last executing test programs:

2m38.39600289s ago: executing program 2 (id=363):
fsopen(0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000600)=[0x7], 0x1, 0x0})
close_range(r0, 0xffffffffffffffff, 0x0)

2m38.053070525s ago: executing program 2 (id=365):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0xffffffffffeffffe})
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb0800010000000000080001000200000008000100000000000800010001000000080001"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000fbffffff04000000"], 0x0, 0x97, 0x0, 0x1}, 0x28)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0, 0xfffffffffffffe43}, 0x68)

2m37.740711688s ago: executing program 2 (id=366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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")
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf251b0000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="10002e800c00"], 0x50}, 0x1, 0x0, 0x0, 0x320400d4}, 0x40000)

2m34.673828089s ago: executing program 2 (id=381):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000027c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)

2m32.282276531s ago: executing program 2 (id=400):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@sysvgroups}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r0 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8ffff)
sendfile(r0, r0, 0x0, 0x800000020)

2m28.905673935s ago: executing program 2 (id=417):
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

2m28.404190691s ago: executing program 32 (id=417):
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

3.170594456s ago: executing program 4 (id=1609):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008004)
socket(0x10, 0x803, 0x0)
fsopen(0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12)

2.727377892s ago: executing program 4 (id=1616):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file0\x00', 0x204c90, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x2ab, &(0x7f0000000bc0)="$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")
creat(&(0x7f0000000040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x20)
creat(&(0x7f00000000c0)='./bus\x00', 0x182)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

2.597798934s ago: executing program 3 (id=1619):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x2000, 0x10001, 0x3})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x0, 0x30520cf7f25f0c64, 0x2, 0x0})

2.450880551s ago: executing program 3 (id=1630):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}})

2.36808653s ago: executing program 1 (id=1621):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$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")
open(0x0, 0x8c00, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x0)
truncate(&(0x7f0000000100)='./file2\x00', 0x1ff)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

2.271515542s ago: executing program 0 (id=1622):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x200, 0x70bd2d, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xae, 0xfff, 0xffffffffffffffff, 0x400, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0)

2.225242377s ago: executing program 4 (id=1623):
r0 = socket(0x2, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_virt_wifi\x00', &(0x7f0000000280)=@ethtool_gstrings={0x1b, 0x8, 0x5, "9871a1e76d"}})
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
futex(0xfffffffffffffffc, 0x7, 0x2, 0x0, 0x0, 0x200015)

2.224692805s ago: executing program 3 (id=1624):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x80000)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r2, 0x0, 0x6, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

2.078964035s ago: executing program 0 (id=1625):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x2, @mcast2, 0xe}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

1.899610079s ago: executing program 3 (id=1626):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000003c0)=0x8000, 0x4)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/19, 0x13}, 0x7}], 0x1, 0x40000100, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0)

1.89939176s ago: executing program 4 (id=1627):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

1.85164468s ago: executing program 0 (id=1628):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1)

1.634578901s ago: executing program 3 (id=1629):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000540)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x0)

1.596315077s ago: executing program 5 (id=1631):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(r0, &(0x7f0000001240)=[{}, {0x2, 0x0, 0x2000}], 0x2)
semctl$IPC_RMID(r0, 0x0, 0x0)

1.279396596s ago: executing program 1 (id=1632):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r0, &(0x7f0000000500)='O', 0xfe6a, 0x80, &(0x7f0000000280)={0xa, 0x0, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4)

1.270988747s ago: executing program 3 (id=1633):
r0 = syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2218a5c, &(0x7f0000000100), 0x0, 0x965a, &(0x7f0000012c40)="$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")
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
fdatasync(r1)

1.118126824s ago: executing program 5 (id=1634):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f8020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x2f8}, 0x1, 0x0, 0x0, 0x4855}, 0x48814)

1.02356467s ago: executing program 0 (id=1635):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes256, 0x4, @desc2})

856.358885ms ago: executing program 5 (id=1636):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08092320"], 0xb)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_open_dev$vim2m(0x0, 0xfffffffffffffffb, 0x2)

756.878005ms ago: executing program 1 (id=1637):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noacl}]}, 0xff, 0x50f, &(0x7f0000000140)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=")
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)

595.584516ms ago: executing program 1 (id=1638):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8)
sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c)

595.383457ms ago: executing program 5 (id=1639):
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = socket(0x15, 0x5, 0x0)
connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e)
getsockname(r0, 0x0, &(0x7f0000000100))

579.417795ms ago: executing program 4 (id=1640):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001f00)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080)

528.295316ms ago: executing program 0 (id=1641):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1)

486.101812ms ago: executing program 5 (id=1642):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)

287.603644ms ago: executing program 5 (id=1643):
syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$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")
open(0x0, 0x8c00, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2c42, 0x0)
truncate(&(0x7f0000000100)='./file2\x00', 0x1ff)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

287.392659ms ago: executing program 1 (id=1644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vcan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x5040)

111.019092ms ago: executing program 4 (id=1645):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000500)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)

70.918642ms ago: executing program 0 (id=1646):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, 0x0)

0s ago: executing program 1 (id=1647):
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)

kernel console output (not intermixed with test programs):

