last executing test programs:

1m15.563756024s ago: executing program 2 (id=53):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)="04", 0x1}], 0x1, 0x0, 0x50000000)

1m15.470322344s ago: executing program 2 (id=55):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x81800, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '3\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x1a8, 0x138, 0x1, 0x0, 0x400, 0x0, 0x0, @by_dev={r1}, [@flakey={0x0, 0x90, 0x0, 0x70, 'flakey\x00', {{@ram={'/dev/ram', 0x1}, 0x20, '1'}, 0x20, 0x3, 0x20, 0x3, ' 1 error_reads'}}]})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x85c10, 0x0, 0x0, @by_dev={r1}, [@zero={0x0, 0x1090, 0x0, 0x30}]})

1m15.272236534s ago: executing program 2 (id=57):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$cont(0x19, r0, 0xd, 0xf)

1m15.041234828s ago: executing program 2 (id=61):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x553a, &(0x7f0000006040)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100))

1m14.016336872s ago: executing program 2 (id=67):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x149a02, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d06, 0x0, 0x7ff}]})

1m12.351454701s ago: executing program 2 (id=74):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '3\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_dev={r1}, [@error={0x0, 0xc40, 0x0, 0x30}]})
ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}})

1m11.909488616s ago: executing program 32 (id=74):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {<r1=>0x0, {'syz', 0x0, '0\x00'}, @uuid={'LVM-syz', 0x0, '3\x00'}}})
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000b80)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x20000, 0x0, 0x0, @by_dev={r1}, [@error={0x0, 0xc40, 0x0, 0x30}]})
ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}})

4.832950308s ago: executing program 3 (id=670):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000800)=ANY=[], 0x0)

2.607117655s ago: executing program 4 (id=681):
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002fc0)=@newtfilter={0x8a8, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x878, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf001}}]}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000000, 0xfffffffa, 0x9, 0x0, {0x6, 0x1, 0x9, 0x3, 0x4, 0x676}, {0x9, 0x1, 0xfffd, 0xc9, 0x3, 0x456}, 0x1, 0x503, 0xe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1d4, 0x3, 0x401, 0x7, 0x5, 0x3, 0x0, 0x80, 0xd9, 0x0, 0x81, 0x5, 0x2, 0x2, 0x3, 0x401, 0x3, 0x3, 0x4, 0x1, 0x10000, 0x8, 0x400, 0x1, 0x2, 0xff, 0x2, 0xb22, 0x3, 0x2, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x22, 0x1c8b, 0x4, 0x10001, 0x4, 0x8, 0x80000001, 0x6, 0x4, 0x3, 0x7, 0xf92, 0x17, 0xa0f7, 0x225, 0x8, 0x6, 0x2, 0x10001, 0x6, 0xe1c3, 0x4d, 0x3, 0x6, 0x398, 0x0, 0xc1a, 0x4, 0x8, 0x101, 0x8, 0xfffffff8, 0x634, 0xb, 0x5, 0x6, 0xffffffc4, 0x5, 0x0, 0x2, 0x5, 0x1, 0x4, 0x5, 0x4eb6, 0x400, 0x8000, 0x3, 0x7, 0xf76, 0x3, 0xf20, 0x80000001, 0x73, 0x4, 0x2, 0x9, 0x8, 0x1, 0xa, 0x4d989b25, 0x5, 0x0, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x6, 0xffff0001, 0x100, 0x1, 0xd0ef, 0x2, 0xc9, 0x7, 0x7, 0xffffffff, 0x4, 0x5, 0x6, 0x5, 0x44c1, 0xffffff01, 0xffffffff, 0xffff, 0x3ff, 0x8, 0x3, 0xb, 0x6, 0x1, 0xffffffff, 0x7fff, 0x4, 0x2, 0x7, 0x1e4, 0x9, 0x5, 0x2, 0x5, 0x5, 0x2, 0x4, 0x2, 0x8, 0x0, 0x8, 0x200, 0x5, 0x8, 0x7, 0x9, 0x7, 0x7, 0x4, 0x0, 0x6, 0x160d, 0x4, 0xfffffff9, 0xc, 0x5, 0x5, 0xff, 0xdc, 0x2, 0x9, 0x1ff, 0xa, 0x3, 0x437, 0x2, 0xfffffffb, 0xfa7, 0x9, 0x3, 0x80000001, 0x200, 0x10000, 0xea49, 0x8, 0xff, 0x5, 0xff, 0x3, 0x8, 0x81, 0x7, 0x1, 0x1, 0x1, 0x3, 0x7, 0xfc4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x9, 0xd, 0x10, 0x3ff, 0x7, 0x5, 0x4, 0xe136, 0x48d, 0x6, 0x10, 0x0, 0x6, 0x3, 0x2, 0xdc, 0xfe, 0x3, 0x6, 0x1, 0x7, 0x1, 0x5, 0x0, 0x9, 0x8, 0x9, 0x4, 0x8, 0x7, 0x1, 0xfff, 0x146e, 0x400, 0x0, 0xa, 0x3, 0x83e1, 0x1b, 0x888, 0x7, 0x288, 0x7ff, 0x6, 0x5, 0x10, 0x4, 0x80000001, 0x7, 0x4, 0x20, 0x6eb, 0x0, 0xfffffff8, 0x4, 0x1, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0x0, 0xfffffc4c, 0x1, 0x200, 0x7, 0x200, 0x7a5, 0x4, 0x1, 0x3, 0xfffffffc, 0x3, 0xab, 0x8142, 0x2, 0x0, 0x1000, 0x8, 0x40, 0x74e, 0x3623, 0x8, 0x86, 0x5, 0x5, 0x8001, 0x5045c494, 0x5, 0x8, 0x326a, 0x1, 0x0, 0x9, 0x1, 0x617e57a8, 0x7fffffff, 0x1000, 0x9e, 0xd5, 0x7, 0x56fc, 0xd, 0xfffffcfb, 0x3, 0x9, 0x7, 0xffff, 0x5, 0x80000000, 0x9, 0x4, 0x9, 0x2c72, 0x8, 0x5, 0x3, 0xa5, 0xa, 0x0, 0x9, 0x80000000, 0xfc, 0x0, 0x79255d0e, 0x8, 0xfffffff7, 0x6963, 0x0, 0x1, 0x5, 0x400, 0x0, 0x8, 0xf, 0x7fff, 0xfffffffd, 0x1, 0xffffffff, 0x7, 0x0, 0xa, 0xef8f, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10000000, 0x0, 0x80000001, 0x0, 0xffffffff, 0x83, 0x4, 0x8, 0x2, 0x0, 0xff, 0xc3e, 0x7, 0xccb, 0xfffffff8, 0xfffffff9, 0xab, 0x10000, 0x0, 0x3, 0x752a5eb9, 0x1, 0x7, 0xedf4, 0x2b3, 0x1, 0x6, 0x6, 0x100, 0x8, 0x5, 0x6, 0x6, 0x7, 0x3, 0xfffffff7, 0x1, 0x7, 0xff, 0x48, 0x2e8, 0x3, 0x10, 0x7e69c17e, 0x9, 0x7648, 0x1000, 0x8, 0xf1, 0x3, 0xd7, 0x6, 0x3, 0x7, 0x9, 0x7f, 0x5, 0x200, 0x0, 0x9, 0x7, 0x5e, 0x4, 0x2, 0x7, 0x7, 0x7ff, 0x9a, 0x345f, 0xe, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffb, 0x9, 0x4, 0x8, 0x9, 0x3, 0xfffffff7, 0x3, 0x7, 0x1, 0xf7a5, 0x0, 0x1, 0x9, 0x400, 0x81, 0x8, 0x7, 0x7ff, 0x5, 0x7f, 0x1, 0xfffffffe, 0xffffffff, 0x6, 0xff, 0x10001, 0x7, 0x1, 0x7, 0x6, 0xde3, 0xfffffffa, 0x200, 0x8, 0x8, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x6, 0xc, 0x6, 0x0, 0xffffffff, 0x5, 0x8667, 0x80, 0x0, 0x6, 0x9, 0x2, 0x4, 0x5, 0x6ae3, 0x1, 0x1, 0x7, 0x3, 0x1, 0x9, 0x5, 0x0, 0xfffffffa, 0x81, 0x3, 0x6, 0x8, 0x10000, 0x7, 0x7, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x226c0000, 0x5f7e, 0xffffffff, 0x5, 0x0, 0xff, 0xad9, 0x4d3ae222, 0xfffffffe, 0x5, 0x9, 0x0, 0x9, 0x2]}]}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x40085)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300400000000040200", @ANYRES8], 0x30}, 0x40)
syz_emit_ethernet(0xfed7, 0x0, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000040))
write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 0'], 0x2a)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r5, &(0x7f0000000200)='m', 0x1)
r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100))
r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r7, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000140)=0xfff)
close(r3)

2.338153732s ago: executing program 3 (id=684):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0)

2.275894718s ago: executing program 3 (id=685):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x1}, 0x10)
write(r0, &(0x7f0000000080)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0)

2.06750989s ago: executing program 3 (id=687):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

2.009461416s ago: executing program 3 (id=689):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020)

1.895299257s ago: executing program 1 (id=691):
syz_mount_image$xfs(&(0x7f0000009440), &(0x7f0000009480)='./file0\x00', 0x0, &(0x7f00000094c0), 0x1, 0x9414, &(0x7f0000009500)="$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")
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x100)
unlink(&(0x7f0000031b80)='./file1\x00')
close(r0)

1.86953147s ago: executing program 3 (id=692):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x20, 0xe, 0x6, "3147d7049a6c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000780)={0x0, 0x13, 0x1, "a4"}, 0x0, 0x0, 0x0, 0x0})

1.837490063s ago: executing program 4 (id=693):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e6574"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

1.619443925s ago: executing program 4 (id=694):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0xd, 0xb, 0x1)

1.57496586s ago: executing program 0 (id=695):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.548510472s ago: executing program 4 (id=696):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000300)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0x1c, 0x0}, 0x24000000)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)

1.423459155s ago: executing program 0 (id=697):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
setns(0xc9, 0x0)
r0 = socket(0x1f, 0x5, 0x8)
bind(r0, &(0x7f0000000280)=@generic={0x1f, "0000000000000100"}, 0xa)
setsockopt(r0, 0x112, 0x7, &(0x7f0000000300), 0x4)

1.306853247s ago: executing program 0 (id=698):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000e40)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce)

1.008599447s ago: executing program 1 (id=699):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1011})

929.653505ms ago: executing program 0 (id=700):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000003580)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000640)="d022", 0x2}], 0x1, 0x0, 0x0, 0x20048040}], 0x1, 0x20000021)

