x4e0
[   69.041272][ T5621]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   69.041297][ T5621]  f2fs_write_data_pages+0x2a27/0x36f0
[   69.041331][ T5621]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.041351][ T5621]  ? _raw_spin_unlock+0x28/0x50
[   69.041369][ T5621]  ? sched_balance_rq+0x6511/0x7020
[   69.041400][ T5621]  ? unwind_next_frame+0x8f/0x2550
[   69.041411][ T5621]  ? __pfx_hlock_conflict+0x10/0x10
[   69.041428][ T5621]  ? __bfs+0x153/0x290
[   69.041442][ T5621]  ? __pfx_hlock_conflict+0x10/0x10
[   69.041468][ T5621]  ? lockdep_unlock+0x5d/0xd0
[   69.041480][ T5621]  ? __lock_acquire+0x13e8/0x2cf0
[   69.041506][ T5621]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   69.041549][ T5621]  do_writepages+0x338/0x560
[   69.041575][ T5621]  ? do_raw_spin_unlock+0x4d/0x210
[   69.041592][ T5621]  filemap_fdatawrite+0x1e9/0x2f0
[   69.041613][ T5621]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   69.041651][ T5621]  ? do_raw_spin_unlock+0x4d/0x210
[   69.041668][ T5621]  f2fs_sync_dirty_inodes+0x30e/0x830
[   69.041697][ T5621]  f2fs_write_checkpoint+0xa3d/0x2710
[   69.041712][ T5621]  ? __lock_acquire+0x683/0x2cf0
[   69.041746][ T5621]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   69.041796][ T5621]  kill_f2fs_super+0x2f6/0x700
[   69.041819][ T5621]  ? __pfx_kill_f2fs_super+0x10/0x10
[   69.041844][ T5621]  ? call_rcu+0x64b/0x8b0
[   69.041862][ T5621]  ? lockdep_hardirqs_on+0x7a/0x110
[   69.041887][ T5621]  deactivate_locked_super+0xbc/0x130
[   69.041904][ T5621]  cleanup_mnt+0x3d3/0x460
[   69.041951][ T5621]  task_work_run+0x1d9/0x270
[   69.041971][ T5621]  ? __pfx_task_work_run+0x10/0x10
[   69.041999][ T5621]  exit_to_user_mode_loop+0x1fa/0x730
[   69.042014][ T5621]  ? rcu_is_watching+0x15/0xb0
[   69.042029][ T5621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.042044][ T5621]  do_syscall_64+0x353/0x580
[   69.042059][ T5621]  ? trace_irq_disable+0x3b/0x140
[   69.042080][ T5621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.042093][ T5621] RIP: 0033:0x7f476879f317
[   69.042108][ T5621] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   69.042119][ T5621] RSP: 002b:00007ffe83902838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   69.042135][ T5621] RAX: 0000000000000000 RBX: 00007f4768834474 RCX: 00007f476879f317
[   69.042142][ T5621] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe839028f0
[   69.042149][ T5621] RBP: 00007ffe839028f0 R08: 00007ffe839038f0 R09: 00000000ffffffff
[   69.042156][ T5621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe83903980
[   69.042162][ T5621] R13: 00007f4768834474 R14: 0000000000010cdb R15: 00007ffe839039c0
[   69.042184][ T5621]  </TASK>
[   69.042233][ T5621] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   69.312316][ T6035] loop0: detected capacity change from 0 to 32768
[   69.458515][ T5666] usb 3-1: USB disconnect, device number 3
[   69.492019][ T5666] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected
[   69.689054][ T6047] Failed to get privilege flags for destination (handle=0x2:0x1)
[   69.782278][ T6053] pim6reg: entered allmulticast mode
[   69.786977][ T6053] pim6reg: left allmulticast mode
[   70.003234][ T4685] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   70.157048][ T4685] usb 2-1: unable to get BOS descriptor or descriptor too short
[   70.160917][ T4685] usb 2-1: not running at top speed; connect to a high speed hub
[   70.165561][ T4685] usb 2-1: config 1 has an invalid interface number: 93 but max is 0
[   70.168926][ T4685] usb 2-1: config 1 has no interface number 0
[   70.171437][ T4685] usb 2-1: config 1 interface 93 has no altsetting 0
[   70.176551][ T4685] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d
[   70.180062][ T4685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.183072][ T4685] usb 2-1: Product: syz
[   70.185031][ T4685] usb 2-1: Manufacturer: syz
[   70.186901][ T4685] usb 2-1: SerialNumber: syz
[   70.427045][ T4685] usb 2-1: USB disconnect, device number 3
[   70.785849][ T6062] netlink: 79 bytes leftover after parsing attributes in process `syz.2.142'.
[   70.870456][ T6066] set_capacity_and_notify: 1 callbacks suppressed
[   70.870469][ T6066] loop0: detected capacity change from 0 to 8
[   70.905935][ T6066] squashfs image failed sanity check
[   70.932262][ T6068] netlink: 52 bytes leftover after parsing attributes in process `syz.2.145'.
[   70.970803][ T6068] netlink: 52 bytes leftover after parsing attributes in process `syz.2.145'.
[   71.168069][ T6080] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   71.460940][ T6090] loop2: detected capacity change from 0 to 32768
[   71.468820][ T6090] (syz.2.156,6090,1):ocfs2_verify_volume:2309 ERROR: bad cluster size bit found: 524308
[   71.483019][ T6090] (syz.2.156,6090,1):ocfs2_verify_volume:2328 ERROR: status = -22
[   71.495476][ T6090] (syz.2.156,6090,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   71.500069][ T6090] (syz.2.156,6090,1):ocfs2_fill_super:1177 ERROR: status = -22
[   71.530938][ T6092] loop0: detected capacity change from 0 to 32768
[   71.550596][ T6092] (syz.0.157,6092,0):ocfs2_check_set_options:1251 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[   71.557651][ T6092] (syz.0.157,6092,0):ocfs2_fill_super:1177 ERROR: status = -22
[   71.573780][ T5666] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   71.632780][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[   71.637951][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[   71.735640][ T5666] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.748146][ T5666] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.756276][ T5666] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.762937][ T5666] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   71.777823][ T5064] IPVS: starting estimator thread 0...
