last executing test programs:

6m9.597886487s ago: executing program 2 (id=38):
syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109022400010200100009045819028ab53800090506020001000006090582020002"], 0x0)

6m8.380872008s ago: executing program 2 (id=56):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe4})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

6m7.356706887s ago: executing program 2 (id=72):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2, 0x0, 0xff8d}, 0x10150)

6m7.297567206s ago: executing program 2 (id=73):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001800070125bd700000000000257c3f0008000180040005000800b8"], 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0xc000)

6m7.297419501s ago: executing program 2 (id=74):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2)

6m7.297035909s ago: executing program 2 (id=75):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140", @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x11}, 0x0)

5m52.218468953s ago: executing program 32 (id=75):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140", @ANYRESOCT], 0x88}, 0x1, 0x0, 0x0, 0x11}, 0x0)

5m49.928108572s ago: executing program 0 (id=227):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000240))

5m49.068252208s ago: executing program 0 (id=230):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31030400008000000000380000000e0001"], 0x3c}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810)

5m48.848758528s ago: executing program 0 (id=232):
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}})

5m48.786382834s ago: executing program 0 (id=234):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4008080)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc)
sync()
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x24004045)
syz_clone3(&(0x7f0000006600)={0x108848000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, &(0x7f0000006540)=""/78, &(0x7f00000065c0)}, 0x58)
stat(0x0, &(0x7f00000005c0))
stat(&(0x7f0000006740)='./mnt\x00', 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file2\x00', 0x220400a, &(0x7f0000000280)=ANY=[], 0x1, 0x240, &(0x7f0000000840)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

5m48.577220404s ago: executing program 0 (id=237):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
pselect6(0x40, &(0x7f0000000100)={0x8, 0x3, 0x0, 0xffffffffffffffff, 0x800, 0x8, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"})

5m48.319083055s ago: executing program 0 (id=240):
r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b//\\\x9b//\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9b\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\x00\x00\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa70\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)

5m48.26057812s ago: executing program 33 (id=240):
r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b//\\\x9b//\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9b\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\x00\x00\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa70\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)

4m16.827417917s ago: executing program 4 (id=1602):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x24, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb4}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d8008"], 0x24}], 0x1}, 0x0)

4m16.759279475s ago: executing program 4 (id=1603):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)

4m16.697892052s ago: executing program 4 (id=1604):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080)

4m16.697668312s ago: executing program 4 (id=1605):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000240), 0xdf, 0x486, &(0x7f0000000c00)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)

4m16.626477917s ago: executing program 4 (id=1606):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000000c0)={0x29, 0x2})

4m16.439212341s ago: executing program 4 (id=1607):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m16.311707898s ago: executing program 34 (id=1607):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m5.172153586s ago: executing program 3 (id=1752):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000003400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32000000002c000000050a01020000000000000000020000000c00024000000000000000010900010073797a30"], 0xc0}}, 0x20000850)

4m4.881726087s ago: executing program 3 (id=1757):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000008280), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000008300)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004024}, 0x800)

4m4.085027838s ago: executing program 3 (id=1765):
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x301, &(0x7f0000000080)="$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")

4m4.013942546s ago: executing program 3 (id=1770):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

4m3.860851462s ago: executing program 3 (id=1772):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x0, 0x1, 0x10000, 0x3, 0xffffffff}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, 0x0)

4m1.901963388s ago: executing program 3 (id=1787):
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x1}}}}, 0xf)

4m1.787387128s ago: executing program 35 (id=1787):
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x1}}}}, 0xf)

3m35.268365769s ago: executing program 5 (id=2148):
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x60, 0x54, "", [{{0x9, 0x4, 0x0, 0x31, 0x2, 0x3, 0x1, 0x7, 0x1, {0x9, 0x21, 0x5, 0xc9, 0x1, {0x22, 0xb25}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0})

3m34.076428187s ago: executing program 5 (id=2185):
pipe(&(0x7f0000000200))
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0xfffffffc, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000017c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f0000000140)=[{&(0x7f0000002080)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0)

3m33.976660921s ago: executing program 5 (id=2188):
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x200a})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b})

3m33.91678494s ago: executing program 5 (id=2189):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r0}])

3m33.788440633s ago: executing program 5 (id=2194):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r0, 0xfaac4106a1b87a7, 0x70bd27, 0x1, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x8814}, 0x880)

3m33.428971102s ago: executing program 5 (id=2207):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000080)={[{@usrjquota}, {@errors_remount}]}, 0xfd, 0x4a4, &(0x7f0000001300)="$eJzs3M1rHGUYAPBndjdJvxNr/WitNlrF4kfSpFULCn6A4EFB0EM9SUzSUps20kRoS7BRSr0IWvAughfRv8CTJ1FPgle9S6FIL62eViY7s26S3U2y+dh8/H4w2Xl33pn3feadj3dmdhLAltWb/kkidkXEHxHRHRGF2gzbK0Oa786tqeF/bk0NJ1Euv/V3ks4Wt29NDedZk+xzZyVRShdUuJrES3XKnbh0+ezQ2NjohSzdP3nug/6JS5efPnNu6PTo6dHzgydOHD828Nyzg8+sSJxpnW4f+Gj84P7X3rn+xvDJ6+/98n0SsSOfXhvHMj3fXR2dqq6TuR5bocLWi90140mpjRVhSboiIm2ujpn9vzuKV/dUp3XHq5+0tXLAqiqXy+XBxpOny8AmlkQrcxWzYwewceUn+vT6Nx/WqOuxLtx8uXIBlMZ9JxsqU0qV+yBdlWuj3atUfm9EnJz+96t0iCXfh+hYpVoBAJvZj2n/56k6/b9SxL01+fZkz4Z6IuKuiNgbEXdHxL6IuCcqee+LiPvrF9P7boPye+ek5/d/CjeWEd6C0v7fC9mzrdn9v+pTsJ5ilto9E39HcurM2OjRbJ0ciY6uND1Qd+lJxHT6+fvnjcqv7f+lQ1p+3hfM6nGj1DV7npGhyaFlB565+XHEgVK9+JMo/R9F7I+IAy2WceaJbw/O/qZYHVs4/iZW4DlT+euIxyvtPx1z4s8lzZ9P9m+LsdGj/flWMd+vv117s1H5lfgL0Tz+7csPtIG0/XfU2/5frMbfk9Q+r52Yt4jOhcq49uenDa9pWt3+O5O3ZxV+cWhy8sJARGfy+vzva25w5+mLI9/N5E/jP3K4/v6/N5snjf+BiEg34gcj4qGIOJTV/eGIeCQiDjeJ/+dXHn2/YfyHFr/9Tzcpo1Vp/CN1j3+N2n8JI9uyJZz96YdG5VfbP2+wuu1/PE/MVGoxx7/F1rSVdQYAAAAbTSEidkVS6KuOFwp9fZXfy++LHYWx8YnJJ0+Nf3h+pPKOQE90FPI7Xd0190MHsnvDeXowS1/J0sey+8ZfFrfPpPuGx8dG2h08bHE7G+z/qb+K7a4dsOrmPUcrd7enIsCa874mbF2t7/+OHLDRLbAXF9aqHsDacxaHrave/n+lNpFE5VfywKbj/A9bV3X//2IRmWte95r78iaw8TQ7//spAGxu+v+wJbX0Xv96GolvIprnSdZLVZc08tlyZi+tQQ2j0Mb109mWRhksRrRxkygt9r9axKXylWUX2u4jEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMr4LwAA//9nM9m2")
mknod$loop(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2003, 0x0)

3m33.284685078s ago: executing program 36 (id=2207):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000080)={[{@usrjquota}, {@errors_remount}]}, 0xfd, 0x4a4, &(0x7f0000001300)="$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")
mknod$loop(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2003, 0x0)

1m30.137311412s ago: executing program 7 (id=4157):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x2, 0xd)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"4b81b0c732e92eb1fd60fbf401687d72", "1cea03ca4fe1c1f1e31253bda1f1fed5", "d80190bae206002cb2a1a28cde21dbfd"}, 0x2, 0x7})

1m29.97052518s ago: executing program 7 (id=4162):
syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x4040040)
openat$vsock(0xffffffffffffff9c, 0x0, 0x798802, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {0x0}, 0x96000})

1m28.935899585s ago: executing program 7 (id=4178):
io_setup(0x2, &(0x7f0000000000)=<r0=>0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1)
syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00')
preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}], 0x1, 0x6c, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000001080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r3, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000380)={0x0, 0x16, 0x76, "c50751d6b95303c3bd370679a14abdf909c3af0c318750a759a57249279981b49b090dc3867c39e5c813bf82b8182b044e2699bda9497e8109d7f86934ffba2419482255cbd82c60d131df595ad35050eff9f228ffd64ce225e09cf097d0b3a813f3fba0c96e72cfcb481c244c8e165404190fa4b3ee"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x310)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
io_submit(r0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])

1m25.606497272s ago: executing program 7 (id=4224):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
unshare(0x24060400)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00')

1m25.518468707s ago: executing program 7 (id=4226):
r0 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xc0fe)

1m25.40305789s ago: executing program 7 (id=4227):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd7000000000fe00000000", @ANYRES32=0x0, @ANYBLOB="42d4010028000100280012800b00010065727370616e00001800028008001500bb23000004001200050016000100000014"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0)

1m25.269356673s ago: executing program 37 (id=4227):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010426bd7000000000fe00000000", @ANYRES32=0x0, @ANYBLOB="42d4010028000100280012800b00010065727370616e00001800028008001500bb23000004001200050016000100000014"], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810)
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0)

2.77920368s ago: executing program 1 (id=5561):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000180)=0x8, 0x4)

2.378691756s ago: executing program 1 (id=5564):
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x208000, 0x0)

2.321806766s ago: executing program 1 (id=5565):
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80540, 0x7e)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x813)
r1 = syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00')
unshare(0x64000600)
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
write$binfmt_elf32(r2, &(0x7f0000000600)=ANY=[], 0x858)
pread64(r2, &(0x7f0000000080)=""/234, 0xea, 0x2)

2.058231342s ago: executing program 1 (id=5566):
r0 = syz_io_uring_setup(0xf04, 0x0, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITEV_FIXED={0x3d, 0x8, 0x4000, @fd_index=0x3, 0x8001, 0x0, 0x0, 0x0, 0x1d98587ad3e48832, {0x0, 0x0, 0x81, '\x00', &(0x7f0000000700)={0x8001, 0x8, 0x0, 0x0, 0xfffffffffffffffc}, 0x1}})
socket$kcm(0x11, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r7, 0x400, 0x1)
fremovexattr(r7, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
socket$kcm(0x2, 0xa, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@security={'security\x00', 0x4, 0x4, 0x408, 0xffffffff, 0x0, 0x0, 0x2b0, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0xfffd, 0x0, 'kmp\x00', "a38455d67b0633c77377af818fbba939943755c0a07fac1300dd851e136c187e0ede7cd67fae8be8fa37e218176b320409724e92a42eca15a1f7477233a7974ff18e78958d575575ff706059fdde3db296fa871031b79105baeb7bc1912ef125b3cf84bec049d5d6f06c34f2e0e5a5a93f5b1e41e35a29b82424c2ac80f36689"}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468)
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

1.089432659s ago: executing program 1 (id=5580):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, &(0x7f0000000540))

1.023478654s ago: executing program 1 (id=5581):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0xc, 0x4, "ea57bb76"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x20, 0x0, 0xb, "2692df50f643b4da3435be"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0x14, 0x4, "07f23d0a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

998.147478ms ago: executing program 8 (id=5582):
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x401, 0x1, 0xffff1896, 0x5, 0xa6, 0x0, 0x6}, 0x9c)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

579.936538ms ago: executing program 8 (id=5588):
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)

468.00504ms ago: executing program 6 (id=5589):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x5, 0x1, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

467.873485ms ago: executing program 8 (id=5590):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680))
syncfs(0xffffffffffffffff)

467.650107ms ago: executing program 6 (id=5591):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000010604000c002b8008000200000001001400030076657468305f766c616e"], 0x4c}}, 0x48000)

405.918654ms ago: executing program 8 (id=5592):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x6, 0xf11, &(0x7f0000001e80)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, 0x0)

351.071168ms ago: executing program 6 (id=5593):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)="48fcfccefd16311b64718ca7fbd1dea984511f2e5a14801efeae343cfda804", 0x1f}, 0x1, 0x0, 0x0, 0x40000}, 0x4800)

261.988893ms ago: executing program 6 (id=5594):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103"], 0xb6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

210.015648ms ago: executing program 8 (id=5595):
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x30000000})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x9})

135.429027ms ago: executing program 6 (id=5596):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

71.391762ms ago: executing program 8 (id=5597):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r0, 0x5, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x581a42, 0x0)
socket$inet6(0xa, 0x80005, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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")
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)

0s ago: executing program 6 (id=5598):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x1004401, &(0x7f00000011c0)={[], [], 0x2f})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

kernel console output (not intermixed with test programs):

