last executing test programs:

1m55.696259402s ago: executing program 0 (id=636):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[], 0x1, 0xa23, &(0x7f0000001b00)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWbbVOLZk5/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAeJBeGvvG0GHv/wDwkXLO538AAAAAAAAAAAAAANjpUhTxZ5Hi1Z+004Xqekf9TGv2ytXxkdHNd9uTIkUtiqq+/Fs/eOjwkaPHjg938877f9iejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nX/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/8KPf4nZneOyKIn4WKerfezc1I6IW9z4Wd3nu3G97qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0YPYC7uSSPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+O7tqd2HPm5BX9m3IuJmPARztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFz6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVh/794UHa4a9N9ShionrFb6cPfrADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MXe6nrH0uIm7E1s7J7c+nDqda+efD7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/elM3e15z63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDI2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfR3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234/1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNuwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnN/58oc1/wM9267lef1xnv+Dd5n/v48Uf/LTp3JdZ+wP5dsfr/5dm//fiRT/9avra4/l2n1rtQe32q3tVs7/lyLFiR/9aLXPef7zyK7NUO/8f7Zvfa4+S7Zp/h/v2TaQ23X4lxyLj6LF17/9WnN6emrBBRce2IXyKGIHNMOFO1zY7lcmHoTy/f+fI8ULZ2qpexyT3/8/1rm2dvz3/nfW3v9f2JCrtun9f1/PthfyUUt/X0R9aWa+f39EffH1b3+5NdO8PHV5anb42NEjzw8fO/Z8/67usd3apS0P3SOhnP8zkeKVn/7L6ueY9cd/mx//792Qq7Zp/j/Z26d1xzVbHoqPpHL+r0eK77797urnzTsd/3c//x/4wvpc/f+3TfP/qZ5t1W/8Px7xfM+2A5+OOLXVxwIAAIBHzN68Tv6nv/4Pq+e8r//8H1/s1vZ+/3M7O+H8fwAAAAAA+Kjbm4r4q0jxP0NfSt1zyLby+8/JDblqm37/t79n2+QDOq9ly4MMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALADpSji6Ujx6k/aabkor3fUz7Rmr1wdHxndfLc9KVLUoqjqy7/1g4cOHzl67PhwN++8/4ftyXh57Nypxum5mfmFqcXFqcnG+Gzr4tzk1Jbv4V7332iwGoDGzGtXJi9dWmwceu7wupuvDryz+7H9AyeOv3h+X7d2fGR0dKynpq//Az/6LdJttu+KIi5Fivr33k3/UUTU4t7H4i7PnfttT9WJwaoT4yOjVUemW83ZpfLGVMtVtYiBnp1OdsfoAczFPWlEXCubXzZ4sOze2HxzoTkxPdU421xYai215mZTrdPasj8DUYvhFDEfEe3i1rvrjyImIsX332+nt4uIojsOz7409o2hw3dvT+0+9LHXync33dxX9q2IuBkPwZztYLujiI9Fih+cH4qfFZ1xrYbtmYivl/l0xDfLXI64nq+n8gnyVMR7mzyfeLj0RRFnI8Vcaqf/LPLcV68rZ15pfG320lxPbfd15aF/f3iQdvhrUz2K+Hn1it9OP/f/GQAAAADgEVLEb0aKGzMHUrU+uLqm2Jq93DjXnJjufK3f/e6/kfdaWVlZGUidbOQcynky59mcF3LO57yW83rON3PeyPlWzps5l3O2c0YtP37ORs6hnCdzns15Ied8zms5r+d8M+eNnG/lvJlzOWc7Z/ieHAAAAAAAANiBalHEE5Hih2+000rRWeC9EJ1cts75yPv/AAAA////DD1f")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x1)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

1m55.237283362s ago: executing program 0 (id=640):
syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x4400, 0x0, 0x0, 0x0, 0x0)
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)='\x04', 0x1, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m55.050573749s ago: executing program 0 (id=641):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20)

1m53.078314925s ago: executing program 0 (id=654):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc16, &(0x7f0000001940)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x0, 0x0, 0x1400)

1m52.435363103s ago: executing program 0 (id=652):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x200002, &(0x7f0000000040), 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x2000, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x800000)
mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc4)

1m51.693505944s ago: executing program 0 (id=663):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe42}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4018044)

1m51.370336159s ago: executing program 32 (id=663):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe42}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4018044)

7.474611978s ago: executing program 1 (id=1723):
socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000640)='net/packet\x00')
read$nci(r0, &(0x7f0000000280)=""/134, 0x86)

6.02809239s ago: executing program 1 (id=1730):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0x94}}, 0x0)

5.865555217s ago: executing program 1 (id=1731):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}}, 0x0)

5.742876183s ago: executing program 1 (id=1732):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb1405f, 0x0, 0x21, 0x0, &(0x7f0000000280))
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x800021, 0x0)
syz_usb_connect$uac1(0x3, 0xa4, 0x0, 0x0)

4.908955278s ago: executing program 4 (id=1739):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x394, &(0x7f0000000700)="$eJzs3T+IHNUfAPDv3uz9+5H87gpBFITRTtCQREG08Y5wgeA2UZaohbiYRMPtKeRwMSmyORuxFFJqZWehhUU6G1GRdBa2RpCoWGi6gCEjszO7O3N7Z4JhE4OfT7F8773v982b3bnbd3Psu1dXYv34bJy8evVKLCw0orlyaCWuNWI5khg6H5PmdmgDAO4N17Is/sgKEV/cSklj+rMCAKZp8P7/+t5Ky7tfj+OvJvKz4t1/9k7MDQCYjvL3/8VqW7ItZ2GianHa0wIApqh+/z8iHplIqfypvzmxNgAA7j0vvPTyc6utiOfTdCFi471eu9eOZ8b9qyfjVHTjROyPpbgeUSwU8ofG4PHwkdba/jRN+/HzcrTzil47YqPfaxcrhdVkUD8fB2Iplsv6crWRZVly+PPW2oF0ICLO93uz+SgbjV57dnCXYXUxTv3wvzgRByON+ybqI4601kZrknZ+3MHxZyO2xvct8vnvi6X47rV4K7pxPPLa4bKmtXbuQJoeylp7GuP6fq89P8grTN4BAQAAAAAAAAAAAAAAAAAAAACA27Gv2Htnb5qmy6P9c7Lx/j37yoRafzOi2OtntD/QVrE/UDafRZb9/s7j7feTqO0PNNjgp7a/TjNm7u6pAwAAAAAAAAAAAAAAAAAAwL/G5pm56HS7J05vnjm7Xg36pzfPzERE3vLmt59+uRj1nMVygHpVLWiWKZWudFyVJcPkLKnllEGSH7zRLFo+uTiacSWnchbj8plxzvy2rlqw9+GfPjy7PhzhoWRYdWOck8SO53U2qU+jFmz8vxhw2HJh9+dnMjh4k5zLWZbtVn7ulcmqaEQ0d53qPwyyPPjmyhsPPLE5vAiywqOPLR27fOHjX9c73fzIuW537vTm9Wy9U36988U2EcwPL5ukcv00youtUb0Smp0nbxzds8vIW/WWTvL9by8++MGlsmWm8jLtMI3s2KVxy9s75CTFQT/b3jVXBPk0R13P5kH+HE2MM/wuuenT8lTc1gt3/0crnYvnfvzlVqsqPyRs1AEAAAAAAAAAAAAAAAAAAHdE5bPipfLDvrN/V/X00enPDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADunPH//x8FMbO1reXWgj/7MWw5FsOu+XzAmKsccfkuni0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9VfwUAAP//OoRXdA==")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x400000000000, {0x0, 0x13}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)

2.765699991s ago: executing program 5 (id=1760):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000004850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.56355808s ago: executing program 5 (id=1761):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2c, r0, 0x801, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x2c}}, 0x40000)

2.378954358s ago: executing program 1 (id=1763):
r0 = inotify_init1(0x0)
io_setup(0xf, &(0x7f0000000140)=<r1=>0x0)
r2 = eventfd2(0x0, 0x1)
io_submit(r1, 0x3, &(0x7f0000002000)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0), 0x0, 0xccd, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6, r0, 0x0, 0x0, 0x8, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8, r0, 0x0, 0x0, 0x307c, 0x0, 0x1, r2}])

2.31923963s ago: executing program 5 (id=1764):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00')
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)

2.141147938s ago: executing program 5 (id=1767):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40400c4}, 0x0)

1.980472835s ago: executing program 5 (id=1769):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000021c0)=@delchain={0x170, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_u32={{0x8}, {0x134, 0x2, [@TCA_U32_ACT={0x130, 0x7, [@m_skbedit={0x100, 0x18, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7fffffff}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0xb9, 0x6, "ae7618fac8bef194e7d52d5104403c4e5d31577fc03f50185949080aaa1dc98f84f317f7940367cd55990b3c58f90b82c31d145e7c1bca149bce90dd0f3f5c6da78194b3ebd9a324aa39d2f81d442d6ec9d850f09c5906450150aee2722d5a7b50ec68bc0ace566e23da3bfefd52596e1fb6997677e38b9afc641d9cecc55b09059dcc97d8b8617cf00a5d61b0a8eedd40e119683b156242d9f8ade7de54542e11d4a49c4fd3aab3aaf9079d65ea1a3e807d47a242"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x2c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x91}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.694433557s ago: executing program 3 (id=1771):
unshare(0x20000400)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r1, 0x7a, 0xfffffffffffffffe}, 0x10)

1.609097361s ago: executing program 5 (id=1772):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="401403"], 0x0, 0x0})

1.541270264s ago: executing program 3 (id=1773):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c0002"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.486250476s ago: executing program 1 (id=1774):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)

1.245055207s ago: executing program 4 (id=1775):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f00000003c0))

1.186932699s ago: executing program 3 (id=1777):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.015807497s ago: executing program 3 (id=1779):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xee61}]})

890.451932ms ago: executing program 2 (id=1780):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="cf42a9", 0x3}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
read$hidraw(r1, 0x0, 0x0)

799.143316ms ago: executing program 4 (id=1781):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0)

738.696759ms ago: executing program 3 (id=1782):
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="8100bbbbbbbb0000000000000806000108"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

689.606031ms ago: executing program 4 (id=1783):
pipe2$9p(&(0x7f0000000240), 0x0)
unshare(0x22020600)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x4, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x0, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x80006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0xc, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4016, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0xe, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8004, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0xffff, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x91, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x8, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0xfd, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x8, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff002, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0xb, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

639.450153ms ago: executing program 2 (id=1784):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
close(0x3)

538.697387ms ago: executing program 3 (id=1785):
futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x4)
futex(&(0x7f000000cffc), 0x4, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

479.12919ms ago: executing program 4 (id=1786):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3)

391.848093ms ago: executing program 2 (id=1787):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002040), r0)
sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0)

296.168047ms ago: executing program 2 (id=1788):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x18, 0x0, &(0x7f0000000400)=[@acquire, @increfs, @decrefs], 0x0, 0x0, 0x0})

287.480798ms ago: executing program 4 (id=1789):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

160.410183ms ago: executing program 2 (id=1790):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x17, 0x1}, 0x4a, [0x7ff, 0x3, 0x5, 0x40, 0x0, 0x4, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x5, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x3, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0x103, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x8001, 0x3, 0x9f5, 0x0, 0xb, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0x563, 0x6, 0x8, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x3, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e22, @loopback}}}, 0x108)

0s ago: executing program 2 (id=1791):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@local}, @my=0x1, 0x0, 0x0, 0x421})

kernel console output (not intermixed with test programs):