op4: detected capacity change from 0 to 4096
[  140.647396][ T6674] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  140.844392][ T6682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.298'.
[  140.879922][ T6674] ntfs3(loop4): ino=19, mi_enum_attr
[  140.879947][ T6674] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  141.168253][ T6674] ntfs3: Cannot use different iocharset when remounting!
[  141.993400][ T1233] hid-generic 00F2:0004:0009.0003: unknown main item tag 0x0
[  141.993444][ T1233] hid-generic 00F2:0004:0009.0003: unknown main item tag 0x0
[  141.993468][ T1233] hid-generic 00F2:0004:0009.0003: unknown main item tag 0x0
[  141.993493][ T1233] hid-generic 00F2:0004:0009.0003: unknown main item tag 0x0
[  141.993517][ T1233] hid-generic 00F2:0004:0009.0003: unknown main item tag 0x0
[  141.993539][ T1233] hid-generic 00F2:0004:0009.0003: unknown main item tag 0x0
[  141.993562][ T1233] hid-generic 00F2:0004:0009.0003: unknown main item tag 0x0
[  141.993586][ T1233] hid-generic 00F2:0004:0009.0003: unknown main item tag 0x0
[  141.993632][ T1233] hid-generic 00F2:0004:0009.0003: unknown main item tag 0x0
[  141.993656][ T1233] hid-generic 00F2:0004:0009.0003: unknown main item tag 0x0
[  142.089783][ T5618] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  142.296199][ T5618] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  142.296225][ T5618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.296242][ T5618] usb 4-1: Product: syz
[  142.296254][ T5618] usb 4-1: Manufacturer: syz
[  142.296265][ T5618] usb 4-1: SerialNumber: syz
[  142.304934][ T6701] loop4: detected capacity change from 0 to 4096
[  142.348311][ T6701] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  142.363441][ T5618] usb 4-1: config 0 descriptor??
[  142.391466][ T1233] hid-generic 00F2:0004:0009.0003: hidraw0: <UNKNOWN> HID v0.04 Device [syz1] on syz0
[  142.616330][ T6702] fido_id[6702]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  143.478158][ T6704] loop0: detected capacity change from 0 to 131072
[  143.488589][ T6704] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  143.488609][ T6704] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  143.590235][   T44] usb 4-1: USB disconnect, device number 7
[  143.599719][ T6704] F2FS-fs (loop0): invalid crc value
[  143.708139][ T6704] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.771786][ T6704] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  143.771814][ T6704] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  143.921104][   T37] audit: type=1800 audit(1777892696.992:12): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.307" name="file1" dev="loop0" ino=7 res=0 errno=0
[  144.360739][ T6718] loop3: detected capacity change from 0 to 1024
[  144.361837][ T6718] EXT4-fs: Ignoring removed bh option
[  144.750809][ T6718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.774428][   T37] audit: type=1800 audit(1777892697.862:13): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.309" name="file1" dev="loop3" ino=15 res=0 errno=0
[  144.992538][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  145.150620][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.150658][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  145.153951][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.153976][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.153993][    T9] usb 5-1: Product: syz
[  145.154005][    T9] usb 5-1: Manufacturer: syz
[  145.154018][    T9] usb 5-1: SerialNumber: syz
[  145.257955][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.467478][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.496300][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.549969][    T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  145.571393][    T9] usb 5-1: USB disconnect, device number 4
[  145.617388][ T6738] netlink: 2 bytes leftover after parsing attributes in process `syz.3.313'.
[  145.617404][ T6738] netlink: 2 bytes leftover after parsing attributes in process `syz.3.313'.
[  145.625897][ T6738] netlink: 2 bytes leftover after parsing attributes in process `syz.3.313'.
[  145.625917][ T6738] netlink: 2 bytes leftover after parsing attributes in process `syz.3.313'.
[  145.726876][ T6735] loop1: detected capacity change from 0 to 4096
[  146.080085][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  146.228550][    T9] usb 5-1: Using ep0 maxpacket: 8
[  146.230549][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 72)
[  146.230572][    T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  146.230615][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  146.230635][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  146.230656][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  146.230677][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.230712][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  146.230732][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.340320][   T44] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  146.504686][    T9] usb 5-1: usb_control_msg returned -71
[  146.504714][    T9] usbtmc 5-1:16.0: can't read capabilities
[  146.518623][   T44] usb 4-1: Using ep0 maxpacket: 32
[  146.531114][   T44] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  146.531135][   T44] usb 4-1: config 0 has no interface number 0
[  146.531175][   T44] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  146.531199][   T44] usb 4-1: config 0 interface 85 has no altsetting 0
[  146.535289][   T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  146.535312][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.535328][   T44] usb 4-1: Product: syz
[  146.535339][   T44] usb 4-1: Manufacturer: syz
[  146.535351][   T44] usb 4-1: SerialNumber: syz
[  146.612655][   T44] usb 4-1: config 0 descriptor??
[  146.668736][    T9] usb 5-1: USB disconnect, device number 5
[  147.068135][   T44] appletouch 4-1:0.85: Geyser mode initialized.
[  147.104668][   T44] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input8
[  147.348352][ T6742] loop3: detected capacity change from 0 to 256
[  147.358945][ T6742] vfat: Unknown parameter '01777777777777777777777'
[  147.380996][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  147.557977][ T6757] loop4: detected capacity change from 0 to 4096
[  147.569317][    T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  147.569341][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.569357][    T9] usb 2-1: Product: syz
[  147.569368][    T9] usb 2-1: Manufacturer: syz
[  147.569380][    T9] usb 2-1: SerialNumber: syz
[  147.612508][ T5626] usb 4-1: USB disconnect, device number 8
[  147.692910][    T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  148.179808][ T5626] appletouch 4-1:0.85: input: appletouch disconnected
[  148.272615][ T1233] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  148.509806][ T6768] loop4: detected capacity change from 0 to 4096
[  149.342922][   T44] usb 2-1: USB disconnect, device number 6
[  149.715661][ T6791] loop3: detected capacity change from 0 to 4096
[  149.993963][ T6791] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  149.993991][ T6791] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  150.120413][ T1233] usb 2-1: Service connection timeout for: 259
[  150.120433][ T1233] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  150.266740][ T6808] loop4: detected capacity change from 0 to 1024
[  150.268923][ T6808] EXT4-fs: Ignoring removed bh option
[  150.283371][ T1233] ath9k_htc: Failed to initialize the device
[  150.293637][   T44] usb 2-1: ath9k_htc: USB layer deinitialized
[  150.414650][ T6808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.458043][   T37] audit: type=1800 audit(1777892703.542:14): pid=6808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.348" name="file1" dev="loop4" ino=15 res=0 errno=0
[  151.187374][ T6828] loop3: detected capacity change from 0 to 32768
[  151.190619][ T6828] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.354 (6828)
[  151.204736][ T6828] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  151.204772][ T6828] BTRFS info (device loop3): using crc32c checksum algorithm
[  151.204799][ T6828] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  151.300731][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.326555][ T6828] BTRFS info (device loop3): rebuilding free space tree
[  151.479622][ T6828] BTRFS info (device loop3): disabling free space tree
[  151.479772][ T6828] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  151.479794][ T6828] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  151.524868][ T6828] BTRFS info (device loop3): enabling ssd optimizations
[  151.524890][ T6828] BTRFS info (device loop3): turning on async discard
[  151.524904][ T6828] BTRFS info (device loop3): enabling disk space caching
[  151.524918][ T6828] BTRFS info (device loop3): force clearing of disk cache
[  151.524932][ T6828] BTRFS info (device loop3): use zstd compression, level 3
[  151.677345][   T37] audit: type=1800 audit(1777892704.762:15): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.354" name="file2" dev="loop3" ino=261 res=0 errno=0
[  151.859594][ T5610] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  153.177297][ T6873] loop3: detected capacity change from 0 to 1024
[  153.193979][ T6873] EXT4-fs: Ignoring removed bh option
[  153.288256][ T6873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.295445][ T6859] loop1: detected capacity change from 0 to 32768
[  153.459229][   T37] audit: type=1800 audit(1777892706.542:16): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.367" name="file1" dev="loop3" ino=15 res=0 errno=0
[  153.773175][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[  153.773214][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[  154.107632][ T6881] netlink: 68 bytes leftover after parsing attributes in process `syz.1.369'.
[  154.207827][ T5610] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.439714][ T6869] loop2: detected capacity change from 0 to 40427
[  154.485594][ T6869] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  154.485617][ T6869] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  154.492050][ T6869] F2FS-fs (loop2): invalid crc value
[  155.008217][ T6869] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.327994][ T6906] loop0: detected capacity change from 0 to 1024
[  155.353152][ T6906] EXT4-fs: Ignoring removed bh option
[  155.374283][ T6869] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  155.374300][ T6869] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  155.478783][ T6906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.478899][ T6906] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.481860][ T6869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.366'.
[  155.542294][ T6906] EXT4-fs (loop0): shut down requested (2)
[  155.752780][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  156.616464][ T6940] netlink: 104 bytes leftover after parsing attributes in process `syz.3.392'.
[  156.725658][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'.
[  156.725676][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'.
[  156.749022][ T5341] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  156.918925][ T5341] usb 1-1: Using ep0 maxpacket: 32
[  156.920911][ T5341] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.920931][ T5341] usb 1-1: config 0 has no interfaces?
[  156.923273][ T5341] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  156.923296][ T5341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.923314][ T5341] usb 1-1: Product: syz
[  156.923327][ T5341] usb 1-1: Manufacturer: syz
[  156.923340][ T5341] usb 1-1: SerialNumber: syz
[  156.975676][ T5341] usb 1-1: config 0 descriptor??
[  157.007262][ T6944] veth3: entered promiscuous mode
[  157.007284][ T6944] veth3: entered allmulticast mode
[  157.319715][ T6949] loop2: detected capacity change from 0 to 512
[  157.324800][ T6949] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  157.352683][ T6949] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.381: bad orphan inode 131083
[  157.352707][ T6949] loop2: lost filesystem error report for type 5 error -117
[  157.358900][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  157.358920][    C0] EXT4-fs (loop2): initial error at time 1777892710: ext4_orphan_get:1423
[  157.358941][    C0] EXT4-fs (loop2): last error at time 1777892710: ext4_orphan_get:1423
[  157.410106][ T6949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.444179][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.459782][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.484093][ T5341] usb 1-1: USB disconnect, device number 5
[  157.802576][   T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  157.955880][   T44] usb 5-1: Using ep0 maxpacket: 16
[  157.957477][   T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.957503][   T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.957522][   T44] usb 5-1: config 0 interface 0 has no altsetting 0
[  157.957545][   T44] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  157.957556][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.973138][   T44] usb 5-1: config 0 descriptor??
[  157.979541][ T6957] loop3: detected capacity change from 0 to 32768
[  158.037697][ T5611] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  158.344150][ T6957] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.415690][ T6973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.403'.
[  158.439187][   T60] Bluetooth: hci3: command tx timeout
[  158.481742][ T6958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.482222][ T6958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.508319][   T44] hid (null): unknown global tag 0xc
[  158.524790][ T6957] XFS (loop3): Ending clean mount
[  158.527208][   T44] hid (null): bogus close delimiter
[  158.528233][   T44] hid (null): global environment stack underflow
[  158.554808][   T37] audit: type=1800 audit(1777892711.642:17): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.398" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  158.697328][   T44] usb 5-1: USB disconnect, device number 6
[  158.777325][ T6976] netlink: 49 bytes leftover after parsing attributes in process `syz.1.404'.
[  158.777342][ T6976] netlink: 140 bytes leftover after parsing attributes in process `syz.1.404'.
[  158.794173][ T5341] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  158.971500][ T5610] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.981945][ T5341] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  158.981988][ T5341] usb 1-1: config 2 interface 0 has no altsetting 0
[  158.984241][ T5341] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  158.984263][ T5341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.984279][ T5341] usb 1-1: Product: syz
[  158.984291][ T5341] usb 1-1: Manufacturer: syz
[  158.984303][ T5341] usb 1-1: SerialNumber: syz
[  159.022386][ T5341] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  159.022409][ T5341] usb 1-1: selecting invalid altsetting 0
[  159.035870][ T5341] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  159.036352][ T5341] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  159.036396][ T5341] usb 1-1: media controller created
[  159.152324][ T5341] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.893120][ T6988] netlink: 'syz.3.406': attribute type 3 has an invalid length.
[  159.893212][ T6988] netlink: 'syz.3.406': attribute type 3 has an invalid length.
[  159.893271][ T6988] netlink: 'syz.3.406': attribute type 3 has an invalid length.
[  159.893327][ T6988] netlink: 'syz.3.406': attribute type 3 has an invalid length.
[  159.893382][ T6988] netlink: 'syz.3.406': attribute type 3 has an invalid length.
[  159.893450][ T6988] netlink: 'syz.3.406': attribute type 3 has an invalid length.
[  159.893505][ T6988] netlink: 'syz.3.406': attribute type 3 has an invalid length.
[  159.893560][ T6988] netlink: 'syz.3.406': attribute type 3 has an invalid length.
[  159.893616][ T6988] netlink: 'syz.3.406': attribute type 3 has an invalid length.
[  159.893671][ T6988] netlink: 'syz.3.406': attribute type 3 has an invalid length.
[  160.100754][ T5341] usb 1-1: USB disconnect, device number 6
[  160.923869][ T7001] sctp: [Deprecated]: syz.0.414 (pid 7001) Use of int in max_burst socket option deprecated.
[  160.923869][ T7001] Use struct sctp_assoc_value instead
[  161.017447][ T5611] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.818115][ T7008] loop3: detected capacity change from 0 to 32768
[  161.824699][ T7008] btrfs: Deprecated parameter 'usebackuproot'
[  161.824717][ T7008] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  161.891320][ T7008] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.416 (7008)
[  162.934751][ T7008] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.934782][ T7008] BTRFS info (device loop3): using crc32c checksum algorithm
[  163.007102][ T7011] loop0: detected capacity change from 0 to 131072
[  163.143504][   T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.157334][ T7011] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.190728][ T7011] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  163.194310][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  163.260879][ T7011] F2FS-fs (loop0): lookup inode (7) has corrupted xattr