BRID)' in warm state.
[  302.955784][T10788] usb 2-1: setting power ON
[  302.966161][T10788] dvb-usb: bulk message failed: -22 (2/0)
[  302.986343][T10788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  302.991037][T10788] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  302.997098][T10788] usb 2-1: media controller created
[  303.021930][T10788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  303.063367][T10788] usb 2-1: selecting invalid altsetting 6
[  303.066715][T10788] usb 2-1: digital interface selection failed (-22)
[  303.069032][T10788] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  303.082191][T10788] usb 2-1: setting power OFF
[  303.088407][T10788] dvb-usb: bulk message failed: -22 (2/0)
[  303.094966][T10788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  303.098701][T10788] (NULL device *): no alternate interface
[  303.244435][T10788] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  303.257499][T10788] usb 2-1: USB disconnect, device number 66
[  304.322587][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  304.394429][T14863] loop7: detected capacity change from 0 to 32768
[  304.438327][T14863] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  304.460636][T14863] XFS (loop7): Ending clean mount
[  304.473425][T11440] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  304.815731][T14912] loop7: detected capacity change from 0 to 128
[  305.861630][T14962] loop2: detected capacity change from 0 to 7
[  305.882282][T14962] Dev loop2: unable to read RDB block 7
[  305.892364][T14962]  loop2: unable to read partition table
[  305.902901][T14962] loop2: partition table beyond EOD, truncated
[  305.905858][T14962] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5)
[  306.333616][   T24] libceph: connect (1)[c::]:6789 error -101
[  306.338204][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  306.617188][   T24] libceph: connect (1)[c::]:6789 error -101
[  306.619813][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  306.676579][T14978] loop7: detected capacity change from 0 to 32768
[  306.686352][T14978] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3684 (14978)
[  306.699561][T14978] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  306.702928][T14978] BTRFS info (device loop7): using crc32c checksum algorithm
[  306.822955][T14967] ceph: No mds server is up or the cluster is laggy
[  306.889527][T14978] BTRFS info (device loop7): enabling ssd optimizations
[  306.893773][T14978] BTRFS info (device loop7): turning on flush-on-commit
[  306.897754][T14978] BTRFS info (device loop7): enabling free space tree
[  306.914452][T14978] BTRFS info (device loop7): enabling auto defrag
[  306.925798][T14978] BTRFS info (device loop7): use lzo compression, level 1
[  306.930006][T14978] BTRFS info (device loop7): max_inline set to 4096
[  307.078395][T14978] BTRFS info (device loop7 state M): max_inline set to 4096
[  307.104759][T11440] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  307.529304][T15020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3696'.
[  307.535752][T15020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3696'.
[  307.538787][T15020] netlink: 'syz.6.3696': attribute type 6 has an invalid length.
[  307.565836][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3697'.
[  307.762680][   T33] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  308.062537][   T33] usb 2-1: Using ep0 maxpacket: 16
[  308.068168][   T33] usb 2-1: unable to get BOS descriptor or descriptor too short
[  308.071407][   T33] usb 2-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=d5.0b
[  308.077523][   T33] usb 2-1: config 9 has an invalid interface number: 129 but max is 0
[  308.080862][   T33] usb 2-1: config 9 has no interface number 0
[  308.083796][   T33] usb 2-1: config 9 interface 129 has no altsetting 0
[  308.089894][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.093599][   T33] usb 2-1: Product: syz
[  308.095477][   T33] usb 2-1: Manufacturer: syz
[  308.097439][   T33] usb 2-1: SerialNumber: syz
[  308.309375][   T33] dvb-usb: found a 'DiBcom TFE8096P reference design' in cold state, will try to load a firmware
[  308.328964][   T33] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  308.331584][   T33] dib0700: firmware download failed at 7 with -8
[  308.336998][   T33] usb 2-1: USB disconnect, device number 67
[  310.517664][T15079] netlink: 'syz.7.3717': attribute type 21 has an invalid length.
[  310.521069][T15079] IPv6: NLM_F_CREATE should be specified when creating new route
[  310.525171][T15079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  310.532420][T15079] IPv6: NLM_F_CREATE should be set when creating new route
[  310.535631][T15079] IPv6: NLM_F_CREATE should be set when creating new route
[  310.538733][T15079] IPv6: NLM_F_CREATE should be set when creating new route
[  310.617686][T15083] loop7: detected capacity change from 0 to 512
[  310.719376][T15093] openvswitch: netlink: IP tunnel dst address not specified
[  311.189663][T15105] loop7: detected capacity change from 0 to 512
[  311.204083][T15105] EXT4-fs: Ignoring removed i_version option
[  311.224572][T15105] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  311.278164][T15105] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  311.288327][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  311.290943][    C0] EXT4-fs (loop7): initial error at time 12235: ext4_mb_generate_buddy:1317
[  311.294159][    C0] EXT4-fs (loop7): last error at time 12235: ext4_mb_generate_buddy:1317
[  311.337470][T15105] Quota error (device loop7): write_blk: dquota write failed
[  311.347278][T15105] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5
[  311.365460][T15105] Quota error (device loop7): write_blk: dquota write failed
[  311.372687][T15105] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  311.383751][T15105] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.3728: Failed to acquire dquot type 1
[  311.392202][T15105] loop7: lost filesystem error report for type 5 error -28
[  311.392667][T15105] EXT4-fs (loop7): 1 truncate cleaned up
[  311.405206][T15105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.446716][T11440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.578972][T15129] CIFS: Attempting to mount //127.0.0.1/share
[  311.595401][T15129] CIFS: VFS: Error connecting to socket. Aborting operation.
[  311.600304][T15129] CIFS: VFS: cifs_mount failed w/return code = -111
[  312.386133][T15145] loop7: detected capacity change from 0 to 512
[  312.397221][T15145] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[  312.447944][T15145] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.3742: Allocating blocks 41-42 which overlap fs metadata
[  312.452430][T15145] loop7: lost filesystem error report for type 5 error -117
[  312.461526][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  312.465905][    C1] EXT4-fs (loop7): initial error at time 12236: ext4_mb_mark_diskspace_used:4222
[  312.468775][    C1] EXT4-fs (loop7): last error at time 12236: ext4_mb_mark_diskspace_used:4222
[  312.472336][T15145] EXT4-fs (loop7): Remounting filesystem read-only
[  312.475986][T15145] Quota error (device loop7): write_blk: dquota write failed
[  312.478325][T15145] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5
[  312.481644][T15145] Quota error (device loop7): write_blk: dquota write failed
[  312.484111][T15145] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  312.487388][T15145] EXT4-fs (loop7): 1 truncate cleaned up
[  312.489952][T15145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  312.733061][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  313.737206][T11440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.755656][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3753'.
[  313.782848][T15177] xt_TPROXY: Can be used only with -p tcp or -p udp
[  313.843014][T15183] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3756'.
[  315.425287][   T34] audit: type=1800 audit(12239.415:258): pid=15234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3779" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  315.495420][T15238] fuse: Bad value for 'fd'
[  315.519999][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3782'.
[  315.527272][T15240] ipvlan2: entered allmulticast mode
[  315.529085][T15240] syz_tun: entered allmulticast mode
[  316.154114][T15251] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  317.414990][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  317.417090][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  317.598754][T15288] program syz.7.3801 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  318.330675][T15329] loop7: detected capacity change from 0 to 32768
[  318.343153][T15329] (syz.7.3818,15329,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  318.354490][T15329] (syz.7.3818,15329,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  318.368162][T15329] JBD2: Ignoring recovery information on journal
[  318.383697][T15331] block nbd1: shutting down sockets
[  318.397844][T15329] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  318.501574][T11440] ocfs2: Unmounting device (7,7) on (node local)
[  318.875215][T15351] binder: Bad value for 'max'
[  319.728623][T15377] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3839'.
[  320.631838][T15402] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3850'.
[  322.100623][   T34] audit: type=1326 audit(12245.676:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15459 comm="syz.1.3872" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fa4d9e0d9 code=0x0
[  322.225163][T15472] bridge_slave_1: entered promiscuous mode
[  323.222095][T15515] netlink: 'syz.1.3897': attribute type 24 has an invalid length.
[  323.224791][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3897'.
[  323.227535][T15515] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  323.746509][T10788] IPVS: starting estimator thread 0...
[  323.813833][T15565] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3920'.
[  323.841212][T15558] IPVS: using max 91 ests per chain, 218400 per kthread
[  324.042770][   T34] audit: type=1326 audit(12503.472:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.6.3931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  324.053766][   T34] audit: type=1326 audit(12503.481:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.6.3931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  324.063023][   T34] audit: type=1326 audit(12503.481:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.6.3931" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  324.084486][   T34] audit: type=1326 audit(12503.481:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.6.3931" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffb5e99de42 code=0x7ffc0000
[  324.098351][   T34] audit: type=1326 audit(12503.481:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.6.3931" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffb5e95e90e code=0x7ffc0000
[  324.112457][   T34] audit: type=1326 audit(12503.481:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.6.3931" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffb5e99df07 code=0x7ffc0000
[  324.123710][   T34] audit: type=1326 audit(12503.481:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.6.3931" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb5e95e90e code=0x7ffc0000
[  324.130704][   T34] audit: type=1326 audit(12503.481:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.6.3931" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffb5e95e90e code=0x7ffc0000
[  324.137457][   T34] audit: type=1326 audit(12503.481:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15587 comm="syz.6.3931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  324.678585][T15615] netlink: 'syz.1.3944': attribute type 21 has an invalid length.
[  324.681128][T15615] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3944'.
[  324.683957][T15615] netlink: 'syz.1.3944': attribute type 5 has an invalid length.
[  324.687407][T15615] netlink: 'syz.1.3944': attribute type 6 has an invalid length.
[  324.689851][T15615] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3944'.
[  326.098805][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  326.112636][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  326.115726][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  326.123188][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  326.125779][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  326.238321][T15662] dummy0 speed is unknown, defaulting to 1000
[  326.241068][T15662] lo speed is unknown, defaulting to 1000
[  326.396608][T15662] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.399080][T15662] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.401421][T15662] bridge_slave_0: entered allmulticast mode
[  326.404011][T15662] bridge_slave_0: entered promiscuous mode
[  326.407745][T15662] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.410340][T15662] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.413008][T15662] bridge_slave_1: entered allmulticast mode
[  326.415886][T15662] bridge_slave_1: entered promiscuous mode
[  326.432124][T15662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  326.439816][T15662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  326.459038][T15662] team0: Port device team_slave_0 added
[  326.462145][T15662] team0: Port device team_slave_1 added
[  326.479377][T15662] batman_adv: batadv0: Adding interface: batadv_slave_0
[  326.481612][T15662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.490610][T15662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.495065][T15662] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.498295][T15662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  326.508061][T15662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  326.540979][T15662] hsr_slave_0: entered promiscuous mode
[  326.543218][T15662] hsr_slave_1: entered promiscuous mode
[  326.545267][T15662] debugfs: 'hsr0' already exists in 'hsr'
[  326.547023][T15662] Cannot create hsr debugfs directory
[  326.684611][T15662] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  326.688776][T15662] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  326.691881][T15662] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  326.695650][T15662] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  326.698409][T15662] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  326.710042][T15662] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  326.712901][T15662] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  326.716835][T15662] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  326.734594][T15662] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.737172][T15662] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.740144][T15662] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.742883][T15662] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.788271][T15662] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.813650][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.816451][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.826110][T15662] 8021q: adding VLAN 0 to HW filter on device team0
[  326.832829][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.835514][ T5951] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.840656][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.843030][ T5951] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.152776][T15662] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.202075][T15662] veth0_vlan: entered promiscuous mode
[  327.210372][T15662] veth1_vlan: entered promiscuous mode
[  327.241687][T15662] veth0_macvtap: entered promiscuous mode
[  327.249437][T15662] veth1_macvtap: entered promiscuous mode
[  327.273942][T15662] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.286080][T15662] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.362598][ T5632] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.367126][ T5632] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.374556][ T5632] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.380589][ T5632] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.497374][ T5951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.500708][ T5951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.521655][ T5951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.524530][ T5951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.359817][ T5605] Bluetooth: hci0: command tx timeout
[  328.868513][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3994'.
[  329.096808][T15774] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  329.438174][T15808] loop7: detected capacity change from 0 to 256
[  329.450361][T15808] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  329.463614][   T34] kauditd_printk_skb: 14 callbacks suppressed