715.163567ms ago: executing program 0 (id=701):
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002fc0)=@newtfilter={0x8a8, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x878, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf001}}]}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000000, 0xfffffffa, 0x9, 0x0, {0x6, 0x1, 0x9, 0x3, 0x4, 0x676}, {0x9, 0x1, 0xfffd, 0xc9, 0x3, 0x456}, 0x1, 0x503, 0xe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1d4, 0x3, 0x401, 0x7, 0x5, 0x3, 0x0, 0x80, 0xd9, 0x0, 0x81, 0x5, 0x2, 0x2, 0x3, 0x401, 0x3, 0x3, 0x4, 0x1, 0x10000, 0x8, 0x400, 0x1, 0x2, 0xff, 0x2, 0xb22, 0x3, 0x2, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x22, 0x1c8b, 0x4, 0x10001, 0x4, 0x8, 0x80000001, 0x6, 0x4, 0x3, 0x7, 0xf92, 0x17, 0xa0f7, 0x225, 0x8, 0x6, 0x2, 0x10001, 0x6, 0xe1c3, 0x4d, 0x3, 0x6, 0x398, 0x0, 0xc1a, 0x4, 0x8, 0x101, 0x8, 0xfffffff8, 0x634, 0xb, 0x5, 0x6, 0xffffffc4, 0x5, 0x0, 0x2, 0x5, 0x1, 0x4, 0x5, 0x4eb6, 0x400, 0x8000, 0x3, 0x7, 0xf76, 0x3, 0xf20, 0x80000001, 0x73, 0x4, 0x2, 0x9, 0x8, 0x1, 0xa, 0x4d989b25, 0x5, 0x0, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x6, 0xffff0001, 0x100, 0x1, 0xd0ef, 0x2, 0xc9, 0x7, 0x7, 0xffffffff, 0x4, 0x5, 0x6, 0x5, 0x44c1, 0xffffff01, 0xffffffff, 0xffff, 0x3ff, 0x8, 0x3, 0xb, 0x6, 0x1, 0xffffffff, 0x7fff, 0x4, 0x2, 0x7, 0x1e4, 0x9, 0x5, 0x2, 0x5, 0x5, 0x2, 0x4, 0x2, 0x8, 0x0, 0x8, 0x200, 0x5, 0x8, 0x7, 0x9, 0x7, 0x7, 0x4, 0x0, 0x6, 0x160d, 0x4, 0xfffffff9, 0xc, 0x5, 0x5, 0xff, 0xdc, 0x2, 0x9, 0x1ff, 0xa, 0x3, 0x437, 0x2, 0xfffffffb, 0xfa7, 0x9, 0x3, 0x80000001, 0x200, 0x10000, 0xea49, 0x8, 0xff, 0x5, 0xff, 0x3, 0x8, 0x81, 0x7, 0x1, 0x1, 0x1, 0x3, 0x7, 0xfc4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x9, 0xd, 0x10, 0x3ff, 0x7, 0x5, 0x4, 0xe136, 0x48d, 0x6, 0x10, 0x0, 0x6, 0x3, 0x2, 0xdc, 0xfe, 0x3, 0x6, 0x1, 0x7, 0x1, 0x5, 0x0, 0x9, 0x8, 0x9, 0x4, 0x8, 0x7, 0x1, 0xfff, 0x146e, 0x400, 0x0, 0xa, 0x3, 0x83e1, 0x1b, 0x888, 0x7, 0x288, 0x7ff, 0x6, 0x5, 0x10, 0x4, 0x80000001, 0x7, 0x4, 0x20, 0x6eb, 0x0, 0xfffffff8, 0x4, 0x1, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0x0, 0xfffffc4c, 0x1, 0x200, 0x7, 0x200, 0x7a5, 0x4, 0x1, 0x3, 0xfffffffc, 0x3, 0xab, 0x8142, 0x2, 0x0, 0x1000, 0x8, 0x40, 0x74e, 0x3623, 0x8, 0x86, 0x5, 0x5, 0x8001, 0x5045c494, 0x5, 0x8, 0x326a, 0x1, 0x0, 0x9, 0x1, 0x617e57a8, 0x7fffffff, 0x1000, 0x9e, 0xd5, 0x7, 0x56fc, 0xd, 0xfffffcfb, 0x3, 0x9, 0x7, 0xffff, 0x5, 0x80000000, 0x9, 0x4, 0x9, 0x2c72, 0x8, 0x5, 0x3, 0xa5, 0xa, 0x0, 0x9, 0x80000000, 0xfc, 0x0, 0x79255d0e, 0x8, 0xfffffff7, 0x6963, 0x0, 0x1, 0x5, 0x400, 0x0, 0x8, 0xf, 0x7fff, 0xfffffffd, 0x1, 0xffffffff, 0x7, 0x0, 0xa, 0xef8f, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10000000, 0x0, 0x80000001, 0x0, 0xffffffff, 0x83, 0x4, 0x8, 0x2, 0x0, 0xff, 0xc3e, 0x7, 0xccb, 0xfffffff8, 0xfffffff9, 0xab, 0x10000, 0x0, 0x3, 0x752a5eb9, 0x1, 0x7, 0xedf4, 0x2b3, 0x1, 0x6, 0x6, 0x100, 0x8, 0x5, 0x6, 0x6, 0x7, 0x3, 0xfffffff7, 0x1, 0x7, 0xff, 0x48, 0x2e8, 0x3, 0x10, 0x7e69c17e, 0x9, 0x7648, 0x1000, 0x8, 0xf1, 0x3, 0xd7, 0x6, 0x3, 0x7, 0x9, 0x7f, 0x5, 0x200, 0x0, 0x9, 0x7, 0x5e, 0x4, 0x2, 0x7, 0x7, 0x7ff, 0x9a, 0x345f, 0xe, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffb, 0x9, 0x4, 0x8, 0x9, 0x3, 0xfffffff7, 0x3, 0x7, 0x1, 0xf7a5, 0x0, 0x1, 0x9, 0x400, 0x81, 0x8, 0x7, 0x7ff, 0x5, 0x7f, 0x1, 0xfffffffe, 0xffffffff, 0x6, 0xff, 0x10001, 0x7, 0x1, 0x7, 0x6, 0xde3, 0xfffffffa, 0x200, 0x8, 0x8, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x6, 0xc, 0x6, 0x0, 0xffffffff, 0x5, 0x8667, 0x80, 0x0, 0x6, 0x9, 0x2, 0x4, 0x5, 0x6ae3, 0x1, 0x1, 0x7, 0x3, 0x1, 0x9, 0x5, 0x0, 0xfffffffa, 0x81, 0x3, 0x6, 0x8, 0x10000, 0x7, 0x7, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x226c0000, 0x5f7e, 0xffffffff, 0x5, 0x0, 0xff, 0xad9, 0x4d3ae222, 0xfffffffe, 0x5, 0x9, 0x0, 0x9, 0x2]}]}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x40085)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300400000000040200", @ANYRES8], 0x30}, 0x40)
syz_emit_ethernet(0xfed7, 0x0, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000040))
write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 0'], 0x2a)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r5, &(0x7f0000000200)='m', 0x1)
r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100))
r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r7, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000140)=0xfff)
close(r3)

614.698447ms ago: executing program 4 (id=702):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x2)
syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0x10, 0x0, 0x10, 0x5, @dev={0xac, 0x14, 0x14, 0x26}, 0x7, "99003a2342db"}]}}}}}}}}, 0x0)

520.458156ms ago: executing program 4 (id=703):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x103800)
syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x189482)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x3, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x0)

489.45854ms ago: executing program 1 (id=704):
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./security\x00', 0x43)
mount(0x0, &(0x7f00000007c0)='./security\x00', &(0x7f0000000800)='securityfs\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./security/ima/policy\x00', 0x1, 0x0)
write(r0, &(0x7f0000000880)='#', 0x1)

408.401068ms ago: executing program 1 (id=705):
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

299.579339ms ago: executing program 1 (id=706):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, 0x0, 0x0, 0xc, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8)
syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f704000000000000009ae5d322348df7"}]}}}}}}}}, 0x0)

286.490551ms ago: executing program 1 (id=707):
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002fc0)=@newtfilter={0x8a8, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x878, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf001}}]}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000000, 0xfffffffa, 0x9, 0x0, {0x6, 0x1, 0x9, 0x3, 0x4, 0x676}, {0x9, 0x1, 0xfffd, 0xc9, 0x3, 0x456}, 0x1, 0x503, 0xe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1d4, 0x3, 0x401, 0x7, 0x5, 0x3, 0x0, 0x80, 0xd9, 0x0, 0x81, 0x5, 0x2, 0x2, 0x3, 0x401, 0x3, 0x3, 0x4, 0x1, 0x10000, 0x8, 0x400, 0x1, 0x2, 0xff, 0x2, 0xb22, 0x3, 0x2, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x22, 0x1c8b, 0x4, 0x10001, 0x4, 0x8, 0x80000001, 0x6, 0x4, 0x3, 0x7, 0xf92, 0x17, 0xa0f7, 0x225, 0x8, 0x6, 0x2, 0x10001, 0x6, 0xe1c3, 0x4d, 0x3, 0x6, 0x398, 0x0, 0xc1a, 0x4, 0x8, 0x101, 0x8, 0xfffffff8, 0x634, 0xb, 0x5, 0x6, 0xffffffc4, 0x5, 0x0, 0x2, 0x5, 0x1, 0x4, 0x5, 0x4eb6, 0x400, 0x8000, 0x3, 0x7, 0xf76, 0x3, 0xf20, 0x80000001, 0x73, 0x4, 0x2, 0x9, 0x8, 0x1, 0xa, 0x4d989b25, 0x5, 0x0, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x6, 0xffff0001, 0x100, 0x1, 0xd0ef, 0x2, 0xc9, 0x7, 0x7, 0xffffffff, 0x4, 0x5, 0x6, 0x5, 0x44c1, 0xffffff01, 0xffffffff, 0xffff, 0x3ff, 0x8, 0x3, 0xb, 0x6, 0x1, 0xffffffff, 0x7fff, 0x4, 0x2, 0x7, 0x1e4, 0x9, 0x5, 0x2, 0x5, 0x5, 0x2, 0x4, 0x2, 0x8, 0x0, 0x8, 0x200, 0x5, 0x8, 0x7, 0x9, 0x7, 0x7, 0x4, 0x0, 0x6, 0x160d, 0x4, 0xfffffff9, 0xc, 0x5, 0x5, 0xff, 0xdc, 0x2, 0x9, 0x1ff, 0xa, 0x3, 0x437, 0x2, 0xfffffffb, 0xfa7, 0x9, 0x3, 0x80000001, 0x200, 0x10000, 0xea49, 0x8, 0xff, 0x5, 0xff, 0x3, 0x8, 0x81, 0x7, 0x1, 0x1, 0x1, 0x3, 0x7, 0xfc4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x9, 0xd, 0x10, 0x3ff, 0x7, 0x5, 0x4, 0xe136, 0x48d, 0x6, 0x10, 0x0, 0x6, 0x3, 0x2, 0xdc, 0xfe, 0x3, 0x6, 0x1, 0x7, 0x1, 0x5, 0x0, 0x9, 0x8, 0x9, 0x4, 0x8, 0x7, 0x1, 0xfff, 0x146e, 0x400, 0x0, 0xa, 0x3, 0x83e1, 0x1b, 0x888, 0x7, 0x288, 0x7ff, 0x6, 0x5, 0x10, 0x4, 0x80000001, 0x7, 0x4, 0x20, 0x6eb, 0x0, 0xfffffff8, 0x4, 0x1, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0x0, 0xfffffc4c, 0x1, 0x200, 0x7, 0x200, 0x7a5, 0x4, 0x1, 0x3, 0xfffffffc, 0x3, 0xab, 0x8142, 0x2, 0x0, 0x1000, 0x8, 0x40, 0x74e, 0x3623, 0x8, 0x86, 0x5, 0x5, 0x8001, 0x5045c494, 0x5, 0x8, 0x326a, 0x1, 0x0, 0x9, 0x1, 0x617e57a8, 0x7fffffff, 0x1000, 0x9e, 0xd5, 0x7, 0x56fc, 0xd, 0xfffffcfb, 0x3, 0x9, 0x7, 0xffff, 0x5, 0x80000000, 0x9, 0x4, 0x9, 0x2c72, 0x8, 0x5, 0x3, 0xa5, 0xa, 0x0, 0x9, 0x80000000, 0xfc, 0x0, 0x79255d0e, 0x8, 0xfffffff7, 0x6963, 0x0, 0x1, 0x5, 0x400, 0x0, 0x8, 0xf, 0x7fff, 0xfffffffd, 0x1, 0xffffffff, 0x7, 0x0, 0xa, 0xef8f, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10000000, 0x0, 0x80000001, 0x0, 0xffffffff, 0x83, 0x4, 0x8, 0x2, 0x0, 0xff, 0xc3e, 0x7, 0xccb, 0xfffffff8, 0xfffffff9, 0xab, 0x10000, 0x0, 0x3, 0x752a5eb9, 0x1, 0x7, 0xedf4, 0x2b3, 0x1, 0x6, 0x6, 0x100, 0x8, 0x5, 0x6, 0x6, 0x7, 0x3, 0xfffffff7, 0x1, 0x7, 0xff, 0x48, 0x2e8, 0x3, 0x10, 0x7e69c17e, 0x9, 0x7648, 0x1000, 0x8, 0xf1, 0x3, 0xd7, 0x6, 0x3, 0x7, 0x9, 0x7f, 0x5, 0x200, 0x0, 0x9, 0x7, 0x5e, 0x4, 0x2, 0x7, 0x7, 0x7ff, 0x9a, 0x345f, 0xe, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffb, 0x9, 0x4, 0x8, 0x9, 0x3, 0xfffffff7, 0x3, 0x7, 0x1, 0xf7a5, 0x0, 0x1, 0x9, 0x400, 0x81, 0x8, 0x7, 0x7ff, 0x5, 0x7f, 0x1, 0xfffffffe, 0xffffffff, 0x6, 0xff, 0x10001, 0x7, 0x1, 0x7, 0x6, 0xde3, 0xfffffffa, 0x200, 0x8, 0x8, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x6, 0xc, 0x6, 0x0, 0xffffffff, 0x5, 0x8667, 0x80, 0x0, 0x6, 0x9, 0x2, 0x4, 0x5, 0x6ae3, 0x1, 0x1, 0x7, 0x3, 0x1, 0x9, 0x5, 0x0, 0xfffffffa, 0x81, 0x3, 0x6, 0x8, 0x10000, 0x7, 0x7, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x226c0000, 0x5f7e, 0xffffffff, 0x5, 0x0, 0xff, 0xad9, 0x4d3ae222, 0xfffffffe, 0x5, 0x9, 0x0, 0x9, 0x2]}]}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x40085)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000", @ANYRES8], 0x30}, 0x40)
syz_emit_ethernet(0xfed7, 0x0, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000040))
write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 0'], 0x2a)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r5, &(0x7f0000000200)='m', 0x1)
r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100))
r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r7, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000140)=0xfff)
close(r3)

0s ago: executing program 0 (id=708):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi2\x00', 0x1, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x4000800)
mknodat$md(0xffffffffffffff9c, &(0x7f0000000940)='./md0\x00', 0x6180, 0x0)
r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000980)='./md0\x00', 0x2, 0x0)
ioctl$RUN_ARRAY(r0, 0x400c0930, 0x0)

kernel console output (not intermixed with test programs):