[   71.789837][ T5666] usb 2-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00
[   71.796285][ T5666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.799324][ T5666] usb 2-1: Product: syz
[   71.800691][ T5666] usb 2-1: Manufacturer: syz
[   71.802167][ T5666] usb 2-1: SerialNumber: syz
[   71.816298][ T5666] mos7840 2-1:1.0: missing endpoints
[   71.870522][ T6106] loop2: detected capacity change from 0 to 4096
[   71.874824][ T6106] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   71.884369][ T6102] IPVS: using max 67 ests per chain, 160800 per kthread
[   71.910148][ T6106] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   71.960564][ T6110] loop0: detected capacity change from 0 to 128
[   71.994820][ T6110] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   72.001360][ T6110] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   72.027748][   T33] usb 2-1: USB disconnect, device number 4
[   72.055842][ T5612] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   72.097032][ T6116] netlink: 'syz.2.168': attribute type 3 has an invalid length.
[   72.106860][ T6118] netlink: 'syz.0.167': attribute type 10 has an invalid length.
[   72.116287][ T6116] netlink: 'syz.2.168': attribute type 1 has an invalid length.
[   72.116740][ T6118] team0: Device veth0_vlan failed to register rx_handler
[   72.131302][ T6116] netlink: 480 bytes leftover after parsing attributes in process `syz.2.168'.
[   72.349893][ T6130] comedi comedi1: 8255: I/O port conflict (0x3ffc0,4)
[   72.403920][ T5064] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   72.569217][ T5064] usb 1-1: unable to get BOS descriptor or descriptor too short
[   72.572540][ T5064] usb 1-1: not running at top speed; connect to a high speed hub
[   72.576727][ T5064] usb 1-1: config 136 has an invalid interface number: 30 but max is 0
[   72.586045][ T5064] usb 1-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config
[   72.592837][ T5064] usb 1-1: config 136 has no interface number 0
[   72.599064][ T5064] usb 1-1: config 136 interface 30 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   72.604268][ T5064] usb 1-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.611677][ T5064] usb 1-1: New USB device found, idVendor=0499, idProduct=100e, bcdDevice=f0.f4
[   72.615733][ T5064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.618804][ T5064] usb 1-1: Product: syz
[   72.620529][ T5064] usb 1-1: Manufacturer: syz
[   72.622382][ T5064] usb 1-1: SerialNumber: syz
[   72.623635][   T33] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   72.772462][ T6140] loop1: detected capacity change from 0 to 256
[   72.778470][   T33] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   72.793204][   T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.810613][   T33] usb 3-1: config 0 descriptor??
[   72.846997][   T33] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   72.874847][ T5064] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   72.967471][ T5064] snd-usb-audio 1-1:136.30: probe with driver snd-usb-audio failed with error -2
[   72.982248][ T5064] usb 1-1: USB disconnect, device number 4
[   72.999357][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   73.074944][ T6144] batman_adv: batadv0: Adding interface: dummy0
[   73.080054][ T6144] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   73.089684][ T6144] batman_adv: batadv0: Interface activated: dummy0
[   73.106571][ T6144] batadv0: mtu less than device minimum
[   73.109443][ T6144] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.113830][ T6144] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.117573][ T6144] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.121168][ T6144] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.124911][ T6144] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.128578][ T6144] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.132187][ T6144] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.135960][ T6144] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   73.408450][ T6154] loop1: detected capacity change from 0 to 256
[   73.485043][ T6154] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[   73.557778][   T34] audit: type=1326 audit(1787569838.382:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b64f9e0d9 code=0x7ffc0000
[   73.578773][   T34] audit: type=1326 audit(1787569838.382:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b64f9e0d9 code=0x7ffc0000
[   73.594738][   T34] audit: type=1326 audit(1787569838.382:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b64f9e0d9 code=0x7ffc0000
[   73.623327][   T34] audit: type=1326 audit(1787569838.382:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6b64f9e0d9 code=0x7ffc0000
[   73.639676][   T34] audit: type=1326 audit(1787569838.432:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b64f5e90e code=0x7ffc0000
[   73.650873][   T33] gspca_stv06xx: I2C: Read error writing address: -71
[   73.661483][   T33] usb 3-1: USB disconnect, device number 4
[   73.665399][   T34] audit: type=1326 audit(1787569838.432:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b64f5e90e code=0x7ffc0000
[   73.680755][   T34] audit: type=1326 audit(1787569838.432:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b64f5e90e code=0x7ffc0000
[   73.700200][   T34] audit: type=1326 audit(1787569838.432:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b64f5e90e code=0x7ffc0000
[   73.717558][   T34] audit: type=1326 audit(1787569838.442:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b64f5e90e code=0x7ffc0000
[   73.864285][   T34] kauditd_printk_skb: 113 callbacks suppressed
[   73.864297][   T34] audit: type=1326 audit(1787569838.692:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.0.188" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6b64f9e0d9 code=0x7ffc0000
[   74.095746][ T6168] loop1: detected capacity change from 0 to 32768
[   74.124867][ T6168] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   74.173263][ T6168] XFS (loop1): Ending clean mount
[   74.220751][ T5621] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   74.843993][ T6222] loop1: detected capacity change from 0 to 1024
[   74.906553][ T5621] hfsplus: bad catalog entry type
[   74.913283][   T33] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   75.067018][   T33] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[   75.071765][   T33] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   75.079085][   T33] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   75.082606][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   75.086235][   T33] usb 3-1: Product: syz
[   75.088111][   T33] usb 3-1: Manufacturer: syz
[   75.314727][   T33] cdc_acm 3-1:1.0: ttyACM0: USB ACM device
[   75.327607][   T33] usb 3-1: USB disconnect, device number 5
[   75.505763][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.516855][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.520658][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.526377][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.529851][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.603078][ T6230] process 'syz.0.218' launched './file2' with NULL argv: empty string added
[   75.972515][ T6247] loop0: detected capacity change from 0 to 256
[   75.995957][ T6247] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   76.191334][ T6261] loop0: detected capacity change from 0 to 2048
[   76.276573][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.231'.