/136/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.672292][ T5907] RSP: 002b:00007fdf132e3e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  126.672323][ T5907] RAX: ffffffffffffffda RBX: 00007fdf132e3ef0 RCX: 00007fdf1507eeea
[  126.672339][ T5907] RDX: 0000200000000100 RSI: 0000200000012500 RDI: 00007fdf132e3eb0
[  126.672354][ T5907] RBP: 0000200000000100 R08: 00007fdf132e3ef0 R09: 0000000000000010
[  126.715149][ T5907] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000012500
[  126.723138][ T5907] R13: 00007fdf132e3eb0 R14: 000000000001260c R15: 0000200000000040
[  126.731136][ T5907]  </TASK>
[  126.734234][    C0] vkms_vblank_simulate: vblank timer overrun
[  126.740348][ T5907] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[  127.008880][ T5900] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm syz.1.579: lblock 0 mapped to illegal pblock 0 (length 1)
[  127.226552][ T1234] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 1)
[  127.382813][ T1234] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  127.452589][ T1234] EXT4-fs (loop1): This should not happen!! Data will be lost
[  127.452589][ T1234] 
[  127.568055][ T5903] loop0: detected capacity change from 0 to 262144
[  127.581625][  T150] block nbd0: Possible stuck request ffff888020f28000: control (read@0,1024B). Runtime 30 seconds
[  127.602074][  T150] block nbd0: Possible stuck request ffff888020f28200: control (read@1024,1024B). Runtime 30 seconds
[  127.613052][  T150] block nbd0: Possible stuck request ffff888020f28400: control (read@2048,1024B). Runtime 30 seconds
[  127.623982][  T150] block nbd0: Possible stuck request ffff888020f28600: control (read@3072,512B). Runtime 30 seconds
[  127.724833][ T5919] loop4: detected capacity change from 0 to 8192
[  127.793810][ T5919] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  127.804404][ T5903] F2FS-fs (loop0): invalid crc value
[  127.854909][ T5903] F2FS-fs (loop0): Found nat_bits in checkpoint
[  127.904299][ T5903] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  128.460124][ T5939] netlink: 'syz.3.593': attribute type 15 has an invalid length.
[  128.865320][ T5581] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  129.016097][ T5962] loop1: detected capacity change from 0 to 1024
[  129.139495][ T5581] usb 4-1: Using ep0 maxpacket: 8
[  129.233186][ T5963] loop4: detected capacity change from 0 to 8192
[  129.239763][ T4231] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  129.275620][ T5581] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.324837][ T5581] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.347142][ T5581] usb 4-1: config 0 interface 0 has no altsetting 0
[  129.354542][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  129.354558][   T26] audit: type=1326 audit(1764172562.922:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7ffc0000
[  129.400571][ T5581] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  129.424662][ T5581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.442777][   T26] audit: type=1107 audit(1764172562.962:107): pid=5964 uid=0 auid=0 ses=2 subj=unconfined msg=''
[  129.472845][ T5581] usb 4-1: config 0 descriptor??
[  129.498816][   T26] audit: type=1326 audit(1764172562.962:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbb86cb5749 code=0x7ffc0000
[  129.528505][ T4231] usb 1-1: Using ep0 maxpacket: 8
[  129.595352][   T26] audit: type=1326 audit(1764172562.962:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbb86cb5783 code=0x7ffc0000
[  129.665803][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  129.687754][ T5963] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  129.691655][   T26] audit: type=1326 audit(1764172562.962:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbb86cb5783 code=0x7ffc0000
[  129.707490][ T4231] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  129.743978][ T5963] REISERFS (device loop4): using ordered data mode
[  129.750901][ T5963] reiserfs: using flush barriers
[  129.758592][   T26] audit: type=1326 audit(1764172562.962:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7ffc0000
[  129.782531][   T26] audit: type=1326 audit(1764172562.962:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7ffc0000
[  129.806271][   T26] audit: type=1326 audit(1764172562.962:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbb86cb5749 code=0x7ffc0000
[  129.821209][ T5963] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  129.830168][   T26] audit: type=1326 audit(1764172562.962:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7ffc0000
[  129.870791][ T5963] REISERFS (device loop4): checking transaction log (loop4)
[  129.882763][ T5963] REISERFS (device loop4): Using r5 hash to sort names
[  129.905734][ T5963] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  129.930717][ T5963] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  129.955574][ T4231] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  129.973001][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.983695][   T26] audit: type=1800 audit(1764172563.552:115): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.605" name="file1" dev="loop4" ino=4 res=0 errno=0
[  130.006796][ T5581] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0
[  130.013732][ T5581] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0
[  130.024484][ T4231] usb 1-1: Product: syz
[  130.035139][ T4231] usb 1-1: Manufacturer: syz
[  130.039802][ T4231] usb 1-1: SerialNumber: syz
[  130.066066][ T5581] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0
[  130.073133][ T5581] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0
[  130.095576][ T4231] usb 1-1: config 0 descriptor??
[  130.119595][ T5581] ntrig 0003:1B96:0004.0004: unknown main item tag 0x0
[  130.166497][ T5581] ntrig 0003:1B96:0004.0004: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0
[  130.290673][ T5581] ntrig 0003:1B96:0004.0004: Firmware version: 4.6.18.42.6 (5a58 5e55)
[  130.343582][ T5980] loop1: detected capacity change from 0 to 4096
[  130.573387][ T4432] usb 4-1: USB disconnect, device number 4
[  130.574665][ T5984] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.624727][ T5983] fido_id[5983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  130.723115][ T5581] usb 1-1: USB disconnect, device number 6
[  131.163731][ T5996] loop2: detected capacity change from 0 to 64
[  131.312566][ T5994] loop1: detected capacity change from 0 to 4096
[  131.685645][ T5580] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  131.744287][ T6018] loop4: detected capacity change from 0 to 16
[  131.829681][ T6022] loop0: detected capacity change from 0 to 1024
[  131.845154][ T6018] erofs: (device loop4): mounted with root inode @ nid 36.
[  131.870148][ T5996] attempt to access beyond end of device
[  131.870148][ T5996] loop2: rw=1, want=79, limit=64
[  131.871895][ T6018] erofs: (device loop4): erofs_read_inode: unsupported i_format 36 of nid 37
[  132.265433][ T5580] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  132.274637][ T5580] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.322954][ T5580] usb 4-1: Product: syz
[  132.334060][ T5580] usb 4-1: Manufacturer: syz
[  132.345412][ T5580] usb 4-1: SerialNumber: syz
[  132.376418][ T5580] usb 4-1: config 0 descriptor??
[  132.426943][ T6032] loop0: detected capacity change from 0 to 1024
[  132.537417][ T6032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.645404][ T5580] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  132.725560][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.731951][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.750958][ T5581] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  132.754685][ T4446] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  133.092216][ T4446] usb 5-1: Using ep0 maxpacket: 8
[  133.145456][ T5580] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  133.168709][ T5580] usb 4-1: USB disconnect, device number 5
[  133.195457][ T5581] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.236744][ T5581] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.241110][ T4446] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.269369][ T4446] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.294668][ T4446] usb 5-1: config 0 interface 0 has no altsetting 0
[  133.316615][ T4446] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  133.320645][ T6038] loop1: detected capacity change from 0 to 40427
[  133.331752][ T4446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.335386][ T5581] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  133.366711][ T4446] usb 5-1: config 0 descriptor??
[  133.384413][ T6038] F2FS-fs (loop1): invalid crc value
[  133.390029][ T5581] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  133.402113][ T5581] usb 3-1: SerialNumber: syz
[  133.431266][ T6038] F2FS-fs (loop1): Found nat_bits in checkpoint
[  133.490885][ T6038] F2FS-fs (loop1): Start checkpoint disabled!
[  133.513791][ T6038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  133.568980][ T6038] attempt to access beyond end of device
[  133.568980][ T6038] loop1: rw=2049, want=45104, limit=40427
[  133.699362][ T5581] usb 3-1: 0:2 : does not exist
[  133.751261][ T5581] usb 3-1: USB disconnect, device number 6
[  133.761479][ T1234] attempt to access beyond end of device
[  133.761479][ T1234] loop1: rw=2049, want=40976, limit=40427
[  133.846637][ T4446] ntrig 0003:1B96:0004.0005: unknown main item tag 0x0
[  133.853612][ T4446] ntrig 0003:1B96:0004.0005: unknown main item tag 0x0
[  133.875184][ T4446] ntrig 0003:1B96:0004.0005: unknown main item tag 0x0
[  133.882137][ T4446] ntrig 0003:1B96:0004.0005: unknown main item tag 0x0
[  133.919057][ T4446] ntrig 0003:1B96:0004.0005: unknown main item tag 0x0
[  133.933264][ T4446] ntrig 0003:1B96:0004.0005: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.4-1/input0
[  133.998519][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.061443][ T4446] ntrig 0003:1B96:0004.0005: Firmware version: 4.6.18.42.6 (5a58 5e55)
[  134.294094][   T23] usb 5-1: USB disconnect, device number 8
[  134.922928][ T6048] loop0: detected capacity change from 0 to 2048
[  134.958945][ T6052] netlink: 'syz.3.646': attribute type 2 has an invalid length.
[  135.052663][ T6057] loop2: detected capacity change from 0 to 1024
[  135.105824][ T6048] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.250615][ T6048] overlayfs: upper fs needs to support d_type.
[  135.280418][ T6048] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  135.335258][ T6048] overlayfs: failed to set xattr on upper
[  135.355243][ T6048] overlayfs: ...falling back to index=off,metacopy=off.
[  135.641863][ T4188] UDF-fs: error (device loop0): udf_read_inode: (ino 1416) failed !bh
[  135.668154][ T4188] UDF-fs: error (device loop0): udf_read_inode: (ino 1416) failed !bh
[  136.009412][ T6078] loop4: detected capacity change from 0 to 4096
[  136.151220][ T6078] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  136.213777][ T4273] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.322305][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.662'.
[  136.567031][ T4273] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.049874][ T6114] loop2: detected capacity change from 0 to 512
[  137.090422][   T26] audit: type=1326 audit(1764172570.662:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6106 comm="syz.3.674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf1507d749 code=0x7fc00000
[  137.112639][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.294338][ T6120] loop4: detected capacity change from 0 to 1764
[  137.489669][ T6114] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  137.575542][ T6114] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.604811][ T6117] chnl_net:caif_netlink_parms(): no params data found
[  137.693991][ T6114] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #12: comm syz.2.676: corrupted xattr block 6
[  137.758223][ T6114] overlayfs: failed to get origin (-117)
[  137.778977][ T6114] EXT4-fs error (device loop2): ext4_xattr_block_find:1867: inode #12: comm syz.2.676: corrupted xattr block 6
[  137.849461][ T6114] overlayfs: failed to verify origin (/, ino=2, err=-117)
[  137.937818][ T6114] overlayfs: failed to verify upper root origin
[  138.006219][ T6148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.197506][ T4273] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.248482][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.255731][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.264428][ T6117] device bridge_slave_0 entered promiscuous mode
[  138.306831][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.326818][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.366269][ T6117] device bridge_slave_1 entered promiscuous mode
[  138.509080][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.586416][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.656765][ T4273] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.770555][ T6173] program syz.1.697 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  138.795824][ T6175] syz.2.699[6175] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.795932][ T6175] syz.2.699[6175] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  138.839023][ T6117] team0: Port device team_slave_0 added
[  139.017313][ T6117] team0: Port device team_slave_1 added
[  139.181466][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.218982][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.275360][ T5581] Bluetooth: hci4: command 0x0409 tx timeout
[  139.280327][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'.
[  139.355132][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.444462][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.465268][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.580391][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.778868][ T6172] loop4: detected capacity change from 0 to 32768
[  139.849863][ T6172] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.698 (6172)
[  139.866801][ T6117] device hsr_slave_0 entered promiscuous mode
[  139.881185][ T6117] device hsr_slave_1 entered promiscuous mode
[  139.919634][ T6117] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.930031][ T6117] Cannot create hsr debugfs directory
[  139.950400][ T6172] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  139.960413][ T6172] BTRFS info (device loop4): using free space tree
[  140.012728][ T6172] BTRFS info (device loop4): has skinny extents
[  140.187938][   T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  140.286981][ T6172] BTRFS info (device loop4): enabling ssd optimizations
[  140.591867][ T6192] loop1: detected capacity change from 0 to 40427
[  140.634765][ T6192] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff
[  140.768722][ T6192] F2FS-fs (loop1): invalid crc value
[  140.790911][   T13] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  140.796066][ T6117] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  140.811803][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.837445][ T6192] F2FS-fs (loop1): Found nat_bits in checkpoint
[  140.863959][   T13] usb 3-1: config 0 descriptor??
[  140.932472][   T13] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  140.988814][ T6192] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  141.142695][   T13] gspca_sn9c2028: read1 error -32
[  141.233373][   T13] gspca_sn9c2028: read1 error -32
[  141.369551][ T6238] Bluetooth: hci4: command 0x041b tx timeout
[  141.378694][ T6117] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  141.427237][ T6117] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  141.485359][ T6117] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  141.517372][ T4446] usb 3-1: USB disconnect, device number 7
[  141.924915][ T6256] loop4: detected capacity change from 0 to 2048
[  142.009860][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.092375][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  142.108421][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  142.141478][ T6117] 8021q: adding VLAN 0 to HW filter on device team0
[  142.179690][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  142.210775][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  142.224626][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.231924][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.296640][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  142.324744][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  142.362419][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  142.363109][ T6256] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  142.396557][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.403777][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.450447][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'.
[  142.510904][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'.
[  142.550431][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz.1.709'.