[  329.463765][   T34] audit: type=1800 audit(12508.473:283): pid=15808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4014" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=1048702 res=0 errno=0
[  329.607867][T15816] loop7: detected capacity change from 0 to 1024
[  329.621212][T15816] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  329.634010][T15816] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm syz.7.4018: lblock 0 mapped to illegal pblock 0 (length 1)
[  329.640826][T15816] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  329.644827][T15816] EXT4-fs (loop7): This should not happen!! Data will be lost
[  329.644827][T15816] 
[  330.181977][   T31] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  330.344322][   T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  330.349439][   T31] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  330.354752][   T31] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  330.358446][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.368945][T15827] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  330.384295][   T31] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  330.427703][T15831] dummy0 speed is unknown, defaulting to 1000
[  330.438023][T15831] lo speed is unknown, defaulting to 1000
[  330.538170][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  330.617989][ T5605] Bluetooth: hci0: command tx timeout
[  330.633342][ T5704] usb 2-1: USB disconnect, device number 68
[  331.759115][T15868] fuse: Bad value for 'fd'
[  331.869114][T15878] fuse: Bad value for 'fd'
[  331.968202][T15884] netlink: 'syz.6.4048': attribute type 21 has an invalid length.
[  331.971930][T15884] netlink: 'syz.6.4048': attribute type 1 has an invalid length.
[  331.974572][T15884] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4048'.
[  331.997267][T15886] netlink: 'syz.6.4049': attribute type 4 has an invalid length.
[  332.174488][T15819] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  332.301369][T15920] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode
[  332.304424][T15920] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode
[  332.878912][ T5595] Bluetooth: hci0: command tx timeout
[  332.923055][T11440] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  332.940885][T11440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  333.002699][T15943] kAFS: No cell specified
[  333.283565][T15958] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  334.062371][T15980] loop7: detected capacity change from 0 to 40427
[  334.066916][T15980] F2FS-fs: heap/no_heap options were deprecated
[  334.095342][T15980] F2FS-fs (loop7): build fault injection rate: 19
[  334.099880][T15980] F2FS-fs (loop7): build fault injection type: 0x3bfe8c
[  334.108657][T15980] F2FS-fs (loop7): invalid crc value
[  334.117346][T15980] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  334.155723][T15980] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  334.161266][T15980] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  334.173780][T15980] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  334.189510][T15980] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0
[  334.801906][T11440] F2FS-fs (loop7): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0
[  334.810845][T11440] F2FS-fs (loop7): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  334.844855][T11440] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of write_normal_summaries+0x11f/0x3e0
[  335.033433][T15995] input: syz1 as /devices/virtual/input/input18
[  335.127408][ T5595] Bluetooth: hci0: command tx timeout
[  336.110060][T16010] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  336.547002][T16051] WARNING! power/level is deprecated; use power/control instead
[  336.591466][T16053] v: renamed from veth0_vlan (while UP)
[  336.638484][T16056] netlink: 'syz.1.4122': attribute type 21 has an invalid length.
[  336.641254][T16056] netlink: 'syz.1.4122': attribute type 6 has an invalid length.
[  336.643830][T16056] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4122'.
[  336.784126][T16066] netlink: 'syz.6.4127': attribute type 9 has an invalid length.
[  336.967744][   T31] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  337.127327][   T31] usb 2-1: Using ep0 maxpacket: 8
[  337.135692][   T31] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  337.141718][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.146172][   T31] usb 2-1: config 0 descriptor??
[  337.372786][   T31] usb 2-1: string descriptor 0 read error: -71
[  337.377812][   T31] uvcvideo 2-1:0.0: Found multiple Units with ID 1
[  337.380166][   T31] uvcvideo 2-1:0.0: Found UVC 0.00 device <unnamed> (2833:0201)
[  337.382780][   T31] uvcvideo 2-1:0.0: No valid video chain found.
[  337.386127][   T31] usb 2-1: USB disconnect, device number 69
[  337.463504][ T5595] Bluetooth: hci0: command 0x0c1a tx timeout
[  338.532337][T16107] overlayfs: failed to resolve './file0': -2
[  338.587556][T16111] netlink: 'syz.6.4146': attribute type 23 has an invalid length.
[  338.590093][T16111] netlink: 'syz.6.4146': attribute type 21 has an invalid length.
[  338.594423][T16111] IPv6: NLM_F_CREATE should be specified when creating new route
[  339.042439][T16125] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  339.053793][T16125] cramfs: wrong magic
[  339.560158][T16040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  339.672374][T16129] xt_hashlimit: size too large, truncated to 1048576
[  339.682650][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4155'.
[  339.926488][T16146] raw_sendmsg: syz.6.4161 forgot to set AF_INET. Fix it!
[  340.387504][T16168] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  340.741710][T16183] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  341.276798][T16190] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4180'.
[  341.809639][ T5595] Bluetooth: hci1: command 0x0405 tx timeout
[  343.457187][T10788] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  343.620967][T10788] usb 2-1: Using ep0 maxpacket: 32
[  343.626771][T10788] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  343.630967][T10788] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  343.634002][T10788] usb 2-1: config 0 has no interface number 0
[  343.637912][T10788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.640601][T10788] usb 2-1: Product: syz
[  343.642304][T10788] usb 2-1: Manufacturer: syz
[  343.643832][T10788] usb 2-1: SerialNumber: syz
[  343.646801][T10788] usb 2-1: config 0 descriptor??
[  343.652322][T10788] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  343.781206][T16268] sctp: [Deprecated]: syz.6.4216 (pid 16268) Use of int in maxseg socket option.
[  343.781206][T16268] Use struct sctp_assoc_value instead
[  343.884567][T10788] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  343.905671][T10788] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  344.335334][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  344.335518][ T5704] usb 2-1: USB disconnect, device number 70
[  344.368173][ T5704] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  344.388211][ T5704] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  344.396955][ T5704] quatech2 2-1:0.51: device disconnected
[  344.695394][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  344.705904][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  344.709349][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  344.713092][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  344.725406][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  344.968413][T16288] dummy0 speed is unknown, defaulting to 1000
[  344.975098][T16288] lo speed is unknown, defaulting to 1000
[  345.287739][T10788] kernel write not supported for file /input/event2 (pid: 10788 comm: kworker/1:6)
[  345.315952][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.321393][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.411324][T16321] pi3usb30532 0-0005: Error reading config register -6
[  345.451816][T16321] i2c i2c-0: new_device: Instantiated device pi3usb30532 at 0x05
[  345.455347][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.461754][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.495750][T16288] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.498099][T16288] bridge0: port 1(bridge_slave_0) entered disabled state
[  345.500488][T16288] bridge_slave_0: entered allmulticast mode
[  345.503134][T16288] bridge_slave_0: entered promiscuous mode
[  345.512257][T16288] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.516439][T16288] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.520649][T16288] bridge_slave_1: entered allmulticast mode
[  345.525415][T16288] bridge_slave_1: entered promiscuous mode
[  345.571520][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.574816][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.582207][T16288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.594729][T16288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.612762][T16288] team0: Port device team_slave_0 added
[  345.616329][T16288] team0: Port device team_slave_1 added
[  345.630544][T16288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.633003][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.641679][T16288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.647130][T16288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.650010][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  345.658208][T16288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.695135][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.698367][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.734778][T16288] hsr_slave_0: entered promiscuous mode
[  345.737258][T16288] hsr_slave_1: entered promiscuous mode
[  345.739662][T16288] debugfs: 'hsr0' already exists in 'hsr'
[  345.741749][T16288] Cannot create hsr debugfs directory
[  345.884685][   T12] bridge0: port 1(team0) entered disabled state
[  346.038104][   T12] bond0 (unregistering): Released all slaves
[  346.278350][T16288] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  346.283434][T16288] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  346.306381][T16288] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  346.334598][T16288] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  346.360358][T16288] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  346.384569][T16288] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  346.387422][T16288] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  346.398401][T16288] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  346.481412][ T5342] 8021q: adding VLAN 0 to HW filter on device eth17
[  346.680524][T16288] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.707514][T16288] 8021q: adding VLAN 0 to HW filter on device team0
[  346.725939][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.728272][ T8745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  346.749108][   T12] hsr_slave_0: left promiscuous mode
[  346.754941][   T12] hsr_slave_1: left promiscuous mode
[  346.781450][   T12] veth1_macvtap: left promiscuous mode
[  346.783250][   T12] veth0_macvtap: left promiscuous mode
[  346.785418][   T12] veth1_vlan: left promiscuous mode
[  346.787113][   T12] veth0_vlan: left promiscuous mode
[  346.913710][ T5595] Bluetooth: hci1: command tx timeout
[  347.185813][ T8745] smbdirect: ib_dev[syz2] removed
[  347.191198][ T5342] 8021q: adding VLAN 0 to HW filter on device eth18
[  347.202887][   T31] lo speed is unknown, defaulting to 1000
[  347.205533][T13123] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.207849][T13123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.211695][   T31] infiniband syz2: ib_query_port failed (-19)
[  347.490760][ T5342] 8021q: adding VLAN 0 to HW filter on device eth19
[  347.658800][T16288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.686337][ T5342] 8021q: adding VLAN 0 to HW filter on device eth20
[  347.883031][T16288] veth0_vlan: entered promiscuous mode
[  347.898053][T16288] veth1_vlan: entered promiscuous mode
[  347.929806][T16288] veth0_macvtap: entered promiscuous mode
[  347.938732][T16288] veth1_macvtap: entered promiscuous mode
[  347.963971][T16288] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.971046][T16288] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.005732][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.062942][   T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.077793][   T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.090354][   T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.157473][ T8745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.160811][ T8745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.197756][   T31] IPVS: starting estimator thread 0...
[  348.201415][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.205743][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.302809][T16463] IPVS: using max 93 ests per chain, 223200 per kthread
[  348.341576][T16469] loop8: detected capacity change from 0 to 1024
[  348.488476][T16472] loop8: detected capacity change from 0 to 16
[  348.534720][T16472] erofs (device loop8): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  348.539901][T16472] erofs (device loop8): mounted with root inode @ nid 36.
[  348.623948][T16474] loop8: detected capacity change from 0 to 512
[  348.632845][T16474] EXT4-fs: Ignoring removed oldalloc option
[  348.642826][T16474] EXT4-fs: Ignoring removed nobh option
[  348.687774][T16474] EXT4-fs warning (device loop8): ext4_xattr_inode_get:546: inode #11: comm syz.8.4277: ea_inode file size=7 entry size=6
[  348.693958][T16474] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.4277: iget: bad extra_isize 90 (inode size 256)
[  348.698185][T16474] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  348.699048][T16474] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.4277: error while reading EA inode 11 err=-117
[  348.701987][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  348.701996][    C0] EXT4-fs (loop8): initial error at time 12526: ext4_xattr_inode_iget:441: inode 11
[  348.702009][    C0] EXT4-fs (loop8): last error at time 12526: ext4_xattr_inode_iget:441: inode 11
[  348.715871][T16474] loop8: lost filesystem error report for type 5 error -117
[  348.716650][T16474] EXT4-fs (loop8): 1 orphan inode deleted
[  348.722886][T16474] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.766496][T16288] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  349.047532][T16491] dlm: plock device version mismatch: kernel (1.2.0), user (619199281.1581691892.1258375512)
[  349.168127][ T5595] Bluetooth: hci1: command tx timeout
[  349.997586][T16534] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4305'.
[  350.075354][T16544] xt_hashlimit: size too large, truncated to 1048576
[  350.248193][T16542] loop8: detected capacity change from 0 to 32768
[  350.260832][T16542] jfs_mount: Mount Failure: File System Dirty.
[  350.272452][T16542] Mount JFS Failure: -22
[  350.278365][T16542] jfs_mount failed w/return code = -22
[  351.115007][   T33] IPVS: starting estimator thread 0...
[  351.227399][T16615] IPVS: using max 94 ests per chain, 225600 per kthread
[  351.422322][ T5595] Bluetooth: hci1: command tx timeout
[  351.881585][T16642] loop8: detected capacity change from 0 to 256
[  352.234859][T16653] Bluetooth: MGMT ver 1.23
[  352.522063][   T34] audit: type=1326 audit(12529.751:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16672 comm="syz.6.4368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  352.529645][   T34] audit: type=1326 audit(12529.751:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16672 comm="syz.6.4368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  352.536760][   T34] audit: type=1326 audit(12529.751:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16672 comm="syz.6.4368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  352.543645][   T34] audit: type=1326 audit(12529.751:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16672 comm="syz.6.4368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  352.556437][   T34] audit: type=1326 audit(12529.751:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16672 comm="syz.6.4368" exe="/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  352.563844][   T34] audit: type=1326 audit(12529.751:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16672 comm="syz.6.4368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  352.570473][   T34] audit: type=1326 audit(12529.751:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16672 comm="syz.6.4368" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  352.577634][   T34] audit: type=1326 audit(12529.760:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16672 comm="syz.6.4368" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  352.584423][   T34] audit: type=1326 audit(12529.760:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16672 comm="syz.6.4368" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  352.636083][T11621] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  352.714472][T16682] loop8: detected capacity change from 0 to 1024