[  163.287309][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  163.316055][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  163.338317][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  163.357498][ T5621] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  163.462749][ T7034] __nla_validate_parse: 1 callbacks suppressed
[  163.462765][ T7034] netlink: 48 bytes leftover after parsing attributes in process `syz.4.421'.
[  163.722736][ T7048] loop4: detected capacity change from 0 to 512
[  163.926342][ T7048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.749790][ T7008] BTRFS error (device loop3): open_ctree failed: -4
[  165.359359][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.360715][   T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.479194][ T5621] Bluetooth: hci4: command tx timeout
[  166.227523][   T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.767251][   T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.568767][ T5621] Bluetooth: hci4: command tx timeout
[  167.687482][ T7102] netlink: 64 bytes leftover after parsing attributes in process `syz.3.440'.
[  168.717613][ T7135] loop5: detected capacity change from 0 to 7
[  168.842514][ T7135] Dev loop5: unable to read RDB block 7
[  168.842556][ T7135]  loop5: unable to read partition table
[  168.842760][ T7135] loop5: partition table beyond EOD, truncated
[  168.846740][ T7135] loop_reread_partitions: partition scan of loop5 (x鼦熝鄸 ) failed (rc=-5)
[  169.119506][   T43] bridge_slave_1: left allmulticast mode
[  169.119661][   T43] bridge_slave_1: left promiscuous mode
[  169.182450][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.535454][   T43] bridge_slave_0: left allmulticast mode
[  169.535485][   T43] bridge_slave_0: left promiscuous mode
[  169.535735][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.642722][ T5621] Bluetooth: hci4: command tx timeout
[  170.153782][ T7177] loop4: detected capacity change from 0 to 4096
[  170.832042][ T7190] loop3: detected capacity change from 0 to 1024
[  171.514501][ T7194] loop3: detected capacity change from 0 to 64
[  171.730127][ T5621] Bluetooth: hci4: command tx timeout
[  171.781832][ T7196] loop3: detected capacity change from 0 to 128
[  171.876936][ T7196] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  171.876964][ T7196] hpfs: filesystem error: improperly stopped
[  171.876972][ T7196] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  171.876979][ T7196] hpfs: You really don't want any checks? You are crazy...
[  171.876985][ T7196] hpfs: Code page index out of array
[  171.876989][ T7196] hpfs: code page support is disabled
[  171.889080][ T7196] hpfs: hpfs_map_4sectors(): unaligned read
[  171.889169][ T7196] hpfs: hpfs_map_4sectors(): unaligned read
[  171.889186][ T7196] hpfs: filesystem error: unable to find root dir
[  172.238996][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.379188][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.420924][   T43] bond0 (unregistering): Released all slaves
[  172.487335][ T7203] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.479'.
[  173.107232][ T7020] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.107532][ T7020] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.107774][ T7020] bridge_slave_0: entered allmulticast mode
[  173.149178][ T7020] bridge_slave_0: entered promiscuous mode
[  173.173934][ T7020] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.176860][ T7020] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.177106][ T7020] bridge_slave_1: entered allmulticast mode
[  173.202786][ T7020] bridge_slave_1: entered promiscuous mode
[  173.665831][ T7020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.672046][ T7020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.473341][ T7242] loop4: detected capacity change from 0 to 32768
[  174.474306][ T7242] btrfs: Deprecated parameter 'usebackuproot'
[  174.474324][ T7242] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  174.489460][ T7242] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.493 (7242)
[  174.508592][ T7242] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  174.508620][ T7242] BTRFS info (device loop4): using crc32c checksum algorithm
[  174.648273][  T999] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  174.648388][ T7242] BTRFS error (device loop4): failed to load root extent
[  174.648419][ T7242] BTRFS warning (device loop4): try to load backup roots slot 1
[  174.687085][   T13] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  174.687175][ T7242] BTRFS warning (device loop4): couldn't read tree root
[  174.687192][ T7242] BTRFS warning (device loop4): try to load backup roots slot 2
[  174.717149][ T2182] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  174.765253][ T7242] BTRFS warning (device loop4): couldn't read tree root
[  174.765277][ T7242] BTRFS warning (device loop4): try to load backup roots slot 3
[  174.813547][ T7242] BTRFS info (device loop4): rebuilding free space tree
[  174.874767][ T7242] BTRFS info (device loop4): checking UUID tree
[  174.879859][ T7242] BTRFS info (device loop4): enabling ssd optimizations
[  174.879880][ T7242] BTRFS info (device loop4): turning on async discard
[  174.879895][ T7242] BTRFS info (device loop4): enabling free space tree
[  174.879909][ T7242] BTRFS info (device loop4): force clearing of disk cache
[  174.879923][ T7242] BTRFS info (device loop4): enabling auto defrag
[  174.879937][ T7242] BTRFS info (device loop4): trying to use backup root at mount time
[  174.879953][ T7242] BTRFS info (device loop4): use zstd compression, level 3
[  175.389880][ T7232] loop3: detected capacity change from 0 to 32768
[  175.451185][ T7232] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.490 (7232)
[  176.030210][ T7232] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  176.030240][ T7232] BTRFS info (device loop3): using sha256 checksum algorithm
[  176.215890][ T7020] team0: Port device team_slave_0 added
[  176.336460][ T7020] team0: Port device team_slave_1 added
[  176.572765][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1
[  176.636131][ T7232] BTRFS info (device loop3): enabling ssd optimizations
[  176.636154][ T7232] BTRFS info (device loop3): turning on async discard
[  176.636170][ T7232] BTRFS info (device loop3): enabling free space tree
[  176.893385][ T5607] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.027234][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.027248][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.027269][ T7020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.059224][ T7020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.059238][ T7020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  177.059261][ T7020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.195556][ T5610] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.597483][ T7313] loop0: detected capacity change from 0 to 4096
[  178.616872][ T7313] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  178.940170][ T7320] loop4: detected capacity change from 0 to 4096
[  178.952259][ T7320] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  179.107972][ T7313] ntfs3(loop0): failed to convert "c46c" to maccenteuro
[  179.357919][ T7313] ntfs3(loop0): ino=20, mi_enum_attr
[  179.358012][ T7313] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  179.563495][ T7020] hsr_slave_0: entered promiscuous mode
[  179.573559][ T7324] validate_nla: 44 callbacks suppressed
[  179.573573][ T7324] netlink: 'syz.3.507': attribute type 3 has an invalid length.
[  179.584742][   T37] audit: type=1800 audit(1777892732.672:18): pid=7320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.506" name="file1" dev="loop4" ino=30 res=0 errno=0
[  179.617672][ T7020] hsr_slave_1: entered promiscuous mode
[  179.629107][ T7020] debugfs: 'hsr0' already exists in 'hsr'
[  179.629130][ T7020] Cannot create hsr debugfs directory
[  179.791648][ T7322] ntfs3(loop0): failed to convert "c46c" to maccenteuro
[  180.062017][ T7330] loop3: detected capacity change from 0 to 4096
[  180.111126][   T43] hsr_slave_0: left promiscuous mode
[  180.125034][ T7330] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  180.190909][   T43] hsr_slave_1: left promiscuous mode
[  180.192225][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.192305][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.227148][ T7329] syz.4.510 (7329) used greatest stack depth: 17464 bytes left
[  180.246028][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.248510][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.792773][   T43] veth1_macvtap: left promiscuous mode
[  180.801029][   T43] veth0_macvtap: left promiscuous mode
[  180.801330][   T43] veth1_vlan: left promiscuous mode
[  180.805599][   T43] veth0_vlan: left promiscuous mode
[  181.177875][ T7344] kernel read not supported for file /file1 (pid: 7344 comm: syz.3.515)
[  181.178305][   T37] audit: type=1800 audit(1777892734.262:19): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.515" name="file1" dev="mqueue" ino=13223 res=0 errno=0
[  181.239401][ T5714] page_pool_release_retry() stalled pool shutdown: id 26, 1 inflight 60 sec
[  181.411788][ T5341] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  181.578954][ T5341] usb 5-1: Using ep0 maxpacket: 8
[  181.581126][ T5341] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  181.581154][ T5341] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  181.581174][ T5341] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  181.581189][ T5341] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  181.581211][ T5341] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  181.581221][ T5341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.831055][ T5341] usb 5-1: GET_CAPABILITIES returned 0
[  181.831082][ T5341] usbtmc 5-1:16.0: can't read capabilities
[  182.064891][    C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  182.077160][ T1233] usb 5-1: USB disconnect, device number 7
[  182.104396][   T43] team0 (unregistering): Port device team_slave_1 removed
[  182.159303][   T43] team0 (unregistering): Port device team_slave_0 removed
[  182.391411][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'.
[  182.967385][ T7357] loop3: detected capacity change from 0 to 4096
[  183.872831][ T7389] netlink: 'syz.0.531': attribute type 34 has an invalid length.
[  184.788561][ T1233] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  184.955923][ T1233] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  184.955950][ T1233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.955967][ T1233] usb 1-1: Product: syz
[  184.955980][ T1233] usb 1-1: Manufacturer: syz
[  184.955992][ T1233] usb 1-1: SerialNumber: syz
[  185.018133][ T1233] usb 1-1: config 0 descriptor??
[  185.043095][ T1233] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  185.351354][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2
[  185.745748][ T7020] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  186.079965][ T1233] gspca_sunplus: reg_w_riv err -71
[  186.080049][ T1233] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  186.141688][ T1233] usb 1-1: USB disconnect, device number 7
[  186.164056][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  186.172442][ T7020] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  186.386936][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  186.422531][ T7020] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  186.500155][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  186.513194][ T7020] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  186.582168][ T7020] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  186.999723][ T7440] loop3: detected capacity change from 0 to 128
[  187.062207][ T7437] loop0: detected capacity change from 0 to 32768
[  187.074792][ T7437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.544 (7437)
[  187.100381][ T7437] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.100408][ T7437] BTRFS info (device loop0): using sha256 checksum algorithm
[  187.173102][ T7440] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  187.176068][ T7440] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  187.368081][ T7437] BTRFS info (device loop0): setting nodatasum
[  187.368102][ T7437] BTRFS info (device loop0): enabling ssd optimizations
[  187.368117][ T7437] BTRFS info (device loop0): turning on async discard
[  187.368129][ T7437] BTRFS info (device loop0): enabling free space tree
[  187.428254][   T37] audit: type=1800 audit(1777892740.512:20): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.544" name="file1" dev="loop0" ino=260 res=0 errno=0
[  187.627051][ T5610] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.446294][ T7020] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.554326][ T5609] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  188.972366][ T7020] 8021q: adding VLAN 0 to HW filter on device team0
[  189.113405][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.125955][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.211099][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.211258][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.265539][ T7495] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  189.265785][ T7495] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  189.460669][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3
[  191.194309][ T7531] Set syz1 is full, maxelem 14 reached
[  193.750977][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4
[  194.274206][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  194.274295][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  194.576976][ T7020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.844935][ T7588] netlink: 'syz.0.577': attribute type 8 has an invalid length.
[  194.844954][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'.
[  194.913842][ T7588] veth1_to_team: entered promiscuous mode
[  194.916070][ T7588] gretap0: entered promiscuous mode
[  194.932028][ T7588] hsr1: entered promiscuous mode
[  194.974875][ T7591] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  195.527479][   T32] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  195.545230][ T7020] veth0_vlan: entered promiscuous mode
[  195.633206][ T7020] veth1_vlan: entered promiscuous mode
[  195.679134][   T32] usb 5-1: Using ep0 maxpacket: 16
[  195.681258][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.681284][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.681304][   T32] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  195.681340][   T32] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  195.681360][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.762259][   T32] usb 5-1: config 0 descriptor??
[  195.854840][ T7020] veth0_macvtap: entered promiscuous mode
[  195.900176][ T7020] veth1_macvtap: entered promiscuous mode
[  196.097235][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.277896][ T7020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.278657][ T5625] Bluetooth: hci0: command 0x0406 tx timeout
[  196.288550][ T5621] Bluetooth: hci1: command 0x0406 tx timeout
[  196.319020][ T5614] Bluetooth: hci2: command 0x0406 tx timeout
[  196.686116][   T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.736255][   T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.924802][   T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.253713][   T32] usbhid 5-1:0.0: can't add hid device: -71
[  197.253822][   T32] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  197.257392][   T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.468176][   T32] usb 5-1: USB disconnect, device number 8
[  198.792353][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.792370][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.148330][ T7649] loop0: detected capacity change from 0 to 131072
[  200.180741][ T7649] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  200.348926][ T7649] XFS (loop0): Starting recovery (logdev: internal)
[  200.502561][ T7670] loop4: detected capacity change from 0 to 512
[  200.535372][ T7649] XFS (loop0): Ending recovery (logdev: internal)
[  200.566446][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.566465][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.046018][ T5609] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  201.211381][  T822] kernel read not supported for file /vcs (pid: 822 comm: kworker/1:2)
[  201.375159][ T7684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  201.475813][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[  202.518334][ T7707] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  203.042464][ T7717] loop4: detected capacity change from 0 to 1024
[  203.810437][ T7735] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.883078][ T7735] bridge0: port 1(bridge_slave_0) entered disabled state
[  204.175585][ T7751] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  204.344307][ T7758] loop4: detected capacity change from 0 to 256
[  204.529546][ T7760] loop0: detected capacity change from 0 to 256