[  142.689074][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  142.727105][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  142.776243][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  142.825288][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  142.864314][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  142.887411][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  142.953668][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  142.963023][ T6239] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  143.007050][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  143.048144][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  143.077646][ T6117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  143.120084][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  143.150290][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  143.169049][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  143.255524][ T6239] usb 4-1: Using ep0 maxpacket: 16
[  143.377491][ T6239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.402132][ T6239] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  143.461832][ T6239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.503730][ T4193] Bluetooth: hci4: command 0x040f tx timeout
[  143.521011][ T6239] usb 4-1: config 0 descriptor??
[  143.651400][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  143.699291][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  143.746218][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.753920][ T6287] loop4: detected capacity change from 0 to 32768
[  144.028037][ T6239] cypress 0003:04B4:07B1.0006: unknown main item tag 0x1
[  144.044681][ T6322] loop1: detected capacity change from 0 to 256
[  144.051384][ T6239] cypress 0003:04B4:07B1.0006: item fetching failed at offset 1/5
[  144.102657][ T6239] cypress 0003:04B4:07B1.0006: parse failed
[  144.122519][ T6239] cypress: probe of 0003:04B4:07B1.0006 failed with error -22
[  144.193167][ T6287] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.719 (6287)
[  144.308105][ T6238] usb 4-1: USB disconnect, device number 6
[  144.382756][ T6322] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x542a3d5d, utbl_chksum : 0xe619d30d)
[  144.401358][ T6287] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  144.425153][ T6287] BTRFS info (device loop4): enabling auto defrag
[  144.461072][ T6287] BTRFS info (device loop4): force clearing of disk cache
[  144.484926][ T6287] BTRFS info (device loop4): enabling disk space caching
[  144.515210][ T6287] BTRFS info (device loop4): max_inline at 0
[  144.542455][ T6287] BTRFS info (device loop4): disk space caching is enabled
[  144.564730][ T4273] device hsr_slave_0 left promiscuous mode
[  144.585148][ T6287] BTRFS info (device loop4): has skinny extents
[  144.606731][ T4273] device hsr_slave_1 left promiscuous mode
[  144.630860][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.725181][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.786815][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  144.807306][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_1
[  144.831145][ T4273] bridge0: port 3(batadv0) entered disabled state
[  144.864272][ T4273] device bridge_slave_1 left promiscuous mode
[  144.887026][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.939962][ T4273] device bridge_slave_0 left promiscuous mode
[  144.971557][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.037607][ T4273] device veth1_macvtap left promiscuous mode
[  145.043796][ T4273] device veth0_macvtap left promiscuous mode
[  145.051733][ T4273] device veth1_vlan left promiscuous mode
[  145.067188][ T4273] device veth0_vlan left promiscuous mode
[  145.155137][ T6287] BTRFS info (device loop4): enabling ssd optimizations
[  145.204318][ T6287] BTRFS info (device loop4): clearing free space tree
[  145.215544][ T6287] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  145.249653][ T6287] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  145.294956][ T4273] bond1 (unregistering): Released all slaves
[  145.607279][ T4193] Bluetooth: hci4: command 0x0419 tx timeout
[  145.752512][ T6344] loop1: detected capacity change from 0 to 32768
[  145.833892][ T6344] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.731 (6344)
[  145.873978][ T4273] team0 (unregistering): Port device team_slave_1 removed
[  145.887086][ T6344] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  145.895971][ T6344] BTRFS info (device loop1): using free space tree
[  145.917585][ T6344] BTRFS info (device loop1): has skinny extents
[  146.401520][ T6344] BTRFS info (device loop1): enabling ssd optimizations
[  146.527368][ T4273] team0 (unregistering): Port device team_slave_0 removed
[  146.559410][ T4273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.634657][ T4273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.713142][ T6390] syz.4.737 uses obsolete (PF_INET,SOCK_PACKET)
[  146.735593][ T6344] BTRFS error (device loop1): target device  is invalid!
[  147.101841][ T4430] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  147.365486][ T4273] bond0 (unregistering): Released all slaves
[  147.502554][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'.
[  147.542109][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  147.554493][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.590671][ T4430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  147.609826][ T4430] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  147.635046][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  147.664115][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.674690][ T4430] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  147.691481][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.749957][ T4430] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  147.758637][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.775150][ T4430] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  147.830182][ T6117] device veth0_vlan entered promiscuous mode
[  147.843921][ T6117] device veth1_vlan entered promiscuous mode
[  147.850104][ T4430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.940069][ T4430] usb 5-1: config 0 descriptor??
[  147.965348][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  147.973564][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  148.051697][ T6411] loop1: detected capacity change from 0 to 1024
[  148.055460][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.086268][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  148.158545][ T6117] device veth0_macvtap entered promiscuous mode
[  148.197641][ T6117] device veth1_macvtap entered promiscuous mode
[  148.228311][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.241527][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.251867][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.262801][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.272925][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.283694][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.294003][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  148.326970][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.339489][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  148.352148][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.363073][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.373945][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.384878][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.397155][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.423129][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.443694][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  148.464841][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  148.497873][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  148.519002][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  148.533661][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  148.552571][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  148.593551][ T6411] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.745: Invalid block bitmap block 0 in block_group 0
[  148.614996][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  148.648628][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  148.674315][ T6411] Quota error (device loop1): write_blk: dquota write failed
[  148.691731][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  148.701207][ T6411] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  148.719937][ T6117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.737070][ T6117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.750798][ T6411] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.745: Failed to acquire dquot type 0
[  148.766473][ T6117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.782981][ T6411] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.745: Freeing blocks not in datazone - block = 0, count = 4096
[  148.811138][ T6117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.852175][ T6411] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.745: Invalid inode bitmap blk 0 in block_group 0
[  148.874666][ T1183] Quota error (device loop1): remove_tree: Getting block too big (0 >= 8)
[  148.910665][ T1183] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:3: Failed to release dquot type 0
[  148.982565][ T6411] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  149.021242][ T6411] EXT4-fs (loop1): 1 orphan inode deleted
[  149.040261][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.057170][ T6411] EXT4-fs (loop1): mounted filesystem without journal. Opts: ��; ,errors=continue. Quota mode: writeback.
[  149.098858][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.164384][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  149.178199][ T4620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.205519][ T4620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.242986][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  149.324121][ T6430] loop2: detected capacity change from 0 to 1024
[  149.470846][ T4430] hdpvr 5-1:0.0: firmware version 0x88 dated _�=&ˆ}��nDT,����w#��������OR�����C���f(
[  149.510145][ T4430] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  149.716094][ T4430] hdpvr 5-1:0.0: device init failed
[  149.721891][ T4430] hdpvr: probe of 5-1:0.0 failed with error -12
[  149.814021][ T4430] usb 5-1: USB disconnect, device number 9
[  150.117554][ T6446] loop5: detected capacity change from 0 to 256
[  150.279790][ T6446] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  150.426711][ T6457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.814851][ T6471] loop4: detected capacity change from 0 to 256
[  150.821455][ T5574] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  150.941824][ T6471] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.021070][ T6471] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  151.137204][ T6471] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x65b64522, utbl_chksum : 0xe619d30d)
[  151.239853][ T5574] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.268985][ T5574] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  151.405308][ T5574] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  151.414390][ T5574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  151.497038][ T5574] usb 2-1: SerialNumber: syz
[  151.840494][ T6497] loop4: detected capacity change from 0 to 512
[  151.858138][ T5574] usb 2-1: 0:2 : does not exist
[  151.878003][ T6466] loop5: detected capacity change from 0 to 32768
[  151.929411][ T6466] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.762 (6466)
[  151.938586][ T6497] EXT4-fs (loop4): Mount option "nojournal_checksum" incompatible with ext2
[  152.046517][ T6466] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  152.110652][ T6466] BTRFS info (device loop5): using free space tree
[  152.129483][ T6466] BTRFS info (device loop5): has skinny extents
[  152.149398][ T5574] usb 2-1: USB disconnect, device number 7
[  152.464815][ T4329] udevd[4329]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.813205][ T6466] BTRFS info (device loop5): enabling ssd optimizations
[  152.916421][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'.
[  153.049689][ T6535] loop1: detected capacity change from 0 to 256
[  153.096290][ T6494] loop2: detected capacity change from 0 to 32768
[  153.185736][ T6494] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.771 (6494)
[  153.380201][ T6494] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  153.396118][ T6548] loop4: detected capacity change from 0 to 16
[  153.451267][ T6494] BTRFS info (device loop2): enabling auto defrag
[  153.476446][ T6494] BTRFS info (device loop2): force clearing of disk cache
[  153.491667][ T6494] BTRFS info (device loop2): enabling disk space caching
[  153.505133][ T6548] erofs: (device loop4): mounted with root inode @ nid 36.
[  153.535476][ T6494] BTRFS info (device loop2): max_inline at 0
[  153.549431][ T4620] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared)
[  153.589804][ T6494] BTRFS info (device loop2): disk space caching is enabled
[  153.628537][ T6494] BTRFS info (device loop2): has skinny extents
[  153.761386][ T4186] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 46
[  153.841005][ T4186] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  153.868175][ T4186] erofs: (device loop4): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  154.737614][ T6599] loop1: detected capacity change from 0 to 128
[  155.010963][ T6611] device bridge0 entered promiscuous mode
[  155.046760][ T6610] device bridge0 left promiscuous mode
[  155.431165][ T6494] BTRFS error (device loop2): open_ctree failed: -22
[  155.647450][ T6626] loop5: detected capacity change from 0 to 512
[  155.728777][ T6626] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.801: inode has both inline data and extents flags
[  155.779403][ T6626] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.801: couldn't read orphan inode 15 (err -117)
[  155.820254][ T6626] EXT4-fs (loop5): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback.
[  156.129329][ T6651] program syz.3.811 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.917412][ T6681] loop1: detected capacity change from 0 to 1024
[  157.261947][ T6681] hfsplus: bad catalog entry type
[  157.435016][ T4620] hfsplus: b-tree write err: -5, ino 4
[  157.455539][ T6703] program syz.5.826 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.685705][  T150] block nbd0: Possible stuck request ffff888020f28000: control (read@0,1024B). Runtime 60 seconds
[  157.696457][  T150] block nbd0: Possible stuck request ffff888020f28200: control (read@1024,1024B). Runtime 60 seconds
[  157.708288][  T150] block nbd0: Possible stuck request ffff888020f28400: control (read@2048,1024B). Runtime 60 seconds
[  157.719366][  T150] block nbd0: Possible stuck request ffff888020f28600: control (read@3072,512B). Runtime 60 seconds
[  158.258861][ T6743] netlink: 'syz.3.844': attribute type 2 has an invalid length.
[  158.480700][ T6740] loop5: detected capacity change from 0 to 32768
[  158.639026][ T6740] 
[  158.639026][ T6740]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.639026][ T6740] 
[  158.703702][ T6740] 
[  158.703702][ T6740]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.703702][ T6740] 
[  158.703807][ T6740] 
[  158.703807][ T6740]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.703807][ T6740] 
[  158.703823][ T6740] 
[  158.703823][ T6740]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.703823][ T6740] 
[  158.719275][  T275] 
[  158.719275][  T275]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.719275][  T275] 
[  158.770538][ T6117] 
[  158.770538][ T6117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.770538][ T6117] 
[  158.771413][ T6117] 
[  158.771413][ T6117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  158.771413][ T6117] 
[  159.321724][ T5579] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  159.765582][ T5579] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  159.778548][ T5579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.825756][ T5579] usb 5-1: config 0 descriptor??
[  159.897373][ T5579] gspca_main: cpia1-2.14.0 probing 0813:0001
[  160.164032][ T4446] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  160.308922][ T6809] nbd1: detected capacity change from 0 to 549764202496
[  160.316608][ T5579] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  160.336595][ T4183] block nbd1: Receive control failed (result -104)
[  160.515926][ T4245] kernel write not supported for file /481/gid_map (pid: 4245 comm: kworker/1:5)
[  160.633422][ T4446] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  160.642937][ T4446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.674926][ T4446] usb 6-1: config 0 descriptor??
[  160.711752][ T6824] loop1: detected capacity change from 0 to 4096
[  160.739265][ T4446] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  160.745663][ T4430] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  160.755754][ T5579] gspca_cpia1: usb_control_msg 02, error -71