[  352.824597][T11621] usb 2-1: unable to get BOS descriptor or descriptor too short
[  352.829327][T11621] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  352.837379][T11621] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  352.843671][T16684] loop8: detected capacity change from 0 to 764
[  352.849536][T11621] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  352.854760][T11621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.863115][T11621] usb 2-1: Product: syz
[  352.867639][T11621] usb 2-1: Manufacturer: syz
[  352.869155][T11621] usb 2-1: SerialNumber: syz
[  352.885040][T11621] usb 2-1: selecting invalid altsetting 1
[  352.890570][T11621] usb 2-1: unit 6 not found!
[  352.997779][T16692] netlink: 'syz.6.4377': attribute type 4 has an invalid length.
[  353.097824][T16700] fuse: fd is not a fuse device
[  353.112652][T11621] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2)
[  353.147741][T11621] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  353.170103][   T33] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  353.180366][T13985] udevd[13985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  353.206900][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4384'.
[  353.341898][   T33] usb 9-1: Using ep0 maxpacket: 16
[  353.342741][T11621] usb 2-1: USB disconnect, device number 71
[  353.344122][   T33] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  353.353529][   T33] usb 9-1: config 0 has no interfaces?
[  353.356065][   T33] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.361918][   T33] usb 9-1: config 0 descriptor??
[  353.583803][   T33] usb 9-1: USB disconnect, device number 2
[  353.676931][ T5595] Bluetooth: hci1: command tx timeout
[  354.164326][   T33] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  354.208833][T16730] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  354.326829][   T33] usb 2-1: Using ep0 maxpacket: 32
[  354.331118][   T33] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  354.335641][   T33] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.339869][   T33] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.343099][   T33] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  354.349119][   T33] usb 2-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  354.352574][   T33] usb 2-1: Product: syz
[  354.353911][   T33] usb 2-1: Manufacturer: syz
[  354.357201][   T33] usb 2-1: SerialNumber: syz
[  354.365059][   T33] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input19
[  354.544848][T11621] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  354.585550][  T988] usb 2-1: USB disconnect, device number 72
[  354.601864][  T988] appletouch 2-1:1.0: input: appletouch disconnected
[  354.718143][T11621] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  354.725484][T11621] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  354.729223][T11621] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  354.736575][T11621] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.739435][T11621] usb 9-1: Product: syz
[  354.740895][T11621] usb 9-1: Manufacturer: syz
[  354.742450][T11621] usb 9-1: SerialNumber: syz
[  354.975592][T11621] usb 9-1: unit 4 not found!
[  354.995966][T11621] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -16
[  355.000952][T11621] usb 9-1: USB disconnect, device number 3
[  355.584158][   T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  355.637801][T16783] loop8: detected capacity change from 0 to 2048
[  355.657371][T16783] NILFS (loop8): ifile inode (checkpoint number=2) corrupted
[  355.663884][T16783] NILFS (loop8): error -5 while loading last checkpoint (checkpoint number=2)
[  355.747066][   T24] usb 2-1: Using ep0 maxpacket: 16
[  355.750000][   T24] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  355.754923][   T24] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.760363][   T24] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  355.768038][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  355.772467][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.777866][   T24] usb 2-1: config 0 descriptor??
[  355.963364][T11621] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  356.125852][T11621] usb 9-1: Using ep0 maxpacket: 32
[  356.129902][T11621] usb 9-1: unable to get BOS descriptor or descriptor too short
[  356.133031][T11621] usb 9-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  356.138018][T11621] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 122, changing to 7
[  356.143400][T11621] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.146049][T11621] usb 9-1: Product: syz
[  356.147986][T11621] usb 9-1: Manufacturer: syz
[  356.150094][T11621] usb 9-1: SerialNumber: syz
[  356.233983][   T24] kye 0003:0458:5015.000C: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  356.238444][   T24] kye 0003:0458:5015.000C: unknown main item tag 0x0
[  356.240620][   T24] kye 0003:0458:5015.000C: unknown main item tag 0x0
[  356.242875][   T24] kye 0003:0458:5015.000C: unknown main item tag 0x0
[  356.246432][   T24] kye 0003:0458:5015.000C: unknown main item tag 0x0
[  356.249216][   T24] kye 0003:0458:5015.000C: unknown main item tag 0x0
[  356.251890][   T24] kye 0003:0458:5015.000C: unknown main item tag 0x0
[  356.254379][   T24] kye 0003:0458:5015.000C: unknown main item tag 0x0
[  356.256812][   T24] kye 0003:0458:5015.000C: unknown main item tag 0x0
[  356.258904][   T24] kye 0003:0458:5015.000C: unknown main item tag 0x0
[  356.260959][   T24] kye 0003:0458:5015.000C: unknown main item tag 0x0
[  356.278408][   T24] kye 0003:0458:5015.000C: hidraw0: USB HID v0.81 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0
[  356.281810][   T24] kye 0003:0458:5015.000C: tablet-enabling feature report not found
[  356.284317][   T24] kye 0003:0458:5015.000C: tablet enabling failed
[  356.383562][T11621] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  356.386328][T11621] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  356.408295][T11621] usb 9-1: USB disconnect, device number 4
[  356.443265][T13985] udevd[13985]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  356.630177][T16814] fuse: fd is not a fuse device
[  356.787596][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4439'.
[  356.963087][T16836] netlink: 'syz.8.4443': attribute type 10 has an invalid length.
[  356.979653][T16836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  356.984706][T16836] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  356.987613][T16838] netlink: 'syz.6.4444': attribute type 15 has an invalid length.
[  357.018528][ T5704] usb 2-1: USB disconnect, device number 73
[  357.140151][T16856] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4454'.
[  357.143164][T16856] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4454'.
[  357.214663][T16860] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4455'.
[  357.275408][T13149] smbdirect: ib_dev[syz0] removed
[  357.277820][ T6652] dummy0 speed is unknown, defaulting to 1000
[  357.279879][ T6652] syz0: Port: 1 Link DOWN
[  357.497640][ T5704] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[  357.558026][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4465'.
[  357.628015][T16869] loop8: detected capacity change from 0 to 131072
[  357.631413][T16869] F2FS-fs (loop8): invalid crc value
[  357.660674][T16869] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  357.669278][ T5704] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  357.672482][T16869] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  357.683682][ T5704] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  357.699269][ T5704] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.706007][ T5704] usb 2-1: config 0 interface 0 has no altsetting 0
[  357.716523][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.723953][ T5704] usb 2-1: config 0 descriptor??
[  358.130968][T16901] loop8: detected capacity change from 0 to 2048
[  358.136273][T16901] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  358.142727][T16901] NILFS (loop8): mounting unchecked fs
[  358.146477][T13985] udevd[13985]: incorrect nilfs2 checksum on /dev/loop8
[  358.151281][T16901] NILFS (loop8): recovery complete
[  358.157089][T16907] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  358.399150][ T5704] hid-led 0003:0FC5:B080.000D: probe with driver hid-led failed with error -71
[  358.409016][ T5704] usb 2-1: USB disconnect, device number 74
[  359.278078][T16924] futex_wake_op: syz.1.4483 tries to shift op by 144; fix this program
[  359.420902][T16936] netlink: 1988 bytes leftover after parsing attributes in process `syz.6.4486'.
[  359.582461][T16950] binder: 16948:16950 ioctl 40046210 0 returned -14
[  359.724731][T16960] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4497'.
[  359.857961][T16976] loop8: detected capacity change from 0 to 128
[  359.879532][T16976] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  359.916273][T16288] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  361.199094][T17021] erspan0: entered promiscuous mode
[  361.225943][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4514'.
[  361.231139][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4514'.
[  361.249017][T17030] netlink: 'syz.1.4516': attribute type 1 has an invalid length.
[  361.456720][T17044] netlink: 'syz.1.4522': attribute type 2 has an invalid length.
[  361.701372][T17063] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  361.708612][T17063] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  362.158171][   T34] audit: type=1326 audit(12538.636:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.8.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ed9e0d9 code=0x7ffc0000
[  362.165639][   T34] audit: type=1326 audit(12538.645:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.8.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ed9e0d9 code=0x7ffc0000
[  362.172306][   T34] audit: type=1326 audit(12538.645:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.8.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ed9e0d9 code=0x7ffc0000
[  362.179984][   T34] audit: type=1326 audit(12538.645:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.8.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f844ed9e0d9 code=0x7ffc0000
[  362.188762][   T34] audit: type=1326 audit(12538.645:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.8.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ed9e0d9 code=0x7ffc0000
[  362.195429][   T34] audit: type=1326 audit(12538.645:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.8.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ed9e0d9 code=0x7ffc0000
[  362.202818][   T34] audit: type=1326 audit(12538.645:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.8.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ed9e0d9 code=0x7ffc0000
[  362.212094][   T34] audit: type=1326 audit(12538.645:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.8.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f844ed9e0d9 code=0x7ffc0000
[  362.218693][   T34] audit: type=1326 audit(12538.645:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.8.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ed9e0d9 code=0x7ffc0000
[  362.225698][   T34] audit: type=1326 audit(12538.645:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17073 comm="syz.8.4534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844ed9e0d9 code=0x7ffc0000
[  362.562114][T17093] sch_tbf: burst 127 is lower than device ip6gre0 mtu (1448) !
[  362.681855][T17091] loop8: detected capacity change from 0 to 32768
[  363.324875][T17112] loop8: detected capacity change from 0 to 131072
[  363.330106][T17112] F2FS-fs (loop8): Invalid log sectorsize (67108873)
[  363.332238][T17112] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  363.335212][T17112] F2FS-fs (loop8): invalid crc value
[  363.367026][T17112] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  363.374672][T17112] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  363.376992][T17112] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  363.852217][T17146] vxcan0: tx address claim with dest, not broadcast
[  363.876183][T17148] loop8: detected capacity change from 0 to 256
[  363.882074][T17148] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  363.893418][T17150] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4568'.
[  363.899084][T17150] tipc: Invalid UDP bearer configuration
[  363.899110][T17150] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  363.906889][ T8745] FAT-fs (loop8): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  363.939898][T11621] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  364.115300][T11621] usb 2-1: unable to get BOS descriptor or descriptor too short
[  364.118314][T11621] usb 2-1: not running at top speed; connect to a high speed hub
[  364.121645][T11621] usb 2-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.00
[  364.127168][T11621] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  364.136764][T11621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.139422][T11621] usb 2-1: Product: syz
[  364.140746][T11621] usb 2-1: Manufacturer: syz
[  364.142448][T11621] usb 2-1: SerialNumber: syz
[  364.211053][  T803] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  364.332670][T17159] netlink: 'syz.6.4572': attribute type 10 has an invalid length.
[  364.335249][T17159] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4572'.
[  364.338049][T17159] veth1_macvtap: entered promiscuous mode
[  364.340002][T17159] veth1_macvtap: entered allmulticast mode
[  364.342983][T17159] bridge0: port 1(veth1_macvtap) entered blocking state
[  364.345390][T17159] bridge0: port 1(veth1_macvtap) entered disabled state
[  364.349483][T17159] bridge0: port 1(veth1_macvtap) entered blocking state
[  364.351856][T17159] bridge0: port 1(veth1_macvtap) entered listening state
[  364.375494][T11621] qmi_wwan 2-1:251.0: probe with driver qmi_wwan failed with error -22
[  364.380046][T11621] usb 2-1: USB disconnect, device number 75
[  364.386884][  T803] usb 9-1: Using ep0 maxpacket: 8
[  364.390490][  T803] usb 9-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice= 0.40
[  364.395621][  T803] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7
[  364.399203][  T803] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  364.405864][  T803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.408530][  T803] usb 9-1: Product: syz
[  364.409837][  T803] usb 9-1: Manufacturer: syz
[  364.417269][  T803] usb 9-1: SerialNumber: syz
[  364.525524][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  364.643819][  T803] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  364.646522][  T803] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2
[  364.651347][  T803] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  364.653761][  T803] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -2
[  364.658026][  T803] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  364.685538][  T803] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -2
[  364.691791][  T803] usb 9-1: USB disconnect, device number 5
[  364.710459][T13985] udevd[13985]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  365.123935][T17198] program syz.1.4591 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  365.158164][T17202] input: syz0 as /devices/virtual/input/input20
[  365.458655][T17229] netlink: 11 bytes leftover after parsing attributes in process `syz.6.4606'.
[  365.706620][ T5704] usb 9-1: new full-speed USB device number 6 using dummy_hcd
[  365.891648][ T5704] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  365.896600][ T5704] usb 9-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4
[  365.900970][ T5704] usb 9-1: config 0 interface 0 has no altsetting 0
[  365.906881][ T5704] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  365.910274][ T5704] usb 9-1: Product: syz
[  365.912046][ T5704] usb 9-1: Manufacturer: syz
[  365.915479][ T5704] usb 9-1: SerialNumber: syz
[  365.920472][ T5704] usb 9-1: config 0 descriptor??
[  365.929675][ T5704] usb 9-1: selecting invalid altsetting 0
[  366.218512][   T33] usb 9-1: USB disconnect, device number 6
[  366.218582][    C0] usb 9-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs
[  366.223601][    C0] dummy_hcd dummy_hcd.8: timer fired with no URBs pending?
[  366.248127][T17260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4620'.
[  366.797861][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4633'.
[  366.803363][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4633'.
[  366.806476][T17287] netlink: 'syz.1.4633': attribute type 18 has an invalid length.
[  367.146346][T17312] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4645'.