[  204.991011][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'.
[  205.075579][ T7771] loop5: detected capacity change from 0 to 256
[  205.750192][ T7789] netlink: 60 bytes leftover after parsing attributes in process `syz.0.649'.
[  205.829648][   T37] audit: type=1800 audit(1777892758.922:21): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.646" name="file1" dev="loop5" ino=1048612 res=0 errno=0
[  206.014381][ T7794] tipc: Started in network mode
[  206.014407][ T7794] tipc: Node identity 7f000001, cluster identity 4711
[  206.016677][ T7794] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  206.276145][ T7808] team0: Device gtp0 is up. Set it down before adding it as a team port
[  206.392025][ T7814] loop0: detected capacity change from 0 to 1024
[  206.436921][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'.
[  206.436953][ T7817] netlink: 'syz.1.659': attribute type 21 has an invalid length.
[  206.580887][ T7823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  206.580902][ T7823] IPv6: NLM_F_CREATE should be set when creating new route
[  206.581050][ T7823] IPv6: NLM_F_CREATE should be set when creating new route
[  207.142129][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  207.291737][    T9] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.291768][    T9] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.291787][    T9] usb 1-1: config 1 interface 0 has no altsetting 0
[  207.294890][    T9] usb 1-1: string descriptor 0 read error: -22
[  207.295163][    T9] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40
[  207.295185][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.818976][    T9] hid (null): global environment stack underflow
[  207.818996][    T9] hid (null): invalid report_size 9990
[  207.819083][    T9] hid (null): unknown global tag 0x28
[  207.819144][    T9] hid (null): invalid report_size 1270816133
[  207.819159][    T9] hid (null): unknown global tag 0xc
[  207.819171][    T9] hid (null): unknown global tag 0xd
[  207.819184][    T9] hid (null): unknown global tag 0xe
[  207.819219][    T9] hid (null): unknown global tag 0x62
[  207.819232][    T9] hid (null): invalid report_size 25076
[  207.819257][    T9] hid (null): unknown global tag 0xd
[  207.819351][    T9] hid (null): unknown global tag 0xd
[  207.819363][    T9] hid (null): unknown global tag 0xc
[  207.819374][    T9] hid (null): unknown global tag 0xe
[  207.819411][    T9] hid (null): unknown global tag 0xc
[  207.819498][    T9] hid (null): unknown global tag 0xc
[  207.819532][    T9] hid (null): unknown global tag 0xd
[  207.820489][    T9] hid (null): unknown global tag 0xd
[  207.820810][    T9] hid (null): invalid report_size 8254
[  207.820834][    T9] hid (null): unknown global tag 0xc
[  207.820858][    T9] hid (null): unknown global tag 0xc
[  207.820955][    T9] hid (null): report_id 1674 is invalid
[  207.820992][    T9] hid (null): unknown global tag 0xd
[  207.821076][    T9] hid (null): invalid report_size 6264
[  207.821099][    T9] hid (null): unknown global tag 0xe
[  207.821111][    T9] hid (null): unknown global tag 0xe
[  207.821140][    T9] hid (null): unknown global tag 0xfc
[  207.821152][    T9] hid (null): unknown global tag 0xc
[  207.821176][    T9] hid (null): unknown global tag 0xd
[  207.821201][    T9] hid (null): invalid report_size 56063
[  207.827416][    T9] hid_parser_main: 17 callbacks suppressed
[  207.827434][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  207.827467][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  207.827494][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  207.827520][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  207.827570][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  207.827595][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  207.827620][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  207.827646][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  207.827672][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  207.827698][    T9] glorious 0003:258A:0033.0005: unknown main item tag 0x0
[  208.042713][    T9] glorious 0003:258A:0033.0005: unexpected long global item
[  208.075340][    T9] glorious 0003:258A:0033.0005: probe with driver glorious failed with error -22
[  208.100926][    T9] usb 1-1: USB disconnect, device number 8
[  209.016345][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'.
[  209.292625][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'.
[  209.583612][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'.
[  209.583818][ T7886] xfrm0: entered promiscuous mode
[  209.583837][ T7886] xfrm0: entered allmulticast mode
[  209.624102][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'.
[  209.747162][ T7883] input: syz1 as /devices/virtual/input/input9
[  210.378926][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.684'.
[  211.179700][ T5741] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  211.341342][ T5741] usb 2-1: Using ep0 maxpacket: 32
[  211.359320][ T5741] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  211.359350][ T5741] usb 2-1: config 0 interface 0 has no altsetting 0
[  211.359380][ T5741] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  211.359400][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.375583][ T7942] loop5: detected capacity change from 0 to 7
[  211.423358][ T7942] Dev loop5: unable to read RDB block 7
[  211.423386][ T7942]  loop5: unable to read partition table
[  211.423500][ T7942] loop5: partition table beyond EOD, truncated
[  211.423509][ T7942] loop_reread_partitions: partition scan of loop5 (x鼦熝鄸 ) failed (rc=-5)
[  211.430217][ T5741] usb 2-1: config 0 descriptor??
[  212.230754][ T5741] corsair-psu 0003:1B1C:1C09.0006: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0
[  212.542943][ T7966] loop5: detected capacity change from 0 to 32768
[  212.546701][ T7966] btrfs: Deprecated parameter 'usebackuproot'
[  212.546719][ T7966] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  212.582400][ T7966] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.703 (7966)
[  212.622217][ T7966] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.622245][ T7966] BTRFS info (device loop5): using crc32c checksum algorithm
[  212.678954][ T5741] corsair-psu 0003:1B1C:1C09.0006: unable to initialize device (-71)
[  212.807551][  T999] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  212.807661][ T7966] BTRFS error (device loop5): failed to load root extent
[  212.807698][ T7966] BTRFS warning (device loop5): try to load backup roots slot 1
[  212.832461][   T43] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  212.839551][ T7966] BTRFS warning (device loop5): couldn't read tree root
[  212.839579][ T7966] BTRFS warning (device loop5): try to load backup roots slot 2
[  212.878078][ T3860] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  212.878208][ T7966] BTRFS warning (device loop5): couldn't read tree root
[  212.878226][ T7966] BTRFS warning (device loop5): try to load backup roots slot 3
[  212.891013][ T7966] BTRFS info (device loop5): rebuilding free space tree
[  212.956546][ T5741] corsair-psu 0003:1B1C:1C09.0006: probe with driver corsair-psu failed with error -71
[  212.973231][ T5741] usb 2-1: USB disconnect, device number 7
[  213.044665][ T7966] BTRFS info (device loop5): checking UUID tree
[  213.048248][ T7966] BTRFS info (device loop5): enabling ssd optimizations
[  213.048267][ T7966] BTRFS info (device loop5): turning on async discard
[  213.048281][ T7966] BTRFS info (device loop5): enabling free space tree
[  213.048294][ T7966] BTRFS info (device loop5): force clearing of disk cache
[  213.048309][ T7966] BTRFS info (device loop5): enabling auto defrag
[  213.048323][ T7966] BTRFS info (device loop5): trying to use backup root at mount time
[  213.048337][ T7966] BTRFS info (device loop5): use lzo compression, level 1
[  213.119600][ T1233] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  213.270398][ T1233] usb 1-1: Using ep0 maxpacket: 16
[  213.273424][ T1233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.273451][ T1233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.273470][ T1233] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  213.273505][ T1233] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  213.273524][ T1233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.293022][ T1233] usb 1-1: config 0 descriptor??
[  213.514284][ T7999] sctp: [Deprecated]: syz.3.711 (pid 7999) Use of struct sctp_assoc_value in delayed_ack socket option.
[  213.514284][ T7999] Use struct sctp_sack_info instead
[  213.783310][ T1233] hid_parser_main: 246 callbacks suppressed
[  213.783334][ T1233] microsoft 0003:045E:07DA.0007: unknown main item tag 0x2
[  213.783658][ T1233] microsoft 0003:045E:07DA.0007: unknown main item tag 0x3
[  213.783685][ T1233] microsoft 0003:045E:07DA.0007: unknown main item tag 0x3
[  213.783710][ T1233] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  213.783735][ T1233] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  213.783761][ T1233] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  213.783785][ T1233] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  213.783811][ T1233] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[  213.886462][ T5618] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  214.043839][ T5618] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  214.043865][ T5618] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  214.043882][ T5618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  214.043926][ T5618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  214.043950][ T5618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  214.045654][ T5618] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  214.045678][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  214.045696][ T5618] usb 2-1: Product: syz
[  214.045709][ T5618] usb 2-1: Manufacturer: syz
[  214.078083][ T7020] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  214.154079][ T1233] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  214.154099][ T1233] microsoft 0003:045E:07DA.0007: no inputs found
[  214.154106][ T1233] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway
[  214.220728][ T5618] cdc_wdm 2-1:1.0: skipping garbage
[  214.220746][ T5618] cdc_wdm 2-1:1.0: skipping garbage
[  214.271480][ T1233] usb 1-1: USB disconnect, device number 9
[  214.332235][ T5618] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  214.332264][ T5618] cdc_wdm 2-1:1.0: Unknown control protocol
[  214.795968][    C1] cdc_wdm 2-1:1.0: Unexpected error -71
[  214.797073][ T5618] usb 2-1: USB disconnect, device number 8
[  214.803758][    C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  214.803915][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  214.803933][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  215.102610][ T8017] loop0: detected capacity change from 0 to 4096
[  215.123333][ T8017] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  215.304954][ T8017] ntfs3(loop0): ino=19, mi_enum_attr
[  215.504511][ T8023] loop4: detected capacity change from 0 to 64
[  215.783935][ T8031] netlink: 'syz.0.721': attribute type 4 has an invalid length.
[  215.797763][ T5741] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  216.020061][ T5741] usb 2-1: Using ep0 maxpacket: 8
[  216.021972][ T5741] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  216.021996][ T5741] usb 2-1: config 0 has no interface number 0
[  216.022032][ T5741] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  216.022053][ T5741] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  216.022076][ T5741] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  216.022101][ T5741] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  216.022134][ T5741] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  216.022155][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.129032][ T5741] usb 2-1: config 0 descriptor??
[  216.155247][ T5741] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  216.279176][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.727'.
[  216.468324][ T8047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.729'.
[  216.493728][ T8025] ldusb 2-1:0.55: Write buffer overflow, 704 bytes dropped
[  216.561809][ T5618] usb 2-1: USB disconnect, device number 9
[  216.645407][ T8054] loop5: detected capacity change from 0 to 7
[  216.667867][ T5618] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  216.672392][ T8054] Dev loop5: unable to read RDB block 7
[  216.672432][ T8054]  loop5: unable to read partition table
[  216.672619][ T8054] loop5: partition table beyond EOD, truncated
[  216.672647][ T8054] loop_reread_partitions: partition scan of loop5 (x鼦熝鄸 ) failed (rc=-5)
[  216.731639][ T4975] Dev loop5: unable to read RDB block 7
[  216.731680][ T4975]  loop5: unable to read partition table
[  216.731898][ T4975] loop5: partition table beyond EOD, truncated
[  217.631013][ T8089] netlink: 9 bytes leftover after parsing attributes in process `syz.4.747'.
[  217.671433][ T8089] gretap0: entered promiscuous mode
[  217.709534][ T8092] netlink: 5 bytes leftover after parsing attributes in process `syz.4.747'.
[  217.892634][ T8092] 0{X功: renamed from gretap0
[  217.934269][ T8092] 0{X功: left promiscuous mode
[  217.934291][ T8092] 0{X功: entered allmulticast mode
[  217.956256][ T8092] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  218.228922][ T1233] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  218.330372][ T8119] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  218.434969][ T8119] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  218.461247][ T1233] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  218.461273][ T1233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.461290][ T1233] usb 6-1: Product: syz
[  218.461301][ T1233] usb 6-1: Manufacturer: syz
[  218.461313][ T1233] usb 6-1: SerialNumber: syz
[  218.470164][ T1233] usb 6-1: config 0 descriptor??
[  218.529166][ T1233] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  218.917694][ T8133] loop4: detected capacity change from 0 to 1024
[  219.014363][ T8133] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.163292][ T1233] gspca_sunplus: reg_w_riv err -71
[  219.163348][ T1233] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  219.168061][ T1233] usb 6-1: USB disconnect, device number 2
[  219.195173][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.343881][ T8140] loop0: detected capacity change from 0 to 2048
[  219.477241][ T8140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.617791][ T8152] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  219.731021][ T8140] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  219.787662][ T8149] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  219.954483][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.117502][ T5741] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  220.236930][ T5741] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  220.525790][ T8179] 9p: Bad value for 'rfdno'
[  220.752205][ T8183] loop0: detected capacity change from 0 to 4096
[  221.974066][ T8215] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  222.441688][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'.
[  222.441901][ T8226] xfrm0: entered promiscuous mode
[  222.441920][ T8226] xfrm0: entered allmulticast mode
[  222.487372][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'.
[  222.536426][ T8206] loop4: detected capacity change from 0 to 32768
[  222.911876][ T8221] loop5: detected capacity change from 0 to 32768
[  223.056117][ T8221] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  223.266986][ T8221] XFS (loop5): Ending clean mount
[  223.772912][ T8264] loop4: detected capacity change from 0 to 16
[  223.786969][ T8264] erofs (device loop4): mounted with root inode @ nid 36.
[  223.817840][   T37] audit: type=1800 audit(1777892776.902:22): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.811" name="file1" dev="loop4" ino=86 res=0 errno=0
[  224.027422][ T7020] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  224.073722][ T8275] overlayfs: failed to clone lowerpath
[  224.141075][ T8277] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  225.285175][ T8313] netlink: 'syz.4.841': attribute type 34 has an invalid length.
[  225.290268][ T8312] loop5: detected capacity change from 0 to 1024
[  225.293576][ T8312] EXT4-fs: Ignoring removed bh option
[  225.411712][ T8312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.620274][ T7020] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.937168][ T4925] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  225.937200][ T4925] CPU: 0 UID: 0 PID: 4925 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  225.937223][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  225.937235][ T4925] Workqueue: hci1 hci_rx_work
[  225.937266][ T4925] Call Trace:
[  225.937273][ T4925]  <TASK>
[  225.937280][ T4925]  dump_stack_lvl+0xe8/0x150
[  225.937307][ T4925]  sysfs_create_dir_ns+0x271/0x2a0
[  225.937328][ T4925]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  225.937352][ T4925]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  225.937376][ T4925]  ? rt_spin_unlock+0x160/0x200