[  160.761789][ T5579] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[  160.829074][ T5579] usb 5-1: USB disconnect, device number 10
[  161.050457][ T4430] usb 3-1: Using ep0 maxpacket: 32
[  161.213739][ T4430] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  161.232752][ T4430] usb 3-1: config 0 has no interface number 0
[  161.243333][ T4430] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.274119][ T4430] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.299362][ T4430] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  161.318519][ T4430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.333693][ T6837] loop1: detected capacity change from 0 to 8
[  161.369541][ T4430] usb 3-1: config 0 descriptor??
[  161.521508][ T6837] SQUASHFS error: Failed to read block 0x260685: -5
[  161.533387][ T6837] SQUASHFS error: Unable to read metadata cache entry [260685]
[  161.543112][ T6837] SQUASHFS error: Unable to read directory block [260685:0]
[  161.570072][   T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  161.703650][ T4446] usb 6-1: USB disconnect, device number 2
[  161.759279][ T6847] netlink: 16 bytes leftover after parsing attributes in process `syz.1.887'.
[  161.986399][ T6854] loop4: detected capacity change from 0 to 2048
[  162.148492][ T4430] uclogic 0003:28BD:0094.0007: pen parameters not found
[  162.181825][ T6854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.195127][ T4430] uclogic 0003:28BD:0094.0007: interface is invalid, ignoring
[  162.304687][   T26] audit: type=1800 audit(1764172596.868:117): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.891" name="bus" dev="loop4" ino=18 res=0 errno=0
[  162.325016][    C0] vkms_vblank_simulate: vblank timer overrun
[  162.377511][   T13] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  162.397628][ T4446] usb 3-1: USB disconnect, device number 8
[  162.411040][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.445165][   T13] usb 4-1: Product: syz
[  162.449459][   T13] usb 4-1: Manufacturer: syz
[  162.454088][   T13] usb 4-1: SerialNumber: syz
[  162.488481][   T13] usb 4-1: config 0 descriptor??
[  162.783621][   T13] usb 4-1: ignoring: probably an ADSL modem
[  162.811302][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'.
[  162.970940][ T6888] binder: 6887:6888 ioctl c0306201 200000000480 returned -14
[  163.184695][ T6893] loop4: detected capacity change from 0 to 64
[  163.198194][   T13] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  163.377534][ T6893] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  163.412756][ T6239] usb 4-1: USB disconnect, device number 7
[  163.579921][ T6875] loop1: detected capacity change from 0 to 32768
[  163.747720][ T6911] loop2: detected capacity change from 0 to 512
[  163.764359][ T6904] loop5: detected capacity change from 0 to 8192
[  163.819941][ T6875] XFS (loop1): Mounting V5 Filesystem
[  163.915258][ T6911] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,auto_da_alloc,,errors=continue. Quota mode: writeback.
[  163.952894][ T6911] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.009092][   T26] audit: type=1326 audit(1764172598.578:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.2.907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x0
[  164.184078][ T6875] XFS (loop1): Ending clean mount
[  164.234303][ T6875] XFS (loop1): Quotacheck needed: Please wait.
[  164.383940][ T6875] XFS (loop1): Quotacheck: Done.
[  164.400536][ T6920] loop4: detected capacity change from 0 to 32768
[  164.476890][ T6940] loop5: detected capacity change from 0 to 512
[  164.517327][ T6920] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.909 (6920)
[  164.571648][ T6920] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  164.610923][ T6920] BTRFS info (device loop4): using free space tree
[  164.631575][ T6940] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  164.675945][ T6920] BTRFS info (device loop4): has skinny extents
[  164.741337][ T4349] XFS (loop1): Unmounting Filesystem
[  165.134225][ T6920] BTRFS info (device loop4): enabling ssd optimizations
[  165.656782][ T4351] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (4351)
[  165.736037][   T26] audit: type=1326 audit(1764172600.308:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7fc00000
[  165.811051][   T26] audit: type=1326 audit(1764172600.308:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbb86cb5749 code=0x7fc00000
[  165.974397][   T26] audit: type=1326 audit(1764172600.308:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7fc00000
[  166.089884][   T26] audit: type=1326 audit(1764172600.308:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7fc00000
[  166.195192][   T26] audit: type=1326 audit(1764172600.308:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7fc00000
[  166.288938][ T4430] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  166.355462][   T26] audit: type=1326 audit(1764172600.308:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7fc00000
[  166.378009][    C0] vkms_vblank_simulate: vblank timer overrun
[  166.400855][   T26] audit: type=1326 audit(1764172600.308:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7fc00000
[  166.462932][   T26] audit: type=1326 audit(1764172600.308:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x7fc00000
[  166.665385][ T6384] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  166.758375][ T7021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.936'.
[  166.799299][ T7021] netlink: 60 bytes leftover after parsing attributes in process `syz.1.936'.
[  166.826062][ T7020] netlink: 60 bytes leftover after parsing attributes in process `syz.1.936'.
[  166.830959][ T4430] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  166.849566][ T7022] netlink: 60 bytes leftover after parsing attributes in process `syz.1.936'.
[  166.857817][ T4430] usb 6-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.892379][ T4430] usb 6-1: config 0 interface 0 has no altsetting 0
[  166.918632][ T4430] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  166.928284][ T4430] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.945336][ T6384] usb 3-1: Using ep0 maxpacket: 32
[  166.973558][ T4430] usb 6-1: config 0 descriptor??
[  167.101133][ T6384] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  167.113858][ T6384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.146084][ T6384] usb 3-1: config 0 descriptor??
[  167.208786][ T6384] gspca_main: sq930x-2.14.0 probing 041e:403c
[  167.495564][ T4430] holtek 0003:1241:5015.0008: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0
[  167.530062][ T4430] holtek 0003:1241:5015.0008: no inputs found
[  167.714564][ T4430] usb 6-1: USB disconnect, device number 3
[  167.749154][ T7049] fido_id[7049]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  167.915516][ T6384] gspca_sq930x: reg_w 0305 fd00 failed -71
[  167.921440][ T6384] sq930x: probe of 3-1:0.0 failed with error -71
[  167.946224][ T6384] usb 3-1: USB disconnect, device number 9
[  168.045326][ T4264] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  168.059219][ T7040] loop4: detected capacity change from 0 to 32768
[  168.348109][ T4264] usb 4-1: Using ep0 maxpacket: 32
[  168.485477][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.526885][ T4264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.590686][ T4264] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  168.620579][ T4264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.671971][ T4264] usb 4-1: config 0 descriptor??
[  168.871722][   T26] kauditd_printk_skb: 57 callbacks suppressed
[  168.871740][   T26] audit: type=1326 audit(1764172603.438:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.5.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffe8d9749 code=0x7ffc0000
[  168.957442][ T7052] udc-core: couldn't find an available UDC or it's busy
[  168.973784][   T26] audit: type=1326 audit(1764172603.438:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.5.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffe8d9749 code=0x7ffc0000
[  168.998764][ T7052] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  169.101329][   T26] audit: type=1326 audit(1764172603.438:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.5.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7feffe8d9749 code=0x7ffc0000
[  169.182535][   T26] audit: type=1326 audit(1764172603.438:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.5.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffe8d9749 code=0x7ffc0000
[  169.207016][ T4264] usbhid 4-1:0.0: can't add hid device: -71
[  169.213068][ T4264] usbhid: probe of 4-1:0.0 failed with error -71
[  169.240600][ T4264] usb 4-1: USB disconnect, device number 8
[  169.281402][   T26] audit: type=1326 audit(1764172603.438:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.5.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feffe8d9749 code=0x7ffc0000
[  169.338328][ T4446] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  169.554583][ T7103] comedi comedi0: Minor 3 could not be opened
[  169.734320][ T7110] loop1: detected capacity change from 0 to 128
[  169.872120][ T4446] usb 6-1: config 3 has an invalid interface number: 184 but max is 0
[  169.890930][ T4446] usb 6-1: config 3 has no interface number 0
[  169.902275][ T4446] usb 6-1: config 3 interface 184 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  169.958001][ T4446] usb 6-1: config 3 interface 184 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 10
[  169.995226][ T4446] usb 6-1: config 3 interface 184 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64
[  170.141035][ T7128] raw_sendmsg: syz.3.976 forgot to set AF_INET. Fix it!
[  170.550998][ T6384] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  170.857263][ T6384] usb 3-1: Using ep0 maxpacket: 8
[  170.918417][ T7130] loop4: detected capacity change from 0 to 131072
[  170.925362][ T4446] usb 6-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=c1.5f
[  170.934439][ T4446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.003198][ T6384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  171.019699][ T6384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  171.027217][ T4446] keyspan 6-1:3.184: Keyspan 2 port adapter converter detected
[  171.048368][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 87
[  171.055914][ T6384] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  171.065665][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 7
[  171.073116][ T6384] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  171.074875][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 81
[  171.085156][ T6384] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  171.120111][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 1
[  171.123616][ T6384] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  171.144708][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 85
[  171.158418][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 5
[  171.167959][ T6384] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.184675][ T6384] usb 3-1: config 0 descriptor??
[  171.201678][ T4446] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  171.216048][ T7136] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  171.263341][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 83
[  171.285800][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 3
[  171.293680][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 4
[  171.333587][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 86
[  171.369969][ T7110] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  171.381989][ T4446] keyspan 6-1:3.184: found no endpoint descriptor for endpoint 6
[  171.399233][ T7110] hpfs: filesystem error: improperly stopped
[  171.406369][ T4446] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  171.423861][ T7110] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  171.459275][ T4185] Bluetooth: hci5: Received unexpected HCI Event 00000000
[  171.467116][ T4185] Bluetooth: hci5: Received unexpected HCI Event 00000000
[  171.474280][ T4185] Bluetooth: hci5: Received unexpected HCI Event 00000000
[  171.482423][ T4185] Bluetooth: hci5: Received unexpected HCI Event 00000000
[  171.490014][ T4185] Bluetooth: hci5: Received unexpected HCI Event 00000000
[  171.505161][ T4446] usb 6-1: USB disconnect, device number 4
[  171.517153][ T7110] hpfs: You really don't want any checks? You are crazy...
[  171.530736][ T7110] hpfs: hpfs_map_sector(): read error
[  171.542463][ T7110] hpfs: code page support is disabled
[  171.549902][ T7110] hpfs: hpfs_map_4sectors(): unaligned read
[  171.562842][ T7110] hpfs: hpfs_map_4sectors(): unaligned read
[  171.570317][ T7110] hpfs: filesystem error: unable to find root dir
[  171.595718][ T4446] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  171.667171][ T7130] F2FS-fs (loop4): invalid crc value
[  171.680618][ T4446] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  171.724703][ T4446] keyspan 6-1:3.184: device disconnected
[  171.764146][ T2857] usb 3-1: USB disconnect, device number 10
[  171.791855][ T7130] F2FS-fs (loop4): Found nat_bits in checkpoint
[  171.887152][ T7130] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  171.975497][ T7184] program syz.1.983 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  172.002430][ T7130] F2FS-fs (loop4): inode (7) has corrupted xattr
[  172.475234][ T6384] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  172.885424][ T6384] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.928247][ T6384] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3
[  172.981321][ T6384] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  173.018903][ T7217] loop2: detected capacity change from 0 to 256
[  173.028958][ T6384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.116331][ T6384] usb 6-1: config 0 descriptor??
[  173.790557][ T6384] Bluetooth: Can't get version to change to load ram patch err
[  173.792411][ T4430] kernel write not supported for file /snd/seq (pid: 4430 comm: kworker/0:19)
[  173.805657][ T6384] Bluetooth: Loading sysconfig file failed
[  173.833507][ T6384] ath3k: probe of 6-1:0.0 failed with error -71
[  173.891942][ T6384] usb 6-1: USB disconnect, device number 5
[  174.024259][ T7248] loop1: detected capacity change from 0 to 128
[  174.575538][ T7260] loop1: detected capacity change from 0 to 256
[  174.635615][ T7260] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  174.952637][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1011'.
[  176.029357][ T7317] loop1: detected capacity change from 0 to 4096
[  176.481796][ T7330] loop2: detected capacity change from 0 to 64
[  177.027510][ T7337] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.426016][ T7328] loop4: detected capacity change from 0 to 32768
[  177.464763][ T7341] netlink: 165 bytes leftover after parsing attributes in process `syz.5.1036'.
[  177.661908][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1041'.
[  177.671275][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1041'.
[  177.688645][ T7350] bridge0: port 3(vlan2) entered blocking state
[  177.696437][ T7350] bridge0: port 3(vlan2) entered disabled state
[  178.953097][ T7394] loop1: detected capacity change from 0 to 128
[  179.266152][ T7405] netlink: 'syz.2.1066': attribute type 6 has an invalid length.
[  179.605289][ T4264] Bluetooth: hci6: command 0x1003 tx timeout
[  179.617385][ T4194] Bluetooth: hci6: sending frame failed (-49)
[  179.749034][ T7418] input: syz0 as /devices/virtual/input/input9
[  180.021546][ T7398] loop4: detected capacity change from 0 to 131072
[  180.301611][ T7436] loop2: detected capacity change from 0 to 1024
[  180.341646][ T7394] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  180.396582][ T7436] hfsplus: bad catalog entry type
[  180.420433][ T7439] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  180.450595][ T7398] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945)
[  180.458902][ T7398] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  180.501237][ T7398] F2FS-fs (loop4): invalid crc value
[  180.532755][ T4421] hfsplus: b-tree write err: -5, ino 4
[  180.611586][ T7398] F2FS-fs (loop4): Found nat_bits in checkpoint
[  180.659153][ T7398] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  180.747034][ T7398] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  180.754241][ T7398] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  180.852343][ T7398] F2FS-fs (loop4): sanity_check_inode: corrupted inode footer i_ino=8, ino,nid: [10986248, 8] run fsck to fix.
[  181.404890][ T4446] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  181.591718][ T7477] program syz.2.1095 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  181.685308][ T2857] Bluetooth: hci6: command 0x1001 tx timeout
[  181.698677][ T4183] Bluetooth: hci6: sending frame failed (-49)
[  181.900377][ T4446] usb 2-1: config 7 has an invalid interface number: 101 but max is 0
[  181.915379][ T4446] usb 2-1: config 7 has no interface number 0