[   76.296218][ T6261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.320748][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.326315][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.333404][ T6226] bridge_slave_0: entered allmulticast mode
[   76.336381][ T6226] bridge_slave_0: entered promiscuous mode
[   76.341444][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.344143][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.346783][ T6226] bridge_slave_1: entered allmulticast mode
[   76.350111][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.354282][ T6226] bridge_slave_1: entered promiscuous mode
[   76.409475][ T6226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.422065][ T6226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.473505][ T6226] team0: Port device team_slave_0 added
[   76.479567][ T6226] team0: Port device team_slave_1 added
[   76.516512][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.518691][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.527950][ T6226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.537109][ T6226] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.539422][ T6226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.550900][ T6226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.601677][ T6226] hsr_slave_0: entered promiscuous mode
[   76.603961][ T6282] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   76.611420][ T6226] hsr_slave_1: entered promiscuous mode
[   76.613650][ T6226] debugfs: 'hsr0' already exists in 'hsr'
[   76.615435][ T6226] Cannot create hsr debugfs directory
[   76.669574][ T5064] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[   76.831233][ T5064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   76.838401][ T5064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.848280][ T5064] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[   76.856825][ T5064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.867776][ T5064] usb 1-1: config 0 descriptor??
[   76.947840][ T6296] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   76.965842][ T6296] CIFS: Attempting to mount //127.0.0.1/share
[   76.983701][ T6226] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.995716][ T6226] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   76.999767][ T6226] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   77.017226][ T6226] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   77.021637][ T6226] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   77.028984][ T6226] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   77.032288][ T6226] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   77.040617][ T6226] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   77.077864][ T6226] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.080627][ T6226] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.084363][ T6226] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.086761][ T6226] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.093699][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.097261][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.175905][ T6226] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.199510][ T6226] 8021q: adding VLAN 0 to HW filter on device team0
[   77.208448][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.211369][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.232830][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.235849][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.328013][ T5064] aquacomputer_d5next 0003:0C70:F0B6.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0
[   77.507852][   T33] usb 1-1: USB disconnect, device number 5
[   77.591998][ T6226] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.623778][ T5611] Bluetooth: hci2: command tx timeout
[   77.649162][ T6226] veth0_vlan: entered promiscuous mode
[   77.660537][ T6226] veth1_vlan: entered promiscuous mode
[   77.681669][ T6226] veth0_macvtap: entered promiscuous mode
[   77.687634][ T6226] veth1_macvtap: entered promiscuous mode
[   77.701158][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.722961][ T6226] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.737106][ T5466] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.739833][ T5466] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.743484][ T5466] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.746805][ T5466] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.781608][ T6296] CIFS: VFS: cifs_mount failed w/return code = -112
[   77.880191][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.882774][ T6316] loop2: detected capacity change from 0 to 2048
[   77.888203][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.924343][ T6316] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.935189][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.941406][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.196270][   T34] audit: type=1800 audit(1787569843.022:129): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.244" name="file1" dev="loop2" ino=1367 res=0 errno=0
[   78.691927][ T6334] warning: `syz.2.250' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   78.893231][ T5693] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   79.048965][ T5693] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.058553][ T5693] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   79.073270][ T5693] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   79.076644][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.086869][ T5693] usb 4-1: config 0 descriptor??
[   79.342825][   T33] usb 4-1: USB disconnect, device number 2
[   79.353379][ T5064] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   79.433425][  T802] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   79.503338][ T5064] usb 1-1: Using ep0 maxpacket: 8
[   79.508142][ T5064] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[   79.511842][ T5064] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.516327][ T5064] usb 1-1: config 0 has no interface number 0
[   79.518548][ T5064] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   79.521759][ T5064] usb 1-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[   79.529225][ T5064] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[   79.533027][ T5064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.537238][ T5064] usb 1-1: Product: syz
[   79.539268][ T5064] usb 1-1: Manufacturer: syz
[   79.541122][ T5064] usb 1-1: SerialNumber: syz
[   79.549987][ T5064] usb 1-1: config 0 descriptor??
[   79.595208][  T802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   79.600234][  T802] usb 3-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00
[   79.603025][  T802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   79.605965][  T802] usb 3-1: Product: syz
[   79.607307][  T802] usb 3-1: Manufacturer: syz
[   79.615581][  T802] navman 3-1:1.0: navman converter detected
[   79.620708][  T802] usb 3-1: navman converter now attached to ttyUSB0
[   79.703496][ T5611] Bluetooth: hci2: command tx timeout
[   79.764736][ T5064] usb 1-1: NFC: intf ffff888103f07000 id ffffffff8f635c40
[   79.773664][ T5064] usb 1-1: USB disconnect, device number 6
[   79.827534][ T5693] usb 3-1: USB disconnect, device number 6
[   79.843031][ T5693] navman ttyUSB0: navman converter now disconnected from ttyUSB0
[   79.849422][ T5693] navman 3-1:1.0: device disconnected
[   80.059746][ T6364] loop3: detected capacity change from 0 to 2048
[   80.081640][ T6364] NILFS (loop3): invalid segment: Magic number mismatch
[   80.089010][ T6364] NILFS (loop3): trying rollback from an earlier position
[   80.093626][ T6364] NILFS (loop3): invalid segment: Inconsistency found
[   80.100905][ T6364] NILFS (loop3): error -22 while searching super root
[   80.365669][ T6376] capability: warning: `syz.0.271' uses 32-bit capabilities (legacy support in use)
[   80.388155][ T6378] loop2: detected capacity change from 0 to 2048
[   80.409205][ T6378] NILFS (loop2): invalid segment: Magic number mismatch
[   80.414635][ T6378] NILFS (loop2): trying rollback from an earlier position
[   80.459730][ T6378] NILFS (loop2): recovery complete
[   80.536320][ T6382] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   80.803777][ T6386] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.275'.