[  225.937399][ T4925]  kobject_add_internal+0x631/0xd10
[  225.937427][ T4925]  kobject_add+0x163/0x240
[  225.937451][ T4925]  ? __pfx_kobject_add+0x10/0x10
[  225.937477][ T4925]  ? get_device_parent+0x370/0x3a0
[  225.937503][ T4925]  device_add+0x408/0xbb0
[  225.937528][ T4925]  hci_conn_add_sysfs+0xd5/0x210
[  225.937556][ T4925]  le_conn_complete_evt+0x10e6/0x16b0
[  225.937587][ T4925]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  225.937608][ T4925]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  225.937634][ T4925]  ? lockdep_hardirqs_on+0x7a/0x110
[  225.937664][ T4925]  ? skb_pull_data+0xfb/0x200
[  225.937688][ T4925]  hci_le_conn_complete_evt+0x187/0x470
[  225.937716][ T4925]  hci_event_packet+0x659/0xef0
[  225.937748][ T4925]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  225.937769][ T4925]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  225.937787][ T4925]  ? __pfx_hci_event_packet+0x10/0x10
[  225.937812][ T4925]  ? rt_spin_unlock+0x14f/0x200
[  225.937842][ T4925]  ? hci_send_to_monitor+0xe2/0x590
[  225.937867][ T4925]  hci_rx_work+0x3ee/0x1040
[  225.937903][ T4925]  ? process_one_work+0x8b7/0x1710
[  225.937924][ T4925]  process_one_work+0x9a3/0x1710
[  225.937964][ T4925]  ? __pfx_process_one_work+0x10/0x10
[  225.937984][ T4925]  ? do_raw_spin_lock+0x12b/0x2f0
[  225.938024][ T4925]  worker_thread+0xba8/0x11e0
[  225.938073][ T4925]  kthread+0x388/0x470
[  225.938100][ T4925]  ? __pfx_worker_thread+0x10/0x10
[  225.938120][ T4925]  ? __pfx_kthread+0x10/0x10
[  225.938147][ T4925]  ret_from_fork+0x514/0xb70
[  225.938173][ T4925]  ? __pfx_ret_from_fork+0x10/0x10
[  225.938202][ T4925]  ? __switch_to+0xc79/0x1410
[  225.938224][ T4925]  ? __pfx_kthread+0x10/0x10
[  225.938249][ T4925]  ret_from_fork_asm+0x1a/0x30
[  225.938286][ T4925]  </TASK>
[  225.964790][ T4925] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  225.964838][ T4925] Bluetooth: hci1: failed to register connection device
[  226.496437][ T8337] Illegal XDP return value 4294967274 on prog  (id 64) dev syz_tun, expect packet loss!
[  226.546362][   T44] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  226.570138][   T44] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  227.237914][ T8357] loop4: detected capacity change from 0 to 1024
[  227.829090][ T8368] netlink: 'syz.1.858': attribute type 3 has an invalid length.
[  228.064840][ T8373] netlink: 'syz.1.860': attribute type 1 has an invalid length.
[  229.169329][ T8413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.878'.
[  229.357763][ T8419] loop5: detected capacity change from 0 to 1024
[  229.370612][ T8419] EXT4-fs: Ignoring removed oldalloc option
[  229.370639][ T8419] EXT4-fs: Ignoring removed oldalloc option
[  229.380882][ T8419] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  229.533766][ T8419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.572976][ T8423] Set syz1 is full, maxelem 14 reached
[  229.717449][ T8438] netlink: 204 bytes leftover after parsing attributes in process `syz.1.887'.
[  229.717480][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.887'.
[  229.915602][ T8442] loop4: detected capacity change from 0 to 4096
[  230.262201][ T7020] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.380681][   T37] audit: type=1800 audit(1777892783.432:23): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.890" name="file1" dev="loop4" ino=33 res=0 errno=0
[  230.827164][ T8458] loop5: detected capacity change from 0 to 4096
[  231.201548][ T8458] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  231.336911][ T8458] ntfs3(loop5): Failed to load $Extend (-22).
[  231.336934][ T8458] ntfs3(loop5): Failed to initialize $Extend.
[  232.275050][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'.
[  232.360743][ T4925] Bluetooth: hci1: command 0x0406 tx timeout
[  232.826280][ T8477] team0 (unregistering): Port device team_slave_0 removed
[  233.002474][ T8477] team0 (unregistering): Port device team_slave_1 removed
[  234.188024][ T8524] Bluetooth: MGMT ver 1.23
[  234.571871][ T8537] virtiofs: Unknown parameter 'always 1      V3
[  234.571871][ T8537] 				010000E0     1 0:00000000		0
[  234.571871][ T8537] 19	batadv0   :     1      V3
[  234.571871][ T8537] 				010000E0     1 0:00000000		0
[  234.571871][ T8537] 20	vxcan0    :     1      V3
[  234.571871][ T8537] 				010000E0     1 0:00000000		0
[  234.571871][ T8537] 21	vxcan1    :     1      V3
[  234.571871][ T8537] 				010000E0     1 0:00000000		0
[  234.571871][ T8537] 22	veth0     :     1      V3
[  234.571871][ T8537] 				010000E0     1 0:00000000		0
[  234.571871][ T8537] 23	veth1     :     1      V3
[  234.571871][ T8537] 				010000E0     1 0:00000000		0
[  234.571871][ T8537] 24	wg0       :     1      V3
[  234.571871][ T8537] 				010000E0     1 0:00000000		0
[  234.571871][ T8537] 25	wg1       :     1      V3
[  234.571871][ T8537] 				010000E0     1 0:00000000		0
[  234.571871][ T8537] 26	wg2       :     1      V3
[  234.571871][ T8537] 				010000E0     1 0:00000000		0
[  234.571871][ T8537] 27	veth0_to_bridge:     1 trans'
[  234.681945][ T8535] ip6erspan0: entered allmulticast mode
[  234.882195][ T8539] loop0: detected capacity change from 0 to 4096
[  234.954279][ T8547] netlink: 60 bytes leftover after parsing attributes in process `syz.5.935'.
[  235.587243][ T8545] loop4: detected capacity change from 0 to 32768
[  235.627697][ T8545] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.671536][ T8545] XFS (loop4): Ending clean mount
[  235.724031][ T8577] netlink: 165 bytes leftover after parsing attributes in process `syz.1.943'.
[  235.819029][ T5607] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  236.356697][ T8587] loop5: detected capacity change from 0 to 128
[  236.358036][ T8587] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  236.359953][ T8587] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  236.398604][   T37] audit: type=1800 audit(1777892789.472:24): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.948" name="file1" dev="loop5" ino=1048613 res=0 errno=0
[  236.986339][ T8589] loop4: detected capacity change from 0 to 32768
[  237.001372][ T8589] (syz.4.945,8589,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  237.011378][ T8589] (syz.4.945,8589,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  237.606277][ T8589] JBD2: Ignoring recovery information on journal
[  237.722084][ T8589] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  238.112732][ T8604] loop5: detected capacity change from 0 to 2048
[  238.225369][ T8604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  238.265642][ T8604] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  239.083545][ T8603] loop0: detected capacity change from 0 to 32768
[  239.085372][ T8603] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.953 (8603)
[  239.438682][ T8603] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  239.438715][ T8603] BTRFS info (device loop0): using sha256 checksum algorithm
[  239.687651][ T8603] BTRFS info (device loop0): enabling ssd optimizations
[  239.687675][ T8603] BTRFS info (device loop0): turning on async discard
[  239.687690][ T8603] BTRFS info (device loop0): enabling free space tree
[  239.903795][ T5607] ocfs2: Unmounting device (7,4) on (node local)
[  240.949419][ T5618] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  241.142640][ T5618] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.142671][ T5618] usb 5-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.142691][ T5618] usb 5-1: config 1 interface 0 has no altsetting 0
[  241.148283][ T5618] usb 5-1: string descriptor 0 read error: -22
[  241.191724][ T5618] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40
[  241.191750][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.222629][ T5609] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  241.711291][ T5618] hid (null): global environment stack underflow
[  241.711312][ T5618] hid (null): invalid report_size 9990
[  241.711395][ T5618] hid (null): unknown global tag 0x28
[  241.711454][ T5618] hid (null): invalid report_size 1270816133
[  241.711469][ T5618] hid (null): unknown global tag 0xc
[  241.711481][ T5618] hid (null): unknown global tag 0xd
[  241.711493][ T5618] hid (null): unknown global tag 0xe
[  241.711528][ T5618] hid (null): unknown global tag 0x62
[  241.711541][ T5618] hid (null): invalid report_size 25076
[  241.711565][ T5618] hid (null): unknown global tag 0xd
[  241.711655][ T5618] hid (null): unknown global tag 0xd
[  241.711666][ T5618] hid (null): unknown global tag 0xc
[  241.711678][ T5618] hid (null): unknown global tag 0xe
[  241.711714][ T5618] hid (null): unknown global tag 0xc
[  241.711797][ T5618] hid (null): unknown global tag 0xc
[  241.711831][ T5618] hid (null): unknown global tag 0xd
[  241.712782][ T5618] hid (null): unknown global tag 0xd
[  241.713097][ T5618] hid (null): invalid report_size 8254
[  241.713121][ T5618] hid (null): unknown global tag 0xc
[  241.713145][ T5618] hid (null): unknown global tag 0xc
[  241.713238][ T5618] hid (null): report_id 1674 is invalid
[  241.713273][ T5618] hid (null): unknown global tag 0xd
[  241.713355][ T5618] hid (null): invalid report_size 6264
[  241.713378][ T5618] hid (null): unknown global tag 0xe
[  241.713390][ T5618] hid (null): unknown global tag 0xe
[  241.713419][ T5618] hid (null): unknown global tag 0xfc
[  241.713431][ T5618] hid (null): unknown global tag 0xc
[  241.713456][ T5618] hid (null): unknown global tag 0xd
[  241.713479][ T5618] hid (null): invalid report_size 56063
[  241.943714][ T5618] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  241.943748][ T5618] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  241.943775][ T5618] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  241.943800][ T5618] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  241.943824][ T5618] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  241.943849][ T5618] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  241.943874][ T5618] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  241.943906][ T5618] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  241.943934][ T5618] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  241.943960][ T5618] glorious 0003:258A:0033.000A: unknown main item tag 0x0
[  241.947140][ T5618] glorious 0003:258A:0033.000A: unexpected long global item
[  241.947887][ T5618] glorious 0003:258A:0033.000A: probe with driver glorious failed with error -22
[  242.055583][ T8655] netlink: 'syz.5.968': attribute type 1 has an invalid length.
[  242.084876][ T5618] usb 5-1: USB disconnect, device number 9
[  242.210817][ T8661] loop0: detected capacity change from 0 to 128
[  242.350450][ T8655] 8021q: adding VLAN 0 to HW filter on device bond1
[  242.356224][ T8661] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  242.357972][ T8661] ext4 filesystem being mounted at /196/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  242.752251][ T5609] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  243.149473][ T8689] loop4: detected capacity change from 0 to 256
[  243.364414][ T8694] veth1_to_bond: entered allmulticast mode
[  243.365249][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'.
[  243.625450][ T8694] veth1_to_bond (unregistering): left allmulticast mode
[  243.753991][ T8694] bond0: (slave bond_slave_1): Releasing backup interface
[  244.665492][ T8729] fuse: Bad value for 'fd'
[  245.318804][ T8746] macvlan2: entered promiscuous mode
[  245.318823][ T8746] bond0: entered promiscuous mode
[  245.318835][ T8746] bond_slave_0: entered promiscuous mode
[  245.319071][ T8746] bond_slave_1: entered promiscuous mode
[  245.340174][ T8746] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  245.448606][ T8748] macvlan3: entered promiscuous mode
[  245.583674][ T8726] loop5: detected capacity change from 0 to 32768
[  245.661209][ T8765] loop0: detected capacity change from 0 to 64
[  246.468191][ T8780] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1017'.
[  246.524713][ T8782] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1017'.
[  246.782766][ T8780] gretap0: entered promiscuous mode
[  246.821654][ T8782] 0{X功: renamed from gretap0
[  246.873593][ T8782] 0{X功: left promiscuous mode
[  246.873628][ T8782] 0{X功: entered allmulticast mode
[  246.888009][ T8782] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  248.062313][ T8807] loop5: detected capacity change from 0 to 4096
[  248.070358][ T8807] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  248.075094][ T8807] ntfs3(loop5): ino=3, mi_enum_attr
[  248.403311][ T8811] loop4: detected capacity change from 0 to 40427
[  248.421872][ T8811] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  248.421895][ T8811] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  248.453972][ T8811] F2FS-fs (loop4): invalid crc value
[  248.539647][ T8811] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  248.577066][ T8807] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  248.608894][ T8811] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  248.608921][ T8811] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  248.911052][ T5607] syz-executor: attempt to access beyond end of device
[  248.911052][ T5607] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  248.989032][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  248.989078][ T5607] Tainted: [L]=SOFTLOCKUP
[  248.989085][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  248.989104][ T5607] Call Trace:
[  248.989111][ T5607]  <TASK>
[  248.989119][ T5607]  dump_stack_lvl+0xe8/0x150
[  248.989145][ T5607]  f2fs_stop_checkpoint+0x383/0x540
[  248.989170][ T5607]  f2fs_write_end_io+0x1274/0x1740
[  248.989210][ T5607]  __submit_merged_bio+0x256/0x6a0
[  248.989237][ T5607]  __submit_merged_write_cond+0x3c9/0x4e0
[  248.989264][ T5607]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  248.989310][ T5607]  f2fs_write_data_pages+0x287e/0x34f0
[  248.989367][ T5607]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.989434][ T5607]  ? do_raw_spin_lock+0x12b/0x2f0
[  248.989476][ T5607]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  248.989501][ T5607]  ? lockdep_hardirqs_on+0x7a/0x110
[  248.989525][ T5607]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  248.989548][ T5607]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  248.989569][ T5607]  ? reacquire_held_locks+0x104/0x190
[  248.989586][ T5607]  ? rt_spin_lock+0x1e0/0x400
[  248.989611][ T5607]  ? rt_spin_unlock+0x14f/0x200
[  248.989636][ T5607]  ? rt_spin_unlock+0x160/0x200
[  248.989654][ T5607]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.989677][ T5607]  do_writepages+0x32e/0x550
[  248.989698][ T5607]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  248.989718][ T5607]  ? rt_spin_unlock+0x14f/0x200
[  248.989747][ T5607]  filemap_fdatawrite+0x1ec/0x2f0
[  248.989771][ T5607]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  248.989788][ T5607]  ? __lock_acquire+0x6b5/0x2d10
[  248.989847][ T5607]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  248.989874][ T5607]  ? rt_spin_unlock+0x160/0x200
[  248.989897][ T5607]  f2fs_sync_dirty_inodes+0x30e/0x830
[  248.989934][ T5607]  f2fs_write_checkpoint+0x9df/0x26a0
[  248.989955][ T5607]  ? __lock_acquire+0x6b5/0x2d10
[  248.990008][ T5607]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  248.990081][ T5607]  kill_f2fs_super+0x314/0x730
[  248.990108][ T5607]  ? __pfx_kill_f2fs_super+0x10/0x10
[  248.990143][ T5607]  ? lockdep_hardirqs_on+0x7a/0x110
[  248.990180][ T5607]  deactivate_locked_super+0xbc/0x130
[  248.990201][ T5607]  cleanup_mnt+0x437/0x4d0
[  248.990223][ T5607]  ? _raw_spin_unlock_irq+0x23/0x50
[  248.990249][ T5607]  task_work_run+0x1d9/0x270
[  248.990271][ T5607]  ? __pfx_task_work_run+0x10/0x10
[  248.990295][ T5607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.990314][ T5607]  exit_to_user_mode_loop+0xed/0x480
[  248.990336][ T5607]  ? rcu_is_watching+0x15/0xb0
[  248.990354][ T5607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.990372][ T5607]  do_syscall_64+0x33e/0xf80
[  248.990394][ T5607]  ? trace_irq_disable+0x3b/0x140
[  248.990415][ T5607]  ? clear_bhb_loop+0x40/0x90
[  248.990436][ T5607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.990462][ T5607] RIP: 0033:0x7f25301fe017
[  248.990480][ T5607] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  248.990494][ T5607] RSP: 002b:00007ffc07f84ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  248.990514][ T5607] RAX: 0000000000000000 RBX: 00007f2530292120 RCX: 00007f25301fe017
[  248.990526][ T5607] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc07f84da0
[  248.990537][ T5607] RBP: 00007ffc07f84da0 R08: 00007ffc07f85da0 R09: 00000000ffffffff
[  248.990549][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc07f85e30
[  248.990560][ T5607] R13: 00007f2530292120 R14: 000000000003ca94 R15: 00007ffc07f85e70
[  248.990590][ T5607]  </TASK>
[  248.997733][ T5607] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  249.444007][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1039'.
[  250.086537][ T8842] loop4: detected capacity change from 0 to 512
[  250.111907][ T8840] loop5: detected capacity change from 0 to 4096