 T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   76.566054][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.578419][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.586930][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   76.595307][ T5100] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   76.666520][ T5792] (null): rxe_set_mtu: Set mtu to 1024
[   76.680118][ T5789] (null): rxe_set_mtu: Set mtu to 1024
[   76.689078][ T5793] (null): rxe_set_mtu: Set mtu to 1024
[   76.695241][ T5793] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   76.697526][ T5789] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   76.701814][ T5792] rxe_eth0 speed is unknown, defaulting to 1000
[   76.717254][ T5792] rxe_eth0 speed is unknown, defaulting to 1000
[   76.731239][ T5800] (null): rxe_set_mtu: Set mtu to 1024
[   76.736932][ T5792] rxe_eth0 speed is unknown, defaulting to 1000
[   76.750321][ T5800] rdma_rxe: rxe_newlink: failed to add rxe_eth0
[   77.019447][ T5792] infiniband rxe0: set active
[   77.025714][ T5792] infiniband rxe0: added rxe_eth0
[   77.039432][   T27] rxe_eth0 speed is unknown, defaulting to 1000
[   77.099209][ T5792] RDS/IB: rxe0: added
[   77.103892][ T5792] smc: adding ib device rxe0 with port count 1
[   77.113553][ T5792] smc:    ib device rxe0 port 1 has pnetid 
[   77.147532][ T2204] rxe_eth0 speed is unknown, defaulting to 1000
[   77.163408][ T5792] rxe_eth0 speed is unknown, defaulting to 1000
[   77.293029][ T5793] chnl_net:caif_netlink_parms(): no params data found
[   77.341677][ T5789] chnl_net:caif_netlink_parms(): no params data found
[   77.378810][ T5800] chnl_net:caif_netlink_parms(): no params data found
[   77.564496][ T5792] rxe_eth0 speed is unknown, defaulting to 1000
[   77.630022][   T27] rxe_eth0 speed is unknown, defaulting to 1000
[   77.680350][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.688362][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.696122][ T5789] bridge_slave_0: entered allmulticast mode
[   77.703497][ T5789] bridge_slave_0: entered promiscuous mode
[   77.713497][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.720908][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.728409][ T5793] bridge_slave_0: entered allmulticast mode
[   77.735971][ T5793] bridge_slave_0: entered promiscuous mode
[   77.744314][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.751593][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.758838][ T5793] bridge_slave_1: entered allmulticast mode
[   77.765607][ T5793] bridge_slave_1: entered promiscuous mode
[   77.793283][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.800671][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.808422][ T5789] bridge_slave_1: entered allmulticast mode
[   77.815291][ T5789] bridge_slave_1: entered promiscuous mode
[   77.831224][ T5792] rxe_eth0 speed is unknown, defaulting to 1000
[   77.855864][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.883085][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.890369][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.901558][ T5800] bridge_slave_0: entered allmulticast mode
[   77.909558][ T5800] bridge_slave_0: entered promiscuous mode
[   77.947887][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.969055][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.976546][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.983748][ T5800] bridge_slave_1: entered allmulticast mode
[   77.995280][ T5800] bridge_slave_1: entered promiscuous mode
[   78.027502][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.039661][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.065392][ T5793] team0: Port device team_slave_0 added
[   78.073936][ T5793] team0: Port device team_slave_1 added
[   78.082361][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.095023][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.104426][ T5792] rxe_eth0 speed is unknown, defaulting to 1000
[   78.136584][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.143568][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.169902][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.229093][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.237049][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.263447][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.290626][ T5789] team0: Port device team_slave_0 added
[   78.300130][ T5789] team0: Port device team_slave_1 added
[   78.310117][ T5800] team0: Port device team_slave_0 added
[   78.318930][ T5800] team0: Port device team_slave_1 added
[   78.351703][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.358863][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.385588][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.439035][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.446530][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.472500][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.484018][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.491237][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.517217][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.544638][ T5793] hsr_slave_0: entered promiscuous mode
[   78.552678][ T5793] hsr_slave_1: entered promiscuous mode
[   78.579470][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.586885][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   78.616653][ T5803] Bluetooth: hci1: command tx timeout
[   78.616666][ T5797] Bluetooth: hci0: command tx timeout
[   78.630545][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.685635][ T5803] Bluetooth: hci3: command tx timeout
[   78.686607][ T5797] Bluetooth: hci2: command tx timeout
[   78.752116][ T5789] hsr_slave_0: entered promiscuous mode
[   78.758653][ T5789] hsr_slave_1: entered promiscuous mode
[   78.764863][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.772979][ T5789] Cannot create hsr debugfs directory
[   78.851443][ T5800] hsr_slave_0: entered promiscuous mode
[   78.861601][ T5800] hsr_slave_1: entered promiscuous mode
[   78.868725][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   78.876560][ T5800] Cannot create hsr debugfs directory
[   79.173208][ T5792] chnl_net:caif_netlink_parms(): no params data found
[   79.310253][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.355308][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.378615][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.407805][ T5449] infiniband rxe0: set active
[   79.432726][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.448033][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   79.476029][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.483174][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.491390][ T5792] bridge_slave_0: entered allmulticast mode
[   79.499715][ T5792] bridge_slave_0: entered promiscuous mode
[   79.508281][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.515580][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.522845][ T5792] bridge_slave_1: entered allmulticast mode
[   79.529788][ T5792] bridge_slave_1: entered promiscuous mode
[   79.571436][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.591145][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.633313][ T5792] team0: Port device team_slave_0 added
[   79.674659][ T5792] team0: Port device team_slave_1 added
[   79.711051][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.736543][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.749400][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.759280][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.785615][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.804188][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.817371][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.844059][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.851763][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.878288][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.957928][ T5792] hsr_slave_0: entered promiscuous mode
[   79.964565][ T5792] hsr_slave_1: entered promiscuous mode
[   79.971003][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   79.980227][ T5792] Cannot create hsr debugfs directory
[   79.987621][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.000192][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.028272][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.038576][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.169941][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.281599][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[   80.300373][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.313253][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.320677][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.342028][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.353647][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.366153][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.378684][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.385903][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.449823][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.515313][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[   80.540388][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.547623][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.572619][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.613434][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.620722][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.669628][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[   80.687574][ T5797] Bluetooth: hci1: command tx timeout
[   80.695644][ T5797] Bluetooth: hci0: command tx timeout
[   80.741293][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.748716][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.766225][ T5100] Bluetooth: hci2: command tx timeout
[   80.768663][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.771700][ T5797] Bluetooth: hci3: command tx timeout
[   80.778746][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.874456][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.925268][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[   80.954486][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.981251][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.988446][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.042427][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.049726][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.082692][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.171874][ T5792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   81.183354][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.281999][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.312991][ T5793] veth0_vlan: entered promiscuous mode
[   81.378699][ T5793] veth1_vlan: entered promiscuous mode
[   81.453227][ T5789] veth0_vlan: entered promiscuous mode
[   81.474759][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.521618][ T5793] veth0_macvtap: entered promiscuous mode
[   81.534012][ T5789] veth1_vlan: entered promiscuous mode
[   81.551383][ T5793] veth1_macvtap: entered promiscuous mode
[   81.584761][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.609246][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.623763][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.673137][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.682745][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.692654][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.703215][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.723769][ T5789] veth0_macvtap: entered promiscuous mode
[   81.742155][ T5800] veth0_vlan: entered promiscuous mode
[   81.755258][ T5789] veth1_macvtap: entered promiscuous mode
[   81.802508][ T5800] veth1_vlan: entered promiscuous mode
[   81.850914][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.862604][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.873787][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.884532][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   81.895288][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.910407][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.926842][ T5792] veth0_vlan: entered promiscuous mode
[   81.941482][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.951670][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.963447][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.973750][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.018377][ T5792] veth1_vlan: entered promiscuous mode
[   82.050395][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.074516][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.090404][ T5800] veth0_macvtap: entered promiscuous mode
[   82.111363][ T5800] veth1_macvtap: entered promiscuous mode
[   82.132972][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.143793][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.153840][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.166709][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.178388][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.189105][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.199993][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.210118][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.221184][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.232864][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.271645][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.273434][ T5800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.293224][ T5800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.302026][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.309985][ T5800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.319125][ T5800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.355822][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.363703][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.399248][ T5792] veth0_macvtap: entered promiscuous mode
[   82.430170][ T5792] veth1_macvtap: entered promiscuous mode
[   82.465660][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.487501][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.535096][ T5793] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.562892][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.579566][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.589569][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.600347][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.612172][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.624170][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.638079][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.673095][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.697881][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.699277][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.720768][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.733803][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.748834][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.759534][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.771613][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.781944][ T5797] Bluetooth: hci0: command tx timeout
[   82.781979][ T5797] Bluetooth: hci1: command tx timeout
[   82.810093][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.833350][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.843407][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.852426][ T5797] Bluetooth: hci2: command tx timeout
[   82.858095][ T5100] Bluetooth: hci3: command tx timeout
[   82.860522][ T5891] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   82.864708][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.881672][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.950993][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.965289][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.130161][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.143402][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.207458][ T5899] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   83.210649][ T3507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.254989][ T3507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.020657][ T5934] syz.2.20[5934]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   84.115298][ T5934] loop2: detected capacity change from 0 to 4096
[   84.143679][ T5934] EXT4-fs: Ignoring removed mblk_io_submit option
[   84.417652][ T5934] EXT4-fs (loop2): Test dummy encryption mode enabled
[   84.489614][ T5934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   84.704354][ T5934] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.731978][ T5934] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   84.798734][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.846541][ T5100] Bluetooth: hci1: command tx timeout
[   84.853002][ T5100] Bluetooth: hci0: command tx timeout
[   84.928642][ T5100] Bluetooth: hci3: command tx timeout
[   84.929280][ T5797] Bluetooth: hci2: command tx timeout
[   85.004101][ T5939] loop0: detected capacity change from 0 to 32768
[   85.047956][ T5939] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.22 (5939)
[   85.131589][ T5939] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   85.156797][ T5939] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   85.176086][ T5939] BTRFS info (device loop0): setting nodatasum
[   85.184183][ T5939] BTRFS info (device loop0): force zlib compression, level 3
[   85.225967][ T5939] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[   85.262734][ T5939] BTRFS info (device loop0): use lzo compression, level 0
[   85.285735][ T5939] BTRFS info (device loop0): turning on flush-on-commit
[   85.292302][   T28] audit: type=1400 audit(1793038673.493:2): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="f/o" pid=5956 comm="syz.3.27" name="f/o" offset=55
[   85.327696][ T5939] BTRFS info (device loop0): enabling auto defrag
[   85.334225][ T5939] BTRFS info (device loop0): max_inline at 4096
[   85.381871][ T5939] BTRFS info (device loop0): using free space tree
[   85.594050][ T5939] BTRFS info (device loop0): enabling ssd optimizations
[   85.966762][ T5993] loop5: detected capacity change from 0 to 7