[  182.110963][ T4446] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  182.121165][ T4446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.155216][ T4446] usb 2-1: Product: syz
[  182.159435][ T4446] usb 2-1: Manufacturer: syz
[  182.164064][ T4446] usb 2-1: SerialNumber: syz
[  182.264901][   T13] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  182.573049][   T13] usb 3-1: Using ep0 maxpacket: 32
[  182.682188][ T7501] program syz.5.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  182.715730][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.740044][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.765477][   T13] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  182.782978][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.809733][   T13] usb 3-1: config 0 descriptor??
[  182.855159][   T13] hub 3-1:0.0: USB hub found
[  182.984656][   T26] audit: type=1326 audit(1764172617.548:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3139450749 code=0x7ffc0000
[  183.041482][   T26] audit: type=1326 audit(1764172617.588:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3139450749 code=0x7ffc0000
[  183.081369][   T26] audit: type=1326 audit(1764172617.588:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3139450749 code=0x7ffc0000
[  183.111611][   T13] hub 3-1:0.0: 1 port detected
[  183.149884][   T26] audit: type=1326 audit(1764172617.588:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3139452667 code=0x7ffc0000
[  183.174225][ T4446] as10x_usb: device has been detected
[  183.189333][ T4446] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  183.189430][   T26] audit: type=1326 audit(1764172617.588:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f31394525dc code=0x7ffc0000
[  183.230845][   T26] audit: type=1326 audit(1764172617.588:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3139452514 code=0x7ffc0000
[  183.272255][   T26] audit: type=1326 audit(1764172617.588:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3139452514 code=0x7ffc0000
[  183.295976][   T26] audit: type=1326 audit(1764172617.588:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f313944f3aa code=0x7ffc0000
[  183.323452][ T4446] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  183.390257][   T26] audit: type=1326 audit(1764172617.588:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3139450749 code=0x7ffc0000
[  183.419638][   T13] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  183.435706][   T13] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  183.500993][   T26] audit: type=1326 audit(1764172617.588:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.4.1111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3139450749 code=0x7ffc0000
[  183.570379][   T13] usbhid 3-1:0.0: can't add hid device: -71
[  183.585229][   T13] usbhid: probe of 3-1:0.0 failed with error -71
[  183.664542][   T13] usb 3-1: USB disconnect, device number 11
[  183.749048][ T4446] as10x_usb: error during firmware upload part1
[  183.765247][ T5578] Bluetooth: hci6: command 0x1009 tx timeout
[  183.772730][ T4446] Registered device Elgato EyeTV DTT Deluxe
[  183.824925][ T4446] usb 2-1: USB disconnect, device number 8
[  183.975869][ T2857] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  183.999890][ T4446] Unregistered device Elgato EyeTV DTT Deluxe
[  184.007817][ T4446] as10x_usb: device has been disconnected
[  184.176869][ T7540] loop2: detected capacity change from 0 to 128
[  184.381287][ T2857] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.427596][ T2857] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  184.452558][ T7546] loop1: detected capacity change from 0 to 512
[  184.502137][ T7549] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1126'.
[  184.550168][ T7546] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  184.564266][ T2857] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  184.584803][ T2857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  184.593677][ T2857] usb 5-1: SerialNumber: syz
[  184.793531][ T7561] IPVS: ip_vs_add_dest(): server weight less than zero
[  184.811141][ T7546] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #3: comm syz.1.1128: corrupted inode contents
[  184.829645][ T7546] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #3: comm syz.1.1128: mark_inode_dirty error
[  184.878199][ T2857] usb 5-1: 0:2 : does not exist
[  184.884547][ T7546] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #3: comm syz.1.1128: corrupted inode contents
[  184.927054][ T2857] usb 5-1: USB disconnect, device number 11
[  184.962668][ T7546] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.1128: mark_inode_dirty error
[  185.020472][ T7546] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.1128: Failed to acquire dquot type 0
[  185.101147][ T7546] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.1128: corrupted inode contents
[  185.145723][ T7546] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #16: comm syz.1.1128: mark_inode_dirty error
[  185.174866][ T7546] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.1128: corrupted inode contents
[  185.197733][ T7546] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.1128: mark_inode_dirty error
[  185.213631][ T7546] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.1128: corrupted inode contents
[  185.247615][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  185.265794][ T7546] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  185.327825][ T7546] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #16: comm syz.1.1128: corrupted inode contents
[  185.360537][ T7546] EXT4-fs error (device loop1): ext4_truncate:4279: inode #16: comm syz.1.1128: mark_inode_dirty error
[  185.361520][ T7575] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  185.373487][ T7546] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  185.378812][ T7575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  185.443544][ T7575] vhci_hcd vhci_hcd.0: Device attached
[  185.488758][ T7546] EXT4-fs (loop1): 1 truncate cleaned up
[  185.500478][ T7546] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  185.544823][ T7546] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.773027][ T4446] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  185.802979][ T4430] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  185.865705][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1147'.
[  185.999254][ T7594] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  186.235149][ T4446] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.252509][ T4446] usb 3-1: config 0 has no interfaces?
[  186.268738][ T4446] usb 3-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[  186.305130][ T4446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.344119][ T4446] usb 3-1: config 0 descriptor??
[  186.382073][ T7610] loop4: detected capacity change from 0 to 512
[  186.469431][ T7612] tap0: tun_chr_ioctl cmd 1074812118
[  186.533528][   T13] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  186.663352][ T7576] usb 37-1: recv xbuf, 0
[  186.676889][ T2857] usb 3-1: USB disconnect, device number 12
[  186.691785][ T7610] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  186.730746][ T7610] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.753685][    T9] vhci_hcd: stop threads
[  186.759901][    T9] vhci_hcd: release socket
[  186.796331][    T9] vhci_hcd: disconnect device
[  186.839319][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1160'.
[  186.853497][ T4430] vhci_hcd: vhci_device speed not set
[  187.021319][   T13] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  187.036468][   T13] usb 6-1: config 0 has no interface number 0
[  187.220820][   T13] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  187.230052][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.249110][   T13] usb 6-1: Product: syz
[  187.253333][   T13] usb 6-1: Manufacturer: syz
[  187.268532][   T13] usb 6-1: SerialNumber: syz
[  187.293330][   T13] usb 6-1: config 0 descriptor??
[  187.545311][ T7641] loop4: detected capacity change from 0 to 24
[  187.576395][   T13] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  187.601493][   T13] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  187.615359][ T7643] loop1: detected capacity change from 0 to 1024
[  187.629252][   T13] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  187.642809][ T7641] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  187.649300][   T13] usb 6-1: media controller created
[  187.747158][ T7641] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  187.760105][  T150] block nbd0: Possible stuck request ffff888020f28000: control (read@0,1024B). Runtime 90 seconds
[  187.770834][  T150] block nbd0: Possible stuck request ffff888020f28200: control (read@1024,1024B). Runtime 90 seconds
[  187.782959][  T150] block nbd0: Possible stuck request ffff888020f28400: control (read@2048,1024B). Runtime 90 seconds
[  187.793957][  T150] block nbd0: Possible stuck request ffff888020f28600: control (read@3072,512B). Runtime 90 seconds
[  187.820871][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  187.941944][ T7641] ALSA: mixer_oss: invalid OSS volume '��)
'
[  188.426362][ T7666] netlink: 'syz.1.1176': attribute type 11 has an invalid length.
[  188.598264][ T7673] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  188.842164][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'.
[  189.063743][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  189.090959][   T13] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  189.186891][   T13] usb 6-1: USB disconnect, device number 6
[  189.301554][ T4437] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  189.458956][ T7707] loop2: detected capacity change from 0 to 512
[  189.465659][ T7709] netlink: 'syz.1.1198': attribute type 1 has an invalid length.
[  189.586045][ T7707] EXT4-fs (loop2): orphan cleanup on readonly fs
[  189.598559][ T7707] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.1197: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1)
[  189.650291][ T7707] EXT4-fs error (device loop2): ext4_quota_enable:6420: comm syz.2.1197: Bad quota inode: 4, type: 1
[  189.668388][ T7707] EXT4-fs warning (device loop2): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  189.687624][ T7707] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  189.694717][ T7707] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  189.717767][ T7707] EXT4-fs (loop2): shut down requested (2)
[  190.129539][ T4437] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  190.145152][ T4437] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.211868][ T4437] usb 4-1: Product: syz
[  190.232304][ T4437] usb 4-1: Manufacturer: syz
[  190.248727][ T4437] usb 4-1: SerialNumber: syz
[  190.336884][ T7730] loop2: detected capacity change from 0 to 1024
[  190.458950][ T7739] loop4: detected capacity change from 0 to 1024
[  190.561062][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  190.561078][   T26] audit: type=1800 audit(1764172625.128:203): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1208" name="file2" dev="loop2" ino=21 res=0 errno=0
[  190.566419][ T7730] attempt to access beyond end of device
[  190.566419][ T7730] loop2: rw=0, want=201326594, limit=1024
[  190.588051][    C0] vkms_vblank_simulate: vblank timer overrun
[  190.591828][ T7739] hfsplus: bad catalog entry type
[  190.698233][ T7730] Buffer I/O error on dev loop2, logical block 100663296, async page read
[  190.715430][ T6384] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  190.746709][ T7730] hfsplus: unable to mark blocks free: error -5
[  190.770047][ T7730] hfsplus: can't free extent
[  190.815602][ T4620] hfsplus: b-tree write err: -5, ino 4
[  190.965233][  T150] block nbd1: Possible stuck request ffff888020f48000: control (read@0,4096B). Runtime 30 seconds
[  190.980501][ T4437] rtl8150 4-1:1.0: eth5: rtl8150 is detected
[  191.135878][ T5578] Bluetooth: hci2: command 0x0406 tx timeout
[  191.161577][ T5578] Bluetooth: hci1: command 0x0406 tx timeout
[  191.185038][ T5578] Bluetooth: hci3: command 0x0406 tx timeout
[  191.211552][ T5578] usb 4-1: USB disconnect, device number 9
[  191.365412][ T6384] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  191.390186][ T6384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.424501][ T6384] usb 6-1: Product: syz
[  191.434622][ T6384] usb 6-1: Manufacturer: syz
[  191.451175][ T6384] usb 6-1: SerialNumber: syz
[  191.491405][ T6384] usb 6-1: config 0 descriptor??
[  191.540631][ T4437] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  191.749338][ T7736] loop1: detected capacity change from 0 to 40427
[  191.799634][ T7736] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  191.813291][   T13] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  191.813528][ T6384] usb 6-1: USB disconnect, device number 7
[  191.832967][ T7736] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  191.891828][ T4437] usb 5-1: Using ep0 maxpacket: 32
[  191.952660][ T7736] F2FS-fs (loop1): Found nat_bits in checkpoint
[  192.105145][ T4437] usb 5-1: unable to get BOS descriptor or descriptor too short
[  192.167514][   T13] usb 3-1: Using ep0 maxpacket: 16
[  192.205109][ T7736] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  192.212203][ T7736] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  192.244367][ T4437] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.324284][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  192.355127][   T13] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  192.364224][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.428634][   T13] usb 3-1: config 0 descriptor??
[  192.493984][   T13] pegasus_notetaker: probe of 3-1:0.0 failed with error -12
[  192.560869][ T4437] usb 5-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec
[  192.605831][ T4437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.613970][ T4437] usb 5-1: Product: syz
[  192.635114][ T4437] usb 5-1: Manufacturer: syz
[  192.635467][ T6384] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  192.639800][ T4437] usb 5-1: SerialNumber: syz
[  192.658732][ T4437] usb 5-1: config 0 descriptor??
[  192.725169][ T4430] usb 3-1: USB disconnect, device number 13
[  192.945281][ T6384] usb 4-1: Using ep0 maxpacket: 8
[  192.969711][ T5575] usb 5-1: USB disconnect, device number 12
[  193.075531][ T5578] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  193.083250][ T6384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  193.104765][ T6384] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  193.119828][ T6384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.146135][ T6384] usb 4-1: config 0 descriptor??
[  193.326227][ T7804] loop2: detected capacity change from 0 to 128
[  193.375366][ T5578] usb 6-1: Using ep0 maxpacket: 8
[  193.418417][ T6384] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  193.505317][ T5578] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  193.535783][ T5578] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  193.587481][ T5578] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  193.598327][ T7809] program syz.4.1230 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  193.633650][ T5578] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  193.634381][ T5578] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  193.634409][ T5578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.646558][ T6384] usb 4-1: USB disconnect, device number 10
[  193.905488][ T5578] usb 6-1: GET_CAPABILITIES returned 0
[  193.911698][ T5578] usbtmc 6-1:16.0: can't read capabilities
[  194.032393][ T7823] loop4: detected capacity change from 0 to 256
[  194.143329][ T7823] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  194.171300][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.177693][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.199594][ T4437] usb 6-1: USB disconnect, device number 8
[  194.503207][ T7841] process 'syz.1.1244' launched './file0' with NULL argv: empty string added
[  194.685800][ T7848] ieee802154 phy0 wpan0: encryption failed: -22
[  195.330370][ T4437] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  195.605795][ T6384] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  195.644881][ T7883] ALSA: mixer_oss: invalid index 90000
[  195.803937][ T7860] loop4: detected capacity change from 0 to 32768
[  195.911004][ T4437] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  195.911057][ T4437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.913358][ T4437] usb 4-1: config 0 descriptor??
[  195.925540][ T7860] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page
[  195.925540][ T7860] 
[  195.927796][ T7860] ERROR: (device loop4): remounting filesystem as read-only
[  195.961964][ T4437] cp210x 4-1:0.0: cp210x converter detected
[  196.007491][ T6384] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  196.007527][ T6384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.010174][ T6384] usb 6-1: config 0 descriptor??