[  250.114417][ T8840] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  250.206814][ T8840] ntfs3(loop5): ino=19, mi_enum_attr
[  251.070499][  T822] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  251.216883][ T8875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'.
[  251.230359][  T822] usb 2-1: Using ep0 maxpacket: 8
[  251.232230][  T822] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  251.232257][  T822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  251.232276][  T822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  251.232288][  T822] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  251.232310][  T822] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  251.232321][  T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.361374][ T8878] loop4: detected capacity change from 0 to 1024
[  251.387803][ T8878] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002]
[  251.387913][ T8878] System zones: 0-1, 3-8
[  251.477455][ T8878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  251.477581][ T8878] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.524404][  T822] usb 2-1: GET_CAPABILITIES returned 0
[  251.524446][  T822] usbtmc 2-1:16.0: can't read capabilities
[  251.599635][   T37] audit: type=1800 audit(1777892804.692:25): pid=8878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1058" name="file1" dev="loop4" ino=15 res=0 errno=0
[  251.735321][    C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  251.737130][ T5741] usb 2-1: USB disconnect, device number 10
[  251.776705][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  251.825395][ T8889] loop5: detected capacity change from 0 to 1024
[  251.826624][ T8889] EXT4-fs: Ignoring removed nomblk_io_submit option
[  251.881023][ T8889] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01d, mo2=0003]
[  251.881137][ T8889] System zones: 0-1, 3-36
[  251.897051][ T8889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.323134][ T8898] bridge0: port 3(vlan2) entered blocking state
[  252.323423][ T8898] bridge0: port 3(vlan2) entered disabled state
[  252.324259][ T8898] vlan2: entered allmulticast mode
[  252.324278][ T8898] dummy0: entered allmulticast mode
[  252.392687][ T8898] vlan2: entered promiscuous mode
[  252.392708][ T8898] dummy0: entered promiscuous mode
[  252.478096][ T8889] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.1062: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  252.781701][ T7020] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.066159][ T8924] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  253.162588][ T8929] loop5: detected capacity change from 0 to 512
[  253.316180][ T8929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.540814][ T7020] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.796531][ T8952] loop4: detected capacity change from 0 to 256
[  254.117732][ T8952] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  254.432566][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'.
[  254.495096][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'.
[  254.644963][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'.
[  254.884946][ T8985] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1104'.
[  255.044803][  T822] hid_parser_main: 246 callbacks suppressed
[  255.044824][  T822] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  255.063105][  T822] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  255.063112][ T8993] fuse: Bad value for 'fd'
[  255.646887][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  255.646980][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  255.750308][ T9015] netlink: 17780 bytes leftover after parsing attributes in process `syz.0.1116'.
[  256.038716][ T5618] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  256.160193][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1120'.
[  256.160225][ T9028] netlink: 'syz.3.1120': attribute type 5 has an invalid length.
[  256.160240][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1120'.
[  256.192727][ T5618] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  256.192749][ T5618] usb 2-1: config 0 has no interface number 0
[  256.192789][ T5618] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  256.192812][ T5618] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  256.192834][ T5618] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  256.259060][ T5618] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  256.259086][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  256.259103][ T5618] usb 2-1: Product: syz
[  256.259116][ T5618] usb 2-1: SerialNumber: syz
[  256.264045][ T5618] usb 2-1: config 0 descriptor??
[  256.302986][ T5618] cm109 2-1:0.8: invalid payload size 0, expected 4
[  256.306860][ T5618] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input11
[  256.376557][ T9028] geneve2: entered promiscuous mode
[  256.376580][ T9028] geneve2: entered allmulticast mode
[  256.412129][ T3860] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  256.414265][ T3860] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  256.414303][ T3860] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  256.414336][ T3860] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  256.494185][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  256.635986][   T37] audit: type=1326 audit(1777892809.702:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6602dcdd9 code=0x7ffc0000
[  256.636032][   T37] audit: type=1326 audit(1777892809.722:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6602dcdd9 code=0x7ffc0000
[  256.637680][   T37] audit: type=1326 audit(1777892809.722:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6602dcdd9 code=0x7ffc0000
[  256.637724][   T37] audit: type=1326 audit(1777892809.722:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6602dcdd9 code=0x7ffc0000
[  256.639765][   T37] audit: type=1326 audit(1777892809.722:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff6602dcdd9 code=0x7ffc0000
[  256.687243][   T37] audit: type=1326 audit(1777892809.772:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6602dcdd9 code=0x7ffc0000
[  256.687333][   T37] audit: type=1326 audit(1777892809.772:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6602dcdd9 code=0x7ffc0000
[  256.687550][   T37] audit: type=1326 audit(1777892809.772:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6602dcdd9 code=0x7ffc0000
[  256.690330][   T37] audit: type=1326 audit(1777892809.772:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6602dcdd9 code=0x7ffc0000
[  256.690377][   T37] audit: type=1326 audit(1777892809.772:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.0.1122" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff6602dcb42 code=0x7ffc0000
[  257.535478][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  257.541831][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  257.542704][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  257.542943][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  257.543163][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  257.543384][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  257.543697][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  257.543947][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  257.544175][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  257.544414][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  257.649360][ T5618] usb 2-1: USB disconnect, device number 11
[  257.649497][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  257.740584][ T5618] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  259.151841][ T9086] loop0: detected capacity change from 0 to 64
[  260.556189][ T5741] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  260.813954][ T5741] usb 1-1: Using ep0 maxpacket: 16
[  260.836133][ T5741] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  260.836160][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.836178][ T5741] usb 1-1: Product: syz
[  260.836191][ T5741] usb 1-1: Manufacturer: syz
[  260.836204][ T5741] usb 1-1: SerialNumber: syz
[  260.845889][ T5741] usb 1-1: config 0 descriptor??
[  260.891014][ T5741] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  261.038659][   T44] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  261.165482][ T5741] usb 1-1: USB disconnect, device number 10
[  261.213265][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  261.213295][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  261.213329][   T44] usb 2-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[  261.213341][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.245776][   T44] usb 2-1: config 0 descriptor??
[  261.756723][   T44] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  261.756758][   T44] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  261.756788][   T44] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  261.756813][   T44] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  261.756837][   T44] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  261.756863][   T44] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  261.756887][   T44] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  261.756912][   T44] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  261.756936][   T44] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  261.756959][   T44] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  261.763351][   T44] wacom 0003:056A:5012.000C: reserved main item tag 0xd
[  261.766498][   T44] wacom 0003:056A:5012.000C: Unknown device_type for 'HID 056a:5012'. Ignoring.
[  261.906498][   T44] usb 2-1: USB disconnect, device number 12
[  261.979421][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  262.128600][    T9] usb 5-1: Using ep0 maxpacket: 32
[  262.130905][    T9] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  262.130932][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  262.130958][    T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  262.130978][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.184171][ T9139] loop0: detected capacity change from 0 to 256
[  262.190499][ T9140] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1165'.
[  262.211827][    T9] usb 5-1: config 0 descriptor??
[  262.302287][ T9139] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  262.716064][    T9] corsair-psu 0003:1B1C:1C09.000D: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0
[  263.078017][    T9] corsair-psu 0003:1B1C:1C09.000D: unable to initialize device (-71)
[  263.155638][    T9] corsair-psu 0003:1B1C:1C09.000D: probe with driver corsair-psu failed with error -71
[  263.199472][    T9] usb 5-1: USB disconnect, device number 10
[  265.019849][ T9222] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1201'.
[  266.314984][ T9269] input: syz1 as /devices/virtual/input/input15
[  266.774538][ T9274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  266.774554][ T9274] IPv6: NLM_F_CREATE should be set when creating new route
[  266.774600][ T9274] IPv6: NLM_F_CREATE should be set when creating new route
[  268.025342][ T9292] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1210'.
[  268.082471][ T9296] netlink: 'syz.4.1213': attribute type 8 has an invalid length.
[  268.082489][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1213'.
[  268.290835][ T9296] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1213'.
[  269.474049][ T9313] veth0: entered promiscuous mode
[  269.495488][ T9310] veth0: left promiscuous mode
[  269.599029][ T5741] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  269.775726][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.775755][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  269.775788][ T5741] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  269.775808][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.801440][ T5741] usb 5-1: config 0 descriptor??
[  270.024110][ T9331] loop0: detected capacity change from 0 to 512
[  270.035194][ T9331] EXT4-fs: Ignoring removed orlov option
[  270.047913][ T9331] EXT4-fs (loop0): Test dummy encryption mode enabled
[  270.047931][ T9331] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  270.224273][ T5741] hid_parser_main: 443 callbacks suppressed
[  270.224294][ T5741] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0
[  270.224322][ T5741] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0
[  270.224344][ T5741] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0
[  270.224366][ T5741] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0
[  270.224390][ T5741] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0
[  270.224416][ T5741] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0
[  270.224441][ T5741] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0x0
[  270.225954][ T9335] fuse: Bad value for 'fd'
[  270.251280][ T5741] hid-thrustmaster 0003:044F:B65D.000E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[  270.251654][ T5741] hid-thrustmaster 0003:044F:B65D.000E: Wrong number of endpoints?
[  271.224811][ T9346] macvlan4: entered promiscuous mode
[  271.224829][ T9346] bond0: entered promiscuous mode
[  271.224841][ T9346] bond_slave_0: entered promiscuous mode
[  271.225131][ T9346] bond_slave_1: entered promiscuous mode
[  271.275651][ T9346] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  271.361447][ T9347] macvlan5: entered promiscuous mode
[  271.484096][    C1] hid-thrustmaster 0003:044F:B65D.000E: Unknown packet type 0x0, unable to proceed further with wheel init
[  271.595072][ T9331] EXT4-fs (loop0): 1 truncate cleaned up
[  271.597644][ T9331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.693889][ T5618] usb 5-1: USB disconnect, device number 11
[  271.863471][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.455304][ T1233] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0
[  272.455338][ T1233] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0
[  272.455363][ T1233] hid-generic 0000:0000:0004.000F: unknown main item tag 0x0
[  272.495933][ T9368] UHID_CREATE from different security context by process 577 (syz.0.1242), this is not allowed.
[  272.525015][ T1233] hid-generic 0000:0000:0004.000F: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  272.646148][ T9377] fido_id[9377]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  272.879727][ T9385] sctp: [Deprecated]: syz.1.1248 (pid 9385) Use of int in max_burst socket option deprecated.
[  272.879727][ T9385] Use struct sctp_assoc_value instead
[  273.118654][ T1233] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  273.279443][ T1233] usb 5-1: Using ep0 maxpacket: 8
[  273.281959][ T1233] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  273.282068][ T1233] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  273.282092][ T1233] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  273.282114][ T1233] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  273.282152][ T1233] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  273.282172][ T1233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.290905][ T9381] loop0: detected capacity change from 0 to 32768
[  273.333317][ T9381] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  273.459051][ T9381] XFS (loop0): Ending clean mount
[  273.660951][ T1233] usb 5-1: usb_control_msg returned -32
[  273.660997][ T1233] usbtmc 5-1:16.0: can't read capabilities
[  273.666509][ T9405] XFS (loop0): User initiated shutdown received.
[  273.695071][   T37] kauditd_printk_skb: 201 callbacks suppressed
[  273.695085][   T37] audit: type=1800 audit(1777892826.782:237): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1247" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  273.808390][ T9405] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  273.808423][ T9405] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  273.914959][ T5609] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  273.947501][ T5741] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  274.495024][ T5741] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.495069][ T5741] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  274.495089][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.512328][ T5741] usb 2-1: config 0 descriptor??
[  274.731557][ T5741] usbhid 2-1:0.0: can't add hid device: -71
[  274.731654][ T5741] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  274.780375][ T5741] usb 2-1: USB disconnect, device number 13
[  275.045823][ T9432] netlink: 'syz.5.1266': attribute type 3 has an invalid length.
[  275.279068][ T5741] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  275.318140][ T9428] loop0: detected capacity change from 0 to 40427
[  275.331930][ T9428] F2FS-fs (loop0): build fault injection rate: 174
[  275.331949][ T9428] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  275.333004][ T9428] F2FS-fs (loop0): invalid crc value
[  275.443640][ T5741] usb 2-1: Using ep0 maxpacket: 8
[  275.445711][ T5741] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  275.445733][ T5741] usb 2-1: config 0 has no interface number 0
[  275.445768][ T5741] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.445791][ T5741] usb 2-1: config 0 interface 52 has no altsetting 0