[   80.927159][ T6381] loop0: detected capacity change from 0 to 131072
[   80.933766][ T6381] F2FS-fs (loop0): invalid crc value
[   80.977511][ T6381] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   80.987637][ T6381] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   81.400259][ T6406] net_ratelimit: 12 callbacks suppressed
[   81.400272][ T6406] openvswitch: netlink: Unknown key attributes 1
[   81.691904][ T6410] loop3: detected capacity change from 0 to 32768
[   81.717286][ T6410] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.284 (6410)
[   81.784946][ T5611] Bluetooth: hci2: command tx timeout
[   81.814522][ T6410] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   81.823475][ T6410] BTRFS info (device loop3): using sha256 checksum algorithm
[   81.907464][   T10] cfg80211: failed to load regulatory.db
[   81.960502][ T6410] BTRFS info (device loop3): enabling ssd optimizations
[   81.962709][ T6410] BTRFS info (device loop3): turning on async discard
[   81.964972][ T6410] BTRFS info (device loop3): enabling free space tree
[   81.986141][ T6410] BTRFS info (device loop3): resizing devid 73709551615
[   81.989942][ T6410] BTRFS info (device loop3): resizer unable to find device 73709551615
[   82.001482][ T6438] loop0: detected capacity change from 0 to 1024
[   82.006798][ T6226] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   82.019274][ T6438] EXT4-fs: Ignoring removed bh option
[   82.043005][ T6438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   82.047241][ T6438] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.154773][ T6418] loop2: detected capacity change from 0 to 32768
[   82.206976][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   82.221477][ T6418] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   82.274730][ T6418] XFS (loop2): Ending clean mount
[   82.572522][ T5609] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   82.698931][ T6467] netlink: 64 bytes leftover after parsing attributes in process `syz.3.298'.
[   82.732395][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   82.785584][ T6471] netlink: 'syz.3.300': attribute type 3 has an invalid length.
[   82.788035][ T6471] netlink: 'syz.3.300': attribute type 1 has an invalid length.
[   82.790392][ T6471] netlink: 224 bytes leftover after parsing attributes in process `syz.3.300'.
[   82.795898][ T6471] NCSI netlink: No device for ifindex 0
[   82.883339][   T10] usb 1-1: Using ep0 maxpacket: 16
[   82.889907][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   82.897184][   T10] usb 1-1: config 1 has an invalid interface number: 237 but max is 0
[   82.903839][   T10] usb 1-1: config 1 has no interface number 0
[   82.911035][   T10] usb 1-1: config 1 interface 237 has no altsetting 0
[   82.919847][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed
[   82.926773][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.930190][   T10] usb 1-1: Product: syz
[   82.933955][   T10] usb 1-1: Manufacturer: syz
[   82.935879][   T10] usb 1-1: SerialNumber: syz
[   83.179874][   T10] ipaq 1-1:1.237: PocketPC PDA converter detected
[   83.188869][ T6483] loop2: detected capacity change from 0 to 4096
[   83.197655][ T6483] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   83.204719][   T10] ipaq 1-1:1.237: probe with driver ipaq failed with error -71
[   83.227539][ T6473] loop3: detected capacity change from 0 to 32768
[   83.230366][   T10] usb 1-1: USB disconnect, device number 7
[   83.262730][ T6473] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.314531][ T6473] XFS (loop3): Ending clean mount
[   83.327278][ T6473] XFS (loop3): Quotacheck needed: Please wait.
[   83.375036][ T6473] XFS (loop3): Quotacheck: Done.
[   83.406809][ T6226] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   83.593593][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   83.759734][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[   83.771094][   T24] usb 3-1: config 0 has no interfaces?
[   83.780977][   T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[   83.790405][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.797110][   T24] usb 3-1: Product: syz
[   83.802520][   T24] usb 3-1: Manufacturer: syz
[   83.804931][   T24] usb 3-1: SerialNumber: syz
[   83.816323][   T24] usb 3-1: config 0 descriptor??
[   83.863350][ T5611] Bluetooth: hci2: command tx timeout
[   84.031633][ T4685] usb 3-1: USB disconnect, device number 7
[   84.373280][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   84.543809][   T24] usb 1-1: Using ep0 maxpacket: 32
[   84.549399][   T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[   84.554903][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[   84.559609][   T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[   84.562585][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.577254][   T24] usb 1-1: config 0 descriptor??
[   84.950718][ T6519] loop3: detected capacity change from 0 to 512
[   84.954173][ T6519] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   84.965030][ T6519] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   84.973691][    C0] EXT4-fs (loop3): error count since last fsck: 1
[   84.976946][    C0] EXT4-fs (loop3): initial error at time 1787569849: ext4_mb_generate_buddy:1317
[   84.979768][    C0] EXT4-fs (loop3): last error at time 1787569849: ext4_mb_generate_buddy:1317
[   84.983559][ T6519] EXT4-fs (loop3): Remounting filesystem read-only
[   84.990173][ T6519] EXT4-fs (loop3): 1 truncate cleaned up
[   84.992936][ T6519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.013392][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.110452][   T24] kye 0003:0458:5010.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[   85.121099][   T24] kye 0003:0458:5010.0002: unbalanced delimiter at end of report description
[   85.124304][   T24] kye 0003:0458:5010.0002: parse failed
[   85.126148][   T24] kye 0003:0458:5010.0002: probe with driver kye failed with error -22
[   85.190649][ T6523] loop3: detected capacity change from 0 to 32768
[   85.198439][ T6523] jfs_mount: dbMount failed w/rc = -22
[   85.200895][ T6523] Mount JFS Failure: -22
[   85.202310][ T6523] jfs_mount failed w/return code = -22
[   85.316539][   T24] usb 1-1: USB disconnect, device number 8
[   85.758297][ T6535] loop2: detected capacity change from 0 to 32768
[   85.828477][ T6535] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   85.851120][ T6535] XFS (loop2): Ending clean mount
[   86.197037][ T6552] loop0: detected capacity change from 0 to 256
[   86.267767][ T5609] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   86.548518][ T6563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.330'.