[  196.021456][ T7888] loop2: detected capacity change from 0 to 4096
[  196.057403][ T6384] gspca_main: cpia1-2.14.0 probing 0813:0001
[  196.146655][ T7888] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  196.414599][ T7894] program syz.4.1269 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.421422][ T4437] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  196.495464][ T6384] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  196.517943][ T4437] usb 4-1: cp210x converter now attached to ttyUSB0
[  196.626403][   T26] audit: type=1326 audit(1764172631.198:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3139450749 code=0x7ffc0000
[  196.726830][   T26] audit: type=1326 audit(1764172631.218:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3139450749 code=0x7ffc0000
[  196.776420][ T4437] usb 4-1: USB disconnect, device number 11
[  196.797760][ T4437] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  196.834568][ T4437] cp210x 4-1:0.0: device disconnected
[  196.871456][ T7905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1274'.
[  196.887400][   T26] audit: type=1326 audit(1764172631.218:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f3139450749 code=0x7ffc0000
[  196.909678][    C0] vkms_vblank_simulate: vblank timer overrun
[  196.921757][ T7905] netem: unknown loss type 13
[  196.933369][ T7905] netem: change failed
[  196.935404][ T6384] gspca_cpia1: usb_control_msg 02, error -71
[  196.953743][ T6384] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  196.986539][   T26] audit: type=1326 audit(1764172631.218:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3139450749 code=0x7ffc0000
[  197.008824][    C0] vkms_vblank_simulate: vblank timer overrun
[  197.036340][ T6384] usb 6-1: USB disconnect, device number 9
[  197.072567][ T7907] loop4: detected capacity change from 0 to 2048
[  197.085997][   T26] audit: type=1326 audit(1764172631.218:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7896 comm="syz.4.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3139450749 code=0x7ffc0000
[  197.108289][    C0] vkms_vblank_simulate: vblank timer overrun
[  197.201433][   T26] audit: type=1326 audit(1764172631.768:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7908 comm="syz.2.1276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb86cb5749 code=0x0
[  197.223286][    C0] vkms_vblank_simulate: vblank timer overrun
[  197.248915][ T7907] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  197.287908][ T7911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1277'.
[  197.359673][ T7907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.662328][ T7924] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1283'.
[  197.672695][ T7924] netlink: 'syz.4.1283': attribute type 6 has an invalid length.
[  197.683081][ T7924] netlink: 'syz.4.1283': attribute type 5 has an invalid length.
[  197.693525][ T7924] netlink: 'syz.4.1283': attribute type 4 has an invalid length.
[  197.796275][ T4446] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  198.100041][ T4446] usb 2-1: Using ep0 maxpacket: 16
[  198.221498][ T7942] loop2: detected capacity change from 0 to 512
[  198.261428][ T4446] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.278851][ T4446] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  198.284019][ T7946] program syz.5.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.314724][ T4446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.336653][ T4446] usb 2-1: config 0 descriptor??
[  198.360042][ T7942] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback.
[  198.413685][ T7942] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.844735][ T4446] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  199.272369][ T2857] usb 2-1: USB disconnect, device number 9
[  199.336314][ T5578] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  199.406043][ T6384] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  199.605336][ T5578] usb 5-1: Using ep0 maxpacket: 16
[  199.695390][ T6384] usb 4-1: Using ep0 maxpacket: 8
[  199.745879][ T5578] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.795969][ T5578] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.820492][ T5578] usb 5-1: config 0 interface 0 has no altsetting 0
[  199.859849][ T5578] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  199.865849][ T8006] loop1: detected capacity change from 0 to 64
[  199.880023][ T5578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.928913][ T5578] usb 5-1: config 0 descriptor??
[  199.985356][ T8009] input: syz0 as /devices/virtual/input/input11
[  200.015480][ T6384] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  200.064786][ T6384] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  200.084141][ T6384] usb 4-1: Product: syz
[  200.120311][ T6384] usb 4-1: Manufacturer: syz
[  200.145126][ T6384] usb 4-1: SerialNumber: syz
[  200.177242][ T6384] usb 4-1: config 0 descriptor??
[  200.257748][ T6384] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  200.379943][ T8011] ALSA: mixer_oss: invalid OSS volume ''
[  200.511784][ T5578] cougar 0003:060B:500A.000A: usage count exceeds max: fixing up report descriptor
[  200.529909][ T5578] cougar 0003:060B:500A.000A: unexpected long global item
[  200.571994][ T5578] cougar 0003:060B:500A.000A: parse failed
[  200.588194][ T5578] cougar: probe of 0003:060B:500A.000A failed with error -22
[  200.679236][ T5575] usb 5-1: USB disconnect, device number 13
[  200.691202][ T6384] gspca_zc3xx: reg_r err -71
[  200.696242][ T6384] gspca_zc3xx: probe of 4-1:0.0 failed with error -71
[  200.733483][ T6384] usb 4-1: USB disconnect, device number 12
[  201.010293][ T8024] loop2: detected capacity change from 0 to 512
[  201.152591][ T8022] loop1: detected capacity change from 0 to 32768
[  201.236558][ T8022] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  201.245214][ T8022] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  201.371489][ T8022] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  201.438381][ T8024] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nojournal_checksum,,errors=continue. Quota mode: writeback.
[  201.483834][ T8024] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.521437][ T8022] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  201.631018][ T8024] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.1329: corrupted xattr block 33
[  201.685509][ T8036] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  201.701123][ T8036] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  201.709439][ T8041] netlink: 'syz.1.1336': attribute type 4 has an invalid length.
[  201.723365][ T8036] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  201.743024][ T8042] comedi comedi0: comedi_bond: 3:3  attached, 24 channels from 1 devices
[  201.768710][ T8024] EXT4-fs error (device loop2): ext4_xattr_block_get:546: inode #15: comm syz.2.1329: corrupted xattr block 33
[  201.847582][ T8024] fscrypt (loop2, inode 15): Error -117 getting encryption context
[  202.064544][ T8051] loop2: detected capacity change from 0 to 512
[  202.093296][ T8051] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  202.302902][ T8051] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  202.374891][ T8051] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548)
[  202.740674][ T8051] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548)
[  202.872032][ T8070] loop1: detected capacity change from 0 to 4096
[  202.922571][ T8074] loop4: detected capacity change from 0 to 4096
[  202.930786][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1352'.
[  202.963488][ T8070] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  203.031684][ T8070] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  203.050982][ T8074] ntfs3: loop4: ino=3, Correct links count -> 2.
[  203.075427][ T8070] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  203.142445][ T8070] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  203.210814][ T8051] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 548)
[  203.253384][ T8070] ntfs: volume version 3.1.
[  203.442091][ T8070] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp852.  You might want to try to use the mount option nls=utf8.
[  203.469629][   T26] audit: type=1800 audit(1764172638.038:210): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1351" name="file1" dev="loop4" ino=33 res=0 errno=0
[  203.490172][    C0] vkms_vblank_simulate: vblank timer overrun
[  203.559448][ T8070] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  203.915280][ T6384] Bluetooth: hci4: command 0x0407 tx timeout
[  203.980151][ T8097] tipc: Started in network mode
[  203.985121][ T8097] tipc: Node identity ac14140f, cluster identity 4711
[  204.062715][ T8097] tipc: New replicast peer: 255.255.255.255
[  204.095000][ T8097] tipc: Enabled bearer <udp:syz2>, priority 10
[  204.131610][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1360'.
[  204.205205][ T8100] tipc: Disabling bearer <udp:syz2>
[  204.495635][ T8118] [U] ^C�
[  204.502404][ T8115] [U] ^C
[  205.020951][ T8095] loop4: detected capacity change from 0 to 32768
[  205.058687][ T8095] XFS: noikeep mount option is deprecated.
[  205.198681][ T8095] XFS (loop4): Mounting V5 Filesystem
[  206.705195][ T8179] loop1: detected capacity change from 0 to 1024
[  206.743601][ T8171] loop2: detected capacity change from 0 to 8192
[  206.834825][ T8171] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  206.866277][ T8171] REISERFS (device loop2): using ordered data mode
[  206.875449][ T8171] reiserfs: using flush barriers
[  206.924538][ T4430] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  206.943066][ T8171] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  207.032827][ T8171] REISERFS (device loop2): checking transaction log (loop2)
[  207.057174][ T4430] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  207.185621][ T8171] REISERFS (device loop2): Using r5 hash to sort names
[  207.192911][ T8171] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  207.217426][ T8186] fido_id[8186]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  207.793040][ T4430] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  208.037396][ T8095] XFS (loop4): Ending clean mount
[  208.114337][ T8095] XFS (loop4): Quotacheck needed: Please wait.
[  208.131736][ T4430] usb 4-1: Using ep0 maxpacket: 16
[  208.242541][ T8200] (syz.1.1402,8200,1):dlmfs_mkdir:413 ERROR: invalid domain name for directory.
[  208.333840][ T8095] XFS (loop4): Quotacheck: Done.
[  208.356905][ T4430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.381858][ T4430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.412327][ T4430] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  208.467987][ T4430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.505792][ T4430] usb 4-1: config 0 descriptor??
[  208.552107][ T4186] XFS (loop4): Unmounting Filesystem
[  208.805721][ T8216] program syz.1.1410 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  208.884748][ T8218] loop2: detected capacity change from 0 to 2048
[  209.063902][ T4430] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0
[  209.086396][ T4430] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0
[  209.093632][ T4430] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0
[  209.108602][ T4430] konepure 0003:1E7D:2DB4.000C: unknown main item tag 0x0
[  209.189391][ T4430] konepure 0003:1E7D:2DB4.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.3-1/input0
[  209.385145][ T4430] usb 4-1: USB disconnect, device number 13
[  209.397356][ T8218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  209.628634][ T8232] fido_id[8232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  209.937883][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1421'.
[  210.071118][ T4446] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  210.488291][ T8255] overlayfs: failed to resolve '/atistic
[  210.488291][ T8255] state
[  210.488291][ T8255] realm
[  210.488291][ T8255] rateest
[  210.488291][ T8255] quota
[  210.488291][ T8255] pkttype
[  210.488291][ T8255] physdev
[  210.488291][ T8255] cgroup
[  210.488291][ T8255] cgroup
[  210.488291][ T8255] cgroup
[  210.488291][ T8255] owner
[  210.488291][ T8255] nfacct
[  210.488291][ T8255] nfacct
[  210.488291][ T8255] mac
[  210.488291][ T8255] limit
[  210.488291][ T8255] ipvs
[  210.488291][ T8255] helper
[  210.488291][ T8255] devgroup
[  210.488291][ T8255] cpu
[  210.488291][ T8255] conntrack
[  210.488291][ T8255] conntrack
[  210.488291][ T8255] conntrack
[  210.488291][ T8255] connlabel
[  210.488291][ T8255] connbytes
[  210.488291][ T8255] comment
[  210.488291][ T8255] bpf
[  210.488291][ T8255] bpf
[  210.488291][ T8255] connmark
[  210.488291][ T8255] mark
[  210.488291][ T8255] srh
[  210.488291][ T8255] srh
[  210.488291][ T8255] rt
[  210.488291][ T8255] rpfilter
[  210.580548][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.716130][ T4446] usb 2-1: config 0 has no interfaces?
[  210.723738][ T4446] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  210.751478][ T4446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.794524][ T4446] usb 2-1: config 0 descriptor??
[  211.147712][ T8237] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  211.164418][ T5578] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  211.245674][ T4446] usb 2-1: USB disconnect, device number 10
[  211.420143][ T8274] Falling back ldisc for ttyprintk.
[  211.642710][ T5578] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.653057][ T5578] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  211.717490][ T5578] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.783895][ T8284] loop4: detected capacity change from 0 to 512
[  211.785385][ T8283] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1438'.
[  211.790429][ T5578] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  211.852537][ T5578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.905302][ T5578] usb 3-1: config 0 descriptor??
[  211.998885][ T8284] EXT4-fs (loop4): Ignoring removed oldalloc option
[  212.006091][ T8284] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  212.115456][ T8284] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1437: inode has both inline data and extents flags
[  212.178073][ T8284] EXT4-fs (loop4): Remounting filesystem read-only
[  212.215166][ T8284] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1437: couldn't read orphan inode 15 (err -117)
[  212.270597][ T5578] ath6kl: Failed to submit usb control message: -71
[  212.285120][ T5578] ath6kl: unable to send the bmi data to the device: -71
[  212.312201][ T5578] ath6kl: Unable to send get target info: -71
[  212.323793][ T8284] EXT4-fs (loop4): Remounting filesystem read-only
[  212.346674][ T8284] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,oldalloc,journal_ioprio=0x0000000000000003,errors=remount-ro,init_itable=0x00000000000001ff,minixdf,noquota,usrjquota=,. Quota mode: none.
[  212.380230][ T5578] ath6kl: Failed to init ath6kl core: -71
[  212.432579][ T5578] ath6kl_usb: probe of 3-1:0.0 failed with error -71
[  212.496863][ T5578] usb 3-1: USB disconnect, device number 14
[  212.548531][ T8308] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  212.548531][ T8308] The task syz.5.1446 (8308) triggered the difference, watch for misbehavior.
[  212.777325][ T8310] sch_tbf: peakrate 2 is lower than or equals to rate 2 !
[  212.983965][ T8315] misc userio: Begin command sent, but we're already running
[  214.115427][ T8359] loop4: detected capacity change from 0 to 256
[  215.508758][ T8368] loop1: detected capacity change from 0 to 32768
[  215.553866][ T8359] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  216.167953][ T6384] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  216.194732][ T8396] loop4: detected capacity change from 0 to 8192
[  216.385787][ T8368] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  216.415627][ T8396] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  216.426033][ T1183] (kworker/u4:3,1183,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=0, inode=72, rec_len=65296, name_len=7
[  216.472547][ T8396] REISERFS (device loop4): using ordered data mode
[  216.512502][ T6384] usb 3-1: Using ep0 maxpacket: 16
[  216.530950][ T8396] reiserfs: using flush barriers
[  216.608951][ T8396] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  216.697567][ T8415] (syz.1.1473,8415,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=0, inode=72, rec_len=65296, name_len=7
[  216.700045][ T8396] REISERFS (device loop4): checking transaction log (loop4)
[  216.757358][ T6384] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  216.767379][ T6384] usb 3-1: config 0 has no interface number 0
[  216.773538][ T6384] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  216.786320][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'.
[  216.795430][ T6384] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  216.800888][ T8415] (syz.1.1473,8415,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  216.817386][ T6384] usb 3-1: config 0 interface 41 has no altsetting 0