[  275.445817][ T5741] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  275.445837][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.495077][ T5741] usb 2-1: config 0 descriptor??
[  275.530741][ T9446] netlink: 'syz.3.1270': attribute type 1 has an invalid length.
[  275.750371][ T9446] 8021q: adding VLAN 0 to HW filter on device bond1
[  275.762738][ T5741] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input16
[  275.987111][  T822] usb 5-1: USB disconnect, device number 12
[  276.043809][ T9428] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  276.212791][ T9428] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  276.309053][ T5741] usb 2-1: USB disconnect, device number 14
[  276.621436][ T9470] loop4: detected capacity change from 0 to 2048
[  276.667436][ T5609] syz-executor: attempt to access beyond end of device
[  276.667436][ T5609] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  276.688401][ T9470] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  276.725799][ T5609] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  276.725828][ T5609] Tainted: [L]=SOFTLOCKUP
[  276.725834][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  276.725844][ T5609] Call Trace:
[  276.725849][ T5609]  <TASK>
[  276.725854][ T5609]  dump_stack_lvl+0xe8/0x150
[  276.725873][ T5609]  f2fs_stop_checkpoint+0x383/0x540
[  276.725887][ T5609]  f2fs_write_end_io+0x1274/0x1740
[  276.725911][ T5609]  __submit_merged_bio+0x256/0x6a0
[  276.725925][ T5609]  __submit_merged_write_cond+0x3c9/0x4e0
[  276.725940][ T5609]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  276.725962][ T5609]  f2fs_write_data_pages+0x287e/0x34f0
[  276.725992][ T5609]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.726029][ T5609]  ? do_raw_spin_lock+0x12b/0x2f0
[  276.726048][ T5609]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  276.726066][ T5609]  ? lockdep_hardirqs_on+0x7a/0x110
[  276.726080][ T5609]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  276.726094][ T5609]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  276.726105][ T5609]  ? reacquire_held_locks+0x104/0x190
[  276.726115][ T5609]  ? rt_spin_lock+0x1e0/0x400
[  276.726130][ T5609]  ? rt_spin_unlock+0x14f/0x200
[  276.726143][ T5609]  ? rt_spin_unlock+0x160/0x200
[  276.726154][ T5609]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.726166][ T5609]  do_writepages+0x32e/0x550
[  276.726179][ T5609]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  276.726191][ T5609]  ? rt_spin_unlock+0x14f/0x200
[  276.726207][ T5609]  filemap_fdatawrite+0x1ec/0x2f0
[  276.726220][ T5609]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  276.726230][ T5609]  ? __lock_acquire+0x6b5/0x2d10
[  276.726261][ T5609]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  276.726277][ T5609]  ? rt_spin_unlock+0x160/0x200
[  276.726289][ T5609]  f2fs_sync_dirty_inodes+0x30e/0x830
[  276.726316][ T5609]  f2fs_write_checkpoint+0x9df/0x26a0
[  276.726328][ T5609]  ? __lock_acquire+0x6b5/0x2d10
[  276.726357][ T5609]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  276.726396][ T5609]  kill_f2fs_super+0x314/0x730
[  276.726412][ T5609]  ? __pfx_kill_f2fs_super+0x10/0x10
[  276.726430][ T5609]  ? lockdep_hardirqs_on+0x7a/0x110
[  276.726450][ T5609]  deactivate_locked_super+0xbc/0x130
[  276.726463][ T5609]  cleanup_mnt+0x437/0x4d0
[  276.726475][ T5609]  ? _raw_spin_unlock_irq+0x23/0x50
[  276.726491][ T5609]  task_work_run+0x1d9/0x270
[  276.726503][ T5609]  ? __pfx_task_work_run+0x10/0x10
[  276.726516][ T5609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.726527][ T5609]  exit_to_user_mode_loop+0xed/0x480
[  276.726541][ T5609]  ? rcu_is_watching+0x15/0xb0
[  276.726552][ T5609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.726562][ T5609]  do_syscall_64+0x33e/0xf80
[  276.726576][ T5609]  ? trace_irq_disable+0x3b/0x140
[  276.726589][ T5609]  ? clear_bhb_loop+0x40/0x90
[  276.726602][ T5609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.726611][ T5609] RIP: 0033:0x7ff6602de017
[  276.726622][ T5609] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  276.726630][ T5609] RSP: 002b:00007ffffac68d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  276.726642][ T5609] RAX: 0000000000000000 RBX: 00007ff660372120 RCX: 00007ff6602de017
[  276.726649][ T5609] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffffac68e20
[  276.726657][ T5609] RBP: 00007ffffac68e20 R08: 00007ffffac69e20 R09: 00000000ffffffff
[  276.726664][ T5609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffffac69eb0
[  276.726670][ T5609] R13: 00007ff660372120 R14: 000000000004374e R15: 00007ffffac69ef0
[  276.726686][ T5609]  </TASK>
[  276.726698][ T5609] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  276.883189][ T9470] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  277.481554][ T9490] loop4: detected capacity change from 0 to 8
[  278.123505][ T5714] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  278.269971][ T5714] usb 2-1: Using ep0 maxpacket: 16
[  278.272216][ T5714] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[  278.272243][ T5714] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  278.272261][ T5714] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  278.272278][ T5714] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  278.272294][ T5714] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  278.272312][ T5714] usb 2-1: config 0 has no interface number 0
[  278.272352][ T5714] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  278.272376][ T5714] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  278.272394][ T5714] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  278.272424][ T5714] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  278.272448][ T5714] usb 2-1: config 0 interface 125 has no altsetting 0
[  278.272463][ T5714] usb 2-1: config 0 interface 125 has no altsetting 2
[  278.301654][ T5714] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  278.301681][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.301698][ T5714] usb 2-1: Product: syz
[  278.301710][ T5714] usb 2-1: Manufacturer: syz
[  278.301721][ T5714] usb 2-1: SerialNumber: syz
[  278.359123][ T5714] usb 2-1: config 0 descriptor??
[  278.419655][ T5714] usb 2-1: selecting invalid altsetting 2
[  279.487294][ T5714] usb 2-1: USB disconnect, device number 15
[  279.616730][ T9538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  279.701070][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1312'.
[  279.703369][ T9543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1312'.
[  280.038641][ T1233] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  280.198762][ T1233] usb 1-1: Using ep0 maxpacket: 32
[  280.200817][ T1233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.200844][ T1233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.200965][ T1233] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  280.200988][ T1233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.275527][ T1233] usb 1-1: config 0 descriptor??
[  280.303731][ T1233] hub 1-1:0.0: USB hub found
[  280.384209][ T9555] team0 (unregistering): Port device team_slave_0 removed
[  280.519413][ T1233] hub 1-1:0.0: 2 ports detected
[  280.625080][ T9555] team0 (unregistering): Port device team_slave_1 removed
[  281.582274][ T9573] TCP: TCP_TX_DELAY enabled
[  281.594524][ T9570] loop4: detected capacity change from 0 to 2048
[  281.666264][ T9570] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  281.807947][ T1233] hub 1-1:0.0: hub_hub_status failed (err = -32)
[  281.807972][ T1233] hub 1-1:0.0: config failed, can't get hub status (err -32)
[  281.829672][ T1233] usbhid 1-1:0.0: can't add hid device: -32
[  281.829904][ T1233] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  281.934860][ T1233] usb 1-1: USB disconnect, device number 11
[  282.640521][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'.
[  282.640542][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'.
[  282.917368][ T9611] loop0: detected capacity change from 0 to 512
[  283.085648][ T9611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.652388][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.671509][ T9626] loop4: detected capacity change from 0 to 512
[  283.674038][ T9626] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  283.676254][ T9626] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[  283.677433][ T9626] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  283.677529][ T9626] System zones: 0-2, 18-18, 34-35
[  283.687558][ T9626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.938247][ T5607] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.152263][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1352'.
[  284.247121][ T9642] netlink: 'syz.3.1354': attribute type 10 has an invalid length.
[  284.329089][ T9646] loop0: detected capacity change from 0 to 256
[  284.675845][ T9642] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  284.696537][ T9642] team0: Port device netdevsim1 added
[  285.623994][ T9654] team0 (unregistering): Port device team_slave_0 removed
[  285.699209][ T9654] team0 (unregistering): Port device team_slave_1 removed
[  285.889146][ T9654] team0 (unregistering): Port device netdevsim1 removed
[  286.311428][ T9697] macvlan2: entered promiscuous mode
[  286.311448][ T9697] bond0: entered promiscuous mode
[  286.311461][ T9697] bond_slave_0: entered promiscuous mode
[  286.311674][ T9697] bond_slave_1: entered promiscuous mode
[  286.318195][ T9697] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  286.480964][ T9699] macvlan3: entered promiscuous mode
[  287.986778][ T9750] team0 (unregistering): Port device team_slave_0 removed
[  288.026806][ T9750] team0 (unregistering): Port device team_slave_1 removed
[  288.438633][ T5625] Bluetooth: hci3: command 0x0406 tx timeout
[  288.438805][ T5625] Bluetooth: hci4: command 0x0406 tx timeout
[  288.595242][ T9757] macvlan2: entered promiscuous mode
[  288.595255][ T9757] bond0: entered promiscuous mode
[  288.595263][ T9757] bond_slave_0: entered promiscuous mode
[  288.773594][ T9757] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  288.842894][ T9759] macvlan3: entered promiscuous mode
[  288.974752][ T9768] IPVS: Scheduler module ip_vs_sip not found
[  289.149688][ T9780] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1402'.
[  289.198950][ T9780] gretap0: entered promiscuous mode
[  289.216543][ T9786] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1402'.
[  289.370549][ T9786] 0{X功: renamed from gretap0
[  289.426183][ T9786] 0{X功: left promiscuous mode
[  289.426206][ T9786] 0{X功: entered allmulticast mode
[  289.444046][ T9786] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  289.476161][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'.
[  289.694766][ T9807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1413'.
[  289.856951][ T9815] macvlan2: entered promiscuous mode
[  289.856970][ T9815] bond0: entered promiscuous mode
[  289.856982][ T9815] bond_slave_0: entered promiscuous mode
[  289.857293][ T9815] bond_slave_1: entered promiscuous mode
[  289.880513][ T9815] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  289.964691][ T9815] macvlan3: entered promiscuous mode
[  291.134864][ T9840] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  291.134896][ T9840] overlayfs: missing 'lowerdir'
[  291.135147][ T9839] overlayfs: failed to clone upperpath
[  291.424416][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'.
[  292.742214][ T9860] macvlan3: entered promiscuous mode
[  292.874236][ T9863] macvlan3: entered promiscuous mode
[  294.189690][ T9899] macvlan3: entered promiscuous mode
[  294.295529][ T9901] macvlan3: entered promiscuous mode
[  294.384335][ T9909] loop4: detected capacity change from 0 to 128
[  294.386516][ T9909] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  294.392009][ T9909] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  294.708343][ T9264] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  294.756535][ T9919] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1460'.
[  294.810701][ T9917] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1460'.
[  294.935560][ T9917] 0{X功: renamed from gretap0
[  294.962855][ T9917] 0{X功: entered allmulticast mode
[  294.989994][ T9917] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  295.269146][  T822] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  295.430380][  T822] usb 2-1: Using ep0 maxpacket: 32
[  295.432887][  T822] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  295.432912][  T822] usb 2-1: config 0 has no interface number 0
[  295.435414][  T822] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  295.435439][  T822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.435457][  T822] usb 2-1: Product: syz
[  295.435469][  T822] usb 2-1: Manufacturer: syz
[  295.435481][  T822] usb 2-1: SerialNumber: syz
[  295.455171][ T9939] macvlan3: entered promiscuous mode
[  295.507874][  T822] usb 2-1: config 0 descriptor??
[  295.520029][  T822] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  295.636605][ T9944] macvlan3: entered promiscuous mode
[  295.852117][ T9953] Invalid argument reading file caps for ./file0
[  295.854329][  T822] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  295.982399][  T822] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  296.117724][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  296.137120][    T9] usb 2-1: USB disconnect, device number 16
[  296.182413][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  296.201468][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  296.204001][    T9] quatech2 2-1:0.51: device disconnected
[  296.355948][ T9961] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1477'.
[  296.389273][ T9961] gretap0: entered promiscuous mode
[  296.407606][ T9965] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1477'.
[  296.427947][ T9965] 0{X功: renamed from gretap0
[  296.464581][ T9965] 0{X功: left promiscuous mode
[  296.464596][ T9965] 0{X功: entered allmulticast mode
[  296.472312][ T9965] A link change request failed with some changes committed already. Interface 
30{X功 may have been left with an inconsistent configuration, please check.
[  296.556792][   T37] audit: type=1326 audit(1777892849.642:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.3.1482" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fe1d3cdd9 code=0x0
[  296.568994][ T5741] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  296.740932][ T5741] usb 1-1: unable to get BOS descriptor or descriptor too short
[  296.741515][ T5741] usb 1-1: not running at top speed; connect to a high speed hub
[  296.743198][ T5741] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 68, changing to 4
[  296.743223][ T5741] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  296.743262][ T5741] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1023
[  296.745719][ T5741] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  296.745743][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.745761][ T5741] usb 1-1: Product: syz
[  296.745773][ T5741] usb 1-1: Manufacturer: syz
[  296.745785][ T5741] usb 1-1: SerialNumber: syz
[  297.053322][ T9986] fuse: Bad value for 'fd'
[  297.143231][ T5741] usb 1-1: 1:1: invalid format type 0x1006 is detected, processed as PCM
[  297.143256][ T5741] usb 1-1: 1:1 : sample bitwidth 55 in over sample bytes 2
[  297.143282][ T5741] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  297.147163][ T5741] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  297.519411][ T5741] usb 1-1: USB disconnect, device number 12
[  297.910507][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.850265][T10000] loop0: detected capacity change from 0 to 32768
[  298.895496][T10000] XFS (loop0): Invalid device [./bus], error=-15
[  299.464947][T10029] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  299.742538][T10048] 9p: Bad value for 'rfdno'
[  300.309144][ T5741] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  300.367249][T10076] loop0: detected capacity change from 0 to 2048
[  300.387542][T10076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  300.459042][ T5741] usb 2-1: Using ep0 maxpacket: 32
[  300.483777][ T5741] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  300.483800][ T5741] usb 2-1: config 0 has no interface number 0
[  300.483844][ T5741] usb 2-1: config 0 interface 184 has no altsetting 0
[  300.486554][ T5741] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  300.486577][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.486595][ T5741] usb 2-1: Product: syz
[  300.486608][ T5741] usb 2-1: Manufacturer: syz
[  300.486620][ T5741] usb 2-1: SerialNumber: syz
[  300.525846][ T5741] usb 2-1: config 0 descriptor??
[  300.728370][T10084] trusted_key: syz.5.1536 sent an empty control message without MSG_MORE.
[  301.113600][T10095] macvlan3: entered promiscuous mode
[  301.189126][ T5741] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  301.189144][ T5741] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  301.417756][ T5741] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  301.417783][ T5741] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  301.417800][ T5741] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  301.418077][ T5741] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[  301.483010][ T5741] usb 2-1: USB disconnect, device number 17