[   86.600118][ T6565] loop0: detected capacity change from 0 to 2048
[   86.608331][ T6565] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4096, location=4096
[   86.612816][ T6565] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   86.623629][ T6565] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   86.635619][ T6565] UDF-fs: Scanning with blocksize 512 failed
[   86.656240][ T6565] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   86.659633][ T6565] UDF-fs: Scanning with blocksize 1024 failed
[   86.669259][ T6565] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[   86.675719][ T6565] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   86.683679][ T6565] UDF-fs: Scanning with blocksize 2048 failed
[   86.688414][ T6565] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   86.695443][ T6565] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[   86.699779][ T6565] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   86.709062][ T6565] UDF-fs: Scanning with blocksize 4096 failed
[   86.712151][ T6565] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[   87.070759][ T6576] loop3: detected capacity change from 0 to 32768
[   87.313895][   T34] audit: type=1800 audit(1787569852.082:130): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.337" name="file1" dev="loop3" ino=4 res=0 errno=0
[   88.011281][ T6593] loop3: detected capacity change from 0 to 128
[   88.047570][ T6593] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   88.052201][ T6593] hpfs: filesystem error: improperly stopped
[   88.055132][ T6593] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   88.058808][ T6593] hpfs: You really don't want any checks? You are crazy...
[   88.061842][ T6593] hpfs: hpfs_map_sector(): read error
[   88.065189][ T6593] hpfs: code page support is disabled
[   88.072183][ T6593] hpfs: hpfs_map_4sectors(): unaligned read
[   88.076374][ T6593] hpfs: hpfs_map_4sectors(): unaligned read
[   88.090953][ T6593] hpfs: filesystem error: unable to find root dir
[   88.110266][ T6593] hpfs: hpfs_map_4sectors(): unaligned read
[   88.114330][ T6593] hpfs: hpfs_map_sector(): read error
[   88.125211][ T6597] loop2: detected capacity change from 0 to 512
[   88.136052][ T6597] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   88.149499][ T6597] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   88.154946][ T6597] EXT4-fs (loop2): 1 truncate cleaned up
[   88.160850][ T6597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.165193][   T33] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   88.207266][ T6603] loop3: detected capacity change from 0 to 512
[   88.222628][ T6603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   88.230748][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.250576][ T6603] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[   88.253730][ T6603] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   88.257010][ T6603] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring
[   88.259898][ T6603] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[   88.282531][ T6603] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   88.288563][ T6603] ext4 filesystem being remounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   88.308429][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'.
[   88.313933][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'.
[   88.319444][ T6226] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.323302][   T33] usb 1-1: Using ep0 maxpacket: 32
[   88.328385][   T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.342680][   T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.347960][   T33] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   88.354354][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.361683][   T33] usb 1-1: config 0 descriptor??
[   88.657345][ T6619] loop3: detected capacity change from 0 to 164
[   88.704162][ T6619] rock: directory entry would overflow storage
[   88.706336][ T6619] rock: sig=0x66, size=4, remaining=3
[   88.716429][ T6619] loop3: Can't mount, would change RO state
[   88.805420][   T33] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[   88.820251][   T33] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[   88.824767][   T33] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[   88.827157][   T33] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[   88.829437][   T33] savu 0003:1E7D:2D5A.0003: unknown main item tag 0x0
[   88.832132][   T33] savu 0003:1E7D:2D5A.0003: unbalanced collection at end of report description
[   88.841864][   T33] savu 0003:1E7D:2D5A.0003: parse failed
[   88.844592][   T33] savu 0003:1E7D:2D5A.0003: probe with driver savu failed with error -22
[   88.955238][ T6614] loop2: detected capacity change from 0 to 131072
[   88.960027][ T6614] F2FS-fs (loop2): invalid crc value
[   88.997371][ T6614] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   89.004834][ T6614] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   89.024737][   T33] usb 1-1: USB disconnect, device number 9
[   89.301804][ T6633] netlink: 'syz.3.360': attribute type 13 has an invalid length.
[   89.605677][ T6642] loop2: detected capacity change from 0 to 512
[   89.622194][ T6642] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.357: bg 0: block 4: invalid block bitmap
[   89.636696][ T6642] loop2: lost filesystem error report for type 5 error -117
[   89.639531][ T6642] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   89.645494][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   89.645532][    C1] EXT4-fs (loop2): initial error at time 1787569854: ext4_validate_block_bitmap:432
[   89.645544][    C1] EXT4-fs (loop2): last error at time 1787569854: ext4_validate_block_bitmap:432
[   89.649438][   T34] audit: type=1400 audit(1787569854.472:131): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=6650 comm="syz.0.367"
[   89.693577][ T6642] loop2: lost filesystem error report for type 5 error -117
[   89.712668][ T6642] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.357: invalid indirect mapped block 1 (level 1)
[   89.731014][ T6642] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   89.731409][ T6642] EXT4-fs (loop2): 1 truncate cleaned up
[   89.752756][ T6642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.002939][ T6655] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   90.455172][ T5609] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.009149][ T6657] syzkaller0: entered promiscuous mode
[   93.018627][ T6657] syzkaller0: entered allmulticast mode
[   93.041005][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'.
[   93.177367][ T6669] loop3: detected capacity change from 0 to 4096
[   93.365807][ T6674] loop3: detected capacity change from 0 to 4096
[   93.375238][ T6674] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   93.397031][ T6674] ntfs3(loop3): ino=19, mi_enum_attr
[   93.398779][ T6674] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   93.513026][ T6678] netlink: 'syz.3.378': attribute type 83 has an invalid length.