[  367.843197][ T5704] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  368.027874][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short
[  368.031135][ T5704] usb 2-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[  368.035833][ T5704] usb 2-1: language id specifier not provided by device, defaulting to English
[  368.048510][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.055520][ T5704] usb 2-1: Product: 䚦>ഩ
[  368.058678][ T5704] usb 2-1: SerialNumber: syz
[  368.301181][ T5704] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  368.316650][ T5704] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  368.440705][T17361] loop8: detected capacity change from 0 to 40427
[  368.448154][T17361] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  368.451290][T17361] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  368.454446][T17361] F2FS-fs (loop8): invalid crc value
[  368.481960][T17361] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  368.493116][T17361] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  368.495554][T17361] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  368.516209][ T5704] usb 2-1: USB disconnect, device number 76
[  368.594345][T13985] udevd[13985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  369.175018][T17384] fuse: fd is not a fuse device
[  369.881513][T17418] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(11)
[  370.185277][T10788] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  370.330140][T10788] usb 9-1: Using ep0 maxpacket: 16
[  370.333799][T10788] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  370.338712][T10788] usb 9-1: config 0 has an invalid interface number: 34 but max is 0
[  370.342135][T10788] usb 9-1: config 0 has no interface number 0
[  370.344726][T10788] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  370.348943][T10788] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  370.354994][T10788] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.358490][T10788] usb 9-1: Product: syz
[  370.360324][T10788] usb 9-1: Manufacturer: syz
[  370.362292][T10788] usb 9-1: SerialNumber: syz
[  370.368687][T10788] usb 9-1: config 0 descriptor??
[  370.377405][T17422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  370.386991][T17422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  370.592420][T17422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  370.596048][T17422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  370.782524][T17453] ip_tables: iptables: counters copy to user failed while replacing table
[  370.793113][T10788] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  371.160382][   T33] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  371.178872][T10788] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  371.185430][T10788] asix 9-1:0.34: probe with driver asix failed with error -71
[  371.191647][T10788] usb 9-1: USB disconnect, device number 7
[  371.307963][   T33] usb 2-1: Using ep0 maxpacket: 16
[  371.310981][   T33] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  371.314931][   T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  371.318843][   T33] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  371.323019][   T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  371.326753][   T33] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  371.331063][   T33] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 224
[  371.341425][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.344420][   T33] usb 2-1: Product: syz
[  371.346193][   T33] usb 2-1: Manufacturer: syz
[  371.349776][   T33] usb 2-1: SerialNumber: syz
[  371.354088][   T33] usb 2-1: config 0 descriptor??
[  371.357196][T17465] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  371.579148][   T33] mcba_usb 2-1:0.0 can0: failed tx_urb -90
[  371.581237][   T33] mcba_usb 2-1:0.0 can0: Failed to send cmd (169)
[  371.583776][   T33] mcba_usb 2-1:0.0 can0: failed tx_urb -90
[  371.585811][   T33] mcba_usb 2-1:0.0 can0: Failed to send cmd (169)
[  371.587866][   T33] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected
[  371.593748][   T33] usb 2-1: USB disconnect, device number 77
[  371.597771][   T33] mcba_usb 2-1:0.0 can0: device disconnected
[  371.748558][T17472] openvswitch: netlink: Actions may not be safe on all matching packets
[  371.827939][T17476] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4713'.
[  372.007826][T17489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4719'.
[  372.187406][T17502] loop8: detected capacity change from 0 to 512
[  372.213542][T17502] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  372.224580][T17502] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.4724: corrupted in-inode xattr: e_value size too large
[  372.233345][T17502] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  372.233971][T17502] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.4724: couldn't read orphan inode 15 (err -117)
[  372.237012][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  372.237021][    C0] EXT4-fs (loop8): initial error at time 12548: ext4_iget_extra_inode:5180: inode 15
[  372.237034][    C0] EXT4-fs (loop8): last error at time 12548: ext4_iget_extra_inode:5180: inode 15
[  372.269589][T17502] loop8: lost filesystem error report for type 5 error -117
[  372.270450][T17502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.285081][   T34] kauditd_printk_skb: 3 callbacks suppressed
[  372.285089][   T34] audit: type=1804 audit(12548.211:306): pid=17516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4730" name="file0" dev="tmpfs" ino=6748 res=1 errno=0
[  372.311658][T16288] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.453915][T17526] sctp_transport_update_pmtu: 48 callbacks suppressed
[  372.453926][T17526] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  372.459592][T17526] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  372.463615][T17526] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  372.467138][T17526] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  372.471755][T17526] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  372.474880][T17526] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  372.478514][T17526] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  372.482147][T17526] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  372.485558][T17526] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  372.489479][T17526] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  372.638851][ T5673] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  372.679110][  T803] usb 2-1: new full-speed USB device number 78 using dummy_hcd
[  372.789939][ T5673] usb 9-1: Using ep0 maxpacket: 16
[  372.795334][ T5673] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  372.802410][ T5673] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  372.808464][ T5673] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.811351][ T5673] usb 9-1: Product: syz
[  372.812700][ T5673] usb 9-1: Manufacturer: syz
[  372.814203][ T5673] usb 9-1: SerialNumber: syz
[  372.817415][ T5673] usb 9-1: config 0 descriptor??
[  372.839466][ T5673] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  372.854518][  T803] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  372.865049][  T803] usb 2-1: config 0 has an invalid interface number: 199 but max is 1
[  372.877078][  T803] usb 2-1: config 0 has no interface number 1
[  372.879741][  T803] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  372.884772][  T803] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  372.893601][  T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  372.896302][  T803] usb 2-1: SerialNumber: syz
[  372.900117][  T803] usb 2-1: config 0 descriptor??
[  373.028760][   T13] usb 9-1: Failed to submit usb control message: -71
[  373.029827][   T33] usb 9-1: USB disconnect, device number 8
[  373.037535][   T13] usb 9-1: unable to send the bmi data to the device: -71
[  373.043578][   T13] usb 9-1: unable to get target info from device
[  373.045889][   T13] usb 9-1: could not get target info (-71)
[  373.048608][   T13] usb 9-1: could not probe fw (-71)
[  373.118578][  T803] uvcvideo 2-1:0.199: Found UVC 0.00 device <unnamed> (0002:0000)
[  373.121472][  T803] uvcvideo 2-1:0.199: No valid video chain found.
[  373.128582][  T803] usb 2-1: USB disconnect, device number 78
[  373.830155][   T34] audit: type=1326 audit(12549.738:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17601 comm="syz.6.4763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  373.844379][   T34] audit: type=1326 audit(12549.738:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17601 comm="syz.6.4763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  373.860619][   T34] audit: type=1326 audit(12549.738:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17601 comm="syz.6.4763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  373.874625][   T34] audit: type=1326 audit(12549.738:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17601 comm="syz.6.4763" exe="/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  373.891035][   T34] audit: type=1326 audit(12549.738:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17601 comm="syz.6.4763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  373.903438][   T34] audit: type=1326 audit(12549.738:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17601 comm="syz.6.4763" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  373.911899][   T34] audit: type=1326 audit(12549.738:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17601 comm="syz.6.4763" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  373.926360][   T34] audit: type=1326 audit(12549.738:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17601 comm="syz.6.4763" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  374.074072][T17632] loop8: detected capacity change from 0 to 512
[  374.081844][T17632] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  374.088710][T17632] EXT4-fs (loop8): Cannot use DAX on a filesystem that may contain inline data
[  374.326792][T17656] input: syz1 as /devices/virtual/input/input21
[  374.452676][   T33] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[  374.605637][   T33] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  374.613319][   T33] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.618152][   T33] usb 9-1: config 0 descriptor??
[  374.624416][   T33] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  375.039559][   T33] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  375.045035][   T33] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  375.253140][ T5673] usb 2-1: new full-speed USB device number 79 using dummy_hcd
[  375.256465][   T33] usb 9-1: USB disconnect, device number 9
[  375.418911][ T5673] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  375.424107][ T5673] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  375.429381][ T5673] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  375.433192][ T5673] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  375.442630][ T5673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.446004][ T5673] usb 2-1: Product: syz
[  375.447833][ T5673] usb 2-1: Manufacturer: syz
[  375.450460][ T5673] usb 2-1: SerialNumber: syz
[  375.679478][ T5673] usb 2-1: 0:2 : does not exist
[  375.704913][ T5673] usb 2-1: USB disconnect, device number 79
[  375.728764][T13985] udevd[13985]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.253090][T17702] loop8: detected capacity change from 0 to 131072
[  376.259910][T17702] F2FS-fs (loop8): Invalid log sectorsize (67108873)
[  376.262126][T17702] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  376.265608][T17702] F2FS-fs (loop8): invalid crc value
[  376.298168][T17702] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  376.308681][T17702] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  376.311358][T17702] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  376.323896][   T34] audit: type=1800 audit(12552.126:315): pid=17702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4812" name="file1" dev="loop8" ino=7 res=0 errno=0
[  376.699745][T17729] loop8: detected capacity change from 0 to 1024
[  376.728392][T17729] hfsplus: invalid length 1280 has been corrected to 255
[  377.013288][T17752] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4831'.
[  377.019690][   T24] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  377.180507][   T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  377.186817][   T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  377.196561][   T24] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  377.199756][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.206107][T17737] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  377.215718][   T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  377.428077][ T5704] usb 9-1: USB disconnect, device number 10
[  378.238754][T17791] loop8: detected capacity change from 0 to 128
[  378.259830][T17791] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  378.278547][T17791] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #2: comm syz.8.4849: No space for directory leaf checksum. Please run e2fsck -D.
[  378.285099][T17791] EXT4-fs error (device loop8): __ext4_find_entry:1626: inode #2: comm syz.8.4849: checksumming directory block 0
[  378.306983][T16288] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  378.605440][   T24] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  378.831139][   T24] usb 9-1: not running at top speed; connect to a high speed hub
[  378.833812][   T24] usb 9-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  378.838526][   T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  378.842143][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.868303][   T24] uvcvideo 9-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  378.870839][   T24] uvcvideo 9-1:1.0: No streaming interface found for terminal 32770.
[  379.088621][   T24] usb 9-1: USB disconnect, device number 11
[  379.727120][T17828] loop8: detected capacity change from 0 to 64
[  380.221485][  T803] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  380.393980][  T803] usb 9-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  380.398103][  T803] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.401698][  T803] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  380.407061][  T803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.412993][  T803] usb 9-1: config 0 descriptor??
[  380.545303][T17852] gfs2: error -5 reading superblock
[  380.643667][    C1] bridge0: port 1(veth1_macvtap) entered learning state
[  381.683469][  T803] input: Retrode SNES Mouse as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0403:97C1.000E/input/input22
[  381.810320][  T803] hid-retrode 0003:0403:97C1.000E: input,hidraw0: USB HID v0.00 Joystick [HID 0403:97c1] on usb-dummy_hcd.8-1/input0
[  382.118291][  T803] usb 9-1: USB disconnect, device number 12
[  382.522200][   T34] audit: type=1326 audit(12557.915:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17879 comm="syz.6.4890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  382.545055][   T34] audit: type=1326 audit(12557.925:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17879 comm="syz.6.4890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  382.566433][   T34] audit: type=1326 audit(12557.925:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17879 comm="syz.6.4890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  382.575448][   T34] audit: type=1326 audit(12557.925:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17879 comm="syz.6.4890" exe="/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  382.590727][   T34] audit: type=1326 audit(12557.925:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17879 comm="syz.6.4890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  382.601977][   T34] audit: type=1326 audit(12557.925:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17879 comm="syz.6.4890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  382.610128][   T34] audit: type=1326 audit(12557.925:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17879 comm="syz.6.4890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  382.616601][   T34] audit: type=1326 audit(12557.925:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17879 comm="syz.6.4890" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  382.625331][   T34] audit: type=1326 audit(12557.925:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17879 comm="syz.6.4890" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ffb5e99e0d9 code=0x7ffc0000
[  382.695817][  T803] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[  382.857519][ T5704] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  382.862748][  T803] usb 9-1: not running at top speed; connect to a high speed hub
[  382.866702][  T803] usb 9-1: New USB device found, idVendor=04da, idProduct=1044, bcdDevice= 0.40