[  301.560292][ T4925] Bluetooth: hci3: command 0x0406 tx timeout
[  301.614796][T10096] macvlan3: entered promiscuous mode
[  301.799087][ T1032] wlan1: Trigger new scan to find an IBSS to join
[  302.362254][T10126] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1551'.
[  302.601097][T10137] random: crng reseeded on system resumption
[  302.681718][T10136] input: syz1 as /devices/virtual/input/input17
[  302.681751][T10136] input: failed to attach handler leds to device input17, error: -6
[  302.813524][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'.
[  302.969593][T10145] macvlan3: entered promiscuous mode
[  303.169515][T10148] macvlan3: entered promiscuous mode
[  303.306912][T10155] process '/newroot/354/file0' started with executable stack
[  303.639065][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[  304.398203][T10181] netem: unknown loss type 0
[  304.398221][T10181] netem: change failed
[  304.847005][ T9264] wlan1: Trigger new scan to find an IBSS to join
[  304.999880][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.164935][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  305.455555][T10220] loop5: detected capacity change from 0 to 7
[  305.506874][T10220] Dev loop5: unable to read RDB block 7
[  305.506904][T10220]  loop5: AHDI p1 p2 p3
[  305.506931][T10220] loop5: partition table partially beyond EOD, truncated
[  305.507157][T10220] loop5: p1 start 7562610 is beyond EOD, truncated
[  305.507174][T10220] loop5: p2 start 1702059890 is beyond EOD, truncated
[  305.904941][T10232] macvlan3: entered promiscuous mode
[  306.049174][ T5741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.090850][T10238] macvlan3: entered promiscuous mode
[  306.272388][T10245] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1598'.
[  307.079327][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.133515][   T37] audit: type=1326 audit(1777892860.222:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1607" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeeb8bcdd9 code=0x7ffc0000
[  307.139007][   T37] audit: type=1326 audit(1777892860.222:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1607" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeeb8bcdd9 code=0x7ffc0000
[  307.146647][   T37] audit: type=1326 audit(1777892860.232:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1607" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeeb8bcdd9 code=0x7ffc0000
[  307.150935][   T37] audit: type=1326 audit(1777892860.232:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1607" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeeb8bcdd9 code=0x7ffc0000
[  307.150979][   T37] audit: type=1326 audit(1777892860.232:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1607" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efeeb8bcdd9 code=0x7ffc0000
[  307.153526][   T37] audit: type=1326 audit(1777892860.242:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1607" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeeb8bcdd9 code=0x7ffc0000
[  307.153566][   T37] audit: type=1326 audit(1777892860.242:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1607" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeeb8bcdd9 code=0x7ffc0000
[  307.157173][   T37] audit: type=1326 audit(1777892860.242:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1607" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeeb8bcdd9 code=0x7ffc0000
[  307.164859][   T37] audit: type=1326 audit(1777892860.242:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1607" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeeb8bcdd9 code=0x7ffc0000
[  307.164949][   T37] audit: type=1326 audit(1777892860.252:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10265 comm="syz.1.1607" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7efeeb8bcdd9 code=0x7ffc0000
[  307.556430][T10284] loop4: detected capacity change from 0 to 64
[  307.800248][ T9264] wlan1: Trigger new scan to find an IBSS to join
[  308.119463][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.201915][ T5626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.780915][ T9264] wlan1: Creating new IBSS network, BSSID c2:7c:51:6d:56:a6
[  309.165811][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.340947][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1634'.
[  309.367033][T10337] loop0: detected capacity change from 0 to 512
[  309.436631][T10333] sctp: [Deprecated]: syz.1.1632 (pid 10333) Use of int in max_burst socket option.
[  309.436631][T10333] Use struct sctp_assoc_value instead
[  309.466279][T10337] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  309.544587][ T4925] Bluetooth: hci4: unexpected event for opcode 0x2023
[  309.606868][T10337] EXT4-fs (loop0): 1 truncate cleaned up
[  309.664013][T10337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.702499][T10337] fscrypt (loop0, inode 18): Direct key flag not allowed with different contents and filenames modes
[  309.794847][T10347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.795460][T10347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.796143][T10347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.859271][ T5609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.139144][T10357] smc: net device vcan0 applied user defined pnetid SYZ1
[  310.141913][T10357] smc: net device vcan0 erased user defined pnetid SYZ1
[  310.201448][   T32] net_ratelimit: 2 callbacks suppressed
[  310.201466][   T32] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.313057][T10360] ------------[ cut here ]------------
[  310.313070][T10360] !chanctx_conf
[  310.313083][T10360] WARNING: net/mac80211/rate.c:51 at rate_control_rate_init+0x627/0x6b0, CPU#1: syz.4.1645/10360
[  310.313125][T10360] Modules linked in:
[  310.313145][T10360] CPU: 1 UID: 0 PID: 10360 Comm: syz.4.1645 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  310.313171][T10360] Tainted: [L]=SOFTLOCKUP
[  310.313179][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  310.313191][T10360] RIP: 0010:rate_control_rate_init+0x627/0x6b0
[  310.313216][T10360] Code: 02 02 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cb 2f 91 00 cc e8 75 cc 2a f7 90 0f 0b 90 eb e1 e8 6a cc 2a f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 00 00 00
[  310.313233][T10360] RSP: 0018:ffffc9000e62efb8 EFLAGS: 00010283
[  310.313250][T10360] RAX: ffffffff8a99cae6 RBX: ffff8880624d8000 RCX: 0000000000080000
[  310.313266][T10360] RDX: ffffc90006f0a000 RSI: 0000000000002036 RDI: 0000000000002037
[  310.313280][T10360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  310.313290][T10360] R10: dffffc0000000000 R11: ffffed100c49b041 R12: 1ffff1100c49b00a
[  310.313303][T10360] R13: ffff88805dc51160 R14: 0000000000000001 R15: ffffffff8a99c602
[  310.313315][T10360] FS:  00007f252e4566c0(0000) GS:ffff88812602a000(0000) knlGS:0000000000000000
[  310.313333][T10360] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  310.313346][T10360] CR2: 0000200000001080 CR3: 0000000035318000 CR4: 00000000003526f0
[  310.313365][T10360] Call Trace:
[  310.313373][T10360]  <TASK>
[  310.313386][T10360]  rate_control_rate_init_all_links+0x109/0x1a0
[  310.313418][T10360]  sta_apply_auth_flags+0x1c2/0x400
[  310.313455][T10360]  sta_apply_parameters+0x1098/0x18a0
[  310.313494][T10360]  ieee80211_add_station+0x3e6/0x710
[  310.313520][T10360]  rdev_add_station+0xfc/0x290
[  310.313554][T10360]  nl80211_new_station+0x1cab/0x2130
[  310.313596][T10360]  ? __rtnl_unlock+0xc8/0xf0
[  310.313628][T10360]  ? __pfx_nl80211_new_station+0x10/0x10
[  310.313652][T10360]  ? do_raw_spin_lock+0x12b/0x2f0
[  310.313704][T10360]  ? nl80211_pre_doit+0x57c/0x8d0
[  310.313734][T10360]  genl_family_rcv_msg_doit+0x22a/0x330
[  310.313763][T10360]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  310.313795][T10360]  ? bpf_lsm_capable+0x9/0x20
[  310.313814][T10360]  ? security_capable+0x7e/0x2c0
[  310.313844][T10360]  genl_rcv_msg+0x61c/0x7a0
[  310.313870][T10360]  ? __pfx_genl_rcv_msg+0x10/0x10
[  310.313886][T10360]  ? ref_tracker_free+0x673/0x820
[  310.313907][T10360]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  310.313929][T10360]  ? __pfx_nl80211_new_station+0x10/0x10
[  310.313955][T10360]  ? __pfx_nl80211_post_doit+0x10/0x10
[  310.313978][T10360]  ? ____sys_sendmsg+0x55c/0x870
[  310.314001][T10360]  ? ___sys_sendmsg+0x2a5/0x360
[  310.314021][T10360]  ? __x64_sys_sendmsg+0x1c3/0x2a0
[  310.314042][T10360]  ? do_syscall_64+0x15f/0xf80
[  310.314063][T10360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.314086][T10360]  netlink_rcv_skb+0x232/0x4b0
[  310.314107][T10360]  ? __pfx_genl_rcv_msg+0x10/0x10
[  310.314126][T10360]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  310.314160][T10360]  ? netlink_deliver_tap+0x2e/0x1b0
[  310.314183][T10360]  ? netlink_deliver_tap+0x2e/0x1b0
[  310.314212][T10360]  genl_rcv+0x28/0x40
[  310.314230][T10360]  netlink_unicast+0x780/0x920
[  310.314262][T10360]  netlink_sendmsg+0x813/0xb40
[  310.314294][T10360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.314322][T10360]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  310.314357][T10360]  ? aa_sock_msg_perm+0x122/0x200
[  310.314383][T10360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.314407][T10360]  sock_sendmsg_nosec+0x112/0x150
[  310.314430][T10360]  ____sys_sendmsg+0x55c/0x870
[  310.314461][T10360]  ? __pfx_____sys_sendmsg+0x10/0x10
[  310.314495][T10360]  ? import_iovec+0x73/0xa0
[  310.314522][T10360]  ___sys_sendmsg+0x2a5/0x360
[  310.314546][T10360]  ? __lock_acquire+0x6b5/0x2d10
[  310.314589][T10360]  ? __pfx____sys_sendmsg+0x10/0x10
[  310.314620][T10360]  ? futex_wait+0x2a2/0x390
[  310.314666][T10360]  ? __fget_files+0x2a/0x420
[  310.314686][T10360]  ? __fget_files+0x3a6/0x420
[  310.314714][T10360]  __x64_sys_sendmsg+0x1c3/0x2a0
[  310.314743][T10360]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  310.314778][T10360]  ? rcu_is_watching+0x15/0xb0
[  310.314805][T10360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.314826][T10360]  do_syscall_64+0x15f/0xf80
[  310.314852][T10360]  ? trace_irq_disable+0x3b/0x140
[  310.314878][T10360]  ? clear_bhb_loop+0x40/0x90
[  310.314902][T10360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.314921][T10360] RIP: 0033:0x7f25301fcdd9
[  310.314940][T10360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.314957][T10360] RSP: 002b:00007f252e456028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  310.314976][T10360] RAX: ffffffffffffffda RBX: 00007f2530475fa0 RCX: 00007f25301fcdd9
[  310.314989][T10360] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[  310.315001][T10360] RBP: 00007f2530292d69 R08: 0000000000000000 R09: 0000000000000000
[  310.315013][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.315024][T10360] R13: 00007f2530476038 R14: 00007f2530475fa0 R15: 00007ffc07f85a78
[  310.315054][T10360]  </TASK>
[  310.315071][T10360] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  310.315088][T10360] CPU: 1 UID: 0 PID: 10360 Comm: syz.4.1645 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  310.315115][T10360] Tainted: [L]=SOFTLOCKUP
[  310.315122][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  310.315135][T10360] Call Trace:
[  310.315143][T10360]  <TASK>
[  310.315151][T10360]  vpanic+0x56c/0xa60
[  310.315178][T10360]  ? __pfx__printk+0x10/0x10
[  310.315195][T10360]  ? __pfx_vpanic+0x10/0x10
[  310.315216][T10360]  ? is_bpf_text_address+0x292/0x2b0
[  310.315243][T10360]  ? is_bpf_text_address+0x26/0x2b0
[  310.315277][T10360]  panic+0xc5/0xd0
[  310.315301][T10360]  ? __pfx_panic+0x10/0x10
[  310.315340][T10360]  __warn+0x315/0x4c0
[  310.315363][T10360]  ? rate_control_rate_init+0x627/0x6b0
[  310.315388][T10360]  ? rate_control_rate_init+0x627/0x6b0
[  310.315412][T10360]  __report_bug+0x29a/0x540
[  310.315443][T10360]  ? rate_control_rate_init+0x627/0x6b0
[  310.315466][T10360]  ? __pfx___report_bug+0x10/0x10
[  310.315490][T10360]  ? __lock_acquire+0x6b5/0x2d10
[  310.315520][T10360]  ? __lock_acquire+0x6b5/0x2d10
[  310.315552][T10360]  ? rate_control_rate_init+0x627/0x6b0
[  310.315581][T10360]  report_bug+0x16a/0x220
[  310.315605][T10360]  ? rate_control_rate_init+0x627/0x6b0
[  310.315626][T10360]  ? rate_control_rate_init+0x629/0x6b0
[  310.315647][T10360]  handle_bug+0x9c/0x200
[  310.315665][T10360]  exc_invalid_op+0x1a/0x50
[  310.315683][T10360]  asm_exc_invalid_op+0x1a/0x20
[  310.315699][T10360] RIP: 0010:rate_control_rate_init+0x627/0x6b0
[  310.315722][T10360] Code: 02 02 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cb 2f 91 00 cc e8 75 cc 2a f7 90 0f 0b 90 eb e1 e8 6a cc 2a f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 83 00 00 00
[  310.315736][T10360] RSP: 0018:ffffc9000e62efb8 EFLAGS: 00010283
[  310.315751][T10360] RAX: ffffffff8a99cae6 RBX: ffff8880624d8000 RCX: 0000000000080000
[  310.315765][T10360] RDX: ffffc90006f0a000 RSI: 0000000000002036 RDI: 0000000000002037
[  310.315778][T10360] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  310.315788][T10360] R10: dffffc0000000000 R11: ffffed100c49b041 R12: 1ffff1100c49b00a
[  310.315802][T10360] R13: ffff88805dc51160 R14: 0000000000000001 R15: ffffffff8a99c602
[  310.315815][T10360]  ? rate_control_rate_init+0x142/0x6b0
[  310.315839][T10360]  ? rate_control_rate_init+0x626/0x6b0
[  310.315867][T10360]  ? rate_control_rate_init+0x626/0x6b0
[  310.315894][T10360]  rate_control_rate_init_all_links+0x109/0x1a0
[  310.315921][T10360]  sta_apply_auth_flags+0x1c2/0x400
[  310.315953][T10360]  sta_apply_parameters+0x1098/0x18a0
[  310.315992][T10360]  ieee80211_add_station+0x3e6/0x710
[  310.316018][T10360]  rdev_add_station+0xfc/0x290
[  310.316048][T10360]  nl80211_new_station+0x1cab/0x2130
[  310.316084][T10360]  ? __rtnl_unlock+0xc8/0xf0
[  310.316113][T10360]  ? __pfx_nl80211_new_station+0x10/0x10
[  310.316135][T10360]  ? do_raw_spin_lock+0x12b/0x2f0
[  310.316186][T10360]  ? nl80211_pre_doit+0x57c/0x8d0
[  310.316214][T10360]  genl_family_rcv_msg_doit+0x22a/0x330
[  310.316240][T10360]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  310.316271][T10360]  ? bpf_lsm_capable+0x9/0x20
[  310.316288][T10360]  ? security_capable+0x7e/0x2c0
[  310.316314][T10360]  genl_rcv_msg+0x61c/0x7a0
[  310.316338][T10360]  ? __pfx_genl_rcv_msg+0x10/0x10
[  310.316355][T10360]  ? ref_tracker_free+0x673/0x820
[  310.316373][T10360]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  310.316393][T10360]  ? __pfx_nl80211_new_station+0x10/0x10
[  310.316415][T10360]  ? __pfx_nl80211_post_doit+0x10/0x10
[  310.316434][T10360]  ? ____sys_sendmsg+0x55c/0x870
[  310.316455][T10360]  ? ___sys_sendmsg+0x2a5/0x360
[  310.316476][T10360]  ? __x64_sys_sendmsg+0x1c3/0x2a0
[  310.316496][T10360]  ? do_syscall_64+0x15f/0xf80
[  310.316518][T10360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.316544][T10360]  netlink_rcv_skb+0x232/0x4b0
[  310.316567][T10360]  ? __pfx_genl_rcv_msg+0x10/0x10
[  310.316596][T10360]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  310.316631][T10360]  ? netlink_deliver_tap+0x2e/0x1b0
[  310.316653][T10360]  ? netlink_deliver_tap+0x2e/0x1b0
[  310.316679][T10360]  genl_rcv+0x28/0x40
[  310.316696][T10360]  netlink_unicast+0x780/0x920
[  310.316727][T10360]  netlink_sendmsg+0x813/0xb40
[  310.316760][T10360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.316787][T10360]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  310.316816][T10360]  ? aa_sock_msg_perm+0x122/0x200
[  310.316840][T10360]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.316862][T10360]  sock_sendmsg_nosec+0x112/0x150
[  310.316884][T10360]  ____sys_sendmsg+0x55c/0x870
[  310.316913][T10360]  ? __pfx_____sys_sendmsg+0x10/0x10
[  310.316947][T10360]  ? import_iovec+0x73/0xa0
[  310.316972][T10360]  ___sys_sendmsg+0x2a5/0x360
[  310.316996][T10360]  ? __lock_acquire+0x6b5/0x2d10
[  310.317024][T10360]  ? __pfx____sys_sendmsg+0x10/0x10
[  310.317055][T10360]  ? futex_wait+0x2a2/0x390
[  310.317102][T10360]  ? __fget_files+0x2a/0x420
[  310.317119][T10360]  ? __fget_files+0x3a6/0x420
[  310.317147][T10360]  __x64_sys_sendmsg+0x1c3/0x2a0
[  310.317174][T10360]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  310.317207][T10360]  ? rcu_is_watching+0x15/0xb0
[  310.317237][T10360]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.317257][T10360]  do_syscall_64+0x15f/0xf80
[  310.317281][T10360]  ? trace_irq_disable+0x3b/0x140
[  310.317305][T10360]  ? clear_bhb_loop+0x40/0x90
[  310.317327][T10360]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.317344][T10360] RIP: 0033:0x7f25301fcdd9
[  310.317360][T10360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.317375][T10360] RSP: 002b:00007f252e456028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  310.317393][T10360] RAX: ffffffffffffffda RBX: 00007f2530475fa0 RCX: 00007f25301fcdd9
[  310.317406][T10360] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[  310.317418][T10360] RBP: 00007f2530292d69 R08: 0000000000000000 R09: 0000000000000000
[  310.317430][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.317440][T10360] R13: 00007f2530476038 R14: 00007f2530475fa0 R15: 00007ffc07f85a78
[  310.317472][T10360]  </TASK>
[  310.318153][T10360] Kernel Offset: disabled