[   94.471591][ T6715] netlink: 'syz.0.394': attribute type 2 has an invalid length.
[   94.559034][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'.
[   94.705148][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   94.817560][ T6728] loop0: detected capacity change from 0 to 512
[   94.830713][ T6728] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0082]
[   94.836024][ T6730] netlink: 324 bytes leftover after parsing attributes in process `syz.2.399'.
[   94.836097][ T6728] EXT4-fs (loop0): orphan cleanup on readonly fs
[   94.842934][ T6728] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[   94.854895][ T6728] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   94.858024][ T6728] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.401: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   94.863865][   T24] usb 4-1: Using ep0 maxpacket: 32
[   94.866019][ T6728] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   94.869185][ T6728] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.401: couldn't read orphan inode 13 (err -117)
[   94.876146][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   94.876162][    C1] EXT4-fs (loop0): last error at time 1787569859: ext4_ext_check_inode:521: inode 13
[   94.882148][   T24] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[   94.884012][ T6728] loop0: lost filesystem error report for type 5 error -117
[   94.885354][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.899163][   T24] gspca_main: nw80x-2.14.0 probing 055f:d001
[   94.910327][ T6728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   94.947209][ T6728] EXT4-fs: Cannot specify journal on remount
[   94.972768][ T5612] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.256360][ T6744] netlink: 'syz.2.407': attribute type 1 has an invalid length.
[   95.344594][   T33] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[   95.530256][   T33] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[   95.534936][   T33] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   95.540127][   T33] usb 1-1: config 0 interface 0 has no altsetting 0
[   95.542879][   T33] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00
[   95.549701][   T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.569887][   T33] usb 1-1: config 0 descriptor??
[   95.576140][ T6739] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   96.158209][ T6762] netlink: 'syz.2.414': attribute type 1 has an invalid length.
[   96.161679][ T6762] netlink: 192 bytes leftover after parsing attributes in process `syz.2.414'.
[   96.165374][ T6762] netlink: 33 bytes leftover after parsing attributes in process `syz.2.414'.
[   96.324890][ T6768] loop2: detected capacity change from 0 to 4096
[   96.332316][ T6768] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   96.338514][ T6768] ntfs3(loop2): RAW NTFS volume: Filesystem size 8192.00 Gb > volume size 0.00 Gb. Mount in read-only.
[   96.348680][ T6768] ntfs3(loop2): NTFS 8192.00 Gb is too big to use 32 bits per cluster.
[   96.358937][ T6768] ntfs3(loop2): try to read out of volume at offset 0x1ffe00
[   96.461849][ T6770] tmpfs: Bad value for 'nr_inodes'
[   96.592850][   T33] asus 0003:0B05:19B6.0004: unknown main item tag 0x2
[   96.603416][   T33] asus 0003:0B05:19B6.0004: unknown main item tag 0x5
[   96.607332][   T33] asus 0003:0B05:19B6.0004: unknown main item tag 0x0
[   96.609701][   T33] asus 0003:0B05:19B6.0004: unknown main item tag 0x0
[   96.612401][   T33] asus 0003:0B05:19B6.0004: unknown main item tag 0x0
[   96.615227][   T33] asus 0003:0B05:19B6.0004: unknown main item tag 0x0
[   96.617891][   T33] asus 0003:0B05:19B6.0004: unknown main item tag 0x0
[   96.620251][   T33] asus 0003:0B05:19B6.0004: unknown main item tag 0x0
[   96.622830][   T33] asus 0003:0B05:19B6.0004: unknown main item tag 0x0
[   96.625168][   T33] asus 0003:0B05:19B6.0004: unknown main item tag 0x0
[   96.632365][   T33] asus 0003:0B05:19B6.0004: hidraw0: USB HID v0.0c Device [HID 0b05:19b6] on usb-dummy_hcd.0-1/input0
[   96.931316][ T6783] Bluetooth: MGMT ver 1.23
[   96.976172][   T24] gspca_nw80x: reg_w err -71
[   96.978799][   T24] nw80x 4-1:3.0: probe with driver nw80x failed with error -71
[   96.989316][   T33] usb 1-1: USB disconnect, device number 10
[   96.991974][   T24] usb 4-1: USB disconnect, device number 3
[   97.001024][   T33] ------------[ cut here ]------------
[   97.003834][   T33] !work->func
[   97.003848][   T33] WARNING: kernel/workqueue.c:4335 at __flush_work+0xb8f/0xca0, CPU#1: kworker/1:2/33
[   97.009753][   T33] Modules linked in:
[   97.011721][   T33] CPU: 1 UID: 0 PID: 33 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[   97.015650][   T33] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.019508][   T33] Workqueue: usb_hub_wq hub_event