[   85.996914][ T5800] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.000988][ T5993] Dev loop5: unable to read RDB block 7
[   86.025663][ T5993]  loop5: unable to read partition table
[   86.031658][ T5993] loop5: partition table beyond EOD, truncated
[   86.059063][ T5993] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[   86.108924][ T1145] loop: Write error at byte offset 4, length 3584.
[   86.126410][    C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[   86.136148][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[   86.255677][ T5154] Dev loop5: unable to read RDB block 7
[   86.261338][ T5154]  loop5: unable to read partition table
[   86.281059][ T5154] loop5: partition table beyond EOD, truncated
[   86.373943][ T6003] rnbd_client L213: map_device: Parameters missing
[   86.581070][ T6008] ip_tables: iptables: counters copy to user failed while replacing table
[   87.015787][ T6021] loop2: detected capacity change from 0 to 164
[   87.093196][ T6019] loop3: detected capacity change from 0 to 2048
[   87.145797][ T5865] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   87.157804][ T6019] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[   87.214447][ T6019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.349827][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   87.369136][ T5865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[   87.406344][ T5865] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   87.426291][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.457323][ T5865] usb 2-1: config 0 descriptor??
[   87.497620][ T5865] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   87.509361][ T5865] dvb-usb: bulk message failed: -22 (3/0)
[   87.542781][ T5865] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   87.593001][ T5865] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   87.603228][ T5865] usb 2-1: media controller created
[   87.618044][ T5865] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.671511][ T5865] dvb-usb: bulk message failed: -22 (6/0)
[   87.705642][ T5865] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   87.716988][ T6015] dvb-usb: bulk message failed: -22 (2/0)
[   87.751563][ T6031] loop2: detected capacity change from 0 to 512
[   87.762148][ T5865] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[   87.813011][ T5865] dvb-usb: schedule remote query interval to 150 msecs.
[   87.831595][ T6031] EXT4-fs (loop2): 1 truncate cleaned up
[   87.837894][ T5865] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   87.852746][ T6031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.882341][ T5865] usb 2-1: USB disconnect, device number 2
[   87.954713][   T28] audit: type=1800 audit(1793038676.163:3): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.47" name="file0" dev="loop2" ino=13 res=0 errno=0
[   88.078920][ T5865] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   88.096666][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.280203][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'.
[   88.411522][ T6051] loop0: detected capacity change from 0 to 164
[   88.793179][ T6066] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.956642][ T6073] block device autoloading is deprecated and will be removed.
[   89.166941][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   89.341609][ T6068] loop2: detected capacity change from 0 to 40427
[   89.367847][ T6068] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   89.374561][ T6068] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   89.396740][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   89.414597][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[   89.434186][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.449141][ T6068] F2FS-fs (loop2): invalid crc value
[   89.620857][ T6077] loop0: detected capacity change from 0 to 32768
[   89.630342][ T6077] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.65 (6077)
[   89.658499][ T6068] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   89.662385][ T6077] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   89.669390][ T6068] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   89.707066][ T6077] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   89.726448][ T6077] BTRFS info (device loop0): setting nodatasum
[   89.741297][ T6077] BTRFS info (device loop0): force zlib compression, level 3
[   89.760374][ T6077] BTRFS info (device loop0): use no compression
[   89.776371][ T6077] BTRFS info (device loop0): turning on flush-on-commit
[   89.793802][ T6077] BTRFS info (device loop0): enabling auto defrag
[   89.814654][ T5789] syz-executor: attempt to access beyond end of device
[   89.814654][ T5789] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   89.815043][ T6077] BTRFS info (device loop0): max_inline at 4096
[   89.840169][ T5789] syz-executor: attempt to access beyond end of device
[   89.840169][ T5789] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   89.875525][ T6077] BTRFS info (device loop0): using free space tree
[   89.937768][    T9] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0
[   89.958686][ T6063] syz.2.57: attempt to access beyond end of device
[   89.958686][ T6063] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   89.975104][ T6063] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   90.032877][    T9] lg-g15 0003:046D:C222.0001: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver
[   90.059955][ T6079] loop3: detected capacity change from 0 to 40427
[   90.078593][ T6077] BTRFS info (device loop0): enabling ssd optimizations
[   90.089647][ T6079] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   90.108556][    T9] usb 2-1: USB disconnect, device number 3
[   90.143403][ T6079] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   90.154855][ T6097] fido_id[6097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[   90.240337][ T6079] F2FS-fs (loop3): invalid crc value
[   90.280727][ T6079] F2FS-fs (loop3): Found nat_bits in checkpoint
[   90.385372][ T5800] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.479490][ T6079] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   90.488224][    T9] rxe_eth0 speed is unknown, defaulting to 1000
[   90.521054][ T6079] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   91.300462][ T1134] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.566161][ T1134] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.688064][ T1134] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.799237][ T1134] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.129953][  T180] cfg80211: failed to load regulatory.db
[   92.739492][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.752559][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.762420][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.773466][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.782321][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   92.801455][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.962206][ T6170] rxe_eth0 speed is unknown, defaulting to 1000
[   94.223618][ T6170] chnl_net:caif_netlink_parms(): no params data found
[   94.246105][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   94.491096][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.534318][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.566127][    T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[   94.575306][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.644634][    T9] usb 4-1: config 0 descriptor??
[   94.756442][ T1134] hsr_slave_0: left promiscuous mode
[   94.776907][ T1134] hsr_slave_1: left promiscuous mode
[   94.808406][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.831248][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.851093][ T6238] loop1: detected capacity change from 0 to 512
[   94.901691][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   94.914418][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1
[   94.922827][ T1134] bridge_slave_1: left allmulticast mode
[   94.928922][ T5797] Bluetooth: hci0: command tx timeout
[   94.937730][ T1134] bridge_slave_1: left promiscuous mode
[   94.944706][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.961277][ T6238] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.98: corrupted in-inode xattr: invalid ea_ino
[   95.001999][ T6238] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.98: couldn't read orphan inode 15 (err -117)
[   95.023204][ T6238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.036869][ T1134] bridge_slave_0: left allmulticast mode
[   95.042554][ T1134] bridge_slave_0: left promiscuous mode
[   95.066525][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.072137][    T9] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   95.103064][    T9] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   95.121637][   T28] audit: type=1800 audit(1793038683.333:4): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.98" name="file1" dev="loop1" ino=18 res=0 errno=0
[   95.141889][    T9] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   95.158582][    T9] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   95.169147][    T9] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   95.191218][    T9] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   95.199314][ T1134] veth1_macvtap: left promiscuous mode
[   95.205305][ T1134] veth0_macvtap: left promiscuous mode
[   95.205502][    T9] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0
[   95.227072][ T1134] veth1_vlan: left promiscuous mode
[   95.235753][ T1134] veth0_vlan: left promiscuous mode
[   95.266509][    T9] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[   95.297009][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.496428][  T180] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   95.592946][ T5867] usb 4-1: USB disconnect, device number 2
[   95.712991][  T180] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   95.725464][  T180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.739669][  T180] usb 1-1: Product: syz
[   95.743917][  T180] usb 1-1: Manufacturer: syz
[   95.748885][ T5860] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   95.758146][  T180] usb 1-1: SerialNumber: syz
[   95.769646][  T180] usb 1-1: config 0 descriptor??
[   95.784894][  T180] gspca_main: stk1135-2.14.0 probing 174f:6a31
[   95.962376][ T5860] usb 2-1: Using ep0 maxpacket: 8
[   95.978090][ T5860] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   96.008972][ T5860] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   96.019855][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   96.031281][ T5860] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   96.042608][ T5860] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   96.056020][ T5860] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   96.065117][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.250618][ T1134] team0 (unregistering): Port device team_slave_1 removed
[   96.306952][ T5860] usb 2-1: GET_CAPABILITIES returned 0
[   96.322972][ T1134] team0 (unregistering): Port device team_slave_0 removed
[   96.328669][ T5860] usbtmc 2-1:16.0: can't read capabilities
[   96.418946][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.484209][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.555378][    T8] usb 2-1: USB disconnect, device number 4
[   96.632594][  T180] gspca_stk1135: reg_w 0x5 err -71
[   96.644429][  T180] gspca_stk1135: serial bus timeout: status=0x00
[   96.664281][  T180] gspca_stk1135: Sensor write failed
[   96.675508][  T180] gspca_stk1135: serial bus timeout: status=0x00
[   96.689169][  T180] gspca_stk1135: Sensor write failed
[   96.694532][  T180] gspca_stk1135: serial bus timeout: status=0x00
[   96.715500][  T180] gspca_stk1135: Sensor read failed
[   96.720798][  T180] gspca_stk1135: serial bus timeout: status=0x00
[   96.747286][  T180] gspca_stk1135: Sensor read failed
[   96.769553][  T180] gspca_stk1135: Detected sensor type unknown (0x0)
[   96.777691][  T180] gspca_stk1135: serial bus timeout: status=0x00
[   96.784064][  T180] gspca_stk1135: Sensor read failed
[   96.794338][  T180] gspca_stk1135: serial bus timeout: status=0x00
[   96.816070][  T180] gspca_stk1135: Sensor read failed
[   96.821440][  T180] gspca_stk1135: serial bus timeout: status=0x00
[   96.832479][  T180] gspca_stk1135: Sensor write failed
[   96.850580][  T180] gspca_stk1135: serial bus timeout: status=0x00
[   96.858011][  T180] gspca_stk1135: Sensor write failed
[   96.863417][  T180] stk1135: probe of 1-1:0.0 failed with error -71
[   96.884078][  T180] usb 1-1: USB disconnect, device number 2
[   97.005833][ T5797] Bluetooth: hci0: command tx timeout
[   97.075225][ T1134] bond0 (unregistering): Released all slaves
[   97.243413][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.265102][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.274513][ T6170] bridge_slave_0: entered allmulticast mode
[   97.285298][ T6170] bridge_slave_0: entered promiscuous mode
[   97.302240][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.313978][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.334297][ T6170] bridge_slave_1: entered allmulticast mode
[   97.354786][ T6170] bridge_slave_1: entered promiscuous mode
[   97.480277][ T6170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.529141][ T6170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.618824][ T6170] team0: Port device team_slave_0 added
[   97.641542][ T6170] team0: Port device team_slave_1 added
[   97.706012][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.723167][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.746032][ T6283] loop3: detected capacity change from 0 to 1024
[   97.762505][ T6170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.764038][ T6283] EXT4-fs: Ignoring removed nobh option
[   97.805343][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.822788][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   97.827733][ T6283] EXT4-fs: Ignoring removed bh option
[   97.859389][ T6170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.890961][ T6283] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled
[   97.922876][ T6283] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[   97.935772][  T180] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   97.950637][ T6283] System zones: 0-1, 3-12
[   97.964681][ T6283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.982758][ T6170] hsr_slave_0: entered promiscuous mode
[   97.990429][ T6170] hsr_slave_1: entered promiscuous mode
[   97.998022][ T6170] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.015515][ T6170] Cannot create hsr debugfs directory
[   98.139165][  T180] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.171321][   T28] audit: type=1800 audit(1793038686.383:5): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.114" name="file1" dev="loop3" ino=15 res=0 errno=0
[   98.212533][  T180] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[   98.227458][ T6283] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   98.245456][  T180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   98.260324][  T180] usb 1-1: Product: syz
[   98.275215][  T180] usb 1-1: Manufacturer: syz
[   98.309915][  T180] usb 1-1: selecting invalid altsetting 1
[   98.332922][  T180] dvb_ttusb_budget: ttusb_init_controller: error
[   98.356972][  T180] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[   98.437052][ T6170] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   98.468409][ T6170] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   98.502002][ T6170] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   98.512498][  T180] DVB: Unable to find symbol cx22700_attach()
[   98.522828][ T6280] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[   98.565915][ T6280] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[   98.567026][ T6170] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   98.624906][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.653139][  T180] DVB: Unable to find symbol tda10046_attach()
[   98.660711][  T180] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[   98.671294][ T6308] kAFS: bad VL server IP address
[   98.688356][  T180] usb 1-1: USB disconnect, device number 3
[   98.928375][ T6170] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.978980][ T6170] 8021q: adding VLAN 0 to HW filter on device team0
[   99.031497][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.038833][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.056568][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.063854][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.085866][ T5797] Bluetooth: hci0: command tx timeout
[   99.231985][ T6170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   99.241179][ T6323] loop3: detected capacity change from 0 to 512
[   99.262783][ T6323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   99.280562][ T6170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.320899][ T6323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.402685][ T6323] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.682869][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.750109][ T6170] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.914577][ T6349] Illegal XDP return value 4294967262 on prog  (id 6) dev N/A, expect packet loss!
[  100.357695][ T6170] veth0_vlan: entered promiscuous mode
[  100.388731][ T6170] veth1_vlan: entered promiscuous mode
[  100.482465][ T6170] veth0_macvtap: entered promiscuous mode
[  100.509286][ T6170] veth1_macvtap: entered promiscuous mode
[  100.553188][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.572624][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.585450][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.600382][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.610954][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.626419][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.640469][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.650397][ T6380] netlink: 7 bytes leftover after parsing attributes in process `syz.0.138'.