[  216.855220][ T8417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1494'.
[  216.879140][ T8415] (syz.1.1473,8415,0):__ocfs2_prepare_orphan_dir:2168 ERROR: status = -2
[  216.927887][ T8415] (syz.1.1473,8415,0):ocfs2_prepare_orphan_dir:2210 ERROR: status = -2
[  216.998633][ T8415] (syz.1.1473,8415,0):ocfs2_prepare_orphan_dir:2226 ERROR: status = -2
[  217.066561][ T8415] (syz.1.1473,8415,0):ocfs2_rename:1464 ERROR: status = -2
[  217.102250][ T8415] (syz.1.1473,8415,0):ocfs2_rename:1687 ERROR: status = -2
[  217.105499][ T6384] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  217.146511][ T6384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.154574][ T6384] usb 3-1: Product: syz
[  217.219402][ T8396] REISERFS (device loop4): Using tea hash to sort names
[  217.231207][ T6384] usb 3-1: Manufacturer: syz
[  217.237042][ T8396] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  217.251434][ T6384] usb 3-1: SerialNumber: syz
[  217.276740][ T6384] usb 3-1: config 0 descriptor??
[  217.297560][ T8396] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  217.312687][ T8390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  217.320820][ T8390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  217.475107][ T4349] ocfs2: Unmounting device (7,1) on (node local)
[  217.562687][   T13] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  217.594285][ T6384] CoreChips: probe of 3-1:0.41 failed with error -71
[  217.622973][ T6384] usb 3-1: USB disconnect, device number 15
[  217.840213][  T150] block nbd0: Possible stuck request ffff888020f28000: control (read@0,1024B). Runtime 120 seconds
[  217.857097][  T150] block nbd0: Possible stuck request ffff888020f28200: control (read@1024,1024B). Runtime 120 seconds
[  217.868258][  T150] block nbd0: Possible stuck request ffff888020f28400: control (read@2048,1024B). Runtime 120 seconds
[  217.879724][  T150] block nbd0: Possible stuck request ffff888020f28600: control (read@3072,512B). Runtime 120 seconds
[  217.923313][   T13] usb 6-1: Using ep0 maxpacket: 8
[  218.337921][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1506'.
[  218.383317][   T13] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  218.415128][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.423211][   T13] usb 6-1: Product: syz
[  218.465116][   T13] usb 6-1: Manufacturer: syz
[  218.469814][   T13] usb 6-1: SerialNumber: syz
[  218.527164][   T13] usb 6-1: config 0 descriptor??
[  218.584979][   T13] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  218.627187][ T8444] vivid-000: disconnect
[  218.639191][ T8442] vivid-000: reconnect
[  218.645188][   T13] usb 6-1: setting power ON
[  218.650549][   T13] dvb-usb: bulk message failed: -22 (2/0)
[  218.744334][   T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  218.801795][ T8427] dvb-usb: bulk message failed: -22 (3/0)
[  218.845259][ T8427] dvb-usb: bulk message failed: -22 (7/0)
[  218.857260][   T13] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  218.887747][   T13] usb 6-1: media controller created
[  218.925241][ T8427] dvb-usb: bulk message failed: -22 (3/0)
[  218.962606][   T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  219.065820][   T13] usb 6-1: selecting invalid altsetting 6
[  219.085804][ T6384] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  219.115732][   T13] usb 6-1: digital interface selection failed (-22)
[  219.122531][   T13] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  219.272022][   T13] usb 6-1: setting power OFF
[  219.277757][   T13] dvb-usb: bulk message failed: -22 (2/0)
[  219.305335][   T13] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  219.419881][   T13] (NULL device *): no alternate interface
[  219.454263][ T6384] usb 2-1: Using ep0 maxpacket: 32
[  219.521909][   T13] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  219.575642][ T8468] loop2: detected capacity change from 0 to 128
[  219.626946][   T13] usb 6-1: USB disconnect, device number 10
[  219.643093][ T6384] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  219.661668][ T6384] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  219.716569][ T6384] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  219.757163][ T6384] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  219.786161][ T6384] usb 2-1: config 0 interface 0 has no altsetting 0
[  219.812667][ T8468] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  219.926783][ T8468] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  220.136017][ T6384] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  220.159314][ T6384] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  220.207618][ T6384] usb 2-1: Product: syz
[  220.245160][ T6384] usb 2-1: Manufacturer: syz
[  220.260977][ T6384] usb 2-1: SerialNumber: syz
[  220.306193][ T6384] usb 2-1: config 0 descriptor??
[  220.375599][ T6384] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  220.405499][ T6384] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  220.732597][ T4446] usb 2-1: USB disconnect, device number 11
[  220.742057][ T4446] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  220.921970][ T8485] syzkaller1: tun_chr_ioctl cmd 1074025677
[  220.957036][ T8485] syzkaller1: linktype set to 774
[  221.059083][  T150] block nbd1: Possible stuck request ffff888020f48000: control (read@0,4096B). Runtime 60 seconds
[  221.122729][ T6384] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  221.537384][ T6384] usb 5-1: Using ep0 maxpacket: 16
[  222.020754][ T6384] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  222.040206][ T6384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.091321][ T8502] loop1: detected capacity change from 0 to 4096
[  222.097883][ T6384] usb 5-1: Product: syz
[  222.102065][ T6384] usb 5-1: Manufacturer: syz
[  222.135111][ T6384] usb 5-1: SerialNumber: syz
[  222.147579][ T6384] usb 5-1: config 0 descriptor??
[  222.289251][ T6384] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  223.001882][ T8502] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  223.192424][ T6384] ssu100: probe of 5-1:0.0 failed with error -71
[  223.237599][ T8522] ALSA: mixer_oss: invalid OSS volume ''
[  223.255514][ T6384] usb 5-1: USB disconnect, device number 14
[  223.282675][ T8524] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0)
[  223.697907][ T8532] tap0: tun_chr_ioctl cmd 2147767521
[  223.999560][   T26] audit: type=1800 audit(1764172658.568:211): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1549" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  224.020025][    C0] vkms_vblank_simulate: vblank timer overrun
[  224.561216][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1557'.
[  224.712053][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.747148][ T8556] device bridge_slave_1 left promiscuous mode
[  224.747334][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.987098][ T8567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1561'.
[  224.987132][ T8567] netlink: 'syz.4.1561': attribute type 6 has an invalid length.
[  224.987149][ T8567] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1561'.
[  225.805110][ T6384] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  226.327852][ T6384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.333909][ T4446] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  226.345817][ T6384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.402170][ T6384] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  226.440508][ T6384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.490382][ T6384] usb 5-1: config 0 descriptor??
[  226.515431][ T4264] kernel read not supported for file /swradio3 (pid: 4264 comm: kworker/1:6)
[  226.960166][ T4446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.025100][ T4446] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.033467][ T6384] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  227.034881][ T4446] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  227.158413][ T4446] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  227.158561][ T6384] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  227.208145][ T4446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.291860][ T4446] usb 4-1: config 0 descriptor??
[  227.316186][ T6384] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected
[  227.404020][ T6384] usb 5-1: USB disconnect, device number 15
[  227.468229][ T6384] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected
[  227.672657][ T8639] fido_id[8639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  227.854544][ T4446] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  227.870362][ T4446] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  227.894762][ T4446] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x2
[  227.919869][ T4446] plantronics 0003:047F:FFFF.000F: unbalanced collection at end of report description
[  227.961366][ T4446] plantronics 0003:047F:FFFF.000F: parse failed
[  228.002339][ T4446] plantronics: probe of 0003:047F:FFFF.000F failed with error -22
[  228.211863][ T8656] netlink: 'syz.5.1599': attribute type 2 has an invalid length.
[  228.263420][ T4446] usb 4-1: USB disconnect, device number 14
[  228.751815][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1608'.
[  228.799900][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'.
[  229.244180][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1617'.
[  229.668616][ T6384] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  230.492151][ T6384] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  230.514035][ T6384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.533478][ T6384] usb 3-1: Product: syz
[  230.553004][ T6384] usb 3-1: Manufacturer: syz
[  230.588553][ T6384] usb 3-1: SerialNumber: syz
[  230.596532][ T6384] usb 3-1: config 0 descriptor??
[  230.947473][ T6384] usb 3-1: USB disconnect, device number 16
[  231.696584][ T6384] Bluetooth: hci4: command 0x0405 tx timeout
[  231.725275][ T8769] loop2: detected capacity change from 0 to 4096
[  232.766567][ T8789] loop1: detected capacity change from 0 to 8192
[  232.908496][ T2857] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  233.252284][ T2857] usb 4-1: Using ep0 maxpacket: 32
[  233.287197][ T8789] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  233.314064][ T8789] REISERFS (device loop1): using ordered data mode
[  233.315843][ T8794] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.333634][ T8789] reiserfs: using flush barriers
[  233.391123][ T8789] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  233.416079][ T2857] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  233.438968][ T8797] input: syz1 as /devices/virtual/input/input13
[  233.478290][ T2857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.535935][ T2857] usb 4-1: config 0 descriptor??
[  233.546420][ T8789] REISERFS (device loop1): checking transaction log (loop1)
[  233.596005][ T8795] loop4: detected capacity change from 0 to 4096
[  233.841665][ T2857] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  233.860383][ T2857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  233.878489][ T8805] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.938233][ T2857] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  233.947815][ T2857] usb 4-1: media controller created
[  234.018599][ T2857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  234.240515][ T8789] REISERFS (device loop1): Using tea hash to sort names
[  234.246637][ T2857] az6027: usb out operation failed. (-71)
[  234.254917][ T8789] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  234.304259][ T2857] az6027: usb out operation failed. (-71)
[  234.312277][ T2857] stb0899_attach: Driver disabled by Kconfig
[  234.352865][ T2857] az6027: no front-end attached
[  234.352865][ T2857] 
[  234.436108][ T2857] az6027: usb out operation failed. (-71)
[  234.441884][ T2857] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  234.485413][ T2857] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14
[  234.601484][ T2857] dvb-usb: schedule remote query interval to 400 msecs.
[  234.640420][ T2857] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  234.745685][ T2857] usb 4-1: USB disconnect, device number 15
[  234.961422][ T4433] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  235.085310][ T2857] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  235.192958][ T8823] loop2: detected capacity change from 0 to 128
[  235.275132][ T4433] usb 6-1: Using ep0 maxpacket: 8
[  235.347822][ T8823] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  235.371574][ T8823] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  235.462828][ T4433] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  235.482206][ T4433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.593115][ T4433] pvrusb2: Hardware description: Terratec Grabster AV400
[  235.635126][ T4433] pvrusb2: **********
[  235.639240][ T4433] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  235.695121][ T4433] pvrusb2: Important functionality might not be entirely working.
[  235.703193][ T4433] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  235.835111][ T4433] pvrusb2: **********
[  235.902408][ T2425] pvrusb2: Invalid write control endpoint
[  236.175347][ T4264] usb 6-1: USB disconnect, device number 11
[  236.237838][ T2425] pvrusb2: Invalid write control endpoint
[  236.261859][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  236.349593][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  236.357602][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  236.395608][ T2425] pvrusb2: Device being rendered inoperable
[  236.423452][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  236.450088][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  236.514683][ T2425] pvrusb2: Attached sub-driver cx25840
[  236.540827][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  236.570808][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  236.578297][ T8856] program syz.3.1681 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  236.908279][ T8858] loop4: detected capacity change from 0 to 4096
[  237.005212][ T8858] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  237.501033][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'.
[  237.789645][ T8886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  237.797079][ T8886] IPv6: NLM_F_CREATE should be set when creating new route
[  237.804431][ T8886] IPv6: NLM_F_CREATE should be set when creating new route
[  237.811743][ T8886] IPv6: NLM_F_CREATE should be set when creating new route
[  237.838215][ T8886] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  237.987850][   T26] audit: type=1800 audit(1764172672.558:212): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1682" name="file1" dev="loop4" ino=30 res=0 errno=0
[  238.157014][ T8901] loop1: detected capacity change from 0 to 16
[  238.403980][ T8908] program syz.3.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  238.474878][ T8901] erofs: (device loop1): mounted with root inode @ nid 36.
[  239.175134][ T4433] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  239.215767][ T8924] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1711'.
[  239.270627][ T8927] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  239.666251][ T4433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.683216][ T4433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.707048][ T4433] usb 4-1: New USB device found, idVendor=846d, idProduct=c626, bcdDevice= 0.00
[  239.733556][ T4433] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.778740][ T4433] usb 4-1: config 0 descriptor??
[  240.228494][ T8938] loop4: detected capacity change from 0 to 2048
[  240.314137][ T4433] hid (null): nested delimiters
[  240.346246][ T4433] hid-generic 0003:846D:C626.0010: nested delimiters
[  240.391534][ T4433] hid-generic 0003:846D:C626.0010: item 0 4 2 10 parsing failed
[  240.425547][ T4433] hid-generic: probe of 0003:846D:C626.0010 failed with error -22
[  240.455853][ T8942] loop2: detected capacity change from 0 to 512
[  240.594206][ T4264] usb 4-1: USB disconnect, device number 16
[  240.636618][ T8938] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.856766][ T8942] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  240.941721][ T8942] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.1722: No space for directory leaf checksum. Please run e2fsck -D.
[  240.999549][ T8942] EXT4-fs error (device loop2): ext4_readdir:223: inode #2: comm syz.2.1722: path (unknown): directory fails checksum at offset 0
[  241.184217][ T8953] loop4: detected capacity change from 0 to 512
[  242.068957][ T6384] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  242.398047][ T8953] EXT4-fs (loop4): Ignoring removed nobh option
[  242.559142][ T8973] loop2: detected capacity change from 0 to 64
[  242.586234][ T8953] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1725: invalid indirect mapped block 256 (level 2)