[   97.021486][   T33] RIP: 0010:__flush_work+0xb8f/0xca0
[   97.023999][   T33] Code: 75 5e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 70 ca 38 00 90 0f 0b 90 e9 7c ff ff ff e8 62 ca 38 00 90 <0f> 0b 90 31 c0 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 64 ff ff ff e8 48
[   97.031446][   T33] RSP: 0018:ffffc90000a96f40 EFLAGS: 00010287
[   97.033835][   T33] RAX: ffffffff818e1d7e RBX: ffff88817368acf0 RCX: 0000000000100000
[   97.036927][   T33] RDX: ffffc90027f4d000 RSI: 0000000000003904 RDI: 0000000000003905
[   97.039980][   T33] RBP: ffffc90000a97100 R08: ffffffff90571d37 R09: 1ffffffff20ae3a6
[   97.043044][   T33] R10: dffffc0000000000 R11: fffffbfff20ae3a7 R12: dffffc0000000000
[   97.046419][   T33] R13: 1ffff1102e6d159e R14: 1ffff92000152df0 R15: ffff88817368acd8
[   97.049439][   T33] FS:  0000000000000000(0000) GS:ffff8882a8f5d000(0000) knlGS:0000000000000000
[   97.052780][   T33] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.055454][   T33] CR2: 00007fdf3588bff8 CR3: 0000000161ae2000 CR4: 00000000000006f0
[   97.058473][   T33] Call Trace:
[   97.059820][   T33]  <TASK>
[   97.061015][   T33]  ? __pfx___flush_work+0x10/0x10
[   97.063063][   T33]  ? rcu_is_watching+0x15/0xb0
[   97.065109][   T33]  ? work_grab_pending+0x3d1/0x930
[   97.067127][   T33]  ? __cancel_work_sync+0x5c/0x110
[   97.069179][   T33]  __cancel_work_sync+0xbe/0x110
[   97.071177][   T33]  asus_remove+0x147/0x180
[   97.072907][   T33]  ? hid_device_remove+0xb3/0x370
[   97.075217][   T33]  ? __pfx_asus_remove+0x10/0x10
[   97.077152][   T33]  hid_device_remove+0x230/0x370
[   97.079011][   T33]  ? __pfx_hid_device_remove+0x10/0x10
[   97.081108][   T33]  device_release_driver_internal+0x48b/0x880
[   97.083443][   T33]  bus_remove_device+0x444/0x560
[   97.085340][   T33]  ? __pfx_bus_remove_device+0x10/0x10
[   97.088293][   T33]  ? kernfs_remove_by_name_ns+0x101/0x140
[   97.091054][   T33]  device_del+0x524/0x8f0
[   97.092835][   T33]  ? __pfx_device_del+0x10/0x10
[   97.094878][   T33]  hid_destroy_device+0x6b/0x1b0
[   97.096919][   T33]  usbhid_disconnect+0x9f/0xc0
[   97.098840][   T33]  usb_unbind_interface+0x295/0x9f0
[   97.100931][   T33]  ? kernfs_remove_by_name_ns+0x101/0x140
[   97.103309][   T33]  ? kernfs_remove_by_name_ns+0x101/0x140
[   97.105510][   T33]  ? __pfx_usb_unbind_interface+0x10/0x10
[   97.107681][   T33]  device_release_driver_internal+0x4f5/0x880
[   97.109978][   T33]  bus_remove_device+0x444/0x560
[   97.111854][   T33]  ? __pfx_bus_remove_device+0x10/0x10
[   97.114021][   T33]  ? kernfs_remove_by_name_ns+0x101/0x140
[   97.116205][   T33]  device_del+0x524/0x8f0
[   97.117867][   T33]  ? __pfx_device_del+0x10/0x10
[   97.119727][   T33]  ? kobject_put+0x516/0x550
[   97.121498][   T33]  usb_disable_device+0x3d4/0x8d0
[   97.123543][   T33]  usb_disconnect+0x346/0x9a0
[   97.125366][   T33]  hub_event+0x1bbb/0x4d30
[   97.127160][   T33]  ? register_lock_class+0x31/0x2e0
[   97.129173][   T33]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   97.131239][   T33]  ? __pfx_hub_event+0x10/0x10
[   97.133266][   T33]  ? process_scheduled_works+0xa20/0x14e0
[   97.135510][   T33]  ? rcu_is_watching+0x15/0xb0
[   97.137402][   T33]  ? process_scheduled_works+0xa20/0x14e0
[   97.139620][   T33]  process_scheduled_works+0xa8e/0x14e0
[   97.141758][   T33]  ? __pfx_process_scheduled_works+0x10/0x10
[   97.144201][   T33]  ? assign_work+0x3cf/0x5d0
[   97.145976][   T33]  worker_thread+0xa47/0xfb0
[   97.147757][   T33]  ? __kthread_parkme+0x71/0x1f0
[   97.149707][   T33]  kthread+0x388/0x470
[   97.151317][   T33]  ? __pfx_worker_thread+0x10/0x10
[   97.153424][   T33]  ? __pfx_kthread+0x10/0x10
[   97.155251][   T33]  ret_from_fork+0x514/0xb70
[   97.157104][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[   97.159174][   T33]  ? __switch_to+0xc89/0x1420
[   97.161118][   T33]  ? __pfx_kthread+0x10/0x10
[   97.162986][   T33]  ret_from_fork_asm+0x1a/0x30
[   97.165096][   T33]  </TASK>
[   97.166336][   T33] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   97.169156][   T33] CPU: 1 UID: 0 PID: 33 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[   97.172612][   T33] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.176491][   T33] Workqueue: usb_hub_wq hub_event
[   97.178434][   T33] Call Trace:
[   97.179730][   T33]  <TASK>
[   97.180853][   T33]  vpanic+0x56c/0xa60
[   97.182414][   T33]  ? __pfx__printk+0x10/0x10
[   97.184174][   T33]  ? __pfx_vpanic+0x10/0x10
[   97.185945][   T33]  ? is_bpf_text_address+0x292/0x2b0
[   97.188036][   T33]  ? is_bpf_text_address+0x26/0x2b0
[   97.190132][   T33]  panic+0xc5/0xd0