[  382.875179][  T803] usb 9-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  382.880172][  T803] usb 9-1: config 1 interface 0 has no altsetting 0
[  382.885781][  T803] usb 9-1: language id specifier not provided by device, defaulting to English
[  382.892510][  T803] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.896151][  T803] usb 9-1: Product: ⹌連䬥溳ጟ加븱Ⲙ돹姸趷釚軌哨ང蔏鬇㔗脫ਧ銽孵嶲᪹跭䚊Ȯ횪୻곒筧鯘㟵窳좼᪐祸扮賕ꕩ䢒딦Ⴃǝ鳎籿뮤霠ˢ숔걾ᴸ⽪❼
[  382.902290][  T803] usb 9-1: Manufacturer: ж
[  382.904155][  T803] usb 9-1: SerialNumber: syz
[  382.911084][T17872] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  383.020100][ T5704] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  383.025074][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  383.032840][ T5704] usb 2-1: config 0 descriptor??
[  383.041153][ T5704] cp210x 2-1:0.0: cp210x converter detected
[  383.146974][  T803] usbhid 9-1:1.0: can't add hid device: -71
[  383.151522][  T803] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  383.160678][  T803] usb 9-1: USB disconnect, device number 13
[  383.410090][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  383.412773][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  383.699647][ T5704] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  383.706810][ T5704] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  383.748955][ T5704] usb 2-1: cp210x converter now attached to ttyUSB0
[  383.761432][ T5704] usb 2-1: USB disconnect, device number 80
[  383.791022][ T5704] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  383.796543][ T5704] cp210x 2-1:0.0: device disconnected
[  384.047315][T17954] loop8: detected capacity change from 0 to 32768
[  384.154505][T17966] IPv6: addrconf: prefix option has invalid lifetime
[  384.317035][ T5595] Bluetooth: hci0: Malformed Event: 0x2f
[  384.481270][T17977] loop8: detected capacity change from 0 to 256
[  384.930023][ T5704] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  385.091955][ T5704] usb 9-1: Using ep0 maxpacket: 32
[  385.095733][ T5704] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  385.101079][ T5704] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.109005][ T5704] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.112398][ T5704] usb 9-1: Product: syz
[  385.114736][ T5704] usb 9-1: Manufacturer: syz
[  385.116727][ T5704] usb 9-1: SerialNumber: syz
[  385.133310][ T5704] usb 9-1: config 0 descriptor??
[  385.141795][ T5704] cdc_ether 9-1:0.0: missing cdc header descriptor
[  385.149644][ T5704] usb 9-1: unsupported MDLM descriptors
[  385.367647][ T5704] usb 9-1: USB disconnect, device number 14
[  386.491624][T18069] netlink: 'syz.6.4969': attribute type 2 has an invalid length.
[  387.773672][   T33] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  387.936670][   T33] usb 9-1: Using ep0 maxpacket: 8
[  387.943780][   T33] usb 9-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  387.952919][   T33] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  387.960301][   T33] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  387.968919][   T33] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.974232][   T33] usb 9-1: config 0 descriptor??
[  387.992685][   T33] qmi_wwan 9-1:0.0: bogus CDC Union: master=25, slave=0
[  388.006894][   T33] qmi_wwan 9-1:0.0: probe with driver qmi_wwan failed with error -22
[  388.196740][ T5673] usb 9-1: USB disconnect, device number 15
[  389.269343][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5009'.
[  390.771658][  T803] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  390.809021][T18221] syz_tun: entered promiscuous mode
[  390.813308][T18221] macvlan2: entered allmulticast mode
[  390.817064][T18221] syz_tun: left promiscuous mode
[  390.952427][  T803] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  390.961029][  T803] usb 9-1: config 0 has no interfaces?
[  390.963156][  T803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.968744][  T803] usb 9-1: config 0 descriptor??
[  391.193868][ T5673] usb 9-1: USB disconnect, device number 16
[  391.237839][T18249] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5041'.
[  392.758821][T18300] loop8: detected capacity change from 0 to 64
[  392.830127][T18303] loop8: detected capacity change from 0 to 1024
[  392.840575][T18303] hfsplus: bad catalog entry type
[  393.478117][   T24] usb 9-1: new low-speed USB device number 17 using dummy_hcd
[  393.643512][   T24] usb 9-1: unable to get BOS descriptor or descriptor too short
[  393.648365][   T24] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  393.656813][   T24] usb 9-1: config 100 has an invalid interface number: 173 but max is 0
[  393.660534][   T24] usb 9-1: config 100 has no interface number 0
[  393.668164][   T24] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt
[  393.674515][   T24] usb 9-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 1024, setting to 8
[  393.678420][   T24] usb 9-1: config 100 interface 173 has no altsetting 0
[  393.683321][   T24] usb 9-1: string descriptor 0 read error: -22
[  393.685911][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.690634][T18318] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  393.699397][T18318] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  393.707459][   T24] metro_usb 9-1:100.173: Metrologic USB to Serial converter detected
[  393.718523][   T24] usb 9-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  393.929269][   T24] usb 9-1: USB disconnect, device number 17
[  393.952322][   T24] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  393.959978][   T24] metro_usb 9-1:100.173: device disconnected
[  393.987085][T11621] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  394.149480][T11621] usb 2-1: Using ep0 maxpacket: 32
[  394.159904][T11621] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  394.168858][T11621] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  394.171422][T11621] usb 2-1: config 0 has no interface number 0
[  394.174589][T11621] usb 2-1: config 0 interface 12 has no altsetting 0
[  394.178393][T11621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.180789][T11621] usb 2-1: Product: syz
[  394.182549][T11621] usb 2-1: Manufacturer: syz
[  394.184328][T11621] usb 2-1: SerialNumber: syz
[  394.187378][T11621] usb 2-1: config 0 descriptor??
[  394.565680][T18349] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5084'.
[  394.856413][   T24] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  394.892165][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5095'.
[  395.020336][   T24] usb 9-1: unable to get BOS descriptor or descriptor too short
[  395.027830][   T24] usb 9-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=74.fb
[  395.037477][   T24] usb 9-1: config 4 has an invalid interface number: 206 but max is 0
[  395.044325][   T24] usb 9-1: config 4 has no interface number 0
[  395.048036][   T24] usb 9-1: config 4 interface 206 altsetting 244 endpoint 0xA has invalid maxpacket 512, setting to 64
[  395.053238][   T24] usb 9-1: config 4 interface 206 altsetting 244 endpoint 0x5 has invalid wMaxPacketSize 0
[  395.059144][   T24] usb 9-1: config 4 interface 206 has no altsetting 0
[  395.068028][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.080760][   T24] usb 9-1: Product: syz
[  395.082150][   T24] usb 9-1: Manufacturer: syz
[  395.083742][   T24] usb 9-1: SerialNumber: syz
[  395.310098][   T24] ssu100 9-1:4.206: Quatech SSU-100 USB to Serial Driver converter detected
[  395.315192][   T24] ssu100 9-1:4.206: probe with driver ssu100 failed with error -71
[  395.318143][   T24] usbhid 9-1:4.206: couldn't find an input interrupt endpoint
[  395.324761][   T24] usb 9-1: USB disconnect, device number 18
[  395.725668][T11621] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[  395.728334][T11621] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  395.730853][T11621] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  395.733346][T11621] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  395.738295][T11621] usb 2-1: USB disconnect, device number 81
[  396.163917][  T988] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  396.326355][  T988] usb 9-1: Using ep0 maxpacket: 8
[  396.333273][  T988] usb 9-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=29.ac
[  396.338943][  T988] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.346513][  T988] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3
[  396.350526][  T988] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.360638][  T988] usb 9-1: config 0 descriptor??
[  396.367636][  T988] qmi_wwan 9-1:0.0: probe with driver qmi_wwan failed with error -22
[  396.586164][ T5673] usb 9-1: USB disconnect, device number 19
[  396.640341][  T988] usb 2-1: new full-speed USB device number 82 using dummy_hcd
[  396.814652][  T988] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  396.818912][  T988] usb 2-1: config 150 has an invalid interface number: 204 but max is 2
[  396.821552][  T988] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  396.824902][  T988] usb 2-1: config 150 has no interface number 0
[  396.827261][  T988] usb 2-1: config 150 interface 204 has no altsetting 0
[  396.831834][  T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.834580][  T988] usb 2-1: Product: syz
[  396.836363][  T988] usb 2-1: Manufacturer: syz
[  396.837975][  T988] usb 2-1: SerialNumber: syz
[  397.065811][  T988] xr_serial 2-1:150.204: skipping garbage
[  397.067982][  T988] xr_serial 2-1:150.204: xr_serial converter detected
[  397.164837][T18409] loop8: detected capacity change from 0 to 512
[  397.177347][T18409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.194238][T16288] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  397.246885][    C1] bridge0: port 1(veth1_macvtap) entered forwarding state
[  397.250475][    C1] bridge0: topology change detected, propagating
[  397.352589][T18426] fuse: fd is not a fuse device
[  397.474424][   T24] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  397.638594][   T24] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  397.645561][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.649490][   T24] usb 9-1: Product: syz
[  397.651315][   T24] usb 9-1: Manufacturer: syz
[  397.653262][   T24] usb 9-1: SerialNumber: syz
[  397.663731][   T24] usb 9-1: UAS is ignored for this device, using usb-storage instead
[  397.667484][   T24] usb 9-1: UAS is ignored for this device, using usb-storage instead
[  397.671876][   T24] usb-storage 9-1:1.0: USB Mass Storage device detected
[  397.685247][   T24] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  397.688289][   T24] scsi host6: usb-storage 9-1:1.0
[  397.911689][T11621] usb 9-1: USB disconnect, device number 20
[  397.957285][  T988] usb 2-1: xr_serial converter now attached to ttyUSB0
[  398.171074][  T803] usb 2-1: USB disconnect, device number 82
[  398.188843][  T803] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  398.198020][  T803] xr_serial 2-1:150.204: device disconnected
[  398.795751][   T24] usb 9-1: new low-speed USB device number 21 using dummy_hcd
[  398.959427][   T24] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  398.963479][   T24] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  398.967933][   T24] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  398.972674][   T24] usb 9-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  398.980017][   T24] usb 9-1: string descriptor 0 read error: -22
[  398.982910][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.989986][   T24] adutux 9-1:168.0: interrupt endpoints not found
[  399.215708][T11621] usb 9-1: USB disconnect, device number 21
[  399.986174][   T34] audit: type=1326 audit(12574.061:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18502 comm="syz.1.5153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  400.003638][   T34] audit: type=1326 audit(12574.070:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18502 comm="syz.1.5153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  400.012429][   T34] audit: type=1326 audit(12574.070:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18502 comm="syz.1.5153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  400.019113][   T34] audit: type=1326 audit(12574.070:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18502 comm="syz.1.5153" exe="/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  400.035682][   T34] audit: type=1326 audit(12574.070:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18502 comm="syz.1.5153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  400.045582][   T34] audit: type=1326 audit(12574.070:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18502 comm="syz.1.5153" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  400.053416][   T34] audit: type=1326 audit(12574.070:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18502 comm="syz.1.5153" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  400.060158][   T34] audit: type=1326 audit(12574.070:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18502 comm="syz.1.5153" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  402.120881][T11621] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  402.284576][T11621] usb 2-1: Using ep0 maxpacket: 16
[  402.338012][T11621] usb 2-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8
[  402.348902][T11621] usb 2-1: config 0 has an invalid interface number: 213 but max is 1
[  402.352163][T11621] usb 2-1: config 0 has no interface number 1
[  402.354179][T11621] usb 2-1: config 0 interface 0 has no altsetting 0
[  402.365408][T11621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.371826][T11621] usb 2-1: Product: syz
[  402.373167][T11621] usb 2-1: Manufacturer: syz
[  402.375173][T11621] usb 2-1: SerialNumber: syz
[  402.378027][T11621] usb 2-1: config 0 descriptor??
[  402.390435][T11621] usb 2-1: selecting invalid altsetting 0
[  402.394954][T11621] usb 2-1: Could not set interface, error -22
[  402.476997][T18547] loop8: detected capacity change from 0 to 1024
[  402.489564][   T34] audit: type=1800 audit(12576.378:333): pid=18547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5172" name="file1" dev="loop8" ino=20 res=0 errno=0
[  402.508492][T18547] syz.8.5172: attempt to access beyond end of device
[  402.508492][T18547] loop8: rw=8388608, sector=5778, nr_sectors = 2 limit=1024
[  402.593637][T18555] loop8: detected capacity change from 0 to 1024
[  402.603715][T18555] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  402.620688][   T33] usb 2-1: USB disconnect, device number 83
[  402.987497][T11621] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  403.174657][T11621] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  403.182551][T11621] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  403.204143][T11621] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  403.209529][T11621] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  403.213762][T11621] usb 9-1: SerialNumber: syz
[  403.445453][T11621] usb 9-1: 0:2 : does not exist
[  403.470170][T11621] usb 9-1: USB disconnect, device number 22
[  403.486486][T13985] udevd[13985]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  404.946628][T18644] overlayfs: failed to clone upperpath
[  404.980582][  T988] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  405.166716][  T988] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  405.176237][  T988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.181927][  T988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.192405][  T988] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  405.207993][  T988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.212969][  T988] usb 2-1: config 0 descriptor??
[  405.260080][T18652] loop8: detected capacity change from 0 to 8192
[  405.287362][T18652] Dev loop8: RDB in block 1 has bad checksum
[  405.663427][  T988] hid_parser_main: 36 callbacks suppressed
[  405.663439][  T988] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  405.667974][  T988] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  405.670640][  T988] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  405.673169][  T988] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  405.677456][  T988] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  405.679952][  T988] playstation 0003:054C:09CC.000F: unknown main item tag 0x0
[  405.695489][  T988] playstation 0003:054C:09CC.000F: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.1-1/input0
[  405.885094][  T988] playstation 0003:054C:09CC.000F: Failed to retrieve feature with reportID 18: -71
[  405.892126][  T988] playstation 0003:054C:09CC.000F: Failed to retrieve DualShock4 pairing info: -71
[  405.896553][  T988] playstation 0003:054C:09CC.000F: Failed to get MAC address from DualShock4
[  405.900188][  T988] playstation 0003:054C:09CC.000F: Failed to create dualshock4.
[  405.970534][  T988] playstation 0003:054C:09CC.000F: probe with driver playstation failed with error -71