[  100.697097][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.728663][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.738597][  T180] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  100.755962][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.780277][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.793346][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.805171][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.838039][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.869251][ T6170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.889711][ T6170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.908789][ T6170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.918572][ T6170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.954449][  T180] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  100.974028][  T180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.993204][  T180] usb 4-1: Product: syz
[  100.997582][  T180] usb 4-1: Manufacturer: syz
[  101.002207][  T180] usb 4-1: SerialNumber: syz
[  101.148576][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.176584][ T5797] Bluetooth: hci0: command tx timeout
[  101.198056][    T8] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  101.215772][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.336174][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.360024][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.783232][ T6391] loop0: detected capacity change from 0 to 32768
[  101.880644][ T6391] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  102.061206][ T6416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  102.082728][ T6391] XFS (loop0): Ending clean mount
[  102.136306][ T6416] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  102.297648][    T8] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  102.334173][    T8] ath9k_htc: Failed to initialize the device
[  102.393816][    T8] usb 4-1: ath9k_htc: USB layer deinitialized
[  102.442053][  T180] usb 4-1: USB disconnect, device number 3
[  102.493078][ T5800] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  102.887461][ T6440] Bluetooth: MGMT ver 1.22
[  103.091927][ T6449] loop0: detected capacity change from 0 to 256
[  103.198373][ T6453] loop3: detected capacity change from 0 to 1024
[  103.211788][ T6453] =======================================================
[  103.211788][ T6453] WARNING: The mand mount option has been deprecated and
[  103.211788][ T6453]          and is ignored by this kernel. Remove the mand
[  103.211788][ T6453]          option from the mount to silence this warning.
[  103.211788][ T6453] =======================================================
[  103.264461][ T6449] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000ff2)
[  103.267716][ T6453] EXT4-fs: Ignoring removed bh option
[  103.305281][ T6449] FAT-fs (loop0): Filesystem has been set read-only
[  103.323408][ T6453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  103.375741][ T6453] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.591660][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  103.676468][   T27] wacom 0003:056A:003F.0003: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0
[  103.677922][ T6473] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  103.853352][ T6475] fido_id[6475]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  104.190186][ T6491] jffs2: notice: (6491) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  104.386909][ T5797] Bluetooth: hci1: unknown advertising packet type: 0x72
[  104.386998][ T5797] Bluetooth: hci1: Malformed LE Event: 0x02
[  104.506307][    T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  104.727560][    T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.755664][    T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.782099][    T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  104.795467][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  104.813954][    T8] usb 5-1: SerialNumber: syz
[  105.043754][    T8] usb 5-1: 0:2 : does not exist
[  105.066043][    T8] usb 5-1: unit 120 not found!
[  105.150365][    T8] usb 5-1: USB disconnect, device number 2
[  105.526112][ T6517] loop1: detected capacity change from 0 to 40427
[  105.543497][ T6517] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  105.571467][ T6517] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  105.591442][ T6517] F2FS-fs (loop1): invalid crc value
[  105.602236][ T6517] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  105.635675][ T6517] F2FS-fs (loop1): Found nat_bits in checkpoint
[  105.755695][ T6517] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  105.789166][ T6517] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  106.034188][ T6557] i2c i2c-0: new_device: Can't parse I2C address
[  106.047513][ T5792] syz-executor: attempt to access beyond end of device
[  106.047513][ T5792] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  106.102616][ T5792] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  106.637095][    T8] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  106.675728][   T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  106.862480][    T8] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.866125][   T27] usb 1-1: Using ep0 maxpacket: 32
[  106.893228][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  106.900740][   T27] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  106.916581][    T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00
[  106.930631][   T27] usb 1-1: config 0 interface 0 has no altsetting 0
[  106.940365][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.948925][   T27] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  106.957744][    T8] usb 5-1: config 0 descriptor??
[  106.972845][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.001247][   T27] usb 1-1: config 0 descriptor??
[  107.001452][ T6579] loop1: detected capacity change from 0 to 2048
[  107.056994][ T6579] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  107.122310][ T6579] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.417098][    T8] wacom 0003:056A:0016.0004: unbalanced collection at end of report description
[  107.432289][    T8] wacom 0003:056A:0016.0004: parse failed
[  107.438653][    T8] wacom: probe of 0003:056A:0016.0004 failed with error -22
[  107.495842][   T27] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0
[  107.503301][   T27] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0
[  107.514292][   T27] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0
[  107.522909][   T27] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0
[  107.531340][   T27] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0
[  107.552030][   T27] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0
[  107.684471][ T6593] input: syz0 as /devices/virtual/input/input10
[  107.903032][   T27] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-71)
[  107.919958][   T27] corsair-psu: probe of 0003:1B1C:1C09.0005 failed with error -71
[  107.952928][   T27] usb 1-1: USB disconnect, device number 4
[  108.035300][ T6603] warning: `syz.3.192' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  108.147617][ T6605] loop9: detected capacity change from 0 to 524287998
[  108.583104][ T6617] bonding: bond0 is being deleted...
[  108.659511][ T6617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  108.704420][ T6617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  108.707391][ T6622] loop1: detected capacity change from 0 to 2048
[  108.714303][  T790] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  108.748198][ T6617] bond0 (unregistering): Released all slaves
[  108.752270][ T6622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.857577][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.957064][  T790] usb 4-1: too many configurations: 181, using maximum allowed: 8
[  108.977067][  T790] usb 4-1: unable to read config index 0 descriptor/start: -71
[  108.988838][  T790] usb 4-1: can't read configurations, error -71
[  109.022745][ T6627] nbd0: detected capacity change from 0 to 127
[  109.044111][ T5797] block nbd0: Receive control failed (result -104)
[  109.355019][  T180] usb 5-1: USB disconnect, device number 3
[  109.424336][ T6639] block device autoloading is deprecated and will be removed.
[  109.441410][ T6639] md: ram8 does not have a valid v1.1 superblock, not importing!
[  109.452049][ T6639] md: md_import_device returned -22
[  109.465956][    T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  109.558128][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.207'.
[  109.667784][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.685447][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.704107][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  109.714158][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.727000][    T9] usb 2-1: Product: syz
[  109.733513][    T9] usb 2-1: Manufacturer: syz
[  109.740187][    T9] usb 2-1: SerialNumber: syz
[  110.005901][    T9] usb 2-1: 0:2 : does not exist
[  110.021139][    T9] usb 2-1: unit 9 not found!
[  110.034936][    T9] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4)
[  110.065806][    T9] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4)
[  110.094072][    T9] usb 2-1: 4:0: cannot get min/max values for control 5 (id 4)
[  110.116006][    T9] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4)
[  110.146849][    T9] usb 2-1: 4:0: cannot get min/max values for control 10 (id 4)
[  110.175132][ T6646] loop4: detected capacity change from 0 to 32768
[  110.197112][    T9] usb 2-1: USB disconnect, device number 5
[  110.273216][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.318100][ T6646] JBD2: Ignoring recovery information on journal
[  110.489262][ T6646] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  110.621607][ T6646] UBIFS error (pid: 6646): cannot open "ubi:0", error -19
[  110.664096][ T6170] (syz-executor,6170,1):ocfs2_inode_is_valid_to_delete:919 ERROR: Skipping delete of system file 66
[  110.739040][ T6170] ocfs2: Unmounting device (7,4) on (node local)
[  110.805591][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  111.009770][   T27] usb 4-1: Using ep0 maxpacket: 32
[  111.019090][   T27] usb 4-1: too many configurations: 17, using maximum allowed: 8
[  111.030672][   T27] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  111.043067][   T27] usb 4-1: config 0 has no interface number 0
[  111.050678][   T27] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  111.061051][   T27] usb 4-1: config 0 has no interface number 0
[  111.069737][   T27] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  111.081478][   T27] usb 4-1: config 0 has no interface number 0
[  111.091609][   T27] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  111.099820][   T27] usb 4-1: config 0 has no interface number 0
[  111.105689][    T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  111.107177][   T27] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  111.121524][   T27] usb 4-1: config 0 has no interface number 0
[  111.129003][   T27] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  111.137277][   T27] usb 4-1: config 0 has no interface number 0
[  111.144802][   T27] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  111.154796][   T27] usb 4-1: config 0 has no interface number 0
[  111.172603][   T27] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  111.182972][   T27] usb 4-1: config 0 has no interface number 0
[  111.196081][   T27] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  111.205260][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.217625][   T27] usb 4-1: Product: syz
[  111.221830][   T27] usb 4-1: Manufacturer: syz
[  111.226618][   T27] usb 4-1: SerialNumber: syz
[  111.236307][   T27] usb 4-1: config 0 descriptor??
[  111.248065][   T27] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz)
[  111.265719][    T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  111.297173][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  111.312868][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.324595][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  111.342273][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.358119][    T9] usb 2-1: config 0 descriptor??
[  111.465613][    T8] usb 5-1: Using ep0 maxpacket: 16
[  111.485009][    T8] usb 5-1: unable to get BOS descriptor or descriptor too short
[  111.496695][   T27] etas_es58x 4-1:0.2: could not retrieve the product info string
[  111.499132][    T8] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  111.519768][    T8] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  111.533527][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.555493][    T8] usb 5-1: Product: syz
[  111.565447][    T8] usb 5-1: Manufacturer: syz
[  111.573179][    T8] usb 5-1: SerialNumber: syz
[  111.669747][ T6682] loop0: detected capacity change from 0 to 1024
[  111.683123][ T6682] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  111.763368][ T6682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.852180][    T9] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  111.885623][    T8] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  111.894678][    T8] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  111.974823][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.093024][ T6694] Zero length message leads to an empty skb
[  112.282024][   T27] usb 2-1: USB disconnect, device number 6
[  112.320639][    T8] usb 5-1: USB disconnect, device number 4
[  112.373712][   T10] block nbd0: Connection timed out, retrying (0/1 alive)
[  112.384284][   T10] block nbd0: Connection timed out, retrying (0/1 alive)
[  112.392395][   T10] block nbd0: Connection timed out, retrying (0/1 alive)
[  112.400488][   T10] block nbd0: Connection timed out, retrying (0/1 alive)
[  112.408520][   T10] block nbd0: Dead connection, failed to find a fallback
[  112.417993][   T10] block nbd0: shutting down sockets
[  112.424187][   T10] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.434892][   T10] Buffer I/O error on dev nbd0, logical block 3, async page read
[  112.445096][   T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.455124][   T10] Buffer I/O error on dev nbd0, logical block 2, async page read
[  112.463110][   T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.472387][   T10] Buffer I/O error on dev nbd0, logical block 1, async page read
[  112.480653][   T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.490046][   T10] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.499856][ T6703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  112.510488][ T6703] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.518582][ T6703] Buffer I/O error on dev nbd0, logical block 1, async page read
[  112.527393][ T6703] Buffer I/O error on dev nbd0, logical block 2, async page read
[  112.535614][ T6703] Buffer I/O error on dev nbd0, logical block 3, async page read
[  112.545559][ T6703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  112.554791][ T6703] Buffer I/O error on dev nbd0, logical block 0, async page read
[  112.562723][ T6703] Buffer I/O error on dev nbd0, logical block 1, async page read
[  112.571097][ T6703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  112.580715][ T6703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2
[  112.590376][ T6703] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  112.594249][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.599825][ T6703] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  112.629360][ T5784] ldm_validate_partition_table(): Disk read failed.
[  112.637988][ T5784] Dev nbd0: unable to read RDB block 0
[  112.646217][ T5784]  nbd0: unable to read partition table
[  112.706583][ T5784] ldm_validate_partition_table(): Disk read failed.
[  112.715812][ T5784] Dev nbd0: unable to read RDB block 0
[  112.723404][ T5784]  nbd0: unable to read partition table
[  112.866796][ T6708] loop0: detected capacity change from 0 to 8192
[  112.917887][    C0] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x003D.
[  112.929236][    C0] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed
[  112.937263][    C0] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG
[  112.956770][ T5449] etas_es58x 4-1:0.2 can1: bit-timing not yet defined
[  113.121345][    C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  113.130688][    C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  113.139899][    C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  113.149062][    C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  113.158257][    C0] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  113.167438][    C0] etas_es58x 4-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO
[  113.187526][    T8] usb 4-1: USB disconnect, device number 6
[  113.194837][    T8] etas_es58x 4-1:0.2: Disconnecting syz syz
[  113.209490][ T5449] etas_es58x 4-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL
[  114.303557][ T6767] phram: illegal device length
[  114.890422][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.246'.
[  115.226384][ T6798] block device autoloading is deprecated and will be removed.
[  115.244083][ T6798] md1: using deprecated bitmap file support
[  115.250683][ T6798] md1: error: bitmap file must open for write
[  115.456795][ T6808] tipc: Started in network mode
[  115.485114][ T6808] tipc: Node identity ac14140f, cluster identity 4711
[  115.505573][ T6808] tipc: New replicast peer: 255.255.255.255
[  115.513389][ T6808] tipc: Enabled bearer <udp:syz2>, priority 10
[  115.541096][ T6809] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0001
[  115.585525][ T5865] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  115.797638][ T5865] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  115.816392][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.845509][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.859658][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  115.884999][ T6807] loop1: detected capacity change from 0 to 32768
[  115.891718][ T5865] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  115.914414][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.922920][ T6807] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  115.938586][ T6807] JBD2: Ignoring recovery information on journal