[   97.191623][   T33]  ? __pfx_panic+0x10/0x10
[   97.193387][   T33]  ? ret_from_fork_asm+0x1a/0x30
[   97.195379][   T33]  __warn+0x315/0x4c0
[   97.196942][   T33]  ? __flush_work+0xb8f/0xca0
[   97.198806][   T33]  ? __flush_work+0xb8f/0xca0
[   97.200665][   T33]  __report_bug+0x276/0x570
[   97.202473][   T33]  ? __flush_work+0xb8f/0xca0
[   97.204345][   T33]  ? __pfx___report_bug+0x10/0x10
[   97.206350][   T33]  ? ret_from_fork_asm+0x1a/0x30
[   97.208316][   T33]  ? stack_trace_save+0xa9/0x100
[   97.210283][   T33]  ? __pfx_stack_trace_save+0x10/0x10
[   97.212371][   T33]  ? __flush_work+0xb8f/0xca0
[   97.214132][   T33]  report_bug+0x16a/0x220
[   97.215790][   T33]  ? __flush_work+0xb8f/0xca0
[   97.217691][   T33]  ? __flush_work+0xb91/0xca0
[   97.219545][   T33]  handle_bug+0x9c/0x200
[   97.221190][   T33]  exc_invalid_op+0x1a/0x50
[   97.222909][   T33]  asm_exc_invalid_op+0x1a/0x20
[   97.224715][   T33] RIP: 0010:__flush_work+0xb8f/0xca0
[   97.226710][   T33] Code: 75 5e 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 70 ca 38 00 90 0f 0b 90 e9 7c ff ff ff e8 62 ca 38 00 90 <0f> 0b 90 31 c0 48 bb f8 f8 f8 f8 f8 f8 f8 f8 e9 64 ff ff ff e8 48
[   97.234100][   T33] RSP: 0018:ffffc90000a96f40 EFLAGS: 00010287
[   97.236437][   T33] RAX: ffffffff818e1d7e RBX: ffff88817368acf0 RCX: 0000000000100000
[   97.239367][   T33] RDX: ffffc90027f4d000 RSI: 0000000000003904 RDI: 0000000000003905
[   97.242266][   T33] RBP: ffffc90000a97100 R08: ffffffff90571d37 R09: 1ffffffff20ae3a6
[   97.245134][   T33] R10: dffffc0000000000 R11: fffffbfff20ae3a7 R12: dffffc0000000000
[   97.248139][   T33] R13: 1ffff1102e6d159e R14: 1ffff92000152df0 R15: ffff88817368acd8
[   97.251285][   T33]  ? __flush_work+0xb8e/0xca0
[   97.253174][   T33]  ? __pfx___flush_work+0x10/0x10
[   97.255193][   T33]  ? rcu_is_watching+0x15/0xb0
[   97.257115][   T33]  ? work_grab_pending+0x3d1/0x930
[   97.259133][   T33]  ? __cancel_work_sync+0x5c/0x110
[   97.261197][   T33]  __cancel_work_sync+0xbe/0x110
[   97.263256][   T33]  asus_remove+0x147/0x180
[   97.265043][   T33]  ? hid_device_remove+0xb3/0x370
[   97.267028][   T33]  ? __pfx_asus_remove+0x10/0x10
[   97.268879][   T33]  hid_device_remove+0x230/0x370
[   97.270746][   T33]  ? __pfx_hid_device_remove+0x10/0x10
[   97.272803][   T33]  device_release_driver_internal+0x48b/0x880
[   97.275097][   T33]  bus_remove_device+0x444/0x560
[   97.277035][   T33]  ? __pfx_bus_remove_device+0x10/0x10
[   97.279227][   T33]  ? kernfs_remove_by_name_ns+0x101/0x140
[   97.281465][   T33]  device_del+0x524/0x8f0
[   97.283209][   T33]  ? __pfx_device_del+0x10/0x10
[   97.285226][   T33]  hid_destroy_device+0x6b/0x1b0
[   97.287265][   T33]  usbhid_disconnect+0x9f/0xc0
[   97.289160][   T33]  usb_unbind_interface+0x295/0x9f0
[   97.291127][   T33]  ? kernfs_remove_by_name_ns+0x101/0x140
[   97.293235][   T33]  ? kernfs_remove_by_name_ns+0x101/0x140
[   97.295376][   T33]  ? __pfx_usb_unbind_interface+0x10/0x10
[   97.297465][   T33]  device_release_driver_internal+0x4f5/0x880
[   97.299805][   T33]  bus_remove_device+0x444/0x560
[   97.301728][   T33]  ? __pfx_bus_remove_device+0x10/0x10
[   97.303873][   T33]  ? kernfs_remove_by_name_ns+0x101/0x140
[   97.306222][   T33]  device_del+0x524/0x8f0
[   97.307988][   T33]  ? __pfx_device_del+0x10/0x10
[   97.309926][   T33]  ? kobject_put+0x516/0x550
[   97.311790][   T33]  usb_disable_device+0x3d4/0x8d0
[   97.313664][   T33]  usb_disconnect+0x346/0x9a0
[   97.315425][   T33]  hub_event+0x1bbb/0x4d30
[   97.317087][   T33]  ? register_lock_class+0x31/0x2e0
[   97.319003][   T33]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   97.321155][   T33]  ? __pfx_hub_event+0x10/0x10
[   97.322942][   T33]  ? process_scheduled_works+0xa20/0x14e0
[   97.325315][   T33]  ? rcu_is_watching+0x15/0xb0
[   97.327263][   T33]  ? process_scheduled_works+0xa20/0x14e0
[   97.329499][   T33]  process_scheduled_works+0xa8e/0x14e0
[   97.331673][   T33]  ? __pfx_process_scheduled_works+0x10/0x10
[   97.333943][   T33]  ? assign_work+0x3cf/0x5d0
[   97.335648][   T33]  worker_thread+0xa47/0xfb0
[   97.337454][   T33]  ? __kthread_parkme+0x71/0x1f0
[   97.339494][   T33]  kthread+0x388/0x470
[   97.341122][   T33]  ? __pfx_worker_thread+0x10/0x10
[   97.343035][   T33]  ? __pfx_kthread+0x10/0x10
[   97.344821][   T33]  ret_from_fork+0x514/0xb70
[   97.346630][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[   97.348622][   T33]  ? __switch_to+0xc89/0x1420
[   97.350489][   T33]  ? __pfx_kthread+0x10/0x10
[   97.352294][   T33]  ret_from_fork_asm+0x1a/0x30
[   97.354164][   T33]  </TASK>
[   97.356117][   T33] Kernel Offset: disabled
[   97.357886][   T33] Rebooting in 86400 seconds..