[  406.012168][  T988] usb 2-1: USB disconnect, device number 84
[  406.706578][T18693] fuse: fd is not a fuse device
[  407.025251][T18727] nbd: couldn't find device at index 524288
[  407.805924][T18756] fuse: fd is not a fuse device
[  407.998540][T18776] gadgetfs: bound to dummy_udc driver
[  408.381724][   T34] audit: type=1326 audit(12581.807:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  408.401119][   T34] audit: type=1326 audit(12581.807:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  408.420530][   T34] audit: type=1326 audit(12581.816:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  408.440908][   T34] audit: type=1326 audit(12581.816:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  408.458854][   T34] audit: type=1326 audit(12581.825:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  408.465575][   T34] audit: type=1326 audit(12581.825:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  408.474951][   T34] audit: type=1326 audit(12581.825:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  408.482340][   T34] audit: type=1326 audit(12581.825:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  408.488948][   T34] audit: type=1326 audit(12581.825:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  408.495862][   T34] audit: type=1326 audit(12581.825:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18800 comm="syz.1.5290" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fab8ad9e0d9 code=0x7ffc0000
[  408.717646][   T33] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  408.882025][   T33] usb 9-1: Using ep0 maxpacket: 32
[  408.886748][   T33] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  408.892007][   T33] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  408.897244][   T33] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  408.900045][   T33] usb 9-1: Product: syz
[  408.901974][   T33] usb 9-1: Manufacturer: syz
[  408.905317][   T33] usb 9-1: SerialNumber: syz
[  408.910020][   T33] usb 9-1: config 0 descriptor??
[  408.917396][   T33] hub 9-1:0.0: bad descriptor, ignoring hub
[  408.919306][   T33] hub 9-1:0.0: probe with driver hub failed with error -5
[  408.935479][T11621] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  409.109024][T11621] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  409.112898][T11621] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  409.115659][T11621] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  409.119235][T11621] usb 2-1: config 0 has no interface number 0
[  409.121184][T11621] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  409.124577][T11621] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  409.127516][T11621] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  409.135288][T11621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.141520][T11621] usb 2-1: Product: syz
[  409.142952][T11621] usb 2-1: Manufacturer: syz
[  409.144712][T11621] usb 2-1: SerialNumber: syz
[  409.147730][T11621] usb 2-1: config 0 descriptor??
[  409.248764][  T803] usb 9-1: USB disconnect, device number 23
[  409.808904][T11621] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.117/input/input23
[  410.038410][T11621] usb 2-1: USB disconnect, device number 85
[  410.418482][   T24] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  410.580891][   T24] usb 9-1: Using ep0 maxpacket: 16
[  410.586253][   T24] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  410.593079][   T24] usb 9-1: config 1 has an invalid interface number: 105 but max is 0
[  410.596401][   T24] usb 9-1: config 1 has no interface number 0
[  410.601024][   T24] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  410.604721][   T24] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  410.608555][   T24] usb 9-1: config 1 interface 105 has no altsetting 0
[  410.613335][   T24] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  410.616039][   T24] usb 9-1: Product: syz
[  410.617322][   T24] usb 9-1: Manufacturer: syz
[  410.618831][   T24] usb 9-1: SerialNumber: syz
[  410.622062][T18872] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  410.624981][T18872] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  410.848962][   T24] aqc111 9-1:1.105: probe with driver aqc111 failed with error -71
[  410.864690][   T24] usb 9-1: USB disconnect, device number 24
[  410.894713][  T803] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  411.067965][  T803] usb 2-1: Using ep0 maxpacket: 32
[  411.070308][  T803] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  411.074250][  T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.077773][  T803] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.081423][  T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.088359][  T803] usb 2-1: config 0 descriptor??
[  411.097783][  T803] hub 2-1:0.0: USB hub found
[  411.313586][  T803] hub 2-1:0.0: 1 port detected
[  411.426929][T18914] netlink: 220 bytes leftover after parsing attributes in process `syz.8.5345'.
[  411.739026][T18922] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5348'.
[  411.976882][  T988] hub 2-1:0.0: activate --> -90
[  412.047519][T18928] loop8: detected capacity change from 0 to 32768
[  412.049850][T18937] 9p: Bad value for 'rfdno'
[  412.082027][T18928] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  412.150763][T18928] XFS (loop8): Ending clean mount
[  412.187171][T16288] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  412.415599][  T803] usb 2-1: USB disconnect, device number 86
[  412.681915][   T24] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  412.844549][   T24] usb 9-1: Using ep0 maxpacket: 16
[  412.847183][   T24] usb 9-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  412.850972][   T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  412.856312][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.858924][   T24] usb 9-1: Product: syz
[  412.860257][   T24] usb 9-1: Manufacturer: syz
[  412.861796][   T24] usb 9-1: SerialNumber: syz
[  412.864703][   T24] usb 9-1: config 0 descriptor??
[  412.897772][T18959] macvlan0: entered promiscuous mode
[  412.900122][T18959] netlink: 'syz.6.5362': attribute type 1 has an invalid length.
[  412.902559][T18959] netlink: 'syz.6.5362': attribute type 2 has an invalid length.
[  413.093697][  T803] usb 9-1: USB disconnect, device number 25
[  413.526891][   T24] usb 2-1: new low-speed USB device number 87 using dummy_hcd
[  413.690346][   T24] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  413.698373][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  413.708634][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  413.715760][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.721040][   T24] usb 2-1: config 0 descriptor??
[  413.779523][T18992] loop8: detected capacity change from 0 to 128
[  413.782727][T18992] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  413.788225][T18992] hpfs: filesystem error: improperly stopped
[  413.791002][T18992] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  413.793858][T18992] hpfs: You really don't want any checks? You are crazy...
[  413.796222][T18992] hpfs: Code page index out of array
[  413.799540][T18992] hpfs: code page support is disabled
[  413.801364][T18992] hpfs: hpfs_map_4sectors(): unaligned read
[  413.803496][T18992] hpfs: hpfs_map_4sectors(): unaligned read
[  413.805472][T18992] hpfs: filesystem error: unable to find root dir
[  414.155490][T17529] usb 9-1: new full-speed USB device number 26 using dummy_hcd
[  414.164482][   T24] hid (null): global environment stack underflow
[  414.170955][   T24] aquacomputer_d5next 0003:0C70:F0B6.0010: global environment stack underflow
[  414.174050][   T24] aquacomputer_d5next 0003:0C70:F0B6.0010: item 0 1 1 11 parsing failed
[  414.178326][   T24] aquacomputer_d5next 0003:0C70:F0B6.0010: probe with driver aquacomputer_d5next failed with error -22
[  414.318902][T17529] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  414.322823][T17529] usb 9-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  414.326388][T17529] usb 9-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.330444][T17529] usb 9-1: config 2 interface 0 has no altsetting 0
[  414.332595][T17529] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.386984][  T803] usb 2-1: USB disconnect, device number 87
[  414.778692][T17529] elo 0003:04E7:0009.0011: item fetching failed at offset 4/5
[  414.783146][T17529] elo 0003:04E7:0009.0011: parse failed
[  414.786330][T17529] elo 0003:04E7:0009.0011: probe with driver elo failed with error -22
[  414.998013][T17529] usb 9-1: USB disconnect, device number 26
[  415.192299][T19035] fuse: fd is not a fuse device
[  415.335856][  T803] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  415.498276][  T803] usb 2-1: Using ep0 maxpacket: 32
[  415.501823][  T803] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  415.506643][  T803] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  415.510371][  T803] usb 2-1: config 0 has no interface number 0
[  415.516559][  T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.520118][  T803] usb 2-1: Product: syz
[  415.521883][  T803] usb 2-1: Manufacturer: syz
[  415.523796][  T803] usb 2-1: SerialNumber: syz
[  415.527904][  T803] usb 2-1: config 0 descriptor??
[  415.533135][  T803] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  415.536707][  T803] usb 2-1: selecting invalid altsetting 1
[  415.539033][  T803] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  415.544673][  T803] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  415.549959][  T803] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  415.559675][  T803] usb 2-1: media controller created
[  415.572354][  T803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  415.576172][T19043] Bluetooth: hci0: invalid length 0, exp 2 for type 8
[  415.760035][  T803] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  415.764082][  T803] zl10353_read_register: readreg error (reg=127, ret==-71)
[  415.767402][  T803] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  415.786324][  T803] usb 2-1: USB disconnect, device number 88
[  415.931553][  T988] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  416.037499][T19061] fuse: fd is not a fuse device
[  416.117729][  T988] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  416.121547][  T988] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  416.124964][  T988] usb 9-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  416.131014][  T988] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.133683][  T988] usb 9-1: Product: syz
[  416.135027][  T988] usb 9-1: Manufacturer: syz
[  416.136563][  T988] usb 9-1: SerialNumber: syz
[  416.141629][  T988] usb-storage 9-1:1.0: USB Mass Storage device detected
[  416.146589][  T988] usb-storage 9-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  416.153181][  T988] scsi host6: usb-storage 9-1:1.0
[  416.327775][T19082] <-a
[  416.360001][T17529] usb 9-1: USB disconnect, device number 27
[  417.306574][T19104] vivid-001: disconnect
[  417.315355][T19103] vivid-001: reconnect
[  417.341093][T19106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5430'.
[  417.452360][T19116] loop8: detected capacity change from 0 to 256
[  417.464425][T19116] FAT-fs (loop8): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  417.471671][T19116] FAT-fs (loop8): Filesystem has been set read-only
[  417.748947][T19137] loop8: detected capacity change from 0 to 4096
[  417.789766][T19138] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  418.961436][T19173] netlink: 4256 bytes leftover after parsing attributes in process `syz.1.5460'.
[  418.964601][T19173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5460'.
[  418.967610][T19173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5460'.
[  419.067777][T19181] 9p: Bad value for 'rfdno'
[  419.285039][T17529] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  419.385588][T19203] loop8: detected capacity change from 0 to 64
[  419.453611][T17529] usb 2-1: Using ep0 maxpacket: 16
[  419.456781][T17529] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  419.462077][T17529] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.467012][T17529] usb 2-1: config 0 interface 0 has no altsetting 0
[  419.470259][T17529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.477938][T17529] usb 2-1: config 0 descriptor??
[  419.880188][T19223] input: syz1 as /devices/virtual/input/input24
[  419.924291][T17529] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  419.927327][T17529] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  419.930253][T17529] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  419.935167][T17529] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  419.939667][T17529] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0
[  419.948497][T17529] mcp2221 0003:04D8:00DD.0012: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  419.981837][T19228] loop8: detected capacity change from 0 to 16
[  419.992865][T19228] erofs (device loop8): mounted with root inode @ nid 36.
[  420.019006][T19228] erofs (device loop8): corrupted dir block 0 @ nid 36
[  420.137768][T19175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.141684][T19175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.149645][  T988] usb 2-1: USB disconnect, device number 89
[  420.286553][T19232] loop8: detected capacity change from 0 to 40427
[  420.293447][T19232] F2FS-fs (loop8): Invalid SB checksum offset: 0
[  420.297526][T19232] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock
[  420.302243][T19232] F2FS-fs (loop8): invalid crc value
[  420.335769][T19232] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  420.349302][T19232] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0
[  420.353000][T19232] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  420.366794][   T34] kauditd_printk_skb: 19 callbacks suppressed
[  420.366804][   T34] audit: type=1800 audit(12592.876:363): pid=19232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5489" name="file1" dev="loop8" ino=10 res=0 errno=0
[  420.379324][T16288] syz-executor: attempt to access beyond end of device
[  420.379324][T16288] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  420.387301][T16288] CPU: 1 UID: 0 PID: 16288 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.387316][T16288] Tainted: [L]=SOFTLOCKUP
[  420.387319][T16288] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  420.387324][T16288] Call Trace:
[  420.387327][T16288]  <TASK>
[  420.387331][T16288]  dump_stack_lvl+0xe8/0x150
[  420.387396][T16288]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  420.387435][T16288]  f2fs_write_end_io+0x124b/0x1710
[  420.387451][T16288]  __submit_merged_bio+0x258/0x6a0
[  420.387459][T16288]  ? rcu_is_watching+0x15/0xb0
[  420.387471][T16288]  __submit_merged_write_cond+0x3c9/0x4e0
[  420.387482][T16288]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  420.387498][T16288]  f2fs_write_data_pages+0x2a27/0x36f0
[  420.387519][T16288]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  420.387532][T16288]  ? __css_rstat_updated+0x235/0x540
[  420.387550][T16288]  ? folios_put_refs+0x9f0/0xb30
[  420.387558][T16288]  ? __pfx_hlock_conflict+0x10/0x10
[  420.387567][T16288]  ? __bfs+0x153/0x290
[  420.387574][T16288]  ? __pfx_hlock_conflict+0x10/0x10
[  420.387595][T16288]  ? lockdep_unlock+0x5d/0xd0
[  420.387602][T16288]  ? __lock_acquire+0x13e8/0x2cf0
[  420.387620][T16288]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  420.387629][T16288]  do_writepages+0x338/0x560
[  420.387642][T16288]  ? do_raw_spin_unlock+0x4d/0x210
[  420.387650][T16288]  filemap_fdatawrite+0x1e9/0x2f0
[  420.387661][T16288]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  420.387685][T16288]  ? do_raw_spin_unlock+0x4d/0x210
[  420.387694][T16288]  f2fs_sync_dirty_inodes+0x30e/0x830
[  420.387709][T16288]  f2fs_write_checkpoint+0xa3d/0x2710
[  420.387718][T16288]  ? __lock_acquire+0x683/0x2cf0
[  420.387736][T16288]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  420.387764][T16288]  kill_f2fs_super+0x2f6/0x700
[  420.387775][T16288]  ? __pfx_kill_f2fs_super+0x10/0x10
[  420.387788][T16288]  ? call_rcu+0x64b/0x8b0
[  420.387797][T16288]  ? lockdep_hardirqs_on+0x7a/0x110
[  420.387840][T16288]  deactivate_locked_super+0xbc/0x130
[  420.387852][T16288]  cleanup_mnt+0x3d3/0x460
[  420.387864][T16288]  task_work_run+0x1d9/0x270
[  420.387875][T16288]  ? __pfx_task_work_run+0x10/0x10
[  420.387888][T16288]  exit_to_user_mode_loop+0x1fa/0x730
[  420.387897][T16288]  ? rcu_is_watching+0x15/0xb0
[  420.387907][T16288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.387914][T16288]  do_syscall_64+0x353/0x580
[  420.387923][T16288]  ? trace_irq_disable+0x3b/0x140
[  420.387934][T16288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.387941][T16288] RIP: 0033:0x7f844ed9f317
[  420.387949][T16288] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  420.387955][T16288] RSP: 002b:00007ffff6443898 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  420.387964][T16288] RAX: 0000000000000000 RBX: 00007f844ee34474 RCX: 00007f844ed9f317