[  242.652081][ T6384] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  242.675132][ T6384] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  242.684260][ T8953] EXT4-fs (loop4): Remounting filesystem read-only
[  242.694919][ T8953] EXT4-fs (loop4): 2 truncates cleaned up
[  242.729833][ T6384] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  242.733075][ T8953] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,errors=remount-ro,. Quota mode: writeback.
[  242.795670][ T6384] usb 6-1: config 220 has no interface number 2
[  242.845122][ T6384] usb 6-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16
[  242.882322][ T6384] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  242.965092][ T6384] usb 6-1: config 220 interface 0 has no altsetting 0
[  242.971942][ T6384] usb 6-1: config 220 interface 76 has no altsetting 0
[  243.022764][ T6384] usb 6-1: config 220 interface 1 has no altsetting 0
[  243.333924][ T6384] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  243.355132][ T6384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.363179][ T6384] usb 6-1: Product: syz
[  243.411961][ T6384] usb 6-1: Manufacturer: syz
[  243.426966][ T6384] usb 6-1: SerialNumber: syz
[  243.524825][ T8987] loop4: detected capacity change from 0 to 256
[  243.564655][ T8965] loop1: detected capacity change from 0 to 32768
[  243.967307][ T6384] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  243.974048][ T6384] usb 6-1: No valid video chain found.
[  243.979735][ T6384] usb 6-1: selecting invalid altsetting 0
[  244.126425][ T6384] usb 6-1: selecting invalid altsetting 0
[  244.132219][ T6384] usbtest: probe of 6-1:220.1 failed with error -22
[  244.166225][ T4273] JFS: metapage_get_blocks failed
[  244.171577][ T4273] JFS: metapage_get_blocks failed
[  244.179086][ T8965] JFS: metapage_get_blocks failed
[  244.205098][  T276] blkno = 50030, nblocks = 1
[  244.209736][  T276] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  244.209736][  T276] 
[  244.212846][ T6384] usb 6-1: USB disconnect, device number 12
[  244.284742][  T276] ERROR: (device loop1): remounting filesystem as read-only
[  244.296674][  T276] blkno = 5002c, nblocks = 4
[  244.302348][ T2857] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  244.317508][  T276] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  244.317508][  T276] 
[  244.525373][ T8965] JFS: metapage_get_blocks failed
[  244.531437][ T8965] JFS: metapage_get_blocks failed
[  244.697562][ T2857] usb 3-1: Using ep0 maxpacket: 16
[  244.890751][ T2857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.902887][ T2857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.928859][ T2857] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  244.961536][ T2857] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  244.990065][ T2857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.019409][ T2857] usb 3-1: config 0 descriptor??
[  245.568506][ T2857] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max
[  245.584429][ T2857] microsoft 0003:045E:07DA.0011: unsupported Resolution Multiplier 0
[  245.636516][ T2857] microsoft 0003:045E:07DA.0011: implement() called with n (152) > 32! (kworker/1:2)
[  245.786661][ T2857] microsoft 0003:045E:07DA.0011: unsupported Resolution Multiplier 0
[  245.795645][ T2857] microsoft 0003:045E:07DA.0011: No inputs registered, leaving
[  245.826512][ T2857] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  245.872166][ T2857] microsoft 0003:045E:07DA.0011: no inputs found
[  245.896622][ T2857] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway
[  246.131756][ T4446] usb 3-1: USB disconnect, device number 17
[  246.261634][ T8987] FAT-fs (loop4): Directory bread(block 64) failed
[  246.281301][ T8987] FAT-fs (loop4): Directory bread(block 65) failed
[  246.295268][ T8987] FAT-fs (loop4): Directory bread(block 66) failed
[  246.324564][ T8987] FAT-fs (loop4): Directory bread(block 67) failed
[  246.341786][ T8987] FAT-fs (loop4): Directory bread(block 68) failed
[  246.364192][ T8987] FAT-fs (loop4): Directory bread(block 69) failed
[  246.378353][ T8987] FAT-fs (loop4): Directory bread(block 70) failed
[  246.449442][ T8987] FAT-fs (loop4): Directory bread(block 71) failed
[  246.456429][ T8987] FAT-fs (loop4): Directory bread(block 72) failed
[  246.476151][ T8987] FAT-fs (loop4): Directory bread(block 73) failed
[  246.496748][ T9058] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.504925][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.712512][ T4433] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  246.777676][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'.
[  247.261306][ T4433] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  247.283338][ T4433] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  247.320804][ T4433] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  247.336886][ T4433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.393568][ T9056] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  247.459359][ T6384] Bluetooth: hci0: command 0x0406 tx timeout
[  247.937995][   T27] INFO: task udevd:4176 blocked for more than 143 seconds.
[  247.945351][  T150] block nbd0: Possible stuck request ffff888020f28000: control (read@0,1024B). Runtime 150 seconds
[  247.956145][  T150] block nbd0: Possible stuck request ffff888020f28200: control (read@1024,1024B). Runtime 150 seconds
[  247.967913][  T150] block nbd0: Possible stuck request ffff888020f28400: control (read@2048,1024B). Runtime 150 seconds
[  247.978990][  T150] block nbd0: Possible stuck request ffff888020f28600: control (read@3072,512B). Runtime 150 seconds
[  248.010172][   T27]       Not tainted syzkaller #0
[  248.023823][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  248.100857][   T27] task:udevd           state:D stack:25056 pid: 4176 ppid:  3561 flags:0x00004002
[  248.129757][   T27] Call Trace:
[  248.133103][   T27]  <TASK>
[  248.156957][   T27]  __schedule+0x11bb/0x4390
[  248.161544][   T27]  ? release_firmware_map_entry+0x190/0x190
[  248.205517][   T27]  ? preempt_schedule+0xa7/0xb0
[  248.226422][   T27]  ? release_firmware_map_entry+0x190/0x190
[  248.254288][   T27]  ? preempt_schedule+0xa7/0xb0
[  248.270159][ T4437] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  248.284153][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  248.311628][   T27]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  248.336742][   T27]  ? lock_chain_count+0x20/0x20
[  248.349705][   T27]  schedule+0x11b/0x1e0
[  248.353999][   T27]  io_schedule+0x7c/0xd0
[  248.384446][   T27]  wait_on_page_bit_common+0x815/0xe00
[  248.398919][   T27]  ? wait_on_page_bit+0x50/0x50
[  248.415646][   T27]  ? blkdev_fallocate+0x4d0/0x4d0
[  248.427697][   T27]  ? rcu_lock_release+0x20/0x20
[  248.432691][   T27]  ? add_to_page_cache_lru+0x2a8/0x4a0
[  248.446461][   T27]  do_read_cache_page+0xb05/0x1030
[  248.465650][   T27]  read_part_sector+0xd4/0x4f0
[  248.486279][   T27]  ? string+0x26d/0x2b0
[  248.498727][   T27]  adfspart_check_ICS+0xbf/0xe00
[  248.519662][   T27]  ? vsnprintf+0x1905/0x1a00
[  248.524489][   T27]  ? adfspart_check_ADFS+0x830/0x830
[  248.537825][   T27]  ? snprintf+0xd7/0x120
[  248.549278][   T27]  ? vscnprintf+0x80/0x80
[  248.571732][ T4433] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  248.573853][   T27]  bdev_disk_changed+0x917/0x16b0
[  248.617299][ T4433] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input15
[  248.619167][   T27]  ? blkdev_get_by_dev+0x157/0xa60
[  248.651647][   T27]  ? blk_drop_partitions+0x1a0/0x1a0
[  248.670459][   T27]  ? _atomic_dec_and_lock+0x8f/0x110
[  248.702417][ T4433] usb 6-1: USB disconnect, device number 13
[  248.709833][    C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  248.720152][   T27]  blkdev_get_whole+0x2f9/0x390
[  248.725270][   T27]  blkdev_get_by_dev+0x2d0/0xa60
[  248.730431][   T27]  blkdev_open+0x12d/0x2c0
[  248.734927][   T27]  ? block_ioctl+0xf0/0xf0
[  248.749822][ T4437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.766974][ T4437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.803500][ T4437] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  248.809846][   T27]  do_dentry_open+0x7ff/0xf80
[  248.825186][ T4437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.827635][   T27]  path_openat+0x2682/0x2f30
[  248.858200][ T4437] usb 2-1: config 0 descriptor??
[  248.864290][   T27]  ? __kasan_slab_alloc+0xb3/0xd0
[  248.869564][   T27]  ? __kasan_slab_alloc+0x9c/0xd0
[  248.892588][   T27]  ? slab_post_alloc_hook+0x4c/0x380
[  248.897995][   T27]  ? verify_lock_unused+0x140/0x140
[  248.925568][   T27]  ? __x64_sys_openat+0x135/0x160
[  248.944005][   T27]  ? do_filp_open+0x3e0/0x3e0
[  248.948817][   T27]  do_filp_open+0x1b3/0x3e0
[  248.953366][   T27]  ? vfs_tmpfile+0x300/0x300
[  248.971376][   T27]  ? _raw_spin_unlock+0x24/0x40
[  248.976342][   T27]  ? alloc_fd+0x598/0x630
[  248.992935][   T27]  do_sys_openat2+0x142/0x4a0
[  249.020533][   T27]  ? __lock_acquire+0x7c60/0x7c60
[  249.025700][   T27]  ? do_sys_open+0xe0/0xe0
[  249.037092][   T27]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  249.043149][   T27]  ? lock_chain_count+0x20/0x20
[  249.062401][   T27]  ? vtime_user_exit+0x2dc/0x400
[  249.067470][   T27]  __x64_sys_openat+0x135/0x160
[  249.109123][   T27]  do_syscall_64+0x4c/0xa0
[  249.113614][   T27]  ? clear_bhb_loop+0x30/0x80
[  249.141749][   T27]  ? clear_bhb_loop+0x30/0x80
[  249.159219][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  249.190615][   T27] RIP: 0033:0x7fded5e82407
[  249.195137][   T27] RSP: 002b:00007ffee5858450 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  249.217370][   T27] RAX: ffffffffffffffda RBX: 00007fded5d94880 RCX: 00007fded5e82407
[  249.245279][   T27] RDX: 00000000000a0800 RSI: 0000561f0d06b930 RDI: ffffffffffffff9c
[  249.253323][   T27] RBP: 0000561f0d057910 R08: 0000000000000000 R09: 0000000000000000
[  249.269433][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561f0d07ee70
[  249.294617][   T27] R13: 0000561f0d06f410 R14: 0000000000000000 R15: 0000561f0d07ee70
[  249.319622][   T27]  </TASK>
[  249.322796][   T27] 
[  249.322796][   T27] Showing all locks held in the system:
[  249.345491][   T27] 1 lock held by khungtaskd/27:
[  249.350415][   T27]  #0: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  249.399556][   T27] 1 lock held by udevd/3561:
[  249.404195][   T27] 2 locks held by getty/3946:
[  249.431953][   T27]  #0: ffff88807f058098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  249.467773][   T27]  #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30
[  249.489351][   T27] 3 locks held by syz-executor/4172:
[  249.494688][   T27] 1 lock held by udevd/4176:
[  249.506697][   T27]  #0: ffff888020e2c518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60
[  249.559705][   T27] 4 locks held by udevd/4328:
[  249.564436][   T27]  #0: ffff88807dbc68b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50
[  249.581750][ T4437] usb 2-1: language id specifier not provided by device, defaulting to English
[  249.617515][   T27]  #1: ffff888061d46888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0
[  249.635162][   T27]  #2: ffff888061bffa00 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0
[  249.679096][   T27]  #3: ffff888060b7f1a8 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330
[  249.688257][   T27] 1 lock held by udevd/4329:
[  249.692870][   T27]  #0: ffff888020df4518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60
[  249.720209][   T27] 4 locks held by kworker/0:22/4433:
[  249.725606][   T27] 6 locks held by kworker/0:26/4437:
[  249.757676][   T27]  #0: ffff88801b7ead38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x760/0x1000
[  249.777054][   T27]  #1: ffffc9000495fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000
[  249.807821][   T27]  #2: ffff8880238d4220 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x5560
[  249.830261][   T27]  #3: ffff888062144220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  249.839257][ T4437] uclogic 0003:256C:006D.0012: failed retrieving Huion firmware version: -71
[  249.850708][ T4437] uclogic 0003:256C:006D.0012: failed probing parameters: -71
[  249.861152][   T27]  #4: ffff888060b7f1a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  249.872190][ T4437] uclogic: probe of 0003:256C:006D.0012 failed with error -71
[  249.884633][   T27]  #5: ffff88807d705ab0 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460
[  249.916495][   T27] 
[  249.918982][   T27] =============================================
[  249.918982][   T27] 
[  249.949851][   T27] NMI backtrace for cpu 1
[  249.954230][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  249.961455][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  249.964192][ T4437] usb 2-1: USB disconnect, device number 12
[  249.971530][   T27] Call Trace:
[  249.971544][   T27]  <TASK>
[  249.971553][   T27]  dump_stack_lvl+0x168/0x230
[  249.971587][   T27]  ? show_regs_print_info+0x20/0x20
[  249.971611][   T27]  ? load_image+0x3b0/0x3b0
[  249.998168][   T27]  ? tick_nohz_tick_stopped+0x7b/0xb0
[  250.003583][   T27]  ? nmi_cpu_backtrace+0x1b6/0x3d0
[  250.008749][   T27]  nmi_cpu_backtrace+0x397/0x3d0
[  250.013728][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  250.019910][   T27]  ? _printk+0xcc/0x110
[  250.024108][   T27]  ? load_image+0x3b0/0x3b0
[  250.028644][   T27]  ? load_image+0x3b0/0x3b0
[  250.033192][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  250.039287][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  250.045296][   T27]  watchdog+0xe0f/0xe50
[  250.049491][   T27]  kthread+0x436/0x520
[  250.053595][   T27]  ? hungtask_pm_notify+0x40/0x40
[  250.058643][   T27]  ? kthread_blkcg+0xd0/0xd0
[  250.063263][   T27]  ret_from_fork+0x1f/0x30
[  250.067731][   T27]  </TASK>
[  250.070882][   T27] Sending NMI from CPU 1 to CPUs 0:
[  250.076172][    C0] NMI backtrace for cpu 0
[  250.076184][    C0] CPU: 0 PID: 9 Comm: kworker/u4:0 Not tainted syzkaller #0
[  250.076201][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  250.076212][    C0] Workqueue: bat_events batadv_nc_worker
[  250.076232][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x32/0x60
[  250.076252][    C0] Code: a4 a3 8a 7e 65 8b 15 a5 a3 8a 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 34 16 00 00 00 74 2c 8b 91 10 16 00 00 <83> fa 02 75 21 48 8b 91 18 16 00 00 48 8b 32 48 8d 7e 01 8b 89 14
[  250.076267][    C0] RSP: 0018:ffffc90000ce7bd0 EFLAGS: 00000246
[  250.076281][    C0] RAX: ffffffff897f17ea RBX: dffffc0000000000 RCX: ffff88813fed0000
[  250.076294][    C0] RDX: 0000000000000000 RSI: ffffffff8a59e560 RDI: ffff88813fed0000
[  250.076306][    C0] RBP: ffff88807f128cc0 R08: dffffc0000000000 R09: fffffbfff1ff7c19
[  250.076319][    C0] R10: fffffbfff1ff7c19 R11: 1ffffffff1ff7c18 R12: 000000000000024f
[  250.076332][    C0] R13: fffffffffffffe38 R14: ffff888079734c80 R15: ffff88807f128cd0
[  250.076345][    C0] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  250.076360][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  250.076372][    C0] CR2: 0000001b34315ff8 CR3: 0000000076c8e000 CR4: 00000000003506f0
[  250.076387][    C0] Call Trace:
[  250.076392][    C0]  <TASK>
[  250.076397][    C0]  rcu_lock_release+0xa/0x20
[  250.076413][    C0]  batadv_nc_worker+0x25b/0x5c0
[  250.076434][    C0]  process_one_work+0x863/0x1000
[  250.076459][    C0]  ? worker_detach_from_pool+0x240/0x240
[  250.076477][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  250.076498][    C0]  ? _raw_spin_lock_irq+0xab/0xe0
[  250.076514][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  250.076532][    C0]  ? wq_worker_running+0x97/0x170
[  250.076549][    C0]  worker_thread+0xaa8/0x12a0
[  250.076594][    C0]  kthread+0x436/0x520
[  250.076608][    C0]  ? rcu_lock_release+0x20/0x20
[  250.076624][    C0]  ? kthread_blkcg+0xd0/0xd0
[  250.076639][    C0]  ret_from_fork+0x1f/0x30
[  250.076665][    C0]  </TASK>
[  250.591277][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  250.598185][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  250.605410][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  250.615644][   T27] Call Trace:
[  250.618949][   T27]  <TASK>
[  250.621921][   T27]  dump_stack_lvl+0x168/0x230
[  250.626653][   T27]  ? show_regs_print_info+0x20/0x20
[  250.631885][   T27]  ? load_image+0x3b0/0x3b0
[  250.636515][   T27]  panic+0x2c9/0x7f0
[  250.640442][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  250.646108][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  250.650640][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  250.656213][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  250.662399][   T27]  watchdog+0xe4e/0xe50
[  250.666594][   T27]  kthread+0x436/0x520
[  250.670704][   T27]  ? hungtask_pm_notify+0x40/0x40
[  250.675755][   T27]  ? kthread_blkcg+0xd0/0xd0
[  250.680375][   T27]  ret_from_fork+0x1f/0x30
[  250.684839][   T27]  </TASK>
[  250.688175][   T27] Kernel Offset: disabled
[  250.692538][   T27] Rebooting in 86400 seconds..