[  115.950701][ T5865] usb 5-1: config 0 descriptor??
[  115.990253][ T6807] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  116.091566][   T28] audit: type=1800 audit(1793038704.303:6): pid=6807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.257" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  116.140853][ T6807] (syz.1.257,6807,0):ocfs2_file_write_iter:2445 ERROR: status = -27
[  116.254723][ T5792] ocfs2: Unmounting device (7,1) on (node local)
[  116.389323][ T5865] holtek_kbd 0003:04D9:A055.0007: unknown main item tag 0x0
[  116.405928][ T5865] holtek_kbd 0003:04D9:A055.0007: unknown main item tag 0x0
[  116.436172][ T5865] holtek_kbd 0003:04D9:A055.0007: unknown main item tag 0x0
[  116.455843][ T5865] holtek_kbd 0003:04D9:A055.0007: unknown main item tag 0x0
[  116.463218][ T5865] holtek_kbd 0003:04D9:A055.0007: unknown main item tag 0x0
[  116.485785][ T5865] holtek_kbd 0003:04D9:A055.0007: unknown main item tag 0x0
[  116.493166][ T5865] holtek_kbd 0003:04D9:A055.0007: unknown main item tag 0x0
[  116.519060][ T5865] holtek_kbd 0003:04D9:A055.0007: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0
[  116.628196][ T5865] tipc: Node number set to 2886997007
[  116.689988][  T790] usb 5-1: USB disconnect, device number 5
[  117.240708][ T6859] loop3: detected capacity change from 0 to 256
[  117.659317][ T6868] loop0: detected capacity change from 0 to 256
[  118.487104][  T790] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  118.677531][  T790] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  118.698973][  T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.725682][  T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.736726][  T790] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  118.750277][  T790] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  118.759732][  T790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.774901][  T790] usb 4-1: config 0 descriptor??
[  119.165554][ T6924] C: renamed from team_slave_0 (while UP)
[  119.183458][ T6924] netlink: 'syz.1.302': attribute type 2 has an invalid length.
[  119.202895][ T6924] netlink: 156 bytes leftover after parsing attributes in process `syz.1.302'.
[  119.230188][  T790] holtek_kbd 0003:04D9:A055.0008: unknown main item tag 0x0
[  119.230206][ T6924] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  119.264575][ T6901] ALSA: mixer_oss: invalid OSS volume ''
[  119.281723][  T790] holtek_kbd 0003:04D9:A055.0008: unknown main item tag 0x0
[  119.299813][  T790] holtek_kbd 0003:04D9:A055.0008: unknown main item tag 0x0
[  119.338168][  T790] holtek_kbd 0003:04D9:A055.0008: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0
[  119.528109][   T27] usb 4-1: USB disconnect, device number 7
[  119.883348][ T6936] loop4: detected capacity change from 0 to 32768
[  119.919153][ T6936] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  119.948806][ T6936] JBD2: Ignoring recovery information on journal
[  119.968116][ T5797] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  119.979962][ T5797] Bluetooth: hci3: Injecting HCI hardware error event
[  119.989403][ T5797] Bluetooth: hci3: hardware error 0x00
[  120.058330][ T6936] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  120.178350][   T28] audit: type=1800 audit(1793038708.393:7): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.295" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  120.213767][ T6936] (syz.4.295,6936,0):ocfs2_file_write_iter:2445 ERROR: status = -27
[  120.303224][ T6170] ocfs2: Unmounting device (7,4) on (node local)
[  121.011712][ T6993] loop4: detected capacity change from 0 to 2048
[  121.051178][ T6993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.124931][ T6170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.405699][ T5100] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  121.414434][ T5100] Bluetooth: hci0: Injecting HCI hardware error event
[  121.424070][ T5803] Bluetooth: hci0: hardware error 0x00
[  121.732364][ T6984] ALSA: mixer_oss: invalid OSS volume ''
[  121.744053][ T7022] loop0: detected capacity change from 0 to 1024
[  121.808633][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  121.864380][ T7022] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.996283][ T7022] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.311: lblock 0 mapped to illegal pblock 0 (length 1)
[  122.021566][ T7022] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  122.049934][ T5797] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  122.094370][ T7022] EXT4-fs (loop0): This should not happen!! Data will be lost
[  122.094370][ T7022] 
[  122.146908][ T7040] jffs2: notice: (7040) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  122.238917][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  122.409761][ T7051] ima: policy update failed
[  122.421657][   T28] audit: type=1802 audit(1793038710.623:8): pid=7051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.322" res=0 errno=0
[  122.445838][    T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  122.664860][    T8] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  122.705186][    T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  122.758275][    T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  122.813031][    T8] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  122.849184][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  122.900064][    T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[  122.961012][    T8] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  123.034045][    T8] usb 5-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e
[  123.076494][    T8] usb 5-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3
[  123.084879][    T8] usb 5-1: Product: syz
[  123.113994][    T8] usb 5-1: Manufacturer: syz
[  123.125603][    T8] usb 5-1: SerialNumber: syz
[  123.145948][ T7044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  123.154130][ T7044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  123.176147][ T7044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  123.201361][ T7044] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  123.227211][    T8] keyspan 5-1:1.0: Keyspan 1 port adapter converter detected
[  123.251379][    T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84
[  123.294648][    T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 82
[  123.311936][    T8] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2
[  123.323589][    T8] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  123.491510][ T5803] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  123.497178][    T8] usb 5-1: USB disconnect, device number 6
[  123.556653][    T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  123.567569][ T7094] capability: warning: `syz.1.332' uses deprecated v2 capabilities in a way that may be insecure
[  123.601448][    T8] keyspan 5-1:1.0: device disconnected
[  123.624546][ T7094] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only
[  123.642223][ T7094] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  123.659660][   T27] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  123.668330][ T7098] C: renamed from team_slave_0 (while UP)
[  123.679203][ T7094] overlayfs: failed to get uuid (86/file2, err=-13); falling back to uuid=null.
[  123.693299][ T7098] netlink: 'syz.0.334': attribute type 2 has an invalid length.
[  123.702827][ T7098] netlink: 156 bytes leftover after parsing attributes in process `syz.0.334'.
[  123.722951][ T7098] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  123.857657][   T27] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  123.867829][   T27] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  123.892134][   T27] usb 4-1: config 0 interface 0 has no altsetting 0
[  123.909481][   T27] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06
[  123.928999][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  123.947043][   T27] usb 4-1: SerialNumber: syz
[  123.975374][   T27] usb 4-1: config 0 descriptor??
[  124.211676][   T27] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  124.285630][ T5803] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  124.294678][ T5803] Bluetooth: hci1: Injecting HCI hardware error event
[  124.306068][ T5797] Bluetooth: hci1: hardware error 0x00
[  124.469544][   T27] usb 4-1: USB disconnect, device number 8
[  124.496245][ T5139] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  124.632476][ T5782] udevd[5782]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  124.774448][ T7127] loop1: detected capacity change from 0 to 2048
[  124.864122][ T7127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.069342][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.397577][ T7155] netlink: 'syz.3.346': attribute type 11 has an invalid length.
[  125.494450][ T7157] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.347'.
[  125.528730][ T7157] netlink: zone id is out of range
[  125.621222][ T7162] tipc: New replicast peer: 127.0.0.1
[  125.635049][ T7162] tipc: Enabled bearer <udp:syz0>, priority 10
[  125.750719][ T7166] loop1: detected capacity change from 0 to 1024
[  125.781953][ T7168] loop3: detected capacity change from 0 to 2048
[  125.817424][ T7166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  125.861479][ T7168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.873934][ T7166] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.904775][ T7166] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.351: lblock 0 mapped to illegal pblock 0 (length 1)
[  125.934015][ T7166] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  125.965832][ T7166] EXT4-fs (loop1): This should not happen!! Data will be lost
[  125.965832][ T7166] 
[  126.052655][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.078469][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  126.160125][ T7174] use of bytesused == 0 is deprecated and will be removed in the future,
[  126.205722][ T7174] use the actual size instead.
[  126.251186][ T7183] netlink: 'syz.1.356': attribute type 14 has an invalid length.
[  126.413448][ T7189] loop1: detected capacity change from 0 to 1024
[  126.468948][ T7193] loop4: detected capacity change from 0 to 256
[  126.494230][ T7189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.498982][ T7187] rxe_eth0 speed is unknown, defaulting to 1000
[  126.527347][ T5797] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  126.704371][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.899070][ T7201] netlink: 'syz.1.361': attribute type 2 has an invalid length.
[  126.910740][ T7201] netlink: 156 bytes leftover after parsing attributes in process `syz.1.361'.
[  126.920899][ T7201] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  127.791542][ T7219] program syz.1.368 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  128.064595][ T7226] macvlan2: entered promiscuous mode
[  128.082404][ T7226] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  128.353901][ T7240] capability: warning: `syz.3.377' uses 32-bit capabilities (legacy support in use)
[  128.376319][ T7240] program syz.3.377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  129.151584][ T7248] loop4: detected capacity change from 0 to 40427
[  129.185495][ T7248] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  129.193539][ T7248] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  129.238959][ T7248] F2FS-fs (loop4): invalid crc value
[  129.262362][ T7248] F2FS-fs (loop4): Found nat_bits in checkpoint
[  129.392375][ T7248] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  129.405499][ T7248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  130.332313][ T7268] loop1: detected capacity change from 0 to 32768
[  130.363888][ T7268] JBD2: Ignoring recovery information on journal
[  130.373471][ T7268] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[  130.382622][ T7268] JBD2: bad block at offset 32
[  130.423634][ T7268] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  130.573376][ T7268] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  130.621726][ T7268] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  130.659438][ T7268] OCFS2: File system is now read-only.
[  130.680260][ T7268] (syz.1.387,7268,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  130.702737][ T7268] (syz.1.387,7268,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  130.725449][ T7268] (syz.1.387,7268,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  130.733650][ T7268] (syz.1.387,7268,0):ocfs2_convert_inline_data_to_extents:7116 ERROR: status = -30
[  130.769203][ T7268] (syz.1.387,7268,0):ocfs2_allocate_unwritten_extents:1460 ERROR: status = -30
[  130.801125][ T7268] (syz.1.387,7268,0):__ocfs2_change_file_space:2044 ERROR: status = -30
[  130.972436][ T5792] ocfs2: Unmounting device (7,1) on (node local)
[  131.349562][ T7286] C: renamed from team_slave_0 (while UP)
[  131.382304][ T7286] netlink: 'syz.3.393': attribute type 2 has an invalid length.
[  131.391186][ T7281] loop4: detected capacity change from 0 to 32768
[  131.398504][ T7286] netlink: 156 bytes leftover after parsing attributes in process `syz.3.393'.
[  131.413813][ T7286] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  131.474539][ T7281] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  131.573783][ T7281] XFS (loop4): Ending clean mount
[  131.677367][ T6170] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  131.976706][ T5864] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  132.167814][ T5864] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[  132.191074][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.378454][ T7304] loop4: detected capacity change from 0 to 40427
[  132.400922][ T7304] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[  132.414227][ T7304] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  132.441434][ T5864] net1080: probe of 1-1:1.0 failed with error -71
[  132.455106][ T7304] F2FS-fs (loop4): invalid crc value
[  132.482471][ T5864] usb 1-1: USB disconnect, device number 5
[  132.496999][ T7304] F2FS-fs (loop4): Found nat_bits in checkpoint
[  132.613207][ T7304] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  132.620772][ T7304] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  132.720498][ T6170] syz-executor: attempt to access beyond end of device
[  132.720498][ T6170] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  132.753514][ T6170] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  132.939970][ T7328] loop1: detected capacity change from 0 to 256
[  133.023837][ T7328] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  133.102635][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  133.111553][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  133.189619][ T7330] program syz.0.407 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.195695][ T7328] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[  133.286566][ T7332] netlink: 'syz.3.408': attribute type 2 has an invalid length.
[  133.316243][ T7332] netlink: 156 bytes leftover after parsing attributes in process `syz.3.408'.
[  133.352505][ T7332] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  133.442235][ T7342] C: renamed from team_slave_0 (while UP)
[  133.450584][ T7342] netlink: 'syz.4.411': attribute type 2 has an invalid length.
[  133.465888][ T7342] netlink: 156 bytes leftover after parsing attributes in process `syz.4.411'.
[  133.479403][ T7342] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  133.596532][   T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  133.825501][   T27] usb 2-1: Using ep0 maxpacket: 16
[  133.832349][ T7347] loop0: detected capacity change from 0 to 32768
[  133.833807][   T27] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  133.864066][   T27] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  133.877724][   T27] usb 2-1: config 0 interface 0 has no altsetting 0
[  133.882284][ T7347] JBD2: Ignoring recovery information on journal
[  133.884403][   T27] usb 2-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00
[  133.884430][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.918933][   T27] usb 2-1: config 0 descriptor??
[  134.046353][ T7347] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  134.284132][ T5800] ocfs2: Unmounting device (7,0) on (node local)
[  134.369791][   T27] input: HID 1b96:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B96:0006.0009/input/input12
[  134.486527][   T27] ntrig 0003:1B96:0006.0009: input,hidraw0: USB HID v0.53 Joystick [HID 1b96:0006] on usb-dummy_hcd.1-1/input0
[  134.542495][   T27] ntrig 0003:1B96:0006.0009: Firmware version: 4.8.22.29.5 (e288 add3)
[  134.776976][ T5864] usb 2-1: USB disconnect, device number 7
[  134.784565][ T7362] syz.4.418 uses obsolete (PF_INET,SOCK_PACKET)
[  135.133219][ T7372] netlink: 'syz.4.422': attribute type 2 has an invalid length.
[  135.144187][ T7372] netlink: 156 bytes leftover after parsing attributes in process `syz.4.422'.
[  135.156160][ T7372] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  135.402409][   T27] kernel write not supported for file /279/attr/prev (pid: 27 comm: kworker/1:1)
[  135.444587][ T7388] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  135.444587][ T7388] The task syz.1.426 (7388) triggered the difference, watch for misbehavior.
[  135.465757][ T5865] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  135.657380][ T5865] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  135.673501][ T5865] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  135.684069][ T5865] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  135.694319][ T5865] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  135.715679][ T5865] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  135.726928][ T5865] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024
[  135.738460][ T5865] usb 1-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  135.755958][ T5865] usb 1-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice=1b.3e
[  135.766538][ T5865] usb 1-1: New USB device strings: Mfr=234, Product=28, SerialNumber=3
[  135.775946][ T5865] usb 1-1: Product: syz
[  135.780233][ T5865] usb 1-1: Manufacturer: syz