[  420.387969][T16288] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff6443950
[  420.387973][T16288] RBP: 00007ffff6443950 R08: 00007ffff6444950 R09: 00000000ffffffff
[  420.387977][T16288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff64449e0
[  420.387982][T16288] R13: 00007f844ee34474 R14: 0000000000064bca R15: 00007ffff6444a20
[  420.387993][T16288]  </TASK>
[  420.387996][T16288] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  420.984928][T19260] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  421.598055][   T24] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  421.760776][   T24] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  421.766600][   T24] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  421.770066][   T24] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253
[  421.776286][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.790279][   T24] usb 9-1: Product: syz
[  421.796109][   T24] usb 9-1: Manufacturer: syz
[  421.797824][   T24] usb 9-1: SerialNumber: syz
[  421.816511][   T24] usb 9-1: config 0 descriptor??
[  421.825656][   T24] gspca_main: sunplus-2.14.0 probing 055f:c630
[  422.585575][ T5666] usb 9-1: USB disconnect, device number 28
[  423.403077][T19307] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  423.741494][ T5666] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  423.904472][ T5666] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  423.911689][ T5666] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.919403][ T5666] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.926273][ T5666] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.934156][ T5666] usb 9-1: config 0 descriptor??
[  424.023434][T17529] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  424.027094][ T5605] Bluetooth: hci1: command 0x0405 tx timeout
[  424.199007][T17529] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00
[  424.207238][T17529] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  424.218147][T17529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  424.221293][T17529] usb 2-1: Product: syz
[  424.223918][T17529] usb 2-1: Manufacturer: syz
[  424.233377][T17529] usb_debug 2-1:1.0: debug converter detected
[  424.240662][T17529] usb 2-1: debug converter now attached to ttyUSB0
[  424.462376][  T803] usb 2-1: USB disconnect, device number 90
[  424.476184][  T803] debug ttyUSB0: debug converter now disconnected from ttyUSB0
[  424.484878][  T803] usb_debug 2-1:1.0: device disconnected
[  424.596709][ T5666] usb 9-1: string descriptor 0 read error: -71
[  424.602829][ T5666] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71
[  424.610514][ T5666] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71
[  424.615662][ T5666] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71
[  424.620975][ T5666] uclogic 0003:256C:006D.0013: failed probing parameters: -71
[  424.624338][ T5666] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71
[  424.634106][ T5666] usb 9-1: USB disconnect, device number 29
[  425.344406][ T5666] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  425.631997][T17529] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  425.713150][ T5666] usb 2-1: Using ep0 maxpacket: 16
[  425.715460][ T5666] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  425.721948][ T5666] usb 2-1: config 1 has an invalid descriptor of length 168, skipping remainder of the config
[  425.726941][ T5666] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  425.732996][ T5666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.736112][ T5666] usb 2-1: Product: syz
[  425.737594][ T5666] usb 2-1: Manufacturer: syz
[  425.739257][ T5666] usb 2-1: SerialNumber: syz
[  425.747593][ T5666] usb 2-1: 0:2 : does not exist
[  425.750173][ T5666] usb 2-1: unit 72 not found!
[  425.799493][T17529] usb 9-1: Using ep0 maxpacket: 32
[  425.802060][T17529] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  425.806490][T17529] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.812834][T17529] usb 9-1: config 0 descriptor??
[  425.970389][ T5666] usb 2-1: USB disconnect, device number 91
[  426.038005][T17529] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  426.041702][T17529] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  426.046141][T17529] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  426.049968][T17529] usb 9-1: media controller created
[  426.064233][T17529] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  426.257980][T17529] az6027: usb out operation failed. (-71)
[  426.262644][T17529] az6027: usb out operation failed. (-71)
[  426.264712][T17529] stb0899_attach: Driver disabled by Kconfig
[  426.267057][T17529] az6027: no front-end attached
[  426.267057][T17529] 
[  426.270052][T17529] az6027: usb out operation failed. (-71)
[  426.271973][T17529] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  426.276580][T17529] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input25
[  426.293608][T17529] dvb-usb: schedule remote query interval to 400 msecs.
[  426.295974][T17529] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  426.302098][T17529] usb 9-1: USB disconnect, device number 30
[  426.334753][T17529] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  426.793698][T19363] fuse: Bad value for 'fd'
[  427.393930][T19401] loop8: detected capacity change from 0 to 1024
[  427.397394][T19401] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled
[  427.412836][T19401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.468641][T16288] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.757355][T19410] loop8: detected capacity change from 0 to 32768
[  428.835821][T19443] loop8: detected capacity change from 0 to 4096
[  428.859765][T19448] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  429.148570][T17529] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  429.395983][T17529] usb 2-1: Using ep0 maxpacket: 32
[  429.400411][T17529] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  429.409754][T17529] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  429.419612][T17529] usb 2-1: config 0 has no interface number 0
[  429.425872][T17529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.434403][T17529] usb 2-1: Product: syz
[  429.437604][T17529] usb 2-1: Manufacturer: syz
[  429.441903][T17529] usb 2-1: SerialNumber: syz
[  429.443967][T19469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5591'.
[  429.450803][T17529] usb 2-1: config 0 descriptor??
[  429.455250][T19469] netlink: 'syz.6.5591': attribute type 2 has an invalid length.
[  429.490664][T19471] loop8: detected capacity change from 0 to 4096
[  429.514686][T19473] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  429.547428][T19471] NILFS error (device loop8): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  429.599030][T19471] Remounting filesystem read-only
[  429.926686][T19482] loop8: detected capacity change from 0 to 32768
[  429.931479][T19482] (syz.8.5597,19482,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  429.937265][T19482] (syz.8.5597,19482,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  429.951041][T19482] JBD2: Ignoring recovery information on journal
[  429.969285][T19482] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  430.198927][T19488] 
[  430.199908][T19488] ======================================================
[  430.202344][T19488] WARNING: possible circular locking dependency detected
[  430.204694][T19488] syzkaller #0 Tainted: G             L     
[  430.207011][T19488] ------------------------------------------------------
[  430.209573][T19488] syz.8.5597/19488 is trying to acquire lock:
[  430.211528][T19488] ffff8881091706e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2fd/0x7e0
[  430.214520][T19488] 
[  430.214520][T19488] but task is already holding lock:
[  430.216860][T19488] ffff888114353ce0 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[  430.220100][T19488] 
[  430.220100][T19488] which lock already depends on the new lock.
[  430.220100][T19488] 
[  430.224213][T19488] 
[  430.224213][T19488] the existing dependency chain (in reverse order) is:
[  430.228090][T19488] 
[  430.228090][T19488] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  430.231451][T19488]        down_read+0x4a/0x330
[  430.233354][T19488]        ocfs2_start_trans+0x3ab/0x700
[  430.235623][T19488]        ocfs2_reserve_suballoc_bits+0x7b7/0x4850
[  430.238218][T19488]        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  430.240838][T19488]        ocfs2_extend_dir+0xd35/0x4b60
[  430.243038][T19488]        ocfs2_prepare_dir_for_insert+0x339a/0x5190
[  430.245434][T19488]        ocfs2_mknod+0xa16/0x2240
[  430.247477][T19488]        ocfs2_mkdir+0x181/0x460
[  430.249518][T19488]        vfs_mkdir+0x406/0x620
[  430.251450][T19488]        filename_mkdirat+0x285/0x510
[  430.253615][T19488]        __se_sys_mkdirat+0x35/0x150
[  430.255565][T19488]        do_syscall_64+0x174/0x580
[  430.257555][T19488]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.259983][T19488] 
[  430.259983][T19488] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  430.262682][T19488]        ocfs2_start_trans+0x2ac/0x700
[  430.264638][T19488]        ocfs2_write_begin_nolock+0x2052/0x41f0
[  430.266670][T19488]        ocfs2_write_begin+0x1ba/0x310
[  430.268349][T19488]        generic_perform_write+0x2d5/0x8f0
[  430.270745][T19488]        ocfs2_file_write_iter+0x1706/0x1f10
[  430.272608][T19488]        vfs_write+0x612/0xba0
[  430.273998][T19488]        ksys_write+0x150/0x270
[  430.275806][T19488]        do_syscall_64+0x174/0x580
[  430.277716][T19488]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.279932][T19488] 
[  430.279932][T19488] -> #1 (&oi->ip_alloc_sem){++++}-{4:4}:
[  430.282442][T19488]        down_write+0x96/0x200
[  430.284058][T19488]        ocfs2_reflink+0x4d2/0x920
[  430.285632][T19488]        ocfs2_vfs_reflink+0x338/0x450
[  430.287311][T19488]        ocfs2_reflink_ioctl+0x3a0/0x450
[  430.289218][T19488]        ocfs2_ioctl+0x5b5/0x7e0
[  430.290812][T19488]        __se_sys_ioctl+0xfc/0x170
[  430.292457][T19488]        do_syscall_64+0x174/0x580
[  430.294095][T19488]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.296166][T19488] 
[  430.296166][T19488] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  430.298754][T19488]        __lock_acquire+0x1520/0x2cf0
[  430.300729][T19488]        lock_acquire+0x106/0x350
[  430.302363][T19488]        down_read+0x4a/0x330
[  430.303905][T19488]        ocfs2_init_acl+0x2fd/0x7e0
[  430.305639][T19488]        ocfs2_mknod+0x166a/0x2240
[  430.307294][T19488]        ocfs2_mkdir+0x181/0x460
[  430.308953][T19488]        vfs_mkdir+0x406/0x620
[  430.310529][T19488]        filename_mkdirat+0x285/0x510
[  430.312298][T19488]        __se_sys_mkdirat+0x35/0x150
[  430.314008][T19488]        do_syscall_64+0x174/0x580
[  430.315672][T19488]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.317731][T19488] 
[  430.317731][T19488] other info that might help us debug this:
[  430.317731][T19488] 
[  430.321256][T19488] Chain exists of:
[  430.321256][T19488]   &oi->ip_xattr_sem --> sb_internal#5 --> &journal->j_trans_barrier
[  430.321256][T19488] 
[  430.325856][T19488]  Possible unsafe locking scenario:
[  430.325856][T19488] 
[  430.328076][T19488]        CPU0                    CPU1
[  430.330007][T19488]        ----                    ----
[  430.331683][T19488]   rlock(&journal->j_trans_barrier);
[  430.333406][T19488]                                lock(sb_internal#5);
[  430.335749][T19488]                                lock(&journal->j_trans_barrier);
[  430.338180][T19488]   rlock(&oi->ip_xattr_sem);
[  430.339745][T19488] 
[  430.339745][T19488]  *** DEADLOCK ***
[  430.339745][T19488] 
[  430.342319][T19488] 8 locks held by syz.8.5597/19488:
[  430.343999][T19488]  #0: ffff88801f604450 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  430.347030][T19488]  #1: ffff8881091709a0 (&type->i_mutex_dir_key#15/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  430.350374][T19488]  #2: ffff88801eca4fa0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x170/0x4850
[  430.354696][T19488]  #3: ffff88801eca5da0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x170/0x4850
[  430.359277][T19488]  #4: ffff88801eca17a0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x11f/0x2680
[  430.363770][T19488]  #5: ffff88801f604640 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0x116a/0x2240
[  430.367078][T19488]  #6: ffff888114353ce0 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[  430.370687][T19488]  #7: ffff88801f600938 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1fc3/0x2210
[  430.373810][T19488] 
[  430.373810][T19488] stack backtrace:
[  430.375706][T19488] CPU: 1 UID: 0 PID: 19488 Comm: syz.8.5597 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  430.375717][T19488] Tainted: [L]=SOFTLOCKUP
[  430.375720][T19488] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  430.375725][T19488] Call Trace:
[  430.375730][T19488]  <TASK>
[  430.375736][T19488]  dump_stack_lvl+0xe8/0x150
[  430.375748][T19488]  print_circular_bug+0x2e1/0x300
[  430.375761][T19488]  check_noncircular+0x12e/0x150
[  430.375774][T19488]  __lock_acquire+0x1520/0x2cf0
[  430.375787][T19488]  ? ocfs2_init_acl+0x2fd/0x7e0
[  430.375796][T19488]  lock_acquire+0x106/0x350
[  430.375805][T19488]  ? ocfs2_init_acl+0x2fd/0x7e0
[  430.375816][T19488]  down_read+0x4a/0x330
[  430.375825][T19488]  ? ocfs2_init_acl+0x2fd/0x7e0
[  430.375832][T19488]  ? jbd2_journal_dirty_metadata+0x8a7/0xea0
[  430.375841][T19488]  ocfs2_init_acl+0x2fd/0x7e0
[  430.375849][T19488]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  430.375856][T19488]  ? dquot_alloc_inode+0x8ba/0xa50
[  430.375865][T19488]  ? __pfx_ocfs2_journal_dirty+0x10/0x10
[  430.375873][T19488]  ? ocfs2_block_signals+0x9a/0xe0
[  430.375880][T19488]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  430.375886][T19488]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  430.375894][T19488]  ocfs2_mknod+0x166a/0x2240
[  430.375900][T19488]  ? __kasan_slab_free+0x5c/0x80
[  430.375911][T19488]  ? __pfx_ocfs2_mknod+0x10/0x10
[  430.375917][T19488]  ? do_raw_spin_unlock+0x4d/0x210
[  430.375924][T19488]  ? _raw_spin_unlock+0x28/0x50
[  430.375930][T19488]  ? ocfs2_inode_lock_full_nested+0xaad/0x1b30
[  430.375940][T19488]  ? kasan_quarantine_put+0xbb/0x1f0
[  430.375948][T19488]  ? __lock_acquire+0x683/0x2cf0
[  430.375956][T19488]  ? do_raw_spin_lock+0x12b/0x2f0
[  430.375964][T19488]  ? do_raw_spin_unlock+0x4d/0x210
[  430.375972][T19488]  ? do_raw_spin_lock+0x12b/0x2f0
[  430.375979][T19488]  ? do_raw_spin_unlock+0x4d/0x210
[  430.375986][T19488]  ? put_pid+0xef/0x130
[  430.375994][T19488]  ? ocfs2_permission+0x116/0x1e0
[  430.376004][T19488]  ? __pfx_ocfs2_permission+0x10/0x10
[  430.376013][T19488]  ocfs2_mkdir+0x181/0x460
[  430.376020][T19488]  ? __pfx_from_kgid+0x10/0x10
[  430.376026][T19488]  ? apparmor_path_mkdir+0x323/0x3d0
[  430.376035][T19488]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  430.376042][T19488]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  430.376049][T19488]  vfs_mkdir+0x406/0x620
[  430.376056][T19488]  filename_mkdirat+0x285/0x510
[  430.376063][T19488]  ? __pfx_filename_mkdirat+0x10/0x10
[  430.376070][T19488]  ? do_getname+0x151/0x250
[  430.376077][T19488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.376084][T19488]  __se_sys_mkdirat+0x35/0x150
[  430.376090][T19488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.376096][T19488]  do_syscall_64+0x174/0x580
[  430.376105][T19488]  ? trace_irq_disable+0x3b/0x140
[  430.376113][T19488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  430.376120][T19488] RIP: 0033:0x7f844ed9e0d9
[  430.376129][T19488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  430.376135][T19488] RSP: 002b:00007f844fbae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  430.376142][T19488] RAX: ffffffffffffffda RBX: 00007f844f026090 RCX: 00007f844ed9e0d9
[  430.376147][T19488] RDX: 0000000000000051 RSI: 0000200000002040 RDI: ffffffffffffff9c
[  430.376152][T19488] RBP: 00007f844ee35024 R08: 0000000000000000 R09: 0000000000000000
[  430.376156][T19488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  430.376160][T19488] R13: 00007f844f026128 R14: 00007f844f026090 R15: 00007ffff6444628
[  430.376167][T19488]  </TASK>
[  430.526122][T16288] ocfs2: Unmounting device (7,8) on (node local)
[  430.931028][T17529] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  430.935925][T17529] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  430.941884][T17529] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  430.946871][T17529] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  430.953661][T17529] usb 2-1: USB disconnect, device number 92
[  433.306060][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