[  135.787404][ T5865] usb 1-1: SerialNumber: syz
[  135.808539][ T7374] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  135.825761][ T7374] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  135.833096][ T7374] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  135.862951][ T7374] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  135.887859][ T5865] keyspan 1-1:1.0: Keyspan 1 port adapter converter detected
[  135.903990][ T5865] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84
[  135.915036][ T5865] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82
[  135.923527][ T5865] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2
[  135.933270][ T5865] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  136.189075][ T5865] usb 1-1: USB disconnect, device number 6
[  136.218042][ T5865] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  136.251846][ T5865] keyspan 1-1:1.0: device disconnected
[  136.330288][ T7409] rxe_eth0 speed is unknown, defaulting to 1000
[  136.457642][ T7415] loop3: detected capacity change from 0 to 512
[  136.499854][ T7415] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  136.545474][ T7415] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  136.614457][ T7415] EXT4-fs (loop3): 1 truncate cleaned up
[  136.634735][ T7415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.715849][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.903660][ T7423] netlink: 'syz.4.442': attribute type 2 has an invalid length.
[  136.919529][ T7423] netlink: 156 bytes leftover after parsing attributes in process `syz.4.442'.
[  136.939638][ T7423] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  137.338154][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'.
[  137.360532][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.446'.
[  137.375915][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'.
[  137.413012][ T7434] loop0: detected capacity change from 0 to 8192
[  137.432084][ T7440] loop1: detected capacity change from 0 to 1024
[  137.527838][ T5782] blk_print_req_error: 113 callbacks suppressed
[  137.527855][ T5782] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  137.863390][ T7448] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  138.130653][ T7454] syz.3.453 (7454) used greatest stack depth: 20696 bytes left
[  138.165195][ T7456] netlink: 52 bytes leftover after parsing attributes in process `syz.1.454'.
[  138.465081][ T7464] netlink: 'syz.0.457': attribute type 2 has an invalid length.
[  138.476479][ T7464] netlink: 156 bytes leftover after parsing attributes in process `syz.0.457'.
[  138.511855][ T7464] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  138.812825][ T7460] loop3: detected capacity change from 0 to 32768
[  138.876882][ T7460] (syz.3.455,7460,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  138.886343][ T7472] type mismatch for 20000000,20000000 old: write-back new: write-combining
[  138.915570][ T7460] (syz.3.455,7460,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  139.015176][ T7460] JBD2: Ignoring recovery information on journal
[  139.116129][ T7477] tipc: Started in network mode
[  139.121150][ T7477] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  139.129322][ T7477] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  139.208889][ T7460] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  139.399292][   T28] audit: type=1800 audit(1793038727.613:9): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.455" name="file1" dev="loop3" ino=16978 res=0 errno=0
[  139.616553][ T5793] ocfs2: Unmounting device (7,3) on (node local)
[  140.109922][ T7512] netlink: 'syz.4.476': attribute type 2 has an invalid length.
[  140.155977][ T7512] netlink: 156 bytes leftover after parsing attributes in process `syz.4.476'.
[  140.165073][ T7512] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.241487][ T5864] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  140.265815][    T8] tipc: Node number set to 43690
[  140.288243][ T7516] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  140.378351][  T138] Bluetooth: hci4: Frame reassembly failed (-84)
[  140.397738][ T7517] Bluetooth: hci4: Frame reassembly failed (-84)
[  140.445486][ T5864] usb 4-1: Using ep0 maxpacket: 32
[  140.459590][ T5864] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  140.475461][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.494468][ T5864] usb 4-1: Product: syz
[  140.500165][ T5864] usb 4-1: Manufacturer: syz
[  140.504935][ T5864] usb 4-1: SerialNumber: syz
[  140.516998][ T5864] usb 4-1: config 0 descriptor??
[  141.138814][ T5864] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[  141.155870][ T5864] peak_usb 4-1:0.0 can0: sending command failure: -22
[  141.173226][ T5864] peak_usb 4-1:0.0 can0: sending command failure: -22
[  141.237663][ T5864] peak_usb: probe of 4-1:0.0 failed with error -22
[  141.350393][ T5864] usb 4-1: USB disconnect, device number 9
[  141.691838][ T7554] netlink: 'syz.0.493': attribute type 2 has an invalid length.
[  141.700530][ T7554] netlink: 156 bytes leftover after parsing attributes in process `syz.0.493'.
[  141.720369][ T7554] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  141.801181][ T7557] loop4: detected capacity change from 0 to 2048
[  141.842642][ T7557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.857804][ T7557] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.030251][ T6170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.281860][ T7570] loop4: detected capacity change from 0 to 128
[  142.305340][ T7570] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  142.402080][  T138] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  142.455562][ T5797] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  142.557862][ T7575] loop0: detected capacity change from 0 to 4096
[  142.596473][ T7575] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  142.716778][ T7575] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  142.734705][ T7578] loop1: detected capacity change from 0 to 128
[  142.769050][ T7580] loop4: detected capacity change from 0 to 256
[  142.791759][ T7580] exfat: Deprecated parameter 'utf8'
[  142.809643][ T7580] exfat: Deprecated parameter 'utf8'
[  142.825607][ T7580] exfat: Deprecated parameter 'namecase'
[  142.831388][ T7578] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  142.873343][ T7580] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d)
[  142.882095][ T7578] hpfs: filesystem error: improperly stopped
[  142.933837][ T7578] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  142.966103][ T7578] hpfs: You really don't want any checks? You are crazy...
[  142.984968][ T7578] hpfs: hpfs_map_sector(): read error
[  142.993194][ T7578] hpfs: code page support is disabled
[  143.006795][ T7578] hpfs: hpfs_map_4sectors(): unaligned read
[  143.013048][ T7578] hpfs: hpfs_map_4sectors(): unaligned read
[  143.045960][ T7578] hpfs: filesystem error: unable to find root dir
[  143.100905][ T7578] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  143.210531][ T7586] loop0: detected capacity change from 0 to 2048
[  143.280977][ T7586] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.283398][ T7589] loop3: detected capacity change from 0 to 2048
[  143.336984][ T7591] netlink: 'syz.1.508': attribute type 2 has an invalid length.
[  143.369891][ T7589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.371279][ T7591] netlink: 156 bytes leftover after parsing attributes in process `syz.1.508'.
[  143.441168][ T7591] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  143.524015][ T5793] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  143.533438][ T7596] netlink: 'syz.4.509': attribute type 2 has an invalid length.
[  143.587032][ T5793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.592079][ T7596] netlink: 156 bytes leftover after parsing attributes in process `syz.4.509'.
[  143.618495][ T7596] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  143.803346][ T7607] loop4: detected capacity change from 0 to 128
[  143.814845][ T7607] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  143.841254][ T7607] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  143.939375][   T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  144.042664][ T7615] loop4: detected capacity change from 0 to 256
[  144.085201][ T7615] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  144.267036][ T7621] loop4: detected capacity change from 0 to 2048
[  144.317620][ T7621] NILFS (loop4): invalid segment: Magic number mismatch
[  144.325350][ T7621] NILFS (loop4): trying rollback from an earlier position
[  144.364233][ T7621] NILFS (loop4): recovery complete
[  144.377589][ T7625] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.431425][ T7621] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean
[  144.450825][ T7627] netlink: 'syz.0.521': attribute type 2 has an invalid length.
[  144.459048][ T7627] netlink: 156 bytes leftover after parsing attributes in process `syz.0.521'.
[  144.468715][ T7627] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  145.219132][ T7636] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.525 (7636)
[  145.249212][ T7648] netlink: 'syz.3.531': attribute type 2 has an invalid length.
[  145.264095][ T7636] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  145.277664][ T7648] netlink: 156 bytes leftover after parsing attributes in process `syz.3.531'.
[  145.291975][ T7636] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  145.303344][ T7648] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  145.320745][ T7636] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  145.333048][ T7636] BTRFS info (device loop1): use zstd compression, level 3
[  145.363485][ T7636] BTRFS info (device loop1): using free space tree
[  145.457236][ T7663] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.499777][ T7636] BTRFS info (device loop1): enabling ssd optimizations
[  145.511057][ T7636] BTRFS info (device loop1): auto enabling async discard
[  146.014291][ T5792] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  146.203994][ T7679] iso9660: Corrupted directory entry in block 2 of inode 1920
[  146.272515][ T7681] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  146.343007][ T7685] netlink: 'syz.4.539': attribute type 2 has an invalid length.
[  146.385950][ T7685] netlink: 156 bytes leftover after parsing attributes in process `syz.4.539'.
[  146.446523][ T7685] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  146.606591][ T7690] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.540: iget: bad i_size value: 38620345925642
[  146.635365][ T7690] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.540: couldn't read orphan inode 15 (err -117)
[  146.679447][ T7694] geneve1: entered promiscuous mode
[  146.737149][ T7694] geneve1: left promiscuous mode
[  146.745226][ T7690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.962197][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.025144][ T7701] set_capacity_and_notify: 6 callbacks suppressed
[  147.025159][ T7701] loop3: detected capacity change from 0 to 256
[  147.055127][ T7703] netlink: 'syz.1.546': attribute type 2 has an invalid length.
[  147.069723][ T7701] exfat: Deprecated parameter 'utf8'
[  147.076774][ T7703] netlink: 156 bytes leftover after parsing attributes in process `syz.1.546'.
[  147.095570][ T7701] exfat: Deprecated parameter 'namecase'
[  147.099229][ T7705] loop0: detected capacity change from 0 to 256
[  147.101297][ T7701] exfat: Deprecated parameter 'utf8'
[  147.103825][ T7703] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  147.185339][ T7701] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  147.208893][ T7705] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  147.453399][ T7710] loop3: detected capacity change from 0 to 64
[  147.471800][ T7712] loop0: detected capacity change from 0 to 512
[  147.542527][ T7712] EXT4-fs (loop0): Test dummy encryption mode enabled
[  147.577253][ T7712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002]
[  147.620431][ T7712] System zones: 1-12
[  147.629443][ T7712] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.684502][ T7712] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.548: Directory hole found for htree leaf block 0
[  147.763289][ T7712] EXT4-fs (loop0): Remounting filesystem read-only
[  147.816760][ T7716] loop3: detected capacity change from 0 to 1024
[  147.922755][ T5800] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  148.084436][ T7708] loop4: detected capacity change from 0 to 32768
[  148.752200][ T7718] loop1: detected capacity change from 0 to 40427
[  148.784006][ T7718] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  148.806372][ T7720] loop0: detected capacity change from 0 to 40427
[  148.815620][ T7718] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  148.851673][ T7720] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  148.851816][ T7718] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff
[  148.884501][ T7726] loop3: detected capacity change from 0 to 2048
[  148.892437][ T7720] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  148.914738][ T7718] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8
[  148.941496][ T7720] F2FS-fs (loop0): invalid crc value
[  148.958890][ T7718] F2FS-fs (loop1): invalid crc value
[  148.969756][ T7720] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  149.031605][ T7720] F2FS-fs (loop0): Found nat_bits in checkpoint
[  149.049237][ T7718] F2FS-fs (loop1): Found nat_bits in checkpoint
[  149.087939][ T7733] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.367340][ T7718] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  149.374872][ T7718] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  149.403712][ T7720] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  149.420611][ T7720] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  149.501598][ T7736] loop4: detected capacity change from 0 to 1024
[  149.526634][ T7736] EXT4-fs: Ignoring removed nobh option
[  149.532758][ T7736] EXT4-fs: Ignoring removed orlov option
[  149.580997][ T7736] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  149.690500][ T7736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.708725][ T5800] syz-executor: attempt to access beyond end of device
[  149.708725][ T5800] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  149.727558][ T5800] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  149.737357][ T5800] syz-executor: attempt to access beyond end of device
[  149.737357][ T5800] loop0: rw=2049, sector=40976, nr_sectors = 8 limit=40427
[  149.755198][ T5800] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  149.850599][ T7736] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 87 free clusters
[  149.859555][ T7746] netlink: 'syz.3.559': attribute type 2 has an invalid length.
[  149.908514][ T7746] netlink: 156 bytes leftover after parsing attributes in process `syz.3.559'.
[  149.939242][ T7736] syz.4.554 (7736) used greatest stack depth: 20632 bytes left
[  149.956703][ T7746] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  150.077871][ T6170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.268121][ T7751] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.557: invalid indirect mapped block 256 (level 2)
[  150.330725][ T7751] EXT4-fs (loop1): 2 truncates cleaned up
[  150.360444][ T7751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.363245][ T7754] hfsplus: unable to parse mount options
[  150.490823][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.740042][ T7763] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.123417][ T7781] netlink: 'syz.3.574': attribute type 2 has an invalid length.
[  151.149276][ T7781] netlink: 156 bytes leftover after parsing attributes in process `syz.3.574'.
[  151.166913][ T7781] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  151.225243][   T28] audit: type=1326 audit(1793038739.423:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b779f559 code=0x7ffc0000
[  151.270270][   T28] audit: type=1326 audit(1793038739.423:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b779f559 code=0x7ffc0000
[  151.305669][   T28] audit: type=1326 audit(1793038739.423:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb2b779f559 code=0x7ffc0000
[  151.336267][   T28] audit: type=1326 audit(1793038739.423:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b779f559 code=0x7ffc0000
[  151.369734][   T28] audit: type=1326 audit(1793038739.423:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b779f559 code=0x7ffc0000
[  151.398781][   T28] audit: type=1326 audit(1793038739.433:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fb2b779f559 code=0x7ffc0000
[  151.428407][   T28] audit: type=1326 audit(1793038739.433:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b779f559 code=0x7ffc0000
[  151.507102][   T28] audit: type=1326 audit(1793038739.433:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b779f559 code=0x7ffc0000
[  151.555501][   T28] audit: type=1326 audit(1793038739.433:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2b779f559 code=0x7ffc0000
[  151.638212][   T28] audit: type=1326 audit(1793038739.433:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7782 comm="syz.4.573" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b779f559 code=0x7ffc0000
[  152.291796][ T7824] device-mapper: table: 248:1: multipath: invalid number of paths (-EINVAL)
[  152.312144][ T7824] device-mapper: ioctl: error adding target to table
[  152.319753][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'.
[  152.604148][ T7835] netlink: 'syz.3.596': attribute type 2 has an invalid length.
[  152.619805][ T7835] netlink: 156 bytes leftover after parsing attributes in process `syz.3.596'.
[  152.645147][ T7835] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  152.704549][ T7841] netlink: 'syz.0.598': attribute type 2 has an invalid length.
[  152.739196][ T7841] netlink: 156 bytes leftover after parsing attributes in process `syz.0.598'.
[  152.764144][ T7841] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  153.031635][ T7843] set_capacity_and_notify: 4 callbacks suppressed
[  153.031645][ T7843] loop1: detected capacity change from 0 to 32768
[  153.054222][ T7843] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.599 (7843)
[  153.082213][ T7843] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  153.102827][ T7843] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  153.112931][ T7843] BTRFS info (device loop1): setting nodatacow, compression disabled
[  153.121613][ T7843] BTRFS info (device loop1): setting datasum, datacow enabled
[  153.129720][ T7843] BTRFS info (device loop1): force clearing of disk cache
[  153.140487][ T7843] BTRFS info (device loop1): turning on sync discard
[  153.147882][ T7843] BTRFS warning (device loop1): excessive commit interval 43283
[  153.157145][ T7843] BTRFS info (device loop1): enabling ssd optimizations
[  153.169672][ T7843] BTRFS info (device loop1): using spread ssd allocation scheme
[  153.180848][ T7843] BTRFS info (device loop1): not using ssd optimizations
[  153.190552][ T7843] BTRFS info (device loop1): not using spread ssd allocation scheme
[  153.199527][ T7843] BTRFS info (device loop1): using free space tree
[  153.311528][ T7843] BTRFS info (device loop1): rebuilding free space tree
[  153.392141][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'.
[  153.555128][ T7877] loop4: detected capacity change from 0 to 1024
[  153.609840][ T7881] loop5: detected capacity change from 0 to 2935
[  153.616783][ T7843] BTRFS info (device loop1): disk added /dev/nullb0
[  153.632351][ T7877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.722292][ T7877] fs-verity: sha512 using implementation "sha512-avx2"
[  153.763746][ T7877] fs-verity (loop4, inode 13): Unsupported log_blocksize: 12
[  153.845090][ T6170] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.135927][ T7888] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received
[  154.184386][ T7890] netlink: 'syz.0.612': attribute type 2 has an invalid length.
[  154.194865][ T7890] netlink: 156 bytes leftover after parsing attributes in process `syz.0.612'.
[  154.205273][ T7890] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  154.292193][ T5792] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  154.573516][ T7903] bond0: entered promiscuous mode
[  154.594902][ T7903] bond_slave_0: entered promiscuous mode
[  154.622033][ T7903] bond_slave_1: entered promiscuous mode
[  154.638396][ T7902] bond0: left promiscuous mode
[  154.643783][ T7902] bond_slave_0: left promiscuous mode
[  154.722197][ T7902] bond_slave_1: left promiscuous mode
[  154.763648][ T7909] ip_tables: iptables: counters copy to user failed while replacing table
[  154.919294][ T7913] netlink: 'syz.3.619': attribute type 2 has an invalid length.
[  154.934513][ T7913] netlink: 156 bytes leftover after parsing attributes in process `syz.3.619'.
[  154.955295][ T7913] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  155.224287][ T7933] UHID_CREATE from different security context by process 355 (syz.0.628), this is not allowed.
[  155.242079][    T9] hid_parser_main: 4 callbacks suppressed
[  155.242098][    T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  155.278859][    T9] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  155.422076][ T7935] fido_id[7935]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  155.450380][ T7937] netlink: 'syz.0.630': attribute type 2 has an invalid length.
[  155.465309][ T7937] netlink: 156 bytes leftover after parsing attributes in process `syz.0.630'.
[  155.479323][ T7937] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  156.172179][ T7954] loop3: detected capacity change from 0 to 4096
[  156.252784][ T7959] loop1: detected capacity change from 0 to 764
[  156.260629][ T7954] ntfs3: loop3: Failed to load $Extend (-22).
[  156.285766][ T7954] ntfs3: loop3: Failed to initialize $Extend.
[  156.520107][ T7963] netlink: 'syz.1.641': attribute type 2 has an invalid length.
[  156.538067][ T7963] netlink: 156 bytes leftover after parsing attributes in process `syz.1.641'.
[  156.548428][ T7963] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  157.066507][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  157.187832][ T7992] netlink: 'syz.0.653': attribute type 2 has an invalid length.
[  157.208002][ T7992] netlink: 156 bytes leftover after parsing attributes in process `syz.0.653'.
[  157.225357][ T7992] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  157.278488][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.297630][ T7995] bond0: unable to remove nonexistent ARP target 192.168.1.1
[  157.311826][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  157.322072][ T7995] bond0: option arp_ip_target: invalid value (-192.168.1.1)
[  157.338574][    T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  157.356405][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  157.370405][    T9] usb 5-1: SerialNumber: syz
[  157.545513][ T8001] loop1: detected capacity change from 0 to 8192
[  157.599763][    T9] usb 5-1: 0:2 : does not exist
[  157.661407][    T9] usb 5-1: USB disconnect, device number 7
[  157.729072][ T5784] udevd[5784]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  158.266255][ T8018] netlink: 'syz.3.663': attribute type 2 has an invalid length.
[  158.281330][ T8018] netlink: 156 bytes leftover after parsing attributes in process `syz.3.663'.
[  158.294288][ T8018] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  158.545827][ T5864] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  158.603846][ T8022] loop1: detected capacity change from 0 to 32768
[  158.676686][ T8022] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  158.737989][ T5864] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32
[  158.774751][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.824777][ T5864] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223
[  158.848758][ T5864] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  158.864783][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.900247][ T8027] loop0: detected capacity change from 0 to 32768
[  158.930335][ T5864] usb 5-1: config 0 descriptor??
[  158.931200][ T8027] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop0 scanned by syz.0.668 (8027)
[  158.941653][ T5864] usb 5-1: Found UVC 9.00 device <unnamed> (046d:0825)
[  158.989281][ T8022] syz.1.665 (8022) used greatest stack depth: 18808 bytes left
[  158.998445][ T8027] BTRFS info (device loop0): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97
[  159.036444][ T8027] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  159.055292][ T8027] BTRFS info (device loop0): using free space tree
[  159.082740][ T5792] ocfs2: Unmounting device (7,1) on (node local)
[  159.225322][ T8027] BTRFS info (device loop0): enabling ssd optimizations
[  159.254613][ T8027] BTRFS info (device loop0): auto enabling async discard
[  159.261871][ T8048] netlink: 'syz.1.669': attribute type 2 has an invalid length.
[  159.261893][ T8048] netlink: 156 bytes leftover after parsing attributes in process `syz.1.669'.
[  159.261907][ T8048] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  159.335963][   T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  159.342352][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  159.342367][   T28] audit: type=1800 audit(1793038747.553:22): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.668" name="file1" dev="loop0" ino=260 res=0 errno=0
[  159.380701][ T5864] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  159.455257][ T5864] videodev: could not get a free minor
[  159.474041][ T5864] uvcvideo 5-1:0.1: Failed to register meta-cap device (-23).
[  159.560222][   T27] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  159.585125][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.607527][   T27] usb 4-1: Product: syz
[  159.617165][   T27] usb 4-1: Manufacturer: syz
[  159.631907][   T27] usb 4-1: SerialNumber: syz
[  159.668475][ T5864] usb 5-1: USB disconnect, device number 8
[  159.698426][ T5865] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  159.719660][ T5800] BTRFS info (device loop0): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97
[  160.507874][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.546124][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.765512][ T5865] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  160.791096][ T8056] loop0: detected capacity change from 0 to 40427
[  160.798485][ T5865] ath9k_htc: Failed to initialize the device
[  160.822765][ T8056] F2FS-fs (loop0): invalid crc value
[  160.845890][ T8056] F2FS-fs (loop0): Found nat_bits in checkpoint
[  160.861715][ T5865] usb 4-1: ath9k_htc: USB layer deinitialized
[  160.906090][ T5865] usb 4-1: USB disconnect, device number 10
[  161.024755][ T8056] F2FS-fs (loop0): Start checkpoint disabled!
[  161.087347][ T8056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  161.293978][ T1134] kworker/u4:6: attempt to access beyond end of device
[  161.293978][ T1134] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  161.317338][ T8081] netlink: 'syz.4.681': attribute type 2 has an invalid length.
[  161.327644][ T8081] netlink: 156 bytes leftover after parsing attributes in process `syz.4.681'.
[  161.328387][ T1134] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  161.346659][ T1134] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  161.347614][ T8081] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  162.078427][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.693'.
[  162.395720][    T8] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  162.486989][ T8106] loop1: detected capacity change from 0 to 32768
[  162.519620][ T8106] XFS (loop1): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  162.606611][    T8] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  162.616784][    T8] usb 4-1: config 1 has no interface number 0
[  162.623153][    T8] usb 4-1: config 1 interface 105 has no altsetting 0
[  162.664900][    T8] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  162.689146][ T8106] XFS (loop1): Ending clean mount
[  162.694988][    T8] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  162.709280][ T8132] syzkaller1: entered promiscuous mode
[  162.709812][    T8] usb 4-1: Product: syz
[  162.719265][    T8] usb 4-1: Manufacturer: syz
[  162.721476][ T8132] syzkaller1: entered allmulticast mode
[  162.723927][    T8] usb 4-1: SerialNumber: syz
[  162.850349][ T5792] XFS (loop1): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  163.175031][ T8140] netlink: 'syz.0.701': attribute type 2 has an invalid length.
[  163.183443][ T8140] netlink: 156 bytes leftover after parsing attributes in process `syz.0.701'.
[  163.193385][ T8140] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  163.392204][ T8148] ima: policy update failed
[  163.401173][   T28] audit: type=1802 audit(1793038751.613:23): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.704" res=0 errno=0
[  163.468930][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'.
[  163.590071][ T8157] netlink: 'syz.1.707': attribute type 2 has an invalid length.
[  163.601275][ T8157] netlink: 156 bytes leftover after parsing attributes in process `syz.1.707'.
[  163.611305][ T8157] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  163.753754][    T8] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  163.770262][    T8] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  163.789835][    T8] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, c2:dc:b6:08:31:9b
[  163.808738][    T8] usb 4-1: USB disconnect, device number 11
[  163.817125][    T8] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  163.886800][    T8] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  163.896571][    T8] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  163.906397][    T8] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  163.933820][ T8160] ==================================================================
[  163.942279][ T8160] BUG: KASAN: null-ptr-deref in free_conf+0x90/0x4b0
[  163.949160][ T8160] Read of size 8 at addr 0000000000000028 by task syz.0.708/8160
[  163.956887][ T8160] 
[  163.959239][ T8160] CPU: 1 PID: 8160 Comm: syz.0.708 Not tainted syzkaller #0
[  163.966550][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  163.976634][ T8160] Call Trace:
[  163.979979][ T8160]  <TASK>
[  163.983008][ T8160]  dump_stack_lvl+0x18c/0x250
[  163.987720][ T8160]  ? show_regs_print_info+0x20/0x20
[  163.992926][ T8160]  ? free_conf+0x90/0x4b0
[  163.997274][ T8160]  kasan_report+0x117/0x150
[  164.001789][ T8160]  ? free_conf+0x90/0x4b0
[  164.006129][ T8160]  kasan_check_range+0x241/0x290
[  164.011075][ T8160]  free_conf+0x90/0x4b0
[  164.015234][ T8160]  ? __raw_spin_lock_init+0x45/0x100
[  164.020522][ T8160]  setup_conf+0x16ca/0x2a50
[  164.025047][ T8160]  ? percpu_ref_put+0x1e/0x230
[  164.029824][ T8160]  ? __lock_acquire+0x7eb0/0x7eb0
[  164.035144][ T8160]  ? __add_stripe_bio+0x770/0x770
[  164.040203][ T8160]  ? percpu_ref_put+0x17e/0x230
[  164.045094][ T8160]  raid5_run+0x8af/0x2a30
[  164.049461][ T8160]  ? md_run+0xa48/0x2230
[  164.053741][ T8160]  ? mempool_free+0x320/0x320
[  164.058541][ T8160]  ? mempool_init+0x3a/0x50
[  164.063068][ T8160]  md_run+0x10c5/0x2230
[  164.067235][ T8160]  do_md_run+0x34/0x570
[  164.071397][ T8160]  md_ioctl+0x20fa/0x24e0
[  164.075922][ T8160]  ? blkdev_common_ioctl+0x10ee/0x2580
[  164.081404][ T8160]  ? md_release+0x1e0/0x1e0
[  164.085919][ T8160]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  164.091599][ T8160]  ? blkdev_bszset+0x1f0/0x1f0
[  164.096471][ T8160]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  164.102055][ T8160]  ? md_release+0x1e0/0x1e0
[  164.106603][ T8160]  blkdev_ioctl+0x5b2/0x730
[  164.111426][ T8160]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  164.116901][ T8160]  ? bpf_lsm_file_ioctl+0x9/0x10
[  164.121868][ T8160]  ? security_file_ioctl+0x80/0xa0
[  164.127004][ T8160]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  164.132666][ T8160]  __se_sys_ioctl+0xfd/0x170
[  164.137271][ T8160]  do_syscall_64+0x55/0xb0
[  164.141695][ T8160]  ? clear_bhb_loop+0x40/0x90
[  164.146380][ T8160]  ? clear_bhb_loop+0x40/0x90
[  164.151058][ T8160]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  164.157053][ T8160] RIP: 0033:0x7f8f37f9f559
[  164.161565][ T8160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.181535][ T8160] RSP: 002b:00007f8f38de0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  164.190233][ T8160] RAX: ffffffffffffffda RBX: 00007f8f38225fa0 RCX: 00007f8f37f9f559
[  164.198571][ T8160] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[  164.206802][ T8160] RBP: 00007f8f38036b20 R08: 0000000000000000 R09: 0000000000000000
[  164.214788][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.223064][ T8160] R13: 00007f8f38226038 R14: 00007f8f38225fa0 R15: 00007ffd431f1918
[  164.231168][ T8160]  </TASK>
[  164.234294][ T8160] ==================================================================
[  164.272915][ T8160] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  164.280274][ T8160] CPU: 1 PID: 8160 Comm: syz.0.708 Not tainted syzkaller #0
[  164.287581][ T8160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  164.297658][ T8160] Call Trace:
[  164.300960][ T8160]  <TASK>
[  164.303912][ T8160]  dump_stack_lvl+0x18c/0x250
[  164.308710][ T8160]  ? show_regs_print_info+0x20/0x20
[  164.313935][ T8160]  ? load_image+0x420/0x420
[  164.318471][ T8160]  panic+0x2ca/0x720
[  164.322469][ T8160]  ? bpf_jit_dump+0xd0/0xd0
[  164.326974][ T8160]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  164.332958][ T8160]  ? _raw_spin_unlock+0x40/0x40
[  164.337822][ T8160]  ? free_conf+0x90/0x4b0
[  164.342150][ T8160]  check_panic_on_warn+0x84/0xa0
[  164.347086][ T8160]  ? free_conf+0x90/0x4b0
[  164.351411][ T8160]  end_report+0x6f/0x130
[  164.355647][ T8160]  kasan_report+0x128/0x150
[  164.360151][ T8160]  ? free_conf+0x90/0x4b0
[  164.364474][ T8160]  kasan_check_range+0x241/0x290
[  164.369420][ T8160]  free_conf+0x90/0x4b0
[  164.373580][ T8160]  ? __raw_spin_lock_init+0x45/0x100
[  164.379302][ T8160]  setup_conf+0x16ca/0x2a50
[  164.383799][ T8160]  ? percpu_ref_put+0x1e/0x230
[  164.388574][ T8160]  ? __lock_acquire+0x7eb0/0x7eb0
[  164.393590][ T8160]  ? __add_stripe_bio+0x770/0x770
[  164.398603][ T8160]  ? percpu_ref_put+0x17e/0x230
[  164.403454][ T8160]  raid5_run+0x8af/0x2a30
[  164.407781][ T8160]  ? md_run+0xa48/0x2230
[  164.412017][ T8160]  ? mempool_free+0x320/0x320
[  164.416688][ T8160]  ? mempool_init+0x3a/0x50
[  164.421191][ T8160]  md_run+0x10c5/0x2230
[  164.425347][ T8160]  do_md_run+0x34/0x570
[  164.429512][ T8160]  md_ioctl+0x20fa/0x24e0
[  164.433994][ T8160]  ? blkdev_common_ioctl+0x10ee/0x2580
[  164.439552][ T8160]  ? md_release+0x1e0/0x1e0
[  164.444073][ T8160]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  164.449738][ T8160]  ? blkdev_bszset+0x1f0/0x1f0
[  164.454596][ T8160]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  164.460063][ T8160]  ? md_release+0x1e0/0x1e0
[  164.464562][ T8160]  blkdev_ioctl+0x5b2/0x730
[  164.469075][ T8160]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  164.474534][ T8160]  ? bpf_lsm_file_ioctl+0x9/0x10
[  164.479464][ T8160]  ? security_file_ioctl+0x80/0xa0
[  164.484675][ T8160]  ? blkdev_compat_ptr_ioctl+0xd0/0xd0
[  164.490241][ T8160]  __se_sys_ioctl+0xfd/0x170
[  164.494832][ T8160]  do_syscall_64+0x55/0xb0
[  164.499431][ T8160]  ? clear_bhb_loop+0x40/0x90
[  164.504166][ T8160]  ? clear_bhb_loop+0x40/0x90
[  164.508857][ T8160]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  164.514924][ T8160] RIP: 0033:0x7f8f37f9f559
[  164.519354][ T8160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.539082][ T8160] RSP: 002b:00007f8f38de0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  164.547676][ T8160] RAX: ffffffffffffffda RBX: 00007f8f38225fa0 RCX: 00007f8f37f9f559
[  164.555679][ T8160] RDX: 0000000000000000 RSI: 00000000400c0930 RDI: 0000000000000004
[  164.563660][ T8160] RBP: 00007f8f38036b20 R08: 0000000000000000 R09: 0000000000000000
[  164.571648][ T8160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.580150][ T8160] R13: 00007f8f38226038 R14: 00007f8f38225fa0 R15: 00007ffd431f1918
[  164.588159][ T8160]  </TASK>
[  164.591444][ T8160] Kernel Offset: disabled
[  164.595929][ T8160] Rebooting in 86400 seconds..